Cisco 350-401 Questions and Answers Guarantee you Oass the Test Easily
Share Latest 350-401 DUMP with 395 Questions and Answers
NEW QUESTION # 131
Refer to the exhibit.
An engineer must configure an ERSPAN session with the remote end of the session 10.10.0.1. Which commands must be added to complete the configuration?
- A.
- B.
- C.
- D.
Answer: C
Explanation:
In the context of configuring an ERSPAN session on Cisco devices, the correct commands to set up a session with a remote IP address involve specifying the source and destination for the ERSPAN data. The source is where the monitored traffic will be captured, and the destination is where this traffic will be sent for analysis.
Option C provides a complete set of commands that define an ERSPAN source session with a destination IP address:
* monitor session 1 type erspan-source: This command starts the configuration for an ERSPAN source session.
* monitor-session 1 source interface <interface-id>: This command specifies which interface to monitor.
* monitor-session 1 destination: This command sets up the destination for the monitored traffic.
* erspan-id <id> ip address <ip-address>: This part of the command specifies the unique ERSPAN ID and sets up the remote IP address to which monitored traffic should be sent.
These commands collectively create an ERSPAN session that captures traffic on a specified interface (or interfaces) and sends it to a remote analyzer at IP address 10.10.0.1.
NEW QUESTION # 132
Where is radio resource management performed in a cisco SD-access wireless solution?
- A. Cisco CMX
- B. control plane node
- C. wireless controller
- D. DNA Center
Answer: C
Explanation:
Fabric wireless controllers manage and control the fabric-mode APs using the same general model as the traditional local-mode controllers which offers the same operational advantages such as mobility control and radio resource management. A significant difference is that client traffic from wireless endpoints is not tunnelled from the APs to the wireless controller. Instead, communication from wireless clients is encapsulated in VXLAN by the fabric APs which build a tunnel to their first-hop fabric edge node. Wireless traffic it tunneled to the edge nodes as the edge nodes provide fabric services such as the Layer 3 Anycast Gateway, policy, and traffic enforcement.
https://www.cisco.com/c/en/us/td/docs/solutions/CVD/Campus/cisco-sda-design-guide.html
NEW QUESTION # 133
What is the function of vBond in a Cisco SDWAN deployment?
- A. initiating connections with SD-WAN routers automatically
- B. gathering telemetry data from SD-WAN routers
- C. onboarding of SDWAN routers into the SD-WAN overlay
- D. pushing of configuration toward SD-WAN routers
Answer: C
Explanation:
Orchestration plane (vBond) assists in securely onboarding the SD-WAN WAN Edge routers into the SD-WAN overlay.
References: https://www.cisco.com/c/dam/en/us/td/docs/solutions/CVD/SDWAN/sdwan-wan- edge-onboarding-deploy-guide-2020nov.pdf
NEW QUESTION # 134
Drag and drop the DHCP messages that are exchanged between a client and an AP into the order they are exchanged on the right.
Answer:
Explanation:
Explanation
NEW QUESTION # 135
Drag and drop the automation characteristics from the left onto the appropriate tools on the right. Not all options are used.
Answer:
Explanation:
Explanation:
NEW QUESTION # 136
Refer to the exhibit.
An engineer troubleshoots connectivity issues with an application. Testing is performed from the server gateway, and traffic with the DF bit set is dropped along the path after increasing packet size. Removing the DF bit setting at the gateway prevents the packets from being dropped. What is the cause of this issue?
- A. The remote router drops the traffic due to high CPU load
- B. PMTUD does not work due to ICMP Packet Too Big messages being dropped by an ACL
- C. There is a CoPP policy in place protecting the WAN router CPU from this type of traffic
- D. The server should not set the DF bit in any type of traffic that is sent toward the network
Answer: D
NEW QUESTION # 137
Which JSON script is properly formatted?
- A. Option A
- B. Option B
- C. Option D
- D. Option C
Answer: C
NEW QUESTION # 138
When a DNS host record is configured for a new Cisco AireOS WLC, which hostname must be added to allow APs to successfully discover the WLC?
- A. CAPWAP-CISCO-CONTROLLER
- B. CISCO-CAPWAP-CONTROLLER
- C. CONTROLLER-CAPWAP-CISCO
- D. CISCO-CONTROLLER-CAPWAP
Answer: B
Explanation:
For APs to discover a Cisco AireOS WLC, the DNS host record must include the hostname
'CISCO-CAPWAP-CONTROLLER'. This allows the APs to resolve the controller's IP address and establish a connection using the Control and Provisioning of Wireless Access Points (CAPWAP) protocol.
NEW QUESTION # 139
When does a Cisco StackWise primary switch lose its role?
- A. when a switch with a higher priority is added to the stack
- B. when the stack primary is reset
- C. when the priority value of a stack member is changed to a higher value
- D. when a stack member fails
Answer: A
Explanation:
In Cisco StackWise technology, the primary switch can lose its role as the active switch in the stack if a switch with a higher priority is introduced to the stack. The StackWise architecture is designed to allow switches to be stacked together to form a single switching unit. The primary switch is elected based on several factors, including the priority value assigned to each switch. The switch with the highest priority value becomes the primary switch. If a new switch is added to the stack with a higher priority value than the current primary switch, the new switch will take over as the primary switch after the stack is reloaded.
NEW QUESTION # 140
Which Python snippet shouldbeused to store the devices data structure in a JSON file?
- A.
- B.
- C.
- D.
Answer: D
Explanation:
The correct Python snippet to store the devices data structure in a JSON file is option C. This option uses the json.dump() method, which serializes devices (the data structure) into a JSON formatted stream to OutFile (which is the opened file for writing). The 'w' argument in open() function stands for write mode, which allows you to write to the file.
NEW QUESTION # 141
Refer to the exhibit.
How should the script be completed so that each device configuration is saved into a JSON-formatted file under the device name?
- A.
- B.
- C.
- D.
Answer: A
NEW QUESTION # 142
Refer to the exhibit.
An engineer must ensure that all traffic leaving AS 200 will choose Link 2 as the exit point. Assuming that all BGP neighbor relationships have been formed and that the attributes have not been changed on any of the routers, which configuration accomplish task?
- A. R4(config-router)nighbor 10.2.2.2 weight 200
- B. R3(config-router)bgp default local-preference 200
- C. R3(config-router)neighbor 10.1.1.1 weight 200
- D. R4(config-router)bgp default local-preference 200
Answer: D
Explanation:
Explanation
Local preference is an indication to the AS about which path has preference to exit the AS in order to reach a certain network. A path with a higher local preference is preferred. The default value for local preference is 100.
Unlike the weight attribute, which is only relevant to the local router, local preference is an attribute that routers exchange in the same AS. The local preference is set with the "bgp default local-preference value" command.
In this case, both R3 & R4 have exit links but R4 has higher local-preference so R4 will be chosen as the preferred exit point from AS 200.
NEW QUESTION # 143
Drag and drop the characteristics from the left onto the infrastructure deployment models they describe on the right.
Answer:
Explanation:
.
NEW QUESTION # 144
Drag and drop the descriptions from the left onto the routing protocol they describe on the right.
Answer:
Explanation:
Explanation:
NEW QUESTION # 145
What is a characteristic of MACsec?
- A. 802.1AE is bult between the host and switch using the MKA protocol using keys generated via the Diffie-Hellman algorithm (anonymous encryption mode)
- B. 802.1AE provides encryption and authentication services
- C. 802.1AE is negotiated using Cisco AnyConnect NAM and the SAP protocol
- D. 802.1AE is bult between the host and switch using the MKA protocol, which negotiates encryption keys based on the master session key from a successful 802.1X session
Answer: B
Explanation:
Explanation
MACsec, defined in 802.1AE, provides MAC-layer encryption over wired networks by using out-of-band methods for encryption keying. The MACsec Key Agreement (MKA) Protocol provides the required session keys and manages the required encryption keys. MKA and MACsec are implemented after successful authentication using the 802.1x Extensible Authentication Protocol (EAP-TLS) or Pre Shared Key (PSK) framework.
NEW QUESTION # 146
Which feature is offered by the Cisco Advanced Malware Protection for Endpoints solution?
- A. File Sandboxing
- B. DNS Protection
- C. NetFlow
- D. TrustSec
Answer: A
NEW QUESTION # 147
......
Dumps for Free 350-401 Practice Exam Questions: https://www.passtorrent.com/350-401-latest-torrent.html
PDF Dumps 2026 Exam Questions with Practice Test: https://drive.google.com/open?id=1dBXQY4oslMLwBHeHdKYRpab4RNTMg0n5