Exit demo 350-401 CCNP ENCOR PDF format · free preview

Cisco 350-401 - Questions & Answers

Free preview · every answer includes a full explanation

Product page: https://prepkeys.com/350-401.html

Question 1
Multiple choice

Refer to the exhibit.

A network engineer must simplify the IPsec configuration by enabling IPsec over GRE using IPsec profiles.

Which two configuration changes accomplish this? (Choose two).

A.

Apply the crypto map to the tunnel interface and change the tunnel mode to tunnel mode ipsec ipv4.

B.

Create an IPsec profile, associate the transform-set. and apply the profile to the tunnel interface.

C.

Remove the crypto map and modify the ACL to allow traffic between 10.10.0.0/24 to 10.20.0.0/24.

D.

Remove all configuration related to crypto map from R1 and R2 and eliminate the ACL

E.

Create an IPsec profile, associate the transform-set ACL. and apply the profile to the tunnel interface

Question 2
Single choice

A company plans to implement intent-based networking in its campus infrastructure.

Which design facilitates a migration from a traditional campus design to a programmable fabric design?

A.

Layer 2 access

B.

three-tier

C.

two-tier

D.

routed access

Question 3
Multiple choice

A network engineer configures BGP between R1 and R2. Both routers use BGP peer group CORP and are set up to use MD5 authentication. This message is logged to the console of router R1:

`May 5 39:85:55.469: %TCP-6-BADAUTH` Invalid MD5 digest from 10.10.10.1 (29832) to 10.120.10.1 (179) tebleid -0

Which two configurations allow a peering session to form between R1 and R2? (Choose two.)

A.

R1(config-router)#neighbor 10.10.10.1 peer-group CORP
R1(config-router)#neighbor CORP password Cisco

B.

R2(config-router)#neighbor 10.120.10.1 peer-group CORP
R2(config-router)#neighbor CORP password Cisco

C.

R2(config-router)#neighbor 10.10.10.1 peer-group CORP
R2(config-router)#neighbor PEER password Cisco

D.

R1(config-router)#neighbor 10.120.10.1 peer-group CORP
R1(config-router)#neighbor CORP password Cisco

E.

R2(config-router)#neighbor 10.10.10.1 peer-group CORP
R2(config-router)#neighbor CORP password Cisco

Question 4
Single choice

An engineer has deployed a single Cisco 5520 WLC with a management IP address of 172.16.50.5/24. The engineer must register 50 new Cisco AIR-CAP2802I-E-K9 access points to the WLC using DHCP option 43. The access points are connected to a switch in VLAN 100 that uses the 172.16.100.0/24 subnet. The engineer has configured the DHCP scope on the switch as follows:

The access points are failing to join the wireless LAN controller.

Which action resolves the issue?

A.

configure option 43 Hex F104.AC10.3205

B.

configure option 43 Hex F104.CA10.3205

C.

configure dns-server 172.16.50.5

D.

configure dns-server 172.16.100.1

Question 5
Single choice

Which configuration restricts the amount of SSH that a router accepts 100 kbps?

A.

class-map match-all CoPP_SSH
match access-group name CoPP_SSH
!
Policy-map CoPP_SSH
class CoPP_SSH
police cir 100000
exceed-action drop
! ! !
Interface GigabitEthernet0/1
ip address 209.165.200.225 255.255.255.0
ip access-group CoPP_SSH out
duplex auto
speed auto
media-type rj45
service-policy input CoPP_SSH
!
ip access-list extended CoPP_SSH
permit tcp any any eq 22
!

B.

class-map match-all CoPP_SSH
match access-group name CoPP_SSH
!
Policy-map CoPP_SSH
class CoPP_SSH
police cir CoPP_SSH
exceed-action drop
!
Interface GigabitEthernet0/1
ip address 209.165.200.225 255.255.255.0
ip access-group ... out
duplex auto
speed auto
media-type rj45
service-policy input CoPP_SSH
!
Ip access-list extended CoPP_SSH
deny tcp any any eq 22
!

C.

class-map match-all CoPP_SSH
match access-group name CoPP_SSH
!
Policy-map CoPP_SSH
class CoPP_SSH
police cir 100000
exceed-action drop
!
Control-plane
service-policy input CoPP_SSH
!
Ip access-list extended CoPP_SSH
deny tcp any any eq 22
!

D.

class-map match-all CoPP_SSH
match access-group name CoPP_SSH
!
Policy-map CoPP_SSH
class CoPP_SSH
police cir 100000 exceed-action drop
!
Control-plane transit
service-policy input CoPP_SSH
!
Ip access-list extended CoPP_SSH
permit tcp any any eq 22
!

Question 6
Single choice

While configuring an IOS router for HSRP with a virtual IP of 10.1.1.1, an engineer sees this log message.

Jan 1 12:12:12.111 : %HSRP-4-DIFFVIP1: GigabitEthernet0/0 Grp 1 active routers virtual IP address 10.1.1.1 is different to the locally configured address 10.1.1.25

Which configuration change must the engineer make?

A.

Change the HSRP group configuration on the remote router to 1.

B.

Change the HSRP group configuration on the local router to 1.

C.

Change the HSRP virtual address on the remote router to 10.1.1.1.

D.

Change the HSRP virtual address on the local router to 10.1.1.1.

Question 7
Single choice

Wireless users report frequent disconnections from the wireless network. While troubleshooting, a network engineer finds that after the user is disconnected, the connection re-establishes automatically without any input required. The engineer also notices these message logs:

AP 'AP2' is down. Reason: Radio channel set. 6:54:04 PM AP 'AP4' is down. Reason: Radio channel set. 6:44:49 PM AP 'AP7' is down. Reason: Radio channel set.

6:34:32 PM Which action reduces the user impact?

A.

increase the AP heartbeat timeout

B.

increase BandSelect

C.

enable coverage hole detection

D.

increase the dynamic channel assignment interval

Question 8
Single choice

What is the data policy in a Cisco SD-WAN deployment?

A.

list of ordered statements that define node configurations and authentication used within the SD-WAN overlay

B.

Set of statements that defines how data is forwarded based on IP packet information and specific VPNs

C.

detailed database mapping several kinds of addresses with their corresponding location

D.

group of services tested to guarantee devices and links liveliness within the SD-WAN overlay

Question 9
Multiple choice

What are two benefits of YANG? (Choose two.)

A.

It enables multiple leaf statements to exist within a leaf list

B.

It collects statistical constraint analysis information.

C.

It enforces configuration constraints.

D.

It enforces configuration semantics.

E.

It enforces the use of a specific encoding format for NETCONF

Question 10
Single choice

A server running Linux is providing support for virtual machines along with DNS and DHCP services for a small business.

Which technology does this represent?

A.

container

B.

Type 1 hypervisor

C.

hardware pass-thru

D.

Type 2 hypervisor

Showing 10 of 1,524 questions · Unlock the full set