350-401 Mock Exam 74 — 25 Questions

Question 1

Drag and drop the steps of Streaming telemetry sensor path subscription flow into the correct order, from first to last.

Accepted Answer

Define sensor path for desired YANG data. First a sensor path is defined, then a subscription is created with destination, the device pushes data periodically, the collector receives and processes, and the subscription can be updated or deleted.

Question 2

Drag and drop each SNMP version on the left to its matching security feature on the right.

Accepted Answer

SNMPv1: Uses community strings in plaintext. SNMPv1 and v2c use community strings (plaintext) for authentication; SNMPv3 provides authentication and encryption.

Question 3

Drag and drop the steps of AAA accounting for command logging setup into the correct order, from first to last.

Accepted Answer

Enable AAA globally on device. AAA accounting for commands requires first enabling AAA globally, then defining an accounting method list for commands. The method list is applied to a line (e.g., vty or console). The device then sends command logs to the accounting server, which records them.

Question 4

Drag and drop each YANG module on the left to its matching standard body on the right.

Accepted Answer

openconfig-interfaces: OpenConfig. OpenConfig: vendor-neutral YANG models. IETF: RFC-based YANG models. Cisco-IOS-XE: Cisco proprietary YANG models for IOS-XE.

Question 5

Drag and drop the steps of ACL reflexive access list (dynamic inspection) flow into the correct order, from first to last.

Accepted Answer

Configure outbound ACL with 'reflect' keyword. Reflexive ACLs work by evaluating outbound traffic, creating a reflexive entry, then applying inbound ACL to permit return traffic. The order ensures proper dynamic inspection.

Question 6

Which three statements about IP SLA UDP jitter operation are true? (Choose three.)

Accepted Answer

UDP jitter operation measures one-way delay, jitter, and packet loss between source and destination.. UDP jitter operation measures one-way delay, jitter, and packet loss by sending timestamped UDP packets. It requires the IP SLA responder on the destination. The operation can be configured with a codec type to simulate voice traffic. The 'num-packets' command sets the number of packets in each probe. The operation does not measure TCP throughput.

Answer

The 'num-packets' command in UDP jitter configuration sets the total number of probes to be sent over the entire operation lifetime.

Answer

UDP jitter operation can measure TCP window scaling and throughput.

Question 7

Drag and drop the steps of IP SLA scheduling with frequency and lifetime into the correct order, from first to last.

Accepted Answer

Create IP SLA operation. First, the IP SLA operation is created. Then the frequency (how often to run) is configured. The lifetime (how long to run) is set. The operation is scheduled to start. Finally, the schedule is verified.

Question 8

Drag and drop the steps of DSCP-to-CoS mapping at LAN boundary into the correct order, from first to last.

Accepted Answer

Trust DSCP on the ingress interface. At the LAN boundary (switch port), DSCP is mapped to CoS for 802.1Q trunking. The order ensures proper trust, mapping, and queuing for consistent QoS across the campus network.

Question 9

Drag and drop the steps of IP SLA with threshold and reaction configuration into the correct order, from first to last.

Accepted Answer

Define IP SLA operation with type and target. First, define the IP SLA operation with a type and target. Then set the threshold values for the monitored metric. Next, configure the reaction to trigger on threshold violation. After that, schedule the operation to start. Finally, verify the configuration to ensure it works.

Question 10

Which two statements about SNMP MIB objects and OIDs are true? (Choose two.)

Accepted Answer

The MIB defines the structure of managed objects and their OIDs.. MIB (Management Information Base) is a hierarchical database of managed objects. Each object is identified by an OID (Object Identifier). OIDs are structured as a tree; for example, 1.3.6.1.2.1.1.1.0 is the sysDescr OID. The MIB defines the structure and allowed operations (get, set, etc.) for each object. SNMPv2c and SNMPv3 support GetBulk, which retrieves large tables efficiently. SNMPv1 does not support GetBulk.

Answer

The GetBulk operation is supported in SNMPv1.

Answer

The sysDescr OID (1.3.6.1.2.1.1.1.0) is a read-write object.

Answer

A single MIB object can have multiple OIDs.

Question 11

Drag and drop each traffic shaping or policing characteristic on the left to its matching description on the right.

Accepted Answer

Traffic shaping: Buffers excess packets to send later, smoothing traffic rate. Shaping buffers excess traffic to smooth bursts; policing drops or re-marks excess traffic; shaping uses a token bucket with a queue; policing typically uses a single or dual token bucket without queuing; policing can be applied inbound or outbound.

Question 12

A network engineer is troubleshooting intermittent packet loss on a WAN link connecting two data centers. The engineer suspects that certain traffic types are being dropped but needs to confirm this without impacting production. The engineer has access to Cisco IOS-XE routers at both ends. Which approach should the engineer use to identify the specific flows being dropped?

Accepted Answer

Configure Flexible NetFlow on the routers with a flow monitor that includes the 'drop' keyword to capture dropped packets per flow.. Flexible NetFlow with the 'drop' keyword allows the router to capture and report packets that are dropped due to various reasons (e.g., ACLs, QoS, or buffer exhaustion) on a per-flow basis. This provides granular visibility into which specific traffic flows are being dropped, enabling the engineer to identify the problematic traffic types without impacting production traffic.

Answer

Enable SNMP polling of interface counters to identify the total number of dropped packets on the WAN interface.

Answer

Use Embedded Event Manager (EEM) to trigger on interface drops and capture a packet trace.

Answer

Deploy IP SLA probes to measure latency and jitter, and correlate with drop events.

Question 13

Drag and drop the steps of BGP best path selection process into the correct order, from first to last.

Accepted Answer

Prefer highest weight. BGP best path selection follows a strict order: first, prefer the path with the highest weight (Cisco proprietary). If equal, prefer highest local preference. Next, prefer locally originated routes (network/aggregate). Then, prefer the shortest AS_PATH. Finally, prefer the lowest MED (if same AS).

Question 14

Refer to the exhibit. A network engineer sends a RESTCONF PATCH request with the above JSON payload to the URL https://192.168.1.100/restconf/data/ietf-interfaces:interface=GigabitEthernet0/0/0. What is the expected outcome?

Accepted Answer

The description and IP address of the existing interface are updated, and the interface remains enabled.. A RESTCONF PATCH request uses the HTTP PATCH method to apply a partial update to an existing resource. The payload contains only the fields to be modified (description and IP address), and the request URL targets the specific interface resource. Since the interface already exists, the PATCH updates only those fields without affecting other configuration, such as the interface's enabled state. This is why the interface remains enabled and only the description and IP address are updated.

Answer

A new interface GigabitEthernet0/0/0 is created with the specified IP address.

Answer

The request fails because a GET request must be sent first to retrieve the current configuration.

Answer

The entire interface configuration is replaced with only the fields in the payload.

Question 15

Examine the following configuration snippet:

interface GigabitEthernet0/1
 ip address 192.168.1.1 255.255.255.0
 ip ospf hello-interval 20
 ip ospf dead-interval 80

What is the effect of this configuration?

Accepted Answer

The OSPF hello interval is changed to 20 seconds, and the dead interval is changed to 80 seconds, maintaining the default 4:1 ratio.. The configuration explicitly sets the OSPF hello interval to 20 seconds and the dead interval to 80 seconds, which maintains the default 4:1 ratio (dead = hello × 4). OSPF allows manual configuration of these timers, and as long as both sides of the adjacency match, the ratio can be any value; the 4:1 default is not enforced by the protocol.

Answer

The OSPF hello interval is changed to 20 seconds, but the dead interval remains at the default of 40 seconds.

Answer

The OSPF hello interval is changed to 20 seconds, and the dead interval is automatically set to 60 seconds.

Answer

This configuration will cause OSPF adjacency failure because the dead interval must be exactly 4 times the hello interval.

Question 16

Drag and drop each ISE policy result on the left to its matching enforcement action on the right.

Accepted Answer

DACL: Downloadable ACL applied to the port after authentication. DACL filters traffic, VLAN assignment places the endpoint, and SGT tagging applies a security group tag.

Question 17

Drag and drop the steps of IKEv2 fragmentation and DPD keepalive process into the correct order, from first to last.

Accepted Answer

Sender fragments IKE packet if over MTU. During IKEv2, if the IKE packet exceeds the MTU, the sender fragments it into smaller pieces. The receiver reassembles the fragments into the original packet. After the IKE SA is established, the peers send Dead Peer Detection (DPD) keepalives to verify connectivity. If no response is received, the peer retransmits the DPD. After multiple failures, the peer declares the SA dead and deletes it.

Question 18

Drag and drop the steps of Netmiko multi-threaded device polling workflow into the correct order, from first to last.

Accepted Answer

Import threading and ConnectHandler from netmiko. The workflow begins by importing required modules (threading and Netmiko), defining a function for device connection and command execution, creating a list of devices, then using threading.Thread to spawn threads for each device, and finally joining threads to wait for completion.

Question 19

Drag and drop the steps of GET VPN key server registration and rekey into the correct order, from first to last.

Accepted Answer

Group member initiates ISAKMP registration. In GET VPN, the group member first registers with the key server using ISAKMP. The key server authenticates the member and pushes the initial policy and key. After registration, the key server periodically sends rekey messages to update the group encryption key. The group member acknowledges the rekey, and then both sides install the new key for ongoing encryption.

Question 20

Which THREE are valid methods for automating network device configuration using Cisco IOS XE? (Choose three.)

Accepted Answer

NETCONF/YANG. NETCONF/YANG is a valid method for automating network device configuration on Cisco IOS XE. NETCONF (RFC 6241) uses an XML-based RPC protocol to establish a secure SSH session (port 830) for configuration operations, while YANG (RFC 7950) provides a structured data model to define the configuration and state data. This combination allows for programmatic, transactional, and standardized configuration management, making it a core automation technology supported by Cisco.

Answer

SNMP Set requests

Answer

Telnet with Expect scripts