Cisco CCNP Enterprise 350-401 Questions & Answers

• Question 111:

  You want to securely implement the Network Time Protocol (NTP) on your network. What two mechanisms are available to secure NTP? (Choose two.)

  A. IPSec communication

  B. MD5 authentication keys

  C. Role based access control (RBAC)

  D. access-group configuration

  Correct Answer: BD

• Question 112:

  Which of the following are true statements regarding the Virtual Router Redundancy Protocol (VRRP) feature? (Choose two.)

  A. Pre-emption is enabled by default

  B. The router priority is a configurable value from 0-4095

  C. MD5 authentication is supported with VRRP

  D. Secondary IP addresses are supported with VRRP

  E. VRRP can only be used with Cisco devices

  Correct Answer: CD

  in every cisco documents is referenced "Preemption" or "preempt" NOT pre-emption.

  so i go with C and D

  Multiple IP Addresses

  The virtual router can manage multiple IP addresses, including secondary IP addresses.

  Authentication

  VRRP message digest 5 (MD5) algorithm authentication protects against VRRP-spoofing software and uses the industry-standard MD5 algorithm for improved reliability and security.

• Question 113:

  Which of the following are valid Port Aggregation Protocol (PAgP) modes? (Choose two.)

  A. On

  B. Active

  C. Passive

  D. Auto

  E. Desirable

  Correct Answer: DE

• Question 114:

  What are some of the key differences between HSRPv1 and HSRPv2? (Choose two.)

  A. HSRPv1 uses the multicast address of 224.0.0.102 while HSRPv2 uses 225.0.0.2.

  B. HSRP uses a group range of 0-255, while HSRP uses a group range of 0-4095.

  C. HSRPv1 uses seconds based timers, while HSRPv2 uses milliseconds based timers.

  D. HSRPv1 provides support for IPv6, while HSRPv2 supports IPv4 only.

  Correct Answer: BC

  should be HSRPv1, HSRPv2

• Question 115:

  EIRP (Effective Isotropic Radiated Power) is the actual amount of signal leaving the antenna. It is a measurement value in db and is based on which three components? (Choose three.)

  A. Transmit Power

  B. RSSI

  C. Cable Loss

  D. Antenna Gain

  E. SNR

  Correct Answer: ACD

  The radiated (transmitted) power is rated in either dBm or W. Power that comes off an antenna is measured as effective isotropic radiated power (EIRP). EIRP is the value that regulatory agencies, such as the FCC or European Telecommunications Standards Institute (ETSI), use to determine and measure power limits in applications such as 2.4-GHz or 5-GHz wireless equipment. In order to calculate EIRP, add the transmitter power (in dBm) to the antenna gain (in dBi) and subtract any cable losses (in dB).

  reference: https://www.cisco.com/c/en/us/support/docs/wireless-mobility/wireless-lan-wlan/23231-powervalues-23231.html

• Question 116:

  An engineer must design a wireless network for a school system based on these requirements:

  1.

  The network must be able to triangulate client location based on RSSI.

  2.

  Each client must be able to sustain 5 Mbps of throughput at all times.

  3.

  Each classroom has up to 30 clients.

  4.

  Primary coverage is 5 GHz.

  Which design should be used?

  A. Place APs in a grid orientation throughout the building, located as close as possible to the center of each classroom.

  B. Mount one AP in the center of each classroom.

  C. Space APs evenly on both sides of the hallways.

  D. Place APs near exterior walls and corners of the building, and fill in the center area with a staggered pattern.

  Correct Answer: D

  I have seen this at many conferences and webinars - If triangulation is an important factor: line the perimeter with APs (with flat panel antennas). In fact next time you are at Cisco Live, you will see this design all around the perimeter of the venue...

• Question 117:

  Refer to the exhibit.

  

  

  Communication between R2 and R3 over FastEthenet1/1 falls. What is the root cause of the failure?

  A. The subnet mask is different between the two interfaces.

  B. The interface of R3 is not operational.

  C. The wrong type of cable is connected between the two interfaces.

  D. IP CEF is disabled on R3.

  Correct Answer: A

  Provided answer is correct.

  I tested this in GNS3. Kept the subnet mask on one side /30 and the other side /29. Got on one side debug outputs:

  *Sep 8 22:58:38.295: IP ARP req filtered src 10.10.12.1 ca01.37c4.0000, dst 10.10.12.5 0000.0000.0000 wrong cable, interface FastEthernet0/0 And the other side:

  *Sep 8 22:58:37.747: IP ARP: creating incomplete entry for IP address: 10.10.12.5 interface FastEthernet0/0

  The output with wrong cable is misleading.

• Question 118:

  A network administrator is configuring a configuration management tool for some network devices that does not support agent. Select what option will you pick from the below options to successfully configure configuration management tool for that device.

  A. Agent based Configuration

  B. Agent Less Configuration

  C. Proxy-agent Configuration

  D. None of the above

  Correct Answer: B

• Question 119:

  A network administrator need to configure Netflow on the devices in his network. He has Source IP Address, Destination IP Address, Source Port number and Destination port number. What additional information do he need to configure Netflow?

  A. Layer 3 Protocol type

  B. Encryption type

  C. ToS (Type of Service) byte

  D. Input Logical Interface

  E. Hashing Algorithm

  F. Transform-set details

  Correct Answer: ACD

  NetFlow Flows Key Fields

  A network flow is identified as a unidirectional stream of packets between a given source and destination--both are defined by a network-layer IP address and by transport-layer source and destination port numbers. Specifically, a flow is identified as the combination of the following key fields: Source IP address Destination IP address Source port number Destination port number Layer 3 protocol type Type of service (ToS) Input logical interface

  " https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/netflow/configuration/15-mt/nf-15-mt-book/get-start-cfg-nflow.html#GUID-BE3FF8D7-C298-4C34-95DE-1CA27DB651EF

• Question 120:

  Which character formatting is required for DHCP Option 43 to function with current AP models?

  A. MD5

  B. Base64

  C. ASCII

  D. Hex

  Correct Answer: C