[Aug-2021] Pass Cisco 350-401 Exam in First Attempt Guaranteed!

Full 350-401 Practice Test and 260 unique questions with explanations waiting just for you, get it now!

NEW QUESTION 125
Refer to Exhibit.

MTU has been configured on the underlying physical topology, and no MTU command has been configured on the tunnel interfaces. What happens when a 1500-byte IPv4 packet traverses the GRE tunnel from host X to host Y, assuming the DF bit is cleared?

• A. The packet is discarded on router B
• B. The packet is discarded on router A
• C. The packet arrives on router C fragmented.
• D. The packet arrives on router C without fragmentation.

Answer: C

Explanation:

 

NEW QUESTION 126
Refer to the exhibit.

Edge-01 is currently operational as the HSRP primary with priority 110. Which command on Edge-02 causes it to take over the forwarding role when Edge-01 is down?

• A. standby 10 timers
• B. standby 10 preempt
• C. standby 10 priority
• D. standby 10 track

Answer: C

 

NEW QUESTION 127
What is the difference between CEF and process switching?

• A. Process switching is faster than CEF.
• B. CEF processes packets that are too complex for process switching to manage.
• C. CEF uses the FIB and the adjacency table to make forwarding decisions, whereas process switching punts each packet.
• D. CEF is more CPU-intensive than process switching.

Answer: C

Explanation:
Explanation

 

NEW QUESTION 128
Which JSON syntax is valid?

• A. Option D
• B. Option C
• C. Option A
• D. Option B

Answer: B

Explanation:
Explanation
This JSON can be written as follows:
{
'switch': {
'name': 'dist1',
'interfaces': ['gig1', 'gig2', 'gig3']
}
}

 

NEW QUESTION 129

Company policy restricts VLAN 10 to be allowed only on SW1 and SW2. All other VLANs can be on all three switches. An administrator has noticed that VLAN 10 has propagated to SW3. Which configuration corrects the issue?
A)

B)

C)

D)

• A. Option D
• B. Option C
• C. Option A
• D. Option B

Answer: B

 

NEW QUESTION 130
Refer to the exhibit.

What is the effect of these commands on the BR and HQ tunnel interfaces?

• A. The keepalives are sent every 3 seconds and 5 retries
• B. The tunnel line protocol goes down when the keepalive counter reaches 5
• C. The tunnel line protocol goes down when the keepalive counter reaches 6
• D. The keepalives are sent every 5 seconds and 3 retries

Answer: D

 

NEW QUESTION 131
Which two statements about EIGRP load balancing are true? (Choose two)

• A. EIGRP supports 6 unequal-cost paths
• B. A path can be used for load balancing only if it is a feasible successor
• C. Cisco Express Forwarding is required to load-balance across interfaces
• D. EIGRP supports unequal-cost paths by default
• E. Any path in the EIGRP topology table can be used for unequal-cost load balancing

Answer: A,B

Explanation:
Explanation
EIGRP provides a mechanism to load balance over unequal cost paths (or called unequal cost load balancing) through the "variance" command. In other words, EIGRP will install all paths with metric < variance * best metric into the local routing table, provided that it meets the feasibility condition to prevent routing loop. The path that meets this requirement is called a feasible successor. If a path is not a feasible successor, it is not used in load balancing.
Note: The feasibility condition states that, the Advertised Distance (AD) of a route must be lower than the feasible distance of the current successor route.

 

NEW QUESTION 132
Refer to the exhibit.

Which privilege level is assigned to VTY users?

• A. 0
• B. 1
• C. 2
• D. 3

Answer: D

Explanation:
Explanation
Lines (CON, AUX, VTY) default to level 1 privileges.

 

NEW QUESTION 133
To increase total throughput and redundancy on the links between the wireless controller and switch, the customer enabled LAG on the wireless controller.
Which EtherChannel mode must be configured on the switch to allow the WLC to connect?

• A. On
• B. Passive
• C. Auto
• D. Active

Answer: A

Explanation:
Restrictions for Link Aggregation:
You can bundle all eight ports on a Cisco 5508 Controller into a single link.
Terminating on two different modules within a single Catalyst 6500 series switch provides redundancy and ensures that connectivity between the switch and the controller is maintained when one module fails. The controller's port 1 is connected to Gigabit interface 3/1, and the controller's port 2 is connected to Gigabit interface 2/1 on the Catalyst 6500 series switch. Both switch ports are assigned to the same channel group.
LAG requires the EtherChannel to be configured for 'mode on' on both the controller and the Catalyst switch.
Once the EtherChannel is configured as on at both ends of the link, the Catalyst switch should not be configured for either Link Aggregation Control Protocol (LACP) or Cisco proprietary Port Aggregation Protocol (PAgP) but be set unconditionally to LAG. Because no channel negotiation is done between the controller and the switch, the controller does not answer to negotiation frames and the LAG is not formed if a dynamic form of LAG is set on the switch. Additionally, LACP and PAgP are not supported on the controller.
If the recommended load-balancing method cannot be configured on the Catalyst switch, then configure the LAG connection as a single member link or disable LAG on the controller.
https://www.cisco.com/c/en/us/td/docs/wireless/controller/7-5/configuration- guide/b_cg75/b_cg75_chapter_0100010.html

 

NEW QUESTION 134
Refer to the exhibit.

A company requires that all wireless users authenticate using dynamic key generation. Which configuration must be applied?

• A. AP(config-if-ssid)# authentication dynamic wep wep_methods
• B. AP(config-if-ssid)# authentication open wep wep_methods
• C. AP(config-if-ssid)# authentication dynamic open wep_dynamic
• D. AP(config-if-ssid)# authentication open eap eap_methods

Answer: D

 

NEW QUESTION 135
An engineer must configure a ACL that permits packets which include an ACK In the TCP header. Which entry must be Included In the ACL?

• A. access-list 110 permit tcp any any eq 21 tcp-ack
• B. access-list 10 permit ip any any eq 21 tcp-ack
• C. access-list 110 permit tcp any any eq 21 established
• D. access-list 10 permit tcp any any eq 21 established

Answer: C

 

NEW QUESTION 136
Refer to the exhibit.

Which network script automation option or tool is used in the exhibit?

• A. Bash script
• B. EEM
• C. REST correct
• D. NETCONF
• E. Python

Answer: C

 

NEW QUESTION 137
Which method displays text directly into the active console with a synchronous EEM applet policy?

• A. event manager applet boom
  event syslog pattern 'UP'
  action 1.0 gets 'logging directly to console'
• B. event manager applet boom
  event syslog pattern 'UP'
  action 1.0 puts 'logging directly to console'
• C. event manager applet boom
  event syslog pattern 'UP'
  action 1.0 string 'logging directly to console'
• D. event manager applet boom
  event syslog pattern 'UP'
  action 1.0 syslog priority direct msg 'logging directly to console'

Answer: D

 

NEW QUESTION 138
Which statement about VXLAN is true?

• A. VXLAN uses TCP 35 the transport protocol over the physical data cento network
• B. VXLAN encapsulates a Layer 2 frame in an IP-UDP header, which allows Layer 2 adjacency across router boundaries.
• C. VXLAN extends the Layer 2 Segment ID field to 24-bits. which allows up to 4094 unique Layer 2 segments over the same network.
• D. VXLAN uses the Spanning Tree Protocol for loop prevention.

Answer: B

Explanation:
802.1Q VLAN identifier space is only 12 bits.
The VXLAN identifier space is 24 bits.
This doubling in size allows the VXLAN ID space to support 16 million Layer 2 segments -> Answer 'VXLAN extends the Layer 2 Segment ID field to 24-bits, which allows up to 4094 unique Layer 2 segments over the same network' is not correct.
VXLAN is a MAC-in-UDP encapsulation method that is used in order to extend a Layer 2 or Layer 3 overlay network over a Layer 3 infrastructure that already exists.
Reference: https://www.cisco.com/c/en/us/support/docs/lan-switching/vlan/212682-virtualextensible-lan-and-ethernet-virt.html

 

NEW QUESTION 139

Refer to the exhibit. Which command allows hosts that are connected to FastEthernet0/2 to access the Internet?

• A. ip nat inside source list 10 interface FastEthernet0/2 overload
• B. ip nat outside source list 10 interface FastEthernet0/2 overload
• C. ip nat inside source list 10 interface FastEthernet0/1 overload
• D. ip nat outside source static 209.165.200.225 10.10.10.0 overload

Answer: C

Explanation:
Explanation
The command ip nat inside source list 10 interface FastEthernet0/1 overload configures NAT to overload on the address that is assigned to the Fa0/1 interface.

 

NEW QUESTION 140
Which controller is the single plane of management for Cisco SD-WAN?

• A. vSmart
• B. vBond
• C. vEdge
• D. vManage

Answer: D

 

NEW QUESTION 141
......

Prepare for your Cisco certification with the updated ExamsTorrent 350-401 exam questions: https://drive.google.com/open?id=1mJ0LUMBrSIlldtn9dGlYVdUvQYfk8VjG

Get Latest 350-401 Dumps Exam Questions in here: https://www.examstorrent.com/350-401-exam-dumps-torrent.html