350-401 practice questions 531–540

1. Question 531 · 1003 in bank

   Which controller is capable of acting as a STUN server during the onboarding process of Edge devices?

   • AvBond
   • BvSmart
   • CvManage
   • DPNP Server

   Show answer

   Answer: A

   Explanation

   vBond plays a crucial role and acts as a Session Traversal Utilities for NAT (STUN) server, which allows other controllers and SD-WAN routers to discover their own mapped/translated IP addresses and port numbers. SD-WAN devices advertise this information along with their TLOCs so other SD-WAN devices have information in order to make successful connections. https://www.cisco.com/c/en/us/td/docs/solutions/CVD/SDWAN/cisco-sdwan-design-guide.html

   Source: Adapted from community discussion — error_909

   References

   • Cisco documentation

   Next question

2. Question 532 · 1003 in bank

   What is the recommended minimum SNR for voice applications on wireless networks?

   • A10
   • B15
   • C20
   • D25

   Show answer

   Answer: D

   Explanation

   D. Generally, a signal with an SNR value of 20 dB or more is recommended for data networks where as an SNR value of 25 dB or more is recommended for networks that use voice applications.

   Source: Adapted from community discussion — kebkim

   Next question

3. Question 533 · 1003 in bank

   Select 2

   

   Refer to the exhibit. What are two results of the NAT configuration? (Choose two.)

   • APackets with a destination of 200.1.1.1 are translated to 10.1.1.1 or .2, respectively.
   • BA packet that is sent to 200 1.1.1 from 10.1.1.1 is translated to 209.165.201.1 on R1.
   • CR1 is performing NAT for inside addresses and outside address.
   • DR1 looks at the destination IP address of packets entering S0/0 and destined for inside hosts.
   • ER1 processes packets entering E0/0 and S0/0 by examining the source IP address.

   Show answer

   Answer: BD

   Explanation

   This is the Correct answers: BD A: is DEAD wrong *B: Because there is a 1:1 mapping so that 10.1.1.1 is translated to 209.169.201.1 to any destination. C: WRONG because the command was ip nat "inside",it's just that the initial traffic from the outside it's staticly set in the nat table but it's only "Natting" for inside addreses. to those outside local addresses are translated to internal ip. *D:is RIGHT since "initial traffic" on S0/0 needs to look at the destination "outside Local" E: WRONG R1 look at the destination for S0/0 for "initiating traffic" in order to match the outside local to inside local AND source when initial traffic is from the inside - So it's wrong in saying that it will look at destination for both.

   Source: Adapted from community discussion — x3rox

   References

   • Cisco documentation

   Next question

4. Question 534 · 1003 in bank

   A network engineer must configure a switch to allow remote access for all feasible protocols Only a password must be requested for device authentication and all idle sessions must be terminated in 30 minutes. Which configuration must be applied?

   • Aline vty 0 15 password cisco transport input telnet ssh exec-timeout 30 0
   • Bline vty 0 15 password cisco transport input all exec-timeout 0 30
   • Cusername cisco privilege 15 cisco line vty 0 15 transport input telnet ssh login local exec-timeout 0 30
   • Dline console 0 password cisco exec-timeout 30 0

   Show answer

   Answer: A

   Explanation

   Vague question cisco. exec-timeout 30 0 exec-timeout 0 30 means time out after 0 minutes and 30 seconds. A is right answer kinda exec-timeout timing wise but it does not cover all porotocols such as - Router(config-line)#transport input ? all All protocols lapb-ta LAPB Terminal Adapter lat DEC LAT protocol mop DEC MOP Remote Console Protocol none No protocols pad X.3 PAD rlogin Unix rlogin protocol ssh TCP/IP SSH protocol telnet TCP/IP Telnet protocol udptn UDPTN async via UDP protocol v120 Async over ISDN

   Source: Adapted from community discussion — HarwinderSekhon

   Next question

5. Question 535 · 1003 in bank

   DRAG DROP - Drag and drop the characteristics from the left onto the switching architectures on the right. Select and Place:

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   Remember boys and girls, when Cisco insults other technologies, it's usually ones that are not standard LOW SWITCHING PERFORMANCE? Cisco would never dare talk bad about their own product, so it must be "Process Switching" Cisco Express Forwarding Is ThE BeSt

   Source: Adapted from community discussion — mgiuseppe86

   References

   • Cisco documentation

   

   Next question

6. Question 536 · 1003 in bank

   

   Refer to the exhibit. An engineer configures a trunk between SW1 and SW2 but tagged packets are not passing. Which action fixes the issue?

   • AConfigure SW1 with dynamic auto mode on interface FastEthernet0/1.
   • BConfigure the native VLAN to be the same VLAN on both switches on interface FastEthernet0/1.
   • CConfigure SW2 with encapsulation dot1q on interface FastEthernet0/1.
   • DConfigure FastEthernet0/1 on both switches for static trunking.

   Show answer

   Answer: C

   Explanation

   Option A is incorrect, the administrative mode is correctly set -> A trunk will form if either of the interfaces is set to "dynamic desirable," or both are set to "dynamic desirable." Option B is incorrect, the question clearly states that the problem is with "tagged" packets, native VLAN uses untagged frames. Option D is incorrect, even if we manually set the port to operate as a trunk, a trunk link will form only if the ports use the same encapsulation protocol (ISL, or DOt1q.) The operational mode will switch from "static access" to the "static trunk" when both interfaces use the same encapsulation protocol.

   Source: Adapted from community discussion — AbdullahMohammad251

   Next question

7. Question 537 · 1003 in bank

   When does a Cisco StackWise primary switch lose its role?

   • Awhen a switch with a higher priority is added to the stack
   • Bwhen a stack member fails
   • Cwhen the priority value of a stack member is changed to a higher value
   • Dwhen the stack primary is reset

   Show answer

   Answer: D

   Explanation

   Active and Standby Switch Election and Reelection All stack members are eligible to be the active switch or the standby switch. If the active switch becomes unavailable, the standby switch becomes the active switch. An active switch retains its role unless one of these events occurs: The switch stack is reset. The active switch is removed from the switch stack. The active switch is reset or powered off. The active switch fails. The switch stack membership is increased by adding powered-on standalone switches or switch stacks. The active switch is elected or reelected based on one of these factors and in the order listed: The switch that is currently the active switch. The switch with the highest stack member priority value

   Source: Adapted from community discussion — Jason233

   References

   • cisco.com documentation

   Next question

8. Question 538 · 1003 in bank

   

   Refer to the exhibit. A network engineer troubleshoots an issue with the port channel between SW1 and SW2. Which command resolves the issue?

   • ASW2(config-if)#switchport mode trunk
   • BSW1(config-if)#channel-group 10 mode active
   • CSW1(config-if)#channel-group 10 mode desirable
   • DSW2(config-if)#channel-group 10 mode on

   Show answer

   Answer: B

   Explanation

   it's not saying the other end is running PAgP, it's just saying it's not running LACP. Might not be running neither for what we know.

   Source: Adapted from community discussion — byallmeans

   Next question

9. Question 539 · 1003 in bank

   DRAG DROP - Drag and drop the automation characteristics from the left onto the appropriate tools on the right. Select and Place:

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   Most Ansible modules check whether the desired final state has already been achieved, and exit without performing any actions if that state has been achieved, so that repeating the task does not change the final state. Modules that behave this way are often called ‘idempotent.’ Whether you run a playbook once, or multiple times, the outcome should be the same. However, not all playbooks and not all modules behave this way. If you are unsure, test your playbooks in a sandbox environment before running them multiple times in production. (Source: https://docs.ansible.com/ansible/latest/playbook_guide/playbooks_intro.html).... I think you are right

   Source: Adapted from community discussion — Rose66

   References

   • cisco.com documentation

   

   Next question

10. Question 540 · 1003 in bank

    How do stratum levels relate to the distance from a time source?

    • AStratum 0 devices are connected directly to an authoritative time source.
    • BStratum 1 devices are connected directly to an authoritative time source.
    • CStratum 15 devices are connected directly to an authoritative time source.
    • DStratum 15 devices are an authoritative time source.

    Show answer

    Answer: B

    Explanation

    Yes. Straum 0 IS the authoritative time source. Straum 1 is directly connective to the authoritative source, 0 ... Answer is B. Given answer is correct.

    Source: Adapted from community discussion — CCNPWILL

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

350-401 practice, question 531. 1003 questions available.