Top Tips Of Improve 350-401 Test Question

NEW QUESTION 1


Refer to the exhibit. Why was the response code generated?

• A. The resource was unreachable
• B. Access was denied based on the user permissions.
• C. The resource 15 no longer available on the server.
• D. There Is a conflict in the current stale of the resource.

Answer: B

NEW QUESTION 2

Which two methods are used to assign security group tags to the user in a Cisco Trust Sec architecture? (Choose two )

• A. modular QoS
• B. policy routing
• C. web authentication
• D. DHCP
• E. IEEE 802.1x

Answer: CE

NEW QUESTION 3

Which features does Cisco EDR use to provide threat detection and response protection?

• A. containment, threat intelligence, and machine learning
• B. firewalling and intrusion prevention
• C. container-based agents
• D. cloud analysis and endpoint firewall controls

Answer: B

NEW QUESTION 4

Refer to the exhibit.

An engineer must create a configuration that executes the show run command and then terminates the session when user CCNP legs in. Which configuration change is required?

• A. Add the access-class keyword to the username command
• B. Add the access-class keyword to the aaa authentication command
• C. Add the autocommand keyword to the username command
• D. Add the autocommand keyword to the aaa authentication command

Answer: C

Explanation:
The autocommand causes the specified command to be issued automatically after the user logs in. When the command is complete, the session is terminated. Because the command can be any length and can contain embedded spaces, commands using the autocommand keyword must be the last option on the line. In this specific question, we have to enter this line username CCNP autocommand show running-config.

NEW QUESTION 5

Refer to the exhibit.

R1 has a BGP neighborship with a directly connected router on interface Gi0/0. Which command set is applied between the iterations of show ip bgp 2.2.2.2?

• A. R1(config)#router bgp 65001R1(config-router)#neighbor 192.168.50.2 shutdown
• B. R1(config)#router bgp 65002R1(config-router)#neighbor 192.168.50.2 shutdown
• C. R1(config)#no ip route 192.168.50.2 255.255.255.255 Gi0/0
• D. R1(config)#ip route 2.2.2.2 255.255.255.255 192.168.50.2

Answer: D

NEW QUESTION 6

Refer to the exhibit.

Which result Is achieved by the CoPP configuration?

• A. Traffic that matches entry 10 of ACL 100 is always allowed.
• B. Class-default traffic is dropped.
• C. Traffic that matches entry 10 of ACL 100 is always allowed with a limited CIR.
• D. Traffic that matches entry 10 of ACL 100 is always dropped.

Answer: C

Explanation:
This is because the CoPP configuration shown in the exhibit applies a service policy to the control plane of the router, which is responsible for processing the routing protocols, management protocols, and other control traffic. The service policy uses a class map that matches the access list 100, which permits the traffic with the source IP address 10.1.1.1. The service policy also uses a policy map that sets the committed information rate (CIR) for the matched traffic to 64 kbps, which means that the traffic is guaranteed to have a minimum bandwidth of 64 kbps. The policy map also sets the exceed action to drop, which means that any traffic that exceeds the CIR will be dropped. Therefore, the traffic that matches entry 10 of ACL 100 is always allowed with a limited CIR, and any excess traffic is dropped. The source of this answer is the Cisco ENCOR v1.1 course, module 6, lesson 6.3: Implementing QoS.

NEW QUESTION 7

Refer to the exhibit.

An engineer must allow R1 to advertise the 192 168.1 0/24 network to R2 R1 must perform this action without sending OSPF packets to SW1 Which command set should be applied?
A)

B)

C)

D)

• A. Option A
• B. Option B
• C. Option C
• D. Option D

Answer: B

NEW QUESTION 8

Which network devices secure API platform?

• A. next-generation intrusion detection systems
• B. Layer 3 transit network devices
• C. content switches
• D. web application firewalls

Answer: D

Explanation:
Reference: https://www.cisco.com/c/en/us/products/collateral/security/advanced-waf-bot- aag.pdf> Cisco® Secure Web Application Firewall (WAF) and bot protection defends your> online presence and ensures that website, mobile applications, and APIs> are secure, protected, and “always on.”

NEW QUESTION 9
DRAG DROP
Drag and drop the characteristics from the left onto the routing protocols they describe on the right.

• A. Yes
• B. Not Mastered

Answer: A

NEW QUESTION 10

Which of the following fiber connector types is the most likely to be used on a network interface card?

• A. LC
• B. SC
• C. ST
• D. MPO

Answer: A

Explanation:
This is because the LC connector is a small form factor connector that is commonly used on network interface cards (NICs) and transceivers. The LC connector has a push-pull locking mechanism that makes it easy to insert and remove. The LC connector can support both single-mode and multimode fibers. The LC connector is also compatible with the SFP and SFP+ transceiver modules that are widely used on NICs. The source of this answer is the Cisco ENCOR v1.1 course, module 1, lesson 1.3: Comparing Copper and Fiber Cabling.

NEW QUESTION 11



Refer to the exhibit. Which configuration change will force BR2 to reach 209 165 201 0/27 via BR1?

• A. Set the weight attribute to 65.535 on BR1 toward PE1.
• B. Set the local preference to 150 on PE1 toward BR1 outbound
• C. Set the MED to 1 on PE2 toward BR2 outbound.
• D. Set the origin to igp on BR2 toward PE2 inbound.

Answer: C

Explanation:

Diagrama Descripción generada automáticamenteMED Attribute:+ Optional nontransitive attribute
(nontransitive means that we can only advertise MED to routers that are one AS away)+ Sent through ASes to external BGP neighbors+ Lower value is preferred (it can be considered the external metric of a route)+ Default value is 0

NEW QUESTION 12

Refer to the exhibit.

After implementing the configuration 172.20.20.2 stops replaying to ICMP echoes, but the default route fails to be removed. What is the reason for this behavior?

• A. The source-interface is configured incorrectly.
• B. The destination must be 172.30.30.2 for icmp-echo
• C. The default route is missing the track feature
• D. The threshold value is wrong.

Answer: C

Explanation:
The last command should be “R1(config)#ip route 0.0.0.0 0.0.0.0 172.20.20.2 track 10”.

NEW QUESTION 13

Which security measure mitigates a man-in-the-middle attack of a REST API?

• A. SSL certificates
• B. biometric authentication
• C. password hash
• D. non repudiotion feature

Answer: A

NEW QUESTION 14

Refer to the exhibit.

Assuming the WLC's interfaces are not in the same subnet as the RADIUS server, which interface would the WLC use as the source for all RADIUS-related traffic?

• A. the interface specified on the WLAN configuration
• B. any interface configured on the WLC
• C. the controller management interface
• D. the controller virtual interface

Answer: A

NEW QUESTION 15

Refer to the exhibit.

A network engineer must simplify the IPsec configuration by enabling IPsec over GRE using IPsec profiles. Which two configuration changes accomplish this? (Choose two).

• A. Create an IPsec profile, associate the transform-set ACL, and apply the profile to the tunnel interface.
• B. Apply the crypto map to the tunnel interface and change the tunnel mode to tunnel mode ipsec ipv4.
• C. Remove all configuration related to crypto map from R1 and R2 and eliminate the ACL.
• D. Create an IPsec profile, associate the transform-set, and apply the profile to the tunnel interface.
• E. Remove the crypto map and modify the ACL to allow traffic between 10.10.0.0/24 to 10.20.0.0/24.

Answer: CD

NEW QUESTION 16
......