Cisco CCNP Enterprise 350-401 Questions & Answers

• Question 381:

  Refer to the exhibit.

  

  A client reports being unable to log into the wireless network, which uses PEAPv2. Which two issues appear in the output? (Choose two.)

  A. There is a problem with the client supplicant.

  B. The AP has the incorrect RADIUS server address.

  C. The AP has lost IP connectivity to the authentication server.

  D. The EAP client timeout value should be increased.

  E. The authentication server is misconfigured on the controller.

  F. The authentication server is misconfigured in the WLAN.

  Correct Answer: AD

• Question 382:

  What the role of a fusion in an SD-Access solution?

  A. provides connectivity to external networks

  B. acts as a DNS server

  C. performs route leaking between user-defined virtual networks and shared services

  D. provides additional forwarding capacity to the fabric

  Correct Answer: C

  Today the Dynamic Network Architecture Software Defined Access (DNA-SDA) solution requires a fusion router to perform VRF route leaking between user VRFs and Shared-Services, which may be in the Global routing table (GRT) or another VRF. Shared Services may consist of DHCP, Domain Name System (DNS), Network Time Protocol (NTP), Wireless LAN Controller (WLC), Identity Services Engine (ISE), DNAC components which must be made available to other virtual networks (VN's) in the Campus.

  Reference: https://www.cisco.com/c/en/us/support/docs/cloud-systems-management/dnacenter/ 213525-sda-steps-to-configure-fusion-router.html

  

  Reference: https://www.cisco.com/c/en/us/support/docs/cloud-systems-management/dna-center/213525-sda-steps-to-configure-fusion-router.html#anc1

• Question 383:

  What are two benefit of virtualizing the server with the use of VMs in data center environment? (Choose two.)

  A. Increased security

  B. reduced rack space, power, and cooling requirements

  C. reduced IP and MAC address requirements

  D. speedy deployment

  E. smaller Layer 2 domain

  Correct Answer: BD

  Server virtualization and the use of virtual machines is profoundly changing data center dynamics. Most organizations are struggling with the cost and complexity of hosting multiple physical servers in their data centers. The expansion of the data center, a result of both scale-out server architectures and traditional "one application, one server" sprawl, has created problems in housing, powering, and cooling large numbers of underutilized servers. In addition, IT organizations continue to deal with the traditional cost and operational challenges of matching server resources to organizational needs that seem fickle and ever changing. Virtual machines can significantly mitigate many of these challenges by enabling multiple application and operating system environments to be hosted on a single physical server while maintaining complete isolation between the guest operating systems and their respective applications. Hence, server virtualization facilitates server consolidation by enabling organizations to exchange a number of underutilized servers for a single highly utilized server running multiple virtual machines. By consolidating multiple physical servers, organizations can gain several benefits:

  +

  Underutilized servers can be retired or redeployed.

  +

  Rack space can be reclaimed.

  +

  Power and cooling loads can be reduced.

  +

  New virtual servers can be rapidly deployed.

  +

  CapEx (higher utilization means fewer servers need to be purchased) and OpEx (few servers means a simpler environment and lower maintenance costs) can be reduced.

  Reference: https://www.cisco.com/c/en/us/solutions/collateral/data-centervirtualization/ net_implementation_white_paper0900aecd806a9c05.html

• Question 384:

  Which two protocols are used with YANG data models? (Choose two.)

  A. HTTPS

  B. SSH

  C. RESTCONF

  D. TLS

  E. NFTCONF

  Correct Answer: CE

  YANG (Yet Another Next Generation) is a data modeling language for the definition of data sent over network management protocols such as the NETCONF and RESTCONF.

• Question 385:

  Which feature is supported by ElGRP but is not supported by OSPF?

  A. route summarization

  B. equal-cost load balancing

  C. unequal-cost load balancing

  D. route filtering

  Correct Answer: C

• Question 386:

  Refer to the exhibit.

  

  Link1 is a copper connection and Link2 is a fiber connection. The fiber port must be the primary port for all forwarding. The output of the show spanning-tree command on SW2 shows that the fiber port is blocked by spanning tree. An engineer enters the spanning-tree port-priority 32 command on G0/1 on SW2, but the port remains blocked.

  Which command should be entered on the ports that are connected to Link2 to resolve the issue?

  A. Enter spanning-tree port-priority 32 on SW1.

  B. Enter spanning-tree port-priority 224 on SW1.

  C. Enter spanning-tree port-priority 4 on SW2.

  D. Enter spanning-tree port-priority 64 on SW2.

  Correct Answer: A

  SW1 needs to block one of its ports to SW2 to avoid a bridging loop between the two switches. Unfortunately, it blocked the fiber port Link2. But how does SW2 select its blocked port? Well, the answer is based on the BPDUs it receives from SW1. answer 'Enter spanning-tree port-priority 32 on SW1' BPDU is superior than another if it has:

  1.

  answer 'Enter spanning-tree port-priority 32 on SW1' lower Root Bridge ID

  2.

  answer 'Enter spanning-tree port-priority 32 on SW1' lower path cost to the Root

  3.

  answer 'Enter spanning-tree port-priority 32 on SW1' lower Sending Bridge ID

  4.

  answer 'Enter spanning-tree port-priority 32 on SW1' lower Sending Port ID These four parameters are examined in order. In this specific case, all the BPDUs sent by SW1 have the same Root Bridge ID, the same path cost to the Root and the same Sending Bridge ID. The only parameter left to select the best one is the Sending Port ID (Port ID = port priority + port index). And the port index of Gi0/0 is lower than the port index of Gi0/1 so Link 1 has been chosen as the primary link. Therefore we must change the port priority to change the primary link. The lower numerical value of port priority, the higher priority that port has. In other words, we must change the port-priority on Gi0/1 of SW1 (not on Gi0/1 of SW2) to a lower value than that of Gi0/0.

• Question 387:

  Refer to the exhibit.

  

  Which IP address becomes the next active next hop for 192.168.102 0/24 when 192.168.101.2 fails?

  A. 192.168.101.18

  B. 192.168.101.6

  C. 192.168.101.10

  D. 192.168.101.14

  Correct Answer: A

  The `>' shown in the output above indicates that the path with a next hop of 192.168.101.2 is the current best path. Path Selection Attributes: Weight > Local Preference > Originate > AS Path > Origin > MED > External > IGP Cost > eBGP Peering > Router ID BGP prefers the path with highest weight but the weights here are all 0 (which indicate all routes that are not originated by the local router) so we need to check the Local Preference. Answer '192.168.101.18' path without LOCAL_PREF (LocPrf column) means it has the default value of 100. Therefore we can find the two next best paths with the next hop of 192.168.101.18 and 192.168.101.10. We have to move to the next path selection attribute: Originate. BGP prefers the path that the local router originated (which is indicated with the "next hop 0.0.0.0"). But none of the two best paths is self-originated. The AS Path of the next hop 192.168.101.18 is shorter than the AS Path of the next hop 192.168.101.10 then the next hop 192.168.101.18 will be chosen as the next best path.

• Question 388:

  What is the logging severity level?

  R1#Feb 14 37:15:12:429: %LINEPROTO-5-UPDOWN Line protocol on interface GigabitEthernet0/1.

  Change state to up

  A. Notification

  B. Alert

  C. Critical

  D. Emergency

  Correct Answer: A

  Every Awesome Cisco Engineer Will Need Icecream Daily 0 1 2 3 4 5 6 7

• Question 389:

  Which statement describes the IP and MAC allocation requirements for virtual machines on types 1 hypervisors?

  A. Each virtual machine requires a unique IP and MAC addresses to be able to reach to other nodes.

  B. Each virtual machine requires a unique IP address but shares the MAC address with the physical server.

  C. Each virtual machines requires a unique IP address but shares the MAC address with the address of the physical server.

  D. Each virtual machine requires a unique MAC address but shares the IP address with the physical server.

  Correct Answer: A

  A virtual machine (VM) is a software emulation of a physical server with an operating system. From an application's point of view, the VM provides the look and feel of a real physical server, including all its components, such as CPU, memory, and network interface cards (NICs). The virtualization software that creates VMs and performs the hardware abstraction that allows multiple VMs to run concurrently is known as a hypervisor. There are two types of hypervisors: type 1 and type 2 hypervisor. In type 1 hypervisor (or native hypervisor), the hypervisor is installed directly on the physical server. Then instances of an operating system (OS) are installed on the hypervisor. Type 1 hypervisor has direct access to the hardware resources. Therefore they are more efficient than hosted architectures. Some examples of type 1 hypervisor are VMware vSphere/ESXi, Oracle VM Server, KVM and Microsoft Hyper-V. In contrast to type 1 hypervisor, a type 2 hypervisor (or hosted hypervisor) runs on top of an operating system and not the physical hardware directly. answer 'Each virtual machine requires a unique IP and MAC addresses to be able to reach to other nodes' big advantage of Type 2 hypervisors is that management console software is not required. Examples of type 2 hypervisor are VMware Workstation (which can run on Windows, Mac and Linux) or Microsoft Virtual PC (only runs on Windows).

  

• Question 390:

  Which controller is the single plane of management for Cisco SD-WAN?

  A. vBond

  B. vEdge

  C. vSmart

  D. vManange

  Correct Answer: D

  The primary components for the Cisco SD-WAN solution consist of the vManage network management system (management plane), the vSmart controller (control plane), the vBond orchestrator (orchestration plane), and the vEdge router (data plane).

  + vManage -This centralized network management system provides a GUI interface to easily monitor, configure, and maintain all Cisco SD-WAN devices and links in the underlay and overlay network. + vSmart controller -This software-based component is responsible for the centralized control plane of the SD-WAN network. It establishes a secure connection to each vEdge router and distributes routes and policy information via the Overlay Management Protocol (OMP), acting as a route reflector. It also orchestrates the secure data plane connectivity between the vEdge routers by distributing crypto key information, allowing for a very scalable, IKE-less architecture. + vBond orchestrator -This software-based component performs the initial authentication of vEdge devices and orchestrates vSmart and vEdge connectivity. It also has an important role in enabling the communication of devices that sit behind Network Address Translation (NAT). + vEdge router -This device, available as either a hardware appliance or software-based router, sits at a physical site or in the cloud and provides secure data plane connectivity among the sites over one or more WAN transports. It is responsible for traffic forwarding, security, encryption, Quality of Service (QoS), routing protocols such as Border Gateway Protocol (BGP) and Open Shortest Path First (OSPF), and more.

  Reference: https://www.cisco.com/c/dam/en/us/td/docs/solutions/CVD/SDWAN/CVD-SD-WANDesign-2018OCT.pdf