350-401 Architecture Practice Test 9 — 15 Questions

Question 1

A network administrator is configuring a Cisco Catalyst switch and needs to assign a port to VLAN 20 as an access port. Which command sequence is correct?

Accepted Answer

interface GigabitEthernet0/1, then switchport mode access, then switchport access vlan 20. To assign a switch port to a specific VLAN as an access port, you must enter interface configuration mode, set the port to access mode with switchport mode access, and then assign the VLAN with switchport access vlan 20. This ensures the port operates correctly as an access port in the desired VLAN.

Answer

interface GigabitEthernet0/1, then switchport mode trunk, then switchport trunk vlan 20

Answer

interface GigabitEthernet0/1, then switchport access vlan 20, then switchport mode access

Answer

vlan 20, then interface GigabitEthernet0/1, then switchport access vlan 20

Question 2

A network engineer is configuring a Cisco IOS switch and needs to assign a specific port to VLAN 20 as an access port. The port is currently in VLAN 1 and is administratively up. Which sequence of interface configuration commands correctly places the port into VLAN 20 as an access port?

Accepted Answer

switchport mode access followed by switchport access vlan 20. To place an interface into a specific VLAN as an access port on a Cisco IOS switch, the engineer enters interface configuration mode, sets the port to access mode with switchport mode access, and assigns the VLAN with switchport access vlan 20. This ensures the port carries untagged traffic for VLAN 20 only.

Answer

vlan 20 followed by switchport mode access

Answer

switchport mode dynamic auto followed by switchport access vlan 20

Answer

switchport access vlan 20 followed by switchport mode trunk

Question 3

A network administrator is configuring a Cisco Catalyst switch and needs to assign a port to VLAN 20 as an access port. Which command sequence is correct?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

The standby switch becomes active, and the stack retains its configuration and forwarding state.. StackWise-480 provides high availability by maintaining a standby switch that is ready to take over if the active switch fails. The stack retains its configuration and forwarding state, allowing for minimal disruption. The standby switch becomes active, and the member switches continue to operate without a full reload.

Answer

The stack splits into multiple independent switches, each with its own configuration.

Answer

The master switch is elected based on the highest MAC address, and all other switches reload.

Answer

All switches in the stack reload and then elect a new active switch.

Question 4

A network architect is designing a WAN with Cisco SD-WAN. The requirement is to ensure that traffic from a branch office to a critical SaaS application is prioritized and uses the best path based on real-time performance metrics. Which Cisco SD-WAN feature should be used to meet this requirement?

Accepted Answer

Application-Aware Routing. Application-Aware Routing is the correct feature because it uses real-time performance metrics to select the best path for applications, ensuring critical SaaS traffic is prioritized and uses the optimal path. It integrates with QoS to enforce prioritization, meeting the requirement. Other features like DIA and QoS address different aspects but do not provide dynamic path selection based on performance.

Answer

Cisco Umbrella

Answer

Quality of Service (QoS)

Answer

Direct Internet Access (DIA)

Question 5

A network architect is designing a campus fabric using Cisco SD-Access to centralize policy enforcement and simplify segmentation. The design must support endpoint groups for IoT devices and employees, with traffic policy applied consistently across wired and wireless. Which control plane component is responsible for maintaining the mapping between endpoint identifiers and their location in the fabric?

Accepted Answer

LISP map-server and map-resolver. In Cisco SD-Access, the LISP control plane maintains the endpoint identifier to routing locator mappings. The map-server registers these mappings from fabric edge nodes, while the map-resolver responds to queries from ingress tunnel routers. This separation of control and data plane allows scalable endpoint mobility and consistent policy enforcement across wired and wireless fabric devices.

Answer

VXLAN tunnel endpoints

Answer

Cisco Identity Services Engine

Answer

Cisco DNA Center fabric controller

Question 6

A network engineer is designing a QoS policy for a WAN edge router. The router must prioritize voice traffic with strict priority while ensuring that other traffic classes are not starved. The engineer decides to use Low Latency Queueing (LLQ). Which additional mechanism should be configured to prevent starvation of other queues when voice traffic exceeds its allocated bandwidth?

Accepted Answer

Policing on the voice class to limit its bandwidth. LLQ provides a strict priority queue for voice, but without a policer, the priority queue can consume all available bandwidth and starve other queues. Configuring policing on the voice class limits the priority traffic to a defined rate, ensuring that other classes receive their configured bandwidth. This is the recommended practice for LLQ.

Answer

Weighted Random Early Detection (WRED) on the voice queue

Answer

Traffic shaping on the voice class to smooth bursts

Answer

Class-Based Weighted Fair Queueing (CBWFQ) on the voice class

Question 7

A network architect is designing a Cisco SD-WAN fabric using vManage, vSmart, and vBond controllers. Which two statements accurately describe the control plane and onboarding behavior in this architecture? (Choose two.)

Accepted Answer

The vBond controller authenticates and orchestrates initial connectivity between WAN Edge devices and the controllers.. In Cisco SD-WAN, vBond handles authentication and orchestration of initial control connections, while vSmart is the control plane that uses OMP to distribute routing and policy information. vManage is management plane only, OSPF is not the overlay routing protocol, and vBond generally needs public reachability for discovery.

Answer

The vBond controller must be deployed behind a NAT device and cannot have a public IP address.

Answer

WAN Edge devices must run OSPF in the overlay to exchange routes with each other.

Answer

The vManage controller forwards user data traffic between WAN Edge devices in the data plane.

Question 8

A network engineer is configuring a Cisco Catalyst switch to participate in a StackWise Virtual domain. The engineer needs to ensure that the two switches form a single logical entity and that the control plane is synchronized. Which statement correctly describes a requirement for StackWise Virtual operation?

Accepted Answer

The switches must be connected by a StackWise Virtual Link using supported ports, and they must run the same software version.. StackWise Virtual combines two physical switches into one logical switch. It requires a dedicated high-bandwidth StackWise Virtual Link using supported ports and identical software versions on both switches. This allows a single control plane, unified management, and simplified topology without Spanning Tree loops between the pair.

Answer

The switches must be configured with different hostnames and separate management IP addresses to avoid conflicts.

Answer

The switches must use a dedicated StackWise cable and can be from different Catalyst switch families.

Answer

The switches must be connected via a standard 1 Gigabit Ethernet uplink and can run different software versions.

Question 9

A network engineer is designing a QoS policy for a Cisco Catalyst switch. The policy must ensure that voice traffic receives strict priority scheduling, while video and critical data traffic are guaranteed a minimum bandwidth. The engineer decides to use Modular QoS CLI (MQC) to create a policy map. Which queuing mechanism should be configured within the policy map to provide strict priority for voice traffic?

Accepted Answer

priority. In MQC, the priority command within a policy map enables strict priority queuing, ensuring that voice traffic is scheduled before other classes. The bandwidth remaining percent command allocates minimum bandwidth but not strict priority; shape average shapes traffic; and police enforces rate limits. Only priority provides the strict priority behavior required for voice.

Answer

shape average

Answer

police

Answer

bandwidth remaining percent

Question 10

A network engineer is designing a QoS policy for a Cisco Catalyst switch. The requirement is to ensure that a specific class of traffic receives a guaranteed minimum bandwidth during congestion while still allowing other classes to use excess bandwidth when available. Which queuing mechanism should the engineer configure?

Accepted Answer

Class-Based Weighted Fair Queuing (CBWFQ). CBWFQ guarantees a minimum bandwidth to each class during congestion and allows classes to share unused bandwidth. LLQ provides strict priority, WRED only manages congestion avoidance, and FIFO offers no guarantees. Therefore CBWFQ is the mechanism that matches the stated requirement for a guaranteed floor with excess sharing.

Answer

First-In, First-Out (FIFO) queuing

Answer

Weighted Random Early Detection (WRED)

Answer

Low Latency Queuing (LLQ)

Question 11

A network engineer is configuring a new Cisco IOS router and needs to ensure that the router can be managed remotely via SSH. The engineer has already generated RSA keys and configured a username and password. Which additional command is required to enable SSH access on the VTY lines?

Accepted Answer

transport input ssh. To enable SSH access on a Cisco IOS router, after generating RSA keys and configuring local authentication, the VTY lines must be configured with 'transport input ssh'. This command restricts incoming connections to SSH, ensuring secure remote management. The other commands are either prerequisites already completed or additional security settings that do not directly enable SSH on the VTY lines.

Answer

ip ssh version 2

Answer

login local

Answer

crypto key generate rsa

Question 12

A network engineer is deploying a Cisco Wireless LAN Controller (WLC) in a centralized deployment mode. The engineer needs to ensure that guest traffic is isolated from internal traffic and that guests can only access the internet. Which feature should be configured on the WLC to meet these requirements?

Accepted Answer

Configure a separate WLAN with a guest SSID and map it to a dynamic interface with a dedicated VLAN.. The most effective way to isolate guest traffic is to create a separate WLAN with a guest SSID and assign it to a dynamic interface with a dedicated VLAN. This segregates guest traffic at Layer 2 and allows Layer 3 restrictions via ACLs or firewall rules. Peer-to-Peer Blocking only prevents client-to-client communication, and using the management interface is insecure. DHCP relay is unrelated to isolation.

Answer

Configure the guest WLAN to use the management interface.

Answer

Enable DHCP relay on the management interface.

Answer

Enable Peer-to-Peer Blocking on the guest WLAN.

Question 13

A network designer is planning a QoS policy for a campus network that carries voice, video, and critical business applications. The design must ensure that voice traffic receives priority treatment with minimal latency and jitter, while preventing starvation of other traffic. Which queuing mechanism should be used on the egress interfaces to meet these requirements?

Accepted Answer

Low Latency Queuing (LLQ). Low Latency Queuing (LLQ) combines a strict priority queue with class-based weighted fair queuing for other traffic. The priority queue is typically used for voice, ensuring minimal delay and jitter, while a policer limits its bandwidth to prevent starvation of other classes. This makes LLQ the correct choice for meeting strict voice QoS requirements.

Answer

Class-Based Weighted Fair Queuing (CBWFQ)

Answer

Weighted Random Early Detection (WRED)

Answer

First-In, First-Out (FIFO) queuing

Question 14

A network engineer is configuring a Cisco wireless LAN controller (WLC) to support a new wireless network for guests. The requirement is that guest clients must be isolated from the corporate network and only have internet access. Which feature should be configured on the WLC?

Accepted Answer

Guest anchor controller. To isolate guest wireless traffic from the corporate network and provide only internet access, a guest anchor controller is used. The guest anchor controller is typically placed in a DMZ and handles all guest traffic, while the foreign controller tunnels guest client traffic to the anchor. This design ensures that guest clients cannot reach internal corporate resources.

Answer

Radio Resource Management (RRM)

Answer

FlexConnect local switching

Answer

Quality of Service (QoS) profile

Question 15

A network engineer is deploying a Cisco SD-WAN solution using vManage, vSmart, and vBond controllers. The engineer needs to ensure that the data plane is secure and that tunnels are established between WAN edge devices. Which component is responsible for orchestrating the control plane and distributing policies to WAN edge devices?

Accepted Answer

vSmart controller. In Cisco SD-WAN, the vSmart controller is the control plane component. It uses the Overlay Management Protocol (OMP) to distribute routing information and policies to WAN edge devices. The vBond orchestrator handles authentication and discovery, while vManage provides management. The vSmart controller is specifically responsible for orchestrating the control plane and policy distribution.

Answer

vManage

Answer

vBond orchestrator

Answer

WAN edge device