Cisco CCNP Enterprise 350-401 Questions & Answers

• Question 431:

  What are two benefits of using Cisco TrustSec? (Choose two.)

  A. consistent network segmentation

  B. advanced endpoint protection against malware

  C. simplified management of network access

  D. unknown file analysis using sandboxing

  E. end-to-end traffic encryption

  Correct Answer: AC

• Question 432:

  An engineer must construct an access list for a Cisco Catalyst 9800 Series WLC that will redirect wireless guest users to a splash page that is hosted on a Cisco ISE server The Cisco ISE servers are hosted at 10 9 11 141 and 10 1 11 141.

  Which access list meets the requirements?

  

  A. Option A

  B. Option B

  C. Option C

  D. Option D

  Correct Answer: D

• Question 433:

  When should the MAC authentication bypass feature be used on a switch port?

  A. when authentication is required, but the attached host does not support 802.1X

  B. when the attached host supports limited 802.1X

  C. when authentication should be bypassed for select hosts based on their MAC address

  D. when the attached host supports 802.1X and must authenticate itself based on its MAC address instead of user credentials

  Correct Answer: A

• Question 434:

  Why are stateless calls executed by REST API useful in cloud applications?

  A. They control URL decoding.

  B. They rely on data stored on the server for calls

  C. They use HTTPS to implement all calls.

  D. They are easy to redeploy and to scale

  Correct Answer: D

• Question 435:

  A network administrator received reports that a 40Gb connection is saturated. The only server the administrator can use for data collection in that location has a 10Gb connection to the network. Which of the following is the best method to use on the server to determine the source of the saturation?

  A. Port mirroring

  B. Log aggregation

  C. Flow data

  D. Packet capture

  Correct Answer: C

  This is because flow data is a method of collecting and analyzing information about the traffic flows on a network. Flow data can provide details such as the source and destination IP addresses, ports, protocols, and bytes transferred for each flow. Flow data can help identify the source of the saturation by showing which hosts and applications are generating or consuming the most bandwidth. Flow data can be collected using protocols such as NetFlow, IPFIX, or sFlow. The source of this answer is the Cisco ENCOR v1.1 course, module 10, lesson 10.1: Implementing NetFlow and IPFIX.

• Question 436:

  Refer to the exhibit.

  

  What is achieved by this Python script?

  A. It reads access list statements into a dictionary list.

  B. It displays access list statements on a terminal screen.

  C. It configures access list statements.

  D. It converts access list statements to a human-readable format.

  Correct Answer: A

• Question 437:

  A customer deployed an ISE solution that allows for web authentication and URL redirect enforced from the access layer. Due to control plane security concerns, only host IP 10.0.1.25 should have HTTP access to these switches. Which configuration must be applied to the switches?

  

  A. Option A

  B. Option B

  C. Option C

  D. Option D

  Correct Answer: B

• Question 438:

  Which API does Cisco DNA Center use to retrieve information about images?

  A. SWIM

  B. Img-Mgmt

  C. PnP

  D. Client Health

  Correct Answer: A

• Question 439:

  Refer to the exhibit.

  

  Users in the Operations VLAN on Switch A are unable to communicate with users in the Operations VLAN on Switch B. Which action resolves the issue?

  A. Set the switchport mode to dynamic desirable on Switch B.

  B. Set the EtherChannel mode to LACP on Switch A.

  C. Configure the same allowed VLAN list on Switch A and Switch B.

  D. Set the EtherChannel mode to PAGP on Switch B.

  Correct Answer: A

• Question 440:

  What is the preferred QoS marking for delay-sensitive real-time protocols such as RTP?

  A. CS1

  B. ATM-CLP

  C. EF

  D. AF

  Correct Answer: C