Cisco CCNP Enterprise 350-401 Questions & Answers

• Question 61:

  In a Cisco SD-Access fabric architecture, which of the following are valid device roles (Choose three.)

  A. Control Plane Node

  B. Access routing device

  C. Edge Node

  D. Border Node

  E. Distributed Node

  Correct Answer: ACD

• Question 62:

  Which controller is capable of acting as a STUN server during the onboarding process of Edge devices?

  A. vBond

  B. vSmart

  C. vManage

  D. PNP server

  Correct Answer: A

  vbond-as-stun-server:

  Enable Session Traversal Utilities for NAT (STUN) to allow the tunnel interface to discover its public IP address and port number when the vEdge router is located behind a NAT (on vEdge routers only).

  When you configure this command, vEdge routers can exchange their public IP addresses and port numbers over private TLOCs.

  With this configuration, the vEdge router uses the vBond orchestrator as a STUN server, so the router can determine its public IP address and public port number. (With this configuration, the router cannot learn the type of NAT that it is

  behind.)

  No overlay network control traffic is sent and no keys are exchanged over tunnel interface configured to the the vBond orchestrator as a STUN server. However, BFD does come up on the tunnel, and data traffic can be sent on it.

• Question 63:

  Refer to the exhibit.

  

  A network engineer is configuring OSPF between router R1 and router R2. The engineer must ensure that a DR/BDR election does not occur on the Gigabit Ethernet interfaces in area 0. Which configuration set accomplishes this goal?

  A. R1(config-if)interface Gi0/0 R1(config-if)ip ospf network point-to-point

  R2(config-if)interface Gi0/0

  R2(config-if)ip ospf network point-to-point

  B. R1(config-if)interface Gi0/0 R1(config-if)ip ospf network broadcast R2(config-if)interface Gi0/0 R2(config-if)ip ospf network broadcast

  C. R1(config-if)interface Gi0/0 R1(config-if)ip ospf database-filter all out R2(config-if)interface Gi0/0 R2(config-if)ip ospf database-filter all out

  D. R1(config-if)interface Gi0/0 R1(config-if)ip ospf priority 1 R2(config-if)interface Gi0/0 R2(config-if)ip ospf priority 1

  Correct Answer: A

  Broadcast and Non-Broadcast networks elect DR/BDR while Point-to-point/multipoint do not elect DR/BDR. Therefore we have to set the two Gi0/0 interfaces to point-to-point or point-to-multipoint network to ensure that a DR/BDR election does not occur.

• Question 64:

  Which of the following are valid statements when configuring Nonstop Forwarding (NSF) with Stateful Switchover (SSO) on a Cisco device? (Choose two.)

  A. supports multicast routing protocols

  B. Supports IPv4 and IPv6

  C. Nonstop Forwarding requires SSO to also be configured

  D. HSRP is not supported with NSF/SSO

  E. Improper implementation of NSF/SSO can result in routing loops

  Correct Answer: CD

  NSF capability is supported for IPv4 routing protocols only. NSF capability is not supported for IPv6 routing protocols.

  NSF does not support IP Multicast Routing, as it is not SSO-aware.

  You must configure SSO in order to use NSF with any supported protocol.

  The Hot Standby Routing Protocol (HSRP) is not supported with NSF SSO. Do not use HSRP with NSF SSO.

  https://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst9400/software/release/16-6/configuration_guide/stck_mgr_ha/b_166_nsf_sso_9400_cg.html

• Question 65:

  What are two benefits of virtual switching when compared to hardware switching? (Choose two.)

  A. increased MTU size

  B. hardware independence

  C. VM-level isolation

  D. increased flexibility

  E. extended 802.1Q VLAN range

  Correct Answer: BD

• Question 66:

  You have configured router R1 with multiple VRF's in order to support multiple customer VPN networks. If you wanted to see the best path for the 10.2.1.0.24 route in VRF Green, what command would you use?

  A. show ip route vrf Green 10.2.1.0

  B. show ip route 10.2.1.0 vrf Green

  C. show route all 10.2.1.0

  D. show ip route 10.2.1.0 Green

  Correct Answer: A

  #show ip route vrf mgmt 10.100.10.1 % IP routing table vrf mgmt does not exist

• Question 67:

  Which of the following statements are true regarding the Link Management Protocol (LMP) when used in the Cisco Stackwise virtual link? (Choose two.)

  A. It determines the switch priority.

  B. It negotiates the version of the virtual header

  C. It verifies link integrity via bidirectional forwarding

  D. It performs auto discovery of other active Stackwise switches

  Correct Answer: BC

  The Link Management Protocol (LMP) is activated on each link of the StackWise Virtual link as soon as it is brought up online. The LMP performs the following functions:

  1.

  Verifies link integrity by establishing bidirectional traffic forwarding, and rejects any unidirectional links

  2.

  Exchanges periodic hellos to monitor and maintain the health of the links

  3.

  Negotiates the version of StackWise Virtual header between the switches StackWise Virtual link role resolution https://www.cisco.com/c/en/us/products/collateral/switches/catalyst-9000/nb-06-cat-9k-stack-wp-cte-en.html

• Question 68:

  In a Cisco SD-Access wireless network, which device is used as an entry and exit point in and out of the fabric?

  A. fabric edge node

  B. control plane node

  C. fabric border node

  D. fabric access points

  Correct Answer: D

• Question 69:

  The Overlay Management Protocol (OMP) is used as the control plane protocol and forms peers between the VSmart Controller and the SD-WAN edge devices. OMP is responsible for advertising which three types of routes in the SD-WAN network? (Choose three.)

  A. OMP routes

  B. TLOCs

  C. MP-BGP

  D. LISP routes

  E. Service routes

  Correct Answer: ABE

  https://www.cisco.com/c/en/us/td/docs/routers/sdwan/configuration/policies/vedge/policies-book/control-policies.html

• Question 70:

  Which of the following are the two components of the two-tier modern data center design? (Choose two.)

  A. Distribution

  B. Core

  C. Access

  D. Leaf

  E. Spine

  Correct Answer: DE

  the question is in modern data center not a classical networkd design