Cisco CCNP Enterprise 350-401 Questions & Answers

• Question 141:

  What are two valid modes that Cisco Express Forwarding can operate in? (Choose two.)

  A. Central CEF mode

  B. Dense CEF mode

  C. Sparse CEF mode

  D. Distributed CEF mode

  E. Routed CEF mode

  Correct Answer: AD

  CEF can be enabled in one of two modes:

  Central CEF mode - When CEF mode is enabled, the CEF FIB and adjacency tables reside on the route processor, and the route processor performs the express forwarding. You can use CEF mode when line cards are not available for CEF switching, or when you need to use features not compatible with distributed CEF switching. Distributed CEF (dCEF) mode - When dCEF is enabled, line cards maintain identical copies of the FIB and adjacency tables. The line cards can perform the express forwarding by themselves, and this relieves the main processor - Gigabit

  Route Processor (GRP) - of involvement in the switching operation. This is the only switching method available on the Cisco 12000 Series Router. https://www.cisco.com/c/en/us/support/docs/routers/12000-series-routers/47321-ciscoef.html

• Question 142:

  Refer to the exhibit. During ISP router maintenance, the network produced many alerts because of the flapping interface. Which configuration on R1 resolves the issue?

  

  A. snmp trap ip verify drop-rate

  B. no snmp trap link-status

  C. ip verify drop-rate notify hold-down 60

  D. snmp trap link-status down

  Correct Answer: B

  The command "snmp trap link-status" (and "no" form) enables or disable the sending of SNMP traps when an interface goes up and down. This command is useful on interfaces that you expect to change state frequently (for example, dial-ondemand interfaces). You may not want to send an SNMP trap to your network management stations whenever these interfaces change state.

  Reference: https://www.oreilly.com/library/view/cisco-ios-in/0596008694/re785.html

  Note: The command "ip verify drop-rate notify hold-down ..." configures the minimum time, in seconds, between Unicast RPF drop-rate notifications. But RPF is not a concern in this question.

• Question 143:

  Refer to the exhibit. A loop occurs between R1, R2, and R3 while EIGRP is run with poison reverse enabled. Which action prevents the loop between R1, R2, and R3?

  

  A. Configure route tagging.

  B. Enable split horizon.

  C. Configure R3 as stub receive-only.

  D. Configure route filtering.

  Correct Answer: D

  In Cisco devices, split horizon is always used along with poison reverse (via the command "ip split-horizon") so in this question split horizon is already turned on. To prevent loop we can only use route filtering.

• Question 144:

  What are two best practices when designing a campus Layer 3 infrastructure? (Choose two.)

  A. Configure passive-interface on nontransit links.

  B. Implement security features at the core.

  C. Summarize routes from the aggregation layer toward the core layer.

  D. Tune Cisco Express Forwarding load balancing hash for ECMP routing.

  E. Summarize from the access layer toward the aggregation layer.

  Correct Answer: CD

• Question 145:

  Refer to the exhibit.

  

  An engineer must reduce the number of Type 1 and Type 2 LSAs that are advertised to R4 within OSPF area 0. Which configuration must be applied?

  A. R1# conf t Router(config)# router ospf 1 Router(config-router)# prefix-suppression

  B. R4# conf t Router(config)# router ospf 1 Router(config-router)# summary-address 10.0.0.0 255.255.255.0

  C. R2# conf t Router(config)# interface Gig0/0 Router(config-router)# ip ospf prefix-suppression

  D. R2# conf t Router(config)# int Gig0/0 Router(config-if)# ip summary-address 10.0.0.0 255.255.255.0

  Correct Answer: A

• Question 146:

  Which component does Cisco Threat Defense use to measure bandwidth, application performance, and utilization?

  A. NetFlow

  B. Cisco Umbrella

  C. TrustSec

  D. Advanced Malware Protection for Endpoints

  Correct Answer: A

  NetFlow was initially created to measure network traffic characteristics such as bandwidth, application performance, and utilization.

  Reference: https://www.cisco.com/c/dam/en/us/td/docs/security/network_security/ctd/ctd2-0/design_guides/ctd_2-0_cvd_guide_jul15.pdf

• Question 147:

  A customer has two Cisco WLCs that manage separate APs throughout a building. Each WLC advertises the same SSID but terminates on different interfaces. Users report that they drop their connections and change IP addresses when roaming. Which action resolves this issue?

  A. Configure high availability

  B. Enable test roaming

  C. Enable client load balancing.

  D. Configure mobility groups

  Correct Answer: D

• Question 148:

  Which CISCO SD-WAN component authenticates the routers and the vSmart controllers?

  A. vAnalytics

  B. vBond orchestrator

  C. vEdge

  D. vManage NMS

  Correct Answer: B

• Question 149:

  Which two actions are recommended as security best practice to protect REST API (Choose two)

  A. Use TACACACS+ authentication

  B. Enable dual authentication of the session

  C. Enable out-of band authentication

  D. Use SSL for encryption

  E. Use a password hash

  Correct Answer: DE

• Question 150:

  What are the two protocols redistributed into OMP?

  A. OSPF

  B. RIP

  C. LDP

  D. RSVP

  E. EIGRP

  Correct Answer: AE