Verified 350-401 Exam Dumps Q&As - Provide 350-401 with Correct Answers
Pass Your 350-401 Dumps Free Latest Cisco Practice Tests
NEW QUESTION 169
What NTP Stratum level is a server that is connected directly to an authoritative time source?
- A. Stratum 0
- B. Stratum 14
- C. Stratum 15
- D. Stratum 1
Answer: D
Explanation:
Explanation
The stratum levels define the distance from the reference clock. A
reference clock is a stratum 0 device that is assumed to be accurate and has little or no delay associated with it. Stratum 0 servers cannot be used on the network but they are directly connected to computers which then operate as stratum-1 servers. A stratum 1 time server acts as a primary network time standard.
A stratum 2 server is connected to the stratum 1 server; then a stratum 3 server is connected to the stratum 2 server and so on. A stratum 2 server gets its time via NTP packet requests from a stratum 1 server. A stratum 3 server gets its time via NTP packet requests from a stratum-2 server... A stratum server may also peer with other stratum servers at the same level to provide more stable and robust time for all devices in the peer group (for example a stratum 2 server can peer with other stratum 2 servers).
NTP uses the concept of a stratum to describe how many NTP hops away a
machine is from an authoritative time source. A stratum 1 time server
typically has an authoritative time source (such as a radio or atomic clock, or a Global Positioning System (GPS) time source) directly attached, a stratum 2 time server receives its time via NTP from a stratum 1 time server, and so on.
Reference: https://www.cisco.com/c/en/us/td/docs/routers/asr920/con
figuration/guide/bsm/16-6-1/b-bsm-xe-16-6-1-asr920/bsm-timecalendar-
set.html
NEW QUESTION 170
Drag and drop the characteristics from the left onto the technology types on the right.
Answer:
Explanation:
NEW QUESTION 171
Refer to the exhibit.
You have just created a new VRF on PE3. You have enabled debug
ip bgp vpnv4 unicast updates on PE1, and you can see the route in the debug, but not in the BGP VPNv4 table. Which two statements are true? (Choose two)
- A. PE1 will reject the route due to automatic route filtering
- B. After you configure route-target import 999:999 for a VRF on PE1, the route will be accepted
- C. After you configure route-target import 999:999 for a VRF on PE3, the route will be accepted
- D. VPNv4 is not configured between PE1 and PE3
- E. address-family ipv4 vrf is not configured on PE3
Answer: A,B
Explanation:
Explanation
Because some PE routers might receive routing information they do not require, a basic requirement is to be able to filter the MP-iBGP updates at the ingress to the PE router so that the router does not need to keep this information in memory.
The Automatic Route Filtering feature fulfills this filtering requirement. This feature is available by default on all PE routers, and no additional configuration is necessary to enable it. Its function is to filter automatically VPN-IPv4 routes that contain a route target extended community that does not match any of the PE's configured VRFs. This effectively discards any unwanted VPN-IPv4 routes silently, thus reducing the amount of information that the PE has to store in memory -> Answer 'PE1 will reject the route due to automatic route filtering' is correct.
Reference: MPLS and VPN Architectures Book, Volume 1
The reason that PE1 dropped the route is there is no "route-target import 999:999" command on PE1 (so we see the "DENIED due to: extended community not supported" in the debug) so we need to type this command to accept this route -> Answer 'After you configure route-target import 999:999 for a VRF on PE1, the route will be accepted' is correct.
NEW QUESTION 172
Refer to the exhibit.
The OSPF neighborship fails between two routers. What is the cause of this issue?
- A. The OSPF router ID is missing on this router.
- B. The OSPF router ID is missing on the neighbor router.
- C. There is an MTU mismatch between the two routers.
- D. The OSPF process is stopped on the neighbor router.
Answer: C
Explanation:
Explanation
cisco_R2(config-subif)#do debug ip osp adj
OSPF adjacency debugging is on
cisco_R2(config-subif)#ip mtu 1111 <<<<<<<<<<<<<<<<
cisco_R2(config-subif)#
cisco_R2(config-subif)#
cisco_R2(config-subif)#do clear ip ospf
!!!debug shows this:
cisco_R2(config-subif)#
*Dec 23 13:02:27.164: OSPF-1 ADJ Et0/0.10: Rcv DBD from 6.6.6.6 seq 0x19FD opt 0x52 flag 0x7 len 32 mtu 1500 state EXSTART <<<<<<<<<<<<<
*Dec 23 13:02:27.164: OSPF-1 ADJ Et0/0.10: Nbr 6.6.6.6 has larger interface MTU <<<<<<<<<
*Dec 23 13:02:27.164: OSPF-1 ADJ Et0/0.10: Rcv DBD from 6.6.6.6 seq 0x26B opt 0x52 flag 0x2 len 112 mtu 1500 state EXSTART
*Dec 23 13:02:27.164: OSPF-1 ADJ Et0/0.10: Nbr 6.6.6.6 has larger interface MTU
*Dec 23 13:02:27.395: OSPF-1 ADJ Et0/0.10: Rcv DBD from 6.6.6.6 seq 0x26B opt 0x52 flag 0x2 len 112 mtu 1500 state EXSTART
NEW QUESTION 173
Refer to the exhibit.
Edge-01 is currently operational as the HSRP primary with priority 110. Which command on Edge-02 causes it to take over the forwarding role when Edge-01 is down?
- A. standby 10 preempt
- B. standby 10 priority
- C. standby 10 track
- D. standby 10 timers
Answer: B
NEW QUESTION 174
Refer to the exhibit.
What does the snippet of code achieve?
- A. It creates a temporary connection to a Cisco Nexus device and retrieves a token to be used for API calls.
- B. It creates an SSH connection using the SSH key that is stored, and the password is ignored.
- C. It opens a tunnel and encapsulates the login information, if the host key is correct.
- D. It opens an ncclient connection to a Cisco Nexus device and maintains it for the duration of the context.
Answer: B
NEW QUESTION 175
Which two parameters are examples of a QoS traffic descriptor? (Choose two)
- A. DSCP
- B. bandwidth
- C. packet size
- D. ToS
- E. MPLS EXP bits
Answer: A,E
NEW QUESTION 176
An engineer must protect the password for the VTY lines against over-the-shoulder attacks. Which configuration should be applied?
- A. username netadmin secret 9 $9$vFpMf8elb4RVV8$seZ/bDA
- B. line vty 0 15 p3ssword XD822j
- C. username netadmin secret 7$1$42J36k33008Pyh4QzwXyZ4
- D. service password-ncryption
Answer: D
NEW QUESTION 177 
Refer to the exhibit. A network engineer configures a GRE tunnel and enters the show Interface tunnel command. What does the output confirm about the configuration?
- A. The keepalive value is modified from the default value.
- B. Interface tracking is configured.
- C. The physical interface MTU is 1476 bytes.
- D. The tunnel mode is set to the default.
Answer: D
NEW QUESTION 178
Refer to the exhibit.
Which configuration change ensures that R1 is the active gateway whenever it is in a functional state for the
172.30.110.0724 network?
A)
B)
C)
D)
- A. Option
- B. Option
- C. Option
- D. Option
Answer: A
NEW QUESTION 179
Drag and drop the characteristics from the left onto the routing protocols they describe on the right.
Answer:
Explanation:
Explanation
EIGRP maintains alternative loop-free backup via the feasible successors. To qualify as a feasible successor, a router must have an Advertised Distance (AD) less than the Feasible distance (FD) of the current successor route.
Advertised distance (AD): the cost from the neighbor to the destination. Feasible distance (FD): The sum of the AD plus the cost between the local router and the next-hop router
NEW QUESTION 180
Which access controls list allows only TCP traffic with a destination port range of 22-433, excluding port 80?
- A. Deny tcp any any ne 80
Permit tcp any any range 22 443 - B. Deny tcp any any eq 80
Permit tcp any any gt 21 it 444 - C. Permit tcp any any range 22 443
Deny tcp any any eq 80 - D. Permit tcp any any ne 80
Answer: C
Explanation:
Although the statement "permit tcp any any gt ... lt ..." seems to be correct but in fact it is not.
Each ACL statement only supports either "gt" or "lt" but not both:
In fact answer 'Permit tcp any any range 22 443
Deny tcp any any eq 80
eq 80".
NEW QUESTION 181
Refer to the exhibit.
CR2 and CR3 ate configured with OSPF. Which configuration, when applied to CR1. allows CR1 to exchange OSPF Information with CR2 and CR3 but not with other network devices or on new Interfaces that are added to CR1?
A)
B)
C)
D)
- A. Option C
- B. Option A
- C. Option B
- D. Option D
Answer: D
NEW QUESTION 182
Which protocol is implemented to establish secure control plane adjacencies between Cisco SD-WAN nodes?
- A. IKF
- B. DTLS
- C. IPsec
- D. ESP
Answer: B
NEW QUESTION 183
Which statement about TLS is true when using RESTCONF to write configurations on network devices?
- A. It is provided using NGINX acting as a proxy web server.
- B. It is no supported on Cisco devices.
- C. It is used for HTTP and HTTPs requests.
- D. It required certificates for authentication.
Answer: A
Explanation:
When a device boots up with the startup configuration, the nginx process will be running. NGINX is an internal webserver that acts as a proxy webserver. It provides Transport Layer Security (TLS)-based HTTPS. RESTCONF request sent via HTTPS is first received by the NGINX proxy web server, and the request is transferred to the confd web server for further syntax/semantics check.
Reference:
ios/prog/configuration/168/b_168_programmability_cg/RESTCONF.html
The https-based protocol-RESTCONF (RFC 8040), which is a stateless protocol, uses secure HTTP methods to provide CREATE, READ, UPDATE and DELETE (CRUD) operations on a conceptual datastore containing YANG-defined data -> RESTCONF only uses HTTPs.
NEW QUESTION 184
Drag and drop the characteristics from the left onto the routing protocols they describe on the right.
Answer:
Explanation:
NEW QUESTION 185
Refer to the exhibit.
The inside and outside interfaces in the NAT configuration of this device have been correctly identified. What is the effect of this configuration?
- A. NAT64
- B. PAT
- C. dynamic NAT
- D. static NAT
Answer: B
Explanation:
The command "ip nat inside source list 1 interface gigabitethernet0/0 overload"
translates all source addresses that pass access list 1, which means 172.16.1.0/24
subnet, into an address assigned to gigabitethernet0/0 interface. Overload keyword
allows to map multiple IP addresses to a single registered IP address (many-toone)
by using different ports so it is called Port Address Translation (PAT).
NEW QUESTION 186
Drag and drop the characteristics from the left onto the routing protocols they describe on the right.
Answer:
Explanation:
NEW QUESTION 187
......
Get Top-Rated Cisco 350-401 Exam Dumps Now: https://www.getvalidtest.com/350-401-exam.html
350-401 Exam Dumps Pass with Updated Tests Dumps: https://drive.google.com/open?id=1GtuSCeloTUqJbC8zZ5JZ0fQ3ea__mlcH