Download Cisco 350-401 Mock Test Study Material
350-401 Questions Prepare with Learning Information
With the ever-increasing demand for network engineers with expertise in Cisco Enterprise Network technologies, passing the Cisco 350-401 exam is a great way to enhance your career prospects and gain a competitive edge in the job market. Whether you are a seasoned network professional or just starting out in your career, 350-401 exam is an excellent opportunity to prove your skills and knowledge in Cisco Enterprise Networks.
Cisco 350-401 Exam is designed for network engineers, designers, administrators, and technicians with at least three to five years of experience in enterprise networking. It is an online, proctored exam that consists of about 90 to 110 questions, which must be answered within 120 minutes. The passing score for the exam is about 750 to 850 points, depending on the variation of the exam.
NEW QUESTION # 63
What is calculated using the numerical values of the transmitter power level, cable loss, and antenna gain?
- A. RSSI
- B. SNR
- C. dBi
- D. EIRP
Answer: D
Explanation:
Once you know the complete combination of transmitter power level, the length of cable, and the antenna gain, you can figure out the actual power level that will be radiated from the antenna. This is known as the effective isotropic radiated power (EIRP), measured in dBm.
EIRP is a very important parameter because it is regulated by governmental agencies in most countries. In those cases, a system cannot radiate signals higher than a maximum allowable EIRP. To find the EIRP of a system, simply add the transmitter power level to the antenna gain and subtract the cable loss.
NEW QUESTION # 64
Refer to the exhibit.
Which two statements about the EEM applet configuration are true? (Choose two.)
- A. The EEM applet requires a case-insensitive response
- B. The running configuration is displayed only if the letter Y is entered at the CLI
- C. The EEM applet runs before the CLI command is executed
- D. The EEM applet runs after the CLI command is executed
Answer: B,C
Explanation:
Explanation
When you use the sync yes option in the event cli command, the EEM applet runs before the CLI command is executed. The EEM applet should set the _exit_status variable to indicate whether the CLI command should be executed (_exit_status set to one) or not (_exit_status set to zero).
With the sync no option, the EEM applet is executed in background in parallel with the CLI command.
NEW QUESTION # 65
Which action limits the total amount of memory and CPU that is used by a collection of VMs?
- A. Limit the amount of memory and CPU that is available to the individual VMs.
- B. Place the collection of VMs in a vApp.
- C. Place the collection of VMs in a resource pool.
- D. Limit the amount of memory and CPU that is available to the cluster.
Answer: C
NEW QUESTION # 66
What do Cisco DNA southbound APIs provide?
- A. NETCONF API interface for orchestration communication
- B. RESful API interface for orchestrator communication
- C. Interface between the controller and the consumer
- D. Interface between the controller and the network devices
Answer: D
Explanation:
Explanation
The Southbound API is used to communicate with network devices.
NEW QUESTION # 67
What is the differences between TCAM and the MAC address table?
- A. TCAM is used to make Layer 2 forwarding decisions CAM is used to build routing tables
- B. The MAC address table is contained in TCAM ACL and QoS information is stored in TCAM
- C. The MAC address table supports partial matches. TCAM requires an exact match
- D. Router prefix lookups happens in CAM. MAC address table lookups happen in TCAM.
Answer: B
Explanation:
Explanation
https://community.cisco.com/t5/networking-documents/cam-content-addressable-memory-vs-tcam-ternary-conte When using Ternary Content Addressable Memory (TCAM) inside routers it's used for faster address lookup that enables fast routing.
In switches Content Addressable Memory (CAM) is used for building and lookup of mac address table that enables L2 forwarding decisions.
Besides Longest-Prefix Matching, TCAM in today's routers and multilayer Switch devices are used to store ACL, QoS and other things from upper-layer processing.
NEW QUESTION # 68 
Refer to the exhibit. A POST /discovery request spawns an asynchronous task. After querying for more information about the task, the Cisco DNA Center platform returns the REST API response. What is the status of the discovery task?
- A. failed
- B. stopped
- C. restarted
- D. successful
Answer: D
NEW QUESTION # 69
What are two considerations when using SSO as a network redundancy feature? (Choose two)
- A. both supervisors must be configured separately
- B. requires synchronization between supervisors in order to guarantee continuous connectivity
- C. must be combined with NSF to support uninterrupted Layer 2 operations
- D. the multicast state is preserved during switchover
- E. must be combined with NSF to support uninterrupted Layer 3 operations
Answer: B,E
Explanation:
Explanation
Text Description automatically generated
Cisco IOS Nonstop Forwarding(NSF) always runs with stateful switchover (SSO) and provides redundancy for Layer 3 traffic.
NEW QUESTION # 70
Refer to the exhibit.
Cisco DNA Center has obtained the username of the client and the multiple devices that the client is using on the network. How is Cisco DNA Center getting these context details?
- A. Those details are provided to Cisco DNA Center by the Identity Services Engine
- B. User entered those details in the Assurance app available on iOS and Android devices
- C. Cisco DNA Center pulled those details directly from the edge node where the user connected.
- D. The administrator had to assign the username to the IP address manually in the user database tool on Cisco DNA Center.
Answer: C
Explanation:
Explanation
Features of the Cisco DNA Assurance solution includes Device 360 and client 360, which provides a detailed view of the performance of any device or client over time and from any application context. Provides very granular troubleshooting in seconds.
NEW QUESTION # 71
Reter to the exhibit.
Refer to the exhibit. A network engineer must be notified when a user switches to configuration mode. Which script should be applied to receive an SNMP trap and a critical-level log message?
A)
B)
C)
D)
- A. Option A
- B. Option B
- C. Option C
- D. Option D
Answer: D
NEW QUESTION # 72
A company requires a wireless solution to support its mam office and multiple branch locations. All sites have local Internet connections and a link to the main office lor corporate connectivity. The branch offices are managed centrally. Which solution should the company choose?
- A. Cisco Mobility Express
- B. Cisco DNA Spaces
- C. Cisco United Wireless Network
- D. Cisco Catalyst switch with embedded controller
Answer: C
Explanation:
The company should choose the Cisco United Wireless Network solution, which supports centralized management for multiple branch locations. This solution allows for local Internet connections at each site while maintaining a link to the main office for corporate connectivity. It provides centralized control and management of access points from the data center, distributing client data traffic at each branch office, which aligns with the company's requirements. References: Cisco Catalyst 9800 FlexConnect Branch Deployment Guide
NEW QUESTION # 73
What is a characteristic of a next-generation firewall?
- A. filters traffic using Layer 3 and Layer 4 information only
- B. only required at the network perimeter
- C. required in each layer of the network
- D. provides intrusion prevention
Answer: D
Explanation:
A next-generation firewall (NGFW) is a network security device that provides capabilities beyond a traditional, stateful firewall. Unlike a traditional firewall that filters traffic using only state, port, and protocol, an NGFW includes additional features such as application awareness and control, integrated intrusion prevention, and cloud-delivered threat intelligence. This means that an NGFW can block modern threats like advanced malware and application-layer attacks, making intrusion prevention one of its key characteristics.
The feature set for NGFWs build upon traditional firewall features by including critical security functions like intrusion prevention, VPN, and anti-virus, and even encrypted web traffic inspection to help prevent packets containing malicious content from entering the network
NEW QUESTION # 74
Refer to the exhibit. An engineer is using XML in an application to send information to a RESTCONF-enabled device. After sending the request, the engineer gets this response message and a HTTP response code of 400. What do these responses tell the engineer?
- A. The Accept header sent was application/xml
- B. JSON body was used
- C. POST was used instead of PUT to update
- D. The Content-Type header sent was application/xml.
Answer: D
Explanation:
NEW QUESTION # 75
Why are stateless calls executed by REST API useful in cloud applications?
- A. They control URL decoding.
- B. They rely on data stored on the server for calls
- C. They use HTTPS to implement all calls.
- D. They are easy to redeploy and to scale
Answer: D
Explanation:
Stateless calls made by REST APIs are advantageous in cloud applications because they don't retain user session information on the server. This means each call is independent and doesn't rely on information from previous calls, making the system more reliable and easier to scale horizontally. Stateless architecture allows for the redeployment of components without affecting the system's state or behavior, which is essential for cloud environments where resources need to be dynamically allocated and managed.
References: Implementing and Operating Cisco Service Provider Network Core Technologies (SPCOR) training materials1.
NEW QUESTION # 76
Based on the router's API output in JSON format below, which Python code will display the value of the
"hostname" key?
- A. Option A
- B. Option D
- C. Option B
- D. Option C
Answer: C
NEW QUESTION # 77
Refer to the exhibit.
What happens to access interfaces where VLAN 222 is assigned?
- A. A description "RSPAN" is added.
- B. They are placed into an inactive state.
- C. STP BPDU guard is enabled
- D. They cannot provide PoE.
Answer: A
Explanation:
VLAN 222 is configured as a Remote SPAN (RSPAN) VLAN. RSPAN allows for the monitoring of source ports and VLANs across remote switches. While the configuration snippet does not show direct configuration on access interfaces, typically, an RSPAN VLAN is used to carry mirrored traffic from the source to the destination. References := Cisco RSPAN Configuration Guide
NEW QUESTION # 78 
Refer to the exhibit. An engineer attempts to configure a router on a stick to route packets between Clients, Servers, and Printers; however, initial tests show that this configuration is not working. Which command set resolves this issue?
- A.
- B.
- C.
- D.
Answer: C
Explanation:
We must reconfigure the IP address after assigning or removing an interface to a VRF. Otherwise that interface does not have an IP address.
NEW QUESTION # 79
Refer to the exhibit.
An engineer must modify the access control list EGRESS to allow all IP traffic from subnet 10.1.10.0/24 to
10.1.2.0/24. The access control list is applied in the outbound direction on router interface GigabitEthernet 0/1.
Which configuration commands can the engineer use to allow this traffic without disrupting existing traffic flows?
- A.
- B.
- C.
- D.
Answer: D
NEW QUESTION # 80
Refer to the exhibit. What is the effect of introducing the sampler feature into the Flexible NetFlow configuration on the router?
- A. The resolution of sampling data increases, but it requires more performance from the router.
- B. CPU and memory utilization are reduced when compared with what is required for full NetFlow.
- C. NetFlow updates to the collector are sent 50% less frequently.
- D. Every second IPv4 packet is forwarded to the collector for inspection.
Answer: B
NEW QUESTION # 81
How is 802.11 traffic handled in a fabric-enabled SSID?
- A. converted by the AP into 802.3 and encapsulated into a VLAN
- B. converted by the AP into 802.3 and encapsulated into VXLAN
- C. centrally switched back to WLC where the user traffic is mapped to a VLAN on the WLC
- D. centrally switched back to WLC where the user traffic is mapped to a VXLAN on the WLC
Answer: B
Explanation:
In a fabric-enabled SSID, 802.11 traffic is converted by the AP into 802.3 and encapsulated into VXLAN.
This process involves the conversion of wireless traffic into wired traffic, followed by the encapsulation process to ensure that the data packets are transmitted securely over the network. References: Implementing and Operating Cisco Service Provider Network Core Technologies
NEW QUESTION # 82
Drag and drop the characteristics from the left onto the routing protocols they describe on the right.
Answer:
Explanation:
NEW QUESTION # 83
Refer to the exhibit.
Which command when applied to the Atlanta router reduces type 3 LSA flooding into the backbone area and summarizes the inter-area routes on the Dallas router?
- A. Atlanta(config-route)#area 0 range 192.168.0.0 255.255.252.0
- B. Atlanta(config-route)#area 0 range 192.168.0.0 255.255.248.0
- C. Atlanta(config-route)#area 1 range 192.168.0.0 255.255.248.0
- D. Atlanta(config-route)#area 1 range 192.168.0.0 255.255.252.0
Answer: C
Explanation:
In OSPF, to reduce the number of routes advertised by type 3 LSAs to other areas and to summarize routes at an area boundary, the area range command is used on the Area Border Router (ABR). The correct command should specify the area that contains the networks you want to summarize (in this case, Area 1) and include a summary address that encompasses all of the networks you wish to advertise as a single route.
Option D is correct because it specifies Area 1, which is where Atlanta router interfaces are located according to the exhibit provided in your question (assuming that Atlanta is an ABR between Area 1 and Backbone Area
0). The IP address range 192.168.0.0 with a subnet mask of 255.255.248.0 correctly summarizes the subnets 192.168.x.x/24 where x ranges from 0-7, which would include all subnets from 192.168.0.x through 192.168.7.x.
NEW QUESTION # 84
Refer to the exhibit.
An engineer must configure an ERSPAN session with the remote end of the session 10.10.0.1. Which commands must be added to complete the configuration?
- A.
- B.
- C.
- D.
Answer: B
Explanation:
Example: Configuring an ERSPAN Source Session on a WAN Interface
The following example shows how to configure more than one WAN interface in a single ERSPAN source monitor session. Multiple interfaces have been separated by a commas.
monitor session 100 type erspan-source
source interface Serial 0/1/0:0, Serial 0/1/0:6
Example: Configuring an ERSPAN Destination Session
The following example shows how to configure an ERSPAN destination session:
monitor session 2 type erspan-destination
destination interface GigabitEthernet1/3/2
destination interface GigabitEthernet2/2/0
source
erspan-id 100
ip address 10.10.0.1
NEW QUESTION # 85
An engineer is working with the Cisco DNA Center API Drag and drop the methods from the left onto the actions that they are used for on the right.
Answer:
Explanation:
.
NEW QUESTION # 86
......
Most Reliable Cisco 350-401 Training Materials: https://gcgapremium.pass4leader.com/Cisco/350-401-exam.html