350-401 practice questions 571–580

1. Question 571 · 1003 in bank

   An engineer is configuring RADIUS-Based Authentication with EAP MS-CHAPv2 is configured on a client device. Which outer method protocol must be configured on the ISE to support this authentication type?

   • ALDAP
   • BEAP-FAST
   • CEAP-TLS
   • DPEAP

   Show answer

   Answer: D

   Explanation

   D. If you use EAP-MSCHAPv2, it means that your clients doesn't need to have a certificate, but your authentication server (NPS) has a certificate. Passwords from the clients are send using hashes to the authentication server. To protect these password hashes being send over the network, you can use PEAP which act as a TLS/SSL tunnel to protect the authentication traffic.

   Source: Adapted from community discussion — kebkim

   References

   • Cisco documentation
   • Cisco documentation
   • cisco.com documentation

   Next question

2. Question 572 · 1003 in bank

   An engineer must protect the password for the VTY lines against over-the-shoulder attacks. Which configuration should be applied?

   • Aline vty 0 15 password XD822j
   • Bservice password-encryption
   • Cusername netadmin secret 7 $1$42J31k98867Pyh4QzwXyZ4
   • Dusername netadmin secret 9 $9$vFpMf8elb4RVV8$seZ/bDA

   Show answer

   Answer: B

   Explanation

   This is referring to the password under the VTY lines, meaning that we are using the password command under line vty 0 15, and to protect that password from over-the-shoulder attacks when we issue a show run we have to use service password-encryption. This is also in Question #721, where the only correct answer is service password-encryption as well.

   Source: Adapted from community discussion — Burik

   Next question

3. Question 573 · 1003 in bank

   

   Refer to the exhibit. Hosts FC1, PC2; and PC3 must access resources on Server1. An engineer configures NAT on Router R1 to enable the communication and enters the show command to verify operation. Which IP address is used by the hosts when they communicate globally to Server1?

   • Arandom addresses in the 155.1.1.0/24 range
   • B155.1.1.1
   • Ctheir own address in the 10.10.10.0/24 range
   • D155.1.1.5

   Show answer

   Answer: B

   Explanation

   Not sure what the debate here is. Server 1 is 155.1.1.5 the 10.10.10.0/24 network NATs to 155.1.1.1 which then connects to 155.1.1.5... The question asks which IP address is USED BY THE HOSTS when they communicate A lot of you need to learn to read the question

   Source: Adapted from community discussion — mgiuseppe86

   Next question

4. Question 574 · 1003 in bank

   An engineer has deployed a single Cisco 5520 WLC with a management IP address of 172 16.50.5/24. The engineer must register 50 new Cisco AIR-CAP2802I- E-K9 access points to the WLC using DHCP option 43. The access points are connected to a switch in VLAN 100 that uses the 172.16.100.0/24 subnet. The engineer has configured the DHCP scope on the switch as follows: Network 172.16.100.0 255.255.255.0 Default Router 172.16.100.1 - Option 43 ASCII 172.16.50.5 - The access points are failing to join the wireless LAN controller. Which action resolves the issue?

   • Aconfigure option 43 Hex F104.AC10.3205
   • Bconfigure option 43 Hex F104.CA10.3205
   • Cconfigure dns-server 172.16.50.5
   • Dconfigure dns-server 172. 16.100.1

   Show answer

   Answer: A

   Explanation

   The Option 43 hexadecimal string is assembled as a sequence of the TLV values for the Option 43 suboption: Type + Length + Value. Type is always the suboption code 0xf1. Length is the number of controller management IP addresses times 4 in hex. Value is the IP address of the controller listed sequentially in hex. On this question, there is 1 controller with management interface IP addresses 172.16.50.5/24. The type is 0xf1. The length is 1 * 4 = 8 = 0x04. The mgmt IP addresses 172.16.50.5 translate to ac.10.32.05 (0xac103205). When the string is assembled, it yields f108c0a80a05c0a80a14. The Cisco IOS command that is added to the DHCP scope is: option 43 hex f104ac103205

   Source: Adapted from community discussion — [Removed]

   References

   • Cisco documentation

   Next question

5. Question 575 · 1003 in bank

   Using the EIRP formula, what parameter is subtracted to determine the EIRP value?

   • Atransmitter power
   • Bantenna cable loss
   • Cantenna gain
   • Dsignal-to-noise ratio

   Show answer

   Answer: B

   Explanation

   Has to be - B, lets consider an example Output power of the transmitter is 27, Cable loss is 12 and Antenna Gain is 45. EIRP = 27 - 12 (Cable loss) + 45 = 15 + 45 = 60

   Source: Adapted from community discussion — ils9100

   Next question

6. Question 576 · 1003 in bank

   What is one main REST security design principle?

   • Aseparation of privilege
   • Bpassword hashing
   • Cconfidential algorithms
   • DOAuth

   Show answer

   Answer: A

   Next question

7. Question 577 · 1003 in bank

   

   Refer to the exhibit. R1 has a BGP neighborship with a directly connected router on interface Gi0/0. Which command set is applied between the iterations of show ip bgp 2.2.2.2?

   • AR1(config)#no ip route 192.168.50.2 255.255.255.255 Gi0/0
   • BR1(config)#ip route 2.2.2.2 255.255.255.255 192.168.50.2
   • CR1(config)#router bgp 65002 R1(config-router)#neighbor 192.168.50.2 shutdown
   • DR1(config)#router bgp 65001 R1(config-router)#neighbor 192.168.50.2 shutdown

   Show answer

   Answer: B

   Explanation

   BGP rib failure from ‘show ip bgp’ indicates that a route learned from a neighbor where a lower administrative distance (from a static, or other IGP) has already been installed into the routing table, thus the BGP route has failed to install into the IP routing table (RIB) because it has been trumped by the lower admin distance route. static route has lower AD thus the bgp route is failing to install

   Source: Adapted from community discussion — emanc93

   References

   • Cisco documentation

   Next question

8. Question 578 · 1003 in bank

   After a redundant route processor failure occurs on a Layer 3 device, which mechanism allows for packets to be forwarded from a neighboring router based on the most recent tables?

   • ABFD
   • BRP failover
   • CNSF
   • DRPVST+

   Show answer

   Answer: C

   Explanation

   Cisco Nonstop Forwarding (NSF) works with the Stateful Switchover (SSO) feature to minimize the amount of time a network is unavailable to users following a switchover. The main objective of NSF SSO is to continue forwarding IP packets following a Route Processor (RP) switchover.

   Source: Adapted from community discussion — KZM

   References

   • Cisco documentation

   Next question

9. Question 579 · 1003 in bank

   By default, which virtual MAC address does HSRP group 15 use?

   • Ac0:42:31:98:86:0f
   • B05:af:1c:0f:ac:15
   • C00:00:0c:07:ac:0f
   • D05:5e:ac:07:0c:0f

   Show answer

   Answer: C

   Explanation

   interface Ethernet0/0.100 encapsulation dot1Q 100 ip address 10.0.111.1 255.255.255.0 standby 15 ip 10.0.111.254 ! cisco(config-subif)#do s stand Ethernet0/0.100 - Group 15 State is Speak Virtual IP address is 10.0.111.254 Active virtual MAC address is unknown Local virtual MAC address is 0000.0c07.ac0f (v1 default) Hello time 3 sec, hold time 10 sec Next hello sent in 1.200 secs Preemption disabled Active router is unknown Standby router is unknown

   Source: Adapted from community discussion — nushadu

   Next question

10. Question 580 · 1003 in bank

    An engineer must provide wireless coverage in a square office. The engineer has only one AP and believes that it should be placed it in the middle of the room. Which antenna type should the engineer use?

    • Adirectional
    • Bpolarized
    • Comnidirectional
    • DYagi

    Show answer

    Answer: C

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

350-401 practice, question 571. 1003 questions available.