350-401 practice questions 451–460

1. Question 451 · 1003 in bank

   

   Refer to the exhibit. Object tracking has been configured for VRRP-enabled routers Edge-01 and Edge-02. Which commands cause Edge-02 to preempt Edge-01 in the event that interface G0/0 goes down on Edge-01?

   • AEdge-01(config)#interface G0/1 Edge-01(config-if)#vrrp 10 track 10 decrement 30
   • BEdge-02(config)#interface G0/1 Edge-02(config-if)#vrrp 10 track 10 decrement 30
   • CEdge-02(config)#interface G0/1 Edge-02(config-if)#vrrp 10 track 10 decrement 10
   • DEdge-01(config)#interface G0/1 Edge-01(config-if)#vrrp 10 track 10 decrement 10

   Show answer

   Answer: A

   Explanation

   cisco_R3(config-subif)#do s run interface Ethernet0/0.70 Building configuration... Current configuration : 229 bytes ! interface Ethernet0/0.70 description vrf_RED encapsulation dot1Q 70 ip vrf forwarding RED ip address 10.111.12.1 255.255.255.0 ip policy route-map RED_TO_GLOBAL vrrp 11 ip 10.111.12.254 vrrp 11 track 2 decrement 30 end cisco_R3(config-subif)#do s vrrp Ethernet0/0.70 - Group 11 State is Master Virtual IP address is 10.111.12.254 Virtual MAC address is 0000.5e00.010b Advertisement interval is 1.000 sec Preemption enabled Priority is 70 Track object 2 state Down decrement 30 Master Router is 10.111.12.1 (local), priority is 70 <<<<<<<<<<<<<< Master Advertisement interval is 1.000 sec Master Down interval is 3.609 sec cisco_R3(config-subif)#

   Source: Adapted from community discussion — nushadu

   Next question

2. Question 452 · 1003 in bank

   

   Refer to the exhibit. An engineer must prevent the R6 loopback from getting into Area 2 and Area 3 from Area 0. Which action must the engineer take?

   • AApply a filter list outbound on R3 and R7.
   • BApply a filter list inbound on R2 and R9.
   • CApply a filter list inbound on R3 and R7.
   • DApply a filter list outbound on R7 only.

   Show answer

   Answer: C

   Explanation

   The correct answer it´s "C" Tested this in eve-ng. === ON R7===== ip prefix-list BLOCK seq 5 deny 6.6.6.6/32 ip prefix-list BLOCK seq 10 permit 0.0.0.0/0 le 32 router ospf 1 area 2 filter-list prefix BLOCK in === ON R3===== ip prefix-list BLOCK seq 5 deny 6.6.6.6/32 ip prefix-list BLOCK seq 10 permit 0.0.0.0/0 le 32 router ospf 1 area 3 filter-list prefix BLOCK in

   Source: Adapted from community discussion — Amoako

   References

   • cisco.com documentation
   • Cisco documentation

   Next question

3. Question 453 · 1003 in bank

   Select 2

   

   An engineer must configure and validate a CoPP policy that allows the network management server to monitor router R1 via SNMP while protecting the control plane. Which two commands or command sets must be used? (Choose two.)

   • Aaccess-list 150 permit udp 10.0.1.4 0.0.0.0 host 10.0.1.2 eq snmp access-list 150 permit udp 10.0.1.4 0.0.0.0 eq snmp host 10.0.1.2 class-map match-all CoPP-management match access-group 150 policy-map CoPP-policy class CoPP-management police 8000 conform-action transmit exceed-action transmit violate-action drop control-plane Service-policy input CoPP-policy
   • Bshow ip interface brief
   • Cshow quality-of-service-profile
   • Daccess-list 150 permit udp 10.0.1.4 0.0.0.0 host 10.0.1.2 eq snmp class-map match-all CoPP-management match access-group 150 policy-map CoPP-policy class CoPP-management police 8000 conform-action transmit exceed-action transmit violate-action transmit control-plane Service-policy input CoPP-policy
   • Eshow policy-map control-plane

   Show answer

   Answer: AE

   Explanation

   A. access-list 150 permit udp 10.0.1.4 0.0.0.0 host 10.0.1.2 eq snmp access-list 150 permit udp 10.0.1.4 0.0.0.0 eq snmp host 10.0.1.2 class-map match-all CoPP-management match access-group 150 policy-map CoPP-policy class CoPP-management police 8000 conform-action transmit exceed-action transmit violate-action drop control-plane Service-policy input CoPP-policy B. show ip interface brief C. show quality-of-service-profile D. access-list 150 permit udp 10.0.1.4 0.0.0.0 host 10.0.1.2 eq snmp class-map match-all CoPP-management match access-group 150 policy-map CoPP-policy class CoPP-management police 8000 conform-action transmit exceed-action transmit violate-action transmit control-plane Service-policy input CoPP-policy E. show policy-map control-plane

   Source: Adapted from community discussion — dragonwise

   Next question

4. Question 454 · 1003 in bank

   A vulnerability assessment highlighted that remote access to the switches is permitted using unsecure and unencrypted protocols. Which configuration must be applied to allow only secure and reliable remote access for device administration?

   • Aline vty 0 15 login local transport input all
   • Bline vty 0 15 login local transport input ssh
   • Cline vty 0 15 login local transport input telnet ssh
   • Dline vty 0 15 login local transport input none

   Show answer

   Answer: B

   Next question

5. Question 455 · 1003 in bank

   Which feature is used to propagate ARP, broadcast, and link-local frames across a Cisco SD-Access fabric to address connectivity needs for silent hosts that require reception of traffic to start communicating?

   • AMultisite Fabric
   • BNative Fabric Multicast
   • CSDA Transit
   • DLayer 2 Flooding

   Show answer

   Answer: D

   References

   • cisco.com documentation

   Next question

6. Question 456 · 1003 in bank

   Which function does a fabric wireless LAN controller perform in a Cisco SD-Access deployment?

   • Amanages fabric-enabled APs and forwards client registration and roaming information to the Control Plane Node
   • Bcoordinates configuration of autonomous nonfabric access points within the fabric
   • Cperforms the assurance engine role for both wired and wireless clients
   • Dis dedicated to onboard clients in fabric-enabled and nonfabric-enabled APs within the fabric

   Show answer

   Answer: A

   Explanation

   From: https://www.cisco.com/c/en/us/td/docs/solutions/CVD/Campus/cisco-sda-design-guide.html#FabricWLC Both fabric WLCs and non-fabric WLCs provide AP image and configuration management, client session management, and mobility services. Fabric WLCs provide additional services for fabric integration such as registering MAC addresses of wireless clients into the host tracking database of the fabric control plane nodes during wireless client join events and supplying fabric edge node RLOC-association updates to the HTDB during client roam events.

   Source: Adapted from community discussion — AndreasThornus

   References

   • Cisco documentation

   Next question

7. Question 457 · 1003 in bank

   

   Refer to the exhibit. An engineer must permit traffic from these networks and block all other traffic. An informational log message should be triggered when traffic enters from these prefixes. Which access list must be used?

   • Aaccess-list acl_subnets permit ip 10.0.32.0 0.0.7.255 access-list acl_subnets deny ip any log
   • Baccess-list acl_subnets permit ip 10.0.32.0 255.255.248.0 log
   • Caccess-list acl_subnets permit ip 10.0.32.0 0.0.7.255 log
   • Daccess-list acl_subnets permit ip 10.0.32.0 0.0.0.255 log

   Show answer

   Answer: C

   Explanation

   C is correct because A does not have "log" applied to the first line, which is a requirement. An implicit deny takes care of C. https://community.cisco.com/t5/routing/is-deny-any-default-at-the-end-for-all-access-lists-created/td-p/4092573

   Source: Adapted from community discussion — snarkymark

   References

   • cisco.com documentation

   Next question

8. Question 458 · 1003 in bank

   Which measure is used by an NTP server to indicate its closeness to the authoritative time source?

   • Astratum
   • Btime zone
   • Clatency
   • Dhop count

   Show answer

   Answer: A

   Next question

9. Question 459 · 1003 in bank

   In a wireless Cisco SD-Access deployment, which roaming method is used when a user moves from one AP to another on a different access switch using a single WLC?

   • ALayer 3
   • Binter-xTR
   • Cauto anchor
   • Dfast roam

   Show answer

   Answer: B

   Explanation

   Has to be B as it is almost like word by word in line with Cisco's definition as below . "SDA supports two additional types of roaming, which are Intra-xTR and Inter-xTR. In SDA, xTR stands for an access-switch that is a fabric edge node. It serves both as an ingress tunnel router as well as an egress tunnel router. When a client on a fabric enabled WLAN, roams from an access point to another access point on the same access-switch, it is called Intra-xTR. Here, the local client database and client history table are updated with the information of the newly associated access point. When a client on a fabric enabled WLAN, roams from an access point to another access point on a different access-switch, it is called Inter-xTR. Here, the map server is also updated with the client location (RLOC) information. Also, the local client database is updated with the information of the newly associated access point."

   Source: Adapted from community discussion — msstanick

   References

   • Cisco documentation
   • Cisco documentation

   Next question

10. Question 460 · 1003 in bank

    When is the Design workflow used in Cisco DNA Center?

    • Ain a greenfield deployment, with no existing infrastructure
    • Bin a greenfield or brownfield deployment, to wipe out existing data
    • Cin a brownfield deployment, to modify configuration of existing devices in the network
    • Din a brownfield deployment, to provision and onboard new network devices

    Show answer

    Answer: A

    Explanation

    The Design area is where you create the structure and framework of your network, including the physical topology, network settings, and device type profiles that you can apply to devices throughout your network. ---> Use the Design workflow if you do not already have an existing infrastructure. If you have an existing infrastructure, use the Discovery feature.

    Source: Adapted from community discussion — x3rox

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

350-401 practice, question 451. 1003 questions available.