Best 350-401 Exam Dumps for the Preparation of Latest Exam Questions
350-401 Actual Questions 100% Same Braindumps with Actual Exam!
NEW QUESTION # 190
Which QoS mechanism will prevent a decrease in TCP performance?
- A. Rate-Limit
- B. LLQ
- C. Fair-Queue
- D. Shaper
- E. WRED
- F. Policer
Answer: E
Explanation:
Explanation
Weighted Random Early Detection (WRED) is just a congestion avoidance mechanism. WRED drops packets selectively based on IP precedence. Edge routers assign IP precedences to packets as they enter the network. When a packet arrives, the following events occur:
The average queue size is calculated.
2. If the average is less than the minimum queue threshold, the arriving packet is queued.
3. If the average is between the minimum queue threshold for that type of traffic and the maximum threshold for the interface, the packet is either dropped or queued, depending on the packet drop probability for that type of traffic.
4. If the average queue size is greater than the maximum threshold, the packet is dropped.
WRED reduces the chances of tail drop (when the queue is full, the packet is dropped) by selectively dropping packets when the output interface begins to show signs of congestion (thus it can mitigate congestion by preventing the queue from filling up). By dropping some packets early rather than waiting until the queue is full, WRED avoids dropping large numbers of packets at once and minimizes the chances of global synchronization. Thus, WRED allows the transmission line to be used fully at all times.
WRED generally drops packets selectively based on IP precedence. Packets with a higher IP precedence are less likely to be dropped than packets with a lower precedence. Thus, the higher the priority of a packet, the higher the probability that the packet will be delivered.
Reference:
mt/qos-conavd-15-mt-book/qos-conavd-cfg-wred.html
WRED is only useful when the bulk of the traffic is TCP/IP traffic. With TCP, dropped packets indicate congestion, so the packet source will reduce its transmission rate. With other protocols, packet sources may not respond or may resend dropped packets at the same rate. Thus, dropping packets does not decrease congestion.
16/qos-conavd-xe-16-book/qos-conavd-oview.html
Note: Global synchronization occurs when multiple TCP hosts reduce their transmission rates in response to congestion. But when congestion is reduced, TCP hosts try to increase their transmission rates again simultaneously (known as slow-start algorithm), which causes another congestion. Global synchronization produces this graph:
NEW QUESTION # 191
Drag and drop the characteristics from the left onto the orchestration tools that they describe on the right.
Answer:
Explanation:
NEW QUESTION # 192
Refer to the exhibit.
Which command set must be applied on R1 to establish a BGP neighborship with R2 and to allow communication from R1 to reach the networks?
- A.
- B.
- C.
- D.
Answer: A
Explanation:
To establish a BGP neighborship with R2 and allow communication from R1 to reach the networks, the correct command set must configure BGP with the appropriate neighbor statement and network statement. The command set in Option C correctly specifies R2's IP address in the neighbor command and includes the necessary network statements to advertise R1's connected networks.
NEW QUESTION # 193
Which statement about a fabric access point is true?
- A. It is in local mode an must connected directly to the fabric edge switch.
- B. It is in FlexConnect mode and must be connected directly to the fabric edge switch.
- C. It is in FlexConnect mode and must be connected directly to the fabric border node.
- D. It is in local mode an must be connected directly to the fabric border node.
Answer: A
Explanation:
Explanation
Fabric mode APs continue to support the same wireless media services that traditional APs support; apply AVC, quality of service (QoS), and other wireless policies; and establish the CAPWAP control plane to the fabric WLC. Fabric APs join as local-mode APs and must be directly connected to the fabric edge node switch to enable fabric registration events, including RLOC assignment via the fabric WLC. The fabric edge nodes use CDP to recognize APs as special wired hosts, applying special port configurations and assigning the APs to a unique overlay network within a common EID space across a fabric. The assignment allows management simplification by using a single subnet to cover the AP infrastructure at a fabric site.
NEW QUESTION # 194
Refer to the exhibit. Assuming that R1 is a CE router, which VRF is assigned to Gi0/0 on R1?
- A. VRF VPN_B
- B. VRF VPN_A
- C. Management VRF
- D. Default VRF
Answer: D
Explanation:
There is nothing special with the configuration of Gi0/0 on R1. Only Gi0/0 interface on R2 is assigned to VRF VPN_A. The default VRF here is similar to the global routing table concept in Cisco IOS.
NEW QUESTION # 195
Drag and drop the snippets onto the blanks within the code to create an EEM script that adds an entry to a locally stored text file with a timestamp when a configuration change is made. Not all options are used.
Answer:
Explanation:
Explanation:
NEW QUESTION # 196
The login method is configured on the VTY lines of a router with these parameters.
* The first method for authentication is TACACS
* If TACACS is unavailable, login is allowed without any provided credentials Which configuration accomplishes this task?
- A. R1#sh run | include aaa
aaa new-model
aaa authentication login default group tacacs+
aaa session-id common
R1#sh run | section vty
line vty 0 4
transport input none
R1# - B. R1#sh run | include aaa
aaa new-model
aaa authentication login VTY group tacacs+ none
aaa session-id common
R1#sh run | section vty
line vty 0 4
password 7 0202039485748
R1#sh run | include username
R1# - C. R1#sh run | include aaa
aaa new-model
aaa authentication login default group tacacs+ none
aaa session-id common
R1#sh run | section vty
line vty 0 4
password 7 0202039485748 - D. R1#sh run | include aaa
aaa new-model
aaa authentication login telnet group tacacs+ none
aaa session-id common
R1#sh run | section vty
line vty 0 4
R1#sh run | include username
R1#
Answer: C
Explanation:
Explanation
According to the requirements (first use TACACS+, then allow login with no authentication), we have to use "aaa authentication login ... " for AAA command.
The next thing to check is the if the "aaa authentication login " or "aaa authentication login list-name" is used. The 'default' keyword means we want to apply for all login connections (such as tty, vty, console and aux). If we use this keyword, we don't need to configure anything else under tty, vty and aux lines. If we don't use this keyword then we have to specify which line(s) we want to apply the authentication feature.
From above information, we can find out answer 'R1#sh run | include aaa aaa new-model aaa authentication login default group tacacs+ none aaa session-id common R1#sh run | section vty line vty 0 4 password 7 0202039485748 If you want to learn more about AAA configuration, please read our AAA TACACS+ and RADIUS Tutorial - Part 2.
For your information, answer 'R1#sh run | include aaa
aaa new-model
aaa authentication login telnet group tacacs+ none
aaa session-id common
R1#sh run | section vty
line vty 0 4
R1#sh run | include username
R1#' would be correct if we add the following command under vty line ("line vty 0 4"): "login authentication telnet" ("telnet" is the name of the AAA list above)
NEW QUESTION # 197
In a Cisco Catalyst switch equipped with two supervisor modules an administrator must temporally remove the active supervisor from the chassis to perform hardware maintenance on it. Which mechanism ensure that the active supervisor removal is not disruptive to the network operation?
- A. HSRP
- B. SSO
- C. VRRP
- D. NSF/NSR
Answer: B
Explanation:
The mechanism that ensures non-disruptive operation during the active supervisor module removal in a Cisco Catalyst switch is Stateful Switchover (SSO). SSO allows the standby supervisor module to take over the operation seamlessly when the active supervisor is removed. This feature maintains the network state and other important information, allowing the switch to continue operating without interruption. References: Cisco Catalyst 9400 Series Supervisor Module Installation Note1.
NEW QUESTION # 198
Refer to the exhibit.
Based on the configuration in this WLAN security setting, which method can a client use to authenticate to the network?
- A. text string
- B. certificate
- C. username and password
- D. RADIUS token
Answer: A
Explanation:
Explanation/Reference:
NEW QUESTION # 199
What does this EEM applet event accomplish?
"event snmp oid 1.3.6.1.3.7.1.5.1.2.4.2.9 get-type next entry-op g entry-val 75 poll-interval 5"
- A. It issues email when the value is greater than 75% for five polling cycles.
- B. It reads an SNMP variable, and when the value exceeds 75% for live polling cycles.
- C. It presents a SNMP variable that can be interrogated.
- D. Upon the value reaching 75%, a SNMP event is generated and sent to the trap server.
Answer: B
Explanation:
EEM offers the ability to monitor events and take informational or corrective action when the monitored events occur or reach a threshold. An EEM policy is an entity that defines an event and the actions to be taken when that event occurs. There are two types of EEM policies: an applet or a script. An applet is a simple form of policy that is defined within the CLI configuration.
To specify the event criteria for an Embedded Event Manager (EEM) applet that is run by sampling Simple Network Management Protocol (SNMP) object identifier values, use the event snmp command in applet configuration mode.
event snmp oid oid-value get-type {exact | next} entry-op operator entry-val entryvalue
[exit-comb {or | and}] [exit-op operator] [exit-val exit-value] [exit-time exit-timevalue] poll-interval poll-int-value
+ oid: Specifies the SNMP object identifier (object ID)
+ get-type: Specifies the type of SNMP get operation to be applied to the object ID specified by the oid-value argument.
- next - Retrieves the object ID that is the alphanumeric successor to the object ID specified by the oid-value argument.
+ entry-op: Compares the contents of the current object ID with the entry value using the specified operator. If there is a match, an event is triggered and event monitoring is disabled until the exit criteria are met.
+ entry-val: Specifies the value with which the contents of the current object ID are compared to decide if an SNMP event should be raised.
+ exit-op: Compares the contents of the current object ID with the exit value using the specified operator. If there is a match, an event is triggered and event monitoring is reenabled.
+ poll-interval: Specifies the time interval between consecutive polls (in seconds)
NEW QUESTION # 200
Refer to the exhibit.
An engineer must modify the access control list EGRESS to allow all IP traffic from subnet 10.1.10.0/24 to
10.1.2.0/24. The access control list is applied in the outbound direction on router interface GigabitEthemet 0/1.
Which configuration commands can the engineer use to allow this traffic without disrupting existing traffic flows?
A)
B)
C)
D)
- A. Option D
- B. Option A
- C. Option C
- D. Option B
Answer: D
NEW QUESTION # 201
In a Cisco SD-WAN solution, which two functions are performed by OMP? (Choose two.)
- A. gathering of underlay infrastructure data
- B. delivery of crypto keys
- C. advertisement of network prefixes and their attributes
- D. configuration of control and data policies
- E. segmentation and differentiation of traffic
Answer: B,C
Explanation:
The OMP protocol is responsible for:
- Distribution of Transport Locators (TLOCs) among network sites in the sd-wan domain.
- Distribution of service-side reachability information.
- Distribution of service-chaining information.
- Distribution of data plane security parameters, VPN labels, and crypto keys.
- Distribution of data and application-aware routing (AAR) policies. (Answer E is not correct as OMP is only distribute, not configure data policies) Reference: https://www.networkacademy.io/ccie-enterprise/sdwan/omp-overview
NEW QUESTION # 202
Refer to the exhibit. An engineer must verify the operational status of ISP 1 by testing the IP reachability of the ISP1 DNS server every 10 seconds. If the DNS server is not reachable from the CPE through the Gi0/0 interface, then the test should fail. Which two configuration sets must be used to accomplish this task? (Choose two.)
- A. ip sla 1
icmp-echo 198.51.100.252
frequency 10
ip sla schedule 1 life forever start-time now - B. ip sla 1
dns www.cisco.com name-server 198.51.100.252
frequency 10
ip sla schedule 1 life forever start-time now - C. ip route 0.0.0.0 255.255.255.255 198.51.100.1
ip route 0.0.0.0 255.255.255.255 203.0.113.1 - D. ip route 0.0.0.0 0.0.0.0 198.51.100.1
ip route 0.0.0.0 0.0.0.0 203.0.113.1 - E. ip route 198.51.100.252 255.255.255.255 198.51.100.1
Answer: A,E
NEW QUESTION # 203
Which three methods does Cisco DNA Centre use to discover devices? (Choose three)
- A. NETCONF
- B. SNMP
- C. CDP
- D. LLDP
- E. ping
- F. a specified range of IP addresses
Answer: C,D,F
Explanation:
NEW QUESTION # 204
Refer to the exhibit.
What is the effect of introducing the sampler feature into the Flexible NetFlow configuration on the router?
- A. NetFlow updates to the collector are sent 50% less frequently.
- B. CPU and memory utilization are reduced when compared with what is required for full NetFlow.
- C. The resolution of sampling data increases, but it requires more performance from the router.
- D. Every second IPv4 packet is forwarded to the collector for inspection.
Answer: B
NEW QUESTION # 205
......
Cisco 350-401: Implementing Cisco Enterprise Network Core Technologies (350-401 ENCOR) is a certification exam that tests the knowledge and skills required to implement and troubleshoot enterprise-level routing and switching technologies. 350-401 exam is designed for IT professionals who work with Cisco enterprise network technologies and are looking to validate their skills and knowledge in this area.
350-401 Study Material, Preparation Guide and PDF Download: https://www.examsreviews.com/350-401-pass4sure-exam-review.html
Free 350-401 Certification Sample Questions with Online Practice Test: https://drive.google.com/open?id=1qah4mtuvJ3W2RzyxV2YIkgKBBNfPFfMb