350-401 Matching — 30 Questions

Question 1

Drag and drop each SD-WAN policy type on the left to its matching application point on the right.

Accepted Answer

App-route policy: Applied to data traffic for SLA-based path selection. App-route policies are applied to data traffic to influence path selection; cflowd policies enable flow monitoring; data policies control forwarding and NAT; control policies affect routing and TLOC advertisements; VPN membership policies control which VPNs are active on a device.

Question 2

Drag and drop each HTTP method on the left to its matching REST operation on the right.

Accepted Answer

GET: Retrieve a resource. GET retrieves; POST creates; PUT replaces; DELETE removes; PATCH partially updates.

Question 3

Drag and drop each Netmiko device type on the left to its matching operating system on the right.

Accepted Answer

cisco_ios: Cisco IOS (classic). cisco_ios is for classic IOS; cisco_nxos is for NX-OS; cisco_xr is for IOS-XR; cisco_xe is for IOS-XE.

Question 4

Drag and drop each Python library on the left to its matching network use case on the right.

Accepted Answer

Netmiko: Simplifies SSH connections to network devices. Netmiko simplifies SSH to network devices; NAPALM provides multi-vendor abstraction; Nornir is task-based and parallel; Scrapli is async-focused; Paramiko is low-level SSH.

Question 5

Drag and drop each WAN transport type on the left to its matching SD-WAN characteristic on the right.

Accepted Answer

MPLS: Predictable latency and SLA, private Layer 3 VPN. MPLS provides predictable SLA and private connectivity; Broadband (Internet) offers low cost but variable quality; LTE/4G/5G provides wireless backup with lower bandwidth; Satellite offers high latency global coverage; Metro Ethernet provides high-speed metro-area connectivity.

Question 6

Drag and drop each NAPALM getter on the left to its matching returned data on the right.

Accepted Answer

get_facts: Device hostname, vendor, model, OS version, serial number. get_facts returns device facts like hostname and OS version, get_interfaces returns interface details, get_bgp_neighbors returns BGP neighbor information, get_lldp_neighbors returns LLDP neighbor data, and get_environment returns power and fan status.

Question 7

Drag and drop each OSPF router role on the left to its matching function on the right.

Accepted Answer

DR: Generates the Network LSA and maintains full adjacencies with all routers on the segment. The DR (Designated Router) generates the Network LSA and manages LSDB synchronization on multiaccess networks. The BDR (Backup Designated Router) monitors the DR and takes over if the DR fails. DROTHERs form full adjacencies only with the DR and BDR, not with each other.

Question 8

Drag and drop each EAP method on the left to its matching authentication type on the right.

Accepted Answer

EAP-TLS: Certificate-based mutual authentication. EAP-TLS uses certificates, PEAP uses tunneled MSCHAPv2, EAP-FAST uses PAC, EAP-MD5 uses simple password hash.

Question 9

Drag and drop each NFV component on the left to its matching role on the right.

Accepted Answer

VNF: Virtualized network function software (e.g., virtual router). VNF is the virtualized network function software; NFVI is the infrastructure of compute, storage, and networking; MANO handles orchestration and lifecycle management.

Question 10

Drag and drop each NETCONF operation on the left to its action on the right.

Accepted Answer

get: Retrieve running configuration and state data. Correct pairings: get retrieves running config and state data; get-config retrieves a specific datastore; edit-config modifies configuration; commit confirms a candidate configuration; lock prevents other sessions from modifying a datastore.

Question 11

Drag and drop each RESTCONF method on the left to its equivalent NETCONF operation on the right.

Accepted Answer

GET: get-config (retrieves data). Correct pairings: GET retrieves data (like get-config); POST creates a resource (like edit-config with operation create); PUT replaces a resource (like edit-config with operation replace); PATCH partially updates (like edit-config with operation merge); DELETE removes a resource (like edit-config with operation delete).

Question 12

Drag and drop each NetFlow version on the left to its matching feature on the right.

Accepted Answer

NetFlow v5: Fixed-format records with no templates. NetFlow v5 sends fixed-format records with no user-defined fields. v9 supports templates and flexible field definitions. IPFIX is the standardized version of v9 with additional fields and variable-length support.

Question 13

Drag and drop each IKEv2 exchange on the left to its matching phase on the right.

Accepted Answer

IKE_SA_INIT: Phase 1 key agreement. IKE_SA_INIT is phase 1 for key agreement; IKE_AUTH is phase 2 for authentication and policy; CREATE_CHILD_SA is used for rekeying or additional SAs.

Question 14

Drag and drop each DMVPN phase on the left to its matching NHRP operation type on the right.

Accepted Answer

Phase 1: Hub-and-spoke with NHRP registration. DMVPN has only three phases. Phase 1 uses NHRP for hub registration only; Phase 2 uses NHRP for spoke-to-spoke dynamic tunnel creation via resolution request/reply; Phase 3 uses NHRP with prefix-based spoke-to-spoke shortcut.

Answer

Phase 4: NHRP with BGP for routing

Answer

Phase 5: NHRP with OSPF for routing

Question 15

Drag and drop each IP SLA schedule parameter on the left to its function on the right.

Accepted Answer

start-time: Defines when the operation begins. Start-time defines when the operation begins; frequency sets the interval between probes; life sets the total duration of the operation.

Question 16

Drag and drop each broadband type on the left to its matching technology on the right.

Accepted Answer

DSL: Uses telephone line with ADSL or VDSL. DSL uses telephone lines with frequencies above voice. Cable uses coaxial cable with DOCSIS. Fiber uses optical fiber with GPON or active Ethernet. 4G LTE uses cellular radio. Satellite uses geostationary or LEO satellites.

Question 17

Drag and drop each CoS value on the left to its matching traffic type on the right.

Accepted Answer

CoS 5: Voice payload. CoS values are used in 802.1Q frames: CoS 5 for voice, CoS 4 for video, CoS 3 for call signaling, CoS 2 for critical data, CoS 0 for best-effort data.

Question 18

Drag and drop each MP-BGP address family on the left to its matching use case on the right.

Accepted Answer

VPNv4: Carries IPv4 VPN routes with MPLS labels across the provider core. VPNv4 address family carries IPv4 VPN routes; VPNv6 carries IPv6 VPN routes; IPv4 unicast carries global IPv4 routes; IPv6 unicast carries global IPv6 routes; L2VPN address family carries Layer 2 VPN information.

Question 19

Drag and drop each First Hop Redundancy Protocol on the left to its matching function on the right.

Accepted Answer

HSRP: Cisco-proprietary active/standby gateway redundancy with one virtual IP. HSRP uses an active/standby model with one virtual MAC; VRRP uses an election process with a single virtual MAC; GLBP load-balances across multiple gateways.

Question 20

Drag and drop each SD-Access fabric role on the left to its matching function on the right.

Accepted Answer

Fabric Border Node: Connects the SD-Access fabric to external Layer 2 or Layer 3 networks. The fabric border node connects the fabric to external networks, the fabric edge node connects endpoints to the fabric, and the fabric control node manages LISP mapping and VXLAN tunnels.