Cisco CCNP Enterprise 350-401 Questions & Answers

• Question 361:

  Which First Hop Redundancy Protocol should be used to meet a design requirements for more efficient default bandwidth usage across multiple devices?

  A. GLBP

  B. LCAP

  C. HSRP

  D. VRRP

  Correct Answer: A

  The main disadvantage of HSRP and VRRP is that only one gateway is elected to be the active gateway and used to forward traffic whilst the rest are unused until the active one fails. Gateway Load Balancing Protocol (GLBP) is a Cisco proprietary protocol and performs the similar function to HSRP and VRRP but it supports load balancing among members in a GLBP group.

• Question 362:

  A client device roams between access points located on defferent floors in an atrium. The access points joined to the same controller and configuration in local mode. The access points are in different IP addresses, but the client VLAN in the group same.

  What type of roam occurs?

  A. inter-controller

  B. inter-subnet

  C. intra-VLAN

  D. intra-controller

  Correct Answer: D

  Mobility, or roaming, is a wireless LAN client's ability to maintain its association seamlessly from one access point to another securely and with as little latency as possible. Three popular types of client roaming are: Intra-Controller Roaming: Each controller supports same-controller client roaming across access points managed by the same controller. This roaming is transparent to the client as the session is sustained, and the client continues using the same DHCP-assigned or client-assigned IP address. Inter-Controller Roaming: Multiple-controller deployments support client roaming across access points managed by controllers in the same mobility group and on the same subnet. This roaming is also transparent to the client because the session is sustained and a tunnel between controllers allows the client to continue using the same DHCP- or client-assigned IP address as long as the session remains active. Inter-Subnet Roaming: Multiple-controller deployments support client roaming across access points managed by controllers in the same mobility group on different subnets. This roaming is transparent to the client because the session is sustained and a tunnel between the controllers allows the client to continue using the same DHCP-assigned or client-assigned IP address as long as the session remains active.

  Reference: https://www.cisco.com/c/en/us/td/docs/wireless/controller/7- 4/configuration/guides/consolidated/b_cg74_CONSOLIDATED/b_cg74_CONSOLIDA TED_chapter_01100.html

  In three types of client roaming above, only with Inter-Subnet Roaming the controllers are in different subnets.

• Question 363:

  Which feature of EIGRP is not supported in OSPF?

  A. load balancing of unequal-cost paths

  B. load balance over four equal-costs paths

  C. uses interface bandwidth to determine best path

  D. per-packet load balancing over multiple paths

  Correct Answer: A

• Question 364:

  What are two device roles in Cisco SD-Access fabric? (Choose two.)

  A. core switch

  B. vBond controller

  C. edge node

  D. access switch

  E. border node

  Correct Answer: CE

  There are five basic device roles in the fabric overlay:

  +

  Control plane node: This node contains the settings, protocols, and mapping tables to provide the endpoint-to-location (EID-to-RLOC) mapping system for the fabric overlay. + Fabric border node: This fabric device (for example, core layer device) connects external Layer 3 networks to the SDA fabric.

  +

  Fabric edge node: This fabric device (for example, access or distribution layer device) connects wired endpoints to the SDA fabric.

  +

  Fabric WLAN controller (WLC): This fabric device connects APs and wireless endpoints to the SDA fabric.

  +

  Intermediate nodes: These are intermediate routers or extended switches that do not provide any sort of SD-Access fabric role other than underlay services.

  

• Question 365:

  How does QoS traffic shaping alleviate network congestion?

  A. It drops packets when traffic exceeds a certain bitrate.

  B. It buffers and queues packets above the committed rate.

  C. It fragments large packets and queues them for delivery.

  D. It drops packets randomly from lower priority queues.

  Correct Answer: B

  Traffic shaping retains excess packets in a queue and then schedules the excess for later transmission over increments of time. The result of traffic shaping is a smoothed packet output rate.

  

  Reference: https://www.cisco.com/c/en/us/support/docs/quality-of-service-qos/qos-policing/19645-policevsshape.html

• Question 366:

  Which two entities are Type 1 hypervisors? (Choose two.)

  A. Oracle VM VirtualBox

  B. Microsoft Hyper-V

  C. VMware server

  D. VMware ESX

  E. Microsoft Virtual PC

  Correct Answer: BD

  A bare-metal hypervisor (Type 1) is a layer of software we install directly on top of a physical server and its underlying hardware. There is no software or any operating system in between, hence the name bare-metal hypervisor. A Type 1 hypervisor is proven in providing excellent performance and stability since it does not run inside Windows or any other operating system. These are the most common type 1 hypervisors:

  +

  VMware vSphere with ESX/ESXi

  +

  KVM (Kernel-Based Virtual Machine)

  +

  Microsoft Hyper-V

  +

  Oracle VM

  +

  Citrix Hypervisor (formerly known as Xen Server)

  Reference: https://phoenixnap.com/kb/what-is-hypervisor-type-1-2

• Question 367:

  Which NGFW mode blocks flows crossing the firewall?

  A. tap

  B. inline

  C. passive

  D. inline tap

  Correct Answer: B

  Reference: https://www.cisco.com/c/en/us/support/docs/security/firepower-ngfw/200924-configuring-firepower-threat-defense-int.html

• Question 368:

  What are two reasons why broadcast radiation is caused in the virtual machine environment? (Choose two.)

  A. vSwitch must interrupt the server CPU to process the broadcast packet.

  B. The Layer 2 domain can be large in virtual machine environments.

  C. Virtual machines communicate primarily through broadcast mode.

  D. Communication between vSwitch and network switch is broadcast based.

  E. Communication between vSwitch and network switch is multicast based.

  Correct Answer: AB

  Broadcast radiation is the accumulation of broadcast and multicast traffic on a computer network. Extreme amounts of broadcast traffic constitute a broadcast storm. The amount of broadcast traffic you should see within a broadcast domain is

  directly proportional to the size of the broadcast domain. Therefore if the layer 2 domain in virtual machine environment is too large, broadcast radiation may occur - > VLANs should be used to reduce broadcast radiation.

  Also if virtual machines communicate via broadcast too much, broadcast radiation may occur.

  Another reason for broadcast radiation is using a trunk (to extend VLANs) from the network switch to the physical server.

  Note about the structure of virtualization in a hypervisor:

  Hypervisors provide virtual switch (vSwitch) that Virtual Machines (VMs) use to communicate with other VMs on the same host. The vSwitch may also be connected to the host's physical NIC to allow VMs to get layer 2 access to the outside

  world.

  Each VM is provided with a virtual NIC (vNIC) that is connected to the virtual switch. Multiple vNICs can connect to a single vSwitch, allowing VMs on a physical host to communicate with one another at layer 2 without having to go out to a

  physical switch.

  

  Although vSwitch does not run Spanning-tree protocol but vSwitch implements other loop prevention mechanisms. For example, a frame that enters from one VMNIC is not going to go out of the physical host from a different VMNIC card.

  Reference: https://www.cisco.com/c/en/us/solutions/collateral/data-center-virtualization/net_implementation_white_paper0900aecd806a9c05.html

• Question 369:

  Which two namespaces does the LISP network architecture and protocol use? (Choose two.)

  A. TLOC

  B. RLOC

  C. DNS

  D. VTEP

  E. EID

  Correct Answer: BE

  Locator ID Separation Protocol (LISP) is a network architecture and protocol that implements the use of two namespaces instead of a single IP address: + Endpoint identifiers (EIDs)--assigned to end hosts. + Routing locators (RLOCs)-assigned to devices (primarily routers) that make up the global routing system.

  Reference: https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/iproute_lisp/configuration/xe-3s/irl-xe-3s-book/irl-overview.html

• Question 370:

  Which statement about when you configure FlexConnect APs and you want to set up Cisco Centralized Key Management fast roaming is true?

  A. FlexConnect groups are required for Cisco Centralized Key Management fast roaming to work with FlexConnect access points.

  B. APs that are in the same FlexConnect group but associated to different WLCs support Cisco Centralized Key Management.

  C. Cisco Centralized Key Management fast roaming among FlexConnect and non-FlexConnect access points is supported.

  D. The FlexConnect access point must be in standalone mode to support Cisco Centralized Key Management.

  Correct Answer: A

  References: http://www.cisco.com/c/en/us/td/docs/wireless/controller/8-1/Enterprise-Mobility-8-1-Design- Guide/Enterprise_Mobility_8-1_Deployment_Guide/ch7_HREA.html