350-401 practice questions 171–180

1. Question 171 · 1003 in bank

   Select 2

   Which two descriptions of FlexConnect mode for Cisco APs are true? (Choose two.)

   • AAPs that operate in FlexConnect mode cannot detect rogue APs.
   • BWhen connected to the controller, FlexConnect APs can tunnel traffic back to the controller.
   • CFlexConnect mode is used when the APs are set up in a mesh environment and used to bridge between each other.
   • DFlexConnect mode is a feature that is designed to allow specified CAPWAP-enabled APs to exclude themselves from managing data traffic between clients and infrastructure.
   • EFlexConnect mode is a wireless solution for branch office and remote office deployments.

   Show answer

   Answer: BE

   Explanation

   FlexConnect is a wireless solution for branch office and remote office deployments. It enables customers to configure and control access points (AP) in a branch or remote office from the corporate office through a wide area network (WAN) link without deploying a controller in each office. The FlexConnect access points can switch client data traffic locally and perform client authentication locally when their connection to the controller is lost. When they are connected to the controller, they can also send traffic back to the controller. In the connected mode, the FlexConnect access point can also perform local authentication. https://www.cisco.com/c/en/us/td/docs/wireless/controller/8-5/config-guide/b_cg85/flexconnect.html

   Source: Adapted from community discussion — uhljeb

   References

   • Cisco documentation
   • Cisco documentation

   Next question

2. Question 172 · 1003 in bank

   

   Refer to the exhibit. How was spanning-tree configured on this interface?

   • ABy entering the command spanning-tree portfast trunk in the interface configuration mode.
   • BBy entering the command spanning-tree mst1 vlan 10,20,30,40 in the global configuration mode.
   • CBy entering the command spanning-tree portfast in the interface configuration mode.
   • DBy entering the command spanning-tree vlan 10,20,30,40 root primary in the interface configuration mode.

   Show answer

   Answer: A

   Explanation

   Provided answer is correct. Since there are multiple VLANs on the port, the port is in trunk mode. If you leave the trunk keyword (answer C), the following message is shown: %Portfast has been configured on GigabitEthernet0/10 but will only have effect when the interface is in a non-trunking mode.

   Source: Adapted from community discussion — zzmejce

   References

   • Cisco documentation

   Next question

3. Question 173 · 1003 in bank

   

   Refer to the exhibit. Rapid PVST+ is enabled on all switches. Which command set must be configured on Switch1 to achieve the following results on port fa0/1? ✑ When a device is connected, the port transitions immediately to a forwarding state. ✑ The interface should not send or receive BPDUs. ✑ If a BPDU is received, it continues operating normally.

   • ASwitch1(config)# spanning-tree portfast bpdufilter default Switch1(config)# interface f0/1 Switch1(config-if)# spanning-tree portfast
   • BSwitch1(config)# spanning-tree portfast bpduguard default Switch 1 (config)# interface f0/1 Switch1 (config-if)# spanning-tree portfast
   • CSwitch1(config)# interface f0/1 Switch1(config-if)# spanning-tree portfast
   • DSwitch1(config)# interface f0/1 Switch1(config-if)# spanning-tree portfast Switch1 (config-if)# spanning-tree bpduguard enable

   Show answer

   Answer: A

   Explanation

   BPDU filtering allows you to avoid transmitting BPDUs on PortFast-enabled ports that are connected to an end system. When you enable PortFast on the switch, spanning tree places ports in the forwarding state immediately, instead of going through the listening, learning, and forwarding states. By default, spanning tree sends BPDUs from all ports regardless of whether PortFast is enabled. BDPU filtering is on a per-switch basis; after you enable BPDU filtering, it applies to all PortFast-enabled ports on the switch.

   Source: Adapted from community discussion — Darude

   References

   • cisco.com documentation
   • Cisco documentation

   Next question

4. Question 174 · 1003 in bank

   Which QoS component alters a packet to change the way that traffic is treated in the network?

   • Apolicing
   • Bclassification
   • Cmarking
   • Dshaping

   Show answer

   Answer: C

   Explanation

   The QoS component that alters a packet to change the way that traffic is treated in the network is: C. **marking** ### Explanation: - **Marking**: This process modifies certain bits in the packet header (such as the DSCP or IP precedence bits) to indicate the priority level. This alteration ensures that network devices treat the packet according to its assigned priority. Other options like **policing**, **classification**, and **shaping** do not directly alter the packet to change its treatment in the network.

   Source: Adapted from community discussion — Rajnahsadk

   References

   • Cisco documentation

   Next question

5. Question 175 · 1003 in bank

   Select 2

   What are two considerations when using SSO as a network redundancy feature? (Choose two.)

   • Arequires synchronization between supervisors in order to guarantee continuous connectivity
   • Bthe multicast state is preserved during switchover
   • Cmust be combined with NSF to support uninterrupted Layer 3 operations
   • Dboth supervisors must be configured separately
   • Emust be combined with NSF to support uninterrupted Layer 2 operations

   Show answer

   Answer: AC

   Explanation

   I agree with A+C NSF Operation Cisco NSF always runs with SSO and provides redundancy for Layer 3 traffic. NSF works with SSO to minimize the amount of time that a network is unavailable to its users following a switchover. The main purpose of NSF is to continue forwarding IP packets following a supervisor engine switchover. https://www.cisco.com/en/US/docs/general/Test/dwerblo/broken_guide/nsfsso.html#wp1023627

   Source: Adapted from community discussion — Dudu84

   References

   • Cisco documentation
   • Cisco documentation
   • Cisco documentation

   Next question

6. Question 176 · 1003 in bank

   

   Refer to the exhibit. Which configuration change will force BR2 to reach 209.165.201.0/27 via BR1?

   • ASet the MED to 1 on PE2 toward BR2 outbound.
   • BSet the origin to igp on BR2 toward PE2 inbound.
   • CSet the weight attribute to 65,535 on BR1 toward PE1.
   • DSet the local preference to 150 on PE1 toward BR1 outbound.

   Show answer

   Answer: A

   Explanation

   No Answer is correct A) Med is not compered if As-Path is not the same or Always-compare-med is configured (nor is) B) would prefer the path BR2 -PE2 which is not the goal C) prefers the path only on BR1 local, does not change decision on BR2 D) you cant configure Local pref outbound to another AS

   Source: Adapted from community discussion — rettich

   References

   • Cisco documentation
   • Cisco documentation
   • cisco.com documentation
   • Cisco documentation

   Next question

7. Question 177 · 1003 in bank

   DRAG DROP - Drag and drop the characteristics from the left onto the protocols they apply to on the right. Select and Place:

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   

   Next question

8. Question 178 · 1003 in bank

   

   Refer to the exhibit. Which set of commands on router R1 allow deterministic translation of private hosts PC1, PC2, and PC3 to addresses in the public space?

   • ARouterR1(config)#int f0/0 RouterR1(config)#ip nat inside RouterR1(config)#exit RouterR1(config)#int f0/1 RouterR1(config)#ip nat outside RouterR1(config)#exit RouterR1(config)#access-list 1 10.10.10.0 0.0.0.255 RouterR1(config)#ip nat inside source list 1 interface f0/1 overload
   • BRouterR1(config)#int f0/0 RouterR1(config)#ip nat inside RouterR1(config)#exit RouterR1(config)#int f0/1 RouterR1(config)#ip nat outside RouterR1(config)#exit RouterR1(config)#access-list 1 10.10.10.0 0.0.0.255 RouterR1(config)#ip nat pool POOL 155.1.1.101 155.1.1.103 netmask 255.255.255.0 RouterR1(config)#ip nat inside source list 1 pool POOL
   • CRouterR1(config)#int f0/0 RouterR1(config)#ip nat inside RouterR1(config)#exit RouterR1(config)#int f0/1 RouterR1(config)#ip nat outside RouterR1(config)#exit RouterR1(config)#ip nat inside source static 10.10.10.101 155.1.1.101 RouterR1(config)#ip nat inside source static 10.10.10.102 155.1.1.102 RouterR1(config)#ip nat inside source static 10.10.10.103 155.1.1.103
   • DRouterR1(config)#int f0/0 RouterR1(config)#ip nat outside RouterR1(config)#exit RouterR1(config)#int f0/1 RouterR1(config)#ip nat inside RouterR1(config)#exit RouterR1(config)#ip nat inside source static 10.10.10.101 155.1.1.101 RouterR1(config)#ip nat inside source static 10.10.10.102 155.1.1.102 RouterR1(config)#ip nat inside source static 10.10.10.103 155.1.1.103

   Show answer

   Answer: C

   Explanation

   C. RouterR1(config)#int f0/0 RouterR1(config)#ip nat inside RouterR1(config)#exit RouterR1(config)#int f0/1 RouterR1(config)#ip nat outside RouterR1(config)#exit RouterR1(config)#ip nat inside source static 10.10.10.101 155.1.1.101 RouterR1(config)#ip nat inside source static 10.10.10.102 155.1.1.102 RouterR1(config)#ip nat inside source static 10.10.10.103 155.1.1.103 D. RouterR1(config)#int f0/0 RouterR1(config)#ip nat outside RouterR1(config)#exit RouterR1(config)#int f0/1 RouterR1(config)#ip nat inside RouterR1(config)#exit RouterR1(config)#ip nat inside source static 10.10.10.101 155.1.1.101 RouterR1(config)#ip nat inside source static 10.10.10.102 155.1.1.102 RouterR1(config)#ip nat inside source static 10.10.10.103 155.1.1.103

   Source: Adapted from community discussion — xziomal9

   Next question

9. Question 179 · 1003 in bank

   

   Refer to the exhibit. Communication between London and New York is down. Which command set must be applied to the NewYork switch to resolve the issue?

   • ANewYork(config)#no interface po1 NewYork(config)#interface range fa0/1-2 NewYork(config-if)#channel-group 1 mode negotiate NewYork(config-if)#end NewYork#
   • BNewYork(config)#no interface po1 NewYork(config)#interface range fa0/1-2 NewYork(config-if)#channel-group 1 mode on NewYork(config-if)#end NewYork#
   • CNewYork(config)#no interface po1 NewYork(config)#interface range fa0/1-2 NewYork(config-if)#channel-group 1 mode passive NewYork(config-if)#end NewYork#
   • DNewYork(config)#no interface po1 NewYork(config)#interface range fa0/1-2 NewYork(config-if)#channel-group 1 mode auto NewYork(config-if)#end NewYork#

   Show answer

   Answer: C

   Explanation

   ! interface Ethernet0/1 description to_e0/1_SW2 switchport trunk encapsulation dot1q switchport trunk allowed vlan 1-9,11-4094 switchport mode trunk duplex auto channel-group 2 mode passive !

   Source: Adapted from community discussion — nushadu

   Next question

10. Question 180 · 1003 in bank

    

    Refer to the exhibit. An engineer is configuring an EtherChannel between Switch1 and Switch2 and notices the console message on Switch2. Based on the output, which action resolves this issue?

    • AConfigure more member ports on Switch1.
    • BConfigure less member ports on Switch2.
    • CConfigure the same port channel interface number on both switches.
    • DConfigure the same EtherChannel protocol on both switches.

    Show answer

    Answer: D

    Explanation

    Protocol on Switch 2 is "-" which means it's been set to use "on", i.e. not LACP (active/passive) or PAgP (desirable/auto). In other words, it's not using the same etherchannel protocol.

    Source: Adapted from community discussion — ChristinaA

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

350-401 practice, question 171. 1003 questions available.