350-401 Online Practice Questions and Answers

Drag and drop Refer to the exhibit.

An engineer must deny HTTP traffic from host A to host B while allowing all other communication between the hosts.

Drag and drop the commands into the configuration to achieve these results. Some commands may be used more than once. Not all commands are used.

Select and Place:

DRAG DROP

Drag and drop the snippets onto the blanks within the code to construct a script that brings up the failover Ethernet port if the primary port goes down and also shuts down the failover port when the primary returns to service. Not all options are used.

Select and Place:

Refer to the exhibit.

Which code results in the working python script displaying a list of network devices from the Cisco DNA center?

A. network_device_list(dnac["host"], dnac["username"],dnac["password"]) login = dnac_login(dnac) print(dnac_devices)

B. login = dnac_login(dnac["host"], dnac["username"], dnac["password"]) network_device_list(dnac, login) print(dnac_devices)

C. login = dnac_login(dnac["host"], dnac["username"], dnac["password"]) network_device_list(dnac, login) for item in dnac_devices: print(dnac_devices.item)

D. network_device_list(dnac["host"], dnac["username"], dnac["password"]) login = dnac_login(dnac) for item in dnac_devices: print(dnac_devices.item)

What is a benefit of Cisco TrustSec in a multilayered LAN network design?

A. Policy or ACLS are nor required.

B. There is no requirements to run IEEE 802.1X when TrustSec is enabled on a switch port.

C. Applications flows between hosts on the LAN to remote destinations can be encrypted.

D. Policy can be applied on a hop-by-hop basis.

opology: RouterA<>>RouterB<<>>RouterC | | |____________________________| (GRE Tunnel: R-A to R-C)

Router A send packet to Router C with MTU 1500 using GRE Tunnel. What happens to the packet ?

A. Router-C will drop the packet

B. Router-C will de-fragment the packet

C. Router-C will receive the packet

D. Router-B will forward the packet

Refer to the exhibit.

An engineer entered the no spanning-tree bpduguard enable on interface fa1/0/7 command. Which statement describes the effect of this command?

A. Fa1/0/7 remains in err-disabled state until the shutdown/no shutdown command is entered in the interface configuration mode

B. Interface Fa1/0/7 remains in err-disabled state until the errdisable recovery cause bpduguard command is entered in the interface configuration mode

C. Fa1/0/7 remains in err-disabled state until the errdisable recovery bpduguard command is entered in the interface configuration mode

D. Interface Fa1/0/7 remains in err-disabled state until the spanning-tree portfast bpduguard disable command is entered in the interface configuration mode

E. Interface Fa1/0/7 returns to an up and operational state

Refer to the exhibit.

The trunk between Gig1/0/1 of switch SW2 and Gig1/0/1 of switch SW1 is not operational.

Which action resolves this issue?

A. Configure both interfaces in dynamic auto DTP mode and ensure that the switches are in the same VTP domain

B. Configure both interfaces in dynamic desirable DTP mode and ensure that the switches are in the same VTP domain

C. Configure both interfaces in nonegotiate and ensure that the switches are in the different VTP domain

D. Configure both interfaces in dynamic auto DTP mode and ensure that the switches are in the different VTP domain

Which component of TCP defines the maximum packet size that a host interface is able to accept on ingress?

A. MTU

B. PATH MTU

C. Window size

D. MRU

Which of the following statements are true regarding the Link Management Protocol (LMP) when used in the Cisco Stackwise virtual link? (Choose two.)

A. It determines the switch priority.

B. It negotiates the version of the virtual header

C. It verifies link integrity via bidirectional forwarding

D. It performs auto discovery of other active Stackwise switches

Which feature is offered by the Cisco Advanced Malware Protection for Endpoints solution?

A. File Sandboxing

B. NetFlow

C. TrustSec

D. DNS Protection