350-401 practice questions 651–660

1. Question 651 · 1003 in bank

   Select 3

   JSON web tokens (JWT) are used to secure JSON based communications. Which of the following fields make up a JWT? (Choose three.)

   • AHeader
   • BTrailer
   • CPayload
   • DSequence number
   • ESignature

   Show answer

   Answer: ACE

   Explanation

   A JWT (JSON Web Token) is comprised of three parts: Header: A JSON object that describes the type of token and the cryptographic algorithm used to secure it. It typically consists of two fields: "alg" for algorithm and "typ" for type. Payload: A JSON object that contains the claims (statements) about the user or system that the token represents. The claims can include user ID, name, email, role, and any other relevant information. The payload may also contain additional custom claims, and the entire payload is typically encrypted using the algorithm specified in the header. Signature: A hash that is used to verify the authenticity of the token. The signature is computed by combining the encoded header, the encoded payload, and a secret key known only to the issuer, using the algorithm specified in the header. Together, these three components make up a JWT, which is typically used for authentication and authorization in web applications and APIs.

   Source: Adapted from community discussion — Vlad_Is_Love_ua

   Next question

2. Question 652 · 1003 in bank

   Select 2

   Ansible is being used in a network for configuration and management automation. Which of the following are true statements regarding Ansible? (Choose two.)

   • ARequires an agent on the end device.
   • BUtilizes the concept of playbooks to execute the configuration.
   • CUses a pull model, where the end devices pull configuration files from the Ansible server.
   • DUtilizes SSH.

   Show answer

   Answer: BD

   Next question

3. Question 653 · 1003 in bank

   In a Cisco Software Defined Networking (SDN) architecture, what is used to describe the API communication between the SDN controller and the network elements (routers and switches) that it manages?

   • ASouthbound API
   • BNorthbound API
   • CWestbound API
   • DEastbound API.

   Show answer

   Answer: A

   Explanation

   A is correct Southbound APIs relay information to the switches and routers in network. Northbound APIs communicate with the applications and deploy services.

   Source: Adapted from community discussion — NikosTsironis

   References

   • Cisco documentation

   Next question

4. Question 654 · 1003 in bank

   In a Cisco VXLAN based network, which of the following best describes the main function of a VXLAN Tunnel Endpoint (VTEP)?

   • AA device that performs VXLAN encapsulation and decapsulation.
   • BIt is a 24 bit segment ID that defines the broadcast domain.
   • CIt is the Logical interface where the encapsulation and de-encapsulation occurs.
   • DIt is a device that performs tunneling using GRE.

   Show answer

   Answer: A

   Explanation

   provided answer is correct VTEP (Virtual Tunnel Endpoint) - This is the device that does the encapsulation and de-encapsulation. reference:https://www.cisco.com/c/en/us/support/docs/switches/nexus-9000-series-switches/118978-config-vxlan-00.html

   Source: Adapted from community discussion — Darude

   References

   • Cisco documentation
   • Cisco documentation

   Next question

5. Question 655 · 1003 in bank

   Select 2

   Two Cisco switches are logically configured as a single switch using Cisco Stackwise technology. This will result in virtually combining which two planes? (Choose two.)

   • AData Plane
   • BControl Plane
   • CForwarding Plane
   • DManagement Plane
   • EBearer Plane

   Show answer

   Answer: BD

   Explanation

   provided answer is correct. StackWise Virtual (SV) combines two switches into a single logical network entity from the network control plane and management perspectives. reference:https://www.cisco.com/c/en/us/products/collateral/switches/catalyst-9000/nb-06-cat-9k-stack-wp-cte-en.html

   Source: Adapted from community discussion — Darude

   References

   • Cisco documentation
   • Cisco documentation

   Next question

6. Question 656 · 1003 in bank

   DRAG DROP - Please drag and drop the options provided in the left to configure NTP in client mode.

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   Step 1 Configure an authentication key pair for NTP and specify whether the key will be trusted or untrusted. Step 2 Set the IP address of the NTP server and the public key. Step 3 Enable NTP client mode. Step 4 Enable NTP authentication.

   Source: Adapted from community discussion — Mohaned990_go

   References

   • Cisco documentation
   • cisco.com documentation

   

   Next question

7. Question 657 · 1003 in bank

   Please select the correct option that shows the correct combination for the Type 1 Hypervisor.

   • AHardware; Hypervisor; Guest OS
   • BHardware; Host OS; Hypervisor; Guest OS
   • CHost OS; Hypervisor; Guest OS
   • DHardware; Host OS; Guest OS

   Show answer

   Answer: A

   Next question

8. Question 658 · 1003 in bank

   DRAG DROP - Drag and drop the definitions on the left to their respective technological names on the right.

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   RSSI = for Received Signal Strength Indicator, and measures how well a client device can hear (receive) a signal SNR = Signal-to-Noise Ratio is a ratio based value that evaluates your signal based on the noise being seen Data Rate = Data Rate is defined as the amount of data transmitted during a specified time period over a network Power level = The signal strength is the wireless signal power level received by the wireless client. Strong signal strength results in more reliable connections and higher speeds

   Source: Adapted from community discussion — jrquissak

   

   Next question

9. Question 659 · 1003 in bank

   Select 2

   Select the prerequisites for configuring LISP from the below options. (Choose two.)

   • ADetermine the type of LISP deployment you intend to deploy
   • BOne can directly deploy LISP without determining the type.
   • CLISP configuration requires the datak9 license.
   • DLISP configuration requires the advanced ip services license.

   Show answer

   Answer: AC

   Explanation

   From the article below: Before you can configure Locator/ID Separation Protocol (LISP), you will need to determine the type of LISP deployment you intend to deploy. The LISP deployment defines the necessary functionality of LISP devices, which, in turn, determines the hardware, software, and additional support from LISP mapping services and proxy services that are required to complete the deployment. LISP configuration requires the datak9 license. https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/iproute_lisp/configuration/xe-3s/irl-xe-3s-book/irl-overview.html

   Source: Adapted from community discussion — AndreasThornus

   References

   • Cisco documentation

   Next question

10. Question 660 · 1003 in bank

    Which statement about route targets is true when using VRF-Lite?

    • ARoute targets control the import and export of routes into a customer routing table.
    • BWhen BGP is configured, route targets are transmitted as BGP standard communities.
    • CRoute targets allow customers to be assigned overlapping addresses.
    • DRoute targets uniquely identify the customer routing table.

    Show answer

    Answer: A

    Explanation

    The answer is "A". https://www.cisco.com/c/en/us/td/docs/optical/15000r8_0/ethernet/454/guide/d80ether/r8vrf.pdf Step: 3 Command: Router(config-vrf)# route-target {import | export | both} route-distinguisher Purposes: Creates a list of import and/or export route target communities for the specified VRF.

    Source: Adapted from community discussion — edg

    References

    • Cisco documentation
    • cisco.com documentation

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

350-401 practice, question 651. 1003 questions available.