[Sep 18, 2021] 350-401 Dumps Full Questions - Exam Study Guide
CCNP Enterprise Free Certification Exam Material from Test4Sure with 260 Questions
NEW QUESTION 47
Which IPv6 migration method relies on dynamic tunnels that use the 2002::/16 reserved address space?
- A. 6to4
- B. 6RD
- C. ISATAP
- D. GRE
Answer: A
Explanation:
6to4 tunnel is a technique which relies on reserved address space 2002::/16 (you must remember this range). These tunnels determine the appropriate destination address by combining the IPv6 prefix with the globally unique destination 6to4 border router's IPv4 address, beginning with the 2002::/16 prefix, in this format:
2002:border-router-IPv4-address::/48
For example, if the border-router-IPv4-address is 64.101.64.1, the tunnel interface will have an IPv6 prefix of 2002:4065:4001:1::/64, where 4065:4001 is the hexadecimal equivalent of
64.101.64.1. This technique allows IPv6 sites to communicate with each other over the IPv4 network without explicit tunnel setup but we have to implement it on all routers on the path.
NEW QUESTION 48
Which three methods does Cisco DNA Centre use to discover devices? (Choose three)
- A. a specified range of IP addresses
- B. ping
- C. LLDP
- D. NETCONF
- E. SNMP
- F. CDP
Answer: A,C,F
Explanation:
Explanation
NEW QUESTION 49
An engineer reviews a router's logs and discovers the following entry. What is the event's logging severity level?
Router# *Jan 01 38:24:04.401: %LINK-3-UPDOWN: Interface GigabitEthernet0/1, changed state to up
- A. notification
- B. informational
- C. error
- D. warning
Answer: C
NEW QUESTION 50
Drag and drop the characteristics from the left onto the correct routing protocol types on the right.
Answer:
Explanation:
Explanation
OSPF: SEGMENT, LINK STATE, TABLES
EIGRP: UNEQUAL PATH, DISTANCE VECTOR, METRIC
NEW QUESTION 51
Under which network conditions is an outbound QoS policy that is applied on a router WAN interface most beneficial?
- A. under interface saturation condition
- B. under all network condition
- C. under network convergence condition
- D. under traffic classification and marking conditions.
Answer: A
NEW QUESTION 52
Refer to the exhibit.
Which configuration establishes EBGP neighborship between these two directly connected neighbors and exchanges the loopback network of the two routers through BGP?
A)
B)
C)
D)
- A. Option A
- B. Option D
- C. Option B
- D. Option C
Answer: A
Explanation:
Explanation
With BGP, we must advertise the correct network and subnet mask in the "network" command (in this case network 10.1.1.0/24 on R1 and network 10.2.2.0/24 on R2). BGP is very strict in the routing advertisements. In other words, BGP only advertises the network which exists exactly in the routing table. In this case, if you put the command "network x.x.0.0 mask 255.255.0.0" or
"network x.0.0.0 mask 255.0.0.0" or "network x.x.x.x mask 255.255.255.255" then BGP will not advertise anything.
It is easy to establish eBGP neighborship via the direct link. But let's see what are required when we want to establish eBGP neighborship via their loopback interfaces. We will need two commands:
+ the command "neighbor 10.1.1.1 ebgp-multihop 2" on R1 and "neighbor 10.2.2.2 ebgpmultihop
2" on R1. This command increases the TTL value to 2 so that BGP updates can reach the BGP neighbor which is two hops away.
+ Answer 'R1 (config) #router bgp 1
R1 (config-router) #neighbor 192.168.10.2 remote-as 2
R1 (config-router) #network 10.1.1.0 mask 255.255.255.0
R2 (config) #router bgp 2
R2 (config-router) #neighbor 192.168.10.1 remote-as 1
R2 (config-router) #network 10.2.2.0 mask 255.255.255.0
Quick Wireless Summary
Cisco Access Points (APs) can operate in one of two modes: autonomous or lightweight
+ Autonomous: self-sufficient and standalone. Used for small wireless networks.
+ Lightweight: A Cisco lightweight AP (LAP) has to join a Wireless LAN Controller (WLC) to function.
LAP and WLC communicate with each other via a logical pair of CAPWAP tunnels.
- Control and Provisioning for Wireless Access Point (CAPWAP) is an IETF standard for control messaging for setup, authentication and operations between APs and WLCs. CAPWAP is similar to LWAPP except the following differences:
+CAPWAP uses Datagram Transport Layer Security (DTLS) for authentication and encryption to protect traffic between APs and controllers. LWAPP uses AES.
+ CAPWAP has a dynamic maximum transmission unit (MTU) discovery mechanism.
+ CAPWAP runs on UDP ports 5246 (control messages) and 5247 (data messages) An LAP operates in one of six different modes:
+ Local mode (default mode): measures noise floor and interference, and scans for intrusion detection (IDS) events every 180 seconds on unused channels
+ FlexConnect, formerly known as Hybrid Remote Edge AP (H-REAP), mode: allows data traffic to be switched locally and not go back to the controller. The FlexConnect AP can perform standalone client authentication and switch VLAN traffic locally even when it's disconnected to the WLC (Local Switched). FlexConnect AP can also tunnel (via CAPWAP) both user wireless data and control traffic to a centralized WLC (Central Switched).
+ Monitor mode: does not handle data traffic between clients and the infrastructure. It acts like a sensor for location-based services (LBS), rogue AP detection, and IDS
+ Rogue detector mode: monitor for rogue APs. It does not handle data at all.
+ Sniffer mode: run as a sniffer and captures and forwards all the packets on a particular channel to a remote machine where you can use protocol analysis tool (Wireshark, Airopeek, etc) to review the packets and diagnose issues. Strictly used for troubleshooting purposes.
+ Bridge mode: bridge together the WLAN and the wired infrastructure together.
Mobility Express is the ability to use an access point (AP) as a controller instead of a real WLAN controller. But this solution is only suitable for small to midsize, or multi-site branch locations where you might not want to invest in a dedicated WLC. A Mobility Express WLC can support up to 100 Aps
NEW QUESTION 53
Refer to the exhibit.
An engineer must ensure that all traffic leaving AS 200 will choose Link 2 as an entry point. Assuming that all BGP neighbor relationships have been formed and that the attributes have not been changed on any of the routers, which configuration accomplish task?
- A. Option A
- B. Option D
- C. Option B
- D. Option C
Answer: A
Explanation:
Explanation
R3 advertises BGP updates to R1 with multiple AS 100 so R3 believes the path to reach AS 200 via R3 is farther than R2 so R3 will choose R2 to forward traffic to AS 200.
NEW QUESTION 54
Refer to the exhibit.
Which type of antenna does the radiation pattern represent?
- A. Yagi
- B. directional patch
- C. omnidirectional
- D. multidirectional
Answer: A
NEW QUESTION 55
Refer to the exhibit.
What does the snippet of code achieve?
- A. It opens an ncclient connection to a Cisco Nexus device and maintains it for the duration of the context.
- B. It creates a temporary connection to a Cisco Nexus device and retrieves a token to be used for API calls.
- C. It creates an SSH connection using the SSH key that is stored, and the password is ignored.
- D. It opens a tunnel and encapsulates the login information, if the host key is correct.
Answer: A
Explanation:
Explanation
ncclient is a Python library that facilitates client-side scripting and application development around the NETCONF protocol.
The above Python snippet uses the ncclient to connect and establish a NETCONF session to a Nexus device (which is also a NETCONF server).
NEW QUESTION 56
Based on this interface configuration, what is the expected state of OSPF adjacency?
- A. FULL/BDR on R1 and FULL/BDR on R2
- B. 2WAY/DROTHER on both routers
- C. Full on both routers
- D. not established
Answer: D
Explanation:
Explanation
On Ethernet interfaces the OSPF hello intervl is 10 second by default so in this case there would be a Hello interval mismatch -> the OSPF adjacency would not be established.
NEW QUESTION 57
Refer to the exhibit.
An engineer configures monitoring on SW1 and enters the show command to verify operation. What does the output confirm?
- A. SPAN session 2 only monitors egress traffic exiting port FastEthernet 0/14.
- B. RSPAN session 1 is incompletely configured for monitoring
- C. SPAN session 1 monitors activity on VLAN 50 of a remote switch
- D. SPAN session 2 monitors all traffic entering and exiting port FastEthernet 0/15.
Answer: D
NEW QUESTION 58
Refer to the exhibit.
An engineer configures monitoring on SW1 and enters the show command to verify operation. What does the output confirm?
- A. SPAN session 2 only monitors egress traffic exiting port FastEthernet 0/14.
- B. SPAN session 2 monitors all traffic entering and exiting port FastEthernet 0/15.
- C. SPAN session 1 monitors activity on VLAN 50 of a remote switch
- D. RSPAN session 1 is incompletely configured for monitoring
Answer: D
Explanation:
Explanation
SW1 has been configured with the following commands:
SW1(config)#monitor session 1 source remote vlan 50 SW1(config)#monitor session 2 source interface fa0/14 SW1(config)#monitor session 2 destination interface fa0/15 The session 1 on SW1 was configured for Remote SPAN (RSPAN) while session 2 was configured for local SPAN. For RSPAN we need to configure the destination port to complete the configuration.
Note: In fact we cannot create such a session like session 1 because if we only configure Source RSPAN VLAN 50 (with the command monitor session 1 source remote vlan 50) then we will receive a Type: Remote Source Session (not Remote Destination Session).
NEW QUESTION 59
An engineer runs the code against an API of Cisco DMA Center, and the platform returns this output What does the response indicate?
- A. The URl string is incorrect.
- B. The authentication credentials are incorrect
- C. The HTTP method is incorrect
- D. The Cisco DNA Center API port is incorrect
Answer: B
NEW QUESTION 60
Drag and drop the characteristics from the left onto the correct infrastructure deployment types on the right.
Answer:
Explanation:
NEW QUESTION 61
Which function is handled by vManage in the Cisco SD-WAN fabric?
- A. Establishes IPsec tunnels with nodes.
- B. Distributes policies that govern data forwarding
- C. Establishes BFD sessions to test liveliness of links and nodes
- D. Performs remote software upgrades for WAN Edge. vSmart and vBond
Answer: D
Explanation:
Explanation
We can remote upgrades WAN Edge, vSmart and vBond in vManage.
https://sdwan-docs.cisco.com/Product_Documentation/vManage_Help/Release_18.4/Maintenance/Software_Upg
NEW QUESTION 62
Which JSON syntax is valid?
- A. Option D
- B. Option B
- C. Option A
- D. Option C
Answer: B
NEW QUESTION 63
Refer to the exhibit.
A port channel is configured between SW2 and SW3. SW2 is not running a Cisco operating system. When all physical connections are mode, the port channel does not establish. Based on the configuration excerpt of SW3, what is the cause of the problem?
- A. The port-channel interface lead balance should be set to src-mac
- B. The port channel on SW2 is using an incompatible protocol.
- C. The port-channel should be set to auto.
- D. The port-channel trunk is not allowing the native VLAN.
Answer: B
NEW QUESTION 64 
Refer to the exhibit. Which two commands are needed to allow for full reachability between AS 1000 and AS 2000? (Choose two)
- A. R1#network 19.168.0.0 mask 255.255.0.0
- B. R2#network 19.168.0.0 mask 255.255.0.0
- C. R1#no network 10.0.0.0 255.255.255.0
- D. R2#network 209.165.201.0 mask 255.255.192.0
- E. R2#no network 10.0.0.0 255.255.255.0
Answer: B,E
NEW QUESTION 65
Drag and drop the LISP components on the left to the correct description on the right
Answer:
Explanation:
Explanation
https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/iproute_lisp/configuration/xe-3s/irl-xe-3s-book/irloverview.
NEW QUESTION 66
Drag and drop the threat defense solutions from the left onto their descriptions on the right.
Answer:
Explanation:
NEW QUESTION 67
Which line must be added in the Python function to return the JSON object {"cat_9k": "FXS193202SE")?
A)
B)
C)
D)
- A. Option A
- B. Option D
- C. Option B
- D. Option C
Answer: B
NEW QUESTION 68
Drag and drop the virtual components from the left onto their deceptions on the right.
Answer:
Explanation:
NEW QUESTION 69
Drag and drop the LISP components on the left to the correct description on the right
Answer:
Explanation:
Explanation
https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/iproute_lisp/configuration/xe-3s/irl-xe-3s-book/irloverview.h
NEW QUESTION 70
......
Dumps Brief Outline Of The 350-401 Exam: https://www.test4sure.com/350-401-pass4sure-vce.html
Use Real 350-401 - 100% Cover Real Exam Questions: https://drive.google.com/open?id=1JlBFIdPeKWDtggtvadCVQ93OkSy3wqyG