350-401 practice questions 791–800

1. Question 791 · 1003 in bank

   When a DNS host record is configured for a new Cisco AireOS WLC, which hostname must be added to allow APs to successfully discover the WLC?

   • ACONTROLLER-CAPWAP-CISCO
   • BCISCO-CONTROLLER-CAPWAP
   • CCAPWAP-CISCO-CONTROLLER
   • DCISCO-CAPWAP-CONTROLLER

   Show answer

   Answer: D

   Explanation

   DNS discovery—The access point can discover controllers through your domain name server (DNS). You must configure your DNS to return controller IP addresses in response to CISCO-CAPWAP-CONTROLLER.localdomain , where localdomain is the access point domain name. When an access point receives an IP address and DNS information from a DHCP server, it contacts the DNS to resolve CISCO-CAPWAP-CONTROLLER.localdomain . When the DNS sends a list of controller IP addresses, the access point sends discovery requests to the controllers.

   Source: Adapted from community discussion — slacker_at_work

   References

   • Cisco documentation

   Next question

2. Question 792 · 1003 in bank

   

   Refer to the exhibit. An engineer tries to log in to router R1. Which configuration enables a successful login?

   • AR1#username admin privilege 15 - aaa authorization exec default local
   • BR1#username admin privilege 15 - aaa authorization exec default local netconf-yang
   • CR1#netconf-yang - username admin privilege 15 secret cisco123 aaa new-model aaa authorization exec default local
   • DR1#aaa new-model - aaa authorization exec default local enable aaa admin privilege 15

   Show answer

   Answer: C

   Next question

3. Question 793 · 1003 in bank

   Which statement must be used to export the contents of the devices object in JSON format?

   

   • Ajson.repr(Devices)
   • Bjson.loads(Devices)
   • Cjson.print(Devices)
   • Djson.dumps(Devices)

   Show answer

   Answer: D

   Explanation

   json.loads(jsonString) — json string to python object json.dumps(pythonObject) — python object to json string json.load(fileHandler) — json file to python object — python object from file json.dump(jsonString or pythonObject, fileHandler) — json string or python object to json file

   Source: Adapted from community discussion — Asombrosso

   Next question

4. Question 794 · 1003 in bank

   Why does the vBond orchestrator have a public IP?

   • Ato allow for global reachability from all WAN Edges in the Cisco SD-WAN and to facilitate NAT traversal
   • Bto provide access to Cisco Smart Licensing servers for license enablement
   • Cto enable vBond to learn the public IP of WAN Edge devices that are behind NAT gateways or in private address space
   • Dto facilitate downloading and distribution of operational and security patches

   Show answer

   Answer: A

   References

   • cisco.com documentation
   • cisco.com documentation
   • Cisco documentation

   Next question

5. Question 795 · 1003 in bank

   Why would a small or mid-size business choose a cloud solution over an on-premises solution?

   • ACloud provides greater ability for customization than on-premises.
   • BCloud provides more control over the implementation process than on-premises.
   • CCloud provides lower upfront cost than on-premises.
   • DCloud provides higher data security than on-premises.

   Show answer

   Answer: C

   Next question

6. Question 796 · 1003 in bank

   Select 2

   Which two new security capabilities are introduced by using a next-generation firewall at the Internet edge? (Choose two.)

   • Astateful packet inspection
   • Bintegrated intrusion prevention
   • CNAT
   • DVPN
   • Eapplication-level inspection

   Show answer

   Answer: BE

   Explanation

   Answers A, C and D is what you have in a conventional firewall, so they are wrong for this question. B and E are the correct answers.

   Source: Adapted from community discussion — Zeruz

   References

   • Cisco documentation

   Next question

7. Question 797 · 1003 in bank

   

   Refer to the exhibit. An engineer builds an EEM script to apply an access list. Which statement must be added to complete the script?

   • Aaction 6.0 cli command "ip access-list extended 101"
   • Baction 3.1 cli command "ip access-list extended 101"
   • Cevent none
   • Daction 2.1 cli command "ip access-list extended 101"

   Show answer

   Answer: C

   Explanation

   C is correct. The applet is missing the trigger event configuration. In this case there is no trigger event, so none must be selected. The access list is already configured, the applet only needs to apply it. event manager applet Block_Users event none action 1.0 cli command "enable" action 2.0 cli command "configure terminal" action 3.0 cli command "interface GigabitEthernet1" action 4.0 cli command "ip access-group 101 in" action 5.0 cli command "ip access-group 101 out" action 7.0 cli command "end"

   Source: Adapted from community discussion — Manvek

   References

   • Cisco documentation

   Next question

8. Question 798 · 1003 in bank

   DRAG DROP - Drag and drop the solutions that comprise Cisco Cyber Threat Defense from the left onto the objectives they accomplish on the right.

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   References

   • cisco.com documentation

   

   Next question

9. Question 799 · 1003 in bank

   

   Refer to the exhibit. An engineer is troubleshooting an issue with client devices triggering excessive power changes on APs in the 2.4 GHz band. Which action resolves this issue?

   • ADisable Aironet IE.
   • BSet the 802.11b/g/n DTIM interval to 0.
   • CEnable MFP Client Protection.
   • DDisable Coverage Hole Detection.

   Show answer

   Answer: D

   Explanation

   Provided answer is correct. "The device discriminates between coverage holes that can and cannot be corrected. For coverage holes that can be corrected, the device mitigates the coverage hole by increasing the transmit power level for that specific access point" https://www.cisco.com/c/en/us/td/docs/wireless/controller/ewc/16-12/config-guide/ewc_cg_16_12/coverage_hole_detection.pdf

   Source: Adapted from community discussion — Manvek

   References

   • Cisco documentation

   Next question

10. Question 800 · 1003 in bank

    What it the purpose of the LISP routing and addressing architecture?

    • AIt creates two entries for each network node, one for its identity and another for its location on the network.
    • BIt allows LISP to be applied as a network virtualization overlay though encapsulation.
    • CIt allows multiple instances of a routing table to co-exist within the same router.
    • DIt creates head-end replication used to deliver broadcast and multicast frames to the entire network.

    Show answer

    Answer: A

    Explanation

    A is right - B would be right if it stated "It allows VXLAN to be applied as a network virtualization overlay though encapsulation". but it doesn't it states "It allows LISP to be applied as a network virtualization overlay though encapsulation.".

    Source: Adapted from community discussion — Rockford

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

350-401 practice, question 791. 1003 questions available.