Cisco 350-401 Real 2024 Braindumps Mock Exam Dumps
350-401 Exam Questions | Real 350-401 Practice Dumps
NEW QUESTION # 394
Which TCP setting is tuned to minimize the risk of fragmentation on a GRE/IP tunnel?
- A. MRU
- B. Window size
- C. MSS
- D. MTU
Answer: C
Explanation:
The TCP Maximum Segment Size (TCP MSS) defines the maximum amount of data that a host is willing to accept in a single TCP/IP datagram. This TCP/IP datagram might be fragmented at the IP layer. The MSS value is sent as a TCP header option only in TCP SYN segments. Each side of a TCP connection reports its MSS value to the other side. Contrary to popular belief, the MSS value is not negotiated between hosts. The sending host is required to limit the size of data in a single TCP segment to a value less than or equal to the MSS reported by the receiving host.
TCP MSS takes care of fragmentation at the two endpoints of a TCP connection, but it does not handle the case where there is a smaller MTU link in the middle between these two endpoints.
PMTUD was developed in order to avoid fragmentation in the path between the endpoints. It is used to dynamically determine the lowest MTU along the path from a packet's source to its destination.
Reference:
25885-pmtud-ipfrag.html (there is some examples of how TCP MSS avoids IP Fragmentation in this link but it is too long so if you want to read please visit this link) Note: IP fragmentation involves breaking a datagram into a number of pieces that can be reassembled later.
NEW QUESTION # 395 
Refer to the exhibit. Which command set enables router R2 to be configured via NETCONF?
- A.
- B.
- C.
- D.
Answer: D
NEW QUESTION # 396
Refer to me exhibit.
Refer to the exhibit. What is achieved by this code?
- A. It unshuts the loopback interface
- B. It deletes the loopback interface
- C. It displays the loopback interface
- D. It renames the loopback interface
Answer: C
NEW QUESTION # 397
Refer to the exhibit.
Link1 is a copper connection and Link2 is a fiber connection. The fiber port must be the primary port for all forwarding. The output of the show spanning-tree command on SW2 shows that the fiber port is blocked by spanning tree. An engineer enters the spanning- tree port-priority 32 command on GO/1 on SW2, but the port remains blocked. Which command should be entered on the ports that are connected to Link2 to resolve the issue?
- A. Enter spanning-tree port-priority 4 on SW2.
- B. Enter spanning-tree port-priority 64 on SW2.
- C. Enter spanning-tree port-priority 32 on SW1.
- D. Enter spanning-tree port-priority 224 on SW1.
Answer: C
NEW QUESTION # 398
Which LISP device is responsible for publishing EID-to-RLOC mappings for a site?
- A. ETR
- B. ITR
- C. MR
- D. MS
Answer: A
Explanation:
Explanation
An Egress Tunnel Router (ETR) connects a site to the LISP-capable part of a core network (such as the Internet), publishes EID-to-RLOC mappings for the site, responds to Map-Request messages, and decapsulates and delivers LISP-encapsulated user data to end systems at the site.
NEW QUESTION # 399
What is the result of applying this access control list?
- A. TCP traffic with the DF bit set is allowed
- B. TCP traffic with the SYN bit set is allowed
- C. TCP traffic with the ACK bit set is allowed
- D. TCP traffic with the URG bit set is allowed
Answer: C
Explanation:
The established keyword is only applicable to TCP access list entries to match TCP segments that have the ACK and/or RST control bit set (regardless of the source and destination ports), which assumes that a TCP connection has already been established in one direction only. Let's see an example below:
Suppose you only want to allow the hosts inside your company to telnet to an outside server but not vice versa, you can simply use an "established" access-list like this: access-list 100 permit tcp any any established access-list 101 permit tcp any any eq telnet ! interface S0/0 ip access-group 100 in ip access-group 101 out
NEW QUESTION # 400 
Refer to the exhibit Which configuration enables password checking on the console line, using only a password?
- A.
- B.
- C.
- D.
Answer: A
NEW QUESTION # 401 
Refer to the exhibit. External users require HTTP connectivity to an internal company web server that is listening on TCP port 8080. Which command set accomplishes this requirement?
- A. Option C
- B. Option D
- C. Option A
- D. Option E
- E. Option B
Answer: E
NEW QUESTION # 402
Refer to the exhibit.
An engineer must establish eBGP peering between router R3 and router R4. Both routers should use their loopback interfaces as the BGP router ID. Which configuration set accomplishes this task?
- A. R3(config)#router bgp 200
R3(config-router)#neighbor 10.24.24.4 remote-as 100
R3(config-router)#bgp router-id 10.3.3.3
R4(config)#router bgp 100
R4(config-router)#neighbor 10.24.24.3 remote-as 200
R4(config-router)#bgp router-id 10.4.4.4 - B. R3(config)#router bgp 200
R3(config-router)#neighbor 10.4.4.4 remote-as 100
R3(config-router)# neighbor 10.4.4.4 update-source Loopback0
R4(config)#router bgp 100
R4(config-router)#neighbor 10.3.3.3 remote-as 200
R4(config-router)#network 10.3.3.3 update-source Loopback0 - C. R3(config)#router bgp 200
R3(config-router)#neighbor 10.4.4.4 remote-as 100
R3(config-router)#bgp router-id 10.3.3.3
R4(config)#router bgp 100
R4(config-router)#neighbor 10.3.3.3 remote-as 200
R4(config-router)#bgp router-id 10.4.4.4 - D. R3(config)#router bgp 200
R3(config-router)#neighbor 10.24.24.4 remote-as 100
R3(config-router)#neighbor 10.24.24.4 update-source Loopback0
R4(config)#router bgp 100
R4(config-router)#neighbor 10.24.24.3 remote-as 200
R4(config-router)#neighbor 10.24.24.3 update-source Loopback0
Answer: A
NEW QUESTION # 403
What does the destination MAC on the outer MAC header identify in a VXLAN packet?
- A. the leaf switch
- B. the remote switch
- C. the next hop
- D. thee emote spine
Answer: C
NEW QUESTION # 404
Refer to the exhibit.
An engineer must modify the access control list EGRESS to allow all IP traffic from subnet 10.1.10.0/24 to
10.1.2.0/24. The access control list is applied in the outbound direction on router interface GigabitEthemet 0/1.
Which configuration commands can the engineer use to allow this traffic without disrupting existing traffic flows?
A)
B)
C)
D)
- A. Option C
- B. Option D
- C. Option A
- D. Option B
Answer: D
NEW QUESTION # 405
A company plans to implement intent-based networking in its campus infrastructure. Which design facilities a migrate from a traditional campus design to a programmer fabric designer?
- A. two-tier
- B. routed access
- C. three-tier
- D. Layer 2 access
Answer: A
Explanation:
Explanation
Intent-based Networking (IBN) transforms a hardware-centric, manual network into a controller-led network that captures business intent and translates it into policies that can be automated and applied consistently across the network. The goal is for the network to continuously monitor and adjust network performance to help assure desired business outcomes. IBN builds on software-defined networking (SDN). SDN usually uses spine-leaf architecture, which is typically deployed as two layers: spines (such as an aggregation layer), and leaves (such as an access layer).
NEW QUESTION # 406
Refer the exhibit.
Which router is the designated router on the segment 192.168.0.0/24?
- A. Router Chicago because it has a lower router ID
- B. This segment has no designated router because it is a p2p network type.
- C. This segment has no designated router because it is a nonbroadcast network type.
- D. Router NewYork because it has a higher router ID
Answer: B
NEW QUESTION # 407
In a Cisco SD-Access wireless architecture, which device manages endpoint ID to Edge Node bindings?
- A. fabric wireless controller
- B. fabric border node
- C. fabric control plane node
- D. fabric edge node.
Answer: C
Explanation:
Explanation
SD-Access Wireless Architecture Control Plane Node -A Closer Look
Fabric Control-Plane Node is based on a LISP Map Server / Resolver
Runs the LISP Endpoint ID Database to provide overlay reachability information + A simple Host Database, that tracks Endpoint ID to Edge Node bindings (RLOCs) + Host Database supports multiple types of Endpoint ID (EID), such as IPv4 /32, IPv6 /128* or MAC/48 + Receives prefix registrations from Edge Nodes for wired clients, and from Fabric mode WLCs for wireless clients + Resolves lookup requests from FE to locate Endpoints + Updates Fabric Edge nodes, Border nodes with wireless client mobility and RLOC information Reference: https://www.ciscolive.com/c/dam/r/ciscolive/latam/docs/2018/pdf/BRKEWN-2020.pdf
NEW QUESTION # 408
Drag the drop the description from the left onto the routing protocol they describe on the right.
Answer:
Explanation:
Explanation
NEW QUESTION # 409
Which devices does Cisco Center configure when deploying an IP-based access control policy?
- A. all devices integrating with ISE
- B. all devices in selected sites
- C. selected individual devices
- D. all wired devices
Answer: B
Explanation:
https://www.cisco.com/c/en/us/td/docs/cloud-systems-management/network-automation-and- management/dna-center/1-3-1-
0/user_guide/b_cisco_dna_center_ug_1_3_1_0/b_cisco_dna_center_ug_1_3_1_0_chapter_0101
1.html
Create an IP-Based Access Control Policy
Step 3: Complete the following fields: Site Scope
Sites to which a policy is applied. If you configure a wired policy, the policy is applied to all wired devices in the site scope. Likewise, if you configure a wireless policy for a selected service set identifier (SSID), the policy is applied to all of the wireless devices with the SSID defined in the scope. For more information, see Site Scope.
NEW QUESTION # 410
Drag and drop the characteristics from the left onto the routing protocols they describe on the right.
Answer:
Explanation:
Explanation
Diagram Description automatically generated
NEW QUESTION # 411
An engineer reviews a router's logs and discovers the following entry. What is the event's logging severity level?
- A. informational
- B. notification
- C. error
- D. warning
Answer: C
Explanation:
Explanation
Syslog levels are listed below:
Number 3 in %LINK-3-UPDOWN is the severity level of this message so in this case it is errors.
NEW QUESTION # 412
Refer to the exhibit. Rapid PVST+ is enabled on all switches. Which command set must be configured on Switch1 to achieve the following results on port fa0/1?
- When a device is connected, the port transitions immediately to a forwarding state.
- The interface should not send or receive BPDUs.
- If a BPDU is received, it continues operating normally.
- A. Switch1(config)# interface f0/1
Switch1(config-if)# spanning-tree portfast - B. Switch1(config)# interface f0/1
Switch1(config-if)# spanning-tree portfast
Switch1 (config-if)# spanning-tree bpduguard enable - C. Switch1(config)# spanning-tree portfast bpduguard default
Switch 1 (config)# interface f0/1
Switch1 (config-if)# spanning-tree portfast - D. Switch1(config)# spanning-tree portfast bpdufilter default
Switch1(config)# interface f0/1
Switch1(config-if)# spanning-tree portfast
Answer: D
NEW QUESTION # 413
Refer to the exhibit.
An engineer reconfigures the pot-channel between SW1 and SW2 from an access port to a trunk and immediately notices this error in SW1's log.
Which command set resolves this error?
A)
B)
C)
D)
- A. Option C
- B. Option D
- C. Option A
- D. Option B
Answer: D
NEW QUESTION # 414
......
Verified 350-401 Exam Dumps Q&As - Provide 350-401 with Correct Answers: https://www.preppdf.com/Cisco/350-401-prepaway-exam-dumps.html
Pass Your 350-401 Dumps Free Latest Cisco Practice Tests: https://drive.google.com/open?id=1TYO2voq5BkfL7iT56qianb3N-NWr6sww