350-401 by Marlon

Download as pdf or txt
Download as pdf or txt
You are on page 1of 23

We recommend you to try the PREMIUM 350-401 Dumps From Exambible

https://www.exambible.com/350-401-exam/ (100 Q&As)

Cisco
Exam Questions 350-401
Implementing and Operating Cisco Enterprise Network Core Technologies

Your Partner of IT Exam visit - https://www.exambible.com


We recommend you to try the PREMIUM 350-401 Dumps From Exambible
https://www.exambible.com/350-401-exam/ (100 Q&As)

NEW QUESTION 1
A network is being migrated from IPV4 to IPV6 using a dual-stack approach. Network management is already 100% IPV6 enabled. In a dual-stack network with
two dual-stack NetFlow collections, how many flow exporters are needed per network device in the flexible NetFlow configuration?

A. 1
B. 2
C. 4
D. 8

Answer: B

NEW QUESTION 2
Refer to the exhibit.

An engineer must block all traffic from a router to its directly connected subnet 209.165.200.0/24. The engineer applies access control list EGRESS in the
outbound direction on the GigabitEthernet0/0 interface of the router However, the router can still ping hosts on the 209.165.200.0/24 subnet. Which

A. Mastered
B. Not Mastered

Answer: A

Explanation:
of this behavior is true?
A. Access control lists that are applied outbound to a router interface do not affect traffic that is sourced from the router.
B. Only standard access control lists can block traffic from a source IP address.
C. After an access control list is applied to an interface, that interface must be shut and no shut for the access control list to take effect.
D. The access control list must contain an explicit deny to block traffic from the router.
Answer: A

NEW QUESTION 3
Which two steps are required for a complete Cisco DNA Center upgrade? (Choose two.)

A. golden image selection


B. automation backup
C. proxy configuration
D. application updates
E. system update

Answer: DE

NEW QUESTION 4
Which statement about agent-based versus agentless configuration management tools is true?

A. Agentless tools require no messaging systems between master and slaves.


B. Agentless tools use proxy nodes to interface with slave nodes.
C. Agent-based tools do not require a high-level language interpreter such as Python or Ruby on slave nodes.
D. Agent-based tools do not require installation of additional software packages on the slave nodes.

Answer: D

NEW QUESTION 5
Which protocol does REST API rely on to secure the communication channel?

A. TCP
B. HTTPS
C. SSH
D. HTTP

Answer: B

NEW QUESTION 6
On which protocol or technology is the fabric data plane based in Cisco SD-Access fabric?

A. LISP

Your Partner of IT Exam visit - https://www.exambible.com


We recommend you to try the PREMIUM 350-401 Dumps From Exambible
https://www.exambible.com/350-401-exam/ (100 Q&As)

B. IS-IS
C. Cisco TrustSec
D. VXLAN

Answer: D

NEW QUESTION 7
Which PAgP mode combination prevents an Etherchannel from forming?

A. auto/auto
B. desirable/desirable
C. auto/desirable
D. desirable

Answer: A

NEW QUESTION 8
Which statement about Cisco Express Forwarding is true?

A. It uses a fast cache that is maintained in a router data plane.


B. maintains two tables in the data plane the FIB and adjacency table.
C. It makes forwarding decisions by a process that is scheduled through the IOS scheduler.
D. The CPU of a router becomes directly involved with packet-switching decisions.

Answer: B

NEW QUESTION 9
Which two mechanisms are available to secure NTP? (Choose two.)

A. IP prefix list-based
B. IPsec
C. TACACS-based authentication
D. IP access list-based
E. Encrypted authentication

Answer: DE

NEW QUESTION 10
Which statement explains why Type 1 hypervisor is considered more efficient than Type 2 hypervisor?

A. Type 1 hypervisor runs directly on the physical hardware of the host machine without relying on the underlying OS.
B. Type 1 hypervisor enables other operating systems to run on it.
C. Type 1 hypervisor relics on the existing OS of the host machine to access CPU, memory, storage, andnetwork resources.
D. Type 1 hypervisor is the only type of hypervisor that supports hardware acceleration techniques.

Answer: A

NEW QUESTION 10
Which statement about a fabric access point is true?

A. It is in local mode an must be connected directly to the fabric border node.


B. It is in FlexConnect mode and must be connected directly to the fabric border node.
C. It is in local mode an must connected directly to the fabric edge switch.
D. It is in FlexConnect mode and must be connected directly to the fabric edge switch.

Answer: C

NEW QUESTION 12
Drag and drop the characteristics from the left onto the correct infrastructure deployment types on the right.

Your Partner of IT Exam visit - https://www.exambible.com


We recommend you to try the PREMIUM 350-401 Dumps From Exambible
https://www.exambible.com/350-401-exam/ (100 Q&As)

A. Mastered
B. Not Mastered

Answer: A

Explanation:
On premise: customizable,specific requirements,resources Cloud: scale, built-in automated backup, strong stable internet

NEW QUESTION 17
Which OSPF networks types are compatible and allow communication through the two peering devices?

A. broadcast to nonbroadcast
B. point-to-multipoint to nonbroadcast
C. broadcast to point-to-point
D. point-to-multipoint to broadcast

Answer: B

NEW QUESTION 22
Which method does the enable secret password option use to encrypt device passwords?

A. AES
B. CHAP
C. PAP
D. MD5

Answer: D

NEW QUESTION 25
Refer to exhibit.

VLANs 50 and 60 exist on the trunk links between all switches All access ports on SW3 are configured for VLAN 50 and SW1 is the VTP server Which command
ensures that SW3 receives frames only from VLAN 50?

A. SW1 (config)#vtp pruning


B. SW3(config)#vtp mode transparent
C. SW2(config)=vtp pruning
D. SW1 (config >»vtp mode transparent

Answer: A

NEW QUESTION 27
What the role of a fusion in an SD-Access solution?

A. provides connectivity to external networks


B. acts as a DNS server
C. performs route leaking between user-defined virtual networks and shared services
D. provides additional forwarding capacity to the fabric

Answer: C

NEW QUESTION 31
Which DNS lookup does an access point perform when attempting CAPWAP discovery?

Your Partner of IT Exam visit - https://www.exambible.com


We recommend you to try the PREMIUM 350-401 Dumps From Exambible
https://www.exambible.com/350-401-exam/ (100 Q&As)

A. CISCO-DNA-CONTROLLER local
B. CAPWAP-CONTROLLER local
C. CISCO-CONTROLLER local
D. CISCO-CAPWAP-CONTROLLER local

Answer: D

NEW QUESTION 33
What is a benefit of data modeling languages like YANG?

A. They enable programmers to change or write their own application within the device operating system.
B. They create more secure and efficient SNMP OIDs.
C. They make the CLI simpler and more efficient.
D. They provide a standardized data structure, which results in configuration scalability and consistency.

Answer: D

NEW QUESTION 34
Which statement describes the IP and MAC allocation requirements for virtual machines on types 1 hypervisors?

A. Each virtual machine requires a unique IP and MAC addresses to be able to reach to other nodes.
B. Each virtual machine requires a unique IP address but shares the MAC address with the physical server
C. Each virtual machines requires a unique IP address but shares the MAC address with the address of the physical server.
D. Each virtual machine requires a unique MAC address but shares the IP address with the physical server.

Answer: A

NEW QUESTION 37
Which TCP setting is tuned to minimize the risk of fragmentation on a GRE/IP tunnel?

A. MTU
B. Window size
C. MRU
D. MSS

Answer: D

NEW QUESTION 41
Which standard access control entry permits from odd-numbered hosts in the 10.0.0.0/24 subnet?

A. Permit 10.0.0.0.0.0.0.1
B. Permit 10.0.0.1.0.0.0.0
C. Permit 10.0.0.1.0.0.0.254
D. Permit 10.0.0.0.255.255.255.254

Answer: C

NEW QUESTION 44
What do Cisco DNA southbound APIs provide?

A. Interface between the controller and the network devices


B. NETCONF API interface for orchestration communication
C. RESful API interface for orchestrator communication
D. Interface between the controller and the consumer

Answer: A

NEW QUESTION 45
Refer to the exhibit.

Your Partner of IT Exam visit - https://www.exambible.com


We recommend you to try the PREMIUM 350-401 Dumps From Exambible
https://www.exambible.com/350-401-exam/ (100 Q&As)

The WLC administrator sees that the controller to which a roaming client associates has Mobility Role Anchor configured under Clients > Detail. Which type of
roaming is supported?

A. Indirect
B. Layer 3 intercontroller
C. Layer 2 intercontroller
D. Intracontroller

Answer: B

NEW QUESTION 49
A customer has several small branches and wants to deploy a WI-FI solution with local management using CAPWAP. Which deployment model meets this
requirement?

A. Autonomous
B. Mobility Express
C. SD-Access wireless
D. Local mode

Answer: B

NEW QUESTION 52
Which action is the vSmart controller responsible for in an SD-WAN deployment?

A. onboard vEdge nodes into the SD-WAN fabric


B. distribute security information for tunnel establishment between vEdge routers
C. manage, maintain, and gather configuration and status for nodes within the SD-WAN fabric
D. gather telemetry data from vEdge routers

Answer: B

NEW QUESTION 53
Which feature must be configured to allow packet capture over Layer 3 infrastructure'?

A. VSPAN
B. IPSPAN
C. RSPAN
D. ERSPAN

Answer: D

NEW QUESTION 56
What is the difference between the enable password and the enable secret password when service password encryption is enable on an IOS device?

A. The enable password is encrypted with a stronger encryption method.


B. There is no difference and both passwords are encrypted identically.
C. The enable password cannot be decrypted.
D. The enable secret password is protected via stronger cryptography mechanisms.

Answer: D

NEW QUESTION 59
How does Cisco Trustsec enable more flexible access controls for dynamic networking environments and data centers?

A. uses flexible NetFlow


B. assigns a VLAN to the endpoint
C. classifies traffic based an the contextual identity of the endpoint rather than its IP address

Your Partner of IT Exam visit - https://www.exambible.com


We recommend you to try the PREMIUM 350-401 Dumps From Exambible
https://www.exambible.com/350-401-exam/ (100 Q&As)

D. classifies traffic based on advanced application recognition

Answer: C

NEW QUESTION 61
Refer to the exhibit.

Which configuration establishes EBGP neighborship between these two directly connected neighbors and exchanges the loopback network of the two routers
through BGP?
A)

B)

C)

D)

A. Option A
B. Option B
C. Option C
D. Option D

Answer: A

NEW QUESTION 65
Which two protocols are used with YANG data models? (Choose two.)

Your Partner of IT Exam visit - https://www.exambible.com


We recommend you to try the PREMIUM 350-401 Dumps From Exambible
https://www.exambible.com/350-401-exam/ (100 Q&As)

A. HTTPS
B. SSH
C. RESTCONF
D. TLS
E. NFTCONF

Answer: CE

NEW QUESTION 68
Refer to the exhibit.

An engineer must modify the access control list EGRESS to allow all IP traffic from subnet 10.1.10.0/24 to 10.1.2.0/24. The access control list is applied in the
outbound direction on router interface GigabitEthemet 0/1. Which configuration commands can the engineer use to allow this traffic without disrupting existing
traffic flows?
A)

B)

C)

D)

A. Option A
B. Option B
C. Option C
D. Option D

Answer: B

NEW QUESTION 73
Refer to the exhibit.

Your Partner of IT Exam visit - https://www.exambible.com


We recommend you to try the PREMIUM 350-401 Dumps From Exambible
https://www.exambible.com/350-401-exam/ (100 Q&As)

SwitchC connects HR and Sales to the Core switch However, business needs require that no traffic from the Finance VLAN traverse this switch Which command
meets this requirement?
A)

B)

C)

D)

A. Option A
B. Option B
C. Option C
D. Option D

Answer: D

NEW QUESTION 74

Your Partner of IT Exam visit - https://www.exambible.com


We recommend you to try the PREMIUM 350-401 Dumps From Exambible
https://www.exambible.com/350-401-exam/ (100 Q&As)

Refer to the exhibit.

Based on the configuration in this WLAN security setting, Which method can a client use to authenticate to the network?

A. text string
B. username and password
C. certificate
D. RADIUS token

Answer: A

NEW QUESTION 79
Which feature is supported by ElGRP but is not supported by OSPF?

A. route summarization
B. equal-cost load balancing
C. unequal-cost load balancing
D. route filtering

Answer: C

NEW QUESTION 83
What are two benefits of virtualizing the server with the use of VMs in data center environment? (Choose two.)

A. Increased security
B. reduced rack space, power, and cooling requirements
C. reduced IP and MAC address requirements
D. speedy deployment
E. smaller Layer 2 domain

Answer: BD

NEW QUESTION 87
Which requirement for an Ansible-managed node is true?

A. It must be a Linux server or a Cisco device.


B. It must have an SSH server running.
C. It must support ad hoc commands.
D. It must have an Ansible Tower installed.

Answer: A

NEW QUESTION 91
Which LISP device is responsible for publishing EID-to-RLOC mappings for a site?

A. ETR
B. MS
C. ITR
D. MR

Your Partner of IT Exam visit - https://www.exambible.com


We recommend you to try the PREMIUM 350-401 Dumps From Exambible
https://www.exambible.com/350-401-exam/ (100 Q&As)

Answer: A

NEW QUESTION 95
Refer to the exhibit.

Which HTTP JSON response does the python code output give?

A. NameError: name 'json' is not defined


B. KeyError 'kickstart_ver_str'
C. 7.61
D. 7.0(3)I7(4)

Answer: B

NEW QUESTION 97
What does this EEM applet event accomplish?
"event snmp oid 1.3.6.1.3.7.1.5.1.2.4.2.9 get-type next entry-op g entry-val 75 poll-interval 5"

A. It issues email when the value is greater than 75% for five polling cycles.
B. It reads an SNMP variable, and when the value exceeds 75% for live polling cycles.
C. It presents a SNMP variable that can be interrogated.
D. Upon the value reaching 75%, a SNMP event is generated and sent to the trap server.

Answer: B

NEW QUESTION 99
What are two common sources of interference for WI-FI networks? (Choose two.)

A. radar
B. LED lights
C. rogue AP
D. conventional oven
E. fire alarm

Answer: AC

NEW QUESTION 104


......

Your Partner of IT Exam visit - https://www.exambible.com


We recommend you to try the PREMIUM 350-401 Dumps From Exambible
https://www.exambible.com/350-401-exam/ (100 Q&As)

About Exambible

Your Partner of IT Exam

Found in 1998

Exambible is a company specialized on providing high quality IT exam practice study materials, especially Cisco CCNA, CCDA,
CCNP, CCIE, Checkpoint CCSE, CompTIA A+, Network+ certification practice exams and so on. We guarantee that the
candidates will not only pass any IT exam at the first attempt but also get profound understanding about the certificates they have
got. There are so many alike companies in this industry, however, Exambible has its unique advantages that other companies could
not achieve.

Our Advances

* 99.9% Uptime
All examinations will be up to date.
* 24/7 Quality Support
We will provide service round the clock.
* 100% Pass Rate
Our guarantee that you will pass the exam.
* Unique Gurantee
If you do not pass the exam at the first time, we will not only arrange FULL REFUND for you, but also provide you another
exam of your claim, ABSOLUTELY FREE!

Your Partner of IT Exam visit - https://www.exambible.com


We recommend you to try the PREMIUM 350-401 Dumps From Exambible
https://www.exambible.com/350-401-exam/ (100 Q&As)

NEW QUESTION 1
A network is being migrated from IPV4 to IPV6 using a dual-stack approach. Network management is already 100% IPV6 enabled. In a dual-stack network with
two dual-stack NetFlow collections, how many flow exporters are needed per network device in the flexible NetFlow configuration?

A. 1
B. 2
C. 4
D. 8

Answer: B

NEW QUESTION 2
Refer to the exhibit.

An engineer must block all traffic from a router to its directly connected subnet 209.165.200.0/24. The engineer applies access control list EGRESS in the
outbound direction on the GigabitEthernet0/0 interface of the router However, the router can still ping hosts on the 209.165.200.0/24 subnet. Which

A. Mastered
B. Not Mastered

Answer: A

Explanation:
of this behavior is true?
A. Access control lists that are applied outbound to a router interface do not affect traffic that is sourced from the router.
B. Only standard access control lists can block traffic from a source IP address.
C. After an access control list is applied to an interface, that interface must be shut and no shut for the access control list to take effect.
D. The access control list must contain an explicit deny to block traffic from the router.
Answer: A

NEW QUESTION 3
Which two steps are required for a complete Cisco DNA Center upgrade? (Choose two.)

A. golden image selection


B. automation backup
C. proxy configuration
D. application updates
E. system update

Answer: DE

NEW QUESTION 4
Which statement about agent-based versus agentless configuration management tools is true?

A. Agentless tools require no messaging systems between master and slaves.


B. Agentless tools use proxy nodes to interface with slave nodes.
C. Agent-based tools do not require a high-level language interpreter such as Python or Ruby on slave nodes.
D. Agent-based tools do not require installation of additional software packages on the slave nodes.

Answer: D

NEW QUESTION 5
Which protocol does REST API rely on to secure the communication channel?

A. TCP
B. HTTPS
C. SSH
D. HTTP

Answer: B

NEW QUESTION 6
On which protocol or technology is the fabric data plane based in Cisco SD-Access fabric?

A. LISP

Your Partner of IT Exam visit - https://www.exambible.com


We recommend you to try the PREMIUM 350-401 Dumps From Exambible
https://www.exambible.com/350-401-exam/ (100 Q&As)

B. IS-IS
C. Cisco TrustSec
D. VXLAN

Answer: D

NEW QUESTION 7
Which PAgP mode combination prevents an Etherchannel from forming?

A. auto/auto
B. desirable/desirable
C. auto/desirable
D. desirable

Answer: A

NEW QUESTION 8
Which statement about Cisco Express Forwarding is true?

A. It uses a fast cache that is maintained in a router data plane.


B. maintains two tables in the data plane the FIB and adjacency table.
C. It makes forwarding decisions by a process that is scheduled through the IOS scheduler.
D. The CPU of a router becomes directly involved with packet-switching decisions.

Answer: B

NEW QUESTION 9
Which two mechanisms are available to secure NTP? (Choose two.)

A. IP prefix list-based
B. IPsec
C. TACACS-based authentication
D. IP access list-based
E. Encrypted authentication

Answer: DE

NEW QUESTION 10
Which statement explains why Type 1 hypervisor is considered more efficient than Type 2 hypervisor?

A. Type 1 hypervisor runs directly on the physical hardware of the host machine without relying on the underlying OS.
B. Type 1 hypervisor enables other operating systems to run on it.
C. Type 1 hypervisor relics on the existing OS of the host machine to access CPU, memory, storage, andnetwork resources.
D. Type 1 hypervisor is the only type of hypervisor that supports hardware acceleration techniques.

Answer: A

NEW QUESTION 10
Which statement about a fabric access point is true?

A. It is in local mode an must be connected directly to the fabric border node.


B. It is in FlexConnect mode and must be connected directly to the fabric border node.
C. It is in local mode an must connected directly to the fabric edge switch.
D. It is in FlexConnect mode and must be connected directly to the fabric edge switch.

Answer: C

NEW QUESTION 12
Drag and drop the characteristics from the left onto the correct infrastructure deployment types on the right.

Your Partner of IT Exam visit - https://www.exambible.com


We recommend you to try the PREMIUM 350-401 Dumps From Exambible
https://www.exambible.com/350-401-exam/ (100 Q&As)

A. Mastered
B. Not Mastered

Answer: A

Explanation:
On premise: customizable,specific requirements,resources Cloud: scale, built-in automated backup, strong stable internet

NEW QUESTION 17
Which OSPF networks types are compatible and allow communication through the two peering devices?

A. broadcast to nonbroadcast
B. point-to-multipoint to nonbroadcast
C. broadcast to point-to-point
D. point-to-multipoint to broadcast

Answer: B

NEW QUESTION 22
Which method does the enable secret password option use to encrypt device passwords?

A. AES
B. CHAP
C. PAP
D. MD5

Answer: D

NEW QUESTION 25
Refer to exhibit.

VLANs 50 and 60 exist on the trunk links between all switches All access ports on SW3 are configured for VLAN 50 and SW1 is the VTP server Which command
ensures that SW3 receives frames only from VLAN 50?

A. SW1 (config)#vtp pruning


B. SW3(config)#vtp mode transparent
C. SW2(config)=vtp pruning
D. SW1 (config >»vtp mode transparent

Answer: A

NEW QUESTION 27
What the role of a fusion in an SD-Access solution?

A. provides connectivity to external networks


B. acts as a DNS server
C. performs route leaking between user-defined virtual networks and shared services
D. provides additional forwarding capacity to the fabric

Answer: C

NEW QUESTION 31
Which DNS lookup does an access point perform when attempting CAPWAP discovery?

Your Partner of IT Exam visit - https://www.exambible.com


We recommend you to try the PREMIUM 350-401 Dumps From Exambible
https://www.exambible.com/350-401-exam/ (100 Q&As)

A. CISCO-DNA-CONTROLLER local
B. CAPWAP-CONTROLLER local
C. CISCO-CONTROLLER local
D. CISCO-CAPWAP-CONTROLLER local

Answer: D

NEW QUESTION 33
What is a benefit of data modeling languages like YANG?

A. They enable programmers to change or write their own application within the device operating system.
B. They create more secure and efficient SNMP OIDs.
C. They make the CLI simpler and more efficient.
D. They provide a standardized data structure, which results in configuration scalability and consistency.

Answer: D

NEW QUESTION 34
Which statement describes the IP and MAC allocation requirements for virtual machines on types 1 hypervisors?

A. Each virtual machine requires a unique IP and MAC addresses to be able to reach to other nodes.
B. Each virtual machine requires a unique IP address but shares the MAC address with the physical server
C. Each virtual machines requires a unique IP address but shares the MAC address with the address of the physical server.
D. Each virtual machine requires a unique MAC address but shares the IP address with the physical server.

Answer: A

NEW QUESTION 37
Which TCP setting is tuned to minimize the risk of fragmentation on a GRE/IP tunnel?

A. MTU
B. Window size
C. MRU
D. MSS

Answer: D

NEW QUESTION 41
Which standard access control entry permits from odd-numbered hosts in the 10.0.0.0/24 subnet?

A. Permit 10.0.0.0.0.0.0.1
B. Permit 10.0.0.1.0.0.0.0
C. Permit 10.0.0.1.0.0.0.254
D. Permit 10.0.0.0.255.255.255.254

Answer: C

NEW QUESTION 44
What do Cisco DNA southbound APIs provide?

A. Interface between the controller and the network devices


B. NETCONF API interface for orchestration communication
C. RESful API interface for orchestrator communication
D. Interface between the controller and the consumer

Answer: A

NEW QUESTION 45
Refer to the exhibit.

Your Partner of IT Exam visit - https://www.exambible.com


We recommend you to try the PREMIUM 350-401 Dumps From Exambible
https://www.exambible.com/350-401-exam/ (100 Q&As)

The WLC administrator sees that the controller to which a roaming client associates has Mobility Role Anchor configured under Clients > Detail. Which type of
roaming is supported?

A. Indirect
B. Layer 3 intercontroller
C. Layer 2 intercontroller
D. Intracontroller

Answer: B

NEW QUESTION 49
A customer has several small branches and wants to deploy a WI-FI solution with local management using CAPWAP. Which deployment model meets this
requirement?

A. Autonomous
B. Mobility Express
C. SD-Access wireless
D. Local mode

Answer: B

NEW QUESTION 52
Which action is the vSmart controller responsible for in an SD-WAN deployment?

A. onboard vEdge nodes into the SD-WAN fabric


B. distribute security information for tunnel establishment between vEdge routers
C. manage, maintain, and gather configuration and status for nodes within the SD-WAN fabric
D. gather telemetry data from vEdge routers

Answer: B

NEW QUESTION 53
Which feature must be configured to allow packet capture over Layer 3 infrastructure'?

A. VSPAN
B. IPSPAN
C. RSPAN
D. ERSPAN

Answer: D

NEW QUESTION 56
What is the difference between the enable password and the enable secret password when service password encryption is enable on an IOS device?

A. The enable password is encrypted with a stronger encryption method.


B. There is no difference and both passwords are encrypted identically.
C. The enable password cannot be decrypted.
D. The enable secret password is protected via stronger cryptography mechanisms.

Answer: D

NEW QUESTION 59
How does Cisco Trustsec enable more flexible access controls for dynamic networking environments and data centers?

A. uses flexible NetFlow


B. assigns a VLAN to the endpoint
C. classifies traffic based an the contextual identity of the endpoint rather than its IP address

Your Partner of IT Exam visit - https://www.exambible.com


We recommend you to try the PREMIUM 350-401 Dumps From Exambible
https://www.exambible.com/350-401-exam/ (100 Q&As)

D. classifies traffic based on advanced application recognition

Answer: C

NEW QUESTION 61
Refer to the exhibit.

Which configuration establishes EBGP neighborship between these two directly connected neighbors and exchanges the loopback network of the two routers
through BGP?
A)

B)

C)

D)

A. Option A
B. Option B
C. Option C
D. Option D

Answer: A

NEW QUESTION 65
Which two protocols are used with YANG data models? (Choose two.)

Your Partner of IT Exam visit - https://www.exambible.com


We recommend you to try the PREMIUM 350-401 Dumps From Exambible
https://www.exambible.com/350-401-exam/ (100 Q&As)

A. HTTPS
B. SSH
C. RESTCONF
D. TLS
E. NFTCONF

Answer: CE

NEW QUESTION 68
Refer to the exhibit.

An engineer must modify the access control list EGRESS to allow all IP traffic from subnet 10.1.10.0/24 to 10.1.2.0/24. The access control list is applied in the
outbound direction on router interface GigabitEthemet 0/1. Which configuration commands can the engineer use to allow this traffic without disrupting existing
traffic flows?
A)

B)

C)

D)

A. Option A
B. Option B
C. Option C
D. Option D

Answer: B

NEW QUESTION 73
Refer to the exhibit.

Your Partner of IT Exam visit - https://www.exambible.com


We recommend you to try the PREMIUM 350-401 Dumps From Exambible
https://www.exambible.com/350-401-exam/ (100 Q&As)

SwitchC connects HR and Sales to the Core switch However, business needs require that no traffic from the Finance VLAN traverse this switch Which command
meets this requirement?
A)

B)

C)

D)

A. Option A
B. Option B
C. Option C
D. Option D

Answer: D

NEW QUESTION 74

Your Partner of IT Exam visit - https://www.exambible.com


We recommend you to try the PREMIUM 350-401 Dumps From Exambible
https://www.exambible.com/350-401-exam/ (100 Q&As)

Refer to the exhibit.

Based on the configuration in this WLAN security setting, Which method can a client use to authenticate to the network?

A. text string
B. username and password
C. certificate
D. RADIUS token

Answer: A

NEW QUESTION 79
Which feature is supported by ElGRP but is not supported by OSPF?

A. route summarization
B. equal-cost load balancing
C. unequal-cost load balancing
D. route filtering

Answer: C

NEW QUESTION 83
What are two benefits of virtualizing the server with the use of VMs in data center environment? (Choose two.)

A. Increased security
B. reduced rack space, power, and cooling requirements
C. reduced IP and MAC address requirements
D. speedy deployment
E. smaller Layer 2 domain

Answer: BD

NEW QUESTION 87
Which requirement for an Ansible-managed node is true?

A. It must be a Linux server or a Cisco device.


B. It must have an SSH server running.
C. It must support ad hoc commands.
D. It must have an Ansible Tower installed.

Answer: A

NEW QUESTION 91
Which LISP device is responsible for publishing EID-to-RLOC mappings for a site?

A. ETR
B. MS
C. ITR
D. MR

Your Partner of IT Exam visit - https://www.exambible.com


We recommend you to try the PREMIUM 350-401 Dumps From Exambible
https://www.exambible.com/350-401-exam/ (100 Q&As)

Answer: A

NEW QUESTION 95
Refer to the exhibit.

Which HTTP JSON response does the python code output give?

A. NameError: name 'json' is not defined


B. KeyError 'kickstart_ver_str'
C. 7.61
D. 7.0(3)I7(4)

Answer: B

NEW QUESTION 97
What does this EEM applet event accomplish?
"event snmp oid 1.3.6.1.3.7.1.5.1.2.4.2.9 get-type next entry-op g entry-val 75 poll-interval 5"

A. It issues email when the value is greater than 75% for five polling cycles.
B. It reads an SNMP variable, and when the value exceeds 75% for live polling cycles.
C. It presents a SNMP variable that can be interrogated.
D. Upon the value reaching 75%, a SNMP event is generated and sent to the trap server.

Answer: B

NEW QUESTION 99
What are two common sources of interference for WI-FI networks? (Choose two.)

A. radar
B. LED lights
C. rogue AP
D. conventional oven
E. fire alarm

Answer: AC

NEW QUESTION 104


......

Your Partner of IT Exam visit - https://www.exambible.com


We recommend you to try the PREMIUM 350-401 Dumps From Exambible
https://www.exambible.com/350-401-exam/ (100 Q&As)

Relate Links

100% Pass Your 350-401 Exam with Exambible Prep Materials

https://www.exambible.com/350-401-exam/

Contact us

We are proud of our high-quality customer service, which serves you around the clock 24/7.

Viste - https://www.exambible.com/

Your Partner of IT Exam visit - https://www.exambible.com


Powered by TCPDF (www.tcpdf.org)

You might also like