ExamTopics 350-401 Snapshot

Question #: 261 Topic #: 1

826893

Answers

Correct answer and vote data stay hidden until you click reveal.

A. SSL
B. Cisco TrustSec
C. MACsec
D. IPsec

Discussions

Discussions hidden. Click reveal to view 1 linked thread.

Question #: 262 Topic #: 1

826894

Answers

Correct answer and vote data stay hidden until you click reveal.

A. ISE server
B. RADIUS server
C. anchor WLC
D. local WLC

Discussions

Discussions hidden. Click reveal to view 1 linked thread.

Question #: 263 Topic #: 1

826895

Answers

Correct answer and vote data stay hidden until you click reveal.

A. MD5
B. PAP
C. CHAP
D. AES

Discussions

Discussions hidden. Click reveal to view 1 linked thread.

Question #: 264 Topic #: 1

826896

Answers

Correct answer and vote data stay hidden until you click reveal.

A. VXLAN
B. LISP
C. Cisco TrustSec
D. IS-IS

Discussions

Discussions hidden. Click reveal to view 1 linked thread.

Question #: 265 Topic #: 1

826897

Answers

Correct answer and vote data stay hidden until you click reveal.

A. The enable secret password is protected via stronger cryptography mechanisms.
B. The enable password cannot be decrypted.
C. The enable password is encrypted with a stronger encryption method.
D. There is no difference and both passwords are encrypted identically.

Discussions

Discussions hidden. Click reveal to view 1 linked thread.

Question #: 266 Topic #: 1

826898

Answers

Correct answer and vote data stay hidden until you click reveal.

A. deny tcp any any eq 80 permit tcp any any gt 21 lt 444
B. permit tcp any any range 22 443 deny tcp any any eq 80
C. permit tcp any any eq 80
D. deny tcp any any eq 80 permit tcp any any range 22 443

Discussions

Discussions hidden. Click reveal to view 1 linked thread.

Question #: 267 Topic #: 1

826899

Answers

Correct answer and vote data stay hidden until you click reveal.

A. A TACACS+ server is checked first. If that check fails, a local database is checked.
B. A TACACS+ server is checked first. If that check fails, a RADIUS server is checked. If that check fails, a local database is checked.
C. A local database is checked first. If that check fails, a TACACS+ server is checked. If that check fails, a RADIUS server is checked.
D. A local database is checked first. If that check fails, a TACACS+ server is checked.

Discussions

Discussions hidden. Click reveal to view 1 linked thread.

Question #: 268 Topic #: 1

826900

Answers

Correct answer and vote data stay hidden until you click reveal.

A. the controller management interface
B. the controller virtual interface
C. the interface specified on the WLAN configuration
D. any interface configured on the WLC

Discussions

Discussions hidden. Click reveal to view 1 linked thread.

Question #: 269 Topic #: 1

826901

Answers

Correct answer and vote data stay hidden until you click reveal.

A. Cisco Firepower and FireSIGHT
B. Cisco Stealthwatch system
C. Advanced Malware Protection
D. Cisco Web Security Appliance

Discussions

Discussions hidden. Click reveal to view 1 linked thread.

Question #: 270 Topic #: 1

826902

Answers

Correct answer and vote data stay hidden until you click reveal.

A. Use Cisco Firepower and block traffic to TOR networks.
B. Use Cisco AMP deployment with the Malicious Activity Protection engine enabled.
C. Use Cisco Firepower with Intrusion Policy and snort rules blocking SMB exploitation.
D. Use Cisco AMP deployment with the Exploit Prevention engine enabled.

Discussions

Discussions hidden. Click reveal to view 1 linked thread.

Question #: 271 Topic #: 1

826903

Answers

Correct answer and vote data stay hidden until you click reveal.

A. R3(config)#time-range WEEKEND R3(config-time-range)#periodic Saturday Sunday 00:00 to 23:59 R3(config)#access-list 150 deny tcp host 10.3.3.3 host 10.2.2.2 eq 23 time-range WEEKEND R3(config)#access-list 150 permit ip any any time-range WEEKEND R3(config)#interface G0/1 R3(config-if)#ip access-group 150 out
B. R1(config)#time-range WEEKEND R1(config-time-range)#periodic weekend 00:00 to 23:59 R1(config)#access-list 150 deny tcp host 10.3.3.3 host 10.2.2.2 eq 23 time-range WEEKEND R1(config)#access-list 150 permit ip any any R1(config)#interface G0/1 R1(config-if)#ip access-group 150 in
C. R3(config)#time-range WEEKEND R3(config-time-range)#periodic weekend 00:00 to 23:59 R3(config)#access-list 150 permit tcp host 10.3.3.3 host 10.2.2.2 eq 23 time-range WEEKEND R3(config)#access-list 150 permit ip any any time-range WEEKEND R3(config)#interface G0/1 R3(config-if)#ip access-group 150 out
D. R1(config)#time-range WEEKEND R1(config-time-range)#periodic Friday Sunday 00:00 to 00:00 R1(config)#access-list 150 deny tcp host 10.3.3.3 host 10.2.2.2 eq 23 time-range WEEKEND R1(config)#access-list 150 permit ip any any R1(config)#interface G0/1 R1(config-if)#ip access-group 150 in

Discussions

Discussions hidden. Click reveal to view 1 linked thread.

Question #: 272 Topic #: 1

826904

Answers

Correct answer and vote data stay hidden until you click reveal.

A. permit tcp host 172.16.0.2 host 192.168.0.5 eq 8080
B. permit tcp host 192.168.0.5 host 172.16.0.2 eq 8080
C. permit tcp host 192.168.0.5 eq 8080 host 172.16.0.2
D. permit tcp host 192.168.0.5 lt 8080 host 172.16.0.2

Discussions

Discussions hidden. Click reveal to view 1 linked thread.

Question #: 273 Topic #: 1

826905

Answers

Correct answer and vote data stay hidden until you click reveal.

A. TCP traffic with the URG bit set is allowed.
B. TCP traffic with the SYN bit set is allowed.
C. TCP traffic with the ACK bit set is allowed.
D. TCP traffic with the DF bit set is allowed.

Discussions

Discussions hidden. Click reveal to view 1 linked thread.

Question #: 274 Topic #: 1

826906

Answers

Correct answer and vote data stay hidden until you click reveal.

A. ip access-list extended 200 deny tcp host 10.10.10.1 eq 80 any permit ip any any
B. ip access-list extended 10 deny tcp host 10.10.10.1 any eq 80 permit ip any any
C. ip access-list extended NO_HTTP deny tcp host 10.10.10.1 any eq 80
D. ip access-list extended 100 deny tcp host 10.10.10.1 any eq 80 permit ip any any

Discussions

Discussions hidden. Click reveal to view 1 linked thread.

Question #: 275 Topic #: 1

826907

Answers

Correct answer and vote data stay hidden until you click reveal.

A. Add the access-class keyword to the username command.
B. Add the autocommand keyword to the aaa authentication command.
C. Add the access-class keyword to the aaa authentication command.
D. Add the autocommand keyword to the username command.

Discussions

Discussions hidden. Click reveal to view 1 linked thread.

Question #: 276 Topic #: 1

826908

Answers

Correct answer and vote data stay hidden until you click reveal.

A. All traffic will be policed based on access-list 120.
B. If traffic exceeds the specified rate, it will be transmitted and remarked.
C. Class-default traffic will be dropped.
D. ICMP will be denied based on this configuration.

Discussions

Discussions hidden. Click reveal to view 1 linked thread.

Question #: 277 Topic #: 1

826909

Discussions

Discussions hidden. Click reveal to view 1 linked thread.

Question #: 278 Topic #: 1

826910

Answers

Correct answer and vote data stay hidden until you click reveal.

A. The device will allow users at 192.168.0.202 to connect to vty lines 0 through 4 using the password ciscotestkey.
B. The device will authenticate all users connecting to vty lines 0 through 4 against TACACS+.
C. The device will allow only users at 192.168.0.202 to connect to vty lines 0 through 4.
D. When users attempt to connect to vty lines 0 through 4, the device will authenticate them against TACACS+ if local authentication fails.

Discussions

Discussions hidden. Click reveal to view 1 linked thread.

Question #: 279 Topic #: 1

826911

Answers

Correct answer and vote data stay hidden until you click reveal.

A. inline tap
B. high availability
C. clustering
D. tap

Discussions

Discussions hidden. Click reveal to view 1 linked thread.

Question #: 280 Topic #: 1

826912

Discussions

Discussions hidden. Click reveal to view 1 linked thread.