350-401 Exam Questions

A network engineer configures a WLAN controller with increased security for web access. There is IP connectivity with the WLAN controller, but the engineer cannot start a managemen...

Refer to the exhibit. An engineer must configure static NAT on R1 lo allow users HTTP access to the web server on TCP port 80. The web server must be reachable through ISP 1 and IS...

By default, which virtual MAC address does HSRP group 16 use?

A customer requests a design that includes GLBP as the FHRP. The network architect discovers that the members of the GLBP group have different throughput capabilities. Which GLBP l...

In a Cisco SD-WAN solution, which two functions are performed by OMP? (Choose two.)

A network engineer is enabling HTTPS access to the core switch, which requires a certificate to be installed on the switch signed by the corporate certificate authority. Which conf...

An engineer must create a new SSID on a Cisco 9800 wireless LAN controller. The client has asked to use a pre-shared key for authentication. Which profile must the engineer edit to...

Which statement about traffic management when PIM snooping is enabled is true?

How are map-register messages sent in a LISP deployment?

Refer to the exhibit. The trunk does not work over the back-to-back link between Switch1 interface Giq1/0/20 and Switch2 interface Gig1/0/20. Which configuration fixes the problem?

Based on the router's API output in JSON format below, which Python code will display the value of the "hostname" key?

Refer to the exhibit. An engineer attempts to bundle interface Gi0/0 into the port channel, but it does not function as expected. Which action resolves the issue?

Refer to the exhibit. An engineer must permit traffic from these networks and block all other traffic. An informational log message should be triggered when traffic enters from the...

Refer to the exhibit. After the code is run on a Cisco IOS-XE router, the response code is 204. What is the result of the script?

Which two parameters are examples of a QoS traffic descriptor? (Choose two)

Refer to the exhibit. After configuring HSRP an engineer enters the show standby command. Which two facts are derived from the output? (Choose two.)

If a client's radio device receives a signal strength of -67 dBm and the noise floor is -85 dBm, what is the SNR value?

Refer to the exhibit. An engineer configures OSPF and wants to verify the configuration. Which configuration is applied to this device?

A network monitoring system uses SNMP polling to record the statistics of router interfaces. The SNMP queries work as expected until an engineer installs a new interface and reload...

In a Cisco SD-Access solution, which protocol is used by an extended node to connect to a single edge node?

An engineer must enable a login authentication method that allows a user to log in by using local authentication if all other defined authentication methods fail. Which configurati...

When firewall capabilities are considered, which feature is found only in Cisco next-generation firewalls?

What does a northbound API accomplish?

Refer to the exhibit. An engineer configures the BGP adjacency between R1 and R2; however, it fails to establish. Which action resolves the issue?

Refer to the exhibit. The network administrator must be able to perform configuration changes when all the RADIUS servers are unreachable. Which configuration allows all commands t...

What is a characteristic of Cisco StackWise technology?

Which QoS mechanism is used to implement CoPP?

Why would an engineer use YANG?

Refer to the exhibit. An engineer must create a configuration that prevents R3 from receiving the LSA about 172.16.1.4/32. Which configuration set achieves this goal? A. B. C. D.

Refer to the exhibit. VPN-A sends point-to-point traffic to VPN-B and receives traffic only from VPN-C. VPN-B sends point-to-point traffic to VPN-C and receives traffic only from V...

A customer wants to use a single SSID to authenticate IoT devices using different passwords. Which Layer 2 security type must be configured in conjunction with Cisco ISE to achieve...

Refer to the exhibit. An engineer must prevent the R6 loopback from getting into Area 2 and Area 3 from Area 0. Which action must the engineer take?

In a Cisco StackWise Virtual environment, which planes are virtually combined in the common logical switch?

Refer to the exhibit. R2 is the neighboring router of R1. R2 receives an advertisement for network 192.168.10.50/32. Which configuration should be applied for the subnet to be adve...

What is one primary REST security design principle?

Which CoPP feature can you configure after applying the control-plane command?

Which method is used by an AP to join HA controllers and is configured in NVRAM?

Refer to the exhibit. A network engineer is enabling logging to a local buffer, to the terminal and to a syslog server for all debugging level logs filtered by facility code 7. Whi...

How can an engineer prevent basic replay attacks from people who try to brute force a system via REST API?

When is the Design workflow used In Cisco DNA Center?

How does the Cisco SD-Access control plane simplify traditional routing environments?

An administrator must enable Telnet access to Router X using the router username and password database for authentication. Which configuration should be applied?

Refer to the exhibit. An engineer must configure HSRP for VLAN 1000 on SW2. The secondary switch must immediately take over the role of active router If the interlink with the prim...

Refer to the exhibit. An engineer attempts to establish BGP peering between router CORP and two ISP routers. What is the root cause for the failure between CORP and ISP#2?

In which two ways does TCAM differ from CAM? (Choose two.)

What are two benefits of implementing a Cisco SD-WAN architecture? (Choose two)

Drag and Drop Question Drag and drop the tools from the left onto the agent types on the right. Answer:

Which two statements about MAC Authentication Bypass are true? (Choose two.)

Drag and Drop Question Drag and drop the characteristics from the left onto the infrastructure deployment models they describe on the right. Answer:

Drag and Drop Question Drag and drop the snippets onto the blanks within the code to construct a script that adds a prefix list to a route map and sets the local preference. Not al...