[Nov-2023] Pass 350-401 Exam in First Attempt Updated 350-401 Exam Questions [Q60-Q80]

4/5 - (1 vote)

[Nov-2023] Pass 350-401 Exam in First Attempt Updated 350-401 Exam Questions

CCNP Enterprise Dumps 350-401 Exam for Full Questions – Exam Study Guide

NO.60 Refer to the exhibit.

Which configuration allows Customer2 hosts to access the FTP server of Customer1 that has the IP address of
192.168.1.200?

ip route vrf Customerl 172.16.1.0 255.255.255.0 172.16.1.1 global
ip route vrf Customer 192.168.1.200 255.255.255.255 192.168.1.1 global
ip route 192.168.1.0 255.255.255.0 VlanlO
ip route 172.16.1.0 255.255.255.0 Vlan20

ip route vrf Customerl 172.16.1.0 255.255.255.0 172.16.1.1 Customer2 ip route vrf Customer 192.168.1.200 255.255.255.255 192.168.1.1 Customerl

ip route vrf Customerl 172.16.1.0 255.255.255.0 172.16.1.1 Customerl ip route vrf Customer 192.168.1.200 255.255.255.255 192.168.1.1 Customer2

ip route vrf Customerl 172.16.1.1 255.255.255.255 172.16.1.1 global
ip route vrf Customer 192.168.1.200 255.255.255.0 192.168.1.1 global
ip route 192.168.1.0 255.255.255.0 VlanlO
ip route 172.16.1.0 255.255.255.0 Vlan20

NO.61 Refer to the exhibit. Which set of commands on router r R1 Allow deterministic translation of private hosts PC1, PC2, and PC3 to addresses in the public space?
A)

B)

C)

D)

Option A

Option B

Option C

Option D

NO.62 Which method of account authentication does OAuth 2.0 within REST APIs?

username/role combination

access tokens

cookie authentication

basic signature workflow

Explanation
The most common implementations of OAuth (OAuth 2.0) use one or both of these tokens:
+ access token: sent like an API key, it allows the application to access a user’s data; optionally, access tokens can expire.
+ refresh token: optionally part of an OAuth flow, refresh tokens retrieve a new access token if they have expired. OAuth2 combines Authentication and Authorization to allow more sophisticated scope and validity control.

NO.63 Drag and drop the characteristics from the left onto the appropriate infrastructure deployment types on the right

NO.64 Drag and drop the Qos mechanisms from the left to the correct descriptions on the right

Explanation

NO.65 Refer to the exhibit.

SwitchC connects HR and Sales to the Core switch However, business needs require that no traffic from the Finance VLAN traverse this switch Which command meets this requirement?
A)

B)

C)

D)

Option A

Option B

Option C

Option D

NO.66 Refer to the exhibit.

The network administrator must be able to perform configuration changes when all the RADIUS servers are unreachable. Which configuration allows all commands to be authorized if the user has successfully authenticated?

aaa authorization exec default group radius none

aaa authentication login default group radius local none

aaa authorization exec default group radius if-authenticated

aaa authorization exec default group radius

NO.67 Drag and drop the REST API authentication methods from the left onto their descriptions on the right.

NO.68 What do Cisco DNA southbound APIs provide?

Interface between the controller and the network devices

NETCONF API interface for orchestration communication

RESful API interface for orchestrator communication

Interface between the controller and the consumer

Explanation
The Southbound API is used to communicate with network devices.

NO.69 Drag and drop the solutions that comprise Cisco Cyber Threat Defense from the left onto the objectives they accomplish on the right.

Explanation

NO.70 Refer to the exhibit. An engineer configures a new HSRP group. While reviewing the HSRP status, the engineer sees the logging message generated on R2. Which is the cause of the message?

The same virtual IP address has been configured for two HSRP groups

The HSRP configuration has caused a spanning-tree loop

The HSRP configuration has caused a routing loop

A PC is on the network using the IP address 10.10.1.1

NO.71 Drag and drop the descriptions from the left onto the QoS components on the right.

NO.72 What is the function of cisco DNA center in a cisco SD-access deployment?

It is responsible for routing decisions inside the fabric

It is responsible for the design, management, deployment, provisioning, and assurance of the fabric network devices.

It possesses information about all endpoints, nodes and external networks to the fabric

IT provides integration and automation for all nonfabric nodes and their fabric counterparts.

NO.73 Running the script causes the output in the exhibit. Which change to the first line of the script resolves the error?

from ncclient import

import manager

from ncclient import*

import ncclient manager

NO.74 Which Python code snippet must be added to the script to save the returned configuration as a JSON-formatted file?

NO.75 In an SD-Access solution what is the role of a fabric edge node?

to connect external Layer 3- network to the SD-Access fabric

to connect wired endpoint to the SD-Access fabric

to advertise fabric IP address space to external network

to connect the fusion router to the SD-Access fabric

Explanation
+ Fabric edge node: This fabric device (for example, access or distribution layer device) connects wired endpoints to the SDA fabric.

NO.76 Drag and drop the characteristics from the left onto the routing protocols they describe on the right.

NO.77 Drag and drop characteristics of PIM dense mode from the left to the right.

Explanation
A picture containing diagram Description automatically generated

PIM-DM supports only source trees – that is, (S,G) entries-and cannot be used to build a shared distribution tree.

NO.78 Drag and drop the characteristics from the left onto the routing protocols they describe on the right.

NO.79 Refer to the exhibit. Both controllers are in the same mobility group. Which result occurs when client 1 roams between APs that are registered to different controllers in the same WLAN?

Client 1 contact controller B by using an EoIP tunnel.

CAPWAP tunnel is created between controller A and controller B.

Client 1 users an EoIP tunnel to contact controller A.

The client database entry moves from controller A to controller B.

This is called Inter Controller-L2 Roaming. Inter-Controller (normally layer 2) roaming occurs when a client roam between two APs registered to two different controllers, where each controller has an interface in the client subnet. In this instance, controllers exchange mobility control messages (over UDP port 16666) and the client database entry is moved from the original controller to the new controller.

NO.80 Drag and drop the characteristics from the left onto the routing protocols they describe on the right.