350-401 Infrastructure Practice Test 6 — 15 Questions

Question 1

A network administrator is configuring a Cisco IOS router to act as a DHCP server for the 10.1.1.0/24 subnet. The router's interface GigabitEthernet0/0 is configured with IP address 10.1.1.1/24. Which command is required to exclude the router's own IP address from being assigned to DHCP clients?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

ip dhcp excluded-address 10.1.1.1. The `ip dhcp excluded-address` command is used to specify addresses that the DHCP server should not assign. Excluding the router's own IP address (10.1.1.1) prevents IP conflicts. The other options either create a pool, exclude the entire subnet, or configure relay agent information, none of which correctly exclude a single address.

Answer

ip dhcp pool 10.1.1.0

Answer

ip dhcp excluded-address 10.1.1.0 10.1.1.255

Answer

ip dhcp relay information option

Question 2

A network engineer is implementing QoS on a Cisco Catalyst switch to prioritize voice traffic. The engineer needs to ensure that voice packets are marked with DSCP EF and that the switch trusts the markings from the IP phone. Which two actions should be taken to achieve this? (Choose two.)

Accepted Answer

Configure the switch port connected to the IP phone with the mls qos trust dscp command.. To trust DSCP markings from an IP phone, QoS must be enabled globally with mls qos, and the switch port must be configured with mls qos trust dscp. These two actions ensure the switch honors the DSCP EF markings set by the phone, allowing voice traffic to be prioritized without re-marking.

Answer

Configure a policer to limit voice traffic to a specific rate.

Answer

Configure a class map to match DSCP EF and a policy map to set DSCP EF.

Answer

Configure the switch port as a trunk port to carry voice VLAN.

Question 3

A network engineer is designing a QoS policy for a Cisco Catalyst switch to prioritize voice traffic over data traffic. The engineer plans to use the Modular QoS CLI (MQC) to classify and mark traffic. Which two statements correctly describe the behavior of MQC in this scenario? (Choose two.)

Accepted Answer

Class maps define the traffic classification criteria, such as matching on DSCP or CoS values.. In MQC, class maps define the traffic classification criteria, and policy maps define the actions to be taken on each class. Together, they form the building blocks of a QoS policy. The policy map is then applied to an interface using the service-policy command. This two-step process allows for flexible and scalable QoS configuration.

Answer

MQC policies are applied to interfaces using the service-policy command in interface configuration mode.

Answer

MQC allows only one class map per policy map, limiting the granularity of QoS policies.

Answer

Class maps are applied directly to interfaces without the need for a policy map.

Question 4

A network engineer is deploying a Cisco Catalyst switch stack with four members. The engineer wants to ensure that if the active switch fails, the standby switch takes over within a few seconds. Which StackWise feature should be verified?

Accepted Answer

StackWise priority and stack port status. In a StackWise stack, the active switch is elected based on priority and MAC address. To ensure fast failover, the standby switch must be operational and stack ports must be up. Verifying StackWise priority and stack port status confirms that the standby is ready to take over. StackWise Virtual, StackPower, and EtherChannel do not address the active/standby election in a four-member stack.

Answer

StackPower configuration

Answer

EtherChannel load balancing

Answer

StackWise Virtual link

Question 5

A network engineer is deploying a Cisco SD-Access fabric and needs to ensure that the control plane nodes (control plane nodes) provide scalability and redundancy. Which two statements are true about the control plane node role in Cisco SD-Access? (Choose two.)

Accepted Answer

Control plane nodes maintain a mapping of endpoint IP addresses to fabric locators.. Control plane nodes in Cisco SD-Access provide LISP map-server and map-resolver services, maintaining the endpoint-to-locator mapping database. They must be deployed in redundant pairs for high availability. They do not encapsulate user traffic; that is done by fabric edge nodes. They also do not inherently run border functions or exclusively run the underlay routing protocol.

Answer

Control plane nodes are responsible for encapsulating user traffic in VXLAN.

Answer

Control plane nodes use IS-IS as the underlay routing protocol.

Answer

Control plane nodes run the fabric border function to connect to external networks.

Question 6

A network engineer is configuring a Cisco IOS switch to support 802.1X authentication for wired endpoints. The engineer wants to ensure that if the RADIUS server is unreachable, endpoints are still granted access to the network but placed in a restricted VLAN. Which feature should be configured?

Accepted Answer

Inaccessible authentication bypass. Inaccessible authentication bypass is designed to handle RADIUS server unavailability by allowing endpoints to access the network in a restricted VLAN. This maintains connectivity while enforcing limited access until the server is reachable again. It is a key feature for high availability in 802.1X deployments.

Answer

Critical VLAN

Answer

Guest VLAN

Answer

Authentication, Authorization, and Accounting (AAA) fallback

Question 7

A network engineer is implementing OSPFv3 for IPv6 on a Cisco router. The engineer wants to enable OSPFv3 on interface GigabitEthernet0/0 and assign it to area 0 using the interface configuration method. Which command is required?

Accepted Answer

ipv6 ospf 1 area 0. To enable OSPFv3 on an interface using the interface configuration method, the ipv6 ospf process-id area area-id command is used. This activates OSPFv3 on the interface and places it in the specified area. The other commands either enter router configuration mode or are used in address-family mode, and do not directly enable OSPFv3 on the interface as required.

Answer

router ospfv3 1 area 0

Answer

ospfv3 1 ipv6 area 0

Answer

ipv6 router ospf 1 area 0

Question 8

A network engineer is configuring a Cisco IOS router to support VRF-lite. The engineer needs to ensure that routes from different VRFs are not leaked into the global routing table. Which two statements are true about VRF-lite? (Choose two.)

Accepted Answer

VRF-lite can be deployed without running MPLS in the network core.. VRF-lite provides logical separation of routing and forwarding tables on a single device without requiring MPLS. Each VRF has its own routing and CEF table, allowing overlapping address spaces. It can be deployed without MPLS in the core, making it suitable for smaller networks or customer edge devices. Route leaking in VRF-lite is typically done with static routes or policy-based routing, not route targets, and it supports both IPv4 and IPv6.

Answer

VRF-lite supports only IPv6 addressing.

Answer

Inter-VRF route leaking can be configured using route targets.

Answer

VRF-lite requires MPLS labels to separate traffic between VRFs.

Question 9

An engineer is implementing QoS on a Cisco IOS router. The router is configured with a policy map that marks packets with DSCP AF31. The engineer wants to ensure that packets marked with AF31 are treated with a higher priority than AF32 and AF33 during congestion. Which queuing mechanism should be used?

Accepted Answer

Class-Based Weighted Fair Queueing (CBWFQ). CBWFQ allows you to define traffic classes and assign bandwidth guarantees. By placing AF31 in a class with a higher bandwidth allocation than AF32 and AF33, you ensure it gets preferential treatment during congestion. LLQ is for strict priority (typically voice), WRED is for congestion avoidance, and FIFO provides no differentiation.

Answer

First-In, First-Out (FIFO) queuing

Answer

Low Latency Queueing (LLQ)

Answer

Weighted Random Early Detection (WRED)

Question 10

A network engineer is deploying Cisco SD-Access and needs to ensure that endpoints can be dynamically assigned to a virtual network based on their group membership. Which control plane component is responsible for registering endpoints and providing mapping information to the fabric edge nodes?

Accepted Answer

LISP map-server. In Cisco SD-Access, the control plane node runs LISP and acts as the map-server and map-resolver. It maintains the endpoint ID (EID) to routing locator (RLOC) mappings. Fabric edge nodes register endpoints with the map-server, which then provides mapping information to other edge nodes. This enables dynamic endpoint assignment to virtual networks based on group policy.

Answer

Cisco DNA Center

Answer

Cisco Identity Services Engine (ISE)

Answer

VXLAN tunnel endpoint (VTEP)

Question 11

A network engineer is configuring a GRE tunnel between two Cisco routers to transport multicast traffic. The tunnel source is a loopback interface on each router, and the tunnel destination is the other router's loopback. The engineer notices that multicast traffic is not being forwarded through the tunnel. Which configuration is required to allow multicast over the GRE tunnel?

Accepted Answer

Enable PIM sparse-mode on the tunnel interface.. GRE tunnels do not forward multicast traffic unless PIM is enabled on the tunnel interface. Enabling PIM sparse-mode on the tunnel interface allows the tunnel to participate in multicast routing and forward multicast packets between the routers.

Answer

Configure the tunnel mode as GRE multipoint.

Answer

Enable IP multicast routing globally and on the tunnel interface.

Answer

Set the tunnel key to match on both routers.

Question 12

A network administrator needs to configure a Cisco IOS router to act as a DHCP server for the subnet 10.10.10.0/24. The router interface GigabitEthernet0/0 is configured with IP address 10.10.10.1. Which command must be entered to exclude the router's own IP address from the DHCP pool?

Accepted Answer

ip dhcp excluded-address 10.10.10.1. The 'ip dhcp excluded-address 10.10.10.1' command excludes the router's own IP address from being assigned by the DHCP server. This is necessary to prevent IP address conflicts. The other options either create a pool, exclude the entire subnet, or use redundant syntax. The correct command is concise and achieves the goal.

Answer

ip dhcp pool EXCLUDE

Answer

ip dhcp excluded-address 10.10.10.1 10.10.10.1

Answer

ip dhcp excluded-address 10.10.10.0 10.10.10.255

Question 13

A network administrator is configuring a Cisco IOS router to act as a DHCP server for the 10.1.1.0/24 subnet. The router's interface GigabitEthernet0/0 is configured with IP address 10.1.1.1/24. Which command is required to exclude the router's own IP address from being assigned to DHCP clients?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

Guest interface. The guest interface on a Cisco WLC is specifically designed to handle guest user traffic. It tunnels guest traffic directly to the internet, ensuring isolation from internal networks. This meets the requirement of allowing internet access without credentials and isolating guest traffic. Other interface types do not provide this functionality.

Answer

DMZ interface

Answer

Dynamic interface

Answer

Management interface

Question 14

A network engineer is configuring a Cisco IOS router for Dynamic Multipoint VPN (DMVPN) Phase 3. The engineer wants to ensure that spoke-to-spoke tunnels are established dynamically. Which two configurations are required on the hub router? (Choose two.)

Accepted Answer

Configure the hub tunnel interface with `ip nhrp redirect`.. In DMVPN Phase 3, the hub must be configured with `ip nhrp redirect` to send redirect messages to spokes, and `ip nhrp map multicast dynamic` to allow dynamic multicast mapping. These enable the hub to facilitate direct spoke-to-spoke tunnels. The other commands are either configured on spokes or are general DMVPN requirements not specific to Phase 3.

Answer

Configure the hub tunnel interface with `ip nhrp network-id 1`.

Answer

Configure the hub tunnel interface with `ip nhrp shortcut`.

Answer

Configure the hub tunnel interface with `tunnel mode gre multipoint`.

Question 15

A network engineer is troubleshooting a Cisco SD-Access fabric. Endpoints in a specific virtual network are unable to communicate with a shared service that resides in the same fabric but in a different virtual network. The fabric is using LISP for control plane and VXLAN for data plane. Which component is responsible for allowing communication between virtual networks?

Accepted Answer

Fabric control plane node. In Cisco SD-Access, the fabric control plane node runs LISP and is responsible for address resolution across virtual networks. It maintains the mapping database and allows endpoints in different VNs to communicate by resolving EIDs to RLOCs. The fabric edge nodes encapsulate traffic and forward it, but they rely on the control plane node for inter-VN routing information. Border nodes connect to external networks, and intermediate nodes are part of the underlay. Thus, the control plane node is the key component for inter-VN communication.

Answer

Fabric border node

Answer

Fabric intermediate node

Answer

Fabric edge node