350-401 practice questions 211–220

1. Question 211 · 1003 in bank

   

   Refer to the exhibit. What does the error message relay to the administrator who is trying to configure a Cisco IOS device?

   • AThe device received a valid NETCONF request and serviced it without error.
   • BThe NETCONF running datastore is currently locked.
   • CA NETCONF request was made for a data model that does not exist.
   • DA NETCONF message with valid content based on the YANG data models was made, but the request failed.

   Show answer

   Answer: C

   Explanation

   If a request is made for a data model that doesn’t exist on the Catalyst 3850 or a request is made for a leaf that is not implemented in a data model, the Server (Catalyst 3850) responds with an empty data response. This is expected behavior. https://www.cisco.com/c/en/us/support/docs/storage-networking/management/200933-YANG-NETCONF-Configuration-Validation.html

   Source: Adapted from community discussion — AliMo123

   References

   • Cisco documentation

   Next question

2. Question 212 · 1003 in bank

   Select 3

   Which three methods does Cisco DNA Center use to discover devices? (Choose three.)

   • ACDP
   • BSNMP
   • CLLDP
   • Dping
   • ENETCONF
   • Fa specified range of IP addresses

   Show answer

   Answer: ACF

   Explanation

   Answer A,C,F Discovery provides the following methods to add devices: Cisco Discovery Protocol (CDP) Link Layer Discovery Protocol (LLDP) IP address ranges https://www.cisco.com/c/dam/en_us/training-events/product-training/dnac-13/DNAC13_AddingDevicesByUsingDiscovery.pdf

   Source: Adapted from community discussion — Broekie

   References

   • Cisco documentation
   • Cisco documentation

   Next question

3. Question 213 · 1003 in bank

   Which statement about TLS is accurate when using RESTCONF to write configurations on network devices?

   • AIt is used for HTTP and HTTPS requests.
   • BIt requires certificates for authentication.
   • CIt is provided using NGINX acting as a proxy web server.
   • DIt is not supported on Cisco devices.

   Show answer

   Answer: C

   Explanation

   Correct option is C: “NGINX is an internal webserver that acts as a proxy webserver. It provides Transport Layer Security (TLS)-based HTTPS. RESTCONF request sent via HTTPS is first received by the NGINX proxy web serve,r and the request is transferred to the confd web server for further syntax/semantics check.”

   Source: Adapted from community discussion — craaazymi

   References

   • Cisco documentation
   • Cisco documentation
   • Cisco documentation

   Next question

4. Question 214 · 1003 in bank

   What do Cisco DNA southbound APIs provide?

   • Ainterface between the controller and the consumer
   • BRESTful API interface for orchestrator communication
   • Cinterface between the controller and the network devices
   • DNETCONF API interface for orchestrator communication

   Show answer

   Answer: C

   Explanation

   Southbound is primarily aimed at non-Cisco "thirdparty" devices! Northbound: Discovery and management of the network over REST API Southbound: SDK integration into the DNA Center via device packs to support multivendor environment Eastbound: Event / Notification Handler Westbound: Integration of reporting, analysis, service management

   Source: Adapted from community discussion — [Removed]

   Next question

5. Question 215 · 1003 in bank

   Which statement about an RSPAN session configuration is true?

   • AOnly one session can be configured at a time.
   • BA special VLAN type must be used as the RSPAN destination.
   • CA filter must be configured for RSPAN sessions.
   • DOnly incoming traffic can be monitored.

   Show answer

   Answer: B

   Explanation

   B is correct RSPAN allows you to monitor traffic from source ports distributed over multiple switches, which means that you can centralize your network capture devices. RSPAN works by mirroring the traffic from the source ports of an RSPAN session onto a VLAN that is dedicated for the RSPAN session.

   Source: Adapted from community discussion — Hamzaaa

   References

   • cisco.com documentation

   Next question

6. Question 216 · 1003 in bank

   Which feature must be configured to allow packet capture over Layer 3 infrastructure?

   • ARSPAN
   • BERSPAN
   • CVSPAN
   • DIPSPAN

   Show answer

   Answer: B

   Explanation

   Encapsulated remote SPAN (ERSPAN): encapsulated Remote SPAN (ERSPAN), as the name says, brings generic routing encapsulation (GRE) for all captured traffic and allows it to be extended across Layer 3 domains.

   Source: Adapted from community discussion — ea8le

   References

   • cisco.com documentation

   Next question

7. Question 217 · 1003 in bank

   Refer to the exhibit.

   

   What is the result when a technician adds the monitor session 1 destination remote vlan 223 command?

   • AThe RSPAN VLAN is replaced by VLAN 223.
   • BRSPAN traffic is sent to VLANs 222 and 223.
   • CAn error is flagged for configuring two destinations.
   • DRSPAN traffic is split between VLANs 222 and 223.

   Show answer

   Answer: A

   Explanation

   A is correct. This is the result in a lab. switch-1(config)#do sh run | s monitor monitor session 1 source interface Gi1/0/2 rx monitor session 1 source interface Gi1/0/1 tx monitor session 1 source interface Po14 monitor session 1 destination remote vlan 222 switch-1(config)#do sh monitor session 1 Session 1 --------- Type : Remote Source Session Source Ports : RX Only : Gi1/0/2 TX Only : Gi1/0/1 Both : Po14 Dest RSPAN VLAN : 222 switch-1(config)#monitor session 1 destination remote vlan 223 switch-1(config)#do sh run | s monitor monitor session 1 source interface Gi1/0/2 rx monitor session 1 source interface Gi1/0/1 tx monitor session 1 source interface Po14 monitor session 1 destination remote vlan 223 switch-1(config)#do sh monitor session 1 Session 1 --------- Type : Remote Source Session Source Ports : RX Only : Gi1/0/2 TX Only : Gi1/0/1 Both : Po14 Dest RSPAN VLAN : 223

   Source: Adapted from community discussion — jmaroto

   Next question

8. Question 218 · 1003 in bank

   

   Refer to the exhibit. An engineer configures monitoring on SW1 and enters the show command to verify operation. What does the output confirm?

   • ARSPAN session 1 is incompletely configured for monitoring.
   • BRSPAN session 1 monitors activity on VLAN 50 of a remote switch.
   • CSPAN session 2 monitors all traffic entering and exiting port FastEthernet 0/15.
   • DSPAN session 2 only monitors egress traffic exiting port FastEthernet 0/14.

   Show answer

   Answer: A

   Explanation

   SW1 has been configured with the following commands: SW1(config)#monitor session 1 source remote vlan 50 SW1(config)#monitor session 2 source interface fa0/14 SW1(config)#monitor session 2 destination interface fa0/15 The session 1 on SW1 was configured for Remote SPAN (RSPAN) while session 2 was configured for local SPAN. For RSPAN we need to configure the destination port to complete the configuration. Note: In fact we cannot create such a session like session 1 because if we only configure Source RSPAN VLAN 50 (with the command monitor session 1 source remote vlan 50) then we will receive a Type: Remote Source Session (not Remote Destination Session)

   Source: Adapted from community discussion — rafaelinho88

   Next question

9. Question 219 · 1003 in bank

   Select 2

   Which two network problems indicate a need to implement QoS in a campus network? (Choose two.)

   • Aport flapping
   • Bexcess jitter
   • Cmisrouted network packets
   • Dduplicate IP addresses
   • Ebandwidth-related packet loss

   Show answer

   Answer: BE

   Next question

10. Question 220 · 1003 in bank

    A network is being migrated from IPv4 to IPv6 using a dual-stack approach. Network management is already 100% IPv6 enabled. In a dual-stack network with two dual-stack NetFlow collectors, how many flow exporters are needed per network device in the flexible NetFlow configuration?

    • A1
    • B2
    • C4
    • D8

    Show answer

    Answer: B

    Explanation

    The answer is B : 2, but not because of IPv4 and IPV6. A dual-stack device is a device with network interfaces that can originate and understand both IPv4 and IPv6 packets. It is because each flow collector can only send to a single destination. In this question there are two NetFlow collectors... thus two destination. Thus the need for 2 flow exporters. Each flow exporter supports only one destination. If you want to export the data to multiple destinations, you must configure multiple flow exporters and assign them to the flow monitor. You can export to a destination using either an IPv4 or IPv6 address. https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/fnetflow/configuration/15-mt/fnf-15-mt-book/cfg-de-fnflow-exprts.html Look under the section "Configuring the Flow Exporter"

    Source: Adapted from community discussion — DJOHNR

    References

    • Cisco documentation

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

350-401 practice, question 211. 1003 questions available.