350-401 Mock Exam 95 — 25 Questions

Question 1

Refer to the exhibit. Which OSPF route type is the default route?

Accepted Answer

External type 2 (E2). The exhibit shows a default route (0.0.0.0/0) being redistributed into OSPF from another routing protocol or static route. By default, OSPF redistributes routes as External Type 2 (E2), meaning the metric does not include the internal cost to the ASBR. The route is not an NSSA type because the area is not configured as a not-so-stubby area, and it is not an inter-area route because it originates outside the OSPF domain.

Answer

Inter-area (IA)

Answer

NSSA external type 2 (N2)

Answer

External type 1 (E1)

Question 2

A network engineer is implementing QoS on a WAN link to prioritize voice traffic. Which queuing mechanism provides the lowest latency for real-time traffic?

Accepted Answer

Low Latency Queuing (LLQ). LLQ is correct because it combines strict priority queuing with CBWFQ, ensuring that voice traffic (marked with EF or CS5) is dequeued before any other traffic class. This strict priority mechanism guarantees the lowest possible latency for real-time traffic, as packets in the priority queue are always transmitted first, regardless of congestion on the WAN link.

Answer

Weighted Random Early Detection (WRED)

Answer

Class-Based Weighted Fair Queuing (CBWFQ)

Answer

First-In, First-Out (FIFO)

Question 3

A network team uses Ansible to automate VLAN configuration on Cisco IOS devices. The playbook fails with the error 'Failed to connect to the host via ssh: Permission denied (publickey)'. The control node runs Ubuntu, and the network devices are configured with SSH key authentication. Which solution should the engineer implement?

Accepted Answer

Run ssh-add on the control node to add the private key to the SSH agent. The error 'Permission denied (publickey)' indicates that the SSH key is not being presented to the IOS device. Running ssh-add on the control node loads the private key into the SSH agent, which Ansible uses by default when connecting via SSH. This resolves the authentication failure without requiring a passphrase or changing the inventory.

Answer

Set ansible_ssh_private_key_file in the inventory but omit the passphrase

Answer

Set ansible_user to the correct username in the inventory

Answer

Enable keyboard-interactive authentication on the IOS devices

Question 4

Refer to the exhibit. An engineer notices that interface resets have occurred. What is the most likely cause of the interface resets?

Accepted Answer

Cable or hardware issue causing link flapping. Interface resets typically indicate that the interface has gone down and come back up, which is most commonly caused by a physical layer issue such as a faulty cable, damaged connector, or hardware problem that leads to link flapping. When the link flaps, the interface counters increment the 'resets' field, reflecting the number of times the interface has been reset due to a loss of carrier or a link state change. This is distinct from errors like CRC or collisions, which do not directly cause the interface to reset.

Answer

CRC errors due to noise

Answer

Collisions on the link

Answer

Interface is administratively down

Question 5

A company uses Cisco Catalyst Center (formerly DNA Center) for intent-based networking. After upgrading the Catalyst Center appliance, the engineer notices that some devices are unreachable via the network, but the Catalyst Center GUI shows them as 'Managed'. What is the most likely cause?

Accepted Answer

The IP address of the Catalyst Center appliance changed after the upgrade. When the Catalyst Center appliance is upgraded, its IP address may change if the upgrade process resets network configuration or if the appliance is redeployed with a new IP. Devices are managed via IP-based communication (e.g., SSH, SNMP, NETCONF), and if the Catalyst Center IP changes, devices will still show as 'Managed' in the GUI because the database retains the device state, but the devices themselves cannot be reached because they are trying to communicate with the old IP address. This mismatch causes unreachability despite the managed status.

Answer

SNMP community strings are misconfigured

Answer

Devices were reassigned to different roles

Answer

Certificate trust between devices and Catalyst Center expired

Question 6

A network engineer is troubleshooting an Ansible playbook that uses the ios_config module to apply ACLs. The playbook runs without errors, but the ACLs are not applied to the device. The engineer verifies that the device is reachable and the credentials are correct. What is the most likely cause?

Accepted Answer

The playbook is missing the connection parameter set to 'network_cli'. The ios_config module requires the connection parameter to be set to 'network_cli' (or 'ansible.netcommon.network_cli') to use the CLI transport for sending configuration commands to network devices. Without this, Ansible defaults to the 'smart' connection, which may not properly interact with network device CLIs, causing the playbook to run without errors but not apply the ACLs.

Answer

The device is in a different VRF and not reachable

Answer

The ACL syntax in the playbook is incorrect

Answer

The ios_config module requires the netmiko library to be installed on the control node

Question 7

Which THREE attributes are typically included in a YANG module for interface configuration? (Choose three.)

Accepted Answer

description. Option B is correct because the 'description' leaf is a standard attribute in YANG models for interface configuration, providing a human-readable text string to document the interface's purpose. It is defined in the IETF interface model (RFC 8343) and is widely supported across Cisco IOS-XE and NX-OS YANG models.

Answer

switchport mode

Answer

mac address

Question 8

A network engineer needs to automate the backup of running configurations from multiple Cisco IOS XE devices to a central TFTP server. Which tool is best suited for this task in a Python-based automation framework?

Accepted Answer

Paramiko. Paramiko is a Python library that implements the SSHv2 protocol, allowing direct, low-level SSH connections to network devices. For backing up running configurations to a TFTP server, Paramiko can execute the `copy running-config tftp:` command on each device, providing the necessary interactive session handling. While Netmiko is built on Paramiko, it is a higher-level library that abstracts away some of the low-level control; for a simple, script-driven backup task, Paramiko offers the direct SSH access needed without additional overhead.

Answer

RESTCONF

Answer

Ansible

Answer

Netmiko

Question 9

Which THREE are valid methods for automating network device configuration using Cisco IOS XE? (Choose three.)

Accepted Answer

NETCONF/YANG. NETCONF/YANG is a valid method for automating network device configuration on Cisco IOS XE. NETCONF (RFC 6241) uses an XML-based RPC protocol to establish a secure SSH session (port 830) for configuration operations, while YANG (RFC 7950) provides a structured data model to define the configuration and state data. This combination allows for programmatic, transactional, and standardized configuration management, making it a core automation technology supported by Cisco.

Answer

SNMP Set requests

Answer

Telnet with Expect scripts

Question 10

An organization uses Cisco DNA Center to automate network provisioning. A network engineer deploys a new access switch but finds that the switch does not receive the intended configuration template. The switch appears in DNA Center inventory with status 'Managed'. What is the most likely cause?

Accepted Answer

The switch is not assigned to a site. In Cisco DNA Center, configuration templates are applied based on site assignment. A switch that appears as 'Managed' in inventory has been discovered and is under DNA Center's control, but if it is not assigned to a specific site, DNA Center cannot determine which template to push. Site assignment is a prerequisite for template-based provisioning; without it, the intended configuration will not be deployed.

Answer

The switch has not been discovered by DNA Center

Answer

The switch is not in Plug and Play mode

Answer

The switch does not have a valid DNA license

Question 11

Match each QoS feature to its description.

Question 12

Match each First Hop Redundancy Protocol (FHRP) to its description.

Question 13

Drag and drop the steps to configure OSPF on a Cisco router in the correct order.

Question 14

Drag and drop the steps for the DHCP DORA process in the correct order.

Question 15

Drag and drop the steps for the three-way TCP handshake into the correct order.

Question 16

Drag and drop the steps for the EIGRP neighbor discovery process in the correct order.

Question 17

Match each wireless standard to its frequency band and maximum data rate.

Question 18

Match each EIGRP term to its definition.

Question 19

Match each Cisco IOS command to its function.

Question 20

Match each Cisco switch security feature to its function.

350-401 Mock Exam 95 — 25 Questions

Exhibit

350-401 Mock Exam 95 — 25 Questions

Exhibit