admin
There will be more people taking the exam in October. What is the real pass rate?
The latest update of the Cisco 350-401 exam dumps comes from Lead4pass to help you pass the exam 100%.
Here you can get free Cisco 350-401 exam practice questions online practice test. To get the complete Cisco 350-401 exam dumps, please visit https://www.leads4pass.com/350-401.html (PDF +VCE). You can choose PDF or VCE. Both modes can help you succeed Pass the exam.
Free Cisco 350-401 exam PDF in Google Drive
Share free Cisco 350-401 exam PDF from a part of Lead4pass 350-401 exam dumps:
https://drive.google.com/file/d/1hOF9mY0pqtb06XoEWOSSyBb5owyk8_hj/
Latest Updated Cisco 350-401 Online Practice Test
The latest Cisco 350-401 exam practice questions are from the dumps part of Lead4Pass 350-401,
and the answers to the questions will be announced at the end of the article
QUESTION 1
Which two results occur if Cisco DNA Center loses connectivity to devices in the SD-Access fabric? (Choose two )
A. All devices reload after detecting loss of connection to Cisco DNA Center
B. Already connected users are unaffected, but new users cannot connect
C. User connectivity is unaffected.
D. Cisco DNA Center is unable to collect monitoring data in Assurance.
E. Users lose connectivity
QUESTION 2
Refer to the exhibit.
You have just created a new VRF on PE3. You have enabled debug IP BGP vpnv4 unicast updates on PE1, and you can
see the route in the debug, but not in the BGP VPNv4 table. Which two statements are true? (Choose two)
A. After you configure route-target import 999:999 for a VRF on PE1, the route will be accepted
B. VPNv4 is not configured between PE1 and PE3
C. address-family ipv4 or is not configured on PE3
D. PE1 will reject the route due to automatic route filtering
E. After you configure route-target import 999:999 for a VRF on PE3, the route will be accepted
Because some PE routers might receive routing information they do not require, a basic requirement is to be able to
filter the MP-iBGP updates at the ingress to the PE router so that the router does not need to keep this information in
memory. The Automatic Route Filtering feature fulfills this filtering requirement. This feature is available by default on all PE routers, and no additional configuration is necessary to enable it. Its function is to filter automatically VPN-IPv4
routes that contain a route-target extended community that does not match any of the PE\’s configured VRFs. This effectively discards any unwanted VPN-IPv4 routes silently, thus reducing the amount of information that the PE has to store in memory -> Answer \’ PE1 will reject the route due to automatic route filtering\’ is correct.
Reference:
MPLS and VPN Architectures Book, Volume 1
The reason that PE1 dropped the route is there is no “route-target import 999:999” command on PE1 (so we see the
“DENIED due to the extended community not supported” in the debug) so we need to type this command to accept this route -> Answer \’ After you configure route-target import 999:999 for a VRF on PE1, the route will be accepted\’ is correct.
QUESTION 3
Refer to the exhibit. A network engineer must simplify the IPsec configuration by enabling IPsec over GRE using IPsec
profiles. Which two configuration changes accomplish this? (Choose two).
A. Apply the crypto map to the tunnel interface and change the tunnel mode to tunnel mode IPSec ipv4.
B. Create an IPsec profile, associate the transform-set. and apply the profile to the tunnel interface.
C. Remove the crypto map and modify the ACL to allow traffic between 10.10.0.0/24 to 10.20.0.0/24.
D. Remove all configuration related to crypto map from R1 and R2 and eliminate the ACL |>]
E. Create an IPsec profile, associate the transform-set ACL. and apply the profile to the tunnel interface
QUESTION 4
Which function does a fabric AP perform in a Cisco SD-Access deployment?
A. It updates wireless clients’ locations in the fabric
B. It connects wireless clients to the fabric.
C. It manages wireless clients’ membership information in the fabric
D. It configures security policies down to wireless clients in the fabric
QUESTION 5
Refer to the exhibit.
Assuming that R is a CE router, which VRF is assigned to Gi0/0 on R1?
A. VRF VPN_B
B. Default VRF
C. Management VRF
D. VRF VPN_A
There is nothing special with the configuration of Gi0/0 on R1. Only the Gi0/0 interface on R2 is assigned to VRF VPN_A. The default VRF here is similar to the global routing table concept in Cisco IOS
QUESTION 6
Which line must be added in the Python function to return the JSON object {“cat_9k”: “FXS193202SE”)?
A. Option A
B. Option B
C. Option C
D. Option D
QUESTION 7
What is the result when an active route processor fails in a design that combines NSF with SSO?
A. An NSF-aware device immediately updates the standby route processor RIB without churning the network
B. The standby route processor temporarily forwards packets until route convergence is complete
C. An NSF-capable device immediately updates the standby route processor RIB without churning the network
D. The standby route processor immediately takes control and forwards packets along known routes
QUESTION 8
Which IPv6 migration method relies on dynamic tunnels that use the 2002::/16 reserved address space?
A. GRE
B. 6RD
C. 6to4
D. ISATAP
6to4 tunnel is a technique which relies on reserved address space 2002::/16 (you must remember this range). These
tunnels determine the appropriate destination address by combining the IPv6 prefix with the globally unique destination 6to4 border router\’s IPv4 address, beginning with the 2002::/16 prefix, in this format: 2002:border-routerIPv4-address::/48 For example, if the border-router-IPv4-address is 64.101.64.1, the tunnel interface will have an IPv6 prefix of 2002:4065:4001:1::/64, where 4065:4001 is the hexadecimal equivalent of 64.101.64.1. This technique allows IPv6 sites to communicate with each other over the IPv4 network without explicit tunnel setup but we have to implement it on all routers on the path.
QUESTION 9
To increase total throughput and redundancy on the links between the wireless controller and switch, the customer
enabled LAG on the wireless controller. Which EtherChannel mode must be configured on the switch to allow the WLC
to connect?
A. Auto
B. Active
C. On
D. Passive
Link aggregation (LAG) is a partial implementation of the 802.3ad port aggregation standard. It bundles all of the
controller\’s distribution system ports into a single 802.3ad port channel. Restriction for Link aggregation:
- LAG requires the EtherChannel to be configured for ‘mode on’ on both the controller and the Catalyst switch. …
Reference: https://community.cisco.com/t5/wireless-mobility-documents/lag-link-aggregation/ta-p/3128669
QUESTION 10
Refer to the exhibit. What happens to access interfaces where VLAN 222 is assigned?
A. STP BPDU guard is enabled
B. A description “RSPAN” is added
C. They are placed into an inactive state
D. They cannot provide PoE
QUESTION 11
DRAG-DROP
Drag and drop the characteristics from the left onto the QoS components they describe on the right.
Select and Place:
Correct Answer:
Marking = applied on traffic to convey Information to a downstream device Classification = distinguish traffic types Trust = Permits traffic to pass through the device while retaining DSCP/COS values shaping = process used to buffer traffic that exceeds a predefined rate
QUESTION 12
An engineer has deployed a single Cisco 5520 WLC with a management IP address of 172.16.50.5/24. The engineer
must register 50 new Cisco AIR-CAP2802I-E-K9 access points to the WLC using DHCP option 43. The access points
are connected to a switch in VLAN 100 that uses the 172.16.100.0/24 subnet. The engineer has configured the DHCP
scope on the switch as follows:
The access points are failing to join the wireless LAN controller. Which action resolves the issue?
A. configure option 43 Hex F104.AC10.3205
B. configure option 43 Hex F104.CA10.3205
C. configure DNS-server 172.16.50.5
D. configure DNS-server 172.16.100.1
172.16.50.5 in hex is We will have the answer from this paragraph: “TLV values for the Option 43 suboption: Type +
Length + Value. Type is always the suboption code 0xf1. Length is the number of controller management IP addresses
times 4 in hex.
Value is the IP address of the controller listed sequentially in hex. For example, suppose there are two
controllers with management interface IP addresses, 192.168.10.5 and 192.168.10.20. The type is 0xf1. The length is 2*4 = 8 =
0x08. The IP addresses translates to c0a80a05 (192.168.10.5) and c0a80a14 (192.168.10.20). When the string is
assembled, it yields f108c0a80a05c0a80a14. The Cisco IOS IT Certification Guaranteed, The Easy Way! 81command
that is added to the DHCP scope is option 43 hex f108c0a80a05c0a80a14.”
Reference:
Click Therefore in this question, option 43 in hex should be “F104.AC10.3205 (the management IP address of 172.16.50.5 in hex is AC.10.32.05).
QUESTION 13
If a VRRP master router fails, which router is selected as the new master router?
A. router with the highest priority
B. router with the highest loopback address
C. router with the lowest loopback address
D. router with the lowest priority
QUESTION 14
A network engineer is configuring Flexible Netflow and enters these commands
Sampler Netflow1 Mode random one-out-of 100 Interface FastEthernet 1/0 Flow-sampler netflow1
Which are two results of implementing this feature instead of traditional Netflow? (Choose two.)
A. CPU and memory utilization are reduced.
B. Only the flows of top 100 talkers are exported
C. The data export flow is more secure.
D. The number of packets to be analyzed is reduced
E. The accuracy of the data to be analyzed is improved
QUESTION 15
Which statement about LISP encapsulation in an EIGRP OTP implementation is true?
A. LISP learns the next hop
B. OTP uses LISP encapsulation to obtain routes from neighbors
C. OTP uses LISP encapsulation for dynamic multipoint tunneling
D. OTP maintains the LISP control plane
The EIGRP Over the Top solution can be used to ensure connectivity between disparate EIGRP sites. This feature uses
EIGRP on the control plane and Locator ID Separation Protocol (LISP) encapsulation on the data plane to route traffic
across the underlying WAN architecture.
EIGRP is used to distribute routes between customer edge (CE) devices within
the network, and the traffic forwarded across the WAN architecture is LISP encapsulated. EIGRP OTP only uses LISP
for the data plane, EIGRP is still used for the control plane. Therefore we cannot say OTP uses LISP encapsulation for
dynamic multipoint tunneling as this requires encapsulating both data and control plane traffic -> Answer \’ OTP uses
LISP encapsulation for dynamic multipoint tunneling\’ is not correct.
In OTP, EIGRP serves as the replacement for LISP
control plane protocols (therefore EIGRP will learn the next hop, not LISP -> Answer \’ LISP learns the next hop\’ is not
correct). Instead of doing dynamic EID-to- RLOC mappings in native LISP-mapping services, EIGRP routers running
OTP over a service provider cloud create targeted sessions, use the IP addresses provided by the service provider as
RLOCs, and exchange routes as EIDs. Let\’s take an example:
If R1 and R2 ran OTP to each other, R1 would learn about the network 10.0.2.0/24 from R2 through EIGRP, treat the
prefix 10.0.2.0/24 as an EID prefix, and take the advertising next hop 198.51.100.62 as the RLOC for this EID-prefix.
Similarly, R2 would learn from R1 about the network 10.0.1.0/24 through EIGRP, treat the prefix 10.0.1.0/24 as an EID prefix, and take the advertising next hop 192.0.2.31 as the RLOC for this EID-prefix. On both routers, this information
would be used to populate the LISP mapping tables. Whenever a packet from 10.0.1.0/24 to 10.0.2.0/24 would arrive at
R1 would use its LISP mapping tables just like in ordinary LISP to discover that the packet has to be LISP
encapsulated and tunneled toward 198.51.100.62, and vice versa. The LISP data plane is reused in OTP and does not
change; however, the native LISP mapping and resolving mechanisms are replaced by EIGRP. Reference: CCIE
Routing and Switching V5.0 Official Cert Guide, Volume 1, Fifth Edition
Publish the answer：
| Q1 | Q2 | Q3 | Q4 | Q5 | Q6 | Q7 | Q8 | Q9 | Q10 | Q11 | Q12 | Q13 | Q14 | Q15 |
| CD | AD | AE | B | B | D | B | C | C | C | image | A | A | AD | C |
This is just a small test, and more questions are needed to pass the Cisco 350-401 exam. For the complete Cisco 350-401 exam dumps, please visit https://www.leads4pass.com/350-401.html (Total Questions: 569 Q&A).
ps. More free Cisco exam practice questions are available at Vcecert.com, which contains the complete Cisco series: CCNA, CCNP, CCDP, CyberOps Professional…
ps.
Share free Cisco 350-401 exam PDF from a part of Lead4pass 350-401 exam dumps:
https://drive.google.com/file/d/1hOF9mY0pqtb06XoEWOSSyBb5owyk8_hj/