350-401 practice questions 221–230

1. Question 221 · 1003 in bank

   Select 2

   A network engineer is configuring Flexible NetFlow and enters these commands. sampler NetFlow1 mode random one-out-of 100 interface fastethernet 1/0 flow-sampler NetFlow1 What are two results of implementing this feature instead of traditional NetFlow? (Choose two.)

   • AOnly the flows of top 100 talkers are exported.
   • BCPU and memory utilization are reduced.
   • CThe number of packets to be analyzed are reduced.
   • DThe data export flow is more secure.
   • EThe accuracy of the data to be analyzed is improved.

   Show answer

   Answer: BC

   Explanation

   Flow sampling reduces the CPU overhead of analyzing traffic with Flexible NetFlow by reducing the number of packets that are analyzed. Flow samplers are used to reduce the load on the device that is running by limiting the number of packets that are selected for analysis. https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/fnetflow/configuration/15-mt/fnf-15-mt-book/use-fnflow-redce-cpu.pdf

   Source: Adapted from community discussion — SandyIndia

   References

   • Cisco documentation

   Next question

2. Question 222 · 1003 in bank

   

   Refer to the exhibit. An engineer must add the SNMP interface table to the NetFlow protocol flow records. Where should the SNMP table option be added?

   • Aunder the interface
   • Bunder the flow record
   • Cunder the flow monitor
   • Dunder the flow exporter

   Show answer

   Answer: D

   Explanation

   cisco_R2(config)#flow exporter test cisco_R2(config-flow-exporter)#option ? application-attributes Application Attributes Table Option application-table Application Table Option c3pl-class-table C3PL class cce-id table c3pl-policy-table C3PL policy cce-id table exporter-stats Exporter Statistics Option inspect-class-table Policy Firewall Class Table inspect-ext-event-table Policy Firewall Extended Event Table inspect-protocol-table Policy Firewall Protocol Table inspect-zonepair-table Policy Firewall Zone-pair Table interface-table Interface SNMP-index-to-name Table Option metadata-version-table Metadata Version Table Option sampler-table Export Sampler Option sub-application-table Sub Application Table Option vrf-table VRF ID-to-name Table Option cisco_R2(config-flow-exporter)#option

   Source: Adapted from community discussion — nushadu

   References

   • Cisco documentation
   • Cisco documentation

   Next question

3. Question 223 · 1003 in bank

   Select 2

   A network administrator is implementing a routing configuration change and enables routing debugs to track routing behavior during the change. The logging output on the terminal is interrupting the command typing process. Which two actions can the network administrator take to minimize the possibility of typing commands incorrectly? (Choose two.)

   • AConfigure the logging synchronous global configuration command.
   • BConfigure the logging synchronous command under the vty.
   • CIncrease the number of lines on the screen using the terminal length command.
   • DConfigure the logging delimiter feature.
   • EPress the TAB key to reprint the command in a new line.

   Show answer

   Answer: BE

   Explanation

   Definitely B and E. B is correct according to the doc at https://www.cisco.com/c/en/us/td/docs/ios/fundamentals/command/reference/cf_book/cf_l1.html logging synchronous To synchronize unsolicited messages and debug output with solicited Cisco IOS software output and prompts for a specific console port line, auxiliary port line, or vty, use the logging synchronous command in line configuration mode. To disable synchronization of unsolicited messages and debug output, use the no form of this command. logging synchronous [level severity-level | all] [limit number-of-lines]

   Source: Adapted from community discussion — nep1019

   References

   • Cisco documentation
   • Cisco documentation

   Next question

4. Question 224 · 1003 in bank

   When using TLS for syslog, which configuration allows for secure and reliable transportation of messages to its default port?

   • Alogging host 10.2.3.4 vrf mgmt transport tcp port 514
   • Blogging host 10.2.3.4 vrf mgmt transport udp port 514
   • Clogging host 10.2.3.4 vrf mgmt transport tcp port 6514
   • Dlogging host 10.2.3.4 vrf mgmt transport udp port 6514

   Show answer

   Answer: C

   Next question

5. Question 225 · 1003 in bank

   Refer to this output. R1# *Feb 14 37:09:53.129: %LINEPROTO-5-UPDOWN: Line protocol on Interface GigabitEthernet0/1, changed state to up What is the logging severity level?

   • Anotification
   • Bemergency
   • Ccritical
   • Dalert

   Show answer

   Answer: A

   Explanation

   0 —emergency: System unusable. 1 —alert: Immediate action needed. 2 —critical: Critical condition—default level. 3 —error: Error condition. 4 —warning: Warning condition. 5 —notification: Normal but significant condition. 6 —informational: Informational message only.

   Source: Adapted from community discussion — Hamzaaa

   References

   • cisco.com documentation
   • Cisco documentation

   Next question

6. Question 226 · 1003 in bank

   An engineer reviews a router's logs and discovers the following entry. What is the event's logging severity level? Router# *Jan 01 38:24:04.401: %LINK-3-UPDOWN: Interface GigabitEthernet0/1, changed state to up

   • Aerror
   • Bwarning
   • Cinformational
   • Dnotification

   Show answer

   Answer: A

   Explanation

   A. Error is correct. The Number in %LINK-3-UPDOWN indicates this is logging level 3: Number of the desired severity level at which messages should be logged. Messages at or numerically lower than the specified level are logged. Severity levels are as follows: 0 —emergency: System unusable 1 —alert: Immediate action needed 2 —critical: Critical condition—default level 3 —error: Error condition 4 —warning: Warning condition 5 —notification: Normal but significant condition 6 —informational: Informational message only 7 —debugging: Appears during debugging only https://www.cisco.com/c/m/en_us/techdoc/dc/reference/cli/nxos/commands/sm/logging-level.html

   Source: Adapted from community discussion — netplwiz

   References

   • Cisco documentation
   • cisco.com documentation

   Next question

7. Question 227 · 1003 in bank

   Refer to the exhibit.

   

   An engineer must configure a SPAN session. What is the effect of the configuration?

   • ATraffic received on VLANs 10, 11, and 12 is copied and sent to interface g0/1.
   • BTraffic sent on VLANs 10 and 12 only is copied and sent to interface g0/1.
   • CTraffic sent on VLANs 10, 11, and 12 is copied and sent to interface g0/1.
   • DTraffic received on VLANs 10 and 12 only is copied and sent to interface g0/1.

   Show answer

   Answer: A

   Explanation

   It has Rx in it, which means only the receiving traffic will be monitored; hence, option C is wrong. The command has a range of VLANs and hence options B and D are incorrect. A is the correct answer.

   Source: Adapted from community discussion — network_gig

   Next question

8. Question 228 · 1003 in bank

   Refer to the exhibit.

   

   These commands have been added to the configuration of a switch. Which command flags an error if it is added to this configuration?

   • Amonitor session 1 source interface port-channel 6
   • Bmonitor session 1 source vlan 10
   • Cmonitor session 1 source interface FastEthemet0/1 rx
   • Dmonitor session 1 source interface port-channel 7, port-channel 8

   Show answer

   Answer: B

   Explanation

   I labbed this on a switch, and it's answer B. Switch#sh run | i moni monitor session 1 source interface Gi0/2 rx monitor session 1 source interface Gi0/1 tx monitor session 1 source interface Po5 monitor session 1 destination remote vlan 222 Switch(config)#monitor session 1 source vlan 10 % Cannot add VLANs as sources for SPAN session 1 A range of addresses can be added (D), separated by a comma (,): Switch(config)#monitor session 1 source interface port-channel 5 ? , Specify another range of interfaces both Monitor received and transmitted traffic rx Monitor received traffic only tx Monitor transmitted traffic only

   Source: Adapted from community discussion — Mac13

   References

   • Cisco documentation
   • Cisco documentation
   • cisco.com documentation

   Next question

9. Question 229 · 1003 in bank

   Which method does Cisco DNA Center use to allow management of non-Cisco devices through southbound protocols?

   • AIt creates device packs through the use of an SDK.
   • BIt uses an API call to interrogate the devices and register the returned data.
   • CIt obtains MIBs from each vendor that details the APIs available.
   • DIt imports available APIs for the non-Cisco device in a CSV format.

   Show answer

   Answer: A

   Explanation

   Answer is correct, "Cisco DNA Center allows customers to manage their non-Cisco devices through the use of a Software Development Kit (SDK) that can be used to create Device Packages for third-party devices". https://developer.cisco.com/docs/dna-center/#!cisco-dna-center-platform-overview/multivendor-support-southbound

   Source: Adapted from community discussion — Miguex125

   References

   • cisco.com documentation
   • Cisco documentation

   Next question

10. Question 230 · 1003 in bank

    In a Cisco SD-Access wireless architecture, which device manages endpoint ID to edge node bindings?

    • Afabric control plane node
    • Bfabric wireless controller
    • Cfabric border node
    • Dfabric edge node

    Show answer

    Answer: A

    Explanation

    The control plane receives registrations from fabric edge or border nodes for known EID prefixes from wired endpoints and from fabric mode WLCs for wireless clients. It also resolves lookup requests from fabric edge or border nodes to locate destination EIDs and updates fabric edge nodes and border nodes with wired and wireless client mobility and RLOC information.

    Source: Adapted from community discussion — rggod

    References

    • Cisco documentation

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

350-401 practice, question 221. 1003 questions available.