350-401 Practice Test 15 — 15 Questions

Question 1

In a Cisco QoS policy, what is the difference between 'bandwidth' and 'bandwidth remaining' commands?

Accepted Answer

'bandwidth' allocates from the total bandwidth, while 'bandwidth remaining' allocates from the bandwidth left after priority queues.. The 'bandwidth' command allocates a guaranteed minimum bandwidth from the total interface bandwidth during congestion, while 'bandwidth remaining' allocates bandwidth only from the leftover bandwidth after the priority queue (LLQ) has taken its share. This distinction is critical in Cisco QoS policies where priority queues can consume a large portion of the link, and remaining bandwidth must be distributed among other classes using a ratio or percentage.

Answer

There is no difference; both commands allocate bandwidth based on the total interface bandwidth.

Answer

'bandwidth' is used for output policies, while 'bandwidth remaining' is used for input policies.

Answer

'bandwidth' guarantees a minimum rate, while 'bandwidth remaining' sets a maximum rate.

Question 2

Consider the following configuration:

policy-map QUEUE_POLICY
 class VOICE
  priority level 1
  police cir 1000000
 class VIDEO
  priority level 2
  police cir 2000000
 class class-default
  fair-queue

What is the effect of using priority level 1 and priority level 2?

Accepted Answer

VOICE traffic (level 1) is always sent before VIDEO traffic (level 2), and both are policed.. The 'priority level' command under a class in a policy-map allows multiple priority queues with different levels. Level 1 is the highest priority, so VOICE traffic (level 1) is always scheduled before VIDEO traffic (level 2). Both classes are also subject to policing, which enforces a maximum rate (CIR) and drops or remarks excess traffic. This ensures low-latency treatment for VOICE while still providing priority queuing for VIDEO, but with a lower scheduling preference.

Answer

VOICE and VIDEO traffic are treated equally and share the priority bandwidth.

Answer

VIDEO traffic (level 2) is sent before VOICE traffic (level 1) because it has a higher police rate.

Answer

This configuration is invalid because only one priority level is allowed.

Question 3

Drag and drop the steps of LLQ configuration for voice traffic into the correct order, from first to last.

Accepted Answer

Create class-map matching voice (DSCP EF). First, classify voice traffic using a class-map matching DSCP EF. Then create a policy-map and assign the class to priority (LLQ). Optionally configure a bandwidth guarantee for other classes. Apply the service-policy on the WAN interface. Finally, verify the LLQ operation using show policy-map interface.

Question 4

Which two statements about VRF-lite configuration are true? (Choose two.)

Accepted Answer

In VRF-lite, each VRF maintains its own independent routing table.. Option A is correct because VRF-lite creates separate virtual routing and forwarding instances, each with its own independent routing and forwarding table (RIB/FIB), which is the core purpose of VRF-lite—traffic isolation without MPLS. Option B is correct because on Cisco IOS/IOS-XE, an interface is bound to a VRF by entering interface configuration mode and issuing the 'ip vrf forwarding <vrf-name>' command, which associates the interface's Layer 3 traffic with that VRF's routing table. Option C is incorrect because VRF-lite specifically does not require MPLS; it is the MPLS-free variant of VRF used for path isolation on a single device or with plain 802.1Q trunks. Option D is incorrect because inter-VRF communication can be achieved with various methods, including route leaking via static routes, dynamic routing protocols, or external devices—not static routes exclusively. Option E is incorrect because a router can support many VRFs (hundreds or thousands depending on platform resources), not a maximum of two.

Answer

VRF-lite requires MPLS enabled on all interfaces.

Answer

VRF-lite can only use static routes for inter-VRF communication.

Answer

A router can have at most two VRFs configured.

Question 5

Drag and drop the steps of Private VLAN (PVLAN) configuration steps into the correct order, from first to last.

Accepted Answer

Create primary VLAN in global config. First create the primary VLAN, then the secondary VLANs (community or isolated), then associate them. Finally configure host and promiscuous ports.

Question 6

Drag and drop each BGP attribute on the left to its matching attribute type on the right.

Accepted Answer

AS_PATH: Well-known mandatory. AS_PATH is well-known mandatory; LOCAL_PREF is well-known discretionary; COMMUNITY is optional transitive; MULTI_EXIT_DISC is optional non-transitive; ORIGIN is well-known mandatory.

Question 7

Drag and drop each BGP attribute on the left to the value that is preferred (highest or lowest) during path selection on the right.

Accepted Answer

Weight: Highest. Higher weight is preferred; higher LOCAL_PREF is preferred; shorter AS_PATH length is preferred; lower MULTI_EXIT_DISC is preferred; lower IGP metric to next-hop is preferred.

Question 8

Drag and drop each BGP path selection criterion on the left to its correct order of preference (1 = highest priority) on the right.

Accepted Answer

Weight: 1. Weight (highest) is checked first, then LOCAL_PREF (highest), then locally originated routes, then AS_PATH length (shortest), then ORIGIN (IGP > EGP > incomplete).

Question 9

Drag and drop the steps of deploying a virtual router as a VNF into the correct order, from first to last.

Accepted Answer

Upload virtual router image to hypervisor. Deploying a virtual router VNF starts with uploading the image, then creating the VM, attaching virtual interfaces, configuring routing protocols, and finally verifying connectivity.

Question 10

Drag and drop each YANG module on the left to its matching standard body on the right.

Accepted Answer

openconfig-interfaces: OpenConfig. OpenConfig: vendor-neutral YANG models. IETF: RFC-based YANG models. Cisco-IOS-XE: Cisco proprietary YANG models for IOS-XE.

Question 11

Drag and drop each STP variant on the left to its matching IEEE standard on the right.

Accepted Answer

STP: IEEE 802.1D. STP is 802.1D; RSTP is 802.1w; MSTP is 802.1s; PVST+ is a Cisco proprietary extension of 802.1D.

Question 12

Drag and drop the steps of SD-WAN traffic engineering app-aware routing steps into the correct order, from first to last.

Accepted Answer

Traffic is classified by application. The correct order for SD-WAN traffic engineering app-aware routing steps is: first, traffic is classified by application (A); then path performance is measured via probes (B); then metrics are compared to SLA thresholds (C); then the best path meeting the SLA is selected (D); and finally traffic is forwarded over the chosen path (E).

Question 13

Drag and drop the steps of IP SLA DNS lookup operation setup into the correct order, from first to last.

Accepted Answer

Define IP SLA operation type dns. First, define the IP SLA operation with type dns. Then specify the target DNS server and the domain name to resolve. Optionally set the DNS source interface or timeout. Next, schedule the operation. Finally, verify the DNS resolution success and response time.

Question 14

Drag and drop each wireless roaming method on the left to its matching 802.11 standard on the right.

Accepted Answer

Fast BSS Transition (FT): 802.11r. 802.11r enables fast BSS transition (FT) with reduced reauthentication time; 802.11k provides neighbor report and channel information; 802.11v offers network-assisted power saving and BSS transition management.

Question 15

Drag and drop each 802.1X component on the left to its matching role on the right.

Accepted Answer

Supplicant: Client device requesting network access. The supplicant requests access, the authenticator (switch/AP) enforces port control, and the authentication server (RADIUS) validates credentials.