350-401 practice questions 1–10

1. Question 1 · 1003 in bank

   What is the difference between a RIB and a FIB?

   • AThe FIB is populated based on RIB content.
   • BThe RIB maintains a mirror image of the FIB.
   • CThe RIB is used to make IP source prefix-based switching decisions.
   • DThe FIB is where all IP routing information is stored.

   Show answer

   Answer: A

   Explanation

   The answer is A. https://tools.ietf.org/id/draft-ietf-i2rs-rib-info-model-17.html "Traditionally routers run routing protocols and the routing protocols (along with static configuration information) populate the Routing Information Base (RIB) of the router. The RIB is managed by the RIB manager and the RIB manager provides a northbound interface to its clients, i.e., the routing protocols, to insert routes into the RIB. The RIB manager consults the RIB and decides how to program the Forwarding Information Base (FIB) of the hardware by interfacing with the FIB manager."

   Source: Adapted from community discussion — edg

   References

   • Cisco documentation
   • Cisco documentation

   Next question

2. Question 2 · 1003 in bank

   Select 2

   What are two device roles in Cisco SD-Access fabric? (Choose two.)

   • Aedge node
   • BvBond controller
   • Caccess switch
   • Dcore switch
   • Eborder node

   Show answer

   Answer: AE

   Explanation

   A & E are correct Edge Node: is a device in the SD-Access fabric that connects endpoints to the fabric. It serves as the point of entry for user traffic into the fabric network. Border Node: Border Node: is responsible for connecting the SD-Access fabric to external networks. It handles traffic entering and leaving the fabric and manages inter-fabric connectivity.

   Source: Adapted from community discussion — [Removed]

   References

   • Cisco documentation

   Next question

3. Question 3 · 1003 in bank

   

   Refer to the exhibit. A network engineer configures a new GRE tunnel and enters the show run command. What does the output verify?

   • AThe tunnel keepalive is configured incorrectly because they must match on both sites.
   • BThe tunnel destination will be known via the tunnel interface.
   • CThe tunnel will be established and work as expected.
   • DThe default MTU of the tunnel interface is 1500 bytes.

   Show answer

   Answer: B

   Explanation

   I'm hoping to give a good answer to this to end the debate. The answer is B. Some have brought up the fact that the default route will have the preferred AD of 1. While this is true, it is forgetting the path selection order: 1: Prefer the most specific route - Longest Match 2: Prefer the lowest Administrative Distance - Most Trusted Routing Protocol 3: Prefer the lowest Metric - Shortest Calculated Distance/Cost In other words, while the default route is going to have an AD of 1, the more specific destination address is going to be learned from OSPF through the Tunnel. The Source Router is going to learn the more specific route and prefer it over the default route, causing the recursive routing error.

   Source: Adapted from community discussion — ArchBishop

   References

   • Cisco documentation

   Next question

4. Question 4 · 1003 in bank

   Which resource must the hypervisor make available to the virtual machines?

   • Abandwidth
   • BIP address
   • Cprocessor
   • Dsecure access

   Show answer

   Answer: C

   Next question

5. Question 5 · 1003 in bank

   Select 2

   Which two items are found in YANG data models? (Choose two.)

   • AHTTP return codes
   • Brpc statements
   • CJSON schema
   • Dcontainer statements
   • EXML schema

   Show answer

   Answer: BD

   Explanation

   B and D are correct rpc statements: YANG data models include rpc (Remote Procedure Call) statements. These statements define operations that can be invoked remotely on network devices. RPCs allow clients to request specific actions or services from the device, such as configuration changes or data retrieval. container statements: YANG models use container statements to define hierarchical structures. Containers group related data nodes together, creating a structured representation of the data. They help organize data elements within the model.

   Source: Adapted from community discussion — [Removed]

   Next question

6. Question 6 · 1003 in bank

   The Radio Resource Management software that is embedded in the Cisco WLC acts as a manager to constantly monitor over-the-air metrics. Which other factor does the Radio Resource Management software detect?

   • Apresence of rogue APs or malicious SSIDs
   • Bunauthorized wireless network access
   • Crepeated attempts to authenticate to a wireless network
   • Dend-node vulnerabilities

   Show answer

   Answer: A

   Explanation

   A is right , from cisco Detection - A Radio Resource Management (RRM) scan is used to detect the presence of rogue devices. https://www.cisco.com/c/en/us/support/docs/wireless/4400-series-wireless-lan-controllers/112045-handling-rogue-cuwn-00.html

   Source: Adapted from community discussion — shefo1

   References

   • Cisco documentation

   Next question

7. Question 7 · 1003 in bank

   An engineer must configure HSRP for VLAN 1200 on SW1. The second switch is configured by using the last usable IP address in the network as the virtual IP. Which command set accomplishes this task?

   • ASW1(config)# interface vlan 1200 SW1(config-if)# ip address 172.12.0.254 255.255.255.0 SW1(config-if)# standby version 2 SW1(config-if)# standby 1200 ip 172.12.0.2 SW1(conflg-it)# standby 1200 preempt
   • BSW1(config)# interface vlan 1200 SW1(config-if)# ip address 172.12.0.2 255.255.255.0 SW1(config-if)# standby version 2 SW1(config-if)# standby 1200 ip 172.12.0.254 SW1(conflg-it)# standby 1200 preempt
   • CSW1(config)# interface vlan 1200 SW1(config-if)# ip address 172.12.0.2 255.255.255.0 SW1(config-if)# standby 1200 ip 172.12.0.254 SW1(config-if)# standby 1200 timers 5 15 SW1(conflg-it)# standby 1200 preempt
   • DSW1(config)# interface vlan 1200 SW1(config-if)# ip address 172.12.0.1 255.255.255.0 SW1(config-if)# standby 1200 ip 172.12.0.254 SW1(config-if)# standby 1200 timers 5 15 SW1(conflg-it)# standby 1200 preempt

   Show answer

   Answer: B

   Explanation

   because we use the group number 1200 , we must configure HSRP version 2 , if we dont do that , we receive this error : Switch(config-if)#standby 1200 ip 172.12.0.254 PT ERROR: HSRP version 2 is required for specified group number -- so the option C and D is wrong -- and A is wrong because he doesn't use last usable IP address for virtual IP

   Source: Adapted from community discussion — shefo1

   Next question

8. Question 8 · 1003 in bank

   Which action occurs during a Layer 3 roam?

   • AThe client receives a new IP address after authentication occurs.
   • BThe client is marked as "Foreign" on the original controller.
   • CThe client database entry is moved from the old controller to the new controller.
   • DClient traffic is tunneled back to the original controller after a Layer 3 roam occurs.

   Show answer

   Answer: D

   Explanation

   maybe D is right because , from cisco Layer 3 roaming is similar to Layer 2 roaming in that the controllers exchange mobility messages on the client roam. However, instead of moving the client database entry to the new controller, the original controller marks the client with an “Anchor” entry in its own client database. The database entry is copied to the new controller client database and marked with a “Foreign” entry in the new controller. The roam remains transparent to the wireless client, and the client maintains its original IP address. https://www.cisco.com/c/en/us/td/docs/wireless/controller/8-5/config-guide/b_cg85/overview.html

   Source: Adapted from community discussion — shefo1

   References

   • Cisco documentation

   Next question

9. Question 9 · 1003 in bank

   Select 2

   What are two benefits of using Cisco TrustSec? (Choose two.)

   • Aconsistent network segmentation
   • Bend-to-end traffic encryption
   • Cadvanced endpoint protection against malware
   • Dsimplified management of network access
   • Eunknown file analysis using sandboxing

   Show answer

   Answer: AD

   Explanation

   A. Consistent network segmentation - TrustSec provides a robust framework for implementing secure and consistent network segmentation based on identity and policy, rather than relying solely on traditional IP-centric methods. D. Simplified management of network access - By leveraging identity-based access control and simplified policy management, TrustSec makes it easier to manage network access rights, reducing complexity and enhancing security posture. Thus, options A and D are the correct answers, as they directly align with the primary functionalities of Cisco TrustSec.

   Source: Adapted from community discussion — kyoyoyo

   Next question

10. Question 10 · 1003 in bank

    Select 2

    

    Refer to the exhibit. An administrator must enable RESTCONF access to a router. Which two commands or command sets must be added to the existing configuration? (Choose two.)

    • Aaaa authentication login default local aaa authorization exec default local
    • Brestconf
    • Cline vty 0 15
    • Dnetconf-yang
    • Eusername restconf privilege 0

    Show answer

    Answer: AB

    References

    • Cisco documentation

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

350-401 practice, question 1. 1003 questions available.