View Full Cisco 350-401 Exam Dumps and Practice Test Dumps

 

Question 181

Which BGP attribute is used to identify the preferred exit point from an autonomous system?

1. MED
2. Local Preference
3. Origin
4. AS Path

Correct Answer: 2

Explanation

Local Preference is a BGP attribute used within an autonomous system to influence which exit point should be preferred for outbound traffic. A higher Local Preference value is normally preferred. Because the attribute is propagated through iBGP, administrators can establish a consistent outbound routing policy across multiple internal routers. For example, an organization can assign a higher Local Preference to routes learned through a primary Internet connection. MED is more commonly used to influence inbound path selection from neighboring autonomous systems.

Question 182

Which Cisco command displays the VLANs configured on a switch and their associated access ports?

1. show vlan brief
2. show ip route
3. show cdp neighbors
4. show spanning-tree summary

Correct Answer: 1

Explanation

The show vlan brief command provides a concise view of VLANs configured on a Cisco switch. Its output normally includes VLAN IDs, VLAN names, status, and access interfaces assigned to each VLAN. This makes it useful when troubleshooting VLAN membership and verifying whether a switch port has been placed into the expected VLAN. It does not provide detailed routing information or neighbor details. Commands such as show ip route and show cdp neighbors are used for different troubleshooting purposes.

Question 183

Which protocol is used to exchange routing information between routers within an OSPF area?

1. BGP
2. OSPF
3. DHCP
4. SNMP

Correct Answer: 2

Explanation

OSPF routers exchange link-state information to build a common view of the network topology within an OSPF area. They use OSPF packets and Link-State Advertisements to discover neighbors, synchronize databases, and communicate topology changes. After obtaining the required information, each router independently runs the SPF algorithm to calculate the best paths. BGP is primarily used for interdomain routing, DHCP provides host configuration, and SNMP provides network-management functions. OSPF is therefore responsible for dynamic routing information exchange within the OSPF domain.

Question 184

Which IPv4 address is reserved for testing the local TCP/IP stack without sending traffic onto the physical network?

1. 192.168.1.1
2. 10.1.1.1
3. 127.0.0.1
4. 169.254.1.1

Correct Answer: 3

Explanation

The IPv4 address 127.0.0.1 is the commonly used loopback address for testing the local TCP/IP stack. Traffic sent to this address remains within the local host and does not need to be transmitted through a physical network interface. The entire 127.0.0.0/8 range is reserved for loopback purposes. Private addresses such as 10.0.0.0/8 are intended for internal networks, while 169.254.0.0/16 is used for IPv4 link-local addressing. Loopback testing is useful for verifying local protocol-stack operation.

Question 185

Which OSPF packet type is responsible for discovering neighboring OSPF routers?

1. Database Description
2. Hello
3. Link-State Update
4. Link-State Acknowledgment

Correct Answer: 2

Explanation

OSPF Hello packets are used to discover and maintain neighboring OSPF relationships. Routers periodically send Hello messages through OSPF-enabled interfaces and use the information received to identify compatible neighbors. Hello packets also contain parameters such as the area ID, timers, network mask, and other values that must match for an adjacency to form correctly. Database Description packets synchronize database summaries after neighbor discovery, while Link-State Updates carry LSAs and Link-State Acknowledgments confirm their receipt.

Question 186

Which QoS process assigns packets to traffic classes based on characteristics such as IP address, protocol, or application?

1. Classification
2. Shaping
3. Queuing
4. Policing

Correct Answer: 1

Explanation

QoS classification identifies packets and places them into appropriate traffic classes based on characteristics such as source or destination IP address, protocol, port number, application, or existing marking. Once traffic has been classified, other QoS mechanisms can apply actions such as marking, policing, shaping, or specialized queuing. Classification is therefore an early step in many QoS policies. Shaping controls transmission rates, policing enforces rate limits, and queuing determines how packets are scheduled when resources are congested.

Question 187

Which protocol provides centralized monitoring information about network devices using management objects?

1. NTP
2. DNS
3. SNMP
4. DHCP

Correct Answer: 3

Explanation

Simple Network Management Protocol (SNMP) allows network-management systems to monitor and manage network devices using structured management information. Devices expose information through Management Information Base (MIB) objects, which can represent values such as interface counters, device status, CPU utilization, and other operational statistics. SNMP managers can retrieve information from agents, while devices can send notifications such as traps or informs. NTP synchronizes time, DNS resolves names, and DHCP provides host configuration, making SNMP the appropriate choice for centralized network monitoring.

Question 188

Which feature enables a Cisco router to use a floating static route as a backup path?

1. Higher administrative distance
2. Lower metric
3. Higher local preference
4. Lower router ID

Correct Answer: 1

Explanation

A floating static route is configured with an administrative distance higher than that of the primary route source. Because the higher administrative distance makes it less preferred, the static route remains inactive while the primary route is available. If the primary route disappears, the floating static route can become the best available path and enter the routing table. This provides a simple backup mechanism without requiring a separate dynamic routing protocol. The technique is useful for WAN failover and other redundant connectivity designs.

Question 189

Which Cisco feature can protect against a switch becoming the unintended root bridge in an STP topology?

1. Root Guard
2. PortFast
3. DHCP snooping
4. IP Source Guard

Correct Answer: 1

Explanation

Root Guard protects the intended spanning-tree topology by preventing a port from becoming a path toward an unauthorized root bridge. If superior BPDUs are received on a Root Guard-enabled interface, the port can enter a root-inconsistent state rather than allowing the unexpected device to influence the topology. This is useful on interfaces where administrators expect the connected switch to remain downstream. PortFast provides rapid access-port forwarding, DHCP snooping protects DHCP operations, and IP Source Guard helps prevent source IP spoofing.

Question 190

Which protocol is used by Cisco switches to exchange VLAN information in a VTP domain?

1. LACP
2. VTP
3. OSPF
4. RADIUS

Correct Answer: 2

Explanation

VLAN Trunking Protocol (VTP) is a Cisco proprietary protocol designed to distribute VLAN configuration information between switches participating in the same VTP domain. Depending on the VTP version and configuration, switches can operate in different modes that determine how VLAN information is learned and modified. VTP can simplify VLAN administration but must be deployed carefully because an incorrect configuration can affect multiple switches. LACP manages link aggregation, OSPF provides routing, and RADIUS supports centralized authentication and authorization.

Question 191

Which BGP attribute is commonly used to make a route less preferred by increasing the apparent AS path length?

1. Local Preference
2. MED
3. AS Path
4. Weight

Correct Answer: 3

Explanation

The AS Path attribute can be manipulated through AS-path prepending to make a BGP route appear less attractive to external networks. By adding additional copies of the local autonomous system number to the advertised AS Path, an organization can make that route appear longer. Since shorter AS paths are generally preferred during BGP path selection, another available route may become more attractive. AS-path prepending is often used for inbound traffic engineering. It does not guarantee the desired result because remote networks may apply their own routing policies.

Question 192

Which technology provides a Layer 3 interface for routing traffic between VLANs on a multilayer switch?

1. SVI
2. SPAN
3. EtherChannel
4. CDP

Correct Answer: 1

Explanation

A Switched Virtual Interface (SVI) provides a logical Layer 3 interface associated with a VLAN on a multilayer switch. By assigning an IP address to an SVI and enabling Layer 3 routing, the switch can route traffic between different VLANs. SVIs are also commonly used as default gateways for hosts within the associated VLAN. This approach allows inter-VLAN routing to occur directly on the multilayer switch rather than requiring a separate external router. SPAN, EtherChannel, and CDP perform traffic-monitoring, link-aggregation, and discovery functions.

Question 193

Which IPv6 mechanism detects whether another device is already using an address before the address is assigned to an interface?

1. SLAAC
2. Duplicate Address Detection
3. DHCP relay
4. NAT

Correct Answer: 2

Explanation

Duplicate Address Detection (DAD) is an IPv6 Neighbor Discovery process used to determine whether an address is already in use before an interface begins using it. The host sends an appropriate Neighbor Solicitation message and checks whether another device responds or otherwise indicates that the address is already assigned. DAD helps prevent duplicate IPv6 addresses from causing communication problems. SLAAC can generate IPv6 addresses, but DAD is the mechanism that checks address uniqueness. NAT is generally unnecessary for normal IPv6 addressing.

Question 194

Which protocol can provide authentication, authorization, and accounting for users accessing network services?

1. RADIUS
2. NTP
3. OSPF
4. DNS

Correct Answer: 1

Explanation

RADIUS is an AAA protocol that can provide authentication, authorization, and accounting for users accessing network services. It is widely used for services such as wireless authentication, VPN access, and network-access control. A centralized RADIUS server allows organizations to manage user credentials and access policies instead of maintaining independent authentication databases on every network device. TACACS+ is another AAA protocol and is often preferred for detailed network-device administration. RADIUS remains widely deployed for centralized authentication of network-access users.

Question 195

Which command displays information about directly connected Cisco neighbors, including their device IDs and local interfaces?

1. show ip protocols
2. show cdp neighbors
3. show vlan brief
4. show ip bgp

Correct Answer: 2

Explanation

The show cdp neighbors command displays information learned through Cisco Discovery Protocol from directly connected Cisco devices. The output can include the neighboring device ID, local interface, remote port, device capability, platform, and other details. This makes the command useful for verifying physical topology and identifying which devices are connected to particular interfaces. CDP is Cisco proprietary, while LLDP provides a vendor-neutral alternative. The other commands focus on routing protocols, VLANs, or BGP information rather than neighbor discovery.

Question 196

Which routing protocol supports unequal-cost load balancing?

1. OSPF
2. RIP
3. EIGRP
4. BGP

Correct Answer: 3

Explanation

EIGRP supports unequal-cost load balancing through its variance feature when qualifying routes meet the required conditions. This allows the router to use multiple paths even when their metrics are not identical, which can improve bandwidth utilization in certain network designs. EIGRP’s feasibility condition helps ensure that selected alternate paths remain loop-free. OSPF and RIP generally use equal-cost multipath when multiple paths have the same cost, while BGP uses its own path-selection attributes. EIGRP therefore provides a distinctive capability for unequal-cost routing.

Question 197

Which security mechanism validates ARP packets by checking their IP-to-MAC binding information?

1. Dynamic ARP Inspection
2. PortFast
3. STP
4. VTP

Correct Answer: 1

Explanation

Dynamic ARP Inspection (DAI) validates ARP packets to help prevent ARP spoofing attacks. On switches where DHCP snooping is deployed, DAI can compare ARP information against trusted DHCP snooping bindings. If the source IP and MAC information in an ARP message does not match the expected binding, the switch can discard the packet. This helps protect hosts from attackers attempting to impersonate another device or the default gateway. PortFast, STP, and VTP address spanning-tree or VLAN-management functions rather than ARP validation.

Question 198

Which protocol is commonly used to transport telemetry or configuration data in a model-driven network-management environment?

1. NETCONF
2. ARP
3. STP
4. DHCP

Correct Answer: 1

Explanation

NETCONF is a model-driven network-management protocol used to retrieve and modify device configuration and operational data. It commonly uses YANG data models to provide structured information and typically operates over SSH for secure communication. NETCONF supports operations such as retrieving configuration, editing configuration, and committing changes depending on the implementation. This makes it useful for automation and consistent device management. ARP resolves IPv4 addresses to MAC addresses, STP prevents Layer 2 loops, and DHCP provides host configuration.

Question 199

Which technology allows network traffic from multiple VLANs to traverse a single physical switch link?

1. Access port
2. Trunk link
3. Loopback interface
4. Routed port

Correct Answer: 2

Explanation

A trunk link allows traffic from multiple VLANs to traverse a single physical connection between network devices. IEEE 802.1Q tagging identifies the VLAN associated with each Ethernet frame so the receiving switch can maintain the appropriate logical segmentation. Trunks are commonly used between switches and between switches and other devices that need access to multiple VLANs. An access port normally carries traffic for one VLAN, while a routed port operates at Layer 3. Trunk configuration must be consistent at both ends for proper operation.

Question 200

Which network automation approach uses a REST API to send HTTP requests to a network controller or device?

1. Manual CLI configuration
2. REST-based automation
3. Console access
4. Serial management

Correct Answer: 2

Explanation

REST-based automation uses HTTP methods such as GET, POST, PUT, PATCH, and DELETE to interact programmatically with network controllers or devices that expose REST APIs. Applications can use these interfaces to retrieve information, create resources, modify configurations, or remove objects without requiring manual CLI interaction. REST APIs commonly exchange structured formats such as JSON or XML. This approach enables repeatable automation and integration with external applications, orchestration platforms, and management systems. Proper authentication, authorization, and transport encryption should be used when accessing network APIs.