350-401 Practice Test 6 — 10 Questions

Question 1

An enterprise is migrating from a traditional three-tier campus design to a software-defined access (SD-Access) fabric. The engineer needs to ensure that the existing wireless infrastructure integrates seamlessly. Which component of SD-Access is responsible for integrating wireless and wired policies?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

Fabric Edge node. The Fabric Edge node is the correct answer because it is the SD-Access component that serves as the attachment point for both wired and wireless endpoints. In an SD-Access fabric, the Fabric Edge node terminates the VXLAN tunnels from the wireless LAN controller (WLC) and applies consistent policy (e.g., SGT-based ACLs) to traffic from both wired and wireless users, ensuring seamless integration of the existing wireless infrastructure.

Answer

Fabric Control node

Answer

Fabric Border node

Answer

Wireless LAN Controller (WLC)

Question 2

An engineer configures IP SLA 30 to monitor the one-way delay to a remote site using UDP jitter. The operation is used to adjust routing metrics via route maps. The engineer notices that the IP SLA operation shows 'State: Active' but the one-way delay values are inconsistent, sometimes showing negative values. What is the most likely cause?

Accepted Answer

The source and destination routers do not have synchronized clocks via NTP, causing one-way delay calculations to be inaccurate.. IP SLA UDP jitter measures one-way delay by timestamping packets at both the source and destination. If the clocks on the two routers are not synchronized via NTP, the timestamps will be offset, leading to inaccurate (and sometimes negative) one-way delay values. Negative delay occurs when the destination timestamp appears earlier than the source timestamp due to clock skew.

Answer

The IP SLA operation is not configured with a 'request-data-size' that matches the remote router's MTU, causing fragmentation and delay variations.

Answer

The IP SLA operation is using a 'frequency' that is too high, causing the probes to overlap and corrupt the statistics.

Answer

The remote router's IP SLA responder is not configured, so the source is using a different method to estimate delay.

Question 3

A company is deploying a new campus network with a hierarchical design (core, distribution, access). The QoS design must ensure that voice traffic is prioritized end-to-end, and that marking is trusted only on access ports connected to IP phones. Which architectural approach should the architect take for classification and marking?

Accepted Answer

Configure the access switches to trust DSCP on ports connected to IP phones, and apply queuing policies on distribution and core switches that match the trusted markings.. It aligns with the Cisco QoS trust boundary model for campus networks. IP phones are trusted endpoints that mark voice traffic with the correct DSCP values (e.g., EF for voice, AF41 for video). By configuring the access switch port to trust DSCP from the IP phone, the marking is preserved end-to-end. Distribution and core switches then apply queuing policies (e.g., LLQ) based on these trusted markings, ensuring voice traffic receives priority treatment across the entire network.

Answer

Remark all traffic to a single DSCP value at the access layer and apply priority queuing at the core.

Answer

Apply QoS policies only at the core layer, ignoring markings from the access layer.

Answer

Use the distribution layer to reclassify traffic based on source MAC addresses of IP phones.

Question 4

Consider this VLAN configuration on a Cisco switch:

vlan 10
 name Sales
vlan 20
 name Engineering
interface GigabitEthernet0/1
 switchport mode trunk
 switchport trunk allowed vlan 10,20

What is missing if the switch needs to carry VLAN 30 traffic on this trunk?

Accepted Answer

VLAN 30 must be created and added to the allowed VLAN list on the trunk.. A trunk port only forwards traffic for VLANs that exist in the switch's VLAN database and are explicitly permitted in the allowed VLAN list. VLAN 30 is neither created (no 'vlan 30' command) nor added to the trunk's allowed list (missing 'switchport trunk allowed vlan add 30'), so the switch will drop any frames tagged with VLAN 30. Creating the VLAN and updating the allowed list ensures the trunk can forward VLAN 30 traffic.

Answer

The trunk must be configured as an access port for VLAN 30.

Answer

The native VLAN must be changed to VLAN 30.

Answer

The switchport mode must be changed to dynamic desirable.

Question 5

What is the default OSPF hello interval on an Ethernet link in a Cisco router?

Accepted Answer

10 seconds. The default OSPF hello interval on an Ethernet link (which is a broadcast multi-access network type) is 10 seconds. This is defined in RFC 2328 and is the default on Cisco routers for broadcast and point-to-point network types. The hello interval determines how often a router sends hello packets to discover and maintain neighbor relationships.

Answer

30 seconds

Answer

5 seconds

Answer

40 seconds

Question 6

A network team must design a QoS policy for a WAN link that carries voice, video, and data. The policy must ensure that voice traffic is never dropped, even during congestion. Which queuing mechanism should be used for the voice class?

Accepted Answer

Low-latency queuing (LLQ).. Low-latency queuing (LLQ) is the correct choice because it combines strict priority queuing with CBWFQ, allowing voice traffic to be placed in a strict priority queue that is serviced first before any other queues. This ensures that voice packets are never dropped due to congestion, as long as the configured policer rate is not exceeded, meeting the requirement that voice traffic is never dropped.

Answer

Class-based weighted fair queuing (CBWFQ).

Answer

Weighted random early detection (WRED).

Answer

First-in, first-out (FIFO) queuing.

Question 7

Drag and drop the steps of disaster recovery failover process into the correct order, from first to last.

Accepted Answer

Detect failure via keepalives or BFD. Failover begins with detecting the primary failure, then activating the backup path. Traffic is redirected to the secondary site, and after the primary is restored, operations are switched back in a controlled manner.

Question 8

A service provider is using Cisco ASR 9000 routers and needs to collect NetFlow data from multiple customers' traffic. The engineer wants to ensure that flow records from different customers are not mixed and can be identified separately. The router supports Flexible NetFlow. What is the best approach?

Accepted Answer

Define a custom flow record that includes the 'match ipv4 vlan' or 'match ipv4 vrf' field to identify each customer's traffic, and apply a single flow monitor on the shared interface.. Flexible NetFlow allows you to define a custom flow record that includes key fields such as 'match ipv4 vrf' (VRF-aware NetFlow) to uniquely identify each customer's traffic. By applying a single flow monitor on a shared interface (e.g., a trunk or core link), the router can tag flows with the VRF or VLAN identifier, ensuring per-customer separation without needing multiple monitors or collectors. This approach is efficient and leverages the router's ability to export differentiated flow records to a single collector, which can then filter based on the VRF or VLAN field.

Answer

Configure a separate flow monitor for each customer interface and export to different collectors.

Answer

Use NetFlow v9 export with the 'match ipv4 source address' field only, and rely on the collector to separate by source IP.

Answer

Enable SNMP interface polling to track per-customer traffic statistics.

Question 9

An architect is planning a virtualized infrastructure for a branch office that will host a Cisco ISRv router and a local DHCP server. The architect wants to minimize management overhead and ensure the VMs can be easily backed up. Which hypervisor deployment model is most appropriate?

Accepted Answer

Deploy a Type 1 hypervisor on the branch server and manage VMs via a centralized vCenter or similar tool.. A Type 1 hypervisor (bare-metal) runs directly on the server hardware, providing near-native performance for the Cisco ISRv router and DHCP server. Centralized management via vCenter or similar tools reduces administrative overhead and enables efficient VM backup and recovery, meeting the architect's requirements for minimal management overhead and easy backup.

Answer

Use a Type 2 hypervisor on a desktop PC at the branch.

Answer

Run the ISRv and DHCP server as containers on the same host.

Answer

Install the ISRv directly on physical hardware without virtualization.

Question 10

A network engineer is deploying streaming telemetry from a Cisco ASR 1000 router to a collector using gRPC. The engineer notices that the telemetry data is not being received by the collector. The router shows that the gRPC server is running and the collector is reachable. What is the most likely cause?

Accepted Answer

No telemetry subscription is configured on the router for the desired data paths.. The gRPC server running and the collector being reachable indicates the transport layer is functional. However, streaming telemetry requires an explicit subscription configuration on the router that defines which data paths (e.g., YANG paths) to stream and to which collector. Without a subscription, the router has no instruction to send telemetry data, even if the gRPC server is active and network connectivity exists.

Answer

The gRPC server is configured with the wrong port number.

Answer

The collector is not listening on the same IP address as configured on the router.

Answer

The telemetry data is encoded in GPB, but the collector expects JSON.