350-401 Premium Files Updated Jan-2024 Practice Valid Exam Dumps Question [Q232-Q252]

350-401 Premium Files Updated Jan-2024 Practice Valid Exam Dumps Question

Practice with 350-401 Dumps for CCNP Enterprise Certified Exam Questions & Answer

NEW QUESTION # 232
Drag and drop the solutions that comprise Cisco Cyber Threat Defense from the left onto the objectives they accomplish on the right.

Answer:

Explanation:

NEW QUESTION # 233
Refer the exhibit.

Which router is the designated router on the segment 192.168.0.0/24?

A. Router Chicago because it has a lower router ID
B. This segment has no designated router because it is a p2p network type.
C. Router NewYork because it has a higher router ID
D. This segment has no designated router because it is a nonbroadcast network type.

Answer: B

NEW QUESTION # 234
Drag and drop the wireless elements on the left to their definitions on the right.

Answer:

Explanation:

Explanation
Chart, line chart Description automatically generated

NEW QUESTION # 235
Which deployment option of Cisco NGFW provides scalability?

A. inline tap
B. high availability
C. tap
D. clustering

Answer: D

Explanation:
Clustering lets you group multiple Firepower Threat Defense (FTD) units together as a single logical device. Clustering is only supported for the FTD device on the Firepower 9300 and the Firepower 4100 series. A cluster provides all the convenience of a single device (management, integration into a network) while achieving the increased throughput and redundancy of multiple devices.}

NEW QUESTION # 236
Refer to the exhibit.

An engineer must deny Telnet traffic from the loopback interface of router R3 to the loopback interface of router R2 during the weekend hours. All other traffic between the loopback interfaces of routers R3 and R2 must be allowed at all times. Which command accomplish this task?
A)

B)

C)

D)

A. Option B
B. Option A
C. Option D
D. Option C

Answer: D

Explanation:
We cannot filter traffic that is originated from the local router (R3 in this case) so
we can only configure the ACL on R1 or R2. "Weekend hours" means from Saturday
morning through Sunday night so we have to configure: "periodic weekend 00:00
to 23:59".
Note: The time is specified in 24-hour time (hh:mm), where the hours range from 0
to 23 and the minutes range from 0 to 59.

NEW QUESTION # 237
Drag and drop the characteristics from the left onto the correct routing protocol types on the right.

Answer:

Explanation:

Explanation
1,3,6EIGRP,
2,4,5OSPF

NEW QUESTION # 238
Drag and drop the characteristics from the left onto the routing protocols they describe on the right.

Answer:

Explanation:

NEW QUESTION # 239
Which measurement is used from a post wireless survey to depict the cell edge of the access points?

A. RSSI
B. CCI
C. SNR
D. Noise

Answer: C

NEW QUESTION # 240
Which type of tunnel Is required between two WLCs to enable Intercontroller roaming?

A. iPsec
B. CAPWAP
C. LWAPP
D. mobility

Answer: D

NEW QUESTION # 241
What is a characteristic of MACsec?

A. 802.1AE is bult between the host and switch using the MKA protocol, which negotiates encryption keys based on the master session key from a successful 802.1X session
B. 802.1AE is bult between the host and switch using the MKA protocol using keys generated via the Diffie-Hellman algorithm (anonymous encryption mode)
C. 802.1AE is negotiated using Cisco AnyConnect NAM and the SAP protocol
D. 802.1AE provides encryption and authentication services

Answer: D

Explanation:
MACsec, defined in 802.1AE, provides MAC-layer encryption over wired networks by using out-of-band methods for encryption keying. The MACsec Key Agreement (MKA) Protocol provides the required session keys and manages the required encryption keys. MKA and MACsec are implemented after successful authentication using the 802.1x Extensible Authentication Protocol (EAP-TLS) or Pre Shared Key (PSK) framework.

NEW QUESTION # 242
Drag and drop the characteristics from the left onto the infrastructure types on the right.

Answer:

Explanation:

Explanation

NEW QUESTION # 243
Refer to exhibit.

VLANs 50 and 60 exist on the trunk links between all switches All access ports on SW3 are configured for VLAN 50 and SW1 is the VTP server Which command ensures that SW3 receives frames only from VLAN
50?

A. SW3(config)#vtp mode transparent
B. SW2(config)#vtp pruning
C. SW1(config)#vtp mode transparent
D. SW1(config)#vtp pruning

Answer: D

Explanation:
Explanation
SW3 does not have VLAN 60 so it should not receive traffic for this VLAN (sent from SW2).
Therefore we should configure VTP Pruning on SW3 so that SW2 does not forward VLAN 60 traffic to SW3. Also notice that we need to configure pruning on SW1 (the VTP Server), not SW2.

NEW QUESTION # 244
A customer has 20 stores located throughout a city. Each store has a single Cisco AP managed by a central WLC. The customer wants to gather analytics for users in each store. Which technique supports these requirements?

A. trilateration
B. angle of arrival
C. presence
D. hyperlocation

Answer: C

Explanation:
We only have one AP in each store so we can only user "Presence", which is the most basic form of location tracking.

NEW QUESTION # 245
Drag and drop the Qos mechanisms from the left to the correct descriptions on the right

Answer:

Explanation:

NEW QUESTION # 246
Drag and drop the Qos mechanisms from the left to the correct descriptions on the right

Answer:

Explanation:

NEW QUESTION # 247
Refer to the exhibit.

Refer to the exhibit. R1 and R2 are directly connected, but the BGP session does not establish. Which action must be taken to build an eBGP session?

A. Configure neighbor 2.2.2.2 remote-as 65002 under R1 BGP process.
B. Configure neighbor 192.168.12.1 activate under R2 BGP process.
C. Configure no neighbor 192.168.12.1 shutdown under R2 BGP process.
D. Configure ip route 1.1.1.1 0.0.0.0 192.168.12.1 on R2.

Answer: C

NEW QUESTION # 248
Which method does the enable secret password option use to encrypt device passwords?

A. PAP
B. CHAP
C. AES
D. MD5

Answer: D

Explanation:
Explanation/Reference: https://www.cisco.com/c/en/us/support/docs/security-vpn/remote-authentication-dial-user-service- radius/107614-64.html

NEW QUESTION # 249
Drag and drop the characteristics from the left onto the routing protocols they describe on the right.

Answer:

Explanation:

Explanation
Diagram Description automatically generated

NEW QUESTION # 250
Drag and drop the characteristics from the left onto the QoS components they describe on the right.

Answer:

Explanation:
Marking = applied on traffic to convey Information to a downstream device Classification = distinguish traffic types Trust = Permits traffic to pass through the device while retaining DSCP/COS values shapping = process used to buffer traffic that exceeds a predefined rate.

NEW QUESTION # 251
Refer to the exhibit.

Which configuration establishes EBGP neighborship between these two directly connected neighbors and exchanges the loopback network of the two routers through BGP?
A)

B)

C)

D)