View Full Cisco 350-401 Exam Dumps and Practice Test Dumps

 

Question 61

Which protocol is used to provide automatic IPv6 address configuration without requiring a DHCPv6 server?

1. ARP
2. SLAAC
3. NAT
4. HSRP

Correct Answer: 2

Explanation

Stateless Address Autoconfiguration (SLAAC) allows IPv6 hosts to automatically configure their own addresses using information received through Router Advertisement messages. The router advertises the network prefix, and the host generates an interface identifier to create its IPv6 address. SLAAC can operate without a DHCPv6 server, although DHCPv6 may be used alongside it to provide additional configuration information. ARP is associated with IPv4, NAT translates addresses, and HSRP provides gateway redundancy. SLAAC is therefore an important mechanism for simplifying IPv6 host configuration.

Question 62

Which BGP feature allows a router to advertise a default route to its neighbors?

1. default-information originate
2. passive-interface
3. router-id
4. network statement

Correct Answer: 1

Explanation

The default-information originate feature can be used to advertise a default route into a routing protocol under appropriate conditions. In BGP environments, a router can advertise a default route to a neighbor when the configuration and routing table support that behavior. A default route provides a path for destinations that are not otherwise present in the routing table. The network command has different purposes and requires the corresponding route to exist. Proper default-route advertisement should be designed carefully to avoid unintentionally directing traffic toward an incorrect path.

Question 63

Which protocol is responsible for resolving a hostname into an IP address?

1. DNS
2. DHCP
3. ARP
4. NTP

Correct Answer: 1

Explanation

Domain Name System (DNS) resolves human-readable hostnames and domain names into IP addresses and can also provide other resource information. For example, an application can query DNS to determine the IP address associated with a server name before establishing a connection. DNS uses different record types for different purposes, including A records for IPv4 addresses and AAAA records for IPv6 addresses. DHCP can provide clients with DNS server information, but it does not perform the actual name-resolution process. DNS is therefore essential to normal network application operation.

Question 64

A network administrator needs to identify interfaces experiencing excessive errors. Which command is most useful?

1. show ip route
2. show interfaces
3. show vlan brief
4. show cdp neighbors

Correct Answer: 2

Explanation

The show interfaces command provides detailed information about interface operation, including input errors, output errors, CRC errors, collisions, drops, and other statistics. This information can help identify physical-layer problems, duplex mismatches, cabling issues, congestion, or other interface conditions. show ip route focuses on routing information, show vlan brief displays VLAN assignments, and show cdp neighbors identifies directly connected Cisco devices. Interface statistics should be examined alongside link status and other operational information when troubleshooting connectivity or performance issues.

Question 65

Which OSPF component is used to uniquely identify an OSPF router?

1. Area ID
2. Router ID
3. Process ID
4. Network mask

Correct Answer: 2

Explanation

The OSPF Router ID uniquely identifies a router within an OSPF routing domain. It is represented as a 32-bit value and is commonly selected from manually configured values, loopback addresses, or active interface addresses depending on the device configuration and selection rules. The Router ID is used in OSPF neighbor relationships and link-state advertisements. The Area ID identifies an OSPF area, while the process ID is locally significant to the router’s OSPF process. Proper Router ID planning helps make routing operations easier to understand and troubleshoot.

Question 66

Which technology can extend Layer 2 connectivity across a Layer 3 network using tunneling?

1. VXLAN
2. STP
3. DHCP
4. SNMP

Correct Answer: 1

Explanation

VXLAN can extend Layer 2 network segments across a Layer 3 IP underlay by encapsulating Ethernet frames inside UDP/IP packets. This allows devices belonging to the same logical network to communicate even when the physical infrastructure between them is routed. VXLAN uses VTEPs at the edges of the overlay to perform encapsulation and decapsulation. This architecture is particularly useful in data centers where workload mobility, segmentation, and scalability are important. STP prevents Layer 2 loops, while DHCP and SNMP provide configuration and management functions.

Question 67

Which BGP attribute is commonly used to influence inbound traffic by advertising different MED values?

1. Local Preference
2. MED
3. Weight
4. Origin

Correct Answer: 2

Explanation

Multi-Exit Discriminator (MED) can be used to provide neighboring autonomous systems with information about a preferred entry point into the local autonomous system. A lower MED is generally preferred when comparing routes from the same neighboring autonomous system, subject to the BGP decision process and configuration. MED is therefore useful when an organization has multiple connections to the same external autonomous system. Local Preference and Weight are primarily used internally to influence outbound path selection. MED should be applied carefully because its behavior depends on the surrounding BGP topology and policies.

Question 68

What is the primary purpose of VRRP?

1. Dynamic IP addressing
2. First-hop gateway redundancy
3. DNS resolution
4. Traffic encryption

Correct Answer: 2

Explanation

Virtual Router Redundancy Protocol (VRRP) provides first-hop gateway redundancy by allowing multiple routers to share a virtual IP address. One router performs the forwarding role while another can take over if the active device becomes unavailable. End devices use the virtual address as their default gateway, so they do not need to be reconfigured during a gateway failure. VRRP is an open standard, unlike Cisco’s proprietary HSRP. Both technologies address similar high-availability requirements by providing a resilient default gateway for hosts.

Question 69

Which protocol is commonly used to transfer configuration files without encryption?

1. SCP
2. SFTP
3. TFTP
4. SSH

Correct Answer: 3

Explanation

Trivial File Transfer Protocol (TFTP) is a simple file-transfer protocol commonly used in network environments for transferring configuration files or software images. It does not provide authentication or encryption, so it should generally be used only in trusted environments or when appropriate security controls are in place. SCP and SFTP provide secure file transfer through encrypted mechanisms. SSH provides secure remote management rather than functioning primarily as a simple file-transfer protocol. Network administrators should consider security requirements before selecting TFTP for operational tasks.

Question 70

Which feature allows a Cisco switch to inspect DHCP messages and build a binding database?

1. DHCP snooping
2. PortFast
3. BPDU Guard
4. Root Guard

Correct Answer: 1

Explanation

DHCP snooping monitors DHCP messages passing through a switch and builds a binding database containing information such as client MAC address, assigned IP address, VLAN, and interface. It distinguishes trusted ports, where legitimate DHCP server traffic is expected, from untrusted ports. This feature helps protect against rogue DHCP servers and can provide information used by other security mechanisms. PortFast accelerates access-port transition, BPDU Guard protects against unexpected spanning-tree BPDUs, and Root Guard helps prevent unauthorized devices from becoming the spanning-tree root.

Question 71

Which protocol is used to securely exchange routing information between external autonomous systems?

1. OSPF
2. EIGRP
3. BGP
4. RSTP

Correct Answer: 3

Explanation

BGP is the primary routing protocol used to exchange routing information between autonomous systems. It establishes sessions using TCP and uses path attributes to make policy-based routing decisions. BGP supports large routing tables and provides extensive control over route advertisement and selection. It is widely used between Internet service providers, enterprises with multiple providers, and large-scale networks. OSPF and EIGRP are generally used for internal routing, while RSTP operates at Layer 2 to prevent switching loops and does not exchange IP routing information.

Question 72

Which mechanism can prevent a switch port from accepting unauthorized devices based on MAC addresses?

1. Port security
2. NAT
3. OSPF
4. NetFlow

Correct Answer: 1

Explanation

Port security can restrict which MAC addresses are permitted on a switch port. Administrators can manually specify secure MAC addresses, dynamically learn them, or use sticky learning depending on the platform and design. If an unauthorized MAC address violates the configured policy, the switch can take actions such as dropping traffic, generating notifications, or placing the port into an error-disabled state. Port security is particularly useful on access ports where the expected connected devices are known. It provides an additional Layer 2 security control against unauthorized connections.

Question 73

Which technology provides visibility into traffic flows rather than simply collecting interface counters?

1. NetFlow
2. STP
3. HSRP
4. ARP

Correct Answer: 1

Explanation

NetFlow provides information about network traffic flows, including source and destination addresses, ports, protocols, interfaces, and traffic volume. This information can help administrators understand application usage, identify unusual traffic patterns, investigate security incidents, and analyze bandwidth consumption. Interface counters provide useful statistics but generally do not provide the same level of flow-level visibility. NetFlow data can be exported to collectors for analysis and reporting. Modern Cisco environments may use Flexible NetFlow to provide more flexible flow monitoring and customized fields.

Question 74

Which BGP message is used to advertise network reachability information?

1. OPEN
2. UPDATE
3. KEEPALIVE
4. NOTIFICATION

Correct Answer: 2

Explanation

BGP UPDATE messages are used to advertise new network reachability information and withdraw routes that are no longer available. An UPDATE can include path attributes such as AS Path, Origin, and MED along with reachable prefixes. OPEN messages establish the BGP session, KEEPALIVE messages maintain the relationship, and NOTIFICATION messages report errors. Understanding UPDATE messages is important when troubleshooting route advertisements, withdrawals, and unexpected BGP path selection. Monitoring received and advertised routes can help identify routing-policy or connectivity problems.

Question 75

Which OSPF packet is used to exchange summaries of link-state databases between neighbors?

1. Hello
2. Link-State Update
3. Database Description
4. Link-State Acknowledgment

Correct Answer: 3

Explanation

Database Description (DBD) packets are exchanged during OSPF adjacency formation to summarize the contents of the link-state databases. They allow neighboring routers to determine which Link-State Advertisements they need to request. Hello packets establish and maintain neighbor relationships, Link-State Update packets carry LSAs, and Link-State Acknowledgment packets confirm receipt of LSAs. DBD exchanges are therefore an important part of the process that allows OSPF neighbors to synchronize their topology information before reaching the fully adjacent state where required.

Question 76

Which protocol provides a secure method for transferring files using SSH?

1. SCP
2. TFTP
3. FTP
4. SNMP

Correct Answer: 1

Explanation

Secure Copy Protocol (SCP) uses SSH to provide encrypted file transfers between systems. It is commonly used by network administrators to move configuration files, software images, and other files securely between Cisco devices and servers. Because the transfer occurs through an encrypted SSH session, SCP provides stronger protection than protocols such as TFTP and traditional FTP. Secure file transfer is especially important when files contain sensitive configuration information. Administrators should also verify file integrity and ensure that appropriate authentication and authorization controls are in place.

Question 77

Which IPv4 address range is reserved for private Class A addressing?

1. 172.16.0.0/12
2. 192.168.0.0/16
3. 10.0.0.0/8
4. 127.0.0.0/8

Correct Answer: 3

Explanation

The 10.0.0.0/8 range is reserved for private IPv4 addressing and provides a large private address space for internal networks. Private addresses are not directly routable across the public Internet and are commonly used within enterprise environments. The other major private ranges are 172.16.0.0/12 and 192.168.0.0/16. The 127.0.0.0/8 range is reserved for IPv4 loopback functionality. Private addressing is frequently combined with NAT or other mechanisms when internal hosts require access to public networks.

Question 78

Which protocol can provide device configuration management using structured data models and transactions?

1. NETCONF
2. Telnet
3. CDP
4. ARP

Correct Answer: 1

Explanation

NETCONF is a network management protocol designed to install, modify, and retrieve configuration data using structured data models. It supports operations that can provide more controlled configuration management than manually entering individual CLI commands. NETCONF commonly uses YANG models to describe configuration and operational data and typically uses SSH as its secure transport. Its capabilities make it useful for network automation and consistent configuration management across devices. Telnet provides remote CLI access, CDP discovers neighbors, and ARP resolves IPv4 addresses to MAC addresses.

Question 79

Which security mechanism can inspect ARP packets and help prevent ARP spoofing?

1. DHCP snooping
2. Dynamic ARP Inspection
3. PortFast
4. EtherChannel

Correct Answer: 2

Explanation

Dynamic ARP Inspection (DAI) helps protect Layer 2 networks against ARP spoofing and poisoning attacks. It validates ARP packets on untrusted interfaces by comparing their information against trusted bindings, commonly obtained from the DHCP snooping binding database. Invalid ARP messages can be dropped, helping prevent attackers from associating their MAC address with another device’s IP address. DHCP snooping is often used as a foundation for DAI, while PortFast and EtherChannel serve different Layer 2 functions. Proper trust-boundary configuration is essential for effective DAI operation.

Question 80

Which network design provides separate access, distribution, and core layers in a traditional hierarchical architecture?

1. Three-tier campus architecture
2. Peer-to-peer architecture
3. Flat network architecture
4. Single-router architecture

Correct Answer: 1

Explanation

The traditional three-tier campus architecture separates network functions into access, distribution, and core layers. The access layer connects end devices, the distribution layer provides aggregation, policy enforcement, and Layer 3 boundaries, and the core layer provides fast and highly available connectivity between distribution blocks. This hierarchical approach improves scalability, manageability, and fault isolation. Modern campus designs may use a two-tier collapsed-core architecture where appropriate, but the three-tier model remains an important foundational design concept for understanding enterprise network architecture and redundancy.