350-401 practice questions 981–990

1. Question 981 · 1003 in bank

   Which multicast operational mode sends a prune message to the source when there are no connected members or downstream neighbors?

   • AIGMPv3
   • BPIM dense mode
   • CPIM sparse mode
   • DIGMPv2

   Show answer

   Answer: B

   Explanation

   PIM dense mode (push mechanism) send multicast traffic to all interfaces until receivers ask to stop forward and then prune unwanted traffic, while PIM sparse mode (pull mechanism) start forwarding multicast traffic if requested to do it. PIM sparse mode is required RP (rendezvous point) from where downstream routers pulling traffics.

   Source: Adapted from community discussion — masrur

   Next question

2. Question 982 · 1003 in bank

   

   Refer to the exhibit. Which type of antenna is shown on the radiation patterns?

   • Apatch
   • Bdipole
   • Comnidirectional
   • DYagi

   Show answer

   Answer: D

   Next question

3. Question 983 · 1003 in bank

   DRAG DROP - Drag and drop the characteristics from the left onto the orchestration tools that they describe on the right.

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   Ansible = Push and Primary Architecture Puppet = Pull (think of pulling on a puppets strings) & Multimaster (Puppet master)

   Source: Adapted from community discussion — ROBZY90

   

   Next question

4. Question 984 · 1003 in bank

   

   Refer to the exhibit. An engineer must implement HSRP between two WAN routers. In the event R1 fails and then regains operational status, it must allow 100 seconds for the routing protocol to converge before preemption takes effect. Which configuration is required?

   • AR2 - interface Gi0/0 standby 300 preempt standby 300 delay sync 100
   • BR1 - interface Gi0/0 standby 300 preempt standby 300 delay minimum 100
   • CR1 - interface Gi0/0 standby 300 preempt R2 - interface Gi0/0 standby 300 delay sync 100
   • DR1 - interface Gi0/0 standby 300 preempt R2 - interface Gi0/0 standby 300 delay minimum 100

   Show answer

   Answer: B

   Explanation

   The correct answer is "B" interface Gi0/0 standby 300 preempt standby 300 delay minimum 100 This configuration on R1 includes the "standby 300 preempt" command, which enables preemption. The "standby 300 delay minimum 100" command sets a minimum delay of 100 seconds before preemption takes effect. This delay ensures that the routing protocol has enough time to converge before the primary router (R1) takes over again after recovering from a failure.

   Source: Adapted from community discussion — post20

   References

   • Cisco documentation
   • Cisco documentation
   • Cisco documentation

   Next question

5. Question 985 · 1003 in bank

   

   Refer to the exhibit. A network engineer connected two routers using OSPF but the routers are not sharing routes. Which command completes the configuration?

   • Arouter ospf 1 no passive-interface GigabitEthernet5
   • Binterface GigabitEthernet5 no passive-interface
   • Crouter ospf 1 network 172.16.252.0 0.0.0.255 area 0
   • Drouter ospf 1 no passive-interface default

   Show answer

   Answer: D

   Explanation

   If we need all interfaces to be passive interfaces and leaving a single or a couple of interfaces non-passive, we can set passive interface as the default configuration by using the ‘passive-interface default’ command: Router#conf t Router(config)#router ospf 1 Router(config-router)#passive-interface default Router(config-router)#no passive-interface gi0/0/0

   Source: Adapted from community discussion — ROBZY90

   Next question

6. Question 986 · 1003 in bank

   

   Refer to the exhibit. Which configuration must be applied to R1 to enable R1 to reach the server at 172.16.0.1?

   • Ainterface Ethernet0/0 ip address 172.16.0.7 255.255.0.0 router ospf 44 vrf bank network 172.16.0.0 255.255.0.0
   • Binterface Ethernet0/0 vrf forwarding hotel ip address 172.16.0.7 255.255.0.0 router ospf 44 vrf Hotel network 172.16.0.0 0.0.255.255 area 0
   • Cinterface Ethernet0/0 vrf forwarding bank ip address 172.16.0.7 255.255.0.0 router ospf 44 vrf bank network 172.16.0.0 0.0.255.255 area 0
   • Dinterface Ethernet0/0 ip address 172.16.0.7 255.255.0.0 router ospf 44 vrf hotel network 172.16.0.0 255.255.0.0

   Show answer

   Answer: C

   Explanation

   R1 will not be able to reach server at 172.16.0.1. IP address and subnet (172.16.x.x) on e0/0 is overlaping with the address of the server on the other "LAN" interface. So the LAN interface have to be either on the default vrf or on a new vrf to be able to reach the server. With this config, vrf bank will not be able to cummunicate with default vrf or any other vrf.

   Source: Adapted from community discussion — kg2280

   Next question

7. Question 987 · 1003 in bank

   Which security feature does stateless authentication and authorization use for REST API calls?

   • AOAuth 2 tokens
   • BAPI keys
   • CSSL/TLS certificate encryption
   • Dcookie-based session authentication

   Show answer

   Answer: A

   Explanation

   I think A is the right answer. from chatgpt OAuth 2 tokens. OAuth 2 is commonly used for stateless authentication and authorization in REST API calls. It allows clients to obtain access tokens from an authorization server, which they can then use to authenticate and authorize their requests to protected resources. These access tokens are typically sent along with API requests to prove the client's identity and permissions.

   Source: Adapted from community discussion — aatechler

   Next question

8. Question 988 · 1003 in bank

   Which port is required to allow APs to join a WLC when directed broadcasts are used on a Cisco IOS switch?

   • AUDP 5246
   • BTCP 5246
   • CTCP 5247
   • DUDP 5247

   Show answer

   Answer: A

   Explanation

   When allowing APs to join a Wireless LAN Controller (WLC) using directed broadcasts on a Cisco IOS switch, the relevant ports are UDP ports 5246 and 5247. These ports are used for CAPWAP (Control and Provisioning of Wireless Access Points) communication between the APs and the WLC. Specifically: - **UDP port 5246** is used for CAPWAP control messages. - **UDP port 5247** is used for CAPWAP data messages. Given the options provided, the correct answer for the control channel required for APs to join a WLC is: **A. UDP 5246** This port is essential for the control messages that facilitate the initial join process of APs to the WLC.

   Source: Adapted from community discussion — Shri_Fcb10

   Next question

9. Question 989 · 1003 in bank

   Select 2

   An engineer must configure AAA on a Cisco 9800 WLC for central web authentication. Which two commands are needed to accomplish this task? (Choose two.)

   • ADevice(config)# aaa server radius dynamic-author
   • B(Cisco Controller) > config wlan aaa-override disable < wlan-id >
   • C(Cisco Controller) > config radius acct add 10.10.10.12 1812 SECRET
   • DDevice(config-locsvr-da-radius)# client 10.10.10.12 server-key 0 SECRET
   • E(Cisco Controller) > config wlan aaa-override enable < wlan-id >

   Show answer

   Answer: AD

   Explanation

   ref: https://www.cisco.com/c/en/us/support/docs/wireless/catalyst-9800-series-wireless-controllers/213920-central-web-authentication-cwa-on-cata.html Here is the relevant part of the configuration of the WLC that corresponds to this example: aaa new-model ! aaa authorization network CWAauthz group radius aaa accounting identity CWAacct start-stop group radius ! aaa server radius dynamic-author client server-key cisco123 ! aaa session-id common ! ! radius server ISE-server address ipv4 auth-port 1812 acct-port 1813 key cisco123 ! ! (check the rest in the URL) so: ANS: AD

   Source: Adapted from community discussion — IgorLVG

   References

   • Cisco documentation
   • Cisco documentation
   • Cisco documentation
   • Cisco documentation

   Next question

10. Question 990 · 1003 in bank

    

    Refer to the exhibit. Which command or set of commands configures switch B as the primary root for VLANs 10, 15, and 20?

    • ASwitchB(config-mst)# instance 1 vlan 10,20
    • BSwitchB(config)# spanning-tree vlan 10,20 root primary
    • CSwitchB(config)# interface range g0/0/0-15 SwitchB(config-if)# spanning-tree port-priority 100 SwitchA (config)# interface range g0/0/0-15 SwitchA(config-if)# spanning-tree port-priority 200
    • DSwitchB(config)# spanning-tree mst 1 root primary

    Show answer

    Answer: D

    Explanation

    - A and B is wrong because just specified the VLAN 10 and 20 (not 15) - C is wrong because The port priority determines the order in which ports are selected as the root port, but it does not directly impact the root bridge designation * so D is right

    Source: Adapted from community discussion — shefo1

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

350-401 practice, question 981. 1003 questions available.