Free 365 Days Exam Updates 350-401 dumps with test Engine Practice
Updated Verified 350-401 dumps Q&As - 100% Pass Guaranteed
NEW QUESTION 332
Which two methods are used by an AP that is typing to discover a wireless LAN controller? (Choose two.)
- A. broadcasting on the local subnet
- B. querying other APs
- C. DHCP Option 43
- D. DNS lookup cisco-DNA-PRIMARY.localdomain
- E. Cisco Discovery Protocol neighbour
Answer: A,C
NEW QUESTION 333
In an SD-Access solution what is the role of a fabric edge node?
- A. to connect the fusion router to the SD-Access fabric
- B. to connect wired endpoint to the SD-Access fabric
- C. to advertise fabric IP address space to external network
- D. to connect external Layer 3- network to the SD-Access fabric
Answer: B
Explanation:
Explanation
+ Fabric edge node: This fabric device (for example, access or distribution layer device) connects wired endpoints to the SDA fabric.
NEW QUESTION 334
Drag and drop the QoS mechanisms from the left onto their descriptions on the right
Answer:
Explanation:
NEW QUESTION 335
What is the difference between CEF and process switching?
- A. CEF processes packets that are too complex for process switching to manage.
- B. Process switching is faster than CEF.
- C. CEF is more CPU-intensive than process switching.
- D. CEF uses the FIB and the adjacency table to make forwarding decisions, whereas process switching punts each packet.
Answer: D
Explanation:
-Punt || is often used to describe the action of moving a packet from the fast path (CEF) to the route processor for handling.
Cisco Express Forwarding (CEF) provides the ability to switch packets through a device in a very quick and efficient way while also keeping the load on the router's processor low. CEF is made up of two different main components: the Forwarding Information Base (FIB) and the Adjacency Table.
Process switching is the slowest switching methods (compared to fast switching and Cisco Express Forwarding) because it must find a destination in the routing table. Process switching must also construct a new Layer 2 frame header for every packet. With process switching, when a packet comes in, the scheduler calls a process that examines the routing table, determines which interface the packet should be switched to and then switches the packet. The problem is, this happens for the every packet.
NEW QUESTION 336
Which method displays text directly into the active console with a synchronous EEM applet policy?
- A. event manager applet boom
event syslog pattern 'UP'
action 1.0 gets 'logging directly to console' - B. event manager applet boom
event syslog pattern 'UP'
action 1.0 string 'logging directly to console' - C. event manager applet boom
event syslog pattern 'UP'
action 1.0 syslog priority direct msg 'log directly to console' - D. event manager applet boom
event syslog pattern 'UP'
action 1.0 puts 'logging directly to console'
Answer: C
Explanation:
To enable the action of printing data directly to the local tty when an Embedded Event Manager
(EEM) applet is triggered, use the action puts command in applet configuration mode.
The following example shows how to print data directly to the local tty:
The action puts command applies to synchronous events. The output of this command for a
synchronous applet is directly displayed to the tty, bypassing the syslog.
Reference:
a1.html
NEW QUESTION 337
Which controller is the single plane of management for Cisco SD-WAN?
- A. vBond
- B. vEdge
- C. vSmart
- D. vManage
Answer: D
Explanation:
Explanation/Reference: https://www.cisco.com/c/dam/en/us/td/docs/solutions/CVD/SDWAN/CVD-SD-WAN-Design-
2018OCT.pdf
NEW QUESTION 338
Refer to the exhibit.
A port channel is configured between SW2 and SW3. SW2 is not running a Cisco operating system. When all physical connections are mode, the port channel does not establish. Based on the configuration excerpt of SW3, what is the cause of the problem?
- A. The port-channel interface lead balance should be set to src-mac
- B. The port-channel should be set to auto.
- C. The port-channel trunk is not allowing the native VLAN.
- D. The port channel on SW2 is using an incompatible protocol.
Answer: D
NEW QUESTION 339
What are two common sources of interference for WI-FI networks? (Choose two.)
- A. LED lights
- B. radar
- C. rogue AP
- D. conventional oven
- E. fire alarm
Answer: B,C
NEW QUESTION 340
Refer to exhibit.
What are two reasons for IP SLA tracking failure? (Choose two )
- A. The source-interface is configured incorrectly
- B. A route back to the R1 LAN network is missing in R2
- C. The threshold value is wrong
- D. The destination must be 172.30.30.2 for icmp-echo
- E. The default route has wrong next hop IP address
Answer: B,C
Explanation:
Explanation
Timeout (in milliseconds) sets the amount of time an IP SLAs operation waits for a response from its request packet. In other words, the timeout specifies how long the router should wait for a response to its ping before it is considered failed.Threshold (in milliseconds too) sets the upper threshold value for calculating network monitoring statistics created by an IP SLAs operation. Threshold is used to activate a response to IP SLA violation, e.g. send SNMP trap or start secondary SLA operation. In other words, the threshold value is only used to indicate over threshold events, which do not affect reachability but may be used to evaluate the proper settings for the timeout command.
For reachability tracking, if the return code is OK or OverThreshold, reachability is up; if not OK, reachability is down.
This
tutorial can help you revise IP SLA tracking topic:
http://www.firewall.cx/cisco-technical-knowledgebase/cisco-routers/813-cisco-router-ipsla-basic.html and
http://www.ciscozine.com/using-ip-sla-to-change-routing/
Note: Maybe some of us will wonder why there are these two commands:
R1(config)#ip route 0.0.0.0 0.0.0.0 172.20.20.2 track 10 R1(config)#no ip route 0.0.0.0 0.0.0.0 172.20.20.2 In fact the two commands:
ip route 0.0.0.0 0.0.0.0 172.20.20.2 track 10 ip route 0.0.0.0 0.0.0.0 172.20.20.2 are different. These two static routes can co-exist in the routing table. Therefore if the tracking goes down, the first command will be removed but the second one still exists and the backup path is not preferred. So we have to remove the second one.
NEW QUESTION 341
Which statement about VXLAN is true?
- A. VXLAN uses the Spanning Tree Protocol for loop prevention.
- B. VXLAN extends the Layer 2 Segment ID field to 24-bits. which allows up to 4094 unique Layer 2 segments over the same network.
- C. VXLAN uses TCP 35 the transport protocol over the physical data cento network
- D. VXLAN encapsulates a Layer 2 frame in an IP-UDP header, which allows Layer 2 adjacency across router boundaries.
Answer: D
Explanation:
Explanation
802.1Q VLAN identifier space is only 12 bits.
The VXLAN identifier space is 24 bits.
This doubling in size allows the VXLAN ID space to support 16 million Layer 2 segments -> Answer 'VXLAN extends the Layer 2 Segment ID field to 24-bits, which allows up to 4094 unique Layer 2 segments over the same network' is not correct.
VXLAN is a MAC-in-UDP encapsulation method that is used in order to extend a Layer 2 or Layer 3 overlay network over a Layer 3 infrastructure that already exists.
Reference: https://www.cisco.com/c/en/us/support/docs/lan-switching/vlan/212682-virtualextensible-lan-and-ethernet-virt.html
NEW QUESTION 342
What is a requirement for an Ansible-managed node?
- A. It must have an Ansible Tower installed.
- B. It must have an SSH server running
- C. It must support ad hoc commands
- D. It must be a Linux server or a Cisco device
Answer: D
Explanation:
Explanation
Ansible can communicate with modern Cisco devices via SSH or HTTPS so it does not require an SSH server -> Answer 'It must have an SSH server running' is not correct.
An Ansible ad-hoc command uses the /usr/bin/ansible command-line tool to automate a single task on one or more managed nodes. Ad-hoc commands are quick and easy, but they are not reusable -> It is not a requirement either -> Answer 'It must support ad hoc commands' is not correct.
Ansible Tower is a web-based solution that makes Ansible even more easy to use for IT teams of all kinds. But it is not a requirement to run Ansible -> Answer 'It must have an Ansible Tower installed' is not correct.
Therefore only answer 'It must be a Linux server or a Cisco device' is the best choice left. An Ansible controller (the main component that manages the nodes), is supported on multiple flavors of Linux, but it cannot be installed on Windows.
NEW QUESTION 343
Which two security features are available when implementing NTP? (Choose two )
- A. dock offset authentication
- B. symmetric server passwords
- C. access list-based restriction scheme
- D. broadcast association mode
- E. encrypted authentication mechanism
Answer: C,E
Explanation:
The time kept on a machine is a critical resource and it is strongly recommend that you use the security features of NTP to avoid the accidental or malicious setting of incorrect time. The two security features available are an access list-based restriction scheme and an encrypted authentication mechanism.
Reference:
https://www.cisco.com/c/en/us/support/docs/availability/high-availability/19643-ntpm.html
NEW QUESTION 344
Drag and drop the characteristics from the left onto the correct infrastructure deployment types on the right.
Answer:
Explanation:
Explanation
On premise: customizable,specific requirements,resources
Cloud: scale, built-in automated backup, strong stable internet
NEW QUESTION 345
Drag and drop the DHCP messages that are exchanged between a client and an AP into the order they are exchanged on the right.
Answer:
Explanation:
NEW QUESTION 346
Refer to the exhibit.
Which configuration allows Customer2 hosts to access the FTP server of Customer1 that has the IP address of
192.168.1.200?
- A. ip route vrf Customer1 172.16.1.0 255.255.255.0 172.16.1.1 global
ip route vrf Customer 192.168.1.200 255.255.255.255 192.168.1.1 global
ip route 192.168.1.0 255.255.255.0 Vlan10
ip route 172.16.1.0 255.255.255.0 Vlan20 - B. ip route vrf Customer1 172.16.1.0 255.255.255.0 172.16.1.1 Customer2 ip route vrf Customer 192.168.1.200 255.255.255.255 192.168.1.1 Customer1
- C. ip route vrf Customer1 172.16.1.1 255.255.255.255 172.16.1.1 global
ip route vrf Customer 192.168.1.200 255.255.255.0 192.168.1.1 global
ip route 192.168.1.0 255.255.255.0 Vlan10
ip route 172.16.1.0 255.255.255.0 Vlan20 - D. ip route vrf Customer1 172.16.1.0 255.255.255.0 172.16.1.1 Customer1 ip route vrf Customer 192.168.1.200 255.255.255.255 192.168.1.1 Customer2
Answer: A
Explanation:
Explanation
https://www.cisco.com/c/en/us/support/docs/ip/ip-routing/200158-Configure-Route-Leaking-between-Global-a.h
Static routes directly between VRFs are not supported so we cannot configure a direct static route between two VRFs.
The command "ip route vrf Customer1 172.16.1.0 255.255.255.0 172.16.1.1 global" means in VRF Customer1, in order to reach destination 172.16.1.0/24 then we uses the next hop IP address 172.16.1.1 in the global routing table. And the command "ip route 192.168.1.0 255.255.255.0 Vlan10" tells the router "to reach 192.168.1.0/24, send to Vlan 10".
NEW QUESTION 347
Which protocol does REST API rely on to secure the communication channel?
- A. SSH
- B. TCP
- C. HTTPS
- D. HTTP
Answer: C
Explanation:
The REST API accepts and returns HTTP (not enabled by default) or HTTPS messages that contain
JavaScript Object Notation (JSON) or Extensible Markup Language (XML) documents. You can use
any programming language to generate the messages and the JSON or XML documents that
contain the API methods or Managed Object (MO) descriptions.
Reference:
x/rest_cfg/2_1_x/b_Cisco_APIC_REST_API_Configuration_Guide/b_Cisco_APIC_REST_API_Config
uration_Guide_chapter_01.html
NEW QUESTION 348
Refer to the exhibit.
What step resolves the authentication issue?
- A. Change the port to 12446
- B. Restart the vsmart host
- C. Target 192.168.100.82 in the URI
- D. Use basic authentication
Answer: A
NEW QUESTION 349
......
Provide Valid Dumps To Help You Prepare For Implementing Cisco Enterprise Network Core Technologies (350-401 ENCOR) Exam: https://www.dumpsfree.com/350-401-valid-exam.html
350-401 Dumps Questions [2023] Pass for Exam: https://drive.google.com/open?id=1I2arirJ6CdrlzIS4gXoaw8LpZW-zoeCT