350-401 practice questions 941–950

1. Question 941 · 1003 in bank

   Select 2

   What are two characteristics of vManage APIs? (Choose two.)

   • ANorthbound API is based on RESTCONF and JSON.
   • BSouthbound API is based on NETCONF and XML.
   • CSouthbound API is based on RESTCONF and JSON.
   • DSouthbound API is based on OMP and DTLS.
   • ENorthbound API is RESTful using JSON.

   Show answer

   Answer: BE

   Explanation

   B & E are correct The Network Configuration Protocol (NetConf) uses an Extensible Markup Language (XML) to communicate with the switches and routers to install and make configuration changes. NETCONF is an XML-based protocol used for configuration and monitoring devices in the network. https://www.sdxcentral.com/networking/sdn/definitions/what-the-definition-of-software-defined-networking-sdn/southbound-interface-api/#:~:text=The%20Network%20Configuration%20Protocol%20(NetConf)%20uses%20an%20Extensible%20Markup%20Language%20(XML)%20to%20communicate%20with%20the%20switches%20and%20routers%20to%20install%20and%20make%20configuration%20changes https://docs.opendaylight.org/projects/netconf/en/latest/user-guide.html#:~:text=NETCONF%20is%20an%20XML%2Dbased%20protocol%20used%20for%20configuration%20and%20monitoring%20devices%20in%20the%20network.

   Source: Adapted from community discussion — [Removed]

   Next question

2. Question 942 · 1003 in bank

   Which API does Cisco DNA Center use to retrieve information about images?

   • ASWIM
   • BImg-Mgmt
   • CPnP
   • DClient Health

   Show answer

   Answer: A

   Explanation

   SWIM (Software Image Management) is responsible for handling image-related operations, including image retrieval, distribution, and installation within the Cisco DNA Center environment.

   Source: Adapted from community discussion — Mizuchan

   References

   • Cisco documentation

   Next question

3. Question 943 · 1003 in bank

   What is a characteristic of the Cisco DNA Center Template Editor feature?

   • AIt provides a high-level overview of the health of every network device.
   • BIt facilitates software upgrades to network devices from a central point.
   • CIt uses a predefined configuration through parameterized elements or variables.
   • DIt facilitates a vulnerability assessment of the network devices.

   Show answer

   Answer: C

   Explanation

   C is correct. "About Template Editor Cisco DNA Center provides an interactive editor called Template Editor to author CLI templates. You can design templates easily with a predefined configuration by using parameterized elements or variables. After creating a template, you can reuse the template to deploy your devices in one or more sites that are configured anywhere in your network. " https://www.cisco.com/c/en/us/td/docs/cloud-systems-management/network-automation-and-management/dna-center/2-3-3/user_guide/b_cisco_dna_center_ug_2_3_3/b_cisco_dna_center_ug_2_3_3_chapter_01000.html

   Source: Adapted from community discussion — Mistwalker

   References

   • Cisco documentation

   Next question

4. Question 944 · 1003 in bank

   What is a characteristic of vManage?

   • AIt leverages the overlay management protocol to interface with WAN Edge devices.
   • BIt supports protocols such as OSPF to integrate with legacy network devices.
   • CIt requires a public IP address to allow WAN Edge devices to discover fabric components.
   • DIt uses NETCONF to configure vSmart devices to build the overlay network data plane.

   Show answer

   Answer: D

   Explanation

   vManage => NETCONF => vSmart => OMP => VEdge While it's true that the vSmart controllers don't construct the data plane, answers A and B are clearly referencing vSmart.

   Source: Adapted from community discussion — Mistwalker

   References

   • Cisco documentation

   Next question

5. Question 945 · 1003 in bank

   

   Refer to the exhibit. An engineer constructs an EEM applet to prevent anyone from entering configuration mode on a switch. Which snippet is required to complete the EEM applet?

   • Async yes skip yes
   • Bsync no skip yes
   • Csync no skip no
   • Dsync yes skip no

   Show answer

   Answer: B

   Explanation

   Provided answer is correct. The "sync no" option tells the script to run before the CLI command is executed. This means that this applet is executed before the actual "configure terminal" CLI command is executed. This gives you the opportunity to choose what to do after the applet is run. Since "skip yes" is indicated, the "configure terminal" CLI command is skipped completely and is replaced by the actions of the script.

   Source: Adapted from community discussion — Aaron_0801

   References

   • cisco.com documentation

   Next question

6. Question 946 · 1003 in bank

   Select 2

   

   Refer to the exhibit. What are two results of the NTP configuration? (Choose two.)

   • AIt uses other systems as an authoritative time source.
   • BIt distributes the time via NTP broadcast and multicast packets.
   • CIt distributes the time via NTP broadcast packets.
   • DIt forms a peer association with another system.
   • EIt uses the hardware clock as an authoritative time source.

   Show answer

   Answer: CE

   Explanation

   Explanation of why other options are incorrect: A. It uses other systems as an authoritative time source: This is false because the ntp master command specifically makes the router the authoritative time source, not relying on external systems. B. It distributes the time via NTP broadcast and multicast packets: This is partially correct, but the configuration only enables broadcast packets, not multicast. D. It forms a peer association with another system: This is false because peer associations are formed between NTP servers that synchronize with each other, and this configuration sets the router as a master server that does not synchronize with others.

   Source: Adapted from community discussion — shefo1

   Next question

7. Question 947 · 1003 in bank

   DRAG DROP - Drag and drop the code snippets from the bottom onto blanks in the Python script so that the program changes the IP address and saves it as a new JSON file on the disk. Not all options are used.

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   

   Next question

8. Question 948 · 1003 in bank

   What is the purpose of data modeling languages?

   • Ato describe a data schema convertible into any data encoding format
   • Bto provide a framework to describe data flow patterns in networks
   • Cto specify algorithms necessary to decode binary-encoded protocol data units
   • Dto translate encoded data for interoperability between different CPU architectures

   Show answer

   Answer: A

   Explanation

   A is correct GPT 4: This statement is accurate. Data modeling languages allow you to define the structure, relationships, and constraints of data elements. These models can then be used to generate code or data representations in various formats, such as XML, JSON, or database schemas.

   Source: Adapted from community discussion — [Removed]

   Next question

9. Question 949 · 1003 in bank

   DRAG DROP - Drag and drop the characteristics of Cisco SD-WAN from the left onto the right. Not all options are used.

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   I'll choose these: Centralized distribution of policies throughout the network. Operates over DTLS/TLS authenticated and secured tunnels. Provides flexibility and scalability through a hub and spoke architecture.

   Source: Adapted from community discussion — teems5uk

   References

   • Cisco documentation

   

   Next question

10. Question 950 · 1003 in bank

    Which policy feature is used with TrustSec to provide endpoint entitlement in an enterprise network?

    • Asecurity group tags
    • Baccess control lists
    • Cvirtual local area network
    • Dvirtual routing and forwarding

    Show answer

    Answer: A

    Explanation

    TrustSec utilizes Security Group Tags (SGTs) to define and enforce policies based on the identity of the endpoints in the network. This helps in dynamically assigning and enforcing access policies based on the security group to which an endpoint belongs.

    Source: Adapted from community discussion — Mizuchan

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

350-401 practice, question 941. 1003 questions available.