Cisco CCNP Enterprise 350-401 Questions & Answers

• Question 1201:

  Refer to the exhibit.

  

  SwitchC connects HR and Sales to the Core switch However, business needs require that no traffic from the Finance VLAN traverse this switch Which command meets this requirement?

  

  A. Option A

  B. Option B

  C. Option C

  D. Option D

  Correct Answer: D

• Question 1202:

  A company has an existing Cisco 5520 HA cluster using SSO. An engineer deploys a new single Cisco Catalyst 9800 WLC to test new features. The engineer successfully configures a mobility tunnel between the 5520 cluster and 9800 WLC. Clients connected to the corporate WLAN roam seamlessly between access points on the 5520 and 9800 WLC. After a failure on the primary 5520 WLC, all WLAN services remain functional; however clients cannot roam between the 5520 and 9800 controllers without dropping their connection. Which feature must be configured to remedy the issue?

  A. mobility MAC on the 5520 cluster

  B. mobility MAC on the 9800 WLC

  C. new mobility on the 5520 cluster

  D. new mobility on the 9800 WLC

  Correct Answer: B

  You have 2 5k devices with SSO, and a 1 9k device.

  If cluster and primary works fine, then everything is fine.

  However when Primary 5k device fails, secondary should take over. Now Secondary with 9k doesnt talk to each other as it should.

  Ensure that you configure the mobility MAC address using the wireless mobility mac-address command for HighAvailability to work.

  Therefore you should enable this on the 9k device so it knows about the other devices.

  Doing it on the cluster with already established SSO wont do anything. Given answer (B) should be the correct one.

• Question 1203:

  What is a characteristic of YANG?

  A. It is a Cisco proprietary language that models NETCONF data

  B. It allows model developers to create custom data types

  C. It structures data in an object-oriented fashion to promote model reuse

  D. It provides loops and conditionals to control now within models

  Correct Answer: C

• Question 1204:

  What is one difference between SaltStack and Ansible?

  A. SaltStack uses the Ansible agent on the box, whereas Ansible uses a Telnet server on the box.

  B. SaltStack uses an API proxy agent to program Cisco boxes in agent mode, whereas Ansible uses a Telnet connection.

  C. SaltStack uses SSH to interact with Cisco devices, whereas Ansible uses an event bus.

  D. SaltStack is constructed with minion, whereas Ansible is constructed with YAML.

  Correct Answer: D

• Question 1205:

  What is the differences between TCAM and the MAC address table?

  A. The MAC address table is contained in CAM. ACL and QoS information is stored in TCAM.

  B. The MAC address table supports partial matches. TCAM requires an exact match

  C. Router prefix lookups happens in CAM. MAC address table lookups happen in TCAM.

  D. TCAM is used to make Layer 2 forwarding decisions CAM is used to build routing tables

  Correct Answer: A

  https://community.cisco.com/t5/networking-documents/cam-content-addressable-memory-vs-tcam-ternary-content/ta-p/3107938

  When using Ternary Content Addressable Memory (TCAM) inside routers it's used for faster address lookup that enables fast routing. In switches Content Addressable Memory (CAM) is used for building and lookup of mac address table that enables L2 forwarding decisions. Besides Longest-Prefix Matching, TCAM in today's routers and multilayer Switch devices are used to store ACL, QoS and other things from upper-layer processing.

• Question 1206:

  Refer to the exhibit.

  

  A network engineer must configure a password expiry mechanism on the gateway router for all local passwords to expire after 60 days. What is required to complete this task?

  A. Add the username admin privilege 15 common-criteria-policy Administrators password Cisco13579! command.

  B. Add the aaa authentication enable default Administrators command.

  C. The password expiry mechanism is on the AAA server and must be configured there.

  D. No further action is required. The configuration is complete

  Correct Answer: A

  SUMMARY STEPS

  Perform this task to create a password security policy and to apply the policy to a specific user profile.

  enable

  configure terminal

  aaa new-model

  aaa common-criteria policy policy-name

  char-changes number

  max-length number

  min-length number

  numeric-count number

  special-case number

  exit

  username username common-criteria-policy policy-name password password

  end

• Question 1207:

  Refer to the exhibit.

  

  Router 1 is currently operating as the HSRP primary with a priority of 110 router1 fails and router2 take over the forwarding role. Which command on router1 causes it to take over the forwarding role when it return to service?

  A. standby 2 priority

  B. standby 2 timers

  C. standby 2 track

  D. standby 2 preempt

  Correct Answer: D

  Reference: https://www.cisco.com/c/en/us/support/docs/ip/hot-standby-router-protocol-hsrp/13780-6.html

• Question 1208:

  Refer to the exhibit.

  

  POSTMAN is showing an attempt to retrieve network device information from Cisco DNA Center API. What is the issue?

  A. The URI string is incorrect

  B. The token has expired.

  C. Authentication has failed.

  D. The JSON payload contains the incorrect UUID

  Correct Answer: A

  With 's'

  GET https://DNAC:Port//dna/intent/api/v1/network-devices

  {

  "response": {

  "errorCode": "Bad request",

  "message": "Invalid input request",

  "detail": "s is not a valid UUID of device"

  },

  "version": "1.0"

  }

  without 's'

  GET https://DNAC:Port//dna/intent/api/v1/network-device

  {

  "response": [

  {

  "type": "Cisco 3504 Wireless LAN Controller",

  "description": "Cisco Controller Wireless Version:8.5.140.0",

  "serialNumber": "FOL25040021",

• Question 1209:

  A server running Linux is providing support for virtual machines along with DNS and DHCP services for a small business. Which technology does this represent?

  A. container

  B. Type 1 hypervisor

  C. hardware pass-thru

  D. Type 2 hypervisor

  Correct Answer: D

  In contrast to type 1 hypervisor, a type 2 hypervisor (or hosted hypervisor) runs on top of an operating system and not the physical hardware directly. A big advantage of Type 2 hypervisors is that management console software is not required. Examples of type 2 hypervisor are VMware Workstation (which can run on Windows, Mac and Linux) or Microsoft Virtual PC (only runs on Windows).

• Question 1210:

  What are two benefits of YANG? (Choose two.)

  A. It enables multiple leaf statements to exist within a leaf list

  B. It collects statistical constraint analysis information.

  C. It enforces configuration constraints.

  D. It enforces configuration semantics.

  E. It enforces the use of a specific encoding format for NETCONF

  Correct Answer: CE