[Oct-2023] Download Real 350-401 Exam Dumps for candidates. 100% Free Dump Files
Prepare Important Exam with 350-401 Exam Dumps(2023)
NEW QUESTION # 199
Refer to the exhibit.
An engineer must deny Telnet traffic from the loopback interface of router R3 to the loopback interface of router R2 during the weekend hours. All other traffic between the loopback interfaces of routers R3 and R2 must be allowed at all times. Which command accomplish this task?
A)
B)
C)
D)
- A. Option D
- B. Option C
- C. Option A
- D. Option B
Answer: B
Explanation:
Explanation
We cannot filter traffic that is originated from the local router (R3 in this case) so we can only configure the ACL on R1 or R2. "Weekend hours" means from Saturday morning through Sunday night so we have to configure: "periodic weekend 00:00 to 23:59".
Note: The time is specified in 24-hour time (hh:mm), where the hours range from 0 to 23 and the minutes range from 0 to 59.
NEW QUESTION # 200
Running the script causes the output in the exhibit. Which change to the first line of the script resolves the error?
- A. import ncclient manager
- B. from ncclient import
- C. import manager
- D. from ncclient import*
Answer: B
NEW QUESTION # 201
Refer to the exhibit
Which two facts does the device output confirm? (Choose two)
- A. The device is configured with the default HSRP priority
- B. The device's HSRP group uses the virtual IP address 10.0.3.242.
- C. The device sends unicast messages to its peers
- D. The standby device is configured with the default HSRP priority
- E. The device is using the default HSRP hello timer
Answer: A,E
NEW QUESTION # 202
Which QoS queuing method transmits packets out of the interface in the order the packets arrive?
- A. custom
- B. weighted- fair
- C. FIFO
- D. priority
Answer: C
Explanation:
Explanation
First-in, first-out (FIFO): FIFO entails no concept of priority or classes of traffic. With FIFO, transmission of packets out the interface occurs in the order the packets arrive, which means no QoS.
NEW QUESTION # 203
Which component handles the orchestration plane of the Cisco SD-WAN?
- A. vSmart
- B. vEdge
- C. vBond
- D. vManage
Answer: C
NEW QUESTION # 204
What NTP Stratum level is a server that is connected directly to an authoritative time source?
- A. Stratum 0
- B. Stratum 15
- C. Stratum 1
- D. Stratum 14
Answer: C
Explanation:
Explanation
The stratum levels define the distance from the reference clock. A
reference clock is a stratum 0 device that is assumed to be accurate and has little or no delay associated with it. Stratum 0 servers cannot be used on the network but they are directly connected to computers which then operate as stratum-1 servers. A stratum 1 time server acts as a primary network time standard.
A stratum 2 server is connected to the stratum 1 server; then a stratum 3 server is connected to the stratum 2 server and so on. A stratum 2 server gets its time via NTP packet requests from a stratum 1 server. A stratum 3 server gets its time via NTP packet requests from a stratum-2 server... A stratum server may also peer with other stratum servers at the same level to provide more stable and robust time for all devices in the peer group (for example a stratum 2 server can peer with other stratum 2 servers).
NTP uses the concept of a stratum to describe how many NTP hops away a
machine is from an authoritative time source. A stratum 1 time server
typically has an authoritative time source (such as a radio or atomic clock, or a Global Positioning System (GPS) time source) directly attached, a stratum 2 time server receives its time via NTP from a stratum 1 time server, and so on.
Reference: https://www.cisco.com/c/en/us/td/docs/routers/asr920/con
figuration/guide/bsm/16-6-1/b-bsm-xe-16-6-1-asr920/bsm-timecalendar-
set.html
NEW QUESTION # 205
By default, which virtual MAC address does HSRP group 15 use?
- A. c0:42:34:03:73:0f
- B. 00:00:0c:07:ac:0f
- C. 05:af:1c:0f:ac:15
- D. 05:5e:ac:07:0c:0f
Answer: B
Explanation:
interface Ethernet0/0.100
encapsulation dot1Q 100
ip address 10.0.111.1 255.255.255.0
standby 15 ip 10.0.111.254
!
cisco(config-subif)#do s stand
Ethernet0/0.100 - Group 15
State is Speak
Virtual IP address is 10.0.111.254
Active virtual MAC address is unknown
Local virtual MAC address is 0000.0c07.ac0f (v1 default)
Hello time 3 sec, hold time 10 sec
Next hello sent in 1.200 secs
Preemption disabled
Active router is unknown
Standby router is unknown
NEW QUESTION # 206
When using TLS for syslog, which configuration allows for secure and reliable transportation of messages to its default port?
- A. logging host 10.2.3.4 vrf mgmt transport udp port 514
- B. logging host 10.2.3.4 vrf mgmt transport udp port 6514
- C. logging host 10.2.3.4 vrf mgmt transport tcp port 514
- D. logging host 10.2.3.4 vrf mgmt transport tcp port 6514
Answer: D
Explanation:
The TCP port 6514 has been allocated as the default port for syslog over Transport Layer Security (TLS).
Reference: https://tools.ietf.org/html/rfc5425
NEW QUESTION # 207
Refer to the exhibit.
An engineer attempts to configure a router on a stick to route packets between Clients, Servers, and Printers; however, initial tests show that this configuration is not working. Which command set resolves this issue?
- A. Option D
- B. Option A
- C. Option B
- D. Option C
Answer: A
NEW QUESTION # 208
Drag and drop the wireless elements on the left to their definitions on the right.
Answer:
Explanation:
NEW QUESTION # 209
Drag and drop the characteristics from the left onto the correct infrastructure deployment types on the right.
Answer:
Explanation:
Explanation
NEW QUESTION # 210
Company policy restricts VLAN 10 to be allowed only on SW1 and SW2. All other VLANs can be on all three switches. An administrator has noticed that VLAN 10 has propagated to SW3. Which configuration corrects the issue?
A)
B)
C)
D)
- A. Option D
- B. Option C
- C. Option A
- D. Option B
Answer: B
NEW QUESTION # 211
Refer to the exhibit.
What does the output confirm about the switch's spanning tree configuration?
- A. The spanning-tree operation mode for this switch is IEEE
- B. The spanning-tree operation mode for this switch is PVST+.
- C. The spanning-tree mode stp ieee command was entered on this switch
- D. The spanning-tree operation mode for this switch is PVST.
Answer: B
Explanation:
Explanation
The default spanning-tree mode in Cisco switch is PVST+. This spanning-tree mode is based on the IEEE
802.1D standard and Cisco proprietary extensions. PVST+ is same as standard IEEE 802.1D but it runs on each VLAN. In the output we see the line "Spanning tree enabled protocol ieee" under "VLAN 20" so it can say the switch is running in PVST+ mode.
NEW QUESTION # 212
What occurs when a high bandwidth multicast stream is sent over an MVPN using Cisco hardware?
- A. A data and default MDT are created to flood the multicast stream out of all PIM-SM neighbors.
- B. A data MDT is created to if it is a (*, G) multicast route entries
- C. The traffic uses the default MDT to transmit the data only if it isa (S,G) multicast route entry
- D. A data MDT is created to allow for the best transmission through the core for (S, G) multicast route entries.
Answer: B
NEW QUESTION # 213
What is the role of a fusion router in an SD-Access solution?
- A. acts as a DNS server
- B. provides connectivity to external networks
- C. provides additional forwarding capacity to the fabric
- D. performs route leaking between user-defined virtual networks and shared services
Answer: D
Explanation:
Explanation/Reference: https://www.cisco.com/c/en/us/support/docs/cloud-systems-management/dna-center/213525-sda- steps-to-configure-fusion-router.html#anc1
NEW QUESTION # 214
In an SD-Access solution what is the role of a fabric edge node?
- A. to connect wired endpoint to the SD-Access fabric
- B. to connect external Layer 3- network to the SD-Access fabric
- C. to connect the fusion router to the SD-Access fabric
- D. to advertise fabric IP address space to external network
Answer: A
Explanation:
Explanation
+ Fabric edge node: This fabric device (for example, access or distribution layer device) connects wired endpoints to the SDA fabric.
NEW QUESTION # 215
......
350-401 Questions - Truly Beneficial For Your Cisco Exam: https://www.pass4suresvce.com/350-401-pass4sure-vce-dumps.html
Pass Exam Questions Efficiently With 350-401 Questions: https://drive.google.com/open?id=1d7GNEJvubc2fZ6K2FK-Am3X_a38mBOhl