350-401 Mock Exam 90 — 25 Questions

Question 1

Drag and drop each VLAN type on the left to its matching purpose on the right.

Accepted Answer

data VLAN: Carries user data traffic. Data VLAN carries user traffic; voice VLAN carries VoIP; management VLAN for device access; native VLAN for untagged frames on trunk; default VLAN is VLAN 1.

Question 2

Drag and drop each VLAN type on the left to its matching purpose on the right.

Accepted Answer

data VLAN: Carries user data traffic. Data VLAN carries user traffic. Voice VLAN carries VoIP traffic (typically VLAN 100–199). Management VLAN carries management traffic (e.g., SSH, SNMP). Native VLAN carries untagged frames on a trunk (default VLAN 1). Black-hole VLAN is unused and dropped to prevent loops.

Question 3

Drag and drop each VTP mode on the left to its matching capability on the right.

Accepted Answer

server: Can create, modify, and delete VLANs; advertises VLAN database. VTP server can create/modify/delete VLANs and advertises them. VTP client learns VLANs but cannot modify them. VTP transparent forwards VTP messages but does not participate. VTP off ignores VTP messages entirely.

Question 4

Drag and drop the steps of VLAN mapping on trunk interfaces into the correct order, from first to last.

Accepted Answer

Enter trunk interface configuration mode. First enter the trunk interface, configure encapsulation, then apply the VLAN mapping policy (translate or map), and finally verify the mapping.

Question 5

Drag and drop each DTP mode on the left to its matching trunking behavior on the right.

Accepted Answer

dynamic desirable: Actively sends DTP frames; forms trunk if neighbor is trunk, desirable, or auto. Dynamic desirable actively sends DTP frames and forms a trunk if the neighbor is trunk, dynamic desirable, or dynamic auto. Dynamic auto forms a trunk only if the neighbor is trunk or dynamic desirable. Trunk always forms a trunk. Access never forms a trunk. None disables DTP.

Question 6

Drag and drop the steps of the PPDIOO network lifecycle into the correct order, from first to last.

Accepted Answer

Prepare: Define network requirements and strategy. The PPDIOO network lifecycle consists of six phases: Prepare, Plan, Design, Implement, Operate, and Optimize. The correct sequence from first to last is: Prepare, Plan, Design, Implement, Operate, Optimize.

Question 7

What is the default OSPF hello interval on an Ethernet broadcast network?

Accepted Answer

10 seconds. On Ethernet broadcast networks, OSPF defaults to a hello interval of 10 seconds, as specified in RFC 2328. This ensures fast neighbor discovery and dead interval detection (default 40 seconds, 4x hello) on high-speed multiaccess links.

Answer

30 seconds

Answer

40 seconds

Answer

20 seconds

Question 8

Drag and drop each EIGRP router role on the left to its matching definition on the right.

Accepted Answer

Successor: Next-hop router for the best route to a destination. In EIGRP, successors are the next-hop routers for the best path to a destination. Feasible successors serve as backup next-hop routers that meet the feasibility condition. Neighbors are directly connected EIGRP routers that exchange Hello packets. Feasible Distance is the lowest metric from the local router to a destination. Reported Distance is the metric that a neighbor advertises for a specific route.

Question 9

Drag and drop each syslog severity level on the left to its matching severity number on the right.

Accepted Answer

Emergency: 0. Emergency=0, Alert=1, Critical=2, Error=3, Warning=4, Notice=5, Informational=6, Debug=7.

Question 10

Consider the following partial configuration for QoS on a Cisco IOS-XE router:

class-map match-all VOICE
 match ip dscp ef
!
policy-map QOS_POLICY
 class VOICE
  priority 1000
 class class-default
  fair-queue
!
interface GigabitEthernet0/0
 service-policy output QOS_POLICY

What is the effect of the 'priority 1000' command under class VOICE?

Accepted Answer

Voice traffic is placed in a strict priority queue with a bandwidth limit of 1000 kbps.. The 'priority' command under the class VOICE in the policy-map QOS_POLICY enables strict priority queuing (low-latency queue) for voice traffic matching DSCP EF. The 'priority 1000' sets a bandwidth limit of 1000 kbps for this queue, meaning voice traffic can use up to 1000 kbps in the strict priority queue; if it exceeds this rate, excess traffic is dropped (or reclassified, depending on configuration). This ensures voice traffic is serviced before other traffic but is limited to 1000 kbps.

Answer

Voice traffic is given a minimum bandwidth guarantee of 1000 kbps but no priority.

Answer

Voice traffic is dropped if it exceeds 1000 kbps.

Answer

Voice traffic is shaped to 1000 kbps.

Question 11

Drag and drop the steps of WRED configuration for TCP congestion avoidance into the correct order, from first to last.

Accepted Answer

Define class map matching TCP traffic. The correct order for WRED configuration is: first define a class map matching TCP traffic (B), then create a policy map with the random-detect command (C), apply the service policy to an interface (D), and verify with show policy-map interface (E). Option A is a distractor; WRED is not enabled globally but per class under a policy map using the 'random-detect' command.

Answer

Enable WRED globally with random-detect

Question 12

A multinational enterprise is deploying Cisco SD-WAN to interconnect 500 branch sites with two data centers. The network architect must ensure that the control plane remains operational even if the vSmart controllers become unreachable. Which design approach should the architect choose to meet this requirement?

Accepted Answer

Configure local policies on WAN edge routers to allow forwarding based on the last known OMP routes and locally originated routes.. Cisco SD-WAN WAN edge routers can continue forwarding traffic using locally originated routes and the last known OMP routes even when vSmart controllers are unreachable. This is achieved through local policies that allow the router to maintain forwarding decisions based on cached OMP information, ensuring the control plane remains operational without requiring vSmart reachability.

Answer

Deploy redundant vSmart controllers in active/standby mode and configure WAN edge routers to use both for OMP sessions.

Answer

Enable OMP graceful restart on all WAN edge routers so that routes are preserved for a configurable period after vSmart loss.

Answer

Use static routes on the WAN edge routers as a backup for all OMP-learned routes.

Question 13

A network engineer is configuring QoS on a Cisco router to prioritize business-critical applications. The engineer creates a class-map that matches traffic based on the destination IP address and port. However, the class-map does not match the expected traffic. What is the most likely reason?

Accepted Answer

The class-map uses 'match-all' but the engineer intended to use 'match-any'.. When a class-map uses 'match-all', all match conditions must be true for a packet to be classified. If the engineer intended to match traffic based on either the destination IP address OR the port, using 'match-any' would allow the class-map to match if any single condition is met. The mismatch occurs because the class-map is too restrictive, requiring both conditions to be satisfied simultaneously.

Answer

The access-list used for matching is not applied to the correct interface.

Answer

The router does not support matching on both IP and port in the same class-map.

Answer

The class-map must be applied to the interface before it can match traffic.

Question 14

Which two statements about OSPF neighbor states are true? (Choose two.)

Accepted Answer

The 2-Way state indicates that both routers have seen their own router ID in the neighbor's hello packet.. The 2-Way state indicates that both routers have received each other's hello packets, confirming bidirectional communication. Option B is correct because the Full state means that the routers have exchanged all LSAs and their databases are synchronized. Option C is incorrect because the ExStart state is where the master/slave relationship is established, not where LSAs are exchanged. Option D is incorrect because the Loading state is where LSRs and LSUs are exchanged, not the Exchange state. Option E is incorrect because the Down state is the initial state before any hello packets are received.

Answer

In the ExStart state, routers exchange Database Description packets containing LSA headers.

Answer

In the Exchange state, routers send Link State Requests and receive Link State Updates.

Answer

The Down state is the final state when a neighbor is unreachable.

Question 15

A network engineer is tasked with deploying a DMVPN Phase 2 network for a company with multiple branch offices. The hub router is a Cisco 4451-X and the spoke routers are Cisco 4331s. After configuration, the spokes can ping the hub's tunnel IP, but cannot reach each other's tunnel IPs. The engineer checks the routing tables and sees that the hub has routes for both spoke subnets, but the spokes do not have routes to each other. What is the most likely cause?

Accepted Answer

The hub is not configured to propagate spoke routes to other spokes.. In DMVPN Phase 2, spokes learn routes to other spoke subnets via the hub router through a dynamic routing protocol (e.g., EIGRP, OSPF). The hub must be configured to redistribute routes from one spoke into the routing updates sent to other spokes. Without proper redistribution or route advertisement, each spoke only knows its own directly connected networks and the hub's tunnel IP, preventing direct spoke-to-spoke reachability.

Answer

The NHRP network ID is mismatched between the hub and spokes.

Answer

The spokes are not configured with a crypto map for IPsec.

Answer

The tunnel mode is set to GRE instead of mGRE on the spokes.

Question 16

Drag and drop the steps of parsing 'show interfaces' output using TextFSM into the correct order, from first to last.

Accepted Answer

Capture CLI output from device. The correct order of steps for parsing 'show interfaces' output using TextFSM is: first, capture CLI output from the device (A); second, load the TextFSM template file (B); third, initialize the TextFSM parser with the template (C); fourth, parse the output using the ParseText method (D); finally, access the structured data as a list of dictionaries (E). This sequence follows the logical workflow of a script: obtain raw data, set up the template, apply the parser, and retrieve structured results.

Question 17

What is the default SNMP trap port number?

Accepted Answer

UDP 162. SNMP traps are unsolicited notifications sent from an SNMP agent to a network management system (NMS) to alert about significant events. By default, these trap messages are sent over UDP port 162, as defined in RFC 1157. UDP is used because traps are connectionless and do not require acknowledgment, making them efficient for event-driven notifications.

Answer

UDP 161

Answer

TCP 161

Answer

TCP 162

Question 18

Which two statements about Rapid PVST+ are true? (Choose two.)

Accepted Answer

Rapid PVST+ converges faster than classic STP because it uses synchronized handshakes between switches.. Rapid PVST+ is the Cisco implementation of RSTP per VLAN. It converges faster than classic STP due to synchronized handshakes (A). It supports one spanning-tree instance per VLAN, allowing load balancing across multiple VLANs by configuring different root bridges for different VLANs (E). Option C is incorrect because, while alternate ports provide a backup path to the root bridge, the statement about being in a discarding state when the root port is operational is overly simplistic; in RSTP, alternate ports are in discarding state by default, but this is a characteristic of all RSTP port roles, not a unique feature of alternate ports.

Answer

Rapid PVST+ uses a separate BPDU version for each VLAN to maintain per-VLAN spanning-tree instances.

Answer

In Rapid PVST+, an alternate port provides a backup path to the root bridge and is in a discarding state when the root port is operational.

Answer

Rapid PVST+ requires the use of UplinkFast and BackboneFast features to achieve sub-second convergence.

Question 19

Drag and drop each ERSPAN version on the left to its correct header format on the right.

Accepted Answer

ERSPAN Type II (v1): GRE header with 6-byte header containing session ID.. ERSPAN Type II (v1) uses a 6-byte GRE header with a 4-byte session ID; ERSPAN Type III (v2) uses an 8-byte GRE header with a 4-byte session ID and a 4-byte timestamp/index.

Question 20

An architect is designing an SD-Access fabric for a campus that requires high availability. The design must ensure that if one fabric edge node fails, endpoints can be re-homed to another edge node without manual intervention. Which feature should be implemented?

Accepted Answer

Anycast Layer 2 gateway. Anycast Layer 2 gateway is the correct feature because it allows multiple fabric edge nodes to share the same anycast IP and MAC address for a given VLAN. If one edge node fails, endpoints simply continue using the same gateway address, and their traffic is automatically forwarded to a surviving edge node via the fabric's underlay routing, requiring no manual intervention or protocol convergence.

Answer

HSRP

Answer

VRRP

Answer

GLBP