Cisco 350-401 Exam Questions Simulate Actual 350-401 Exam

Category:

Comments:

0 Comments

Post Date:

June 8, 2023

350-401 exam dumps questions are designed to simulate the actual exam. This means that you will get a feel for the types of questions you can expect to see on the exam, as well as the format and difficulty level. In addition, CCNP Enterprise 350-401 dumps are often accompanied by detailed explanations and answers. This means that if you get a question wrong, you can learn from your mistake and understand why the correct answer is the right one. Test free online 350-401 exam dumps below.

Page 1 of 8

1. What is a characteristic of a Type 2 hypervisor?

quick deployment

ideal for data center

complicated deployment

referred to as bare-metal

2. What is the structure of a JSON web token?

header and payload

three parts separated by dots: version, header, and signature

payload and signature

three parts separated by dots: header, payload. and signature

3. Which AP mode allows an engineer to scan configured channels for rogue access points?

sniffer

monitor

bridge

local

4. Which type of roaming event occurs when a client roams across multiple mobility groups?

Layer 3

Layer 7

Layer 1

Layer 2

5. What is a benefit of using segmentation with TrustSec?

Integrity checks prevent data from being modified in transit.

Security group tags enable network segmentation.

Firewall rules are streamlined by using business-level profiles.

Packets sent between endpoints on a LAN are encrypted using symmetric key cryptography.

6. Which technology is the Cisco SD-Access control plane based on?

LISP

CTS

SGT

VRF

7. Which AP mode analyzes the spectrum to detect sources of interference?

Monitor

Rogue detector

SE-Connect

Sniffer

8. An engineer is configuring RADIUS-Based Authentication with EAP. MS-CHAPv2 is configured on a client device.

Which outer method protocol must be configured on the ISE to support this authentication type?

EAP-TLS

EAP-FAST

LDAP

PEAP

9. What is a TLOC in a Cisco Catalyst SD-WAN deployment?

component set by the administrator to differentiate similar nodes that offer a common service

value that identifies a specific tunnel within the Cisco Catalyst SD-WAN overlay

identifier that represents a specific service offered by nodes within the Cisco Catalyst SD-WAN overlay

attribute that acts as a next hop for network prefixes

10. SIMULATION 5:

Page 2 of 8

11. How does SSO work with HSRP to minimize network disruptions?

It enables HSRP to elect another switch in the group as the active HSRP switch.

It ensures fast failover in the case of link failure.

It enables data forwarding along known routes following a switchover, white the routing protocol reconverges.

It enables HSRP to failover to the standby RP on the same device.

12. DRAG DROP

Drag anti drop the characteristics from the ten onto the configuration models on the right.

13. SIMULATION 18:

14. Refer to the exhibit.

Which configuration causes the traffic from PC-1 to the internet to use the link between CoreSW-1 and CoreSW-2 when both switches are up?

A)

Option A

Option B

Option C

Option D

15. What is an advantage of utilizing data models in a multivendor environment?

facilitating a unified approach to configuration and management

improving communication security with binary-encoded protocols

lowering CPU load incurred to managed devices

removing the distinction between configuration and runtime state data

16. Refer to the exhibit.

What is the output of this code?

Option A

Option B

Option C

Option D

17. DRAG DROP

Drag and drop the REST API authentication methods from the left onto their descriptions on the right.

18. Why are stateless calls executed by REST API useful in cloud applications?

They use HTTPS to implement all calls.

They control URL decoding.

They are easy to redeploy and to scale.

They rely on data stored on the server for calls.

19. Refer to the exhibit.

Running the script causes the output in the exhibit.

What should be the first line of the script?

import manager

ncclient manager import

from ncclient import *

from ncclient import manager

20. Refer to the exhibit.

A customer reports that many wireless clients cannot reliably receive multicast audio.

Which action resolves this issue?

Set the 24 Mbps and 54 Mbps data rates to Supported.

Set the RSSI Threshold to -67dBm.

Set the Fragmentation Threshold to 1250 bytes

Disable RSSI Low Check.

Page 3 of 8

21. SIMULATION 12:

22. Which language defines the structure or modelling of data for NETCONF and RESTCONF?

JSON

YANG

XML

YAML

23. Which protocol is used by vmanage to push centralized policies to vsmart controllers?

NETCONF

TLS

STUN

OMP

24. Which data is properly formatted with JSON?

A)

Option A

Option B

Option C

Option D

25. Refer to the exhibit.

The IP SLA is configured in a router. An engineer must configure an EEM applet to shut down the interface and bring it back up when there is a problem with the IP SLA.

Which configuration should the engineer use?

event manager applet EEM_IP_SLA event track 10 state down

event manager applet EEM_IP_SLA event sla 10 state unreachable

event manager applet EEM_IP_SLA event sla 10 state down

event manager applet EEM_IP_SLA event track 10 state unreachable

26. What is provided by the Stealthwatch component of the Cisco Cyber Threat Defense solution?

real-time threat management to stop DDoS attacks to the core and access networks

malware control

real-time awareness of users, devices, and traffic on the network

dynamic threat control for web traffic

27. Which character formatting is required for DHCP Option 43 to function with current AP models?

ASCII

Hex

Base64

MD5

28. An engineer must create a new SSID on a Cisco 9800 wireless LAN controller. The client has asked to use a pre-shared key for authentication.

Which profile must the engineer edit to achieve this requirement?

WLAN

Policy

Flex

29. Which two components are needed when a Cisco SD-Access fabric is designed? (Choose two.)

Cisco Catalyst Center (formerly DNA Center) application

Firepower Threat Defense

Identity Service Engine

Cisco Data Center Network Manager

Cisco Prime Infrastructure

30. Which Cisco Catalyst SD-WAN component is responsible for distributing data plane traffic policies?

vBond

vManage

vSmart

WAN edge

Page 4 of 8

31. In a campus network design, what are two benefits of using BFD for failure detection'? (Choose two.)

BFD speeds up routing convergence time

BFD provides path failure detection in less than a second

BFD provides fault tolerance by enabling multiple routers to appear as a single virtual router

BFD is an efficient way to reduce memory and CPU usage

BFD enables network peers to continue forwarding packets in the event of a restart

32. Refer to the exhibit.

Which action must be taken to configure a WLAN for WPA2-AES with PSK and allow only 802.11r-capable clients to connect?

Enable PSK and FT + PS

Enable Fast Transition and FT + PS

Enable Fast Transition and PS

Change Fast Transition to Adaptive Enabled and enable FT * PS

33. SIMULATION 19:

34. Which definition describes JWT in regard to REST API security?

an encrypted JSON token that is used for authentication

an encrypted JSON token that is used for authorization

an encoded JSON token that is used to securely exchange information

an encoded JSON token that is used for authentication

35. Refer to the exhibit.

An engineer must configure a Cisco WLC with WPA2 Enterprise mode and avoid global server lists.

Which action is required?

Enable EAP parameters.

Apply CISCO ISE default settings.

Disable the RADIUS server accounting interim update.

Select a RADIUS authentication server.

36. Which two mechanisms are used with OAuth 2.0 for enhanced validation? (Choose two.)

custom headers

authentication

authorization

request management

accounting

37. Which action reduces sticky clients in dense RF environments?

Decrease radio channel widths to 40 MHz.

Increase the mandatory minimum data rates.

Decrease the mandatory minimum data rates.

Increase radio channel widths to 160 MHz.

38. Which access control feature does MAB provide?

user access based on IP address B slows devices to bypass authentication

network access based on the physical address of a device

simultaneous user and device authentication

39. What is the API keys option for REST API authentication?

a credential that is transmitted unencrypted

one-time encrypted token

a username that is stored in the local router

a predetermined string that is passed from client to server.

40. Which DNS record type is needed to allow a Cisco AP to discover a WLC when using IPv4?

CNAME record

A record

NS record

SOA record

Page 5 of 8

41. Which technology collects location information through data packets received by the APs instead of using mobile device probes?

detect and locate

FastLocate

hyperlocation

RF fingerprinting

42. In a high-density AP environment, which feature can be used to reduce the RF cell size and not demodulate radio packets above a given threshold?

RX-SOP

FRA

80211k

RRM

43. DRAG DROP

Drag and drop the snippets onto the blanks within the code to create an EEM script that adds an entry to a locally stored text file with a timestamp when a configuration change is made. Not all options are used.

44. Which configuration enables a Cisco router lo send information to a TACACS+ server for individual EXEC commands associated with privilege level 15?

Router(config)# aaa accounting commands 15 default start-stop group tacacs+

Router(config)# aaa authorization exec default group tacacs+

Router(config)# aaa authorization commands 15 default group tacacs+

Router(config)# aaa accounting exec default start-stop group tacacs+

45. An engineer measures the Wi-Fi coverage at a customer site.

The RSSI values are recorded as follows:

• Location A: -72dBm

• Location B: -75 dBm

• Location C: -65 dBm

• Location D: -80 dBm

Which two statements does the engineer use to explain these values to the customer? (Choose two.)

The signal strength at location B is 10 dB better than location

The signal strength at location C is too weak to support web surfing

Location D has the strongest RF signal strength.

The RF signal strength at location B is 50% weaker than location

The RF signal strength at location C is 10 times stronger than location B

46. SIMULATION

47. A system must validate access rights to all its resources and must not rely on a cached permission matrix. If the access level to a given resource is revoked but is not reflected in the permission matrix,

the security is violates Which term refers to this REST security design principle?

economy of mechanism

complete mediation

separation of privilege

least common mechanism

48. Which framework is used for third-party authorization?

API keys

custom tokens

OAuth

SOAP

49. Which two operations are valid for RESTCONF? (Choose two)

PULL

ADD

HEAD

REMOVE

GET

PUSH

50. What is the function of an intermediate node in a Cisco SD-Access fabric?

to route packets within the fabric based on the Layer 3 information in the header

to provide an entry and exit point between the fabric and external resources

to encapsulate and de-encapsulate packets with a VXLAN header

to provide reachability between fabric clients and nonfabric clients on the same subnet

Page 6 of 8

51. SIMULATION 20:

52. Which task Is mandatory when provisioning a device through the plug-and-play workflow in Cisco DNA Center?

site assignment

slack serial number assignment

golden image upgrade

template configuration application

53. What is used to validate the authenticity of the client and is sent in HTTP requests as a JSON object?

SSH

TLS

HTTPS

JWT

54. When should the MAC authentication bypass feature be used on a switch port?

when authentication is required, but the attached host does not support 802.1X

when the attached host supports 802.1X and must authenticate itself based on its MAC address instead of user credentials

when authentication should be bypassed for select hosts based on their MAC address

when the attached host supports limited 802.1X

55. What is the calculation that is used to measure the radiated power of a signal after it has gone through the radio, antenna cable, and antenna?

EIRP

dBm

dBi

56. A response code of 404 is received while using the REST API on Cisco UNA Center to POST to this URI. /dna/intent/api/v1 /template-programmer/project

What does the code mean?

The client made a request a resource that does not exist.

The server has not implemented the functionality that is needed to fulfill the request.

The request accepted for processing, but the processing was not completed.

The POST/PUT request was fulfilled and a new resource was created, Information about the resource is in the response body.

57. Which location tracking method is used when locating client devices using Cisco hyperlocation?

angle of arrival

location patterning

TTL

line of sight

58. DRAG DROP

Drag and drop the automation characteristics from the left to the corresponding tools on the right.

59. Which two actions are recommended as security best practices to protect REST API? (Choose two.)

Use SSL for encryption.

Enable out-of-band authentication.

Enable dual authentication of the session.

Use TACACS+ authentication.

Use a password hash.

60. Which two functions is an edge node responsible for? (Choose two.)

provides multiple entry and exit points for fabric traffic

provides the default exit point for fabric traffic

provides the default entry point for fabric traffic

provides a host database that maps endpoint IDs to a current location

authenticates endpoints

Page 7 of 8

61. Which action controls the maximum cell size in a high-density wireless environment?

Statically set TX power on access points to max.

Disable low data rates.

Set mandatory data rates.

Decrease TX power on access points.

62. What are two characteristics of Cisco Catalyst SD-WAN? (Choose two.)

control plane operates over DTLS/TLS authenticated and secured tunnels

time-consuming configuration and maintenance

distributed control plane

unified data plane and control plane

centralized reachability, security, and application policies

63. An engineer must construct an access list for a Cisco Catalyst 9800 Series WLC that will redirect wireless guest users to a splash page that is hosted on a Cisco ISE server. The Cisco ISE servers are hosted at 10.9.11.141 and 10.1.11.141.

Which access list meets the requirements?

A)

Option A

Option B

Option C

Option D

64. What is required for a VXLAN tunnel endpoint to operate?

a VXLAN tunnel endpoint identifier

at least one Layer 2 interface and one Layer 3 interlace

at least one IP for the transit network and one IP for endpoint connectivity

a VXLAN network identifier

65. Which method requires a client to authenticate and has the capability to function without encryption?

open

WEP

WebAuth

PSK

66. Which statement describes the Cisco SD-Access plane functionality for fabric-enabled wireless?

Control plane traffic and data plane traffic are sent to the WLC through VXLA

The control plane traffic is sent to the WLC through CAPWAP tunnels, and the data plane traffic is sent from the AP to the fabric edge switch through VXLA

The control plane traffic is sent to the WLC through VXLAN, and the data plane traffic is sent to the WLC through CAPWAP tunnels.

Control plane traffic and data plane traffic are sent to the WLC through CAPWAP tunnels.

67. What is contained in the VXLAN header?

original Layer 2 VLAN ID

Endpoint ID

VXLAN network identifier

source and destination RLOC ID

68. What is a characteristics of a type 1 hypervisor?

It runs on top of the host operating system.

It is preferred for supporting nonproduction workloads.

It has greater latency than a Type 2 hypervisor.

It runs on top of bare metal servers.

69. Which method is used by an AP to join HA controllers and is configured in NVRAM?

Primary/Secondary- Tertiary/Backup

stored WLC information

DNS

IP Helper Addresses

70. Which solution supports end-to-end line-rate encryption between two sites?

TrustSec

MACsec

IPsec

GRE

Page 8 of 8

71. Which type of API enables Cisco Catalyst Center (formerly DNA Center) to focus on outcome instead of the individual steps that are required to achieve the outcome?

southbound Multivendor Support

westbound Integration

northbound Intent

eastbound Events and Notifications

72. Refer to the exhibit.

Which Python snippet stores the data structure of the device in JSON format?

A)

Option A

Option B

Option C

Option D

73. SIMULATION 24:

74. What does a next-generation firewall that is deployed at the data center protect against?

signature-based malware

DMZ web server vulnerabilities

zero-day attacks

DDoS

75. What is the function of the statement "import actions" in this script?

It imports the functions that are not available natively in Python

It imports the functions of a third-party module

It imports a Python module

It imports an external reference

76. What is a characteristic of omnidirectional antennas?

It includes dish antennas.

It has high gain.

It provides the most focused and narrow beamwidth.

It includes dipole antennas.

77. SIMULATION

78. DRAG DROP

Drag and drop the automation characteristics from the left onto the corresponding tools on the right.

Not all options are used.

TAGS:

350-401, 350-401 exam dumps

Notify of

Label

Name*

Email*

Website

Label

Name*

Email*

Website

0 Comments

Oldest

Newest Most Voted

Inline Feedbacks

View all comments

Get 350-401 Dumps Full Version

Q&As: 258
Versions: PDF and Software Download Now

About Dumpsinfo

Dumpsinfo is a good platform providing the latest exam information and dumps questions for all IT certification exams. You can study all the latest exam dumps questions online.

[email protected]

Mon - Sat 9:00am - 6:00pm

Cisco 350-401 Exam Questions Simulate Actual 350-401 Exam

Related

Posts

800-150 Dumps Guarantee You Pass 800-150 Exam Easily

Advance Your Career by Using Online 300-220 Dumps

Study Online 500-650 Exam Dumps to Pass

Get Certified Easily with Online 700-841 Dumps

About Us

EMAIL

Services

Opening Hours