350-401 Exam Questions
1,329 real 350-401 exam questions with expert-verified answers and explanations. Page 13 of 27.
- Question #610Infrastructure
Which enhancement does IGMP version 3 offer over IGMP version 2?
IGMPv3IGMPv2Source Specific MulticastMulticast Protocols - Question #611IP Connectivity / Configure and verify single-homed branch connectivity using eBGP IPv4 (Cisco CCNA or CCNP Route domain)
Drag and Drop Question Drag and drop the snippets onto the blanks within the code to construct a script that advertises the network prefix 192.168.5.0/24 into a BGP session. Not al...
BGP ConfigurationRoute AdvertisementCisco IOS CLINetwork Command Syntax - Question #612Cloud Concepts - Understanding and differentiating between on-premises, public cloud, private cloud, and hybrid cloud infrastructure deployment models and their associated characteristics (CompTIA Cloud+ / AWS Cloud Practitioner / Azure Fundamentals)
Drag and Drop Question Drag and drop the characteristics from the left onto the infrastructure deployment models on the right. Answer:
Cloud Deployment ModelsCapEx vs OpExOn-Premises vs CloudInfrastructure Management - Question #613
How does CEF switching differ from process switching on Cisco devices?
CEF switchingProcess switching - Question #614
A customer wants to provide wireless access to contractors using a guest portal on Cisco ISE. The portal Is also used by employees A solution is implemented, but contractors receiv...
Cisco ISEGuest PortalPKICertificate Trust - Question #615Architecture
A client device roams between access points located on different floors in an atrium. The access points are Joined to the same controller and configured in local mode. The access p...
Wireless RoamingWLC OperationClient MobilityAP Modes - Question #616Network Programmability and Automation - Working with REST APIs and saving API responses using Python, typically aligned with Cisco DevNet or CCNP/CCIE Enterprise certification objectives.
Which Python code snippet must be added to the script to save the returned configuration as a JSON-formatted file? A. B. C. D.
Python Requests LibraryREST APIJSON File HandlingNetwork Automation - Question #617Infrastructure
How must network management traffic be treated when defining QoS policies?
QoS PoliciesNetwork Management TrafficTraffic PrioritizationLow Latency Queuing - Question #618Infrastructure
What is one difference between EIGRP and OSPF?
EIGRPOSPFRouting ProtocolsRouting Algorithms - Question #619
Which QoS feature uses the IP Precedence bits in the ToS field of the IP packet header to partition traffic into different priority levels?
QoSTraffic ClassificationIP PrecedenceToS field - Question #620Infrastructure
Which action is performed by Link Management Protocol in a Cisco StackWise Virtual domain?
Cisco StackWise VirtualLMPLink managementUnidirectional link detection - Question #621Architecture
A customer transitions a wired environment to a Cisco SD-Access solution. The customer does not want to integrate the wireless network with the fabric. Which wireless deployment ap...
SD-Access WirelessWireless DeploymentOver the Top WirelessNetwork Coexistence - Question #622
Which two statements are true about control plane policing? (Choose two.)
Control Plane PolicingCoPPAccess ListsPolicing configuration - Question #623Infrastructure
A network engineer is configuring OSPF on a router. The engineer wants to prevent having a route to 177.16.0.0/16 learned via OSPF. In the routing table and configures a prefix lis...
OSPFRoute FilteringPrefix ListsDistribute Lists - Question #624Architecture
Which function does a fabric wireless LAN controller perform In a Cisco SD-Access deployment?
SD-AccessFabric WLCWireless IntegrationControl Plane - Question #625Architecture
What is a TLOC in a Cisco SD-WAN deployment?
SD-WANTLOCOverlay NetworkRouting - Question #626Infrastructure Security - Implement and configure Control Plane Policing (CoPP) to protect router management plane access, specifically for SSH traffic classification and rate-limiting (CCNP/CCIE Security or CCNP Enterprise)
Refer to the exhibit. Which commands are required to allow SSH connection to the router? A. B. C. D.
Control Plane Policing (CoPP)SSH SecurityAccess Control ListsQoS Policy-Map - Question #627Network Assurance
Which two solutions are used for backing up a Cisco DNA Center Assurance database? (Choose two)
Cisco DNA CenterDatabase BackupNFSRemote Server - Question #628
Which two statements about IPv4 and IPv6 networks are true? (Choose two.)
IPv4 fragmentationIPv6 fragmentationIPv6 UDP checksumIPv4 transport layer checksum - Question #629Implement switching technologies
Refer the exhibit. Which configuration elects SW4 as the root bridge for VLAN 1 and puts G0/2 on SW2 into a blocking state?
STP Root Bridge ElectionSTP Priority ConfigurationSTP Port StatesPer-VLAN Spanning Tree - Question #630Infrastructure
An engineer must configure a router to leak routes between two VRFs. Which configuration must the engineer apply? A. B. C. D.
VRFRoute LeakingRoute-mapAccess Control List - Question #631Security
What are the main components of Cisco TrustSec?
Cisco TrustSecCisco ISENetwork SecuritySegmentation - Question #632
Which three options are the main security features in SNMPv3? (Choose three)
SNMPv3Security Features - Question #633Configure and verify eBGP between directly connected neighbors, including correct AS number assignment, neighbor IP addressing, and network advertisement - typically aligned with CCNP ENCOR or CCNA Advanced Routing objectives.
Refer to the exhibit. Which command set must be applied on R1 to establish a BGP neighborship with R2 and to allow communication from R1 to reach the networks? A. B. C. D.
BGP ConfigurationeBGP NeighborshipAS NumbersNetwork Advertisement - Question #634
Refer to the exhibit. An engineer must set up connectivity between a campus aggregation layer and a branch office access layer. The engineer uses dynamic trunking protocol to estab...
Dynamic Trunking ProtocolVLAN trunkingNative VLANNetwork troubleshooting - Question #635Infrastructure
Which IPv4 packet field carries the QoS IP classification marking?
IPv4 headerQoSToS fieldPacket classification - Question #636Infrastructure
Which Cisco FlexConnect state allows wireless users that are connected to the network to continue working after the connection to the WLC has been lost?
FlexConnectWireless NetworkingAccess Point (AP)WLAN Operations - Question #637
Which type of ACL can be applied only to Layer 2 pods?
Port ACLsLayer 2 securityACL types - Question #638Security
An engineer must protect the password for the VTY lines against over-the-shoulder attacks. Which configuration should be applied?
service password-encryptionVTY line securityCisco password protection - Question #639Automation
Refer to the exhibit. What is the result of the API request?
REST APINetwork AutomationAPI data retrievalNetwork interfaces - Question #640Security
Which definition describes JWT in regard to REST API security?
JWTREST API SecurityAPI AuthenticationAPI Authorization - Question #641Architecture
What happens when a FlexConnect AP changes to standalone mode?
FlexConnectAP operational modesWLC connectivity - Question #642Infrastructure
Which two methods can you use to limit the range for EIGRP queries? (Choose two.)
EIGRP queriesRoute summarizationEIGRP stub routers - Question #643Network Address Translation (NAT) configuration - enabling PAT (overload) for inside-to-outside address translation using a single public IP on the outside interface, typically aligned with Cisco CCNA Domain: IP Services / IP Connectivity
Refer to the exhibit. An engineer must allow all users in the 10.2.2.0/24 subnet to access the internet. To conserve address space, the public interface address of 209.165.201.1 mu...
NATPATNetwork Address TranslationIPv4 Addressing - Question #644
Which benefit is realized by implementing SSO?
Cisco SSOStateful SwitchoverHigh AvailabilityRP redundancy - Question #645Infrastructure
Refer to the exhibit. The administrator troubleshoots an EtherChannel that keeps moving to err- disabled. Which two actions must be taken to resolve the issue? (Choose two.)
EtherChannelLink AggregationTroubleshootingLayer 2 - Question #646Architecture
What is the difference between the MAC address table and TCAM?
CAMTCAMMAC Address TableACL - Question #647Architecture
Which two features does the Cisco SD-Access architecture add to a traditional campus network? (Choose two.)
SD-AccessNetwork SegmentationIdentity ServicesCampus Network - Question #648Network Assurance
Refer to the exhibit. An engineer must configure an ERSPAN session with the remote end of the session 10.10.0.1. Which commands must be added to complete the configuration?
ERSPANNetwork MonitoringSPANCisco IOS-XE - Question #649Infrastructure
An engineer must configure a new loopback interface on a router and advertise the interface as a /24 in OSPF. Which command set accomplishes this task?
OSPFLoopback InterfaceRouting Protocol ConfigurationIP Addressing - Question #650Network Management - Configure and verify IP SLA for network performance monitoring and response time measurement
Refer to the exhibit. Which command set is needed to configure and verify router R3 to measure the response time from router R3 to the file server located in the data center? A. B....
IP SLANetwork MonitoringICMP EchoCisco IOS Commands - Question #651Infrastructure - Configure and verify GRE tunnel connectivity (CCNA 200-301 / WAN Concepts and VPN Technologies)
Refer to the exhibit. Which configuration must be applied to the HQ router to set up a GRE tunnel between the HQ and BR routers? A. B. C. D.
GRE TunnelsWAN TechnologiesTunnel ConfigurationIP Addressing - Question #652
In which order of magnitude (time) is delay/latency measured when you use wide metrics in EIGRP?
EIGRPEIGRP Wide MetricsDelay Measurement - Question #653
How do EIGRP metrics compare to OSPF metrics?
EIGRP metricsOSPF metricsRouting protocol comparison - Question #654Security
Refer to the exhibit. A network engineer must log in to the router via the console, but the RADIUS servers are not reachable. Which credentials allow console access1?
Console AccessAAA AuthenticationLocal AuthenticationFallback Authentication - Question #655Automation
Refer to the exhibit. Which command must be configured for RESTCONF to operate on port 8888?
RESTCONFHTTP server configurationPort assignment - Question #656Infrastructure
According to the networking best practices, which network device should be used for optimization and rate limiting?
Network design best practicesTraffic optimizationRate limitingCustomer edge devices - Question #657Infrastructure
Refer to the exhibit. Object tracking has been configured for VRRP-enabled routers Edge-01 and Edge-02. Which commands cause Edge-02 to preempt Edge-01 in the event that interface...
VRRPObject TrackingRouter Redundancy - Question #658Infrastructure
Which feature Is used to propagate ARP broadcast, and link-local frames across a Cisco SD- Access fabric to address connectivity needs for silent hosts that require reception of tr...
SD-AccessL2 FloodingARP BroadcastSilent Hosts - Question #659
An engineer must configure an ACL that permits packets which include an ACK in the TCP header Which entry must be included in the ACL?
Cisco ACLTCP establishedPacket filtering