350-401 Network Assurance Practice Test 6 — 15 Questions

Question 1

A network engineer has configured a Cisco IOS IP SLA operation using ICMP echo to monitor reachability to a remote branch router. The engineer wants to correlate the results with syslog messages and SNMP traps to detect when the branch becomes unreachable. Which IP SLA configuration step is required to generate these notifications?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

Configure an IP SLA reaction with a threshold and an action such as logging or SNMP trap.. To generate syslog messages and SNMP traps based on IP SLA results, you must configure a reaction that specifies a threshold and an action. The reaction monitors the operation's return code or metrics and triggers the defined action when the condition is met. Without a reaction, the operation collects data silently, and no notifications are sent.

Answer

Configure the ip sla monitor operation with the tag command to enable logging.

Answer

Enable IP SLA responder on the remote branch router and configure the operation to use the responder.

Answer

Configure the ip sla schedule command with the life forever option to ensure continuous monitoring.

Question 2

A network administrator is troubleshooting a Cisco Catalyst switch and suspects a Layer 2 loop. The administrator wants to verify the Spanning Tree Protocol (STP) topology and identify the root bridge. Which command should be used?

Accepted Answer

show spanning-tree. To verify STP topology and identify the root bridge, the 'show spanning-tree' command is the correct choice. It provides detailed output for each VLAN, including the root bridge ID, root path cost, and port roles. This allows the administrator to confirm the expected topology and detect any loops or misconfigurations.

Answer

show mac address-table

Answer

show interfaces trunk

Answer

show cdp neighbors

Question 3

A network administrator is troubleshooting a Cisco SD-WAN deployment where a branch site is experiencing intermittent connectivity to a SaaS application. The administrator suspects that the issue is related to the application-aware routing policy not correctly identifying the application. Which component of Cisco SD-WAN is responsible for identifying applications in the data plane?

Accepted Answer

vEdge router. Application identification in Cisco SD-WAN is performed by the vEdge router, which uses deep packet inspection (DPI) or Cisco NBAR to recognize applications. This classification is critical for application-aware routing, as it enables the router to apply policies that steer traffic based on application performance. The vEdge router then forwards traffic accordingly, ensuring that SaaS applications receive appropriate treatment.

Answer

vBond orchestrator

Answer

vSmart controller

Answer

vManage NMS

Question 4

A network engineer is configuring a Switched Port Analyzer (SPAN) session on a Cisco Catalyst switch to capture traffic from a specific VLAN. Which configuration command is required to monitor all traffic on VLAN 10 and send it to a destination port?

Accepted Answer

monitor session 1 source vlan 10. To monitor all traffic on VLAN 10, the correct command is 'monitor session 1 source vlan 10'. This sets the source VLAN for the SPAN session. The destination port is then configured separately. Other options either use incorrect syntax or confuse source and destination roles.

Answer

monitor session 1 source interface vlan 10

Answer

monitor session 1 destination vlan 10

Answer

monitor session 1 filter vlan 10

Question 5

A network administrator is using Cisco DNA Center Assurance to monitor a campus network. The administrator notices that the health score for a particular building has dropped significantly. Which feature of Cisco DNA Center Assurance should the administrator use to identify the root cause of the issue by analyzing network events and device performance metrics over time?

Accepted Answer

AI Network Analytics. AI Network Analytics leverages machine learning to process large volumes of historical data, including device performance metrics and network events, to identify the root cause of health score degradation. Unlike dashboards or path trace tools that provide current state or connectivity views, AI Network Analytics correlates past and present data to uncover underlying issues, making it the correct choice for deep root cause analysis.

Answer

Assurance Issues

Answer

Network Health Dashboard

Answer

Path Trace

Question 6

A network engineer is analyzing traffic flows on a Cisco Nexus switch and needs to collect NetFlow data. The engineer wants to export flow records to an external collector at 192.168.100.50 on port 2055. Which configuration step is required to enable NetFlow export?

Accepted Answer

Configure a flow exporter with the destination 192.168.100.50 and transport UDP 2055, then apply a flow monitor to the interface.. On Cisco Nexus switches, NetFlow export requires defining a flow exporter that specifies the collector's IP address and UDP port. A flow record defines the match and collect fields, and a flow monitor ties them together. The flow monitor is then applied to the interface. This modular approach is different from traditional IOS routers.

Answer

Use the 'netflow export destination 192.168.100.50 2055' command in global configuration mode and enable NetFlow on the management interface.

Answer

Enable NetFlow on the interface with the 'ip flow ingress' command and specify the collector with 'ip flow-export destination 192.168.100.50 2055'.

Answer

Configure a NetFlow collector group with the destination 192.168.100.50 and port 2055, then enable NetFlow on the VLAN interface.

Question 7

A network engineer is analyzing the output of 'show ip sla statistics' on a Cisco IOS router. The engineer notices that the SLA operation is returning 'Timeout' for several probes. Which two statements are true about the potential causes of this issue? (Choose two.)

Accepted Answer

The timeout value may be set too low for the network latency.. Timeouts in IP SLA statistics indicate that the probe packets are not receiving a response within the configured timeout period. This can be caused by the target being unreachable due to routing or ACL issues, or by the timeout value being too low relative to network latency. Both conditions prevent the successful completion of the probe, leading to timeouts.

Answer

The source interface may not have a valid IP address configured.

Answer

The SLA operation may be using an unsupported protocol type.

Answer

The SLA operation may be configured with an incorrect frequency.

Question 8

A network administrator is troubleshooting a connectivity issue between two switches connected via a trunk link. The trunk is configured with 802.1Q encapsulation. The administrator suspects that the native VLAN is mismatched. Which command displays the native VLAN configuration on a Cisco Catalyst switch?

Accepted Answer

show interfaces trunk. The show interfaces trunk command is specifically designed to display trunk interface details, including the native VLAN. It provides a concise summary that makes it easy to compare native VLAN settings between switches. While the running configuration also contains the native VLAN setting, show interfaces trunk is the most direct and efficient command for this purpose, especially when checking multiple trunks.

Answer

show running-config interface GigabitEthernet0/1

Answer

show vlan brief

Answer

show spanning-tree interface GigabitEthernet0/1

Question 9

A network engineer is analyzing the output of the show processes cpu sorted command on a Cisco Catalyst 9300 switch and notices that the CPU utilization is consistently high. Which two methods can help identify the cause of high CPU utilization? (Choose two.)

Accepted Answer

Use the show processes cpu history command to view CPU utilization over time.. The show processes cpu history command provides historical CPU utilization graphs, helping correlate spikes with events. The show processes cpu sorted command lists processes by CPU usage, directly identifying the top consumers. Together, they allow an engineer to pinpoint which process is causing high CPU and when it occurs. The other commands provide additional context but are not the primary methods for identifying the cause of high CPU.

Answer

Use the show interfaces counters errors command to check for interface errors.

Answer

Use the show tech-support command to collect all diagnostic information.

Answer

Use the show platform resources command to view hardware resource utilization.

Question 10

A network engineer is troubleshooting a connectivity issue and wants to verify the path that packets take from a Cisco IOS XE router to a remote destination. Which command provides a hop-by-hop listing of the path, including latency information for each hop?

Accepted Answer

traceroute. Traceroute is designed to discover the path to a destination by leveraging the TTL field in IP packets. Each router that decrements the TTL to zero sends an ICMP Time Exceeded message, allowing the source to build a list of hops. It also records round-trip times, making it ideal for diagnosing latency and path issues.

Answer

show ip interface brief

Answer

ping

Answer

show ip route

Question 11

A network engineer is using Cisco DNA Center Assurance to monitor and troubleshoot a network. The engineer wants to use the Assurance features to proactively detect issues and receive recommendations. Which two statements are true about Cisco DNA Center Assurance capabilities? (Choose two.)

Accepted Answer

It integrates with Cisco Identity Services Engine (ISE) to provide client authentication details.. Cisco DNA Center Assurance uses machine learning to correlate events and identify root causes, enabling proactive issue detection. It also integrates with Cisco ISE to provide client authentication details, enhancing troubleshooting for identity-related issues. These two capabilities are fundamental to Assurance's value proposition. The other statements are false: Assurance does provide historical data, does not automatically remediate without human intervention, and supports virtual deployments.

Answer

It can automatically apply configuration changes to remediate issues without human intervention.

Answer

It provides real-time monitoring of network devices but does not offer historical data analysis.

Answer

It requires the use of Cisco DNA Center appliances only; virtual deployments are not supported.

Question 12

A network administrator is analyzing NetFlow data on a Cisco IOS router to identify top talkers. The administrator notices that a large amount of traffic is being exported but the NetFlow cache is filling up quickly. Which action should the administrator take to reduce the cache size while maintaining visibility into the most significant flows?

Accepted Answer

Enable NetFlow aggregation with a suitable aggregation scheme, such as protocol-port or source-prefix.. NetFlow aggregation reduces the number of flow entries by combining individual flows into aggregated records based on criteria like protocol and port or source prefix. This directly decreases cache size and export load while preserving visibility into major traffic patterns. Adjusting timeouts can have side effects such as increased export volume or incomplete data, whereas aggregation is designed to optimize cache usage without sacrificing essential visibility.

Answer

Decrease the NetFlow cache timeout values for active and inactive flows.

Answer

Increase the NetFlow cache timeout values for active and inactive flows.

Answer

Configure NetFlow to export only ingress traffic on all interfaces.

Question 13

A network administrator is analyzing syslog messages from a Cisco Catalyst switch and notices the message %SW_MATM-4-MACFLAP_NOTIF: Host 0000.1111.2222 in vlan 10 is flapping between port Gi1/0/1 and port Gi1/0/2. What is the most likely cause of this message?

Accepted Answer

A device with MAC address 0000.1111.2222 is connected to both Gi1/0/1 and Gi1/0/2, possibly via a loop or a dual-homed connection.. The %SW_MATM-4-MACFLAP_NOTIF message indicates that the switch has detected the same MAC address being learned on two different ports within a short period. This is most commonly caused by a loop or a device connected to multiple ports, leading to inconsistent MAC address table entries. The administrator should investigate the physical connections and spanning tree topology.

Answer

A loop exists in VLAN 10 due to a misconfigured spanning tree.

Answer

The switch has a software bug causing incorrect MAC address learning.

Answer

The MAC address 0000.1111.2222 is configured as a static MAC address on two different ports.

Question 14

A network engineer is analyzing traffic flows using Cisco IOS NetFlow on a router. The engineer notices that the NetFlow cache is filling up rapidly, causing older entries to be exported prematurely before they can be properly aggregated. Which NetFlow configuration parameter should the engineer adjust to control the maximum number of entries in the cache?

Accepted Answer

cache entries. In Cisco IOS NetFlow, the cache has a maximum number of entries defined by the 'cache entries' command. When the cache reaches this limit, the router may prematurely export older flows to free space, leading to incomplete aggregation. Increasing the cache entries allows more flows to be stored, reducing premature exports. Other parameters like timeouts affect flow expiration but not the total capacity. The engineer should adjust 'cache entries' to match the traffic volume and available memory.

Answer

cache timeout active

Answer

ip flow-export destination

Answer

cache timeout inactive

Question 15

A network administrator is troubleshooting a network issue using Cisco DNA Center Assurance. The administrator wants to identify which network devices are experiencing the highest number of errors, such as CRC errors and interface flaps. Which Assurance dashboard should the administrator use?

Accepted Answer

Network Health. The Network Health dashboard in Cisco DNA Center Assurance aggregates health metrics for network devices and links, including error counters like CRC errors and interface flaps. It ranks devices by health and highlights those with the most issues, enabling administrators to quickly pinpoint and address problems. This makes it the right choice for identifying devices with high error rates.

Answer

Client Health

Answer

Application Health

Answer

Path Trace