350-701 Drag & Drop — 10 Questions

Question 1

Drag and drop the steps to troubleshoot an IPsec VPN failure where Phase 1 is not completing into the correct order.

Accepted Answer

1. Check IP reachability between peers. 2. Verify UDP port 500 is open. 3. Compare IKE proposals. 4. Verify pre-shared keys. 5. Use debug commands.. Start with reachability, then check UDP 500, compare IKE proposals, verify pre-shared keys, and finally use debug for detailed errors.

Answer

1. Verify pre-shared keys. 2. Check IP reachability. 3. Compare IKE proposals. 4. Verify UDP port 500 is open. 5. Use debug commands.

Answer

1. Use debug commands immediately. 2. Verify UDP port 500 is open. 3. Check IP reachability. 4. Compare IKE proposals. 5. Verify pre-shared keys.

Answer

1. Check IP reachability. 2. Compare IKE proposals. 3. Verify UDP port 500 is open. 4. Use debug commands. 5. Verify pre-shared keys.

Question 2

Drag and drop the steps to configure 802.1X port-based authentication on a Cisco switch in the correct order.

Accepted Answer

Configure AAA and RADIUS, then configure authentication list, then enable 802.1X globally, then enable 802.1X on the interface.. AAA and RADIUS must be configured first, then the authentication list, global 802.1X enable, and finally interface-level enable.

Answer

Configure AAA and RADIUS, then enable 802.1X globally, then configure authentication list, then enable 802.1X on the interface.

Answer

Configure authentication list, then configure AAA and RADIUS, then enable 802.1X globally, then enable 802.1X on the interface.

Answer

Configure AAA and RADIUS, then enable 802.1X globally, then enable 802.1X on the interface, then configure authentication list.

Question 3

Drag and drop the steps to configure a Cisco router as a DHCP server in the correct order.

Accepted Answer

Exclude addresses, then Create the DHCP pool, then Specify the network and subnet mask, then Set the default-router and dns-server options.. First create pool, define network, then set options like default-router and dns-server, and exclude addresses before or after.

Answer

Create the DHCP pool, then Exclude addresses, then Set the default-router and dns-server options, then Specify the network and subnet mask.

Answer

Specify the network and subnet mask, then Create the DHCP pool, then Exclude addresses, then Set the default-router and dns-server options.

Answer

Set the default-router and dns-server options, then Specify the network and subnet mask, then Create the DHCP pool, then Exclude addresses.

Question 4

Drag and drop the steps to implement Cisco Umbrella (formerly OpenDNS) for DNS-layer security in the correct order.

Accepted Answer

Registration, Add network identity, Point DNS to Umbrella, Set policies, Verify. Start with registration, add network identity, point DNS to Umbrella, set policies, then verify.

Answer

Registration, Point DNS to Umbrella, Add network identity, Set policies, Verify

Answer

Add network identity, Registration, Point DNS to Umbrella, Set policies, Verify

Answer

Registration, Add network identity, Set policies, Point DNS to Umbrella, Verify

Question 5

Drag and drop the steps to configure NetFlow on a Cisco IOS router for traffic monitoring in the correct order.

Accepted Answer

Enable flow on interface, then configure exporter, then create monitor, then apply to interface, then verify.. First enable flow on interface, then configure exporter, create monitor, apply to interface, and verify.

Answer

Configure exporter, then create monitor, then enable flow on interface, then apply to interface, then verify.

Answer

Create monitor, then configure exporter, then enable flow on interface, then apply to interface, then verify.

Answer

Enable flow on interface, then create monitor, then configure exporter, then apply to interface, then verify.

Question 6

Drag and drop the steps to recover a lost password on a Cisco IOS router in the correct order.

Accepted Answer

Step 1: Enter ROMmon, Step 2: Change config register to 0x2142, Step 3: Boot the router, Step 4: Copy startup-config to running-config, Step 5: Change the enable password, Step 6: Save running-config to startup-config, Step 7: Restore config register to 0x2102, Step 8: Reload the router. Enter ROMmon, change register to skip startup-config, boot, copy config, change password, save, and restore register.

Answer

Step 1: Enter ROMmon, Step 2: Boot the router, Step 3: Change config register to 0x2142, Step 4: Copy startup-config to running-config, Step 5: Change the enable password, Step 6: Save running-config to startup-config, Step 7: Restore config register to 0x2102, Step 8: Reload the router

Answer

Step 1: Enter ROMmon, Step 2: Change config register to 0x2142, Step 3: Boot the router, Step 4: Copy startup-config to running-config, Step 5: Change the enable password, Step 6: Restore config register to 0x2102, Step 7: Reload the router

Answer

Step 1: Enter ROMmon, Step 2: Change config register to 0x2142, Step 3: Boot the router, Step 4: Copy startup-config to running-config, Step 5: Change the enable password, Step 6: Save running-config to startup-config, Step 7: Reload the router

Question 7

Drag and drop the steps to configure a Cisco ISE as a RADIUS server for network access control into the correct order.

Accepted Answer

Add the NAS, then define identity source, then authentication policy, then authorization policy, then test. First add the NAS, then define identity source, authentication policy, authorization policy, and finally test.

Answer

Define identity source, then add the NAS, then authentication policy, then authorization policy, then test

Answer

Add the NAS, then define identity source, then authorization policy, then authentication policy, then test

Answer

Add the NAS, then authentication policy, then define identity source, then authorization policy, then test

Question 8

Drag and drop the steps to configure a Cisco ASA for remote access VPN using AnyConnect in the correct order.

Accepted Answer

Enable AnyConnect image, then Define IP pool, then Group policy, then Tunnel group, then Apply to interface. First enable AnyConnect image, then define IP pool, group policy, tunnel group, and apply to interface.

Answer

Apply to interface, then Enable AnyConnect image, then Define IP pool, then Group policy, then Tunnel group

Answer

Enable AnyConnect image, then Group policy, then Define IP pool, then Tunnel group, then Apply to interface

Answer

Enable AnyConnect image, then Define IP pool, then Tunnel group, then Group policy, then Apply to interface

Question 9

Drag and drop the steps to configure a site-to-site IPsec VPN on a Cisco ASA into the correct order.

Accepted Answer

Step 1: Configure IKE policy (Phase 1), Step 2: Set pre-shared key, Step 3: Define interesting traffic via ACL, Step 4: Configure crypto map (binding Phase 2), Step 5: Apply crypto map to interface. IKE policy defines Phase 1 parameters, then pre-shared key is set, interesting traffic is defined via ACL, crypto map binds Phase 2 parameters, and it is applied to the interface.

Answer

Step 1: Define interesting traffic via ACL, Step 2: Configure IKE policy, Step 3: Set pre-shared key, Step 4: Configure crypto map, Step 5: Apply to interface

Answer

Step 1: Configure IKE policy, Step 2: Set pre-shared key, Step 3: Configure crypto map, Step 4: Define interesting traffic ACL, Step 5: Apply to interface

Answer

Step 1: Configure IKE policy, Step 2: Set pre-shared key, Step 3: Define interesting traffic ACL, Step 4: Apply crypto map to interface, Step 5: Configure crypto map

Question 10

Drag and drop the steps to configure a Cisco IOS router as a Zone-Based Firewall (ZBF) in the correct order.

Accepted Answer

First assign interfaces to zones, then create class-map, then create policy-map, then create zone-pair, then apply the policy to the zone-pair.. First assign interfaces to zones, then create class-map, policy-map, zone-pair, and apply the policy to the zone-pair.

Answer

First create class-map, then create policy-map, then assign interfaces to zones, then create zone-pair, then apply the policy.

Answer

First create zone-pair, then assign interfaces to zones, then create class-map, then create policy-map, then apply the policy.

Answer

First assign interfaces to zones, then create zone-pair, then create class-map, then create policy-map, then apply the policy.