Cisco CCNP Enterprise 350-401 Questions & Answers

• Question 121:

  Refer to the exhibit.

  

  

  A client has two directly connected eBGP peering links with diverse ISPs. Both providers advertise the same public prefix 209.165.200.224/27 to R1 without any route manipulation. Traffic leaves R1 outbound via ISP1 but returns inbound via ISP2. Which configuration prevents asymmetrical routing and makes ISP1 the preferred path inbound and outbound?

  

  A. Option A

  B. Option B

  C. Option C

  D. Option D

  Correct Answer: C

• Question 122:

  Which time protocol offers security features and utilizes site-local IPv6 multicast addresses?

  A. NTPv3

  B. PTP IEEE 1588v1

  C. NTPv4

  D. PTP IEEE 1588v2

  Correct Answer: C

  Reference: https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/bsm/configuration/15-0sy/ip6-ntpv4.html

• Question 123:

  Which configuration allows administrators to configure the device through the console port and use a network authentication server?

  A. aaa new-model aaa authentication login default local aaa authorization console aaa authorization config-commands username netadmin secret 9 $9$vFpMf8elb4RVV8$seZ/bDAx1uV

  B. aaa new-model aaa authentication login default local aaa authorization console aaa authorization config-commands

  C. aaa new-model aaa authentication login default line

  D. aaa new-model aaa authentication login default group radius aaa authorization console aaa authorization config-commands

  Correct Answer: D

• Question 124:

  Select the devices from the below options that can be fart of Cisco SDWAN Solution. (Choose two.)

  A. ISR 2900

  B. ASR 1000

  C. IR8300

  D. FTD 1120

  E. ASR 9000

  Correct Answer: BC

  reference: https://www.cisco.com/c/en/us/td/docs/routers/sdwan/release/compatibility/sdwan-device-compatibility.html#device-compat-ir8300rugged

• Question 125:

  Which Quality of Service (QoS) mechanism is used to identify traffic flow and to use DSCP, IP Precedence values, and MPLS EXP bits to create different priority levels?

  A. Policing

  B. Marking

  C. Queueing

  D. Classification

  Correct Answer: B

  "Networking devices within your network can then use the newly marked IP precedence values to determine how traffic should be treated. For example, voice traffic can be marked with a particular IP precedence or DSCP, and a queueing mechanism can then be configured to put all packets of that mark into a priority queue."

  https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/qos_classn/configuration/xe-16/qos-classn-xe-16-book/qos-classn-mrkg-ntwk-trfc-xe.html

• Question 126:

  Which characteristic applies to a traditional WAN solution but not to a Cisco SD-WAN solution?

  A. lengthy installation times

  B. centralized reachability, security, and application policies

  C. low complexity and increased overall solution scale

  D. operates over DTLS/TLS authenticated and secured tunnels

  Correct Answer: A

• Question 127:

  Refer to the exhibit.

  

  What is output by this code?

  A. 0 5

  B. 0 1 2 3 4 5

  C. 0 1 2 3 4

  D. (0,5)

  Correct Answer: B

• Question 128:

  An EEM applet contains this command:

  event snmp oid 1.3.6.1.4.3.8.0.5.8.7.1.3 get-type next entry-op gt entry-val 80 poll-interval 8

  What is the result of the command?

  A. An SNMP event is generated when the value equals 80% for eight polling cycles.

  B. An SNMP event is generated when the value is greater than 80% for eight polling cycles.

  C. An SNMP event is generated when the value reaches 80%.

  D. An SNMP variable is monitored and an action is triggered when the value exceeds 80%.

  Correct Answer: D

• Question 129:

  Refer to the exhibit.

  

  How should the programmer access the list of VLANs that were received via the API call?

  A. VlanNames[`response']

  B. VlanNames[0]

  C. VlanNames[`Vlan1']

  D. list(VlanNames)

  Correct Answer: A

  >>> VlanNames = {'response':['vlan1','vlan2','vlan3'],'version':'1.0'}

  >>> VlanNames['response']

  ['vlan1', 'vlan2', 'vlan3']

• Question 130:

  What is the role of vSmart in a Cisco SD-WAN environment?

  A. to establish secure control plane connections

  B. to monitor, configure, and maintain SD-WAN devices

  C. to provide secure data plane connectivity over WAN links

  D. to perform initial authentication of devices

  Correct Answer: A

  Reference:https://www.cisco.com/c/en/us/td/docs/routers/sdwan/configuration/sdwan-xe-gs-book/system-overview.html