350-401 Mock Exam 89 — 25 Questions

Question 1

Which three statements about NFV and its relationship with SDN are true? (Choose three.)

Accepted Answer

NFV can leverage SDN to dynamically create and manage network paths between VNFs.. NFV and SDN are complementary but independent technologies. NFV focuses on virtualizing network functions, while SDN separates the control and data planes for centralized network control. They can be used together to enhance flexibility and automation. Option A is correct because NFV can use SDN to provide dynamic network connectivity between VNFs. Option B is correct because SDN can provide the network abstraction needed for NFV. Option C is correct because they are independent; one can be deployed without the other. Option D is incorrect because SDN is not a requirement for NFV; NFV can work with traditional networking. Option E is incorrect because NFV does not require SDN for service chaining; it can use other methods like policy-based routing.

Answer

SDN is a prerequisite for implementing NFV in any network environment.

Answer

NFV requires SDN to perform service function chaining.

Question 2

What is the maximum hop count for EIGRP?

Accepted Answer

255. EIGRP uses a maximum hop count of 255, which is a hard limit encoded in the protocol's metric structure. This high limit allows EIGRP to scale in large enterprise networks without the hop-count restrictions of distance-vector protocols like RIP.

Answer

100

Answer

15

Answer

16

Question 3

What is the default syslog severity level for console logging on a Cisco IOS device?

Accepted Answer

debugging (level 7). By default, Cisco IOS devices log messages with severity levels 0 through 7 (emergencies through debugging) to the console. This is because the console logging default is set to 'debugging' (level 7), meaning all syslog messages, regardless of severity, are displayed on the console. This behavior is controlled by the 'logging console debugging' command, which is the default configuration.

Answer

informational (level 6)

Answer

warnings (level 4)

Answer

errors (level 3)

Question 4

A company has a requirement to provide redundancy for the default gateway on a subnet. Two switches are configured with HSRP. Which requirement must be met for the interfaces on the switches to form the HSRP group?

Accepted Answer

The interfaces must be in the same VLAN.. HSRP is a First Hop Redundancy Protocol that provides a virtual gateway for hosts. To form an HSRP group, the participating interfaces must be Layer 3 interfaces (either SVIs on switches or routed ports on multilayer switches) that are configured with IP addresses and belong to the same VLAN. Option B is incorrect because HSRP does not run on Layer 2 switchports; those ports do not have IP addresses and cannot send HSRP messages. Option D is correct because being in the same VLAN ensures the switches share the same broadcast domain, allowing HSRP multicast hello messages to reach each other.

Answer

The interfaces must be on the same physical switch.

Answer

The interfaces must be Layer 2 switchports.

Answer

The interfaces must have the same IP address.

Question 5

What is the default lease time for a DHCP pool in Cisco IOS?

Accepted Answer

1 day. The default DHCP lease time in Cisco IOS is 1 day (86400 seconds). This is defined in the DHCP pool configuration and is applied automatically when no lease duration is explicitly specified. The lease time determines how long a client can use an assigned IP address before it must renew the lease.

Answer

12 hours

Answer

2 days

Answer

Infinite

Question 6

Drag and drop the steps of a VM live migration process in vSphere into the correct order, from first to last.

Accepted Answer

Initiate vMotion from source host. The correct order for vMotion live migration begins with initiating the migration from the source host (A). Then, initial memory pages are copied to the destination (B). While the VM continues running, dirty memory pages are tracked and iteratively copied (C). Next, the VM is quiesced and the final state is copied (D). Finally, the VM is resumed on the destination host (E).

Question 7

Which three statements about RPF check in IP multicast are true? (Choose three.)

Accepted Answer

The RPF check ensures that multicast packets are forwarded only if they arrive on the interface that the router would use to send unicast traffic back to the source.. The RPF check is a fundamental multicast forwarding mechanism that verifies the source address of incoming multicast packets against the unicast routing table. A packet passes RPF if it arrives on the interface that the router would use to reach the source. If the RPF check fails, the packet is dropped to prevent loops. RPF is performed on every multicast packet, not just the first one. The RPF check is independent of the multicast routing protocol; it uses the unicast routing table. RPF failure can occur even with a correct unicast route if the packet arrives on a different interface.

Answer

The RPF check is performed only on the first packet of a multicast stream to determine the forwarding path.

Answer

The RPF check relies solely on the multicast routing table (MRIB) to determine the incoming interface.

Question 8

Drag and drop the steps of configuring an IP SLA UDP jitter operation into the correct order, from first to last.

Accepted Answer

Enter global configuration mode. The correct order for configuring an IP SLA UDP jitter operation is: first enter global configuration mode (A), then define the IP SLA operation with type udp-jitter (B), then specify the destination IP address and UDP port (C), then schedule the operation using a start-time (D), and finally verify the operation with 'show ip sla statistics' (E).

Question 9

Drag and drop the steps to configure OSPF on a Cisco router in the correct order.

Accepted Answer

Enter global configuration mode, then configure 'router ospf ', then configure 'network

area '. OSPF configuration starts with enabling the OSPF process, then defining networks and areas.

Answer

Enter global configuration mode, then configure 'network

area ', then configure 'router ospf '

Answer

Configure 'router ospf ', then enter global configuration mode, then configure 'network

area '

Answer

Enter global configuration mode, then configure 'router ospf ', then configure 'network

' without the 'area' keyword

Question 10

Drag and drop each security protocol on the left to its matching service on the right.

Accepted Answer

ESP: Encryption and authentication. ESP provides confidentiality (encryption) and authentication; AH provides integrity and authentication but no encryption; ESP with NULL encryption provides authentication only.

Question 11

A network engineer is configuring an EtherChannel between a Cisco switch and a server that supports LACP. The switch ports are configured as trunk ports allowing multiple VLANs. The engineer wants to ensure the EtherChannel forms automatically without manual intervention. Which configuration should be applied on the switch?

Accepted Answer

Configure the port-channel with 'channel-group 1 mode active'.. 'mode active' enables LACP unconditionally on the switch port, causing it to actively send LACP packets to negotiate and form an EtherChannel with the server. Since the server supports LACP, this ensures automatic formation without manual intervention, and the trunk ports will carry multiple VLANs across the aggregated link.

Answer

Configure the port-channel with 'channel-group 1 mode passive'.

Answer

Configure the port-channel with 'channel-group 1 mode desirable'.

Answer

Configure the port-channel with 'channel-group 1 mode on'.

Question 12

Drag and drop the steps of DNA Center site hierarchy creation into the correct order, from first to last.

Accepted Answer

Create a top-level area (e.g., continent). Site hierarchy creation begins with defining the top-level area (e.g., continent), then building down to building, floor, and finally assigning devices to the floor.

Question 13

Drag and drop each DMVPN phase on the left to its matching NHRP operation type on the right.

Answer

Phase 1: Spoke-to-hub only via NHRP registration

Answer

Phase 2: Spoke-to-spoke via NHRP redirect

Answer

Phase 3: Spoke-to-spoke via NHRP shortcut

Answer

Phase 2 NHRP: Redirect from hub to trigger direct tunnel

Answer

Phase 3 NHRP: Shortcut resolution by spoke

Question 14

Drag and drop each VPN type on the left to its matching tunnel technology on the right.

Accepted Answer

DMVPN: mGRE with NHRP. DMVPN uses mGRE with NHRP; FlexVPN uses IKEv2 with per-peer tunnels; GET VPN uses GDOI for group encryption; AnyConnect uses TLS/DTLS for client-based remote access.

Question 15

Which three statements about MPLS Layer 3 VPNs are true? (Choose three.)

Accepted Answer

MP-BGP is used to exchange VPNv4 routes between PE routers.. MPLS L3VPNs use MP-BGP to exchange VPNv4 routes, require a VRF per customer, and use two labels (IGP label for transport, VPN label for VRF lookup). The PE router performs the routing between CE and the MPLS core.

Answer

The P router maintains a full routing table for all VPN customers.

Answer

A single MPLS label is used for both transport and VPN identification.

Question 16

Which three statements about BGP route reflectors are true? (Choose three.)

Accepted Answer

Route reflectors reduce the number of required iBGP sessions in an AS.. Route reflectors reduce the number of required iBGP sessions by allowing clients to peer only with the route reflector. The route reflector does not modify the AS_PATH or NEXT_HOP attributes when reflecting routes, preserving path information. The ORIGINATOR_ID attribute is used to prevent routing loops by identifying the originator of a route. Option E is incorrect because non-client peers of a route reflector do not need to be fully meshed; they may be clients of other route reflectors, and the full mesh requirement applies only to iBGP speakers that are not clients of any route reflector.

Answer

A route reflector client must be fully meshed with all other clients.

Answer

Non-client peers of a route reflector must be fully meshed with each other.

Question 17

Drag and drop each BGP community on the left to its standard behavior on the right.

Accepted Answer

NO_EXPORT: Do not advertise to eBGP peers (except within confederation). NO_EXPORT prevents advertisement outside confederation; NO_ADVERTISE prevents any advertisement; LOCAL_AS prevents advertisement to external peers; INTERNET advertises to all BGP peers.

Answer

NO_PEER: Do not advertise to any BGP peer

Question 18

Which two statements about VLAN configuration and verification are true? (Choose two.)

Accepted Answer

A VLAN can be created using the 'vlan vlan-id' command in global configuration mode.. The correct statements are A and B. Statement A is true because the 'vlan vlan-id' command in global configuration mode creates a VLAN. Statement B is true because 'show vlan brief' displays all VLANs, including reserved VLANs 1002-1005 (though they are not user-created). Statement C is false because VLAN 1 is a default VLAN and cannot be deleted. Statement D is false because the 'switchport access vlan' command does not automatically create the VLAN; the VLAN must already exist. Statement E is false because 'show interfaces trunk' displays trunking interfaces along with their allowed VLAN list and native VLAN, not solely the native VLAN.

Answer

VLAN 1 can be deleted from the switch.

Answer

The 'switchport access vlan' command automatically creates the VLAN if it does not already exist.

Answer

The 'show interfaces trunk' command shows only the trunking interfaces and their native VLAN.

Question 19

Which two statements about classification and marking in QoS are true? (Choose two.)

Accepted Answer

Classification can be based on IP precedence, DSCP, or CoS values.. Classification can be based on various Layer 2 and Layer 3 fields such as IP precedence, DSCP, and CoS values. The 'match ip dscp' command is used in class maps to match packets based on DSCP values. Marking is performed using the 'set' command in a policy-map class configuration, but the statement in B is considered too absolute because marking can also be done using other methods like 'police' for marking. Therefore, options A and E are correct.

Answer

Marking is performed using the 'set' command in a policy-map class configuration.

Answer

Layer 2 CoS marking uses the first 6 bits of the 802.1Q tag.

Answer

DSCP uses the first 3 bits of the ToS byte and is not compatible with IP precedence.

Question 20

Drag and drop the steps of MAB (MAC Authentication Bypass) fallback flow into the correct order, from first to last.

Accepted Answer

Host connects; switch detects link up. MAB is a fallback method when 802.1X fails: the switch detects the host MAC, sends a RADIUS Access-Request with the MAC as username/password, ISE checks the MAC against its database, and then either grants access (placing the port in the authorized VLAN) or denies it.