350-401 VOL2

Question 1

Which of the following IP SLA functions do not require a responder to be configured?

Answer 1

D. ICMP Echo

Question 2

A new syslog server with an IP address of 10.1.1.100 has been installed in the network. You want
router R1 to send secure, encrypted messages to this server to track network events. What
configuration command should you use?

Answer 2

A. R1(config)# logging host 10.1.1.100 vrf mgmt transport tcp port 6514

Question 3

You want to create a policy that allows all TCP traffic in the port range of 20 to 110, except for
telnet traffic, which should be dropped. Which of the following access control lists will
accomplish this?

Answer 3

D. deny tcp any any eq 23
permit tcp any any range 20 110

Question 4

In a Cisco SD-Access network architecture, what is the role of the Fabric Edge Node?

Answer 4

D. It connects wireless endpoints to the SDA fabric

Question 5

Which of the following are features typically only found in a Next Generation (NextGen) firewall?
(Select two)

Answer 5

C. Deep packet inspection
D. reputation based malware detection

Question 6

JSON web tokens (JWT) are used to secure JSON based communications. Which of the following
fields make up a JWT? (Select three)

Answer 6

A. Header
C. Payload
E. Signature

Question 7

Ansible is being used in a network for configuration and management automation. Which of the
following are true statements regarding Ansible? (Choose two)

Answer 7

B. Utilizes the concept of playbooks to execute the configuration.
D. Utilizes SSH.

Question 8

In a Cisco Software Defined Networking (SDN) architecture, what is used to describe the API
communication between the SDN controller and the network elements (routers and switches)
that it manages?

Answer 8

A. Southbound API

Question 9

In a Cisco VXLAN based network, which of the following best describes the main function of a
VXLAN Tunnel Endpoint (VTEP)?

Answer 9

A. A device that performs VXLAN encapsulation and decapsulation.

Question 10

Two Cisco switches are logically configured as a single switch using Cisco Stackwise technology.
This will result in virtually combining which two planes? (Select two)

Answer 10

B. Control Plane
D. Management Plane

Question 11

Please select the correct option that shows the correct combination for the Type 1 Hypervisor.

Answer 11

A. Hardware; Hypervisor; Guest OS

Question 12

Select the prerequisites for configuring LISP from the below options. (Choose 2)

Answer 12

A. determine the type of LISP deployment you intend to deploy
C. LISP configuration requires the datak9 license.

Question 13

Select the benefits of implementing Cisco DNA Center. (Choose all that apply).

Answer 13

A. Simplified management
D. Policy Driven Provisioning
E. Ensure Network & Appliance performance

Question 14

A network administrator need to configure Netflow on the devices in his network. He has Source
IP Address, Destination IP Address, Source Port number & Destination port number. What
additional information do he need to configure Netflow.

Answer 14

A. Layer 3 Protocol type
C. ToS (Type of Service) byte
D. Input Logical Interface

Question 15

A network administrator is configuring a configuration management tool for some network
devices that does not support agent. Select what option will you pick from the below options to
successfully configure configuration management tool for that device.

Answer 15

C. Proxy-agent Configuration

Question 16

Despite configuring these commands, the users are reporting issues with internet connectivity.
What would be the next step they you will take to resolve this issue.

Answer 16

A. Reload the device to apply changes

Question 17

Select the devices from the below options that can be fart of Cisco SDWAN Solution. (Choose
two)

Answer 17

B. ASR 1000
C. IR8300