350-401 Practice Test 22 — 15 Questions

Question 1

Drag and drop the steps of SNMP bulk walk operation process into the correct order, from first to last.

Accepted Answer

Send GetBulkRequest with non-repeaters. The manager initiates a GetBulkRequest, the agent responds with multiple variables, and the process repeats until all OIDs are retrieved.

Question 2

Drag and drop the steps of OSPF redistribution from EIGRP with metric conversion into the correct order, from first to last.

Accepted Answer

Identify EIGRP routes for redistribution. First, identify the EIGRP routes to redistribute into OSPF. Then, configure the OSPF redistribution command under the OSPF process, specifying the EIGRP AS number. Since OSPF requires a metric for redistributed routes, set the OSPF metric type (E1 or E2) and seed metric. Optionally, use a route map to filter or modify specific routes. Finally, verify that the redistributed routes appear in the OSPF database and routing table.

Question 3

Drag and drop each queuing mechanism on the left to its matching feature on the right.

Accepted Answer

FIFO: Single queue, no differentiation. FIFO uses a single queue with no prioritization. WFQ provides per-flow fairness. CBWFQ allows user-defined classes. LLQ provides strict priority with policing. PQ always services the highest-priority queue first.

Question 4

Drag and drop each SNMPv3 security level on the left to its matching protection description on the right.

Accepted Answer

noAuthNoPriv: No authentication, no encryption. noAuthNoPriv uses no authentication or encryption; authNoPriv uses authentication but no encryption; authPriv uses both.

Question 5

Drag and drop each SNMP operation on the left to its matching direction on the right.

Accepted Answer

GET: Manager requests a specific variable from agent. GET, GETNEXT, GETBULK, and SET are initiated by the manager; TRAP and INFORM are initiated by the agent.

Question 6

Which two statements about SNMP trap and inform operations are true? (Choose two.)

Accepted Answer

An SNMP inform request is acknowledged by the manager with a response PDU.. SNMP traps are unacknowledged, while informs are acknowledged (confirmed) by the manager. Informs use more bandwidth and are more reliable. Both traps and informs are sent from agent to manager. SNMPv2c supports both traps and informs. SNMPv1 only supports traps (no informs).

Answer

SNMP traps are more reliable than informs because they use UDP port 162.

Answer

Both SNMPv1 and SNMPv2c support the inform operation.

Answer

Traps are sent from the manager to the agent to request configuration changes.

Question 7

Which three statements about syslog configuration on Cisco IOS devices are true? (Choose three.)

Accepted Answer

The command 'logging host 192.168.1.100' configures the device to send syslog messages to the server at that IP address.. The logging host command specifies the syslog server IP. The logging trap level sets the severity for messages sent to the syslog server; default is level 6 (informational). The logging source-interface sets the source IP of syslog packets. The logging buffered command stores messages in RAM. The logging console command affects messages sent to the console port, not to the syslog server.

Answer

The default logging trap level on Cisco IOS is level 7 (debugging).

Answer

The command 'logging console 3' limits syslog messages displayed on the console to severity 3 (errors) and lower (0-3).

Question 8

Drag and drop each flow record field on the left to its matching category (key or non-key) on the right.

Accepted Answer

Source IPv4 address: Key field. Key fields define a unique flow (e.g., source IP, destination IP, protocol). Non-key fields provide additional data (e.g., byte count, packet count, timestamps).

Question 9

Drag and drop each telemetry model on the left to its matching push type (dial-in or dial-out) on the right.

Accepted Answer

gRPC dial-in: Collector initiates connection to the device. Dial-in models require the collector to initiate the connection (e.g., gRPC dial-in). Dial-out models let the network device push data to the collector (e.g., gRPC dial-out, NETCONF YANG-push).

Question 10

Which two statements about NetFlow are true? (Choose two.)

Accepted Answer

NetFlow records are unidirectional by default.. NetFlow is a Cisco technology that collects IP traffic statistics. Traditional NetFlow (v5/v9) is unidirectional and sampled flow is used to reduce CPU load. Flexible NetFlow allows user-defined keys but still exports in NetFlow v9 or IPFIX format. NetFlow does not replace SNMP; they serve different purposes.

Answer

Flexible NetFlow can export user-defined flow keys using NetFlow v5 format.

Answer

NetFlow can be used as a replacement for SNMP polling for interface utilization.

Answer

NetFlow v9 supports only IPv4 traffic.

Question 11

Drag and drop each RADIUS attribute name on the left to its matching attribute number on the right.

Accepted Answer

User-Name: 1. RADIUS attribute numbers are standardized: User-Name=1, NAS-IP-Address=4, Service-Type=6, Framed-IP-Address=8, and Framed-Route=22.

Question 12

Drag and drop each SPAN source type on the left to its correct monitored traffic description on the right.

Accepted Answer

Port SPAN: Monitors traffic on a single physical interface. Port SPAN monitors all traffic on a specific port; VLAN SPAN monitors all traffic in a VLAN; EtherChannel SPAN monitors all traffic on a port-channel interface.

Question 13

Drag and drop each traffic direction on the left to its correct SPAN keyword on the right.

Accepted Answer

Ingress traffic: rx keyword. Ingress traffic is monitored with the 'monitor session source interface x/x rx' keyword; egress with 'tx'; both directions with 'both'.

Question 14

An engineer needs to configure a switchport to carry traffic for multiple VLANs to a router using a single physical link. Which configuration should be applied on the switchport?

Accepted Answer

Configure the port as a trunk port.. A trunk port is specifically designed to carry traffic for multiple VLANs over a single physical link using IEEE 802.1Q encapsulation. This allows the switch to tag frames with VLAN IDs, enabling the router (often configured as a router-on-a-stick) to route between VLANs.

Answer

Configure the port as a dynamic desirable port.

Answer

Configure the port as a routed port.

Answer

Configure the port as an access port.

Question 15

Drag and drop the steps of RADIUS CoA (Change of Authorization) message flow into the correct order, from first to last.

Accepted Answer

RADIUS server sends CoA-Request to NAS. RADIUS CoA allows a server to dynamically change a session's authorization. The server sends a CoA-Request to the network access server (NAS). The NAS acknowledges with CoA-ACK and applies the new policy. If the session is affected, the NAS may send a disconnect or re-authenticate.