Cisco CCNP Enterprise 350-401 Questions & Answers

• Question 331:

  An engineer must configure a new WLAN that supports 802.11r and requires users to enter a passphrase. What must be configured to support this requirement?

  A. 802.1X and Fast Transition

  B. FT PSK and Fast Transition

  C. 802.1X and SUITEB-1X

  D. FT PSK and SUITEB-1X

  Correct Answer: B

• Question 332:

  How is CAPWAP data traffic encapsulated when running an Over the Top WLAN in a Cisco SD-Access wireless environment?

  A. LISP

  B. VXLAN

  C. GRE

  D. IPsec

  Correct Answer: B

  https://www.cisco.com/c/dam/en/us/td/docs/cloud-systems-management/network-automation-and-management/dna-center/deploy-guide/cisco-dna-center-sd-access-wl-dg.pdf

• Question 333:

  Which type of antenna is designed to provide a 360-degree radiation pattern?

  A. Yagi

  B. patch

  C. directional

  D. omnidirectional

  Correct Answer: D

• Question 334:

  What is a difference between OSPF and EIGRP?

  A. OSPF uses a default hello timer of 5 seconds. EIGRP uses a default hello timer of 10 seconds.

  B. OSPF uses multicast addresses 224.0.0.5 and 224.0.0.6. EIGRP uses multicast address 224.0.0.10.

  C. OSPF uses an administrative distance of 115. EIGRP uses an administrative distance of 160.

  D. OSPF uses IP protocol number 88. EIGRP uses IP protocol number 89.

  Correct Answer: B

• Question 335:

  How do the MAC address table and TCAM differ?

  A. TCAM is populated from the ARP file, and the MAC address table is populated from the switch configuration file

  B. TCAM stores Layer 2 forwarding information, and the MAC address table stores QoS information

  C. TCAM lookups can match only 1s and 0s, and MAC address lookups can match 1s, 0s and a third "care/don't care" state

  D. TCAM is a type of memory and the MAC address table is a logical structure

  Correct Answer: D

• Question 336:

  Which technology provides an overlay fabric to connect remote locations utilizing commodity data paths and improves network performance, boosts security, and reduces costs?

  A. InfiniBand

  B. VTEP

  C. SD-WAN

  D. VXLAN

  Correct Answer: C

• Question 337:

  Which protocol does Cisco SD-WAN use to protect control plane communication?

  A. STUN

  B. OMP

  C. IPsec

  D. DTLS

  Correct Answer: D

• Question 338:

  Which security option protects credentials from sniffer attacks in a basicAPI authentication?

  A. next-generation firewall

  B. TLS or SSL for communication

  C. VPN connection between client and server

  D. AAA services to authenticate the API

  Correct Answer: B

• Question 339:

  What does the Cisco WLC Layer 3 roaming feature allow clients to do?

  A. maintain their IP address when roaming to an AP or controller with a different client VLAN assignment

  B. maintain their connection between APs even when the AP management VLANs are different

  C. maintain their connection even if the client IP address changes when roaming

  D. roam seamlessly between controllers even when the controller management VLANs are different

  Correct Answer: A

  When a client initiates an L3 intercontroller roam, the two controllers involved can compare the VLAN numbers that are assigned to their respective WLAN interfaces If the two VLAN IDs differ, the controllers arrange a Layer 3 roam (also known as a local-to-foreign roam) that will allow the client to keep using its IP address.

• Question 340:

  How is OAuth framework used in REST API?

  A. as a framework to hash the security information in the REST URL

  B. by providing the external application a token that authorizes access to the account

  C. as a framework to hide the security information in the REST URL

  D. by providing the user credentials to the external application

  Correct Answer: B