350-401 | Renew 350-401 Guidance 2021

NEW QUESTION 1
Which feature does Cisco TrustSec use to provide scalable, secure communication throughout a network?

• A. security group tag ACL assigned to each port on a switch
• B. security group tag number assigned to each port on a network
• C. security group tag number assigned to each user on a switch
• D. security group tag ACL assigned to each router on a network

Answer: B

NEW QUESTION 2
Refer to the exhibit.

What is the JSON syntax that is formed the data?

• A. Name: Bob, Johson, Age: 75, Alive: true, Favourite Food
• B. [Cereal, ''Mustard'', ''Onions}}
• C. Name'', ''Bob'' Johson'', ''Age'', 75, ''Alive'', true, ''favourite Foods'', [''Cereal, ''Mustard'', Onions''}}
• D. Name', 'Bob Johson,' 'Age', 75, 'Alive', true, 'favourite Foods' 'Cereal’, ’Mustard', 'Onions'}
• E. Name''. ''Bob Johson'', ''Age'': Seventyfive, ''Alive'' true, ''favourite Foods'' ,[Cereal'' ''Mustard'' ''Onions''}}

Answer: C

NEW QUESTION 3
Which two pieces of information are necessary to compute SNR? (Choose two.)

• A. EIRP
• B. noise floor
• C. antenna gain
• D. RSSI
• E. transmit power

Answer: BD

NEW QUESTION 4
An engineer is configuring local web authentication on a WLAN. The engineer chooses the Authentication radio button under the Layer 3 Security options for Web Policy. Which device presents the web authentication for the WLAN?

• A. ISE server
• B. local WLC
• C. RADIUS server
• D. anchor WLC

Answer: B

NEW QUESTION 5
Refer to the exhibit.

The WLC administrator sees that the controller to which a roaming client associates has Mobility Role Anchor configured under Clients > Detail. Which type of roaming is supported?

• A. Indirect
• B. Layer 3 intercontroller
• C. Layer 2 intercontroller
• D. Intracontroller

Answer: B

NEW QUESTION 6
At which Layer does Cisco DNA Center support REST controls?

• A. EEM applets or scripts
• B. Session layer
• C. YMAL output from responses to API calls
• D. Northbound APIs

Answer: D

NEW QUESTION 7
What is the difference between the enable password and the enable secret password when service password encryption is enable on an IOS device?

• A. The enable password is encrypted with a stronger encryption method.
• B. There is no difference and both passwords are encrypted identically.
• C. The enable password cannot be decrypted.
• D. The enable secret password is protected via stronger cryptography mechanisms.

Answer: D

NEW QUESTION 8
Refer to the exhibit.

Link1 is a copper connection and Link2 is a fiber connection. The fiber port must be the primary port for all forwarding. The output of the show spanning-tree command on SW2 shows that the fiber port is blocked by spanning tree. An engineer enters the spanning- tree port-priority 32 command on GO/1 on SW2, but the port remains blocked. Which command should be entered on the ports that are connected to Link2 to resolve the issue?

• A. Enter spanning-tree port-priority 32 on SW1.
• B. Enter spanning-tree port-priority 224 on SW1.
• C. Enter spanning-tree port-priority 4 on SW2.
• D. Enter spanning-tree port-priority 64 on SW2.

Answer: A

NEW QUESTION 9
Which statement about multicast RPs is true?

• A. RPs are required only when using protocol independent multicast dense mode.
• B. RPs are required for protocol independent multicast sparse mode and dense mode.
• C. By default, the RP is needed periodically to maintain sessions with sources and receivers
• D. By default, the RP is needed only to start new sessions with sources and receivers.

Answer: D

NEW QUESTION 10
What the role of a fusion in an SD-Access solution?

• A. provides connectivity to external networks
• B. acts as a DNS server
• C. performs route leaking between user-defined virtual networks and shared services
• D. provides additional forwarding capacity to the fabric

Answer: C

NEW QUESTION 11
Which description of an SD-Access wireless network infrastructure deployment is true?

• A. The access point is part of the fabric underlay.
• B. The WLC is part of the fabric underaly.
• C. The access point is part the fabirc overlay.
• D. The wireless client is part of the fabirc overlay.

Answer: C

NEW QUESTION 12
When using TLS for syslog, which configuration allows for secure and reliable transportation of messages to its default port?

• A. logging host 10.2.3.4 vrf mgmt transport tcp port 6514
• B. logging host 10.2.3.4 vrf mgmt transport udp port 6514
• C. logging host 10.2.3.4 vrf mgmt transport tcp port 514
• D. logging host 10.2.3.4 vrf mgmt transport udp port 514

Answer: A

NEW QUESTION 13
Which QoS component alters a packet to change the way that traffic is treated in the network?

• A. Marking
• B. Classification
• C. Shaping
• D. Policing

Answer: A

NEW QUESTION 14
Refer to this output. What is the logging severity level?
R1#Feb 14 37:15:12:429: %LINEPROTO-5-UPDOWN Line protocol on interface GigabitEthernet0/1. Change state to up

• A. Notification
• B. Alert
• C. Critical
• D. Emergency

Answer: A

NEW QUESTION 15
Which two protocols are used with YANG data models? (Choose two.)

• A. HTTPS
• B. SSH
• C. RESTCONF
• D. TLS
• E. NFTCONF

Answer: CE

NEW QUESTION 16
Which statements are used for error handling in Python?

• A. try/catch
• B. try/except
• C. block/rescue
• D. catch/release

Answer: B

NEW QUESTION 17
Refer to the exhibit.

Which statement about the OPSF debug output is true?

• A. The output displays all OSPF messages which router R1 has sent to received on interface Fa0/1.
• B. The output displays all OSPF messages which router R1 has sent or received on all interfaces.
• C. The output displays OSPF hello messages which router R1 has sent received on interface Fa0/1.
• D. The output displays OSPF hello and LSACK messages which router R1 has sent or received.

Answer: C

NEW QUESTION 18
A client with IP address 209 16b 201 2b must access a web server on port 80 at 209 I6b.200.22b. To allow this traffic. an engineer must add a statement to an access control list that is applied in the inbound direction on the port connecting to the web server Which statement allows this traffic?

• A. permit tcp host 209 165 200 225 eq 80 host 209.165.201.25
• B. permit tcp host 209 165.201 25 host 209.165.200.225 eq 80
• C. permit tcp host 209.165.200 225 It 80 host 209.165.201.25
• D. permit tcp host 209.165.200.225 host 209.165.201.25 eq 80

Answer: B

NEW QUESTION 19
Refer to the exhibit.

Assuming that R is a CE router, which VRF is assigned to Gi0/0 on R1?

• A. VRF VPN_B
• B. Default VRF
• C. Management VRF
• D. VRF VPN_A

Answer: D

NEW QUESTION 20
Which PAgP mode combination prevents an Etherchannel from forming?

• A. auto/auto
• B. desirable/desirable
• C. auto/desirable
• D. desirable

Answer: A

NEW QUESTION 21
Which statement about Cisco EAP-FAST is true?

• A. It does not require a RADIUS server certificate.
• B. It requires a client certificate.
• C. It is an IETF standard.
• D. It operates in transparent mode.

Answer: A

NEW QUESTION 22
What is the difference between a RIB and a FIB?

• A. The RIB is used to make IP source prefix-based switching decisions
• B. The FIB is where all IP routing information is stored
• C. The RIB maintains a mirror image of the FIB
• D. The FIB is populated based on RIB content

Answer: D

NEW QUESTION 23
Which technology provides a secure communication channel for all traffic at Layer 2 of the OSI model?

• A. MACsec
• B. IPsec
• C. SSL
• D. Cisco Trustsec

Answer: A

NEW QUESTION 24
If a VRRP master router fails, which router is selected as the new master router?

• A. router with the highest priority
• B. router with the highest loopback address
• C. router with the lowest loopback address
• D. router with the lowest priority

Answer: A

NEW QUESTION 25
......