350-401 Architecture Practice Test 8 — 15 Questions

Question 1

A network administrator is configuring a new Cisco Catalyst switch and needs to ensure that the management VLAN interface is reachable from a remote subnet. The switch is at its default configuration. Which command must be applied to the management VLAN interface to allow remote management from a different subnet?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

ip default-gateway 10.1.1.1. On a Layer 2 switch, the management VLAN interface requires a default gateway to communicate with devices on other subnets. The 'ip default-gateway' command specifies that gateway, allowing the switch to be managed remotely from a different subnet without enabling full IP routing.

Answer

ip name-server 10.1.1.1

Answer

ip route 0.0.0.0 0.0.0.0 10.1.1.1

Answer

ip routing

Question 2

A network architect is designing a QoS policy for a Cisco Catalyst switch. The architect needs to ensure that voice traffic is marked with the appropriate DSCP value for expedited forwarding. Which DSCP value should be used for voice traffic?

Accepted Answer

EF (46). Voice traffic should be marked with DSCP EF (46) to ensure expedited forwarding, which provides low latency, jitter, and loss. Other DSCP values like AF31 are used for call signaling, while CS6 and CS7 are reserved for network control. Proper marking ensures that voice packets receive priority treatment in QoS-enabled networks.

Answer

CS7 (56)

Answer

CS6 (48)

Answer

AF31 (26)

Question 3

A network engineer is designing a large-scale campus network using Cisco SD-Access. The fabric must support thousands of endpoints and provide optimal forwarding paths. Which control plane component is responsible for maintaining the mapping of endpoint IP addresses to fabric edge nodes?

Accepted Answer

Fabric control plane node. In Cisco SD-Access, the fabric control plane node uses LISP to maintain a mapping database of endpoint IP addresses to their current fabric edge nodes. This enables fabric edge nodes to query the control plane and forward traffic directly to the correct edge node, ensuring optimal paths and scalability for thousands of endpoints.

Answer

Fabric intermediate node

Answer

Cisco DNA Center

Answer

Fabric edge node

Question 4

A network architect is designing a new branch office that requires a controller-based wireless solution with centralized management, but the branch has limited bandwidth and must continue forwarding client traffic locally even if the WAN link to the headquarters controller fails. The branch has a single Cisco Catalyst 9800-L controller and several Cisco Catalyst 9100 access points. Which deployment mode should the architect choose for the access points?

Accepted Answer

FlexConnect mode with local switching enabled on the access points. FlexConnect with local switching allows the access point to forward client traffic locally at the branch, reducing WAN bandwidth consumption and providing survivability if the controller becomes unreachable. The controller still manages the AP for configuration and control plane functions, but data traffic does not need to traverse the WAN. This matches the branch requirements for centralized management and local forwarding.

Answer

Local mode with CAPWAP control and data tunnels to the controller

Answer

Sniffer mode with packet capture to a remote server

Answer

Monitor mode with dedicated air monitoring on all access points

Question 5

A network architect is selecting a switching platform for a data center access layer that must support lossless Ethernet for FCoE. The platform must provide per-priority flow control so that storage traffic can be paused without affecting LAN traffic. Which technology should the architect specify?

Accepted Answer

Priority Flow Control (PFC). Lossless Ethernet for FCoE requires a mechanism that can pause a specific traffic class without stopping all traffic on the link. Priority Flow Control does exactly that by acting on CoS values, allowing storage frames to be paused while ordinary LAN traffic continues. LLDP, EtherChannel, and jumbo frames each address different concerns and none provides per-priority pause.

Answer

EtherChannel with LACP

Answer

Jumbo frame support

Answer

Link Layer Discovery Protocol (LLDP)

Question 6

A network architect is evaluating Cisco StackWise Virtual for a pair of distribution switches. The design requires that the two switches appear as a single logical entity for Layer 2 and Layer 3 forwarding, and that they support Multichassis EtherChannel (MEC) to access switches. Which statement accurately describes a characteristic of Cisco StackWise Virtual?

Accepted Answer

It supports active/active forwarding, allowing both switches to forward traffic simultaneously.. Cisco StackWise Virtual allows two physical switches to operate as a single logical switch, supporting active/active forwarding. This means both switches can forward traffic simultaneously, and Multichassis EtherChannel (MEC) can be used to connect access switches to both distribution switches for redundancy and load sharing. This design provides high availability and efficient bandwidth utilization.

Answer

It requires a dedicated stack cable between the switches for control plane communication.

Answer

It is limited to two switches and cannot be expanded to more than two.

Answer

It requires that both switches run different IOS versions to ensure compatibility.

Question 7

A network engineer is designing a high-availability campus network using Cisco StackWise Virtual. The engineer wants to ensure that if the virtual link fails, the switches do not both become active and cause a split-brain scenario. Which mechanism should be implemented to detect and prevent a dual-active situation?

Accepted Answer

Configure a separate physical link as a dual-active detection link and enable dual-active detection.. StackWise Virtual uses a dual-active detection link to prevent a split-brain scenario. This is a separate physical link between the two switches that is used to detect a virtual link failure. When the virtual link fails, the switches communicate over the dual-active detection link to determine which switch should remain active. Configuring this link and enabling dual-active detection is the correct approach.

Answer

Enable PAgP on the virtual link to detect dual-active condition.

Answer

Enable BFD on the virtual link to rapidly detect failures.

Answer

Configure VRRP on the switches to monitor the virtual link.

Question 8

A network architect is designing a Cisco SD-WAN fabric for a company with 30 branch sites and two data centers. The architect wants to ensure that control plane information is exchanged securely and that data plane traffic can be forwarded even if the control plane is temporarily unavailable. Which component should be deployed to meet these requirements?

Accepted Answer

Cisco vEdge routers. The data plane in Cisco SD-WAN is handled by vEdge/cEdge routers, which forward traffic and maintain secure connections to the control plane. They can continue forwarding based on last-known routing and policy information if the control plane is disrupted. The management plane (vManage), orchestration plane (vBond), and control plane (vSmart) do not forward production data traffic, so they cannot meet the requirement for continued data plane forwarding.

Answer

Cisco vSmart

Answer

Cisco vBond

Answer

Cisco vManage

Question 9

A network designer is evaluating a virtual switch deployment in a Cisco ACI fabric. The requirement is to extend a bridge domain across multiple leaf switches while allowing the fabric to perform distributed IP routing at the leaf for endpoints in that bridge domain. Which ACI construct should the designer use?

Accepted Answer

A bridge domain with hardware proxy and unicast routing enabled. In Cisco ACI, distributed first-hop routing is achieved by enabling unicast routing on the bridge domain and using the hardware proxy anycast gateway. This programs the same gateway IP and MAC on every leaf, so endpoints are routed at their ingress leaf. The other constructs address isolation, service insertion, or static endpoint attachment, none of which delivers distributed routing.

Answer

A VRF with policy-based redirect to a service graph

Answer

A tenant with a single EPG mapped to a static path

Answer

A private network with an external bridged domain

Question 10

A network engineer is designing a Cisco SD-Access fabric for a campus network. The fabric must support both wired and wireless clients, and the engineer wants to ensure that traffic from wired endpoints is encapsulated and forwarded through the fabric without requiring the endpoints to change their IP addresses. Which component of the SD-Access architecture is responsible for encapsulating traffic from wired endpoints and forwarding it to the fabric edge?

Accepted Answer

Fabric edge node. In Cisco SD-Access, the fabric edge node is the device that connects wired endpoints to the fabric. It encapsulates traffic from wired endpoints into VXLAN and forwards it to the destination fabric edge node based on the control plane mapping. This allows endpoints to keep their IP addresses and be part of a virtual network without re-addressing.

Answer

Control plane node

Answer

Fabric intermediate node

Answer

Fabric border node

Question 11

A network architect is designing a fabric that must support Layer 2 and Layer 3 connectivity for endpoints across multiple sites without stretching VLANs between them. The design requires a control plane that separates the endpoint identifier from the routing locator, allowing traffic to be tunneled over a routed underlay. Which Cisco architecture component provides this separation in an SD-Access fabric?

Accepted Answer

LISP control plane with VXLAN data plane. The Cisco SD-Access fabric uses LISP as its control plane to separate endpoint identity from routing location, and VXLAN as the data plane to tunnel overlay traffic across a routed underlay. This combination lets endpoints remain in their Layer 2 or Layer 3 virtual networks without extending VLANs between sites, which is precisely what the architect requires.

Answer

MP-BGP EVPN with MPLS L3VPN VRFs

Answer

Cisco TrustSec with SGT Exchange Protocol

Answer

OTV with IS-IS adjacency over the WAN

Question 12

A network architect is designing a QoS policy for a campus network. The architect needs to ensure that voice traffic is prioritized over all other traffic types, even during congestion. Which queuing mechanism should be used on the egress interface to provide strict priority to voice traffic?

Accepted Answer

Low Latency Queuing (LLQ). Low Latency Queuing (LLQ) provides strict priority queuing, which ensures that voice traffic is serviced before all other traffic. LLQ is an extension of CBWFQ that includes a priority queue for delay-sensitive traffic. The priority queue is policed to prevent bandwidth starvation of other queues. CBWFQ, WRED, and FIFO do not offer strict priority and are not suitable for voice traffic prioritization.

Answer

Class-Based Weighted Fair Queuing (CBWFQ)

Answer

Weighted Random Early Detection (WRED)

Answer

First-In, First-Out (FIFO) queuing

Question 13

A network architect is designing a Cisco SD-Access fabric for a large enterprise. The fabric will use VXLAN encapsulation and a Layer 3 underlay. The architect must ensure that the fabric supports the separation of policy from topology and allows endpoints to be assigned to virtual networks. Which Cisco SD-Access component is responsible for maintaining the mapping between endpoint IP addresses and their fabric locators, and for providing the control plane that enables fabric edge nodes to resolve endpoint locations?

Accepted Answer

Control plane node. In Cisco SD-Access, the control plane node hosts the LISP map-server and map-resolver functions, maintaining the endpoint-to-locator mapping database. Fabric edge nodes query this node to resolve endpoint locations. This design separates policy from topology and supports virtual network assignment. The other components either connect endpoints, handle external traffic, or forward underlay packets, but none maintain the mapping database.

Answer

Fabric border node

Answer

Fabric intermediate node

Answer

Fabric edge node

Question 14

A network engineer is implementing Cisco SD-Access and needs to ensure that endpoints in a virtual network can communicate with a shared service that resides in a different virtual network. The shared service must be reachable from multiple virtual networks without duplicating the service. Which SD-Access component should be configured to provide this inter-VN communication?

Accepted Answer

Fusion router. The fusion router is specifically designed to enable inter-VN communication and shared services in Cisco SD-Access. It connects to the fabric border node and uses VRF leaking to allow endpoints in different virtual networks to reach common services. Fabric edge nodes, border nodes, and control plane nodes have different roles and do not provide this function. The fusion router ensures that shared services are not duplicated across VNs.

Answer

Control plane node

Answer

Fabric edge node

Answer

Fabric border node

Question 15

A network engineer is implementing Cisco SD-Access and needs to ensure that the fabric provides policy-based segmentation and mobility for endpoints. Which component is responsible for maintaining the endpoint location and identity information?

Accepted Answer

LISP Map-Server. The LISP Map-Server is responsible for maintaining endpoint location and identity information in Cisco SD-Access. It registers EID-to-RLOC mappings from fabric edge nodes and provides them to other nodes upon request. This enables seamless mobility and policy-based segmentation, as endpoints can be reached regardless of their physical location. Other components like DNA Center and ISE play different roles in management and policy.

Answer

Cisco Identity Services Engine (ISE)

Answer

Cisco DNA Center

Answer

VXLAN Tunnel Endpoint (VTEP)