[2023] Pass 350-401 Exam - Real Questions and Answers
350-401 Exam Questions Get Updated [2023] with Correct Answers
Exam Introduction
The Cisco 350-401 Exam is an entry-level qualification for professionals who wish to pursue careers in industrial networking. It is targeted at individuals who work in industrial environments handling industrial devices like units, programmable logic controllers (PLCs), sensors, and substation equipment. Volume, high availability, energy conservation, and safety are among the key security priorities in industrial environments. To meet these requirements, organizations are embracing the Internet Protocol (IP) telephony field.
The exam measures the knowledge and skills of the candidate on a wide range of key topics, including IP Telephony fundamentals, IP Telephony security, IP Video Fundamentals, and Delivery Systems, Unified Communications technologies, Collaboration Technologies, and Infrastructure Groupware, Security Fundamentals and Fundamentals. Marks are awarded for passing each question and overall the total marks are the highest of those given on any of the required Cisco exams. Interactive exam questions include select all that apply, drag and drop, matching questions, and simulations.
NEW QUESTION # 35
Refer to the exhibit.
Only administrators from the subnet 10.10.10.0/24 are permitted to have access to the router. A secure protocol must be used for the remote access and management of the router instead of clear-text protocols.
Which configuration achieves this goal?
- A. Option B
- B. Option C
- C. Option D
- D. Option A
Answer: A
NEW QUESTION # 36
An engineer has deployed a single Cisco 5520 WLC with a management IP address of 172.16.50.5/24. The engineer must register 50 new Cisco AIR-CAP2802I-E-K9 access points to the WLC using DHCP option 43.
The access points are connected to a switch in VLAN 100 that uses the 172.16.100.0/24 subnet. The engineer has configured the DHCP scope on the switch as follows:
The access points are failing to join the wireless LAN controller. Which action resolves the issue?
- A. configure dns-server 172.16.100.1
- B. configure option 43 Hex F104.AC10.3205
- C. configure option 43 Hex F104.CA10.3205
- D. configure dns-server 172.16.50.5
Answer: B
Explanation:
Explanation
172.16.50.5 in hex is
We will have the answer from this paragraph:
"TLV values for the Option 43 suboption: Type + Length + Value. Type is always the suboption code 0xf1.
Length is the number of controller management IP addresses times 4 in hex. Value is the IP address of the controller listed sequentially in hex. For example, suppose there are two controllers with management interface IP addresses, 192.168.10.5 and 192.168.10.20. The type is 0xf1. The length is 2 * 4 = 8 = 0x08. The IP addresses translates to c0a80a05 (192.168.10.5) and c0a80a14 (192.168.10.20). When the string is assembled, it yields f108c0a80a05c0a80a14. The Cisco IOS command that is added to the DHCP scope is option 43 hex f108c0a80a05c0a80a14." Reference:
https://www.cisco.com/c/en/us/support/docs/wireless-mobility/wireless-lan-wlan/97066-dhcp-option-43-00.html Therefore in this question the option 43 in hex should be "F104.AC10.3205 (the management IP address of
172.16.50.5 in hex is AC.10.32.05).
NEW QUESTION # 37
What NTP Stratum level is a server that is connected directly to an authoritative time source?
- A. Stratum 15
- B. Stratum 14
- C. Stratum 0
- D. Stratum 1
Answer: D
Explanation:
Explanation
The stratum levels define the distance from the reference clock. A
reference clock is a stratum 0 device that is assumed to be accurate and has little or no delay associated with it. Stratum 0 servers cannot be used on the network but they are directly connected to computers which then operate as stratum-1 servers. A stratum 1 time server acts as a primary network time standard.
A stratum 2 server is connected to the stratum 1 server; then a stratum 3 server is connected to the stratum 2 server and so on. A stratum 2 server gets its time via NTP packet requests from a stratum 1 server. A stratum 3 server gets its time via NTP packet requests from a stratum-2 server... A stratum server may also peer with other stratum servers at the same level to provide more stable and robust time for all devices in the peer group (for example a stratum 2 server can peer with other stratum 2 servers).
NTP uses the concept of a stratum to describe how many NTP hops away a
machine is from an authoritative time source. A stratum 1 time server
typically has an authoritative time source (such as a radio or atomic clock, or a Global Positioning System (GPS) time source) directly attached, a stratum 2 time server receives its time via NTP from a stratum 1 time server, and so on.
nce: https://www.cisco.com/c/en/us/td/docs/routers/asr920/con
figuration/guide/bsm/16-6-1/b-bsm-xe-16-6-1-asr920/bsm-timecalendar-
set.html
NEW QUESTION # 38
A network engineer configures BGP between R1 and R2. Both routers use BGP peer group CORP and are set up to use MD5 authentication. This message is logged to the console of router R1:
Which two configuration allow peering session to from between R1 and R2? Choose two.) A)
B)
C)
D)
E)
- A. Option E
- B. Option B
- C. Option D
- D. Option C
- E. Option A
Answer: C,D
NEW QUESTION # 39
Refer to the exhibit.
Which IP address becomes the active next hop for 192.168.102 0/24 when 192.168.101.2 fails?
- A. 192.168.101.14
- B. 192.168.101.10
- C. 192.168.101.18
- D. 192.168.101.6
Answer: C
Explanation:
Explanation
The '>' shown in the output above indicates that the path with a next hop of 192.168.101.2 is the current best path.
Path Selection Attributes: Weight > Local Preference > Originate > AS Path > Origin > MED > External > IGP Cost > eBGP Peering > Router ID BGP prefers the path with highest weight but the weights here are all 0 (which indicate all routes that are not originated by the local router) so we need to check the Local Preference. Answer
'192.168.101.18' path without LOCAL_PREF (LocPrf column) means it has the default value of 100.
Therefore we can find the two next best paths with the next hop of 192.168.101.18 and
192.168.101.10.
We have to move to the next path selection attribute: Originate. BGP prefers the path that the local router originated (which is indicated with the "next hop 0.0.0.0"). But none of the two best paths is self-originated.
The AS Path of the next hop 192.168.101.18 is shorter than the AS Path of the next hop
192.168.101.10 then the next hop 192.168.101.18 will be chosen as the next best path.
Question 2
NEW QUESTION # 40
Which statement about a Cisco APIC controller versus a more traditional SDN controller is true?
- A. APIC uses a policy agent to translate policies into instructions
- B. APIC uses an imperative model
- C. APIC does support a Southbound REST API
- D. APIC supports OpFlex as a Northbound protocol
Answer: A
NEW QUESTION # 41
An engineer reviews a router's logs and discovers the following entry. What is the event's logging severity level?
- A. error
- B. warning
- C. notification
- D. informational
Answer: A
Explanation:
Syslog levels are listed below:
Number -3 in -%LINK-3-UPDOWN is the severity level of this message so in this case it is -errors.
NEW QUESTION # 42
Refer to the exhibit.
A network architect has partially configured static NAT. which commands should be asked to complete the configuration?
- A. R1(config)#interface GigabitEthernet0/0 R1(config)#ip pat inside
R1(config)#interface GigabitEthernet0/1 R1(config)#ip pat outside - B. R1(config)#interface GigabitEthernet0/0 R1(config)#ip pat outside
R1(config)#interface GigabitEthernet0/1 R1(config)#ip pat inside - C. R1(config)#interface GigabitEthernet0/0 R1(config)#ip nat inside
R1(config)#interface GigabitEthernet0/1 R1(config)#ip nat outside - D. R1(config)#interface GigabitEthernet0/0 R1(config)#ip nat outside
R1(config)#interface GigabitEthernet0/1 R1(config)#ip nat inside
Answer: D
NEW QUESTION # 43
What is the result of applying this access control list?
- A. TCP traffic with the DF bit set is allowed
- B. TCP traffic with the URG bit set is allowed
- C. TCP traffic with the ACK bit set is allowed
- D. TCP traffic with the SYN bit set is allowed
Answer: C
NEW QUESTION # 44 
Refer to the exhibit Drag and drop the snippets into the RESTCONF request to form the request that returns this response Not all options are used
Answer:
Explanation:
Explanation
NEW QUESTION # 45
Drag and drop the QoS mechanisms from the left onto their descriptions on the right
Answer:
Explanation:
Explanation
NEW QUESTION # 46
Drag and drop the wireless elements on the left to their definitions on the right.
Answer:
Explanation:
NEW QUESTION # 47
Which function does a fabric edge node perform in an SD-Access deployment?
- A. Connects the SD-Access fabric to another fabric or external Layer 3 networks
- B. Provides reachability border nodes in the fabric underlay
- C. Connects endpoints to the fabric and forwards their traffic
- D. Encapsulates end-user data traffic into LISP.
Answer: C
Explanation:
There are five basic device roles in the fabric overlay:
+ Control plane node: This node contains the settings, protocols, and mapping tables to provide the endpoint-to-location (EID-to-RLOC) mapping system for the fabric overlay.
+ Fabric border node: This fabric device (for example, core layer device) connects external Layer
3 networks to the SDA fabric.
+ Fabric edge node: This fabric device (for example, access or distribution layer device) connects wired endpoints to the SDA fabric.
+ Fabric WLAN controller (WLC): This fabric device connects APs and wireless endpoints to the SDA fabric.
+ Intermediate nodes: These are intermediate routers or extended switches that do not provide any sort of SD-Access fabric role other than underlay services.
NEW QUESTION # 48 
Refer to the exhibit. Both controllers are in the same mobility group. Which result occurs when client 1 roams between APs that are registered to different controllers in the same WLAN?
- A. CAPWAP tunnel is created between controller A and controller B.
- B. Client 1 users an EoIP tunnel to contact controller A.
- C. Client 1 contact controller B by using an EoIP tunnel.
- D. The client database entry moves from controller A to controller B.
Answer: D
Explanation:
Explanation
This is called Inter Controller-L2 Roaming. Inter-Controller (normally layer 2) roaming occurs when a client roam between two APs registered to two different controllers, where each controller has an interface in the client subnet. In this instance, controllers exchange mobility control messages (over UDP port 16666) and the client database entry is moved from the original controller to the new controller.
NEW QUESTION # 49
Refer to the exhibit.
An engineer must add the SNMP interface table to the NetFlow protocol flow records. Where should the SNMP table option be added?
- A. under the flow record
- B. under the interface
- C. under the flow monitor
- D. under the flow exporter
Answer: D
Explanation:
option interface-table
This command causes the periodic sending of an options table, which will allow the collector to map the interface SNMP indexes provided in the flow records to interface names. The optional timeout can alter the frequency at which the reports are sent.
Router(config)# flow exporter FLOW-EXPORTER-1
Router(config-flow-exporter)# option interface-table
https://www.cisco.com/c/en/us/td/docs/ios/fnetflow/command/reference/fnf_book/fnf_02.html
NEW QUESTION # 50
Drag and drop the snippets onto the blanks within the code to construct a script that configures BGP according to the topology. Not all options are used, and some options may be used twice.
Answer:
Explanation:
NEW QUESTION # 51
Which component handles the orchestration plane of the Cisco SD-WAN?
- A. vSmart
- B. WAN Edge
- C. vBond
- D. vManage
Answer: C
Explanation:
Explanation/Reference: https://www.ciscolive.com/c/dam/r/ciscolive/emea/docs/2018/pdf/BRKCRS-2112.pdf page 8.
NEW QUESTION # 52
Refer to the exhibit.
A network engineer configures OSPF and reviews the router configuration. Which interface or interface or interface are able to establish OSPF adjacency?
- A. only GigabitEthernet0/1
- B. GigabitEthemet0/1 and GigabitEthernet0/1.40
- C. only GigabttEthernet0/0
- D. Gigabit Ethernet0/0 and GigabitEthemet0/1
Answer: A
NEW QUESTION # 53
Drag and drop the snippets onto the blanks within the code to construct a script that adds a prefix list to a route map and sets the local preference. Not all options are used
Answer:
Explanation:
NEW QUESTION # 54
Drag and drop the characteristics from the left onto the deployment models on the right.
Answer:
Explanation:
Explanation
A picture containing graphical user interface Description automatically generated
NEW QUESTION # 55
Refer to the exhibit.
An engineer must configure HSRP for VLAN 1000 on SW2. The secondary switch must immediately take over the role of active router If the interlink with the primary switch fails. Which command set completes this task?
A)
B)
C)
D)
- A. Option B
- B. Option D
- C. Option C
- D. Option A
Answer: C
NEW QUESTION # 56
When a wired client connects to an edge switch in an SDA fabric, which component decides whether the client has access to the network?
- A. edge node
- B. RADIUS server
- C. control-plane node
- D. Identity Service Engine
Answer: D
NEW QUESTION # 57
Which two security features are available when implementing NTP? (Choose two )
- A. symmetric server passwords
- B. encrypted authentication mechanism
- C. access list-based restriction scheme
- D. dock offset authentication
- E. broadcast association mode
Answer: B,C
Explanation:
Explanation
The time kept on a machine is a critical resource and it is strongly recommend that you use the security features of NTP to avoid the accidental or malicious setting of incorrect time. The two security features available are an access list-based restriction scheme and an encrypted authentication mechanism.
Reference: https://www.cisco.com/c/en/us/support/docs/availability/high-availability/19643-ntpm.html
NEW QUESTION # 58
......
Practice 350-401 Questions With Certification guide Q&A from Training Expert DumpsFree: https://www.dumpsfree.com/350-401-valid-exam.html
Free Cisco 350-401 Test Practice Test Questions Exam Dumps: https://drive.google.com/open?id=1UvthVKAAh2DV21s8_kd0hNTItK3daQM2