350-401 Drag & Drop — 40 Questions

Question 1

Drag and drop the steps to configure an extended access control list (ACL) on a Cisco router in the correct order.

Question 2

Drag and drop the steps to configure a site-to-site IPsec VPN on a Cisco router in the correct order.

Question 3

Drag and drop the steps to configure VLAN Trunking Protocol (VTP) on a Cisco switch in the correct order.

Question 4

Drag and drop the steps to configure a static route on a Cisco IOS router into the correct order.

Question 5

Drag and drop the steps to configure port security on a Cisco switch in the correct order.

Question 6

Drag and drop the steps for the Spanning Tree Protocol (STP) convergence process in the correct order.

Question 7

Drag and drop the steps of the PPDIOO network lifecycle into the correct order, from first to last.

Accepted Answer

Prepare: Define network requirements and strategy. The PPDIOO lifecycle defines six phases: Prepare, Plan, Design, Implement, Operate, and Optimize. This order ensures a structured approach from initial requirements gathering through ongoing improvement.

Question 8

Drag and drop the steps of the hierarchical campus network design process into the correct order, from first to last.

Accepted Answer

Design access layer with VLANs and port security. The hierarchical design process starts with access layer connectivity, then moves to distribution layer aggregation, core layer transport, and finally WAN edge integration. This layered approach optimizes scalability and performance.

Question 9

Drag and drop the steps of the SD-Access fabric deployment sequence into the correct order, from first to last.

Accepted Answer

Configure underlay network with IS-IS or OSPF. SD-Access deployment begins with underlay configuration for physical connectivity, then overlay setup with LISP/VXLAN, followed by policy definition and integration with DNA Center for automation and assurance.

Question 10

Drag and drop the steps of SD-Access fabric node onboarding into DNA Center into the correct order, from first to last.

Accepted Answer

Physically connect the node to the network and power it on. The correct order begins with physical connectivity and discovery, followed by adding the device to inventory, assigning it to a site, configuring the network profile and fabric role, and finally provisioning the node. This sequence ensures the device is discovered, recognized, and properly configured within the SD-Access fabric.

Question 11

Drag and drop the steps of SD-Access fabric border handoff configuration into the correct order, from first to last.

Accepted Answer

Define the external network and VLAN mapping. The correct order starts with defining the external network, then creating the SVI for the handoff, configuring the routing protocol, applying the border handoff policy, and finally verifying the connectivity. This sequence ensures the border node can properly connect the fabric to external networks.

Question 12

Drag and drop the steps of SD-Access fabric endpoint registration into the correct order, from first to last.

Accepted Answer

Endpoint sends ARP or DHCP request. The correct order begins with the endpoint sending an ARP or DHCP request, the edge node detecting the new endpoint, registering it with the control plane (LISP), the control plane updating the map server, and finally the edge node installing the necessary forwarding entries. This sequence ensures the endpoint is properly discovered and integrated into the fabric.

Question 13

Drag and drop the steps of SD-WAN overlay routing protocol (OMP) route advertisement sequence into the correct order, from first to last.

Accepted Answer

Edge device learns local routes via connected/static/dynamic. In OMP, the sequence starts with the edge device learning routes locally (connected, static, or dynamic), then redistributing them into OMP and sending to vSmart. vSmart processes and installs routes in its RIB, then advertises the best routes to other edge devices. The receiving edge device installs the route in its forwarding table and optionally redistributes into its local routing protocol.

Question 14

Drag and drop the steps of SD-WAN edge device (vEdge/cEdge) bring-up sequence into the correct order, from first to last.

Accepted Answer

Obtain IP address via DHCP. The correct order follows the Cisco SD-WAN device bootstrapping process: first the device obtains an IP address via DHCP, then it discovers the vManage using DNS or a redirect server, establishes a DTLS/TLS control connection to vManage, downloads its configuration, and finally establishes OMP sessions with vSmart controllers.

Question 15

Drag and drop the steps of Cisco SD-WAN control plane establishment sequence into the correct order, from first to last.

Accepted Answer

vBond orchestrates initial authentication and redirect. The control plane setup begins with vBond orchestrating initial authentication and directing devices to vManage and vSmart. Then each device establishes a DTLS/TLS connection to vManage for management. Next, devices establish DTLS/TLS connections to vSmart for control. After that, OMP peering is set up between edges and vSmart. Finally, BFD sessions are established between edge devices for data plane liveliness detection.

Question 16

Drag and drop the steps of the DiffServ traffic classification and marking pipeline into the correct order, from first to last.

Accepted Answer

Create a class map to match traffic. In the DiffServ QoS pipeline, traffic must first be classified using class maps, then marked with a policy map, and finally applied to an interface using a service policy. The order ensures that packets are identified, marked, and then enforced on the egress interface.

Question 17

Drag and drop the steps of the QoS trust boundary configuration process into the correct order, from first to last.

Accepted Answer

Enable trust on the interface (e.g., trust cos). The trust boundary process starts by enabling trust on the interface, then optionally setting a default CoS/DSCP for untrusted traffic, and finally applying a service policy to enforce policing or marking. Verification ensures the trust boundary is correctly applied.

Question 18

Drag and drop the steps of the QoS shaping and policing configuration sequence into the correct order, from first to last.

Accepted Answer

Define traffic classes using class maps. Shaping and policing require first defining traffic classes, then configuring the shaping/policing actions in a policy map, applying the policy to an interface, and finally adjusting parameters based on monitoring. This order ensures proper traffic control.

Question 19

Drag and drop the steps of VNF service chain instantiation into the correct order, from first to last.

Accepted Answer

Define service chain requirements. Service chain instantiation begins with defining the chain, then selecting VNFs, allocating resources, connecting VNFs via virtual links, and finally testing the chain to verify functionality.

Question 20

Drag and drop the steps of VNF life cycle management into the correct order, from first to last.

Accepted Answer

Onboard VNF package into NFVI. The correct order follows the ETSI NFV lifecycle: first onboard the VNF package, then instantiate the VNF, configure the VNF, scale the VNF as needed, and finally terminate the VNF when no longer required.