350-401 Practice Test 18 — 15 Questions

Question 1

Drag and drop each data encoding format on the left to its matching use case on the right.

Accepted Answer

JSON: Lightweight data interchange for REST APIs. JSON is lightweight and widely used in REST APIs, XML is verbose and used in NETCONF, YAML is human-readable for configuration files, and Protobuf is efficient for high-performance systems.

Question 2

Drag and drop each NETCONF operation on the left to its matching action on the right.

Accepted Answer

get: Retrieve operational state and configuration data. get retrieves operational state and configuration, get-config retrieves only configuration, edit-config modifies configuration, commit applies candidate changes, and lock prevents other sessions from modifying the datastore.

Question 3

Drag and drop the steps of YANG push periodic vs on-change subscription into the correct order, from first to last.

Accepted Answer

Define subscription with YANG paths and filters. The correct order starts with defining the subscription parameters, then configuring the push method (periodic or on-change), followed by establishing the telemetry session, sending updates, and finally the collector processing the data.

Question 4

Drag and drop the steps of OpenConfig interface counters subscription and decode into the correct order, from first to last.

Accepted Answer

Subscribe to /interfaces/interface/state/counters path. The process begins by subscribing to the OpenConfig path, receiving the encoded data, decoding it using the YANG model, extracting counters, and then analyzing the results.

Question 5

Consider the following configuration on a Cisco 9800 WLC:

ap join-profile default-join-profile
 description "Default Join Profile"
 controller 1 primary 10.1.1.1
 controller 2 secondary 10.1.1.2

What is the purpose of this configuration?

Accepted Answer

It specifies the WLCs that the AP should attempt to join in order of priority.. This configuration defines the primary and secondary controller IP addresses within an AP join profile on a Cisco 9800 WLC. The AP uses these addresses to prioritize which WLC to join via CAPWAP discovery, attempting the primary controller first and falling back to the secondary if the primary is unreachable. Option B correctly identifies this as specifying the WLCs in order of priority.

Answer

It configures the AP's management IP address.

Answer

It enables CAPWAP DTLS encryption.

Answer

It defines the AP's radio parameters.

Question 6

A company is implementing QoS in a network where voice traffic must have strict priority over all other traffic. Which queuing mechanism should be used on the outbound interface of a router to ensure voice packets are always sent first?

Accepted Answer

Low Latency Queuing (LLQ). Low Latency Queuing (LLQ) is the correct choice because it combines Class-Based Weighted Fair Queuing (CBWFQ) with a strict priority queue, ensuring that voice traffic (marked with EF or CS5) is always dequeued before any other traffic class. This guarantees low latency and jitter for real-time traffic, which is essential for voice quality.

Answer

Random Early Detection (RED)

Answer

First In First Out (FIFO)

Answer

Class-Based Weighted Fair Queuing (CBWFQ)

Question 7

A network engineer issues the following command on Router R2:

R2# show ip mroute 239.1.1.1
IP Multicast Routing Table
Flags: D - Dense, S - Sparse, B - Bidir Group, s - SSM Group, C - Connected,
       L - Local, P - Pruned, R - RP-bit set, F - Register flag,
       T - SPT-bit set, J - Join SPT, M - MSDP created entry, E - Extranet,
       X - Proxy Join Timer Running, A - Candidate for MSDP Advertisement,
       U - URD, I - Received Source Specific Host Report,
       Z - Multicast Tunnel, z - MDT-data group session,
       Y - Joined MDT-data group, y - Sending to MDT-data group
Outgoing interface flags: H - Hardware switched, A - Assert winner
Timers: Uptime/Expires
Interface state: Interface, Next-Hop or VCD, State/Mode

(*, 239.1.1.1), 00:03:45/00:02:15, RP 10.0.0.1, flags: S
  Incoming interface: GigabitEthernet0/0, RPF nbr 10.0.0.1
  Outgoing interface list:
    GigabitEthernet0/1, Forward/Sparse, 00:03:45/00:02:15

Based on this output, what can be concluded?

Accepted Answer

The RP for this group is 10.0.0.1.. The output shows a (*, G) entry for 239.1.1.1 with the flags field containing 'S', which indicates Sparse Mode. The line 'RP 10.0.0.1' explicitly identifies the Rendezvous Point for this group. Therefore, option B is correct because the RP is indeed 10.0.0.1.

Answer

The group is using PIM dense mode.

Answer

The multicast traffic is being hardware switched.

Answer

The group is a Bidir group.

Question 8

Which LACP mode must be configured on at least one side of an EtherChannel for the channel to establish?

Accepted Answer

Active. LACP (Link Aggregation Control Protocol) uses two modes: Active and Passive. For an EtherChannel to form, at least one side must be configured as Active, which actively sends LACP packets to negotiate the link. If both sides are Passive, neither will initiate negotiation, and the channel will not establish.

Answer

Passive

Answer

Desirable

Answer

On

Question 9

A network administrator is deploying a Cisco SD-Access fabric and needs to ensure that the underlay network is properly configured. Which two statements about the underlay network in SD-Access are true? (Choose two.)

Accepted Answer

The underlay must support MTU sizes large enough to accommodate VXLAN encapsulation overhead.. The underlay in SD-Access provides IP connectivity between fabric nodes using a routing protocol like IS-IS or OSPF, and it must support a larger MTU to accommodate VXLAN encapsulation overhead. The underlay does not carry endpoint subnet information; that is the role of the overlay. It is a Layer 3 network, not Layer 2, and it does not use VXLAN for encapsulation.

Answer

The underlay can be configured as a Layer 2 network with VLANs to simplify deployment.

Answer

The underlay network carries endpoint subnet information and is used for endpoint-to-endpoint communication.

Answer

The underlay uses VXLAN to encapsulate traffic between fabric nodes.

Question 10

Examine the following BGP configuration on a Cisco IOS-XE router:
```
router bgp 65000
 bgp default local-preference 150
 neighbor 10.1.1.1 remote-as 65001
 neighbor 10.1.1.1 password cisco123
 neighbor 10.1.1.1 route-map SET-MED out
!
route-map SET-MED permit 10
 set metric 50
```
What is the effect of the route-map on outbound updates to 10.1.1.1?

Accepted Answer

The MED value of routes advertised to 10.1.1.1 is set to 50.. The route-map SET-MED is applied to outbound updates to neighbor 10.1.1.1 using the 'route-map SET-MED out' command. The route-map permits all routes (no match statement) and sets the MED (Multi-Exit Discriminator) attribute to 50. This means that when the local router advertises routes to this eBGP neighbor, the MED value in those updates will be 50, influencing the neighbor's inbound path selection.

Answer

The local preference of routes received from 10.1.1.1 is set to 150.

Answer

The route-map filters routes; only those with metric 50 are advertised.

Answer

The password is applied to the BGP session, but the route-map is ignored due to the password.

Question 11

Examine the following configuration:

flow exporter EXPORTER-1
 destination 10.0.0.1
 source Loopback0
 transport udp 2055
 option interface-table
 option application-table
!

What is the purpose of the 'option interface-table' and 'option application-table' commands?

Accepted Answer

They cause the exporter to send interface and application metadata to the collector periodically.. The 'option interface-table' and 'option application-table' commands configure the NetFlow exporter to periodically send metadata (interface names/descriptions and application-to-port mappings) to the collector. This metadata is essential for the collector to interpret flow records correctly, especially when interfaces are renamed or applications are dynamically mapped. The exporter sends these options templates at a default interval (e.g., every 600 seconds) via UDP 2055, independent of regular flow records.

Answer

They filter the flow data to include only traffic from the specified interfaces and applications.

Answer

They enable the exporter to collect interface and application statistics locally.

Answer

They are required only when using IPFIX, not NetFlow v9.

Question 12

A network engineer runs the following command on switch SW8:

SW8# show cts role-based sgt-map 192.168.1.10

IP Address: 192.168.1.10
SGT: 10
Source: SXP

Based on this output, what can be concluded?

Accepted Answer

The SGT mapping was learned via SXP from a peer.. The output shows 'Source: SXP', which indicates that the Security Group Tag (SGT) mapping for IP address 192.168.1.10 was learned via the SXP (SGT Exchange Protocol) from a peer. SXP is used to propagate SGT-to-IP bindings from an authentication point (e.g., an ISE or a switch) to other network devices without requiring inline enforcement. Therefore, the mapping was not manually configured, not locally authenticated, and is indeed mapped to SGT 10.

Answer

The SGT mapping was configured manually.

Answer

The IP address 192.168.1.10 is not mapped to any SGT.

Answer

The SGT mapping is from local authentication.

Question 13

A network administrator is configuring a new VLAN 100 on a switch and wants to ensure that the VLAN is created and active. Which command is required to create a VLAN in the VLAN database?

Accepted Answer

vlan 100. The 'vlan 100' command is executed in global configuration mode to create a VLAN in the VLAN database on a Cisco IOS switch. This command creates the VLAN and places the switch into VLAN configuration mode, where optional parameters like name can be set. The VLAN is active immediately upon creation, provided the switch is in VTP server or transparent mode.

Answer

interface vlan 100

Answer

name VLAN100

Answer

switchport access vlan 100

Question 14

A network engineer is configuring PIM sparse mode in a network that uses a Bootstrap Router (BSR) for RP discovery. The engineer has configured a candidate BSR and candidate RPs. However, some routers in the network are not learning the RP set. The engineer checks the BSR and sees that it is receiving candidate RP advertisements, but the BSR messages are not being forwarded to all routers. What is the most likely cause?

Accepted Answer

PIM is not enabled on all interfaces between the BSR and the other routers.. BSR messages are PIM protocol messages that must traverse every router between the BSR and the receivers. If PIM is not enabled on all transit interfaces, those routers will not forward BSR messages, so downstream routers never learn the RP set. Enabling PIM on all relevant interfaces restores BSR flooding and RP discovery.

Answer

The candidate BSR priority is set too low.

Answer

The candidate RPs are not in the same OSPF area as the BSR.

Answer

The BSR is not configured as a candidate RP.

Question 15

What is the default lease time for a DHCP pool in Cisco IOS?

Accepted Answer

1 day. The default DHCP lease time in Cisco IOS is 1 day (86400 seconds). This is defined in the DHCP pool configuration and is applied automatically when no lease duration is explicitly specified. The lease time determines how long a client can use an assigned IP address before it must renew the lease.

Answer

12 hours

Answer

2 days

Answer

Infinite