ExamTopics 350-401 Snapshot

Question #: 251 Topic #: 1

826883

Answers

Correct answer and vote data stay hidden until you click reveal.

A. monitor session 2 source interface gigabitethernet0/3 rx monitor session 2 filter vlan 3
B. monitor session 2 source interface gigabitethernet0/3 rx monitor session 2 filter vlan 1 - 2, 4 - 4094
C. monitor session 2 source interface gigabitethernet0/3 tx monitor session 2 filter vlan 3
D. monitor session 2 source interface gigabitethernet0/3 tx monitor session 2 filter vlan 1- 2, 4 - 4094

Discussions

Discussions hidden. Click reveal to view 1 linked thread.

Question #: 252 Topic #: 1

826884

Answers

Correct answer and vote data stay hidden until you click reveal.

A. Specify a different UDP port.
B. Specify a different TCP port.
C. Configure a version 5 flow-export to the same destination.
D. Specify a different flow ID.
E. Specify a VRF.

Discussions

Discussions hidden. Click reveal to view 1 linked thread.

Question #: 253 Topic #: 1

826885

Answers

Correct answer and vote data stay hidden until you click reveal.

A. The threshold value is wrong.
B. The source-interface is configured incorrectly.
C. The destination must be 172.30.30.2 for icmp-echo.
D. The default route is missing the track feature.

Discussions

Discussions hidden. Click reveal to view 1 linked thread.

Question #: 254 Topic #: 1

826886

Answers

Correct answer and vote data stay hidden until you click reveal.

A. The destination port is unreachable.
B. The probe timed out.
C. The destination server reported it is too busy.
D. The protocol is unreachable.

Discussions

Discussions hidden. Click reveal to view 1 linked thread.

Question #: 255 Topic #: 1

826887

Answers

Correct answer and vote data stay hidden until you click reveal.

A. Provision
B. Design
C. Assurance
D. Policy

Discussions

Discussions hidden. Click reveal to view 1 linked thread.

Question #: 256 Topic #: 1

826888

Answers

Correct answer and vote data stay hidden until you click reveal.

A. Router(config)# ip sla responder udp-connect 172.29.139.134 5000
B. Router(config)# ip sla responder tcp-connect 172.29.139.134 5000
C. Router(config)# ip sla responder udp-echo 172.29.139.134 5000
D. Router(config)# ip sla responder tcp-echo 172.29.139.134 5000

Discussions

Discussions hidden. Click reveal to view 1 linked thread.

Question #: 257 Topic #: 1

826889

Answers

Correct answer and vote data stay hidden until you click reveal.

A. tap
B. inline
C. passive
D. inline tap

Discussions

Discussions hidden. Click reveal to view 1 linked thread.

Question #: 258 Topic #: 1

826890

Answers

Correct answer and vote data stay hidden until you click reveal.

A. uses flexible NetFlow
B. assigns a VLAN to the endpoint
C. classifies traffic based on advanced application recognition
D. classifies traffic based on the contextual identity of the endpoint rather than its IP address

Discussions

Discussions hidden. Click reveal to view 1 linked thread.

Question #: 259 Topic #: 1

826891

Discussions

Discussions hidden. Click reveal to view 1 linked thread.

Question #: 260 Topic #: 1

826892

Answers

Correct answer and vote data stay hidden until you click reveal.

A. security group tag ACL assigned to each port on a switch
B. security group tag number assigned to each user on a switch
C. security group tag number assigned to each port on a network
D. security group tag ACL assigned to each router on a network

Discussions

Discussions hidden. Click reveal to view 1 linked thread.

Question #: 261 Topic #: 1

826893

Answers

Correct answer and vote data stay hidden until you click reveal.

A. SSL
B. Cisco TrustSec
C. MACsec
D. IPsec

Discussions

Discussions hidden. Click reveal to view 1 linked thread.

Question #: 262 Topic #: 1

826894

Answers

Correct answer and vote data stay hidden until you click reveal.

A. ISE server
B. RADIUS server
C. anchor WLC
D. local WLC

Discussions

Discussions hidden. Click reveal to view 1 linked thread.

Question #: 263 Topic #: 1

826895

Answers

Correct answer and vote data stay hidden until you click reveal.

A. MD5
B. PAP
C. CHAP
D. AES

Discussions

Discussions hidden. Click reveal to view 1 linked thread.

Question #: 264 Topic #: 1

826896

Answers

Correct answer and vote data stay hidden until you click reveal.

A. VXLAN
B. LISP
C. Cisco TrustSec
D. IS-IS

Discussions

Discussions hidden. Click reveal to view 1 linked thread.

Question #: 265 Topic #: 1

826897

Answers

Correct answer and vote data stay hidden until you click reveal.

A. The enable secret password is protected via stronger cryptography mechanisms.
B. The enable password cannot be decrypted.
C. The enable password is encrypted with a stronger encryption method.
D. There is no difference and both passwords are encrypted identically.

Discussions

Discussions hidden. Click reveal to view 1 linked thread.

Question #: 266 Topic #: 1

826898

Answers

Correct answer and vote data stay hidden until you click reveal.

A. deny tcp any any eq 80 permit tcp any any gt 21 lt 444
B. permit tcp any any range 22 443 deny tcp any any eq 80
C. permit tcp any any eq 80
D. deny tcp any any eq 80 permit tcp any any range 22 443

Discussions

Discussions hidden. Click reveal to view 1 linked thread.

Question #: 267 Topic #: 1

826899

Answers

Correct answer and vote data stay hidden until you click reveal.

A. A TACACS+ server is checked first. If that check fails, a local database is checked.
B. A TACACS+ server is checked first. If that check fails, a RADIUS server is checked. If that check fails, a local database is checked.
C. A local database is checked first. If that check fails, a TACACS+ server is checked. If that check fails, a RADIUS server is checked.
D. A local database is checked first. If that check fails, a TACACS+ server is checked.

Discussions

Discussions hidden. Click reveal to view 1 linked thread.

Question #: 268 Topic #: 1

826900

Answers

Correct answer and vote data stay hidden until you click reveal.

A. the controller management interface
B. the controller virtual interface
C. the interface specified on the WLAN configuration
D. any interface configured on the WLC

Discussions

Discussions hidden. Click reveal to view 1 linked thread.

Question #: 269 Topic #: 1

826901

Answers

Correct answer and vote data stay hidden until you click reveal.

A. Cisco Firepower and FireSIGHT
B. Cisco Stealthwatch system
C. Advanced Malware Protection
D. Cisco Web Security Appliance

Discussions

Discussions hidden. Click reveal to view 1 linked thread.

Question #: 270 Topic #: 1

826902

Answers

Correct answer and vote data stay hidden until you click reveal.

A. Use Cisco Firepower and block traffic to TOR networks.
B. Use Cisco AMP deployment with the Malicious Activity Protection engine enabled.
C. Use Cisco Firepower with Intrusion Policy and snort rules blocking SMB exploitation.
D. Use Cisco AMP deployment with the Exploit Prevention engine enabled.

Discussions

Discussions hidden. Click reveal to view 1 linked thread.

Question #: 271 Topic #: 1

826903

Answers

Correct answer and vote data stay hidden until you click reveal.

A. R3(config)#time-range WEEKEND R3(config-time-range)#periodic Saturday Sunday 00:00 to 23:59 R3(config)#access-list 150 deny tcp host 10.3.3.3 host 10.2.2.2 eq 23 time-range WEEKEND R3(config)#access-list 150 permit ip any any time-range WEEKEND R3(config)#interface G0/1 R3(config-if)#ip access-group 150 out
B. R1(config)#time-range WEEKEND R1(config-time-range)#periodic weekend 00:00 to 23:59 R1(config)#access-list 150 deny tcp host 10.3.3.3 host 10.2.2.2 eq 23 time-range WEEKEND R1(config)#access-list 150 permit ip any any R1(config)#interface G0/1 R1(config-if)#ip access-group 150 in
C. R3(config)#time-range WEEKEND R3(config-time-range)#periodic weekend 00:00 to 23:59 R3(config)#access-list 150 permit tcp host 10.3.3.3 host 10.2.2.2 eq 23 time-range WEEKEND R3(config)#access-list 150 permit ip any any time-range WEEKEND R3(config)#interface G0/1 R3(config-if)#ip access-group 150 out
D. R1(config)#time-range WEEKEND R1(config-time-range)#periodic Friday Sunday 00:00 to 00:00 R1(config)#access-list 150 deny tcp host 10.3.3.3 host 10.2.2.2 eq 23 time-range WEEKEND R1(config)#access-list 150 permit ip any any R1(config)#interface G0/1 R1(config-if)#ip access-group 150 in

Discussions

Discussions hidden. Click reveal to view 1 linked thread.

Question #: 272 Topic #: 1

826904

Answers

Correct answer and vote data stay hidden until you click reveal.

A. permit tcp host 172.16.0.2 host 192.168.0.5 eq 8080
B. permit tcp host 192.168.0.5 host 172.16.0.2 eq 8080
C. permit tcp host 192.168.0.5 eq 8080 host 172.16.0.2
D. permit tcp host 192.168.0.5 lt 8080 host 172.16.0.2

Discussions

Discussions hidden. Click reveal to view 1 linked thread.

Question #: 273 Topic #: 1

826905

Answers

Correct answer and vote data stay hidden until you click reveal.

A. TCP traffic with the URG bit set is allowed.
B. TCP traffic with the SYN bit set is allowed.
C. TCP traffic with the ACK bit set is allowed.
D. TCP traffic with the DF bit set is allowed.

Discussions

Discussions hidden. Click reveal to view 1 linked thread.

Question #: 274 Topic #: 1

826906

Answers

Correct answer and vote data stay hidden until you click reveal.

A. ip access-list extended 200 deny tcp host 10.10.10.1 eq 80 any permit ip any any
B. ip access-list extended 10 deny tcp host 10.10.10.1 any eq 80 permit ip any any
C. ip access-list extended NO_HTTP deny tcp host 10.10.10.1 any eq 80
D. ip access-list extended 100 deny tcp host 10.10.10.1 any eq 80 permit ip any any

Discussions

Discussions hidden. Click reveal to view 1 linked thread.

Question #: 275 Topic #: 1

826907

Answers

Correct answer and vote data stay hidden until you click reveal.

A. Add the access-class keyword to the username command.
B. Add the autocommand keyword to the aaa authentication command.
C. Add the access-class keyword to the aaa authentication command.
D. Add the autocommand keyword to the username command.

Discussions

Discussions hidden. Click reveal to view 1 linked thread.

Question #: 276 Topic #: 1

826908

Answers

Correct answer and vote data stay hidden until you click reveal.

A. All traffic will be policed based on access-list 120.
B. If traffic exceeds the specified rate, it will be transmitted and remarked.
C. Class-default traffic will be dropped.
D. ICMP will be denied based on this configuration.

Discussions

Discussions hidden. Click reveal to view 1 linked thread.

Question #: 277 Topic #: 1

826909

Discussions

Discussions hidden. Click reveal to view 1 linked thread.

Question #: 278 Topic #: 1

826910

Answers

Correct answer and vote data stay hidden until you click reveal.

A. The device will allow users at 192.168.0.202 to connect to vty lines 0 through 4 using the password ciscotestkey.
B. The device will authenticate all users connecting to vty lines 0 through 4 against TACACS+.
C. The device will allow only users at 192.168.0.202 to connect to vty lines 0 through 4.
D. When users attempt to connect to vty lines 0 through 4, the device will authenticate them against TACACS+ if local authentication fails.

Discussions

Discussions hidden. Click reveal to view 1 linked thread.

Question #: 279 Topic #: 1

826911

Answers

Correct answer and vote data stay hidden until you click reveal.

A. inline tap
B. high availability
C. clustering
D. tap

Discussions

Discussions hidden. Click reveal to view 1 linked thread.

Question #: 280 Topic #: 1

826912

Discussions

Discussions hidden. Click reveal to view 1 linked thread.

Question #: 281 Topic #: 1

826913

Answers

Correct answer and vote data stay hidden until you click reveal.

A. It is leveraged for dynamic endpoint to group mapping and policy definition.
B. It provides GUI management and abstraction via apps that share context.
C. It is used to analyze endpoint to app flows and monitor fabric status.
D. It manages the LISP EID database.

Discussions

Discussions hidden. Click reveal to view 1 linked thread.

Question #: 282 Topic #: 1

826914

Discussions

Discussions hidden. Click reveal to view 1 linked thread.

Question #: 283 Topic #: 1

826915

Discussions

Discussions hidden. Click reveal to view 1 linked thread.

Question #: 284 Topic #: 1

826916

Answers

Correct answer and vote data stay hidden until you click reveal.

A. real-time threat management to stop DDoS attacks to the core and access networks
B. real-time awareness of users, devices, and traffic on the network
C. malware control
D. dynamic threat control for web traffic

Discussions

Discussions hidden. Click reveal to view 1 linked thread.

Question #: 285 Topic #: 1

826917

Answers

Correct answer and vote data stay hidden until you click reveal.

A. access-list 110 permit tcp any any eq 21 tcp-ack
B. access-list 10 permit tcp any any eq 21 established
C. access-list 110 permit tcp any any eq 21 established
D. access-list 10 permit ip any any eq 21 tcp-ack

Discussions

Discussions hidden. Click reveal to view 1 linked thread.

Question #: 286 Topic #: 1

826918

Answers

Correct answer and vote data stay hidden until you click reveal.

A. permit tcp host 209.165.200.225 lt 80 host 209.165.201.25
B. permit tcp host 209.165.201.25 host 209.165.200.225 eq 80
C. permit tcp host 209.165.200.225 eq 80 host 209.165.201.25
D. permit tcp host 209.165.200.225 host 209.165.201.25 eq 80

Discussions

Discussions hidden. Click reveal to view 1 linked thread.

Question #: 287 Topic #: 1

826919

Answers

Correct answer and vote data stay hidden until you click reveal.

A. permit 10.0.0.0 0.0.0.1
B. permit 10.0.0.1 0.0.0.254
C. permit 10.0.0.1 0.0.0.0
D. permit 10.0.0.0 255.255.255.254

Discussions

Discussions hidden. Click reveal to view 1 linked thread.

Question #: 288 Topic #: 1

826920

Discussions

Discussions hidden. Click reveal to view 1 linked thread.

Question #: 289 Topic #: 1

826921

Discussions

Discussions hidden. Click reveal to view 1 linked thread.

Question #: 290 Topic #: 1

826922

Answers

Correct answer and vote data stay hidden until you click reveal.

A. use basic authentication
B. change the port to 12446
C. target 192.168.100.82 in the URI
D. restart the vsmart host

Discussions

Discussions hidden. Click reveal to view 1 linked thread.

Question #: 291 Topic #: 1

826923

Answers

Correct answer and vote data stay hidden until you click reveal.

A. line vty 0 15 absolute-timeout 600
B. line vty 0 15 no exec-timeout
C. line vty 0 15 exec-timeout 10 0
D. line vty 0 4 exec-timeout 600

Discussions

Discussions hidden. Click reveal to view 1 linked thread.

Question #: 292 Topic #: 1

826924

Answers

Correct answer and vote data stay hidden until you click reveal.

A. Access control lists that are applied outbound to a router interface do not affect traffic that is sourced from the router.
B. After an access control list is applied to an interface, that interface must be shut and no shut for the access control list to take effect.
C. Only standard access control lists can block traffic from a source IP address.
D. The access control list must contain an explicit deny to block traffic from the router.

Discussions

Discussions hidden. Click reveal to view 1 linked thread.

Question #: 293 Topic #: 1

826925

Answers

Correct answer and vote data stay hidden until you click reveal.

A. only required at the network perimeter
B. required in each layer of the network
C. filters traffic using Layer 3 and Layer 4 information only
D. provides intrusion prevention

Discussions

Discussions hidden. Click reveal to view 1 linked thread.

Question #: 294 Topic #: 1

826926

Answers

Correct answer and vote data stay hidden until you click reveal.

A. implement P2P blocking
B. implement MFP client protection
C. implement Wi-Fi direct policy
D. implement split tunneling

Discussions

Discussions hidden. Click reveal to view 1 linked thread.

Question #: 295 Topic #: 1

826927

Answers

Correct answer and vote data stay hidden until you click reveal.

A. enable AAA override
B. set a NAC state
C. utilize RADIUS profiling
D. require a DHCP address assignment

Discussions

Discussions hidden. Click reveal to view 1 linked thread.

Question #: 296 Topic #: 1

826928

Answers

Correct answer and vote data stay hidden until you click reveal.

A. MAB
B. 802.1X
C. WebAuth
D. port security sticky MAC

Discussions

Discussions hidden. Click reveal to view 1 linked thread.

Question #: 297 Topic #: 1

826929

Answers

Correct answer and vote data stay hidden until you click reveal.

A. VPN peers agreed on parameters for the ISAKMP SA.
B. Peers have exchanged keys, but ISAKMP SA remains unauthenticated.
C. ISAKMP SA is authenticated and can be used for Quick Mode.
D. ISAKMP SA has been created, but it has not continued to form.

Discussions

Discussions hidden. Click reveal to view 1 linked thread.

Question #: 298 Topic #: 1

826930

Answers

Correct answer and vote data stay hidden until you click reveal.

A. email phishing
B. DDoS
C. Microsoft Word macro attack
D. SQL injection
E. ransomware

Discussions

Discussions hidden. Click reveal to view 1 linked thread.

Question #: 299 Topic #: 1

826931

Discussions

Discussions hidden. Click reveal to view 1 linked thread.

Question #: 300 Topic #: 1

826932

Answers

Correct answer and vote data stay hidden until you click reveal.

A. username netadmin secret 5 $1$b1Ju$kZbBS1Pyh4QzwXyZ1kSZ2
B. username netadmin secret 9 $9$vFpMf8elb4RVV8$seZ/bDAx1uV
C. username netadmin secret $1$b1Ju$k406689705QzwXyZ1kSZ2
D. line Console 0 password $1$b1Ju$

Discussions

Discussions hidden. Click reveal to view 1 linked thread.