2024 Latest 350-401 dumps Exam Material with 1175 Questions
Cisco 350-401 Questions and Answers Guarantee you Oass the Test Easily
NEW QUESTION # 381
Refer to the exhibit.
The network administrator must be able to perform configuration changes when all the RADIUS servers are unreachable. Which configuration allows all commands to be authorized if the user has successfully authenticated?
- A. aaa authorization exec default group radius
- B. aaa authorization exec default group radius none
- C. aaa authentication login default group radius local none
- D. aaa authorization exec default group radius if-authenticated
Answer: A
NEW QUESTION # 382
Drag and Drop the decryptions from the left onto the routing protocol they describe on the right.
Answer:
Explanation:
NEW QUESTION # 383
Which two mechanisms are available to secure NTP? (Choose two.)
- A. IP access list-based
- B. Encrypted authentication
- C. TACACS-based authentication
- D. IP prefix list-based
- E. IPsec
Answer: A,B
Explanation:
Explanation
The time kept on a machine is a critical resource and it is strongly recommend that you use the security features of NTP to avoid the accidental or malicious setting of incorrect time. The two security features available are an access list-based restriction scheme and an encrypted authentication mechanism.
Reference: https://www.cisco.com/c/en/us/support/docs/availability/high-availability/19643- ntpm.html
NEW QUESTION # 384
The login method is configured on the VTY lines of a router with these parameters.
* The first method for authentication is TACACS
* If TACACS is unavailable, login is allowed without any provided credentials Which configuration accomplishes this task?
- A. Option D
- B. Option C
- C. Option B
- D. Option A
Answer: B
NEW QUESTION # 385
Which HTTP code must be returned to prevent the script form exiting?
- A. 0
- B. 1
- C. 2
- D. 3
Answer: D
NEW QUESTION # 386
Drag and drop the descriptions from the left onto the QoS components on the right.
Answer:
Explanation:
Explanation
The cool thing about shaping is that all traffic will be sent since we are buffering it. The downside of buffering traffic is that it introduces delay and jitter. Let me show you an example:
NEW QUESTION # 387
Refer to the exhibit.
An engineer must create a configuration that executes the show run command and then terminates the session when user CCNP legs in. Which configuration change is required''
- A. Add the access-class keyword to the aaa authentication command
- B. Add the autocommand keyword to the aaa authentication command
- C. Add the autocommand keyword to the username command
- D. Add the access-class keyword to the username command
Answer: C
Explanation:
Explanation
The autocommand causes the specified command to be issued automatically after the user logs in. When the command is complete, the session is terminated. Because the command can be any length and can contain embedded spaces, commands using the autocommand keyword must be the last option on the line. In this specific question, we have to enter this line username CCNP autocommand show running-config.
NEW QUESTION # 388
When voice services are deployed over a wireless environment, which service must be disabled to ensure the quality of calls?
- A. priority queuing
- B. Fastlane
- C. dynamic transmit power control
- D. aggressive load balancing
Answer: D
Explanation:
You can also enable or disable load balancing on a particular WLAN, which is useful if you want to disable load balancing for a select group of clients (such as time-sensitive voice clients).
https://www.cisco.com/c/en/us/td/docs/wireless/controller/8-10/config-
guide/b_cg810/advanced_wireless_tuning.html
NEW QUESTION # 389
Which two characteristics define the Intent API provided by Cisco DNA Center? (Choose two.)
- A. southbound API
- B. device-oriented
- C. northbound API
- D. procedural
- E. business outcome oriented
Answer: C,E
NEW QUESTION # 390
Which two statements about PIM snooping are true? (Choose two)
- A. It requires RGMP to be enabled on the VLAN.
- B. The ip pirn snooping command is an interface-level command.
- C. It requires designated forwarder election messages.
- D. It requires IGMP snooping to be enabled on the switch.
- E. When PIM snooping is enabled, the switch allows all multicast packets for each IP multicast group to send multicast packets to multicast router.
- F. It floods join and prune messages on all router ports.
Answer: C,D
NEW QUESTION # 391
Refer to the exhibit. Edge-01 is currently operational as the HSRP primary with priority 110.
Which command on Edge-02 causes it to take over the forwarding role when Edge-01 is down?
- A. standby 10 track
- B. standby 10 priority
- C. standby 10 preempt
- D. standby 10 timers
Answer: C
Explanation:
The preempt command enables the HSRP router with the highest priority to immediately become the active router.
NEW QUESTION # 392
What is required for intercontroller Layer 3 roaming?
- A. WLCs have the same IP addresses configured on their interfaces.
- B. The management VLAN is present as a dynamic VLAN on the second WLC.
- C. WLCs use separate DHCP servers.
- D. Mobility groups are established between wireless controllers.
Answer: A
NEW QUESTION # 393
Drag and drop the DHCP messages that are exchanged between a client and an AP into the order they are exchanged on the right.
Answer:
Explanation:
Explanation
There are four messages sent between the DHCP Client and DHCP Server: DHCPDISCOVER, DHCPO FFER, DHCPREQUEST and DHCPACKNOWLEDGEMENT.
This process is often abbreviated as DORA (for Discover, Offer, Request, Acknowledgement).
NEW QUESTION # 394
Which configuration restricts the amount of SSH that a router accepts 100 kbps?
A)
B)
C)
D)
- A. Option D
- B. Option C
- C. Option B
- D. Option A
Answer: B
Explanation:
CoPP protects the route processor on network devices by treating route processor resources as a separate entity with its own ingress interface (and in some implementations, egress also). CoPP is used to police traffic that is destined to the route processor of the router such as:
+ routing protocols like OSPF, EIGRP, or BGP.
+ Gateway redundancy protocols like HSRP, VRRP, or GLBP.
+ Network management protocols like telnet, SSH, SNMP, or RADIUS.
Therefore we must apply the CoPP to deal with SSH because it is in the
management plane. CoPP must be put under "control-plane" command.
NEW QUESTION # 395
Refer to the exhibit.
Which IP address becomes the active next hop for 192.168.102 0/24 when 192.168.101.2 fails?
- A. 192.168.101.18
- B. 192.168.101.6
- C. 192.168.101.10
- D. 192.168.101.14
Answer: A
Explanation:
Explanation
The '>' shown in the output above indicates that the path with a next hop of 192.168.101.2 is the current best path.
Path Selection Attributes: Weight > Local Preference > Originate > AS Path > Origin > MED > External > IGP Cost > eBGP Peering > Router ID BGP prefers the path with highest weight but the weights here are all 0 (which indicate all routes that are not originated by the local router) so we need to check the Local Preference. Answer
'192.168.101.18' path without LOCAL_PREF (LocPrf column) means it has the default value of 100.
Therefore we can find the two next best paths with the next hop of 192.168.101.18 and
192.168.101.10.
We have to move to the next path selection attribute: Originate. BGP prefers the path that the local router originated (which is indicated with the "next hop 0.0.0.0"). But none of the two best paths is self-originated.
The AS Path of the next hop 192.168.101.18 is shorter than the AS Path of the next hop
192.168.101.10 then the next hop 192.168.101.18 will be chosen as the next best path.
NEW QUESTION # 396
What does Call Admission Control require the client to send in order to reserve the bandwidth?
- A. SIP flow information
- B. VoIP media session awareness
- C. traffic specification
- D. Wi-Fi multimedia
Answer: B
NEW QUESTION # 397
Drag and drop the descriptions of the VSS technology from the left to the right. Not all options are used.
Answer:
Explanation:
Explanation
Graphical user interface Description automatically generated
NEW QUESTION # 398
Drag and drop the characteristics from the left onto the routing protocols they describe on the right.
Answer:
Explanation:
NEW QUESTION # 399
Refer to the exhibit.
An engineer is designing a guest portal on Cisco ISE using the default configuration. During the testing phase, the engineer receives a warning when displaying the guest portal. Which issue is occurring?
- A. The server that is providing the portal has an expired certificate
- B. The connection is using an unsupported browser
- C. The server that is providing the portal has a self-signed certificate
- D. The connection is using an unsupported protocol
Answer: C
NEW QUESTION # 400
Drag and drop the QoS mechanisms from the left onto their descriptions on the right
Answer:
Explanation:
Explanation
NEW QUESTION # 401
Refer to the exhibit.
An engineer must deny HTTP traffic from host A to host B while allowing all other communication between the hosts, drag and drop the commands into the configuration to achieve these results. Some commands may be used more than once. Not all commands are used.
Answer:
Explanation:
NEW QUESTION # 402
IS OSPF, which LAS type is responsible for pointing to the ASBR router?
- A. type 1
- B. type 2
- C. type 4
- D. type 3
Answer: C
NEW QUESTION # 403
A wireless consultant is designing a high-density wireless network for a lecture hall for 1000 students Which antenna type is recommended for this environment?
- A. sector antenna
- B. dipole antenna
- C. omnidirectional antenna
- D. parabolic dish
Answer: C
Explanation:
Explanation
https://www.cisco.com/c/en/us/td/docs/wireless/controller/technotes/87/b_wireless_high_client_density_design_
NEW QUESTION # 404
Refer to the exhibit.
Which JSON syntax is derived from this data?
- A.
- B.
- C.
- D.
Answer: D
NEW QUESTION # 405
Refer to the exhibit.
An engineer must deny Telnet traffic from the loopback interface of router R3 to the loopback interface of router R2 during the weekend hours. All other traffic between the loopback interfaces of routers R3 and R2 must be allowed at all times.
Which command set accomplishes this task?
- A. R1(config)#time-range WEEKEND
R1(config-time-range)#periodic weekend 00:00 to 23:59
R1(config)#access-list 150 deny tcp host 10.3.3.3 host 10.2.2.2 eq 23 time-range WEEKEND R1(config)#access-list 150 permit ip any any R1(config)#interface G0/1 R1(config-if)#ip access-group 150 in - B. R3(config)#time-range WEEKEND
R3(config-time-range)#periodic Saturday Sunday 00:00 to 23:59
R3(config)#access-list 150 deny tcp host 10.3.3.3 host 10.2.2.2 eq 23 time-range WEEKEND R3(config)#access-list 150 permit ip any any time-range WEEKEND R3(config)#interface G0/1 R3(config-if)#ip access-group 150 out - C. R3(config)#time-range WEEKEND
R3(config-time-range)#periodic weekend 00:00 to 23:59
R3(config)#access-list 150 permit tcp host 10.3.3.3 host 10.2.2.2 eq 23 time-range WEEKEND R3(config)#access-list 150 permit ip any any time-range WEEKEND R3(config)#interface G0/1 R3(config-if)#ip access-group 150 out - D. R1(config)#time-range WEEKEND
R1(config-time-range)#periodic Friday Sunday 00:00 to 00:00
R1(config)#access-list 150 deny tcp host 10.3.3.3 host 10.2.2.2 eq 23 time-range WEEKEND R1(config)#access-list 150 permit ip any any R1(config)#interface G0/1 R1(config-if)#ip access-group 150 in
Answer: A
NEW QUESTION # 406
......
Share Latest 350-401 DUMP Questions and Answers: https://examcollection.prep4sureguide.com/350-401-prep4sure-exam-guide.html