Cisco CCNP Enterprise 350-401 Questions & Answers

• Question 511:

  An engineer must configure Interface and sensor monitoring on a router. The NMS server is located in a trusted zone with IP address 10.15.2.19. Communication between the router and the NMS server must be encrypted and password-protected using the most secure algorithms. Access must be allowed only for the NMS server and with the minimum permission levels needed.

  Which configuration must the engineer apply?

  A. ip access-list extended nms permit 1 host 10.15.2.19 any snmp-server view ro internet included snmp-server view ro ifEntry included snmp-server group nms v3 priv notify ro access nms snmp-server user user1 nms v3 encrypted auth md5 Password1 pri 3des Password123

  B. ip access-list standard nms permit 10.15.2.19 0.0.0.0 snmp-server view ro iso included snmp-server view ro ifEntry included snmp-server group nms v3 priv read ro access nms snmp-server user user1 nms v3 auth sha Password1 pri aes 256 Password123

  C. ip access-list standard nms permit 10.15.2.19 0.0.0.0 snmp-server view rw iso included snmp-server view rw ifEntry included snmp-server group nms v3 auth write rw access nms snmp-server user user1 nms v3 auth des Password1 pri des Password123

  D. ip access-list standard nms permit 10.15.2.19 255.255.255.255 snmp-server view ro iso included snmp-server view ro ifEntry included snmp-server group nms v3 priv read ro access nms snmp-server user user1 nms v3 auth 3des Password1 pri aes 192 Password123

  Correct Answer: B

• Question 512:

  Refer to the exhibit.

  

  Which statement is needed to complete the EEM applet and use the Tel script to store the backup file?

  A. action 2.0 cli command "write_backup.tcl tcl"

  B. action 2.0 cli command "flash:write_backup.tcl"

  C. action 2.0 cli command "write_backup.tcl"

  D. action 2.0 cli command "telsh flash:write_backup.tcl"

  Correct Answer: B

• Question 513:

  Refer to the exhibit.

  

  Which HTTP request produced the REST API response that was returned by Cisco DNA Center?

  A. fetch /network-device?macAddress=ac:4a:56:6c:7c:00

  B. POST/network-device?macAddress=ac:4a:56:6c:7c:00

  C. GET/network-device?macAddress=ac:4a:56:6c:7c:00

  D. PUT /network-device?macAddress=ac:4a:56:6c:7c:00

  Correct Answer: C

• Question 514:

  Which of the following attacks becomes more effective because of global leakages of users' passwords?

  A. Dictionary

  B. Brute-force

  C. Phishing

  D. Deauthentication

  Correct Answer: A

• Question 515:

  Which of the following fiber connector types is the most likely to be used on a network interface card?

  A. LC

  B. SC

  C. ST

  D. MPO

  Correct Answer: A

• Question 516:

  How does Cisco Express Forwarding switching differ from process switching on Cisco devices?

  A. Cisco Express Forwarding switching uses adjacency tables built by the CDP protocol, and process switching uses the routing table.

  B. Cisco Express Forwarding switching uses dedicated hardware processors, and process switching uses the main processor.

  C. Cisco Express Forwarding swithing saves memory by storing adjacency tables in dedicated memory on the line cards, and process switching stores all tables in the main memory.

  D. Cisco Express Forwarding switching uses a proprietary protocol based on IS-IS for MAC address lookup, and process switching uses the MAC address table.

  Correct Answer: C

• Question 517:

  Reter to the exhibit.

  

  A client requests a new SSID that will use web-based authentication and external RADIUS servers. Which Layer 2 security mode must be selected?

  A. WPA + WPA2

  B. WPA2 + WPA3

  C. Static WEP

  D. None

  Correct Answer: D

• Question 518:

  A network administrator for a small office is adding a passive IDS to its network switch for the purpose of inspecting network traffic. Which of the following should the administrator use?

  A. SNMPtrap

  B. Port mirroring

  C. Syslog collection

  D. API integration

  Correct Answer: B

• Question 519:

  Refer to the exhibit.

  

  An engineer must implement HSRP between two WAN routers. In the event R1 tails and then regains operational status, it must allow 100 seconds for the routing protocol to converge before preemption takes effect.

  Which configuration is required?

  A. R2 interface Gi0/0 standby 300 preempt standby 300 delay sync 100

  B. R1 interface Gi0/0 standby 300 preempt standby 300 delay minimum 100

  C. R1 interface Gi0/0 standby 300 preempt R2 interface Gi0/0 standby 300 delay sync 100

  D. R1 interface Gi0/0 standby 300 preempt R2 interface Gi0/0 standby 300 delay minimum 100

  Correct Answer: B

• Question 520:

  Refer to the exhibit.

  

  An engineer applies this configuration to R1:

  ip nat inside source static 192.168.10.17 192.168.27.42

  Which command set should be added to complete the configuration?

  

  A. Option A

  B. Option B

  C. Option C

  D. Option D

  Correct Answer: C