350-401 practice questions 511–520

1. Question 511 · 1003 in bank

   A customer deploys a new wireless network to perform location-based services using Cisco DNA Spaces. The customer has a single WLC located on-premises in a secure data center. The security team does not want to expose the WLC to the public Internet. Which solution allows the customer to securely send RSSI updates to Cisco DNA Spaces?

   • ADeploy a Cisco DNA Spaces connector as a VM
   • BPerform tethering with Cisco DNA Center
   • CReplace the WLC with a cloud-based controller
   • DImplement Cisco Mobility Services Engine

   Show answer

   Answer: A

   Explanation

   A Cisco DNA Spaces connector is a software application that can be deployed on a virtual machine (VM) in the customer's on-premises network. The connector acts as a secure intermediary between the WLC and Cisco DNA Spaces. It encrypts all traffic between the WLC and Cisco DNA Spaces, and it can be configured to use a variety of authentication and authorization mechanisms.

   Source: Adapted from community discussion — Chalmisco

   References

   • Cisco documentation

   Next question

2. Question 512 · 1003 in bank

   

   Refer to the exhibit. An engineer entered the command no spanning-tree bpduguard enable on interface Fa1/0/7. What is the effect of this command on Fa1/0/7?

   • AIt remains in err-disabled state until the errdisable recovery cause failed-port-state command is entered in the global configuration mode
   • BIt remains in err-disabled state until the no shutdown command is entered in the interface configuration mode
   • CIt remains in err-disabled state until the shutdown/no shutdown command is entered in the interface configuration mode
   • DIt remains in err-disabled state until the spanning-tree portfast bpduguard disable command is entered in the interface configuration mode.

   Show answer

   Answer: C

   Explanation

   generally speaking, yes, it is true - the default behavior, but this setting is hidden from us: sw2#show errdisable recovery ErrDisable Reason Timer Status ----------------- -------------- arp-inspection Disabled bpduguard Disabled channel-misconfig (STP) Disabled dhcp-rate-limit Disabled dtp-flap Disabled gbic-invalid Disabled inline-power Disabled l2ptguard Disabled link-flap Disabled mac-limit Disabled link-monitor-failure Disabled loopback Disabled oam-remote-failure Disabled pagp-flap Disabled port-mode-failure Disabled pppoe-ia-rate-limit Disabled psecure-violation Disabled security-violation Disabled sfp-config-mismatch Disabled storm-control Disabled udld Disabled unicast-flood Disabled ... sw2#

   Source: Adapted from community discussion — nushadu

   Next question

3. Question 513 · 1003 in bank

   Which design principle states that a user has no access by default to any resource, and unless a resource is explicitly granted, it should be denied?

   • Aleast privilege
   • Bfail-safe defaults
   • Ceconomy of mechanism
   • Dcomplete mediation

   Show answer

   Answer: B

   Explanation

   The Principle of Fail-Safe Defaults states that, unless a subject is given explicit access to an object, it should be denied access to that object

   Source: Adapted from community discussion — Joseph123

   Next question

4. Question 514 · 1003 in bank

   A customer wants to connect a device to an autonomous Cisco AP configured as a WGB. The WGB is configured properly: however, it fails to associate to a CAPWAP-enabled AP. Which change must be applied in the advanced WLAN settings to resolve this issue?

   • AEnable Aironet IE.
   • BEnable passive client.
   • CDisable AAA override.
   • DDisable FlexConnect local switching.

   Show answer

   Answer: A

   Explanation

   A Workgroup Bridge (WGB) is a wireless client that serves as a non-root access point for wired clients. A WGB can associate to another access point that acts as a root access point, either in autonomous mode or in CAPWAP mode. A CAPWAP-enabled AP is an access point that is managed by a Wireless LAN Controller (WLC) using the Control and Provisioning of Wireless Access Points (CAPWAP) protocol. To resolve the issue of a WGB failing to associate to a CAPWAP-enabled AP, you need to enable Aironet IE in the advanced WLAN settings on the WLC. Aironet IE is a Cisco proprietary information element that contains additional information about the WLAN, such as the VLAN ID, QoS parameters, and load balancing. Aironet IE is required for WGB association because it helps the WGB to identify the correct WLAN and VLAN for its wired clients.

   Source: Adapted from community discussion — [Removed]

   References

   • Cisco documentation

   Next question

5. Question 515 · 1003 in bank

   By default, which virtual MAC address does HSRP group 32 use?

   • A04:19:01:05:2e:32
   • B05:5e:5c:ac:0c:32
   • C00:00:0c:07:ac:20
   • D00:5e:0c:07:ac:20

   Show answer

   Answer: C

   Explanation

   The virtual IP resolves to a virtual MAC address in the format 0000.0c07.acxx, xx being the group number in hexadecimal. For example, if you use group number 3, the last part of the MAC address is ac03. 32 is in binary 0010 0000 that's mean in HEX its 2 0

   Source: Adapted from community discussion — H3kerman

   Next question

6. Question 516 · 1003 in bank

   Select 2

   Which two Cisco SD-WAN components exchange OMP information? (Choose two.)

   • AWAN Edge
   • BvBond
   • CvManage
   • DvAnalytics
   • EvSmart

   Show answer

   Answer: AE

   Explanation

   OMP is the control protocol that is used to exchange routing, policy, and management information between the vSmart controllers and vEdge routers in the overlay network. but shouldn't be vEdge instead of WAN Edge?

   Source: Adapted from community discussion — H3kerman

   Next question

7. Question 517 · 1003 in bank

   What does the number in an NTP stratum level represent?

   • AThe number of hops it takes to reach the authoritative time source
   • BThe amount of offset between the device clock and true time
   • CThe number of hops it takes to reach the primary time server
   • DThe amount of drift between the device clock and true time

   Show answer

   Answer: A

   Explanation

   local Cisco the thrid in the chain and its server the second: sw1# sw1#show ntp status | i strat Clock is synchronized, stratum 3, reference is 91.212.242.20 sw1#show ntp ass det | i strat 91.212.242.20 configured, ipv4, our_master, sane, valid, stratum 2 sw1# sw1#show ntp ass address ref clock st when poll reach delay offset disp *~91.212.242.20 194.146.251.101 2 53 128 377 24.944 -2.181 3.274 * sys.peer, # selected, + candidate, - outlyer, x falseticker, ~ configured sw1#

   Source: Adapted from community discussion — nushadu

   Next question

8. Question 518 · 1003 in bank

   

   Refer to the exhibit. Clients report that they cannot connect to this SSID using the provided PSK. Which action will resolve this issue?

   • AApply the correct interface to this WLAN
   • BApply the changes this SSID
   • CSelect the PSK under authentication key management
   • DDefine the correct Radio Policy.

   Show answer

   Answer: C

   Explanation

   For WPA2 personal mode, look under the Authentication Key Management section and check only the box next to PSK. You should then enter the pre-shared key string in the box next to PSK Format. CCNP and CCIE Enterprise Core ENCOR 350-401 Official Cert Guide page 564

   Source: Adapted from community discussion — Soggyt74

   References

   • Cisco documentation

   Next question

9. Question 519 · 1003 in bank

   Which QoS queuing method transmits packets out of the interface in the order the packets arrive?

   • Acustom
   • Bweighted-fair
   • CFIFO
   • Dpriority

   Show answer

   Answer: C

   Next question

10. Question 520 · 1003 in bank

    How do cloud deployments differ from on-premises deployments?

    • ACloud deployments require longer implementation times than on-premises deployments.
    • BCloud deployments are more customizable than on-premises deployments.
    • CCloud deployments have lower upfront costs than on-premises deployments.
    • DCloud deployments require less frequent upgrades than on-premises deployments.

    Show answer

    Answer: C

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

350-401 practice, question 511. 1003 questions available.