The Secret Of Cisco 350-401 Practice Test

NEW QUESTION 1

What does the LAP send when multiple WLCs respond to the CISCO_CAPWAP- CONTROLLER.localdomain hostname during the CAPWAP discovery and join process?

• A. broadcast discover request
• B. join request to all the WLCs
• C. unicast discovery request to each WLC
• D. Unicast discovery request to the first WLS that resolves the domain name

Answer: D

Explanation:
The AP will attempt to resolve the DNS name CISCO-CAPWAP- CONTROLLER.localdomain. When the AP is able to resolve this name to one or more IP addresses, the AP sends a unicast CAPWAP Discovery Message to the resolved IP address(es). Each WLC that receives the CAPWAP Discovery Request Message replies with a unicast CAPWAP Discovery Response to the AP.
Reference: https://www.cisco.com/c/en/us/support/docs/wireless/4400-series-wireless-lan-controllers/107606-dns-wlc-config.html

NEW QUESTION 2


Refer to the exhibit. What is the cause of the communication failure between R1 and R4?

• A. R1 is configured with the no ip unreachables command.
• B. R2 is denying ICMP
• C. R4 is denying ICMP.
• D. R3 is denying ICMP.

Answer: A

NEW QUESTION 3

A customer transitions a wired environment to a Cisco SD-Access solution. The customer does not want to integrate the wireless network with the fabric. Which wireless deployment approach enables the two systems to coexist and meets the customer requirement?

• A. Deploy the APs in autonomous mode
• B. Deploy the wireless network over the top of the fabric
• C. Deploy a separate network for the wireless environment
• D. Implement a Cisco DNA Center to manage the two networks

Answer: B

NEW QUESTION 4


Refer to the exhibit Users cannot reach the web server at 192.168 100 1. What is the root cause for the failure?

• A. The server is attempting to load balance between links 10.100 100.1 and 10 100.200.1.
• B. The server is out of service.
• C. There is a loop in the path to the server.
• D. The gateway cannot translate the server domain name.

Answer: C

NEW QUESTION 5

An engineer is connected to a Cisco router through a Telnet session. Which command must be issued to view the logging messages from the current session as soon as they are generated by the router?

• A. logging buffer
• B. service timestamps log uptime
• C. logging host
• D. terminal monitor

Answer: D

NEW QUESTION 6

At which Layer does Cisco DNA Center support REST controls?

• A. EEM applets or scripts
• B. Session layer
• C. YMAL output from responses to API calls
• D. Northbound APIs

Answer: D

NEW QUESTION 7

A network is being migrated from IPV4 to IPV6 using a dual-stack approach. Network management is already 100% IPV6 enabled. In a dual-stack network with two dual-stack NetFlow collections, how many flow exporters are needed per network device in the flexible NetFlow configuration?

• A. 1
• B. 2
• C. 4
• D. 8

Answer: B

NEW QUESTION 8


Refer to the exhibit. An engineer must protect the CPU of the router from high rates of NTP, SNMP, and SSH traffic. Which two configurations must be applied to drop these types of traffic when it continuously exceeds 320 kbps? (Choose two)

• A. Option A
• B. Option B
• C. Option C
• D. Option D
• E. Option E

Answer: BE

NEW QUESTION 9

Refer to the exhibit.

An engineer implemented several configuration changes and receives the logging message on switch1. Which action should the engineer take to resolve this issue?

• A. Change the VTP domain to match on both switches
• B. Change Switch2 to switch port mode dynamic auto
• C. Change Switch1 to switch port mode dynamic auto
• D. Change Switch1 to switch port mode dynamic desirable

Answer: A

NEW QUESTION 10

Refer to the exhibit.

An engineer must configure and validate a CoPP policy that allows the network management server to monitor router R1 via SNMP while protecting the control plane. Which two commands or command sets must be used? (Choose two.)

• A. Option A
• B. Option B
• C. Option C
• D. Option D
• E. Option E
• F. Option F

Answer: AF

NEW QUESTION 11

Which characteristic distinguishes Ansible from Chef?

• A. Ansible lacs redundancy support for the master serve
• B. Chef runs two masters in an active/active mode.
• C. Ansible uses Ruby to manage configuration
• D. Chef uses YAML to manage configurations.
• E. Ansible pushes the configuration to the clien
• F. Chef client pulls the configuration from the server.
• G. The Ansible server can run on Linux, Unix or Window
• H. The Chef server must run on Linux or Unix.

Answer: C

NEW QUESTION 12

Which DNS lookup does an access point perform when attempting CAPWAP discovery?

• A. CISCO-DNA-CONTROLLER local
• B. CAPWAP-CONTROLLER local
• C. CISCO-CONTROLLER local
• D. CISCO-CAPWAP-CONTROLLER local

Answer: D

NEW QUESTION 13


Refer to the exhibit. An engineer has configured an IP SLA for UDP echo’s. Which command is needed to start the IP SLA to test every 30 seconds and continue until stopped?

• A. ip sla schedule 100 start-time now life forever
• B. ip sla schedule 30 start-time now life forever
• C. ip sla schedule 100 start-time now life 30
• D. ip sla schedule 100 life forever

Answer: A

NEW QUESTION 14

Which two mechanisms are available to secure NTP? (Choose two.)

• A. IP prefix list-based
• B. IPsec
• C. TACACS-based authentication
• D. IP access list-based
• E. Encrypted authentication

Answer: DE

NEW QUESTION 15
DRAG DROP
Drag and drop the DHCP messages that are exchanged between a client and an AP into the order they are exchanged on the right.

• A. Yes
• B. Not Mastered

Answer: A

NEW QUESTION 16
......