ExamTopics 350-401 Snapshot

Question #: 271 Topic #: 1

826903

Answers

Correct answer and vote data stay hidden until you click reveal.

A. R3(config)#time-range WEEKEND R3(config-time-range)#periodic Saturday Sunday 00:00 to 23:59 R3(config)#access-list 150 deny tcp host 10.3.3.3 host 10.2.2.2 eq 23 time-range WEEKEND R3(config)#access-list 150 permit ip any any time-range WEEKEND R3(config)#interface G0/1 R3(config-if)#ip access-group 150 out
B. R1(config)#time-range WEEKEND R1(config-time-range)#periodic weekend 00:00 to 23:59 R1(config)#access-list 150 deny tcp host 10.3.3.3 host 10.2.2.2 eq 23 time-range WEEKEND R1(config)#access-list 150 permit ip any any R1(config)#interface G0/1 R1(config-if)#ip access-group 150 in
C. R3(config)#time-range WEEKEND R3(config-time-range)#periodic weekend 00:00 to 23:59 R3(config)#access-list 150 permit tcp host 10.3.3.3 host 10.2.2.2 eq 23 time-range WEEKEND R3(config)#access-list 150 permit ip any any time-range WEEKEND R3(config)#interface G0/1 R3(config-if)#ip access-group 150 out
D. R1(config)#time-range WEEKEND R1(config-time-range)#periodic Friday Sunday 00:00 to 00:00 R1(config)#access-list 150 deny tcp host 10.3.3.3 host 10.2.2.2 eq 23 time-range WEEKEND R1(config)#access-list 150 permit ip any any R1(config)#interface G0/1 R1(config-if)#ip access-group 150 in

Discussions

Discussions hidden. Click reveal to view 1 linked thread.

Question #: 272 Topic #: 1

826904

Answers

Correct answer and vote data stay hidden until you click reveal.

A. permit tcp host 172.16.0.2 host 192.168.0.5 eq 8080
B. permit tcp host 192.168.0.5 host 172.16.0.2 eq 8080
C. permit tcp host 192.168.0.5 eq 8080 host 172.16.0.2
D. permit tcp host 192.168.0.5 lt 8080 host 172.16.0.2

Discussions

Discussions hidden. Click reveal to view 1 linked thread.

Question #: 273 Topic #: 1

826905

Answers

Correct answer and vote data stay hidden until you click reveal.

A. TCP traffic with the URG bit set is allowed.
B. TCP traffic with the SYN bit set is allowed.
C. TCP traffic with the ACK bit set is allowed.
D. TCP traffic with the DF bit set is allowed.

Discussions

Discussions hidden. Click reveal to view 1 linked thread.

Question #: 274 Topic #: 1

826906

Answers

Correct answer and vote data stay hidden until you click reveal.

A. ip access-list extended 200 deny tcp host 10.10.10.1 eq 80 any permit ip any any
B. ip access-list extended 10 deny tcp host 10.10.10.1 any eq 80 permit ip any any
C. ip access-list extended NO_HTTP deny tcp host 10.10.10.1 any eq 80
D. ip access-list extended 100 deny tcp host 10.10.10.1 any eq 80 permit ip any any

Discussions

Discussions hidden. Click reveal to view 1 linked thread.

Question #: 275 Topic #: 1

826907

Answers

Correct answer and vote data stay hidden until you click reveal.

A. Add the access-class keyword to the username command.
B. Add the autocommand keyword to the aaa authentication command.
C. Add the access-class keyword to the aaa authentication command.
D. Add the autocommand keyword to the username command.

Discussions

Discussions hidden. Click reveal to view 1 linked thread.

Question #: 276 Topic #: 1

826908

Answers

Correct answer and vote data stay hidden until you click reveal.

A. All traffic will be policed based on access-list 120.
B. If traffic exceeds the specified rate, it will be transmitted and remarked.
C. Class-default traffic will be dropped.
D. ICMP will be denied based on this configuration.

Discussions

Discussions hidden. Click reveal to view 1 linked thread.

Question #: 277 Topic #: 1

826909

Discussions

Discussions hidden. Click reveal to view 1 linked thread.

Question #: 278 Topic #: 1

826910

Answers

Correct answer and vote data stay hidden until you click reveal.

A. The device will allow users at 192.168.0.202 to connect to vty lines 0 through 4 using the password ciscotestkey.
B. The device will authenticate all users connecting to vty lines 0 through 4 against TACACS+.
C. The device will allow only users at 192.168.0.202 to connect to vty lines 0 through 4.
D. When users attempt to connect to vty lines 0 through 4, the device will authenticate them against TACACS+ if local authentication fails.

Discussions

Discussions hidden. Click reveal to view 1 linked thread.

Question #: 279 Topic #: 1

826911

Answers

Correct answer and vote data stay hidden until you click reveal.

A. inline tap
B. high availability
C. clustering
D. tap

Discussions

Discussions hidden. Click reveal to view 1 linked thread.

Question #: 280 Topic #: 1

826912

Discussions

Discussions hidden. Click reveal to view 1 linked thread.

Question #: 281 Topic #: 1

826913

Answers

Correct answer and vote data stay hidden until you click reveal.

A. It is leveraged for dynamic endpoint to group mapping and policy definition.
B. It provides GUI management and abstraction via apps that share context.
C. It is used to analyze endpoint to app flows and monitor fabric status.
D. It manages the LISP EID database.

Discussions

Discussions hidden. Click reveal to view 1 linked thread.

Question #: 282 Topic #: 1

826914

Discussions

Discussions hidden. Click reveal to view 1 linked thread.

Question #: 283 Topic #: 1

826915

Discussions

Discussions hidden. Click reveal to view 1 linked thread.

Question #: 284 Topic #: 1

826916

Answers

Correct answer and vote data stay hidden until you click reveal.

A. real-time threat management to stop DDoS attacks to the core and access networks
B. real-time awareness of users, devices, and traffic on the network
C. malware control
D. dynamic threat control for web traffic

Discussions

Discussions hidden. Click reveal to view 1 linked thread.

Question #: 285 Topic #: 1

826917

Answers

Correct answer and vote data stay hidden until you click reveal.

A. access-list 110 permit tcp any any eq 21 tcp-ack
B. access-list 10 permit tcp any any eq 21 established
C. access-list 110 permit tcp any any eq 21 established
D. access-list 10 permit ip any any eq 21 tcp-ack

Discussions

Discussions hidden. Click reveal to view 1 linked thread.

Question #: 286 Topic #: 1

826918

Answers

Correct answer and vote data stay hidden until you click reveal.

A. permit tcp host 209.165.200.225 lt 80 host 209.165.201.25
B. permit tcp host 209.165.201.25 host 209.165.200.225 eq 80
C. permit tcp host 209.165.200.225 eq 80 host 209.165.201.25
D. permit tcp host 209.165.200.225 host 209.165.201.25 eq 80

Discussions

Discussions hidden. Click reveal to view 1 linked thread.

Question #: 287 Topic #: 1

826919

Answers

Correct answer and vote data stay hidden until you click reveal.

A. permit 10.0.0.0 0.0.0.1
B. permit 10.0.0.1 0.0.0.254
C. permit 10.0.0.1 0.0.0.0
D. permit 10.0.0.0 255.255.255.254

Discussions

Discussions hidden. Click reveal to view 1 linked thread.

Question #: 288 Topic #: 1

826920

Discussions

Discussions hidden. Click reveal to view 1 linked thread.

Question #: 289 Topic #: 1

826921

Discussions

Discussions hidden. Click reveal to view 1 linked thread.

Question #: 290 Topic #: 1

826922

Answers

Correct answer and vote data stay hidden until you click reveal.

A. use basic authentication
B. change the port to 12446
C. target 192.168.100.82 in the URI
D. restart the vsmart host

Discussions

Discussions hidden. Click reveal to view 1 linked thread.

Question #: 291 Topic #: 1

826923

Answers

Correct answer and vote data stay hidden until you click reveal.

A. line vty 0 15 absolute-timeout 600
B. line vty 0 15 no exec-timeout
C. line vty 0 15 exec-timeout 10 0
D. line vty 0 4 exec-timeout 600

Discussions

Discussions hidden. Click reveal to view 1 linked thread.

Question #: 292 Topic #: 1

826924

Answers

Correct answer and vote data stay hidden until you click reveal.

A. Access control lists that are applied outbound to a router interface do not affect traffic that is sourced from the router.
B. After an access control list is applied to an interface, that interface must be shut and no shut for the access control list to take effect.
C. Only standard access control lists can block traffic from a source IP address.
D. The access control list must contain an explicit deny to block traffic from the router.

Discussions

Discussions hidden. Click reveal to view 1 linked thread.

Question #: 293 Topic #: 1

826925

Answers

Correct answer and vote data stay hidden until you click reveal.

A. only required at the network perimeter
B. required in each layer of the network
C. filters traffic using Layer 3 and Layer 4 information only
D. provides intrusion prevention

Discussions

Discussions hidden. Click reveal to view 1 linked thread.

Question #: 294 Topic #: 1

826926

Answers

Correct answer and vote data stay hidden until you click reveal.

A. implement P2P blocking
B. implement MFP client protection
C. implement Wi-Fi direct policy
D. implement split tunneling

Discussions

Discussions hidden. Click reveal to view 1 linked thread.

Question #: 295 Topic #: 1

826927

Answers

Correct answer and vote data stay hidden until you click reveal.

A. enable AAA override
B. set a NAC state
C. utilize RADIUS profiling
D. require a DHCP address assignment

Discussions

Discussions hidden. Click reveal to view 1 linked thread.

Question #: 296 Topic #: 1

826928

Answers

Correct answer and vote data stay hidden until you click reveal.

A. MAB
B. 802.1X
C. WebAuth
D. port security sticky MAC

Discussions

Discussions hidden. Click reveal to view 1 linked thread.

Question #: 297 Topic #: 1

826929

Answers

Correct answer and vote data stay hidden until you click reveal.

A. VPN peers agreed on parameters for the ISAKMP SA.
B. Peers have exchanged keys, but ISAKMP SA remains unauthenticated.
C. ISAKMP SA is authenticated and can be used for Quick Mode.
D. ISAKMP SA has been created, but it has not continued to form.

Discussions

Discussions hidden. Click reveal to view 1 linked thread.

Question #: 298 Topic #: 1

826930

Answers

Correct answer and vote data stay hidden until you click reveal.

A. email phishing
B. DDoS
C. Microsoft Word macro attack
D. SQL injection
E. ransomware

Discussions

Discussions hidden. Click reveal to view 1 linked thread.

Question #: 299 Topic #: 1

826931

Discussions

Discussions hidden. Click reveal to view 1 linked thread.

Question #: 300 Topic #: 1

826932

Answers

Correct answer and vote data stay hidden until you click reveal.

A. username netadmin secret 5 $1$b1Ju$kZbBS1Pyh4QzwXyZ1kSZ2
B. username netadmin secret 9 $9$vFpMf8elb4RVV8$seZ/bDAx1uV
C. username netadmin secret $1$b1Ju$k406689705QzwXyZ1kSZ2
D. line Console 0 password $1$b1Ju$

Discussions

Discussions hidden. Click reveal to view 1 linked thread.