350-401 practice questions 521–530

1. Question 521 · 1003 in bank

   Select 2

   Which two results occur if Cisco DNA Center loses connectivity to devices in the SD-Access fabric? (Choose two.)

   • AUsers lose connectivity
   • BAlready connected users are unaffected but new users cannot connect
   • CAll devices reload after detecting loss of connection to Cisco DNA Center
   • DUser connectivity is unaffected
   • ECisco DNA Center is unable to collect monitoring data in Assurance

   Show answer

   Answer: DE

   Explanation

   Guys let's use common sense, what solution costs 50 thousand dollars and it will make all devices point to it and if it fails your entire network fails ? think about it just from the logic common sense point of view and then answer. No devices will not lose connectivity if DNA Center goes down.

   Source: Adapted from community discussion — Clauster

   References

   • cisco.com documentation
   • cisco.com documentation

   Next question

2. Question 522 · 1003 in bank

   Select 2

   

   Refer to the exhibit. The connection between SW1 and SW2 is not operational. Which two actions resolve the issue? (Choose two.)

   • Aconfigure switchport nonegotiate on SW1
   • Bconfigure switchport nonegotiate on SW2
   • Cconfigure switchport mode access on SW2
   • Dconfigure switchport mode trunk on SW2
   • Econfigure switchport mode dynamic desirable on SW2

   Show answer

   Answer: DE

   Explanation

   I really see people with 0 xp in real working env..... the the question asks which two actions - one OR the other... even if you exclude answers you end up with - dynamic desirable and static trunk... stop misleading the people ...

   Source: Adapted from community discussion — John13121

   References

   • cisco.com documentation

   Next question

3. Question 523 · 1003 in bank

   

   Refer to the exhibit. A company has an internal wireless network with a hidden SSID and RADIUS-based client authentication for increased security. An employee attempts to manually add the company network to a laptop, but the laptop does not attempt to connect to the network. The regulatory domains of the access points and the laptop are identical. Which action resolves this issue?

   • AEnsure that the "Connect even if this network is not broadcasting" option is selected.
   • BChange the security type to WPA2-Personal AES.
   • CUse the empty string as the hidden SSID network name.
   • DLimit the enabled wireless channels on the laptop to the maximum channel range that is supported by the access points.

   Show answer

   Answer: A

   Explanation

   The worst questions are the ones where the answer is common sense but since they weren't ever discussed you think that it's gotta be a trick

   Source: Adapted from community discussion — [Removed]

   Next question

4. Question 524 · 1003 in bank

   How do the RIB and the FIB differ?

   • ARIB is derived from the control plane, and the FIB is derived from the RIB.
   • BFIB is derived from the control plane, and the RIB is derived from the data plane.
   • CRIB contains the interface for a destination, and the FIB contains the next hop information.
   • DFIB contains routes learned through a dynamic routing protocol and the RIB contains routes that are static or directly connected.

   Show answer

   Answer: A

   Explanation

   RIB is derived from the control plane, it is not used for forwarding. Every protocol such as OSPF, EIGRP, BGP has its own RIB and select their best candidates to try to install to global RIB so that it can then be selected for forwarding. If this is implemented through totally separate RIBs or one big RIB with partitions I am not aware of. FIB is used for forwarding, like Erick explained the information is derived from the RIB and from adjacency tables so that the packet can be rewritten with the correct encapsulation. see https://learningnetwork.cisco.com/s/question/0D53i00000KssjfCAB/routing-rib-vs-fib

   Source: Adapted from community discussion — Rose66

   References

   • cisco.com documentation

   Next question

5. Question 525 · 1003 in bank

   What does a YANG model provide?

   • Astandardized data structure independent of the transport protocols
   • Bcreation of transport protocols and their interaction with the OS
   • Cuser access to interact directly with the CLI of the device to receive or modify network configurations
   • Dstandardized data structure that can be used only with NETCONF or RESTCONF transport protocols

   Show answer

   Answer: A

   Explanation

   A? YANG is a standards-based, extensible data modeling language that is used to model the configuration and operational state data, remote procedure calls (RPCs), and server event notifications of network devices. The NETMOD working group in the IETF originally designed YANG to model network management data and to provide a standard for the content layer of the Network Configuration Protocol (NETCONF) model. However, YANG is protocol independent, and YANG data models can be used independent of the transport or RPC protocol and can be converted into any encoding format supported by the network configuration protocol.

   Source: Adapted from community discussion — kebkim

   References

   • juniper.net documentation

   Next question

6. Question 526 · 1003 in bank

   A system must validate access rights to all its resources and must not rely on a cached permission matrix. If the access level to a given resource is revoked but is not reflected in the permission matrix, the security is violated. Which term refers to this REST security design principle?

   • Aeconomy of mechanism
   • Bcomplete mediation
   • Cseparation of privilege
   • Dleast common mechanism

   Show answer

   Answer: B

   Explanation

   B is correct. Complete Mediation: A system should validate access rights to all its resources to ensure that they’re allowed and should not rely on the cached permission matrix. If the access level to a given resource is being revoked, but that isn’t reflected in the permission matrix, it would violate the security. https://restfulapi.net/security-essentials/

   Source: Adapted from community discussion — Cer_Pit

   Next question

7. Question 527 · 1003 in bank

   

   Refer to the exhibit. Which command set completes the ERSPAN session configuration?

   • Amonitor session 11 type erspan-destination destination interface GigabitEthemet4 source erspan-id 11 ip address 10.10.10.10
   • Bmonitor session 12 type erspan-destination destination interface GigabitEthernet4 source erspan-id 12 ip address 10.10.10.10
   • Cmonitor session 11 type erspan-destination destination interface GigabitEthernet4 source erspan-id 12 ip address 10.100.10.10
   • Dmonitor session 12 type erspan-destination destination interface GigabitEthernet4 source erspan-id 11 ip address 10.10.10.10

   Show answer

   Answer: B

   Explanation

   https://www.networkstraining.com/how-to-configure-cisco-span-rspan-erspan/ The flow ID (erspan-id) must be the same on both devices (to identify the ERSPAN traffic). Under erspan-source, the destination IP is the IP where we want to send the traffic (e.g. the machine with an analyzer). The origin IP address is the source of the traffic to be monitored. Under erspan-destination, the source IP address is the same as the destination IP address of the corresponding source session. The session IDs (#monitor session ...) don’t have to match for the source session and end session.

   Source: Adapted from community discussion — HungarianDish_111

   References

   • Cisco documentation
   • Cisco documentation

   Next question

8. Question 528 · 1003 in bank

   "HTTP/1.1 204 No Content" is returned when the curl -i -X DELETE command is issued. Which situation has occurred?

   • AThe command succeeded in deleting the object.
   • BThe object was located at the URI, but it could not be deleted
   • CThe object could not be located at the URI path.
   • DThe URI was invalid.

   Show answer

   Answer: A

   Explanation

   A. The HTTP 204 No Content success status response code indicates that a request has succeeded, but that the client doesn't need to navigate away from its current page.

   Source: Adapted from community discussion — kebkim

   Next question

9. Question 529 · 1003 in bank

   DRAG DROP - Drag and drop the tools from the left onto the agent types on the right. Select and Place:

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   

   Next question

10. Question 530 · 1003 in bank

    

    Refer to the exhibit. Which configuration is required to summarize the Area 2 networks that are advertised to Area 0?

    • ARouterB(config)# router ospf 1 RouterB(config-router)# area 2 range 192.168.36.0 255.255.252.0
    • BRouterB(config)# router ospf 1 RouterB(config-router)# network 192.168.38.0 255.255.255.0
    • CRouterB(config)# router ospf 1 RouterB(config-router)# network 192.168.38.0 255.255.252.0
    • DRouterB(config)# router ospf 1 RouterB(config-router)# area 2 range 192.168.36.0 255.255.255.0

    Show answer

    Answer: A

    Explanation

    this is ABR (area 0 & 22) : cisco_R3(config-router)#area 22 range 55.0.0.0 255.255.192.0 cisco_R3(config-router)# cisco_R3(config-router)#do s runn | s router ospf router ospf 1 router-id 3.3.3.3 auto-cost reference-bandwidth 1000 area 22 range 55.0.0.0 255.255.192.0 area 22 filter-list prefix PL_3 in passive-interface default no passive-interface Ethernet0/0.10 no passive-interface Ethernet0/0.50 network 0.0.0.0 255.255.255.255 area 0 bfd all-interfaces cisco_R3(config-router)#

    Source: Adapted from community discussion — nushadu

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

350-401 practice, question 521. 1003 questions available.