350-401 practice test

1. Question 1 · 1

   What is the difference between a RIB and a FIB?

   Choose one answer.

   • The FIB is populated based on RIB content.
   • The RIB maintains a mirror image of the FIB.
   • The RIB is used to make IP source prefix-based switching decisions.
   • The FIB is where all IP routing information is stored.

2. Question 2 · 1

   What are two device roles in Cisco SD-Access fabric? (Choose two.)

   Choose all answers that apply.

   • edge node
   • vBond controller
   • access switch
   • core switch
   • border node

3. Question 3 · 1

   Refer to the exhibit. A network engineer configures a new GRE tunnel and enters the show run command. What does the output verify?

   Choose one answer.

   

   • The tunnel keepalive is configured incorrectly because they must match on both sites.
   • The tunnel destination will be known via the tunnel interface.
   • The tunnel will be established and work as expected.
   • The default MTU of the tunnel interface is 1500 bytes.

4. Question 4 · 1

   Which resource must the hypervisor make available to the virtual machines?

   Choose one answer.

   • bandwidth
   • IP address
   • processor
   • secure access

5. Question 5 · 1

   Which two items are found in YANG data models? (Choose two.)

   Choose all answers that apply.

   • HTTP return codes
   • rpc statements
   • JSON schema
   • container statements
   • XML schema

6. Question 6 · 1

   The Radio Resource Management software that is embedded in the Cisco WLC acts as a manager to constantly monitor over-the-air metrics. Which other factor does the Radio Resource Management software detect?

   Choose one answer.

   • presence of rogue APs or malicious SSIDs
   • unauthorized wireless network access
   • repeated attempts to authenticate to a wireless network
   • end-node vulnerabilities

7. Question 7 · 1

   Which action occurs during a Layer 3 roam?

   Choose one answer.

   • The client receives a new IP address after authentication occurs.
   • The client is marked as "Foreign" on the original controller.
   • The client database entry is moved from the old controller to the new controller.
   • Client traffic is tunneled back to the original controller after a Layer 3 roam occurs.

8. Question 8 · 1

   What are two benefits of using Cisco TrustSec? (Choose two.)

   Choose all answers that apply.

   • consistent network segmentation
   • end-to-end traffic encryption
   • advanced endpoint protection against malware
   • simplified management of network access
   • unknown file analysis using sandboxing

9. Question 9 · 1

   Refer to the exhibit. What is achieved by this Python script?

   Choose one answer.

   

   • It reads access list statements into a dictionary list.
   • It displays access list statements on a terminal screen.
   • It configures access list statements.
   • It converts access list statements to a human-readable format.

10. Question 10 · 1

    What is used by vManage to interact with Cisco SD-WAN devices in the fabric?

    Choose one answer.

    • IPsec
    • northbound API
    • RESTCONF
    • southbound API

11. Question 11 · 1

    Which feature does Cisco DNA Center Assurance provide?

    Choose one answer.

    • application policy configuration
    • device onboarding and configuration
    • software upgrade and management
    • data correlation and analysis

12. Question 12 · 1

    What is a common trait between Ansible and Chef?

    Choose one answer.

    • Both rely on a declarative approach.
    • Both are used for mutable infrastructure.
    • Both require a client to be installed on hosts.
    • Both rely on NETCONF.

13. Question 13 · 1

    An engineer must configure a router to allow users to run specific configuration commands by validating the user against the router database. Which configuration must be applied?

    Choose one answer.

    • aaa authentication network default local
    • aaa authorization network default local
    • aaa authentication exec default local
    • aaa authorization exec default local

14. Question 14 · 1

    What is a characteristic of traffic shaping?

    Choose one answer.

    • lacks support for marking or remarking
    • must be applied only to outgoing traffic
    • can be applied in both traffic directions
    • queues out-of-profile packets until the buffer is full

15. Question 15 · 1

    An engineer adds a new switch to a Cisco StackWise stack. The switch that was active before the switch was added is elected as the active switch again. Which action does the active switch take?

    Choose one answer.

    • It suspends traffic forwarding until the new switch is updated with the current running configuration of the stack.
    • It checks the IOS and running configuration of the new switch and updates them if necessary to match the other switches in the stack.
    • It removes any Layer 3 configuration on the new switch to maintain normal Layer 2 functionality on the stack.
    • It clears the MAC table of the stack and relearns the attached devices.

Paid access to all 907 questions

Each purchase applies to this certification. Prices are one-time payments, not monthly subscriptions.