Cisco CCNP Enterprise 350-401 Questions & Answers

• Question 321:

  Which resource must the hypervisor make available to the virtual machines?

  A. bandwidth

  B. IP address

  C. processor

  D. secure access

  Correct Answer: C

• Question 322:

  Which two mechanisms are used with OAuth 2.0 for enhanced validation? (Choose two.)

  A. authorization

  B. custom headers

  C. request management

  D. authentication

  E. accounting

  Correct Answer: AD

• Question 323:

  Which characteristic applies to the endpoint security aspect of the Cisco Threat Defense architecture?

  A. detect and block ransomware in email attachments

  B. outbound URL analysis and data transfer controls

  C. user context analysis

  D. blocking of fileless malware in real time

  Correct Answer: D

• Question 324:

  Refer to the exhibit.

  

  An engineer configured TACACS+ to authenticate remote users, but the configuration is not working as expected. Which configuration must be applied to enable access?

  A. R1 (config)# ip tacacs source-interface Gig 0/0

  B. R1 (config)# tacacs server prod R1(config-server-tacacs)# port 1020

  C. R1 (config)# aaa authorization exec default group tacacs+ local

  D. R1 (config)# tacacs server prod R1(config-server-tacacs)# key cisco123

  Correct Answer: D

• Question 325:

  Which virtualization component creates VMs and performs hardware abstraction that allows multiple VMs to run at the same time?

  A. container

  B. Docker

  C. hypervisor

  D. rkt

  Correct Answer: C

• Question 326:

  Which capability does a distributed virtual switch have?

  A. use floating static routes

  B. provide configuration consistency across the hosts

  C. run dynamic routing protocols

  D. use advanced IPsec encryption algorithms

  Correct Answer: B

• Question 327:

  What is contained in the VXLAN header?

  A. VXLAN network identifier

  B. source and destination RLOC ID

  C. endpoint ID

  D. original Layer 2 VLAN ID

  Correct Answer: A

• Question 328:

  An engineer modifies the existing ISE guest portal URL to use a static FQDN. Users immediately report that they receive certificate errors when they are redirected to the new page. Which two additional configuration steps are needed to implement the change? (Choose two.)

  A. Add a new DNS record to resolve the FQDN to the PSN IP address

  B. Create and sign a new CSR that contains the static FQDN entry

  C. Manually configure the hosts file on each user device.

  D. Disable HTTPS on the WLC under the Management menu

  E. Add the FQDN entry under the WLC virtual interface

  Correct Answer: AB

• Question 329:

  Which feature is provided by Cisco Mobility Services Engine in a Cisco Wireless Unified Network architecture?

  A. It adds client packet capturing.

  B. It enables NetFlow data collection.

  C. It adds client tracking and location API.

  D. It identifies authentication problems.

  Correct Answer: C

  This solution allows a customer to track any Wi-Fi device, including clients, active RFID tags, and rogue clients and access points (APs). https://mrncciew.com/2013/04/05/mobility-service-engine-mse/

• Question 330:

  What is a difference between Chef and other automation tools?

  A. Chef is an agentless tool that uses playbooks, and Ansible is an agent-based tool that uses cookbooks.

  B. Chef is an agentless tool that uses a primary/minion architecture, and SaltStack is an agent-based tool that uses a primary/secondary architecture

  C. Chef is an agent-based tool that uses cookbooks, and Ansible is an agentless tool that uses playbooks.

  D. Chef uses Domain Specific Language, and Puppet uses Ruby.

  Correct Answer: C