350-401 practice questions 61–70

1. Question 61 · 1003 in bank

   What is a characteristic of Layer 3 roaming?

   • AIt provides seamless roaming between APs that are connected to different Layer 3 networks and different mobility groups.
   • BIt is only supported on controllers that run SSO.
   • CClients must obtain a new IP address when they roam between APs.
   • DIt provides seamless client roaming between APs in different Layer 3 networks but within the same mobility group.

   Show answer

   Answer: D

   Explanation

   It's D. The "client" key word is missing from A, making it incorrect. A successful L3 client roam is provided by controllers in different groups. For Layer 3 roaming to function effectively within Cisco Mobility Groups, several dependencies must be met: 1. Mobility Group Configuration: All participating WLCs must be correctly configured within the same mobility group to share client and access point information. 2. Mobility List Entries: Controllers can communicate across different mobility groups if they include each other in their mobility lists, allowing clients to roam between access points in different groups. 3. Consistent IP Addressing: Clients should maintain the same IP address while roaming across different subnets. This is facilitated by Cisco Centralized Key Management (CCKM) and proactive key caching (PKC), which are specifically designed for inter-mobility-group roaming. 4. Multicast Messaging: Enabling multicast messaging can optimize communication between controllers, especially in large mobility groups, reducing network traffic and improving efficiency.

   Source: Adapted from community discussion — NetworkJanitor

   Next question

2. Question 62 · 1003 in bank

   An administrator must enable Telnet access to Router X using the router username and password database for authentication. Which configuration should be applied?

   • ARouterX(config)# line aux 0 - RouterX(config-line)# password cisco RouterX(config-line)# login -
   • BRouterX(config)# aaa new-model - RouterX(config)# aaa authentication login auth-list local
   • CRouterX(config)# line vty 0 4 - RouterX(config-line)# login - RouterX(config-line)# end -
   • DRouterX(config)# line vty 0 4 - RouterX(config-line)# login local RouterX(config-line)# end

   Show answer

   Answer: D

   Next question

3. Question 63 · 1003 in bank

   SIMULATION - Guidelines - This is a lab item in which tasks will be performed on virtual devices. • Refer to the Tasks tab to view the tasks for this lab item. • Refer to the Topology tab to access the device console(s) and perform the tasks. • Console access is available for all required devices by clicking the device icon or using the tab(s) above the console window. • All necessary pre-configurations have been applied. • Do not remove any existing configurations from the devices, only those necessary to make the appropriate changes required to fulfill the listed tasks. • Do not change the enable password or hostname for any device. • Save your configurations to NVRAM before moving to the next item. • Click Next at the bottom of the screen to submit this lab and move to the next question. • When Next is clicked, the lab closes and cannot be reopened. Topology -

   

   Tasks - Configure R1 according to the topology to achieve these results: 1. Configure eBGP using Loopback 0 for the router-id. Do not use the address-family command to accomplish this. 2. Advertise R1’s Loopback 100 and Loopback 200 networks to AS200 and AS300.

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   I think it should be like this: Router bgp 100 bgp router-id x.x.x.x (ip lo0) or bgp router-id interface loopback 0 neighbor 209.165.200.129 remote-as 300 neighbor 209.165.200.226 remote-as 200 network x.x.x.x (ip lo100) mask 255.255.255.255 network x.x.x.x (ip lo200) mask 255.255.255.255 show ip bgp summary show ip bgp neighbors 209.165.200.129 advertised-routes show ip bgp neighbors 209.165.200.226 advertised-routes

   Source: Adapted from community discussion — klema99

   

   Next question

4. Question 64 · 1003 in bank

   

   Refer to the exhibit. An engineer must configure PAT to provide internet access to all users by using one global address for many local addresses. Which command set completes the configuration?

   • ARouterA(config)# ip nat inside source static 172.16.1.1 172.16.1.2
   • BRouterA(config)# ip nat inside source list 1 pool cisco
   • CRouterA(config)# ip nat inside source static 172.16.1.1 193.64.64.1
   • DRouterA(config)# ip nat inside source list 1 pool cisco overload

   Show answer

   Answer: D

   Explanation

   PAT a.k.a. NAT overloading is enabled using the "overload" keyword. The answer is 'D' assuming that the access-list 1 has already been configured using the following command line: "RouterA(config)#access-list 1 permit 172.16.1.0 0.0.0.255"

   Source: Adapted from community discussion — AbdullahMohammad251

   Next question

5. Question 65 · 1003 in bank

   What does the LAP send when multiple WLCs respond to the CISCO-CAPWAP-CONTROLLER.localdomain hostname during the CAPWAP discovery and join process?

   • Aunicast discovery request to the first WLC that resolves the domain name
   • Bbroadcast discovery request
   • Cjoin request to all the WLCs
   • Dunicast discovery request to each WLC

   Show answer

   Answer: D

   Explanation

   A is ok The Lightweight AP (LAP) can discover controllers through your domain name server (DNS). For the access point (AP) to do so, you must configure your DNS to return controller IP addresses in response to CISCO-LWAPP-CONTROLLER.localdomain, where localdomain is the AP domain name. When an AP receives an IP address and DNS information from a DHCP server, it contacts the DNS to resolve CISCO-CAPWAP-CONTROLLER.localdomain. When the DNS sends a list of controller IP addresses, the AP sends discovery requests to the controllers. The AP will attempt to resolve the DNS name CISCO-CAPWAP-CONTROLLER.localdomain. When the AP is able to resolve this name to one or more IP addresses, the AP sends a unicast CAPWAP Discovery Message to the resolved IP address(es). Each WLC that receives the CAPWAP Discovery Request Message replies with a unicast CAPWAP Discovery Response to the AP. Reference: https://www.cisco.com/c/en/us/support/docs/wireless/4400-series-wireless-lan-controllers/107606-dns-wlc-config.html

   Source: Adapted from community discussion — P1Z7C

   References

   • Cisco documentation
   • Cisco documentation

   Next question

6. Question 66 · 1003 in bank

   A network engineer must configure the VTY lines on a router to achieve these results: • Remote access should be permitted for all feasible protocols. • Only a password should be required for device authentication. • All idle EXEC sessions must be terminated in 60 minutes. Which configuration should be applied?

   • Aline vty 0 15 password Cisco123 transport input ssh exec-timeout 60
   • Bline vty 0 15 login password Cisco123 transport input all absolute-timeout 60
   • Cline vty 0 15 password Cisco123 transport input all exec-timeout 60
   • Dline vty 0 15 transport input telnet ssh rlogin login local absolute-timeout 60

   Show answer

   Answer: C

   Explanation

   The Cisco ‘exec-timeout‘ command sets a specific time to disconnect idle EXEC sessions. The default value for the EXEC timeout is 10 minutes. The absolute timeout terminates the EXEC session even if it is still active and is used during the set timeout period. For this reason I say the given answer is correct.

   Source: Adapted from community discussion — wemustpass

   Next question

7. Question 67 · 1003 in bank

   What is a characteristic of Wi-Fi channels?

   • AThe 2.4-GHz band has 24 non-overlapping channels.
   • BDevices that connect to the same Wi-Fi channel reside in the same collision domain.
   • CWi-Fi channels are spaced 30 MHz apart.
   • DThe 5-GHz band offers 11 different channels for Wi-Fi clients.

   Show answer

   Answer: B

   Next question

8. Question 68 · 1003 in bank

   Which function is handled by vManage in the Cisco SD-WAN fabric?

   • AEstablishes IPsec tunnels with nodes.
   • BPerforms remote software upgrades for WAN Edge, vSmart, and vBond.
   • CDistributes policies that govern data forwarding.
   • DEstablishes BFD sessions to test liveliness of links and nodes.

   Show answer

   Answer: B

   Next question

9. Question 69 · 1003 in bank

   SIMULATION - Guidelines - This is a lab item in which tasks will be performed on virtual devices. • Refer to the Tasks tab to view the tasks for this lab item. • Refer to the Topology tab to access the device console(s) and perform the tasks. • Console access is available for all required devices by clicking the device icon or using the tab(s) above the console window. • All necessary preconfigurations have been applied. • Do not change the enable password or hostname for any device. • Save your configurations to NVRAM before moving to the next item. • Click Next at the bottom of the screen to submit this lab and move to the next question. • When Next is clicked, the lab closes and cannot be reopened. Topology -

   

   Tasks - OSPF is preconfigured on all devices except R20. Configure R20 to complete these tasks. Task 1: Configure OSPF according to the topology using these requirements: • Use Process ID 10. • Use Loopback1 for the Router ID. • Advertise all networks into OSPF. o Use network statements under the OSPF process to accomplish this task. Task 2: Configure a /20 summary route for Area 40. • Advertise only Type 3 LSAs into Area 0. R20 -

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   Task 1 ! router ospf 10 router-id 2.2.2.2 network 2.2.2.2 0.0.0.0 area 0 network 10.10.20.0 0.0.0.255 area 0 network 10.20.30.0 0.0.0.255 area 0 network 10.40.50.0 0.0.0.255 area 40 ! Task 2 ! router ospf 10 area 40 range 10.40.48.0 255.255.240.0 !

   Source: Adapted from community discussion — cjoyce1980

   

   Next question

10. Question 70 · 1003 in bank

    What is a benefit of MACsec in a multilayered LAN network design?

    • AApplication flows between hosts on the LAN to remote destinations can be encrypted.
    • BLayer 2 trunk links between switches can be secured.
    • CThere is no requirement to run IEEE 802.1X when MACsec is enabled on a switch port.
    • DLayer 3 links between switches can be secured.

    Show answer

    Answer: B

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

350-401 practice, question 61. 1003 questions available.