Cisco CCNP Enterprise 350-401 Questions & Answers

• Question 41:

  A Cisco administrstor deploys a new wireless network but CAPWAP APs cannot communicate with the wireless controller. IP connectivity in the network functions properly. Which action resolves the issue?

  A. Open CAPWAP UDP port 12222 in the network firewall.

  B. Open CAPWAP UDP ports 5246 and 5247 in the network firewall.

  C. Enable the UDP Lite feature on the WLC.

  D. Ensure that the controller is connected to a AAA server.

  Correct Answer: B

• Question 42:

  Which technique is used to protect end user devices and data from unknown file behavior?

  A. crypto file ransomware protection using a file hash calculation

  B. file retrospection using continuous scan and analyses

  C. file sandboxing using a protected environment to analyze and simulate the behavior of unknown files

  D. phishing file quarantine using an internal environment to store attached files

  Correct Answer: C

• Question 43:

  Which type of roaming event occurs when a client roams across multiple mobility groups?

  A. Layer1

  B. Layer7

  C. Layer3

  D. Layer2

  Correct Answer: D

• Question 44:

  Which mechanism does OAuth use to strengthen REST API security when compared to BasicAuth?

  A. Token

  B. SSL

  C. Authentication

  D. TLS

  Correct Answer: A

• Question 45:

  Refer to the exhibit.

  

  The web server is configured to listen only to TCP port 8080 for all HTTP requests. Which command is required to allow Internet users to access the web server on HTTP port 80?

  A. ip nat outside static tcp 10.1.1.100 8080 10.1.1.100 80

  B. ip nat inside static tcp 10.1.1.100 80 10.1.1.100 8080

  C. ip nat inside static tcp 10.1.1.100 8080 10.1.1.100 80

  D. ip nat outside static tcp 10.1.1.100 80 10.1.1.100 8080

  Correct Answer: C

• Question 46:

  Refer to the exhibit.

  

  An engineer must configure router R1 to allow only NETCONF connections from the management VLAN. Which command completes this configuration?

  A. R1(config-if)# ip access-group netconfacl in

  B. R1(config)# netconf-yang ipv4 access-list name netconfacl

  C. R1(config)#ip http secure-server R1(config)# ip http accounting commands 12 default

  D. R1(config-if)#ip access-group netconfacl out

  Correct Answer: A

• Question 47:

  Which configuration saves the running configuration to the startup configuration and logs a "saving configuration automatically" message when a syslog message that contains "SYS-5-CONFIG_I" is received?

  

  A. Option A

  B. Option B

  C. Option C

  D. Option D

  Correct Answer: C

• Question 48:

  A wireless client roams from one Access Point to another Access Point using a different switch in a Cisco SD-Access network. If only a single Wireless Lan Controller in involved, what roaming methods is being used?

  A. L3 roaming

  B. inter-xTR

  C. auto anchor

  D. bridged roaming

  Correct Answer: B

  https://www.cisco.com/c/en/us/td/docs/wireless/controller/9800/config-guide/b_wl_16_10_cg/mobility.html

• Question 49:

  You need to implement a First Hop Redundancy Protocol (FHRP) in a dual stack (IPv4 and IPV6) environment that utilizes devices from multiple different vendors. Which protocol best meets these needs?

  A. HSRP

  B. GLBP

  C. VRRPv1

  D. VRRPv2

  Correct Answer: D

  You have to go with VRRP as the protocol must be vendor agnostic.

• Question 50:

  Which Cisco SD-WAN component acts as a single pane of glass for management and offers centralized fault, performance, accounting, and configuration management?

  A. vBond

  B. vEdge

  C. vSmart

  D. vManage

  Correct Answer: D