Cisco CCNP Enterprise 350-401 Questions & Answers

• Question 301:

  What is the main function of VRF-lite?

  A. To connect different autonomous systems together to share routes

  B. To allow devices to use labels to make Layer 2 Path decisions

  C. To route IPv6 traffic across an IPv4 backbone

  D. To segregate multiple routing tables on a single device

  Correct Answer: D

• Question 302:

  Refer to the exhibit.

  

  Which LISP component do routers in the public IP network use to forward traffic between the two networks?

  A. RLOC

  B. map resolver

  C. EID

  D. map server

  Correct Answer: A

  Locator ID Separation Protocol (LISP) is a network architecture and protocol that implements the use of two namespaces instead of a single IP address:

  + Endpoint identifiers (EIDs) ?assigned to end hosts. + Routing locators (RLOCs) ?assigned to devices (primarily routers) that make up the global routing system. Reference: https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/iproute_lisp/ configuration/xe- 3s/irl-xe-3s- book/irl-overview.html

• Question 303:

  Refer to the exhibit.

  

  A network engineer must permit administrators to automatically authenticate if there is no response from either of the AAA servers. Which configuration achieves these results?

  A. aaa authentication enable default group radius local

  B. aaa authentication login default group radius

  C. aaa authentication login default group tacacs+ line

  D. aaa authentication login default group radius none

  Correct Answer: D

• Question 304:

  Refer to the exhibit.

  

  An engineer is configuring WebAuth on a Cisco Catalyst 9800 Series WLC. The engineer has purchased a third-party certificate using the FQDN of the WLC as the CN and intends to use it on the WebAuth splash page. What must be configured so that the clients do not receive a certificate error?

  A. Virtual IPv4 Hostname must match the CN of the certificate

  B. Virtual IPv4 Address must be set to a routable address

  C. Web Auth Intercept HTTPs must be enabled

  D. Trustpoint must be set to the management certificate of the WLC

  Correct Answer: A

• Question 305:

  Refer to the exhibit.

  

  Which configuration must be added to enable remote access only using SSHv1 or SSHv2 to this router?

  

  A. Option A

  B. Option B

  C. Option C

  D. Option D

  Correct Answer: B

• Question 306:

  Refer to the exhibit.

  

  What is the output of this code?

  A. 1st_item#######: 645298791871446 2nd_item_that_must_display: jlugyydt##

  B. 1st_item#######: 6452987918 2nd_item_that_m: jlugyydt##

  C. 1st_item#######: 8791871446 at_must_display: jlugyydt

  D. 645298791871446 ##jlugyydt

  Correct Answer: B

  {:#<15} - This is adding # to the returned string to fill 15 characters. It does nothing if the string is greater than 15 characters. {:#<10} - This is adding # to the returned string to fill 10 characters. It does nothing if the string is greater than 10 characters.

• Question 307:

  Refer to the exhibit.

  

  An engineer is troubleshooting an issue with non-Wi-Fi interference on the 5-GHz band. The engineer has enabled Cisco CleanAir and set the appropriate traps, but the AP does not change the channel when it detects significant interference.

  Which action will resolve the issue?

  A. Enable the Avoid Persistent Non-WiFi interference option

  B. Change the DCA Sensitivity option to High

  C. Enable the Event Driven Radio Resource Management option

  D. Disable the Avoid Foreign AP Interference option

  Correct Answer: C

• Question 308:

  Refer to the exhibit.

  

  Two indirectly connected routers fail to form an OSPF neighborship. What is the cause of the issue?

  A. failing hello packets between the two routers

  B. DR/BDR selection dispute

  C. MTU mismatch

  D. OSPF network type mismatch

  Correct Answer: C

  neighbor 10.2.2.2 has smaller interface MTU

• Question 309:

  Refer to the exhibit.

  

  An engineer is troubleshooting an mDNS issue in an environment where Cisco ISE is used to dynamically assign mDNS roles to users. The engineer has confirmed that ISE is sending the correct values, but name resolution is not functioning as expected.

  Which WLC configuration change resolves the issue?

  A. Enable AAA Override.

  B. Enable Aironet IE.

  C. Set MFP client protection to Required.

  D. Change NAC state to ISE NAC.

  Correct Answer: A

• Question 310:

  Which statement about a Cisco APIC controller versus a more traditional SDN controller is true?

  A. APIC does support a Southbound REST API

  B. APIC supports OpFlex as a Northbound protocol

  C. APIC uses a policy agent to translate policies into instructions

  D. APIC uses an imperative model

  Correct Answer: C

  The southbound protocol used by APIC is OpFlex that is pushed by Cisco as the protocol for policy enablement across physical and virtual switches. Southbound interfaces are implemented with some called Service Abstraction Layer (SAL),

  which talks to the network elements via SNMP and CLI.

  Note: Cisco OpFlex is a southbound protocol in a software-defined network (SDN).