Cisco CCNP Enterprise 350-401 Questions & Answers

• Question 51:

  Which component of TCP defines the maximum packet size that a host interface is able to accept on ingress?

  A. MTU

  B. PATH MTU

  C. Window size

  D. MRU

  Correct Answer: D

  A maximum transmission unit (MTU) is the largest length of a packet that can be transmitted out of an interface toward a destination. maximum receive unit (MRU) is the largest packet size that an interface can receive, so it's an ingress interface parameter.

  https://www.networkers-online.com/p/understand-mtu-and-mru-the-full-story

• Question 52:

  Which of the following are benefits from implementing the use of VXLAN's in a network? (Choose two)

  A. Increased scalability since VXLAN extends the IF field to 24 bits, providing up to 16 million unique ID values.

  B. Makes the implementation of Spanning Tree more efficient.

  C. Can be used to replace layer 3 routing protocols and increase routing efficiency at layer 2.

  D. Supports Equal Cost Multi-pathing (ECMP) so that load balancing over multiple links can be used.

  Correct Answer: AD

  VXLAN is a MAC in IP/UDP(MAC-in-UDP) encapsulation technique with a 24-bit segment identifier in the form of a VXLAN ID. The larger VXLAN ID allows LAN segments to scale to 16 million in a cloud network. In addition, the IP/UDP encapsulation allows each LAN segment to be extended across existing Layer 3 networks making use of Layer 3 equal-cost multipath (ECMP).

  reference: https://www.cisco.com/c/en/us/td/docs/switches/datacenter/sw/nx-os/vxlan/configuration/guide/b_NX-OS_VXLAN_Configuration_Guide/overview.pdf

• Question 53:

  When does a Cisco StackWise primary switch lose its role?

  A. when a stack member fails

  B. when the stack primary is reset

  C. when a switch with a higher priority is added to the stack

  D. when the priority value of a stack member is changed to a higher value

  Correct Answer: C

• Question 54:

  How does a fabric AP fit in the network?

  A. It is in local mode and must be connected directly to the fabric border node

  B. It is in FlexConnect mode and must be connected directly to the fabric edge switch.

  C. It is in FlexConnect mode and must be connected directly to the fabric border node

  D. It is in local mode and must be connected directly to the fabric edge switch.

  Correct Answer: D

  Reference: https://www.cisco.com/c/en/us/td/docs/solutions/CVD/Campus/sda-sdg-2019oct.html

• Question 55:

  Refer to the exhibit.

  

  An engineer tries to log in to router R1. Which configuration enables a successful login?

  

  A. Option A

  B. Option B

  C. Option C

  D. Option D

  Correct Answer: B

• Question 56:

  What is a characteristic of a Type 2 hypervisor?

  A. It is installed on an operating system and supports other operating systems above it.

  B. It is referred to as a hosted hypervisor.

  C. Problems in the base operating system can affect the entire system.

  D. It is completely independent of the operating system.

  Correct Answer: C

  Type 2 It is completely dependent on Host Operating System for its operations. While having a base operating system allows better specification of policies, any problem in the base operating system affects the entire system even if the hypervisor running above the base OS is secure.

• Question 57:

  Refer to the exhibit

  

  Which two commands are required on route R1 to block FTP and allow all other traffic from the Branch 2 network (Choose two)

  A. access-list 101 deny tcp 10.0.2.0 0.0.0.255 host 10.0.101.3 eq ftp access-list 101 deny tcp 10.0.2.0 0.0.0.255 host 10.0.101.3 eq ftp-data access-list 101 permit ip any any

  B. access-list 101 deny tcp 10.0.2.0 0.0.0.255 host 10.0.101.3 eq ftp-data access-list 101 permit ip any any

  C. interface GigabitEthernet0/0 ip address 10.0.0.1 255.255.255.252 ip access-group 101 out

  D. access-list 101 deny tcp 10.0.2.0 0.0.0.255 host 10.0.101.3 eq ftp access-list 101 permit ip any any

  E. interface GigabitEthernet0/0 ip address 10.0.101.1 255.255.255.252 ip access-group 101 in

  Correct Answer: AC

  A included BandD ACL C is correct, block Branch 2 ftp traffic exit the R1 to 10.0.101.0/24. E is setting on WAN port to block ftp traffic in R1

• Question 58:

  Which Quality of Service (QoS) mechanism allows for the creation of multiple levels of QoS policy, providing a more granular degree of traffic management?

  A. Policing

  B. H-QoS

  C. Congestion avoidance

  D. Dual Policy

  Correct Answer: B

  Hierarchical QoS (H-QoS)

• Question 59:

  You need to weigh the pros and cons of deploying a premise-based data center versus using a cloud-based data center deployment. What is an advantage of using a premise-based solution? (Choose two.)

  A. Lower application latency for end users

  B. Easily scalable

  C. Lower capital costs

  D. Reduced deployment times

  E. Increased control over the environment

  Correct Answer: AE

  AE sounds like the only two correct-ish answers in this one, but A is kinda debatable since especially with Work from home culture / VPN's, it doesn't really matter anymore since you'd always connect either to on-prem, or to a cloud environment.

• Question 60:

  Refer to the following two images regarding QoS Traffic Shaping and Traffic Policing: Image A:

  

  Image B:

  

  Based on the images, which of the following are true? (Choose two.)

  A. Image A depicts the result of Traffic Shaping

  B. Image A depicts the result of Traffic Policing

  C. Image B depicts the result of Traffic Shaping

  D. Image B depicts the result of Traffic Policing

  Correct Answer: BC

  reference:https://www.cisco.com/c/it_it/support/docs/quality-of-service-qos/qos-policing/19645-policevsshape.html