View Full Cisco 350-401 Exam Dumps and Practice Test Dumps

 

Question 281

Which protocol is commonly used to exchange routing information between different autonomous systems on the Internet?

1. BGP
2. OSPF
3. EIGRP
4. RIP

Correct Answer: 1

Explanation

Border Gateway Protocol (BGP) is the primary routing protocol used to exchange routing information between different autonomous systems. It is classified as an exterior gateway protocol and uses path attributes and routing policies to select preferred routes. BGP is designed to support large-scale routing and provides extensive control over how prefixes are advertised and selected. OSPF, EIGRP, and RIP are generally used as interior gateway protocols within an autonomous system. BGP is therefore fundamental to communication between independently administered networks and Internet service providers.

Question 282

What is the primary purpose of an SVI on a multilayer switch?

1. Provide physical connectivity to an Ethernet cable
2. Provide a Layer 3 interface associated with a VLAN
3. Create a wireless tunnel
4. Encrypt traffic between switches

Correct Answer: 2

Explanation

A Switched Virtual Interface (SVI) is a virtual Layer 3 interface associated with a VLAN on a multilayer switch. An SVI can be assigned an IP address and used as the default gateway for devices within that VLAN. SVIs are also used when a multilayer switch performs inter-VLAN routing. Unlike physical interfaces, SVIs do not require a dedicated physical port for each VLAN. They provide an efficient way to combine switching and routing functions on the same device and are widely used in enterprise campus networks.

Question 283

Which BGP feature allows routes to be summarized into a shorter prefix advertisement?

1. Route reflection
2. Route aggregation
3. Community tagging
4. MED

Correct Answer: 2

Explanation

BGP route aggregation combines multiple more-specific prefixes into a summarized prefix that can be advertised to neighboring routers. This can reduce the number of routes carried in the BGP routing table and decrease routing-update overhead. Aggregation can also help hide internal topology details from external networks. Administrators must carefully consider more-specific routes and attributes when configuring aggregation because summarization can affect traffic forwarding and path selection. Route reflection addresses iBGP scalability, while communities and MED are used primarily for routing policy.

Question 284

Which Cisco feature can track the reachability of a remote IP address and influence a static route based on the result?

1. IP SLA
2. CDP
3. VTP
4. SPAN

Correct Answer: 1

Explanation

IP Service Level Agreements (IP SLA) can generate synthetic traffic and measure characteristics such as reachability, delay, jitter, or response time. When combined with object tracking, IP SLA can influence routing decisions based on whether a monitored destination remains reachable. For example, an administrator can use IP SLA to test an upstream gateway and remove a primary static route when the test fails, allowing a backup route to become active. CDP, VTP, and SPAN provide entirely different network functions.

Question 285

Which BGP attribute is normally evaluated first when Cisco routers select the best path?

1. Local Preference
2. AS Path
3. Weight
4. MED

Correct Answer: 3

Explanation

On Cisco routers, Weight is normally the first major attribute considered during BGP best-path selection. A higher Weight value is preferred. Weight is locally significant, meaning it affects path selection only on the router where it is configured and is not advertised to BGP peers. This makes it useful when administrators want to influence outbound routing decisions on a specific router without changing the policy across the entire autonomous system. Local Preference, AS Path, and MED are evaluated later in the selection process.

Question 286

Which technology allows a network administrator to divide a physical Layer 2 switch into multiple logical broadcast domains?

1. VLAN
2. VRF
3. NAT
4. GRE

Correct Answer: 1

Explanation

A Virtual LAN (VLAN) divides a physical switched network into separate logical Layer 2 broadcast domains. Devices belonging to different VLANs remain isolated at Layer 2 unless a router or multilayer switch provides inter-VLAN routing. VLANs allow administrators to organize users and devices according to departments, functions, security requirements, or locations without requiring separate physical switches for every group. VRF provides Layer 3 routing separation, NAT translates addresses, and GRE creates tunnels. VLANs specifically provide logical Layer 2 segmentation.

Question 287

Which BGP attribute is attached to a route to identify the router that originated the BGP process?

1. Local Preference
2. BGP Router ID
3. MED
4. Community

Correct Answer: 2

Explanation

The BGP Router ID uniquely identifies a BGP speaker within the BGP process. It is a 32-bit value typically selected from a manually configured router ID, the highest loopback address, or another eligible address depending on platform behavior. The Router ID is used in several BGP operations, including identifying peers and participating in best-path tie-breaking. It is not a route-policy attribute like Local Preference, MED, or Community. Properly understanding Router ID selection is useful when troubleshooting BGP neighbor relationships and path selection.

Question 288

Which OSPF packet type is used to discover and maintain neighboring routers?

1. Link-State Update
2. Database Description
3. Hello
4. Link-State Acknowledgment

Correct Answer: 3

Explanation

OSPF Hello packets are used to discover neighboring routers and maintain existing neighbor relationships. Hello messages contain information such as the router ID, area ID, timers, network mask, and neighbor information. OSPF routers must have compatible parameters before they can form the appropriate neighbor relationship. Hello packets are also periodically exchanged to confirm that neighbors remain reachable. Database Description packets summarize link-state information, Link-State Updates carry LSAs, and acknowledgments confirm their receipt. Hello packets are therefore essential to OSPF neighbor discovery and maintenance.

Question 289

Which security feature validates ARP packets against trusted IP-to-MAC address bindings?

1. Port Security
2. Dynamic ARP Inspection
3. Root Guard
4. SPAN

Correct Answer: 2

Explanation

Dynamic ARP Inspection (DAI) helps protect a switched network from ARP spoofing and poisoning attacks. It validates ARP packets by comparing their IP-to-MAC information against trusted bindings, commonly obtained from the DHCP Snooping binding database. Invalid ARP messages can be dropped, preventing attackers from associating their MAC address with another host’s IP address. Port Security limits MAC addresses, Root Guard protects the spanning-tree topology, and SPAN mirrors traffic. DAI specifically addresses the security and validation of ARP traffic.

Question 290

Which routing protocol uses a cost value based primarily on interface bandwidth to calculate the best path?

1. OSPF
2. RIP
3. BGP
4. EIGRP

Correct Answer: 1

Explanation

OSPF uses a cost metric to determine the preferred path, with the default cost commonly derived from interface bandwidth and the reference bandwidth configured for the OSPF process. Lower OSPF cost is preferred. Administrators can adjust reference bandwidth when operating networks with high-speed interfaces so that different link speeds receive meaningful cost values. RIP uses hop count, EIGRP uses a composite metric, and BGP relies on path attributes. Understanding OSPF cost is important when controlling path selection within an OSPF domain.

Question 291

Which technology can provide first-hop redundancy by allowing multiple routers to share a virtual gateway address?

1. VRF
2. VXLAN
3. HSRP
4. NAT

Correct Answer: 3

Explanation

Hot Standby Router Protocol (HSRP) provides first-hop gateway redundancy by allowing multiple routers to share a virtual IP address. Hosts use this virtual address as their default gateway, while HSRP routers negotiate active and standby roles. If the active router fails, the standby router can assume the active role and continue forwarding traffic using the virtual gateway identity. This improves gateway availability without requiring hosts to change their configured default gateway. VRF, VXLAN, and NAT perform different network segmentation, overlay, and address-translation functions.

Question 292

Which protocol is commonly used to securely manage a Cisco device through a web-based REST interface?

1. Telnet
2. RESTCONF
3. TFTP
4. RADIUS

Correct Answer: 2

Explanation

RESTCONF provides a REST-based interface for managing network devices using structured YANG-modeled data. When secured with HTTPS, RESTCONF protects management communication through encryption and allows applications to interact with devices using familiar HTTP methods. It can retrieve operational information and modify configuration data programmatically. Telnet provides remote CLI access without encryption, TFTP is used for simple file transfers, and RADIUS provides AAA services. RESTCONF is therefore well suited for modern web-based network automation and programmatic device management.

Question 293

Which protocol can provide centralized authentication and authorization for users accessing a network through VPN or wireless services?

1. RADIUS
2. OSPF
3. NTP
4. LLDP

Correct Answer: 1

Explanation

RADIUS is a widely used AAA protocol for centralized authentication, authorization, and accounting, particularly for network access services such as wireless LANs, VPNs, and 802.1X. A network device can forward user credentials to a centralized RADIUS server, which validates the user and returns authorization information. Centralized AAA simplifies account management and allows organizations to apply consistent access policies. OSPF provides routing, NTP synchronizes time, and LLDP discovers neighboring devices. RADIUS is therefore appropriate for centralized network-access authentication.

Question 294

Which IPv6 address type identifies multiple interfaces but delivers traffic to the nearest one according to routing?

1. Multicast
2. Anycast
3. Broadcast
4. Link-local

Correct Answer: 2

Explanation

An IPv6 anycast address can be assigned to multiple interfaces, but traffic sent to that address is delivered to the topologically nearest interface according to the routing system. Anycast is useful for services that should be reachable through multiple distributed locations, such as redundant infrastructure services. IPv6 does not use traditional broadcast addressing. Multicast delivers traffic to multiple members of a defined group, while link-local addresses are limited to the local network segment. Anycast therefore provides a mechanism for reaching the nearest available instance of a service.

Question 295

Which BGP attribute can be used to assign a tag to routes so that routing policies can match groups of prefixes?

1. Weight
2. AS Path
3. Community
4. Origin

Correct Answer: 3

Explanation

The BGP Community attribute allows administrators to tag routes with values that can be used in routing policies. Instead of writing individual policies for many prefixes, administrators can apply a common community value and then create policies that match that tag. Communities can represent characteristics such as customer type, geographic location, or preferred treatment. Standard, extended, and large communities provide different capabilities. Weight and Local Preference influence path selection, while AS Path identifies autonomous systems traversed. Communities are primarily useful for scalable BGP policy control.

Question 296

Which feature can automatically disable a switch port when an unauthorized MAC address violates a configured security policy?

1. Port Security
2. DHCP Snooping
3. IP SLA
4. NetFlow

Correct Answer: 1

Explanation

Port Security can restrict the MAC addresses permitted on a switch interface and define violation actions when an unauthorized address is detected. Depending on the configured violation mode, the switch can drop unauthorized frames, generate notifications, or place the interface into an error-disabled state. This helps prevent unauthorized devices from gaining access through protected access ports. DHCP Snooping focuses on DHCP traffic, IP SLA measures network performance, and NetFlow collects flow statistics. Port Security is therefore the appropriate feature for controlling MAC addresses and enforcing access-port policies.

Question 297

Which OSPF database contains the collection of LSAs describing the topology known to an OSPF router?

1. ARP table
2. MAC address table
3. Link-State Database
4. NAT table

Correct Answer: 3

Explanation

The OSPF Link-State Database (LSDB) contains the collection of Link-State Advertisements that describe the topology of an OSPF area. Each OSPF router within the same area should maintain a synchronized LSDB so that routers have a consistent view of the topology. The SPF algorithm uses information from this database to calculate the shortest paths and populate the routing table. The ARP table maps IP addresses to Layer 2 addresses, the MAC table contains switching information, and the NAT table records address translations. The LSDB is central to OSPF operation.

Question 298

Which QoS function assigns a value such as DSCP or CoS to packets so that they can receive differentiated treatment?

1. Shaping
2. Marking
3. Policing
4. Queuing

Correct Answer: 2

Explanation

QoS marking modifies or assigns packet classification values such as IP DSCP or Ethernet 802.1p CoS. These markings allow downstream devices to identify traffic classes and apply appropriate forwarding, queuing, or congestion-management policies. Marking normally occurs after traffic has been classified according to characteristics such as source, destination, application, or protocol. Policing limits traffic rates, shaping buffers and smooths traffic, and queuing determines transmission order during congestion. Marking therefore provides the identification information used for differentiated QoS treatment across the network.

Question 299

Which protocol is used by a Cisco switch to learn the identity and capabilities of directly connected Cisco devices?

1. CDP
2. DHCP
3. SNMP
4. NTP

Correct Answer: 1

Explanation

Cisco Discovery Protocol (CDP) is a Cisco proprietary Layer 2 discovery protocol that allows Cisco devices to advertise and learn information about directly connected Cisco neighbors. CDP can provide details such as device ID, local and remote interfaces, platform, software version, and capabilities. It is useful for network discovery and troubleshooting physical connectivity. LLDP provides similar functionality through an open standard, but CDP is specifically associated with Cisco devices. DHCP assigns network configuration, SNMP provides management information, and NTP synchronizes time.

Question 300

Which network automation method allows a controller or application to make structured configuration changes using a transactional protocol over SSH?

1. RESTCONF
2. NETCONF
3. SNMP
4. Syslog

Correct Answer: 2

Explanation

NETCONF is a model-driven network management protocol commonly transported over SSH and designed for structured configuration operations. It supports transactional operations such as retrieving configuration, editing candidate configuration, validating changes, and committing them. NETCONF commonly works with YANG data models, allowing automation applications to interact with devices using structured data rather than relying on screen-scraping CLI commands. RESTCONF provides similar model-driven capabilities through HTTP-based REST operations. SNMP and Syslog serve monitoring and event-logging purposes rather than transactional configuration management.