350-401 practice questions 411–420

1. Question 411 · 1003 in bank

   Select 2

   A network administrator has designed a network with two multilayer switches on the distribution layer, which act as default gateways for the end hosts. Which two technologies allow every end host in a VLAN to use both gateways? (Choose two.)

   • AVRRP
   • BGLBP
   • CVSS
   • DMHSRP
   • EHSRP

   Show answer

   Answer: BC

   Explanation

   I'm going for B and C. VRRP - and HSRP suffer from that fact that they both have one primary/master router which provides the _single_ default gateway (single VIP, single virtual MAC) MHSRP provides two Virtual IPs, so end hosts would have to be configured with two default gateways - not common for end hosts. The same concept would apply to multiple VRRP groups. GLBP provides one virtual IP and multiple virtual MAC Addresses; the ARP replies from the Active Virtual Gateway to the hosts will use all the virtual MACs (one for each virtual forwarder) in round robin fashion, so B is correct. which leaves VSS, where both ML Switches form a single virtual switch and no FHRP is required at all to use them both.

   Source: Adapted from community discussion — laterst

   References

   • Cisco documentation
   • cisco.com documentation
   • Cisco documentation

   Next question

2. Question 412 · 1003 in bank

   DRAG DROP -

   

   Refer to the exhibit. Drag and drop the snippets into the RESTCONF request to form the request that returns this response. Not all options are used. Select and Place:

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   given answer is correct URL:http://10.10.10.10/restconf/api/running/native/interface/ ((( GigabitEthernet/1/ ))) This URL points to the specific interface (GigabitEthernet 1) whose configuration we want to retrieve. HTTP Verb: ((( GET ))) You use the GET method to retrieve data from a specified resource. Since you are retrieving the current configuration of the interface. Headers: ((( Accept ))) - application/vnd.yang.data+json The Accept header tells the server that the client expects the response in a specific format, which is application/vnd.yang.data+json

   Source: Adapted from community discussion — [Removed]

   

   Next question

3. Question 413 · 1003 in bank

   

   Refer to the exhibit. An engineer must configure static NAT on R1 to allow users HTTP access to the web server on TCP port 80. The web server must be reachable through ISP 1 and ISP 2. Which command set should be applied to R1 to fulfill these requirements?

   • Aip nat inside source static tcp 10.1.1.100 80 209.165.200.225 80 extendable ip nat inside source static tcp 10.1.1.100 80 209.165.201.1 80 extendable
   • Bip nat inside source static tcp 10.1.1.100 80 209.165.200.225 80 ip nat inside source static tcp 10.1.1.100 80 209.165.201.1 80
   • Cip nat inside source static tcp 10.1.1.100 80 209.165.200.225 80 no-alias ip nat inside source static tcp 10.1.1.100 80 209.165.201.1 80 no-alias
   • Dip nat inside source static tcp 10.1.1.100 80 209.165.200.225 80 ip nat inside source static tcp 10.1.1.100 8080 209.165.201.1 8080

   Show answer

   Answer: A

   Explanation

   The NAT extendable parameter can be used if you want to translate a private IP address to more than one public IP address.

   Source: Adapted from community discussion — kebkim

   Next question

4. Question 414 · 1003 in bank

   

   Refer to the exhibit. An engineer attempts to bundle interface Gi0/0 into the port channel, but it does not function as expected. Which action resolves the issue?

   • AEnable fast LACP PDUs on interface Gi0/0.
   • BSet LACP max-bundle to 2 on interface Port-channel1.
   • CConfigure no shutdown on interface Gi0/0.
   • DConfigure channel-group 1 mode active on interface Gi0/0.

   Show answer

   Answer: B

   Explanation

   sw1(config-if)# do s lacp int Flags: S - Device is requesting Slow LACPDUs F - Device is requesting Fast LACPDUs A - Device is in Active mode P - Device is in Passive mode Channel group 2 LACP port Admin Oper Port Port Port Flags State Priority Key Key Number State Et0/1 SA bndl 32768 0x2 0x2 0x2 0x3D Et0/3 SP hot-sby 32768 0x2 0x2 0x4 0x4 sw1(config-if)# sw1(config-if)# sw1(config-if)# sw1(config-if)#do s runn interface Port-channel2 Building configuration... Current configuration : 123 bytes ! interface Port-channel2 switchport switchport trunk encapsulation dot1q switchport mode trunk lacp max-bundle 1 end sw1(config-if)#

   Source: Adapted from community discussion — nushadu

   References

   • Cisco documentation

   Next question

5. Question 415 · 1003 in bank

   In a Cisco StackWise Virtual environment, which planes are virtually combined in the common logical switch?

   • Amanagement and data
   • Bcontrol, and forwarding
   • Ccontrol and management
   • Dcontrol and data

   Show answer

   Answer: C

   References

   • Cisco documentation

   Next question

6. Question 416 · 1003 in bank

   

   Refer to the exhibit. A network engineer is enabling logging to a local buffer, to the terminal, and to a syslog server for all debugging level logs filtered by facility code 7. Which command is needed to complete this configuration snippet?

   • Alogging buffered debugging
   • Blogging discriminator Disc1 severity includes 7
   • Clogging buffered discriminator Disc1 debugging
   • Dlogging discriminator Disc1 severity includes 7 facility includes fac7

   Show answer

   Answer: D

   Explanation

   logging discriminator discr-name [[facility ] [mnemonics ] [msg-body ] {drops string | includes string }] [severity {drops sev-num | includes sev-num }] [rate-limit msglimit ] Example: Device(config)# logging discriminator pacfltr1 facility includes facl357 See https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/esm/configuration/xe-16-12/esm-xe-16-12-book/reliable-del-filter.html

   Source: Adapted from community discussion — Rose66

   References

   • Cisco documentation

   Next question

7. Question 417 · 1003 in bank

   DRAG DROP - Drag and drop the snippets onto the blanks within the code to construct a script that adds a prefix list to a route map and sets the local preference. Not all options are used. Select and Place:

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   I would put the following: 1. “running”: null <<<<target running config 2. “name”:”100″, <<<<< prefix list name "100" 3. “seq_no”: <<<<<<< there is no permit command within a route map. this is the only logical selection here. 4. “match”: again within a route map we can either set, or match.

   Source: Adapted from community discussion — Stylar

   References

   • Cisco documentation
   • Cisco documentation

   

   Next question

8. Question 418 · 1003 in bank

   

   Refer to the exhibit. What is the result of the API request?

   • AThe native interface information is read from the network appliance.
   • BThe information for all interfaces is read from the network appliance.
   • CThe ג€paramsג€ variable reads data fields from the network appliance.
   • DThe ג€paramsג€ variable sends data fields to the network appliance.

   Show answer

   Answer: B

   Explanation

   I think All Interfaces could be the answer as there is no such thing as one native interface on a device. See below link.

   Source: Adapted from community discussion — Alberht

   References

   • Cisco documentation
   • Cisco documentation

   Next question

9. Question 419 · 1003 in bank

   Which definition describes JWT in regard to REST API security?

   • Aan encrypted JSON token that is used for authentication
   • Ban encrypted JSON token that is used for authorization
   • Can encoded JSON token that is used to securely exchange information
   • Dan encoded JSON token that is used for authentication

   Show answer

   Answer: D

   Explanation

   You could argue that answer C is partially correct, as JWTs can be used to securely exchange information between parties. However, in the context of REST API security, the primary use case of JWTs is for authentication, not for exchanging information. JWTs are commonly used to transmit authentication information between a client and a server, allowing the client to prove its identity to the server. The server generates a JWT that includes a set of claims about the authenticated user, such as their ID or roles, and sends this token back to the client. The client can then include the JWT in subsequent requests to the server to prove its identity. While a JWT can include additional information beyond just authentication claims, its primary purpose in the context of REST API security is for authentication. Therefore, answer D ("an encoded JSON token that is used for authentication") is the most accurate answer to the question.

   Source: Adapted from community discussion — mrtattoo

   Next question

10. Question 420 · 1003 in bank

    

    Refer to the exhibit. On which interfaces should VRRP commands be applied to provide first hop redundancy to PC-01 and PC-02?

    • AG0/0 and G0/1 on Core
    • BG0/0 on Edge-01 and G0/0 on Edge-02
    • CG0/1 on Edge-01 and G0/1 on Edge-02
    • DG0/0 and G0/1 on ASW-01

    Show answer

    Answer: C

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

350-401 practice, question 411. 1003 questions available.