350-401 practice questions 481–490

1. Question 481 · 1003 in bank

   DRAG DROP - Drag and drop the characteristics from the left onto the switching mechanisms they describe on the right. Select and Place:

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   CEF: The forwarding table is created in advance. All packets are switched using hardware. PS: The router processor is involved with every forwarding decision. All forwarding decisions are made in software. ADMIN please fix that. Thank you!

   Source: Adapted from community discussion — Nickplayany

   

   Next question

2. Question 482 · 1003 in bank

   Select 2

   In which two ways does the routing protocol OSPF differ from EIGRP? (Choose two.)

   • AOSPF provides shorter convergence time than EIGRP.
   • BOSPF supports only equal-cost load balancing EIGRP supports unequal-cost load balancing.
   • COSPF is distance vector protocol. EIGRP is a link-state protocol.
   • DOSPF supports an unlimited number of hops EIGRP supports a maximum of 255 hops.
   • EOSPF supports unequal-cost load balancing EIGRP supports only equal-cost load balancing.

   Show answer

   Answer: BD

   Explanation

   B and D. EIGRP has faster convergence time than OSPF because EIGRP has a backup route (feasible successor) readily available. OSPF would have to first signal with LSAs, then run SPF calculation, then update the RIB and the FIB.

   Source: Adapted from community discussion — Japsurd

   References

   • Cisco documentation

   Next question

3. Question 483 · 1003 in bank

   

   Refer to the exhibit. A network engineer must configure the router to use the ISE-Servers group for authentication. If both ISE servers are unavailable, the local username database must be used. If no usernames are defined in the configuration, then the enable password must be the last resort to log in. Which configuration must be applied to achieve this result?

   • Aaaa authorization exec default group ISE-Servers local enable
   • Baaa authentication login error-enable aaa authentication login default group enable local ISE-Servers
   • Caaa authentication login default group ISE-Servers local enable
   • Daaa authentication login default group enable local ISE-Servers

   Show answer

   Answer: C

   Next question

4. Question 484 · 1003 in bank

   When using BFD in a network design, which consideration must be made?

   • ABFD is used with dynamic routing protocols to provide subsecond convergence.
   • BBFD is used with first hop routing protocols to provide subsecond convergence.
   • CBFD is used with NSF and graceful to provide subsecond convergence.
   • DBFD is more CPU-intensive than using reduced hold timers with routing protocols.

   Show answer

   Answer: A

   Explanation

   D is wrong.... from https://www.cisco.com/c/en/us/td/docs/ios/12_0s/feature/guide/fs_bfd.html#wp1043332 "Because some parts of BFD can be distributed to the data plane, it can be less CPU-intensive than the reduced EIGRP, IS-IS, and OSPF timers, which exist wholly at the control plane."

   Source: Adapted from community discussion — Rose66

   References

   • Cisco documentation
   • Cisco documentation
   • Cisco documentation

   Next question

5. Question 485 · 1003 in bank

   

   Refer to the exhibit. Which command filters the ERSPAN session packets only to interface GigabitEthernet1?

   • Asource ip 10.10.10.1
   • Bfilter access-group 10
   • Cdestination ip 10.10.10.1
   • Dsource interface gigabitethernet1 ip 10.10.10.1

   Show answer

   Answer: B

   Explanation

   Correct Answer is B: From Cisco IOS XE Everest 16.4.1 release, ERSPAN has been enhanced to better monitor packets and reduce network traffic. This enhancement supports ACL on ERSPAN source session to filter only specific IP traffic according to the ACL, and is supported on the IOS XE platform. Both IPv4 and IPv6 traffic can be monitored by associating an ACL with the ERSPAN session. The ERSPAN session can associate only one IP ACL entry with its name. Thank you @Rose66

   Source: Adapted from community discussion — x3rox

   References

   • Cisco documentation

   Next question

6. Question 486 · 1003 in bank

   

   Refer to the exhibit. Traffic is not passing between SW1 and SW2. Which action fixes the issue?

   • AConfigure switch port mode to ISL on S2
   • BConfigure LACP mode on S1 to active
   • CConfigure PAgP mode on S1 to desirable
   • DConfigure LACP mode on S1 to passive

   Show answer

   Answer: C

   Next question

7. Question 487 · 1003 in bank

   

   Refer to the exhibit. An engineer configures a new HSRP group. While reviewing the HSRP status, the engineer sees the logging message generated on R2. What is the cause of the message?

   • AThe HSRP configuration has caused a routing loop
   • BThe same virtual IP address has been configured for two HSRP groups
   • CA PC is on the network using the IP address 10.10.1.1
   • DThe HSRP configuration has caused a spanning-tree loop

   Show answer

   Answer: B

   Explanation

   I've tested again and cought this bug, the same error actually nyway you can chache MAC manually, by default yes, it belongs to HSRP process, the difference only in the groups 10 vs 11; *Jan 10 10:11:31.992: %IP-4-DUPADDR: Duplicate address 10.99.0.254 on Ethernet0/1.10, sourced by 0000.0c07.ac0a cisco_R5# cisco_R5#s runn int ethernet 0/1.10 Building configuration... Current configuration : 119 bytes ! interface Ethernet0/1.10 encapsulation dot1Q 10 ip address 10.99.0.5 255.255.255.0 standby 11 ip 10.99.0.254 <<<<<<<<<<<<<< end cisco_R5#

   Source: Adapted from community discussion — nushadu

   Next question

8. Question 488 · 1003 in bank

   DRAG DROP - Drag and drop the characteristics from the left onto the switching architectures on the right. Select and Place:

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   Answer should be: Process switching uses the general CPU and is referred to as software switching CEF Can handle larger amounts of traffic

   Source: Adapted from community discussion — siteoforigin

   

   Next question

9. Question 489 · 1003 in bank

   What is a benefit of deploying an on-premises infrastructure versus a cloud infrastructure deployment?

   • Aability to quickly increase compute power without the need to install additional hardware
   • Bless power and cooling resources needed to run infrastructure on-premises
   • Cfaster deployment times because additional infrastructure does not need to be purchased
   • Dlower latency between systems that are physically located near each other

   Show answer

   Answer: D

   Explanation

   on premesis will produce lower latency as the devices are in the same data network as when in the cloud you are dependant on bandwidth and latency will be much higher

   Source: Adapted from community discussion — flash007

   Next question

10. Question 490 · 1003 in bank

    What is the data policy in a Cisco SD-WAN deployment?

    • Alist of ordered statements that define node configurations and authentication used within the SD-WAN overlay
    • Bset of statements that defines how data is forwarded based on IP packet information and specific VPNs
    • Cdetailed database mapping several kinds of addresses with their corresponding location
    • Dgroup of services tested to guarantee devices and links liveliness within the SD-WAN overlay

    Show answer

    Answer: B

    Explanation

    The Cisco SD-WAN architecture implements two types of data policy: Centralized data policy controls the flow of data traffic based on the source and destination addresses and ports and DSCP fields in the packet's IP header (referred to as a 5-tuple), and based on network segmentation and VPN membership. These types of data policy are provisioned centrally, on the Cisco vSmart controller, and they affect traffic flow across the entire network. Localized data policy controls the flow of data traffic into and out of interfaces and interface queues on a Cisco vEdge device. This type of data policy is provisioned locally using access lists. It allows you to classify traffic and map different classes to different queues. It also allows you to mirror traffic and to police the rate at which data traffic is transmitted and received.

    Source: Adapted from community discussion — DLLLLLLLL

    References

    • Cisco documentation
    • Cisco documentation

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

350-401 practice, question 481. 1003 questions available.