350-401 practice questions 831–840

1. Question 831 · 1003 in bank

   Which entity is responsible for maintaining Layer 2 isolation between segments in a VXLAN environment?

   • AVNID
   • Bswitch fabric
   • CVTEP
   • Dhost switch

   Show answer

   Answer: A

   Explanation

   A is correct : The 24-bit VNID is used to identify Layer 2 segments and to maintain Layer 2 isolation between the segments. With all 24 bits in VNID, VXLAN can support 16 million LAN segments. Source : https://www.ciscopress.com/articles/article.asp?p=2999385&seqNum=3#:~:text=The%2024%2Dbit%20VNID%20is,support%2016%20million%20LAN%20segments.

   Source: Adapted from community discussion — ShadyAbdekmalek

   Next question

2. Question 832 · 1003 in bank

   Which version of NetFlow does Cisco Threat Defense utilize to obtain visibility into the network?

   • ANBAR2
   • BIPFIX
   • C8
   • Dflexible

   Show answer

   Answer: D

   Explanation

   "The latest iteration of Cisco-developed NetFlow is Flexible NetFlow. Flexible NetFlow extends NetFlow version 9 capabilities to help customer determine how to optimize resource usage, plan network capacity, and identify the optimal application layer for quality of service (QoS)." https://www.cisco.com/c/dam/en/us/td/docs/security/network_security/ctd/ctd2-0/design_guides/ctd_2-0_cvd_guide_jul15.pdf

   Source: Adapted from community discussion — kldoyle97

   References

   • Cisco documentation
   • cisco.com documentation

   Next question

3. Question 833 · 1003 in bank

   

   Refer to the exhibit. What is printed to the console when this script is run?

   • Aa key-value pair in tuple type
   • Ban error
   • Ca key-value pair in list type
   • Da key-value pair in string type

   Show answer

   Answer: D

   Explanation

   Here is the output of the Python program: ``` vlan10 192.168.1.0 vlan20 192.168.2.0 vlan30 192.168.3.0 ``` A string representation of key-value pairs with a space separating the key and value.

   Source: Adapted from community discussion — Horsefeathers

   Next question

4. Question 834 · 1003 in bank

   What is a difference between Chef and other automation tools?

   • AChef is an agentless tool that uses playbooks, and Ansible is an agent-based tool that uses cookbooks.
   • BChef is an agentless tool that uses a primary/minion architecture, and SaltStack is an agent-based tool that uses a primary/secondary architecture
   • CChef is an agent-based tool that uses cookbooks, and Ansible is an agentless tool that uses playbooks.
   • DChef uses Domain Specific Language, and Puppet uses Ruby.

   Show answer

   Answer: C

   Explanation

   https://learningnetwork.cisco.com/s/question/0D56e0000CwDQqvCQG/what-is-chef Chef uses different terminology to Puppet. Instead of modules and manifests, Chef has cookbooks and recipes. A kitchen is an environment where recipes and cookbooks are tested before deployment.

   Source: Adapted from community discussion — NikosTsironis

   References

   • cisco.com documentation

   Next question

5. Question 835 · 1003 in bank

   An engineer must configure a new WLAN that supports 802.11r and requires users to enter a passphrase. What must be configured to support this requirement?

   • A802.1X and Fast Transition
   • BFT PSK and Fast Transition
   • C802.1X and SUITEB-1X
   • DFT PSK and SUITEB-1X

   Show answer

   Answer: B

   Explanation

   802.11r is FT -- so It is A or B But A requires users to authenticate not only with password, but with username also, and PSK indicates PreSharedKey. B should be the correct answer https://blogs.cisco.com/networking/what-is-802-11r-why-is-this-important

   Source: Adapted from community discussion — kaupz

   References

   • cisco.com documentation

   Next question

6. Question 836 · 1003 in bank

   

   Refer to the exhibit. An engineer is troubleshooting an mDNS issue in an environment where Cisco ISE is used to dynamically assign mDNS roles to users. The engineer has confirmed that ISE is sending the correct values, but name resolution is not functioning as expected. Which WLC configuration change resolves the issue?

   • AEnable AAA Override.
   • BEnable Aironet IE.
   • CSet MFP client protection to Required.
   • DChange NAC state to ISE NAC.

   Show answer

   Answer: A

   Explanation

   The correct answer is A. Enable AAA Override. AAA Override is a feature that allows the Cisco Wireless LAN Controller (WLC) to use the attributes returned from the RADIUS server via Access-Accept message to override the configuration on the WLC. When AAA Override is enabled and the WLC is integrated with Cisco ISE, it allows for dynamic VLAN assignments, QoS, ACLs, and mDNS (Bonjour) profiles on a per-user basis. In this case, enabling AAA Override would allow the WLC to apply the mDNS roles assigned by ISE to the users, which should resolve the issue with mDNS name resolution. The other options (B, C, D) are not directly related to mDNS role assignment or name resolution. Therefore, they would not resolve the issue.

   Source: Adapted from community discussion — cloud29

   Next question

7. Question 837 · 1003 in bank

   What is one role of the VTEP in a VXLAN environment?

   • Ato maintain VLAN configuration consistency
   • Bto forward packets to non-LISP sites
   • Cto provide EID-to-RLOC mapping
   • Dto encapsulate the tunnel

   Show answer

   Answer: D

   Explanation

   Option C functionality is associated with LISP, not VXLAN. In LISP, EID (Endpoint Identifier) to RLOC (Routing Locator) mapping is a key function. VXLAN does not use EID-to-RLOC mapping. Instead, it uses VTEPs to encapsulate and decapsulate VXLAN packets.

   Source: Adapted from community discussion — Shri_Fcb10

   Next question

8. Question 838 · 1003 in bank

   DRAG DROP - Drag and drop the snippets onto the blanks within the code to construct a script that configures BGP according to the topology. Not all options are used, and some options may be used twice.

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   No, answer is correct ... on client router router bgp 65001 neighbor 192.168.1.1 remote-as 65000 address family ipv4 ... neighbor 192.168.1.1

   Source: Adapted from community discussion — studying_1

   

   Next question

9. Question 839 · 1003 in bank

   How is CAPWAP data traffic encapsulated when running an Over the Top WLAN in a Cisco SD-Access wireless environment?

   • ALISP
   • BVXLAN
   • CGRE
   • DIPsec

   Show answer

   Answer: B

   References

   • Cisco documentation

   Next question

10. Question 840 · 1003 in bank

    

    Refer to the exhibit. What does the Python code accomplish?

    • AIt configures interface e1/32 to be in an admin down state
    • BIt generates a status code of 403 because the type is incorrect.
    • CIt configures interface e1/32 to be in an err-disable state.
    • DIt returns data in JSON-RPC format.

    Show answer

    Answer: A

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

350-401 practice, question 831. 1003 questions available.