350-401 practice questions 431–440

1. Question 431 · 1003 in bank

   

   Refer to the exhibit. A network engineer must configure NETCONF. After creating the configuration, the engineer gets output from the command show line, but not from show running-config. Which command completes the configuration?

   • ADevice(config)# netconf max-sessions 100
   • BDevice(config)# no netconf ssh acl 1
   • CDevice(config)# netconf lock-time 500
   • DDevice(config)# netconf max-message 1000

   Show answer

   Answer: D

   Explanation

   Only our collaboration work as testers help us reading and contributing in the discussion. I totally agree, there is no sense, Cisco wants you to pay the (very) expensive specialized course and forget the OCG books. But they can't say it blatantly It must be that they don't earn enough money, it's shameful

   Source: Adapted from community discussion — Feliphus

   References

   • Cisco documentation
   • Cisco documentation

   Next question

2. Question 432 · 1003 in bank

   Which protocol is implemented to establish secure control plane adjacencies between Cisco SD-WAN nodes?

   • AIKE
   • BTLS
   • CIPsec
   • DESP

   Show answer

   Answer: B

   Explanation

   "The WAN Edge routers form a permanent Datagram Transport Layer Security (DTLS) or Transport Layer Security (TLS) control connection to the vSmart controllers and connect to both of the vSmart controllers over each transport" https://www.cisco.com/c/en/us/td/docs/solutions/CVD/SDWAN/cisco-sdwan-design-guide.html

   Source: Adapted from community discussion — Ferrantee

   References

   • Cisco documentation
   • Cisco documentation
   • Cisco documentation
   • Cisco documentation

   Next question

3. Question 433 · 1003 in bank

   Select 2

   

   Refer to the exhibit. What are two reasons for IP SLA tracking failure? (Choose two.)

   • AThe threshold value is wrong.
   • BThe destination must be 172.30.30.2 for icmp-echo.
   • CThe default route has the wrong next hop IP address.
   • DA route back to the R1 LAN network is missing in R2.
   • EThe source-interface is configured incorrectly.

   Show answer

   Answer: DE

   Explanation

   I labbed this up in CML. Only E) is correct. No second matching answer yet. A. The threshold value is wrong. => Threshold is correct, I tested it + see my previous post below. (frequency seconds ) > (timeout milliseconds ) > (threshold milliseconds ) B. The destination must be 172.30.30.2 for icmp-echo. => "icmp-echo 172.20.20.2" is correct, no changes required. C. The default route has the wrong next hop IP address. => If you have a default route, and also the same default route with tracking, then you can delete the normal default route ("ip route 0.0.0.0 0.0.0.0 172.20.20.2"), and the other default route with tracking won't be affected ("ip route 0.0.0.0 0.0.0.0 172.20.20.2 track 10"). It remains in the configuration. So, the default route configuration looks good. D. A route back to the R1 LAN network is missing in R2 => It is not necessary to have reachibility from R2 to R1's LAN for IP SLA and tracking to work. IP SLA + track works fine without this, it won't cause a failure. E. The source-interface is configured incorrectly. => It is true. Based on the picture it should be "icmp-echo 172.20.20.2 source-interface fa1/0".

   Source: Adapted from community discussion — HungarianDish_111

   Next question

4. Question 434 · 1003 in bank

   

   Refer to the exhibit. Which command set must be added to the configuration to analyze 50 packets out of every 100?

   • Asampler SAMPLER-1 mode random 1-out-of 2 flow FLOW-MONITOR-1 interface GigabitEthernet 0/0/0 ip flow monitor SAMPLER-1 input
   • Bflow monitor FLOW-MONITOR-1 record v4_r1 sampler SAMPLER-1 interface GigabitEthernet 0/0/0 ip flow monitor FLOW-MONITOR-1 sampler SAMPLER-1 input
   • Csampler SAMPLER-1 no mode random 1-out-of 2 mode percent 50 interface GigabitEthernet 0/0/0 ip flow monitor FLOW-MONITOR-1 sampler SAMPLER-1 input
   • Dinterface GigabitEthernet 0/0/0 ip flow monitor FLOW-MONITOR-1 sampler SAMPLER-1 input

   Show answer

   Answer: D

   Explanation

   Just need to apply the flow monitor and the sampler to the interface. Sampler already capturing 50 out of 100 (1 out of 2)

   Source: Adapted from community discussion — dnjJ56

   References

   • Cisco documentation

   Next question

5. Question 435 · 1003 in bank

   Why would an engineer use YANG?

   • Ato transport data between a controller and a network device
   • Bto model data for NETCONF
   • Cto access data using SNMP
   • Dto translate JSON into an equivalent XML syntax

   Show answer

   Answer: B

   Explanation

   NETCONF is a standard based and Extensible Markup Language (XML) encoded protocol that provides the transport to communicate the YANG formatted configuration or operational data request from an application that runs on a centralized management platform (for example a laptop) to the Cisco device that a user wishes to configure or request operational (show command) data from.

   Source: Adapted from community discussion — kebkim

   References

   • Cisco documentation

   Next question

6. Question 436 · 1003 in bank

   A network monitoring system uses SNMP polling to record the statistics of router interfaces. The SNMP queries work as expected until an engineer installs a new interface and reloads the router. After this action, all SNMP queries for the router fail. What is the cause of this issue?

   • AThe SNMP interface index changed after reboot.
   • BThe SNMP server traps are disabled for the link state.
   • CThe SNMP server traps are disabled for the interface index.
   • DThe SNMP community is configured incorrectly.

   Show answer

   Answer: A

   Explanation

   Question scenario says SNMP polling is being used so that eliminates answers B and C that reference SNMP traps. Traps are a push, polling is a pull.

   Source: Adapted from community discussion — danman32

   References

   • Cisco documentation

   Next question

7. Question 437 · 1003 in bank

   Which character formatting is required for DHCP Option 43 to function with current AP models?

   • AMD5
   • BBase64
   • CASCII
   • DHex

   Show answer

   Answer: D

   Explanation

   When DHCP servers are programmed to offer WLAN Controller IP addresses as Option 43 for Cisco Aironet LAPs, the sub-option TLV block is defined in this way: Type - 0xf1 (decimal 241). Length - Number of controller IP addresses * 4. Value - List of the WLC management interfaces, typically translated to hexadecimal values. The semantics of DHCP server configuration vary based on the DHCP server vendor. This document contains specific instructions on the Microsoft DHCP server, Cisco IOS DHCP server, Linux ISC DHCP Server, Cisco Network Registrar DHCP server, and Lucent QIP DHCP Server. For other DHCP server products, consult the vendor documentation for instructions on vendor specific options. (Source: https://www.cisco.com/c/en/us/support/docs/wireless-mobility/wireless-lan-wlan/97066-dhcp-option-43-00.html)

   Source: Adapted from community discussion — Rose66

   References

   • Cisco documentation

   Next question

8. Question 438 · 1003 in bank

   An engineer must configure HSRP group 300 on a Cisco IOS router. When the router is functional, it must be the active HSRP router. The peer router has been configured using the default priority value. Which command set is required?

   • Astandby version 2 standby 300 priority 110 standby 300 preempt
   • Bstandby 300 priority 110 standby 300 timers 1 110
   • Cstandby version 2 standby 300 priority 90 standby 300 preempt
   • Dstandby 300 priority 90 standby 300 preempt

   Show answer

   Answer: A

   Explanation

   In HSRP version 1, group numbers are supported the range from 0 to 255 and HSRP version 2 expands the group number range from 0 to 4095. * So it should HSRP v2 to assign the group no. 300 (So. the ans should A or C). * Default priority of the HSRP is 100 and the Router with higher priority no. will become Active Router. So the priority set over 100 for active router. So, the answer is "A".

   Source: Adapted from community discussion — KZM

   Next question

9. Question 439 · 1003 in bank

   Which benefit is realized by implementing SSO?

   • AIP first-hop redundancy
   • Bcommunication between different nodes for cluster setup
   • Cphysical link redundancy
   • Dminimal network downtime following an RP switchover

   Show answer

   Answer: D

   Next question

10. Question 440 · 1003 in bank

    Select 2

    

    Refer to the exhibit. After configuring HSRP an engineer enters the show standby command. Which two facts are derived from the output? (Choose two.)

    • AR2 becomes the active router after the hold time expires.
    • BIf Fa0/0 is shut down, the HSRP priority on R2 becomes 80.
    • CR2 Fa1/0 regains the primary role when the link comes back up.
    • DThe router with IP 10.10.1.3 is active because it has a higher IP address.
    • ER2 is using the default HSRP hello and hold timers.

    Show answer

    Answer: BE

    Explanation

    So many misleading comments. Current status of track object is "Up" as displayed under "show standby". o, current priority is 90. If fa0/0 goes down, track object changes to "Down", and so priority decrements by 10 (to 80). Timers are default.

    Source: Adapted from community discussion — HungarianDish_111

    References

    • Cisco documentation

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

350-401 practice, question 431. 1003 questions available.