This page was exported from Braindump2go Free Exam Dumps with PDF and VCE Collection [ https://www.mcitpdump.com ] Export date:Tue May 21 8:29:31 2024 / +0000 GMT ___________________________________________________ Title: [March-2022]Valid 350-401 Dumps VCE Free Download in Braindump2go[Q553-Q592] --------------------------------------------------- March/2022 Latest Braindump2go 350-401 Exam Dumps with PDF and 350-401 Free Uodated Today! Following are some new 350-401 Real Exam Questions!QUESTION 553An engineer must export the contents of the devices object in JSON format.Which statement must be used? A. json.repr(Devices)B. json.dumps(Devices)C. json.prints(Devices)D. json.loads(Devices)Answer: BQUESTION 554Refer to the exhibit. An engineer troubleshoots connectivity issues with an application. Testing is performed from the server gateway, and traffic with the DF bit set is dropped along the path after increasing packet size. Removing the DF bit setting at the gateway prevents the packets from being dropped. What is the cause of this issue? A. PMTUD does not work due to ICMP Packet Too Big messages being dropped by an ACLB. The remote router drops the traffic due to high CPU loadC. The server should not set the DF bit in any type of traffic that is sent toward the networkD. There is a CoPP policy in place protecting the WAN router CPU from this type of trafficAnswer: CQUESTION 555Refer to the exhibit. An engineer configures VRRP and issues the show commands to verify operation. What does the engineer confirm about VRRP group 1 from the output? A. There is no route to 10.10.1.1/32 in R2's routing tableB. If R1 reboots, R2 becomes the master virtual router until R2 rebootsC. Communication between VRRP members is encrypted using MD5D. R1 is master if 10.10.1.1/32 is in its routing tableAnswer: DQUESTION 556Refer to the exhibit. An engineer must add the SNMP interface table to the NetFlow protocol flow records. Where should the SNMP table option be added? A. under the interfaceB. under the flow recordC. under the flow monitorD. under the flow exporterAnswer: DExplanation:option interface-tableThis command causes the periodic sending of an options table, which will allow the collector to map the interface SNMP indexes provided in the flow records to interface names. The optional timeout can alter the frequency at which the reports are sent.Router(config)# flow exporter FLOW-EXPORTER-1Router(config-flow-exporter)# option interface-tablehttps://www.cisco.com/c/en/us/td/docs/ios/fnetflow/command/reference/fnf_book/fnf_02.htmlQUESTION 557Refer to the exhibit. How does the router handle traffic after the CoPP policy is configured on the router? A. Traffic coming to R1 that does not match access list SNMP is dropped.B. Traffic coming to R1 that matches access list SNMP is policed.C. Traffic passing through R1 that matches access list SNMP is policed.D. Traffic generated by R1 that matches access list SNMP is policed.Answer: AQUESTION 559A network engineer configures a WLAN controller with increased security for web access. There is IP connectivity with the WLAN controller, but the engineer cannot start a management session from a web browser. Which action resolves the issuedA. Disable JavaScript on the web browserB. Disable Adobe Flash PlayerC. Use a browser that supports 128-bit or larger ciphers.D. Use a private or incognito session.Answer: CQUESTION 560Refer to the exhibit. An engineer must configure static NAT on R1 lo allow users HTTP access to the web server on TCP port 80. The web server must be reachable through ISP 1 and ISP 2. Which command set should be applied to R1 to fulfill these requirements? A. ip nat inside source static tcp 10.1.1.100 80 209.165.200.225 80 extendableip nat inside source static tcp 10.1.1.100 80 209.165.201.1 80 extendableB. ip nat inside source static tcp 10.1.1.100 80 209.165.200.225 80ip nat inside source static tcp 10.1.1.100 80 209.165.201.1 80C. ip nat inside source static tcp 10.1.1.100 80 209.165.200.225 80ip nat inside source static tcp 10.1.1.100 8080 209.165.201.1 8080D. ip nat inside source static tcp 10.1.1.100 80 209.165.200.225 80 no-aliasip nat inside source static tcp 10.1.1.100 80 209.165.201.1 80 no-aliasAnswer: BQUESTION 561By default, which virtual MAC address does HSRP group 16 use?A. c0:41:43:64:13:10B. 00:00:0c 07:ac:10C. 00:05:5c:07:0c:16D. 05:00:0c:07:ac:16Answer: BQUESTION 562A customer requests a design that includes GLBP as the FHRP. The network architect discovers that the members of the GLBP group have different throughput capabilities.Which GLBP load balancing method supports this environment?A. host dependentB. least connectionC. round robinD. weightedAnswer: AQUESTION 563In a Cisco SD-WAN solution, which two functions are performed by OMP? (Choose two.)A. advertisement of network prefixes and their attributesB. configuration of control and data policiesC. gathering of underlay infrastructure dataD. delivery of crypto keysE. segmentation and differentiation of trafficAnswer: ADQUESTION 565An engineer must create a new SSID on a Cisco 9800 wireless LAN controller.The client has asked to use a pre-shared key for authentication.Which profile must the engineer edit to achieve this requirement?A. RFB. PolicyC. WLAND. FlexAnswer: BQUESTION 566A vulnerability assessment highlighted that remote access to the switches is permitted using unsecure and unencrypted protocols. Which configuration must be applied to allow only secure and reliable remote access for device administration?A. line vty 0 15login localtransport input noneB. line vty 0 15login localtransport input telnet sshC. line vty 0 15login localtransport input sshD. line vty 0 15login localtransport input allAnswer: CQUESTION 567How does a fabric AP fit in the network?A. It is in local mode and must be connected directly to the fabric border nodeB. It is in FlexConnect mode and must be connected directly to the fabric edge switch.C. It is in FlexConnect mode and must be connected directly to the fabric border nodeD. It is in local mode and must be connected directly to the fabric edge switch.Answer: DQUESTION 568How are map-register messages sent in a LISP deployment?A. egress tunnel routers to map resolvers to determine the appropriate egress tunnel routerB. ingress tunnel routers to map servers to determine the appropriate egress tunnel routerC. egress tunnel routers to map servers to determine the appropriate egress tunnel routerD. ingress tunnel routers to map resolvers to determine the appropnate egress tunnel routerAnswer: CQUESTION 571Refer to the exhibit. An engineer attempts to bundle interface Gi0/0 into the port channel, but it does not function as expected. Which action resolves the issue? A. Configure channel-group 1 mode active on interface Gi0/0.B. Configure no shutdown on interface Gi0/0C. Enable fast LACP PDUs on interface Gi0/0.D. Set LACP max-bundle to 2 on interface Port-channeMAnswer: CQUESTION 572Refer to the exhibit. An engineer must permit traffic from these networks and block all other traffic. An informational log message should be triggered when traffic enters from these prefixes.Which access list must be used?A. access-list acl_subnets permit ip 10.0.32.0 0 0.0.255 logB. access-list acl_subn*ls permit ip 10.0.32.0 0.0.7.255 logC. access-list acl_subnets permit ip 10.0.32.0 0.0.7.255 access-list acl_subnets deny ip any logD. access-list acl_subnets permit ip 10.0.32.0 255.255.248.0 logAnswer: BQUESTION 573Refer to the exhibit. After the code is run on a Cisco IOS-XE router, the response code is 204.What is the result of the script? A. The configuration fails because another interface is already configured with IP address 10.10.10.1/24.B. The configuration fails because interface GigabitEthernet2 is missing on the target device.C. The configuration is successfully sent to the device in cleartext.D. Interface GigabitEthernet2 is configured with IP address 10.10.10.1/24Answer: DQUESTION 574Which two parameters are examples of a QoS traffic descriptor? (Choose two)A. MPLS EXP bitsB. bandwidthC. DSCPD. ToSE. packet sizeAnswer: BCQUESTION 575Refer to the exhibit. After configuring HSRP an engineer enters the show standby command. Which two facts are derived from the output? (Choose two.) A. The router with IP 10.10 1.3 is active because it has a higher IP addressB. If FaO/0 is shut down, the HSRP pnonty on R2 becomes 80C. R2 Fa1/0 regains the primary role when the link comes back upD. R2 becomes the active router after the hold time expires.E. R2 is using the default HSRP hello and hold timers.Answer: DEQUESTION 576If a client's radio device receives a signal strength of -67 dBm and the noise floor is -85 dBm, what is the SNR value?A. 15 dBB. 16 dBC. 18 dBD. 20 dBAnswer: CQUESTION 578A network monitoring system uses SNMP polling to record the statistics of router interfaces. The SNMP queries work as expected until an engineer installs a new interface and reloads the router After this action, all SNMP queries for the router fail. What is the cause of this issue?A. The SNMP community is configured incorrectlyB. The SNMP interface index changed after reboot.C. The SNMP server traps are disabled for the interface indexD. The SNMP server traps are disabled for the link state.Answer: DQUESTION 579In a Cisco SD-Access solution, which protocol is used by an extended node to connect to a single edge node?A. VXLANB. IS-ISC. 802 1QD. CTSAnswer: AQUESTION 580An engineer must enable a login authentication method that allows a user to log in by using local authentication if all other defined authentication methods fail. Which configuration should be applied?A. aaa authentication login CONSOLE group radius local-case enable aaaB. authentication login CONSOLE group radius local enable noneC. aaa authentication login CONSOLE group radius local enableD. aaa authentication login CONSOLE group tacacs+ local enableAnswer: DQUESTION 581When firewall capabilities are considered, which feature is found only in Cisco next-generation firewalls?A. malware protectionB. stateful inspectionC. traffic filteringD. active/standby high availabilityAnswer: AQUESTION 582What does a northbound API accomplish?A. programmatic control of abstracted network resources through a centralized controllerB. access to controlled network resources from a centralized nodeC. communication between SDN controllers and physical switchesD. controlled access to switches from automated security applicationsAnswer: CQUESTION 583Refer to the exhibit. An engineer configures the BGP adjacency between R1 and R2, however, it fails to establish. Which action resolves the issue? A. Change the network statement on R1 to 172.16 10.0B. Change the remote-as number for 192 168.100.11.C. Enable synchronization on R1 and R2D. Change the remote-as number on R1 to 6500.Answer: DQUESTION 584Refer to the exhibit. The network administrator must be able to perform configuration changes when all the RADIUS servers are unreachable. Which configuration allows all commands to be authorized if the user has successfully authenticated? A. aaa authorization exec default group radius noneB. aaa authentication login default group radius local noneC. aaa authorization exec default group radius if-authenticatedD. aaa authorization exec default group radiusAnswer: DQUESTION 585What is a characteristic of Cisco StackWise technology?A. It uses proprietary cablingB. It supports devices that are geographically separatedC. lt combines exactly two devicesD. It is supported on the Cisco 4500 series.Answer: CQUESTION 587Why would an engineer use YANG?A. to transport data between a controller and a network deviceB. to access data using SNMPC. to model data for NETCONFD. to translate JSON into an equivalent XML syntaxAnswer: CQUESTION 590A customer wants to use a single SSID to authenticate loT devices using different passwords. Which Layer 2 security type must be configured in conjunction with Cisco ISE to achieve this requirement?A. Fast TransitionB. Central Web AuthenticationC. Cisco Centralized Key ManagementD. Identity PSKAnswer: DQUESTION 591Refer to the exhibit. An engineer must prevent the R6 loopback from getting into Area 2 and Area 3 from Area 0. Which action must the engineer take? A. Apply a fitter list inbound on R2 and R9B. Apply a filter list outbound on R3 and R7C. Apply a filter list outbound on R7 only.D. Apply a filter list inbound on R3 and R7Answer: DQUESTION 592In a Cisco StackWise Virtual environment, which planes are virtually combined in the common logical switch?A. management and dataB. control and managementC. control, and forwardingD. control and dataAnswer: BResources From:1.2022 Latest Braindump2go 350-401 Exam Dumps (PDF & VCE) Free Share:https://www.braindump2go.com/350-401.html2.2022 Latest Braindump2go 350-401 PDF and 350-401 VCE Dumps Free Share:https://drive.google.com/drive/folders/1EIsykNTrKvqjDVs9JMySv052qbrCpe8V?usp=sharing3.2021 Free Braindump2go 350-401 Exam Questions Download:https://www.braindump2go.com/free-online-pdf/350-401-PDF-Dumps(574-592).pdfhttps://www.braindump2go.com/free-online-pdf/350-401-VCE-Dumps(553-573).pdfFree Resources from Braindump2go,We Devoted to Helping You 100% Pass All Exams! --------------------------------------------------- Images: --------------------------------------------------- --------------------------------------------------- Post date: 2022-03-07 06:41:10 Post date GMT: 2022-03-07 06:41:10 Post modified date: 2022-03-07 06:41:10 Post modified date GMT: 2022-03-07 06:41:10 ____________________________________________________________________________________________ Export of Post and Page as text file has been powered by [ Universal Post Manager ] plugin from www.gconverters.com