Pass Cisco 350-401 Exam Info and Free Practice Test
New 2022 Latest Questions 350-401 Dumps - Use Updated Cisco Exam
Virtualization (10%)
- Describing the network virtualization concepts, including LISP and VXLAN.
- Describing 1 and 2 types of hypervisor as well as virtual switching & virtual machine;
- Configuring and verifying the information path virtualization technologies such as virtual routing and forwarding as well as IPsec and GRE tunneling;
NEW QUESTION 33
Refer to the exhibit.
Which two commands ensure that DSW1 becomes root bridge for VLAN 10 and 20?
- A. spanning-tree mst 1 root primary
- B. spanning-tree mstp vlan 10,20 root primary
- C. spanning-tree mst 1 priority 4096
- D. spanning-tree mst 1 priority 1
- E. spanning-tree mst vlan 10,20 priority root
Answer: A,C
Explanation:
Explanation
NEW QUESTION 34
In an SD-Access solution what is the role of a fabric edge node?
- A. to connect wired endpoint to the SD-Access fabric
- B. to connect external Layer 3- network to the SD-Access fabric
- C. to advertise fabric IP address space to external network
- D. to connect the fusion router to the SD-Access fabric
Answer: A
Explanation:
Explanation
+ Fabric edge node: This fabric device (for example, access or distribution layer device) connects wired endpoints to the SDA fabric.
NEW QUESTION 35
Refer to the exhibit.
An engineer must ensure that all traffic leaving AS 200 will choose Link 2 as the exit point. Assuming that all BGP neighbor relationships have been formed and that the attributes have not been changed on any of the routers, which configuration accomplish task?
- A. R3(config-router)neighbor 10.1.1.1 weight 200
- B. R3(config-router)bgp default local-preference 200
- C. R4(config-router)bgp default local-preference 200
- D. R4(config-router)nighbor 10.2.2.2 weight 200
Answer: C
NEW QUESTION 36
Refer to the exhibit.
What is the JSON syntax that is formed from the data?
- A. {"Name::"Bob Johnson", "Age": 75, "Alive":true, "Favorite Foods": ["Cereal", "Mustard", "Onions"]}
- B. {'Name':'Bob Johnson', 'Age': 75, 'Alive': True, 'Favorite Foods': 'Cereal', 'Mustard', 'Onions'}
- C. {"Name":"Bob Johnson", "Age": Seventyfive, "Alive": true, "Favorite Foods":["Cereal, "Mustard",
"Onions"]} - D. {Name: Bob Johnson, Age: 75, Alive: true, Favorite Foods: [Cereal, Mustard, Onions]}
Answer: A
NEW QUESTION 37
Which statement about TLS is true when using RESTCONF to write configurations on network devices?
- A. It required certificates for authentication.
- B. It is used for HTTP and HTTPs requests.
- C. It is provided using NGINX acting as a proxy web server.
- D. It is no supported on Cisco devices.
Answer: C
Explanation:
Explanation
When a device boots up with the startup configuration, the nginx process will be running. NGINX is an internal webserver that acts as a proxy webserver. It provides Transport Layer Security (TLS)-based HTTPS. RESTCONF request sent via HTTPS is first received by the NGINX proxy web server, and the request is transferred to the confd web server for further syntax/semantics check.
Reference: https://www.cisco.com/c/en/us/td/docs/iosxml/ios/prog/configuration/168/b_168_programmability_cg/RESTCONF.html
The https-based protocol-RESTCONF (RFC 8040), which is a stateless protocol, uses secure HTTP methods to provide CREATE, READ, UPDATE and DELETE (CRUD) operations on a conceptual datastore containing YANG-defined data -> RESTCONF only uses HTTPs.
NEW QUESTION 38
Which OSPF networks types are compatible and allow communication through the two peering devices?
- A. point-to-multipoint to nonbroadcast
- B. broadcast to nonbroadcast
- C. point-to-multipoint to broadcast
- D. broadcast to point-to-point
Answer: B
Explanation:
Explanation
The following different OSPF types are compatible with each other:
+ Broadcast and Non-Broadcast (adjust hello/dead timers)
+ Point-to-Point and Point-to-Multipoint (adjust hello/dead timers)
Broadcast and Non-Broadcast networks elect DR/BDR so they are compatible. Point-topoint/ multipoint do not elect DR/BDR so they are compatible.
NEW QUESTION 39
What is the role of the RP in PIM sparse mode?
- A. The RP maintains default aging timeouts for all multicast streams requested by the receivers.
- B. The RP responds to the PIM join messages with the source of requested multicast group
- C. The RP is the multicast that is the root of the PIM-SM shared multicast distribution tree.
- D. The RP acts as a control-plane node and does not receive or forward multicast packets.
Answer: C
Explanation:
Multicast Distribution Shared Tree - Unlike source trees that have their root at the source, shared trees use a single common root placed at some chosen point in the network. This shared root is called a rendezvous point (RP). Source: https://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst9300/software/release/16-5/configuration_guide/ip_mcast_rtng/b_165_ip_mcast_rtng_9300_cg/b_165_ip_mcast_rtng_9300_9500_cg_chapter_0100.html
https://netcraftsmen.com/pim-sparse-mode/
NEW QUESTION 40
Drag and drop the descriptions from the left onto the QoS components on the right.
Answer:
Explanation:
NEW QUESTION 41
Drag and drop the descriptions of the VSS technology from the left to the right. Not all options are used.
Answer:
Explanation:
Explanation
Graphical user interface Description automatically generated
NEW QUESTION 42
Refer to the exhibit.
An engineer must establish eBGP peering between router R3 and router R4. Both routers should use their loopback interfaces as the BGP router ID. Which configuration set accomplishes this task?
- A. Option C
- B. Option A
- C. Option B
- D. Option D
Answer: B
NEW QUESTION 43 
Refer to the exhibit. What does the error message relay to the administrator who is trying to configure a Cisco IOS device?
- A. A NETCONF request was made for a data model that does not exist.
- B. The NETCONF running datastore is currently locked.
- C. A NETCONF message with valid content based on the YANG data models was made, but the request failed.
- D. The device received a valid NETCONF request and serviced it without error.
Answer: A
Explanation:
Explanation
Reference:
https://www.cisco.com/c/en/us/support/docs/storage-networking/management/200933-YANG-NETCONF-Confi
NEW QUESTION 44
What are two features of NetFlow flow monitoring? (Choose two.)
- A. Can track ingress and egress information
- B. Include the flow record and the flow importer
- C. Copies all ingress flow information to an interface
- D. Does not required packet sampling on interfaces
- E. Can be used to track multicast, MPLS, or bridged traffic.
Answer: A,E
Explanation:
Explanation
The following are restrictions for Flexible NetFlow: + Traditional NetFlow (TNF) accounting is not supported.
+ Flexible NetFlow v5 export format is not supported, only NetFlow v9 export format is supported. + Both ingress and egress NetFlow accounting is supported. + Microflow policing feature shares the NetFlow hardware resource with FNF. + Only one flow monitor per interface and per direction is supported.
Reference:
https://www.cisco.com/en/US/docs/switches/lan/catalyst3850/software/release/3se/consolidated_guide/b_consoli When configuring NetFlow, follow these guidelines and restrictions:
+ Except in PFC3A mode, NetFlow supports bridged IP traffic. PFC3A mode does not support NetFlow bridged IP traffic. + NetFlow supports multicast IP traffic.
Reference: https://www.cisco.com/en/US/docs/general/Test/dwerblo/broken_guide/netflow.html The Flexible NetFlow - MPLS Egress NetFlow feature allows you to capture IP flow information for packets that arrive on a router as Multiprotocol Label Switching (MPLS) packets and are transmitted as IP packets.
This feature allows you to capture the MPLS VPN IP flows that are traveling through the service provider backbone from one site of a VPN to another site of the same VPN Reference:
https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/netflow/configuration/15-mt/nf-15-mt-book/cfg-mpls-netflow
NEW QUESTION 45
Which QoS queuing method transmits packets out of the interface in the order the packets arrive?
- A. priority
- B. FIFO
- C. custom
- D. weighted- fair
Answer: B
NEW QUESTION 46
At which Layer does Cisco DNA Center support REST controls?
- A. YMAL output from responses to API calls
- B. Northbound APIs
- C. EEM applets or scripts
- D. Session layer
Answer: B
NEW QUESTION 47 
Refer to the exhibit. Which result does the python code achieve?
- A. The code converts time to the "year/month/day" time format.
- B. The code encrypts a base64 decrypted password.
- C. The code converts time to the Epoch LINUX time format.
- D. The code converts time to the yyyymmdd representation.
Answer: A
NEW QUESTION 48
Which function does a fabric edge node perform in an SD-Access deployment?
- A. Encapsulates end-user data traffic into LISP.
- B. Connects endpoints to the fabric and forwards their traffic
- C. Provides reachability border nodes in the fabric underlay
- D. Connects the SD-Access fabric to another fabric or external Layer 3 networks
Answer: B
Explanation:
Explanation
There are five basic device roles in the fabric overlay:
+ Control plane node: This node contains the settings, protocols, and mapping tables to provide the endpoint-to-location (EID-to-RLOC) mapping system for the fabric overlay.
+ Fabric border node: This fabric device (for example, core layer device) connects external Layer
3 networks to the SDA fabric.
+ Fabric edge node: This fabric device (for example, access or distribution layer device) connects wired endpoints to the SDA fabric.
+ Fabric WLAN controller (WLC): This fabric device connects APs and wireless endpoints to the SDA fabric.
+ Intermediate nodes: These are intermediate routers or extended switches that do not provide any sort of SD-Access fabric role other than underlay services.
NEW QUESTION 49
A customer requests a network design that supports these requirements:
* FHRP redundancy
* multivendor router environment
* IPv4 and IPv6 hosts
Which protocol does the design include?
- A. VRRP version 2
- B. GLBP
- C. HSRP version 2
- D. VRRP version 3
Answer: C
NEW QUESTION 50
Which exhibit displays a valid JSON file?

- A. Option A
- B. Option C
- C. Option B
- D. Option D
Answer: D
NEW QUESTION 51
Where is radio resource management performed in a cisco SD-access wireless solution?
- A. wireless controller
- B. control plane node
- C. Cisco CMX
- D. DNA Center
Answer: A
Explanation:
Explanation
Fabric wireless controllers manage and control the fabric-mode APs using the same general model as the traditional local-mode controllers which offers the same operational advantages such as mobility control and radio resource management. A significant difference is that client traffic from wireless endpoints is not tunnelled from the APs to the wireless controller. Instead, communication from wireless clients is encapsulated in VXLAN by the fabric APs which build a tunnel to their first-hop fabric edge node. Wireless traffic it tunneled to the edge nodes as the edge nodes provide fabric services such as the Layer 3 Anycast Gateway, policy, and traffic enforcement.
https://www.cisco.com/c/en/us/td/docs/solutions/CVD/Campus/cisco-sda-design-guide.html
NEW QUESTION 52
802.1Q VLAN identifier space is only 12 bits. The VXLAN identifier space is 24 bits. This doubling in size allows the VXLAN ID space to support 16 million Layer 2 segments -> Answer 'VXLAN extends the Layer 2 Segment ID field to 24-bits, which allows up to 4094 unique Layer 2 segments over the same network' is not correct.
VXLAN is a MAC-in-UDP encapsulation method that is used in order to extend a Layer 2 or Layer 3 overlay network over a Layer 3 infrastructure that already exists.
- A. permit tcp host 209.165.200.225 eq 80 host 209.165.201.25
- B. permit tcp host 209.165.201.25 host 209.165.200.225 eq 80
- C. permit tcp host 209.165.200.225 lt 80 host 209.165.201.25
- D. permit tcp host 209.165.200.225 host 209.165.201.25 eq 80
Answer: A
Explanation:
Reference:
lan-and-ethernet-virt.html
NEW QUESTION 53
Drag and drop the Qos mechanisms from the left to the correct descriptions on the right
Answer:
Explanation:
NEW QUESTION 54 
Refer to the exhibit. An engineer configures monitoring on SW1 and enters the show command to verify operation. What does the output confirm?
- A. SPAN session 2 only monitors egress traffic exiting port FastEthernet 0/14.
- B. RSPAN session 1 is incompletely configures for monitoring.
- C. SPAN session 2 monitors all traffic entering and exiting port FastEthernet 0/15.
- D. RSPAN session 1 monitors activity on VLAN 50 of a remote switch.
Answer: B
NEW QUESTION 55
How does EIGRP differ from OSPF?
- A. It is leveraged for dynamic endpoint to group mapping and policy definition.
- B. It provides GUI management and abstraction via apps that share context.
- C. It manages the LISP EID database.
- D. it is used to analyze endpoint to app flows and monitor fabric status.
Answer: B
NEW QUESTION 56
Refer to the exhibit
Communication between London and New York is down Which command set must be applied to resolve this issue?
A)
B)
C)
D)
- A. Option B
- B. Option A
- C. Option C
- D. Option D
Answer: A
NEW QUESTION 57
Drag and drop the descriptions of the VSS technology from the left to the right. Not all options are used.
Answer:
Explanation:
NEW QUESTION 58
......
What are the prestigious career opportunities?
With CCIE Enterprise Infrastructure, CCIE Enterprise Wireless, and/or CCNP Enterprise under your belt, you can boost your career to a higher level. Thus, the certified professionals can take up various positions, including an Enterprise IT Infrastructure Architect, an Infrastructure Automation Engineer, a Director of Infrastructure, an IT Infrastructure Security Engineer, a Senior Enterprise Architect, a CCIE Consultant, a Principal Wireless Network Engineer, an Infrastructure Solutions Architect, and many more. The average salary can be up to $120,000 per year, depending on your job role, related tasks, and working experience.
Latest 350-401 Exam Dumps Cisco Exam: https://www.easy4engine.com/350-401-test-engine.html
Pass Cisco 350-401 PDF Dumps Recently Updated 305 Questions: https://drive.google.com/open?id=1s1CmM4JHEM0Ms146RTGSpiVp3u2fGAfY

