350-401 Practice Exam 63 — 20 Questions

Question 1

Drag and drop each authentication mode on the left to its matching behavior on the right.

Accepted Answer

Open: Port allows traffic even before successful authentication. Open mode allows traffic before authentication, closed mode blocks all until authenticated, and monitor mode logs but does not block.

Question 2

Which two statements about SNMPv3 security features are true? (Choose two.)

Accepted Answer

The authNoPriv security level provides authentication using MD5 or SHA, but no encryption.. SNMPv3 provides both authentication and encryption. The authNoPriv level uses MD5 or SHA for authentication without encryption; noAuthNoPriv uses no security; authPriv provides both authentication and encryption. The engine ID is required for SNMPv3 user configuration and is used to generate the localized key.

Answer

The noAuthNoPriv security level provides both authentication and encryption.

Answer

SNMPv3 users are identified solely by the community string, similar to SNMPv2c.

Answer

The SNMP engine ID is optional and only used for debugging purposes.

Question 3

Drag and drop the steps of CoPP class-map match criteria and rate-limit application into the correct order, from first to last.

Accepted Answer

Define class-map with match statements. CoPP configuration requires defining match criteria in a class-map, then creating a policy-map with police commands, and finally applying the policy to the control plane. The order follows standard MQC (Modular QoS CLI) process.

Question 4

Which three statements about model-driven telemetry are true? (Choose three.)

Accepted Answer

Model-driven telemetry uses YANG data models to define the data to be streamed.. Model-driven telemetry uses YANG data models and can push data via gRPC or gNMI. It supports both periodic and on-change subscriptions. It reduces polling overhead compared to SNMP. It does not require SSH for transport (gRPC uses HTTP/2).

Answer

Model-driven telemetry requires SSH for secure data transport.

Answer

Model-driven telemetry increases the polling overhead compared to SNMP.

Question 5

Which three statements about model-driven telemetry are true? (Choose three.)

Accepted Answer

Telemetry subscriptions can be configured to report data on a periodic interval or when a value changes.. Model-driven telemetry (MDT) uses YANG data models and supports both periodic and on-change subscriptions. It uses a push model, reducing polling overhead. gRPC and gNMI are common transport protocols. Telemetry data can be encoded in JSON or GPB.

Answer

Model-driven telemetry uses a pull model where the collector requests data from network devices.

Answer

Model-driven telemetry requires the use of SNMP for data encoding.

Question 6

Which three statements about telemetry data collection methods are true? (Choose three.)

Accepted Answer

Syslog messages can be used as a form of telemetry to report events and state changes.. Telemetry can be collected via SNMP (pull), Syslog (push), and model-driven telemetry (push). SNMP polling is a classic pull method, while Syslog and MDT are push-based. MDT offers higher scale and flexibility compared to SNMP.

Answer

SNMP is a push-based telemetry method where agents send traps to the NMS.

Answer

Telemetry data can only be encoded in XML format.

Question 7

Drag and drop each BGP path selection criterion on the left to its order of preference (1 = highest priority) on the right.

Accepted Answer

Weight: 1. Weight (highest) is checked first, then LOCAL_PREF (highest), then locally originated routes, then AS_PATH (shortest), then ORIGIN (IGP < EGP < incomplete).

Question 8

Which two statements about BGP path attributes are true? (Choose two.)

Accepted Answer

The AS_PATH attribute is well-known mandatory.. The AS_PATH attribute is well-known mandatory and is used for loop prevention and path selection. The LOCAL_PREF attribute is well-known discretionary and is used to influence outbound traffic from an AS. The MED attribute is optional non-transitive, not well-known. The ORIGIN attribute is well-known mandatory. The COMMUNITY attribute is optional transitive.

Answer

The MED attribute is well-known mandatory.

Answer

The ORIGIN attribute is optional transitive.

Answer

The COMMUNITY attribute is well-known mandatory.

Question 9

Drag and drop the steps of IGMP v3 SSM membership report process into the correct order, from first to last.

Accepted Answer

Host sends IGMPv3 Membership Report with (S,G). IGMPv3 SSM membership reports are sent by hosts to request traffic from specific sources. The host first sends a Membership Report listing desired (S,G) pairs. The router processes the report, updates its multicast routing table, and then sends PIM (S,G) Joins toward the source. The source forwards traffic, which is then delivered to the host.

Question 10

Drag and drop each IGMP version on the left to its matching feature on the right.

Accepted Answer

IGMPv1: No leave message; querier elected by lowest IP address on subnet. IGMPv1 has no leave message and uses a querier election based on IP address; IGMPv2 adds explicit leave and querier election using lowest IP; IGMPv3 adds source filtering (include/exclude) and supports SSM.

Question 11

An Ansible playbook is written to configure a VLAN on a Cisco IOS-XE device via Cisco DNA Center's intent API:

- name: Configure VLAN via DNA Center
  hosts: localhost
  gather_facts: no
  tasks:
    - name: Create VLAN 100
      cisco.dnac.vlan:
        host: "{{ dnac_host }}"
        username: "{{ dnac_username }}"
        password: "{{ dnac_password }}"
        validate_certs: no
        state: present
        vlan_name: "Engineering"
        vlan_id: 100
        site_id: "{{ site_id }}"
      register: result

- debug: var=result

What is a potential issue with this playbook?

Accepted Answer

The 'site_id' parameter is mandatory for creating a VLAN in DNA Center; if missing, the task will fail.. The cisco.dnac.vlan module requires the 'site_id' parameter to associate the VLAN with a specific site. If the site_id is not provided or is incorrect, the task will fail or create the VLAN in the wrong location. Additionally, the playbook assumes the DNA Center credentials are correctly set.

Answer

The module name is incorrect; it should be cisco.dnac.network_vlan.

Answer

The playbook does not include a task to obtain an authentication token, which is required by DNA Center API.

Answer

The 'state: present' is invalid; it should be 'state: create'.

Question 12

Drag and drop the steps of SPAN session on EtherChannel member ports into the correct order, from first to last.

Accepted Answer

Create the EtherChannel (port-channel) interface. When using EtherChannel, the SPAN source must be the port-channel interface, not individual members, to capture all traffic.

Question 13

Drag and drop each SPAN type on the left to its correct scope description on the right.

Accepted Answer

Local SPAN: Mirrors traffic only on the source switch. Local SPAN mirrors traffic on the same switch; RSPAN uses a dedicated VLAN to transport mirrored traffic across switches; ERSPAN encapsulates mirrored packets in GRE and routes them over Layer 3.

Question 14

Drag and drop each NFV component on the left to its matching role on the right.

Accepted Answer

Virtual Network Function (VNF): Software instance of a network function running on NFVI. VNFs are software implementations of network functions; NFVI provides the infrastructure; MANO orchestrates and manages the lifecycle.

Question 15

Drag and drop each service chaining element on the left to its matching position in the chain on the right.

Accepted Answer

Classifier: Entry point that identifies and steers traffic into a service chain. Service chaining steers traffic through a sequence of VNFs; classifiers identify traffic; SFC encapsulation maintains chain context.

Question 16

Drag and drop each NFV management layer on the left to its matching function on the right.

Accepted Answer

VNFM: Lifecycle management (instantiation, scaling, termination) of a VNF. VNFM manages individual VNFs, NFVO handles orchestration and resource inventory, VIM controls NFVI resources.

Question 17

Which three statements about NFV MANO (Management and Orchestration) are true? (Choose three.)

Accepted Answer

The NFV Orchestrator (NFVO) is responsible for network service orchestration and resource orchestration across multiple VIMs.. NFV MANO is the architectural framework for managing and orchestrating NFV resources. The NFV Orchestrator (NFVO) coordinates network services across VIMs and WIMs. The VNF Manager (VNFM) handles VNF lifecycle. The VIM manages NFVI resources. Option A is correct because NFVO handles network service orchestration. Option B is correct because VNFM manages VNF instances. Option C is correct because VIM controls NFVI compute, storage, and network. Option D is incorrect because OSS/BSS are separate from MANO, though they interact. Option E is incorrect because the NFVO does not directly manage hypervisors; that is the VIM's role.

Answer

OSS/BSS systems are part of the NFV MANO framework and directly manage VNF instances.

Answer

The NFVO directly manages the hypervisor layer to allocate virtual resources to VNFs.

Question 18

Which three statements about NFV and its relationship with SDN are true? (Choose three.)

Accepted Answer

NFV can leverage SDN to dynamically create and manage network paths between VNFs.. NFV and SDN are complementary but independent technologies. NFV focuses on virtualizing network functions, while SDN separates the control and data planes for centralized network control. They can be used together to enhance flexibility and automation. Option A is correct because NFV can use SDN to provide dynamic network connectivity between VNFs. Option B is correct because SDN can provide the network abstraction needed for NFV. Option C is correct because they are independent; one can be deployed without the other. Option D is incorrect because SDN is not a requirement for NFV; NFV can work with traditional networking. Option E is incorrect because NFV does not require SDN for service chaining; it can use other methods like policy-based routing.

Answer

SDN is a prerequisite for implementing NFV in any network environment.

Answer

NFV requires SDN to perform service function chaining.

Question 19

Drag and drop the steps of a VM live migration process in vSphere into the correct order, from first to last.

Accepted Answer

Initiate vMotion from source host. The correct order for vMotion live migration begins with initiating the migration from the source host (A). Then, initial memory pages are copied to the destination (B). While the VM continues running, dirty memory pages are tracked and iteratively copied (C). Next, the VM is quiesced and the final state is copied (D). Finally, the VM is resumed on the destination host (E).

Question 20

Which three statements about RPF check in IP multicast are true? (Choose three.)

Accepted Answer

The RPF check ensures that multicast packets are forwarded only if they arrive on the interface that the router would use to send unicast traffic back to the source.. The RPF check is a fundamental multicast forwarding mechanism that verifies the source address of incoming multicast packets against the unicast routing table. A packet passes RPF if it arrives on the interface that the router would use to reach the source. If the RPF check fails, the packet is dropped to prevent loops. RPF is performed on every multicast packet, not just the first one. The RPF check is independent of the multicast routing protocol; it uses the unicast routing table. RPF failure can occur even with a correct unicast route if the packet arrives on a different interface.

Answer

The RPF check is performed only on the first packet of a multicast stream to determine the forwarding path.

Answer

The RPF check relies solely on the multicast routing table (MRIB) to determine the incoming interface.