Cisco CCNP Enterprise 350-401 Questions & Answers

• Question 271:

  Which control plane protocol is used between Cisco SD-WAN routers and vSmart controllers?

  A. TCP

  B. OMP

  C. UDP

  D. BGP

  Correct Answer: B

  Cisco SD-WAN uses Overlay Management Protocol (OMP) which manages the overlay network. OMP runs between the vSmart controllers and WAN Edge routers (and among vSmarts themselves) where control plane information, such as the routing, policy, and management information, is exchanged over a secure connection.

• Question 272:

  Which statement about dynamic GRE between a headend router and a remote router is true?

  A. The headend router learns the IP address of the remote end router statically

  B. A GRE tunnel without an IP address has a status of administratively down

  C. GRE tunnels can be established when the remote router has a dynamic IP address D. The remote router initiates the tunnel connection

  Correct Answer: D

• Question 273:

  Which two statements about AAA authentication are true? (Choose two)

  A. RADIUS authentication queries the router`s local username database

  B. TACACS+ authentication uses an RSA server to authenticate users

  C. Local user names are case-insensitive

  D. Local authentication is maintained on the router

  E. KRB5 authentication disables user access when an incorrect password is entered

  Correct Answer: DE

• Question 274:

  A wireless consultant is designing a high-density wireless network for a lecture hall for 1000 students. Which antenna type is recommended for this environment?

  A. sector antenna

  B. dipole antenna

  C. parabolic dish

  D. omnidirectional antenna

  Correct Answer: D

  Directional antennas Directional antennas come in many different styles and shapes. An antenna does not offer any added power to the signal; it simply redirects the energy it receives from the transmitter. By redirecting this energy, it has the effect of providing more energy in one direction and less energy in all other directions. As the gain of a directional antenna increases, the angle of radiation usually decreases, providing a greater coverage distance but with a reduced coverage angle. Directional antennas include patch antennas and parabolic dishes. Parabolic dishes have a very narrow RF energy path, and the installer must be accurate in aiming these types of antennas at each other.

  Omnidirectional antennas An omnidirectional antenna is designed to provide a 360-degree radiation pattern. This type of antenna is used when coverage in all directions from the antenna is required. The standard 2.14-dBi "rubber duck" is one style of omnidirectional antenna. Omnidirectional antenna -> Therefore Omnidirectional antenna is best suited for a high-density wireless network in a lecture hall.

• Question 275:

  Refer to the exhibit.

  

  Which password allows access to line con 0 for a username of "tommy" under normal operation?

  A. Cisco

  B. local

  C. 0 Cisco

  D. Tommy

  Correct Answer: A

  In this question, there are two different passwords for user "tommy":

  +

  In the TACACS+ server, the password is "Tommy"

  +

  In the local database of the router, the password is "Cisco".

  From the line "login authentication local" we know that the router uses the local database for authentication so the password should be "Cisco".

  Note: "... password 0 ..." here means unencrypted password.

• Question 276:

  In a traditional 3 tier topology, an engineer must explicitly configure a switch as the root bridge and exclude it from any further election process for the spanning-tree domain. Which action accomplishes this task?

  A. Configure the spanning-tree priority to 32768

  B. Configure root guard and portfast on all access switch ports.

  C. Configure BPDU guard in all switch-to-switch connections.

  D. Configure the spanning-tree priority equal to 0.

  Correct Answer: B

  Root guard does not allow the port to become a STP root port, so the port is always STP-designated. If a better BPDU arrives on this port, root guard does not take the BPDU into account and elect a new STP root. Instead, root guard puts the port into the root-inconsistent STP state which is equal to a listening state. No traffic is forwarded across this port. Reference: http://www.cisco.com/c/en/us/support/docs/lan-switching/spanning-tree-protocol/10588-74.html

• Question 277:

  What is provided by the Stealthwatch component of the Cisco Cyber Threat Defense solution?

  A. real-time threat management to stop DDoS attacks to the core and access networks

  B. real-time awareness of users, devices, and traffic on the network

  C. malware control

  D. dynamic threat control for web traffic

  Correct Answer: B

  "Cisco Stealthwatch collects and analyzes massive amounts of data to give even the largest, most dynamic networks comprehensive internal visibility and protection. It helps security operations teams gain real-time situational awareness of all users, devices, and traffic on the extended network so they can quickly and effectively respond to threats" Page 1

  https://media.zones.com/images/pdf/cisco-stealthwatch-solution-overview.pdf

• Question 278:

  What would be the preferred way to implement a loopless switch network where there are 1500 defined VLANs and it is necessary to load the shared traffic through two main aggregation points based on the VLAN identifier?

  A. 802.1D

  B. 802.1s

  C. 802.1W

  D. 802.1AE

  Correct Answer: B

• Question 279:

  What is the primary effect of the spanning-tree portfast command?

  A. It enables BPDU messages

  B. It minimizes spanning-tree convergence time

  C. It immediately puts the port into the forwarding state when the switch is reloaded

  D. It immediately enables the port in the listening state

  Correct Answer: C

  Portfast feature should only be used on edge ports (ports directly connected to end stations). Neither edge ports or PortFast enabled ports generate topology changes when the link toggles so we cannot say Portfast reduces the STP convergence time.

  PortFast causes a switch or trunk port to enter the spanning tree forwarding state immediately, bypassing the listening and learning states so answer 'It immediately puts the port into the forwarding state when the switch is reloaded ' is the best choice.

• Question 280:

  Refer to the exhibit.

  

  Which two statements about the EEM applet configuration are true? (Choose two.)

  A. The EEM applet runs after the CLI command is executed

  B. The running configuration is displayed only if the letter Y is entered at the CLI

  C. The EEM applet runs before the CLI command is executed

  D. The EEM applet requires a case-insensitive response

  Correct Answer: BC

  When you use the sync yes option in the event cli command, the EEM applet runs before the CLI command is executed. The EEM applet should set the _exit_status variable to indicate whether the CLI command should be executed

  (_exit_status set to one) or not (_exit_status set to zero).

  With the sync no option, the EEM applet is executed in background in parallel with the CLI command.

  Reference:

  https://blog.ipspace.net/2011/01/eem-event-cli-command-options-and.html