Cisco CCNP Enterprise 350-401 Questions & Answers

• Question 211:

  Refer to the exhibit.

  

  The trunk between Gig1/0/1 of switch SW2 and Gig1/0/1 of switch SW1 is not operational.

  Which action resolves this issue?

  A. Configure both interfaces in dynamic auto DTP mode and ensure that the switches are in the same VTP domain

  B. Configure both interfaces in dynamic desirable DTP mode and ensure that the switches are in the same VTP domain

  C. Configure both interfaces in nonegotiate and ensure that the switches are in the different VTP domain

  D. Configure both interfaces in dynamic auto DTP mode and ensure that the switches are in the different VTP domain

  Correct Answer: B

• Question 212:

  How does IGMP function with multicast routing and PIM?

  A. IGMP is enabled automatically when multicast routing and PIM are configured on a router

  B. IGMP is incompatible with multicast routing

  C. IGMP is incompatible with PIM

  D. IGMP must be enabled manually when multicast routing and PIM are configured on a router.

  Correct Answer: A

• Question 213:

  With IGMPv2, which multicast group address does the IGMP querier use to send query messages to all hosts on the LAN?

  A. 239.0.0.2

  B. 224.0.0.1

  C. 239.0.0.1

  D. 224.0.0.2

  Correct Answer: B

• Question 214:

  Refer to the exhibit.

  

  A network administrator confiqured RSPAN to troubleshoot an issue between switch1 and switch2. The switches are connected using interface GigabitEthernet 1/1.

  An external packet capture device is connected to swich2 interface GigabitEthernet1/2.

  Which two commands must be added to complete this confiquration? (Choose two.)

  A. switch2(config)# monitor session 2 destination vlan 10

  B. switch1(config)# interface GigabitEthernet 1/1 switch1(confia-if# switchport mode access switch1(config-if)# switchport access vlan 10 switch2(config)# interface GigabitEthernet 1/1 switch2(config-if)# switchport mode access switch2(config-if)# switchport access vlan 10

  C. switch2(config)# monitor session 1 source remote vlan 70 switch2(config)# monitor session 1 destination interface GigabitEthernet1/1

  D. switch2(config-if)# switchport trunk allowed vlan 10,20,30,40,50,60,70-80

  E. switch2(config)# monitor session 1 source remote vlan 70 switch2(confia)# monitor session 1 destination interface GigabitEthernet1/2

  Correct Answer: DE

• Question 215:

  In a fabric-enabled wireless network, which device is responsible for maintaining the endpoint ID database?

  A. fabric border node

  B. fabric edge node

  C. fabric wireless controller

  D. control plane node

  Correct Answer: D

• Question 216:

  Refer to the exhibit.

  

  An engineer entered the no spanning-tree bpduguard enable on interface fa1/0/7 command. Which statement describes the effect of this command?

  A. Fa1/0/7 remains in err-disabled state until the shutdown/no shutdown command is entered in the interface configuration mode

  B. Interface Fa1/0/7 remains in err-disabled state until the errdisable recovery cause bpduguard command is entered in the interface configuration mode

  C. Fa1/0/7 remains in err-disabled state until the errdisable recovery bpduguard command is entered in the interface configuration mode

  D. Interface Fa1/0/7 remains in err-disabled state until the spanning-tree portfast bpduguard disable command is entered in the interface configuration mode

  E. Interface Fa1/0/7 returns to an up and operational state

  Correct Answer: A

• Question 217:

  A newly installed spoke router is configured for DMVPN with the ip mtu 1400 command. Which configuration allows the spoke to use fragmentation with the maximum negotiated TCP MTU over GRE?

  A. ip tcp adjust-mss 1360 crypto ipsec fragmentation after-encryption

  B. ip tcp adjust-mss 1360 crypto ipsec fragmentation mtu-discovery

  C. ip tcp payload-mtu 1360 crypto ipsec fragmentation mtu-discovery

  D. ip tcp payload-mtu 1360 crypto ipsec fragmentation after-encryption

  Correct Answer: A

  There is no "ip tcp payload-mtu" command so the correct answer should be "ip tcp adjust-mss".

  Note: The "ip tcp adjust-mss 1360" command will signal the source and destination device during the three-way handshake to use the TCP MSS size of 1360 bytes so that if they create the full size packet there will still not be any drop/

  fragmentation on the router.

  We tested with Cisco IOSv15.4 but could not find the "crypto ipsec fragmentation mtu-discovery" command.

• Question 218:

  Which two components are required for MPLS Layer 3 VPN configuration? (Choose two)

  A. Use MP-BGP for customer routes.

  B. Use LDP for customer routes.

  C. Use a unique RD per customer VRF.

  D. Use pseudowire for Layer 2 routes

  E. Use OSPF between PE and CE

  Correct Answer: AC

• Question 219:

  Which method provides failure detection in BFD?

  A. short duration, high overhead

  B. short duration, low overhead

  C. long duration, high overhead

  D. long duration, low overhead

  Correct Answer: B

• Question 220:

  A network administrator added a new spoke site with dynamic IP on the DMVPN network. Which configuration command passes traffic on the DMVPN tunnel from the spoke router?

  A. ip nhrp registration dynamic

  B. ip nhrp registration ignore

  C. ip nhrp registration no-registration

  D. ip nhrp registration no-unique

  Correct Answer: D

  "ip nhrp registration no-unique": allow the client to not set the unique flag in the NHRP packets. This is useful when a station has a dynamic IP address that could change over time.