Venture into the wild terrains of certification, where the 350-401 dumps become your trusty guide, leading you through uncharted territories. Chiseled to capture the multifaceted landscape of the syllabus, the 350-401 dumps present a rich flora and fauna of practice questions, nurturing your intellectual ecosystem. Whether the clear trails of PDFs appeal to your explorer spirit or the dynamic scenarios of the VCE format ignite your adventure, the 350-401 dumps offer a diverse habitat of knowledge. Navigating through this environment, the detailed study guide in the 350-401 dumps highlights the hidden gems, ensuring you uncover every treasure. With trust as steadfast as a mountain, we proudly plant our flag of the 100% Pass Guarantee.
Step into 2024 with confidence, backed by the most recent 350-401 study guide and dumps resources
Question 1:
Which method displays text directly into the active console with a synchronous EEM applet policy?
A. event manager applet boom event syslog pattern \’UP\’ action 1.0 gets \’logging directly to console\’
B. event manager applet boom event syslog pattern \’UP\’ action 1.0 syslog priority direct msg \’log directly to console\’
C. event manager applet boom event syslog pattern \’UP\’ action 1.0 puts \’logging directly to console\’
D. event manager applet boom event syslog pattern \’UP\’ action 1.0 string \’logging directly to console\’
Correct Answer: C
“Writing Input to the Active Console When a synchronous policy is triggered, the related console is stored in the publish information specification. The policy director will query this information in an event_reqinfo call, and store the given console information for use by the action puts command.
The action puts command will write the string to the active console. A new line will be displayed unless the nonewline keyword is specified. The output from the action puts command for a synchronous applet is displayed directly to the console, bypassing the system logger. The output of the action puts command for an asynchronous applet is directed to the system logger.”
https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/eem/configuration/xe-3s/eem-xe-3s-book/eem-policy-cli.html
Question 2:
Refer to the exhibit. An engineer must configure static NAT on R1 lo allow users HTTP access to the web server on TCP port 80. The web server must be reachable through ISP 1 and ISP 2. Which command set should be applied to R1 to fulfill these requirements?
A. ip nat inside source static tcp 10.1.1.100 80 209.165.200.225 80 extendable ip nat inside source static tcp 10.1.1.100 80 209.165.201.1 80 extendable
B. ip nat inside source static tcp 10.1.1.100 80 209.165.200.225 80 ip nat inside source static tcp 10.1.1.100 80 209.165.201.1 80
C. ip nat inside source static tcp 10.1.1.100 80 209.165.200.225 80 ip nat inside source static tcp 10.1.1.100 8080 209.165.201.1 8080
D. ip nat inside source static tcp 10.1.1.100 80 209.165.200.225 80 no-alias ip nat inside source static tcp 10.1.1.100 80 209.165.201.1 80 no-alias
Correct Answer: A
the “extendable” keyword should be added if the same Inside Local is mapped to different Inside Global Addresses (the IP address of an inside host as it appears to the outside network). An example of this case is when you have two connections to the Internet on two ISPs for redundancy. So you will need to map two Inside Global IP addresses into one inside local IP address.
Question 3:
Refer to the exhibit.
An engineer is troubleshooting a connectivity issue and executes a traceoute. What does the result confirm?
A. The destination server reported it is too busy
B. The protocol is unreachable
C. The destination port is unreachable
D. The probe timed out
Correct Answer: D
In Cisco routers, the codes for a traceroute command reply are:
! — success * — time out N — network unreachable H — host unreachable P — protocol unreachable A — admin denied Q — source quench received (congestion) ? — unknown (any other ICMP message)
Question 4:
An engineer connects two switches together and notices that the connected interface on one of the switches is in an err-disabled state.
The engineer then notices that BPDUGuard is enabled on the interface. How would you correct this?
A. Switch(config)# interface x/x Switch(config-if)# no spanning-tree bpduguard enable Switch(config-if)# shut Switch(config-if)# no shut
B. PlaceHolder
C. PlaceHolder
D. PlaceHolder
Correct Answer: A
Question 5:
The Overlay Management Protocol (OMP) is used as the control plane protocol and forms peers between the VSmart Controller and the SD-WAN edge devices. OMP is responsible for advertising which three types of routes in the SD-WAN network? (Choose three.)
A. OMP routes
B. TLOCs
C. MP-BGP
D. LISP routes
E. Service routes
Correct Answer: ABE
https://www.cisco.com/c/en/us/td/docs/routers/sdwan/configuration/policies/vedge/policies-book/control-policies.html
Question 6:
In a Cisco SD-Access wireless environment, which device is responsible for hosting the anycast gateway?
A. fusion router
B. control plane node
C. fabric border node
D. fabric edge node
Correct Answer: D
“…… Inter-VLAN traffic is attracted to the edge node because the AnyCast gateway for the end hosts resides there.” Here is the link: https://www.cisco.com/c/en/us/td/docs/solutions/CVD/Campus/cisco-sda-design-guide.html
Question 7:
DRAG DROP
Drag and drop the characteristics from the left onto the correct infrastructure deployment types on the right.
Select and Place:
Correct Answer:
Question 8:
Why would a customer implement an on-premises solution instead of a cloud solution?
A. On-premises Offers greater compliance for government regulations than cloud
B. On-premises offers greater scalability than cloud.
C. On-premises oilers shorter deployment time than cloud.
D. On-premises is more secure man cloud.
Correct Answer: D
Question 9:
The login method is configured on the VTY lines of a router with these parameters.
1.
The first method for authentication is TACACS
2.
If TACACS is unavailable, login is allowed without any provided credentials
Which configuration accomplishes this task?
A. R1#sh run | include aaa aaa new-model aaa authentication login VTY group tacacs+ none aaa session-id common R1#sh run | section vty line vty 0 4 password 7 0202039485748 R1#sh run | include username R1#
B. R1#sh run | include aaa aaa new-model aaa authentication login telnet group tacacs+ none aaa session-id common R1#sh run | section vty line vty 0 4 R1#sh run | include username R1#
C. R1#sh run | include aaa aaa new-model aaa authentication login default group tacacs+ none aaa session-id common R1#sh run | section vty line vty 0 4 password 7 0202039485748 R1#sh run | include username R1#
D. R1#sh run | include aaa aaa new-model aaa authentication login default group tacacs+ aaa session-id common R1#sh run | section vty line vty 0 4 transport input none R1#
Correct Answer: C
According to the requirements (first use TACACS+, then allow login with no authentication), we have to use “aaa authentication login … group tacacs+ none” for AAA command. The next thing to check is the if the “aaa authentication login default” or “aaa authentication login list-name” is used. The `default\’ keyword means we want to apply for all login connections (such as tty, vty, console and aux). If we use this keyword, we don\’t need to configure anything else under tty, vty and aux lines. If we don\’t use this keyword then we have to specify which line(s) we want to apply the authentication feature. From above information, we can find out answer \’R1#sh run | include aaa aaa new-model aaa authentication login default group tacacs+ none aaa session-id common R1#sh run | section vty line vty 0 4 password 7 0202039485748 If you want to learn more about AAA configuration, please read our AAA TACACS+ and RADIUS Tutorial ?Part 2. For your information, answer \’R1#sh run | include aaa aaa new-model aaa authentication login telnet group tacacs+ none aaa session-id common R1#sh run | section vty line vty 0 4 R1#sh run | include username R1#\’ would be correct if we add the following command under vty line (“line vty 0 4”): “login authentication telnet” (“telnet” is the name of the AAA list above)
Question 10:
What is a difference between OSPF and EIGRP?
A. OSPF uses a default hello timer of 5 seconds. EIGRP uses a default hello timer of 10 seconds.
B. OSPF uses multicast addresses 224.0.0.5 and 224.0.0.6. EIGRP uses multicast address 224.0.0.10.
C. OSPF uses an administrative distance of 115. EIGRP uses an administrative distance of 160.
D. OSPF uses IP protocol number 88. EIGRP uses IP protocol number 89.
Correct Answer: B
Question 11:
Which JSON script is properly formatted?
A. Option A
B. Option B
C. Option C
D. Option D
Correct Answer: A
Question 12:
Refer to the exhibit.
An engineer entered the no spanning-tree bpduguard enable on interface fa1/0/7 command. Which statement describes the effect of this command?
A. Fa1/0/7 remains in err-disabled state until the shutdown/no shutdown command is entered in the interface configuration mode
B. Interface Fa1/0/7 remains in err-disabled state until the errdisable recovery cause bpduguard command is entered in the interface configuration mode
C. Fa1/0/7 remains in err-disabled state until the errdisable recovery bpduguard command is entered in the interface configuration mode
D. Interface Fa1/0/7 remains in err-disabled state until the spanning-tree portfast bpduguard disable command is entered in the interface configuration mode
E. Interface Fa1/0/7 returns to an up and operational state
Correct Answer: A
Question 13:
Refer to the exhibit. An engineer has configured Cisco ISE to assign VLANs to clients based on their method of authentication, but this is not working as expected.
Which action will resolve this issue?
A. enable AAA override
B. utilize RADIUS profiling
C. require a DHCP address assignment
D. set a NAC state
Correct Answer: B
https://www.cisco.com/c/en/us/td/docs/wireless/controller/7-4/configuration/guides/consolidated/b_cg74_CONSOLIDATED/b_cg74_CONSOLIDATED_chapter_010110111.html
Question 14:
A network administrator is Implementing a routing configuration change and enables routing debugs to track routing behavior during the change. The logging output on the terminal is interrupting the command typing process.
Which two actions can the network administrator take to minimize the possibility of typing commands incorrectly? (Choose two.)
A. Configure the logging synchronous global configuration command
B. Configure the logging delimiter feature
C. Configure the logging synchronous command under the vty
D. Press the TAB key to reprint the command in a new line
E. increase the number of lines on the screen using the terminal length command
Correct Answer: CD
Question 15:
An engineer is configuring a new SSID to present users with a splash page for authentication. Which WLAN Layer 3 setting must be configured to provide this functionally?
A. CCKM
B. WPA2 Policy
C. Local Policy
D. Web Policy
Correct Answer: D