350-401 practice questions 731–740

1. Question 731 · 1003 in bank

   A wireless administrator must create a new web authentication corporate SSID that will be using ISE as the external RADIUS server. The guest VLAN must be specified after the authentication completes. Which action must be performed to allow the ISE server to specify the guest VLAN?

   • AEnable AAA Override.
   • BEnable Network Access Control State.
   • CSet AAA Policy name.
   • DSet RADIUS Profiling.

   Show answer

   Answer: A

   Explanation

   The Answer is A AAA Override Here's the Link: https://www.cisco.com/c/en/us/support/docs/wireless-mobility/wlan-security/217043-configure-dynamic-vlan-assignment-with-c.html#anc18 Yet another incorrect answer, it would be amazing if they fix this as some people will fail the exam if they solely go by the answers provided by examtopics

   Source: Adapted from community discussion — Clauster

   References

   • Cisco documentation
   • Cisco documentation

   Next question

2. Question 732 · 1003 in bank

   An engineer must configure an EXEC authorization list that first checks a AAA server then a local username. If both methods fail, the user is denied. Which configuration should be applied?

   • Aaaa authorization exec default local group radius none
   • Baaa authorization exec default group radius local none
   • Caaa authorization exec default group radius local
   • Daaa authorization exec default local group tacacs+

   Show answer

   Answer: C

   Explanation

   A. aaa authorization exec default local group radius none -wrong because it checks local first B. aaa authorization exec default group radius local none -WRONG, it checks everything in the correct order, but "none" doesn;t require any C. aaa authorization exec default group radius local -CORRECT, the only correct order that only allows what we want D. aaa authorization exec default local group tacacs+ -WRONG, for same reason as A

   Source: Adapted from community discussion — darkspawn117

   References

   • Cisco documentation

   Next question

3. Question 733 · 1003 in bank

   Refer to the exhibit.

   

   A company requires that all wireless users authenticate using dynamic key generation. Which configuration must be applied?

   • AAP(config-if-ssid)# authentication open eap eap_methods
   • BAP(config-if-ssid)# authentication dynamic open wep_dynamic
   • CAP(config-if-ssid)# authentication dynamic wep wep_methods
   • DAP(config-if-ssid)# authentication open wep wep_methods

   Show answer

   Answer: A

   Explanation

   After several minutes researching the answer is A. Here's the documentation that clearly states it: https://www.cisco.com/c/en/us/td/docs/routers/access/wireless/software/guide/SecurityAuthenticationTypes.html#:~:text=This%20authentication%20type%20provides%20the%20highest%20level%20of,authentication%20and%20derive%20a%20dynamic%20unicast%20WEP%20key. Also here's answer from other Exams with the same question correct answer https://exam-files.com/cisco/350-401/implementing%20cisco%20enterprise%20network%20core%20technologies%20%28350-401%20encor%29.certdumps.350-401.2022-03-01.1e.498q.vcex/ MODERATOR PLEASE FIX WHEN POSSIBLE>

   Source: Adapted from community discussion — Clauster

   References

   • Cisco documentation
   • Cisco documentation
   • Cisco documentation

   Next question

4. Question 734 · 1003 in bank

   

   Refer to the exhibit. An engineer must deny HTTP traffic from host A to host B while allowing all other communication between the hosts. Which command set accomplishes this task?

   • ASW1(config)# mac access-list extended HOST-A-B SW1(config-ext-macl)# permit host aaaa.bbbb.cccc aaaa.bbbb.dddd SW1(config)# ip access-list extended DENY-HTTP SW1(config-ext-nacl)# deny tcp host 10.1.1.10 host 10.1.1.20 eq www SW1(config)# vlan access-map DROP-MAC 10 SW1(config-access-map)# match mac address HOST-A-B SW1(config-access-map)# action drop SW1(config)# vlan access-map HOST-A-B 20 SW1(config-access-map)# match ip address DENY-HTTP SW1(config-access-map)# action drop SW1(config)# vlan filter HOST-A-B vlan 10
   • BSW1(config)# ip access-list extended DENY-HTTP SW1(config-ext-nacl)# deny tcp host 10.1.1.10 host 10.1.1.20 eq www SW1(config)# ip access-list extended MATCH_ALL SW1(config-ext-nacl)# permit ip any any SW1(config)# vlan access-map HOST-A-B 10 SW1(config-access-map)# match ip address DENY-HTTP SW1(config-access-map)# action drop SW1(config)# vlan access-map HOST-A-B 20 SW1(config-access-map)# match ip address MATCH_ALL SW1(config-access-map)# action forward SW1(config)# vlan filter HOST-A-B vlan 10
   • CSW1(config)# mac access-list extended HOST-A-B SW1(config-ext-macl)# permit host aaaa.bbbb.cccc aaaa.bbbb.dddd SW1(config)# ip access-list extended DENY-HTTP SW1(config-ext-nacl)# permit tcp host 10.1.1.10 host 10.1.1.20 eq www SW1(config)# vlan access-map DROP-MAC 10 SW1(config-access-map)# match mac address HOST-A-B SW1(config-access-map)# action forward SW1(config)# vlan access-map HOST-A-B 20 SW1(config-access-map)# match ip address DENY-HTTP SW1(config-access-map)# action drop SW1(config)# vlan filter HOST-A-B vlan 10

   Show answer

   Answer: B

   Explanation

   MAC Access-Lists is irrelevant here. B seems to be the closest answer, however, it is not right in that form. This should work: SW1(config)# ip access-list extended DENY-HTTP SW1(config-ext-nacl)# permit tcp host 10.1.1.10 host 10.1.1.20 eq www SW1(config)# vlan access-map DROP-MAC 10 SW1(config-access-map)# match ip address DENY-HTTP SW1(config-access-map)# action drop SW1(config)# vlan access-map DROP-MAC 20 SW1(config-access-map)# action forward SW1(config-access-map)# exit SW1(config)# vlan filter DROP-MAC vlan 10 https://www.networkstraining.com/vlan-access-map-example-configuration/

   Source: Adapted from community discussion — HungarianDish_111

   Next question

5. Question 735 · 1003 in bank

   A network engineer wants to configure console access to a router without using AAA so that the privileged exec mode is entered directly after a user provides the correct login credentials. Which action achieves this goal?

   • AConfigure a RADIUS or TACACS+ server and use it to send the privilege level.
   • BConfigure login authentication privileged on line con 0.
   • CConfigure privilege level 15 on line con 0.
   • DConfigure a local username with privilege level 15.

   Show answer

   Answer: C

   Explanation

   D only works if "login local" is added under "line con 0". We need to tell the device to use the local user database for authentication. C achieves the goal. https://www.n-study.com/en/cisco-basic/login-privilege-exec/

   Source: Adapted from community discussion — HungarianDish_111

   Next question

6. Question 736 · 1003 in bank

   Select 2

   Which two entities are Type 1 hypervisors? (Choose two.)

   • AOracle VM VirtualBox
   • BMicrosoft Hyper-V
   • CVMware server
   • DVMware ESXi
   • EMicrosoft Virtual PC

   Show answer

   Answer: BD

   Next question

7. Question 737 · 1003 in bank

   Refer to the exhibit.

   

   What is output by this code?

   • A0 5
   • B0 1 2 3 4 5
   • C0 1 2 3 4
   • D(0,5)

   Show answer

   Answer: C

   Next question

8. Question 738 · 1003 in bank

   What is one benefit of implementing a data modeling language?

   • Ause XML style of data formatting
   • Binteroperability to allow unlimited implementations
   • Cmachine-oriented logic and language-facilitated processing
   • Dconceptual representation makes interpretation simple

   Show answer

   Answer: D

   Explanation

   I found the answer also to a not so network page! Check this out: https://www.indeed.com/career-advice/career-development/data-modeling D: Data modeling allows you to conceptually represent the data and the association between data objects and rules.

   Source: Adapted from community discussion — Nickplayany

   Next question

9. Question 739 · 1003 in bank

   Refer to the exhibit.

   

   What is generated by the script?

   • Athe router processes
   • Bthe cdp neighbors
   • Cthe routing table
   • Dthe running configuration

   Show answer

   Answer: D

   Explanation

   This Python script seems to be using the ncclient library to connect to a network device via NETCONF (Network Configuration Protocol). It retrieves the running configuration of the device and saves it as an XML file. Here's what the script does step by step: Imports the manager class from the ncclient module. Connects to a network device with the provided host, port, username, and disables host key verification. Retrieves the running configuration of the device in XML format. Writes the XML configuration to a file named after the host, with the extension .xml. So, the script generates an XML file containing the running configuration of the network device specified by the provided host, port, and username. The filename will be based on the host's IP address or hostname.

   Source: Adapted from community discussion — slacker_at_work

   Next question

10. Question 740 · 1003 in bank

    What is a benefit of YANG modules?

    • Atightly coupled models with encoding to improve performance
    • Beasier multivendor interoperability provided by common or industry models
    • Cavoidance of ecosystem fragmentation by having fixed modules that cannot be changed
    • Dsingle protocol and model coupling to simplify maintenance and support

    Show answer

    Answer: B

    Explanation

    B. Easier multivendor interoperability provided by common or industry models stands out as a significant benefit of YANG modules. They facilitate interoperability between devices from different vendors by providing standardized and commonly accepted data models.

    Source: Adapted from community discussion — AdamoNetworko

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

350-401 practice, question 731. 1003 questions available.