Cisco CCIE 350-401 Practice Test Questions and Exam Dumps Part16 Q301-320

View Full Cisco 350-401 Exam Dumps and Practice Test Dumps

 

Question 301

Which protocol is used to provide automatic IPv4 configuration information, including an IP address and default gateway?

  1. DHCP
  2. DNS
  3. NTP
  4. SNMP

Correct Answer: 1

Explanation

Dynamic Host Configuration Protocol (DHCP) automatically provides IPv4 configuration information to clients. A DHCP server can assign an IP address, subnet mask, default gateway, DNS server addresses, lease duration, and other options. This reduces the need for manual configuration and helps administrators maintain consistent addressing across large networks. DHCP commonly uses the DORA process: Discover, Offer, Request, and Acknowledgment. DNS performs name resolution, NTP synchronizes time, and SNMP provides monitoring and management capabilities. DHCP is therefore the appropriate protocol for automated IPv4 host configuration.

Question 302

Which OSPF feature prevents a router from forming full adjacencies with every other router on an Ethernet segment?

  1. Stub area
  2. Route summarization
  3. Designated Router
  4. Virtual link

Correct Answer: 3

Explanation

On a broadcast multiaccess network, OSPF elects a Designated Router (DR) and Backup Designated Router (BDR) to reduce the number of required full adjacencies. Instead of every router forming a full adjacency with every other router, routers establish full relationships with the DR and BDR. This significantly reduces OSPF control traffic and database synchronization overhead. Stub areas reduce external routing information, summarization reduces routing entries, and virtual links provide connectivity between OSPF areas in specific designs. The DR specifically addresses adjacency scalability on multiaccess networks.

Question 303

Which BGP attribute is not advertised to BGP neighbors and is used only on the local Cisco router?

  1. Local Preference
  2. Weight
  3. Community
  4. MED

Correct Answer: 2

Explanation

BGP Weight is a Cisco-specific attribute that is locally significant to the router where it is configured. It is not advertised to BGP peers. A higher Weight is preferred when Cisco performs BGP best-path selection. Because the attribute remains local, administrators can use it to influence outbound path selection on one router without affecting other routers in the autonomous system. Local Preference, Communities, and MED can be exchanged through BGP under appropriate circumstances. Weight is therefore useful for router-specific BGP policy decisions.

Question 304

Which mechanism allows an enterprise to divide one physical network infrastructure into separate virtual routing domains?

  1. VLAN
  2. SPAN
  3. VRF
  4. STP

Correct Answer: 3

Explanation

Virtual Routing and Forwarding (VRF) allows multiple independent routing tables to operate on the same physical network device. Each VRF maintains separate Layer 3 forwarding information, making it possible to isolate customers, departments, or other routing domains. VRF also allows different routing domains to use overlapping IP address spaces without creating direct conflicts. VLANs provide Layer 2 segmentation, STP prevents Layer 2 loops, and SPAN mirrors traffic. VRF is therefore the technology specifically designed to provide separate virtual routing domains.

Question 305

Which command provides information about the current VLANs configured on a Cisco switch?

  1. show vlan brief
  2. show ip route
  3. show arp
  4. show cdp neighbors

Correct Answer: 1

Explanation

The show vlan brief command provides a concise summary of VLANs configured on a Cisco switch. It commonly displays VLAN IDs, VLAN names, status, and the access interfaces associated with each VLAN. Administrators can use this command to verify whether a required VLAN exists and whether access ports are assigned correctly. show ip route displays Layer 3 routing information, show arp provides address-resolution entries, and show cdp neighbors displays directly connected Cisco devices. show vlan brief is therefore useful for basic VLAN verification and troubleshooting.

Question 306

Which BGP attribute is normally preferred when its value is higher and is propagated within an autonomous system through iBGP?

  1. MED
  2. Origin
  3. Local Preference
  4. AS Path

Correct Answer: 3

Explanation

Local Preference is a BGP attribute used to influence outbound path selection within an autonomous system. A higher Local Preference value is normally preferred. Unlike Weight, Local Preference can be advertised through iBGP, allowing multiple routers within the autonomous system to apply a consistent outbound-routing policy. Administrators can assign higher values to preferred exits and lower values to backup paths. MED generally favors lower values, while AS Path and Origin are evaluated at later stages of the BGP best-path process.

Question 307

Which IPv6 address type is automatically configured on an IPv6-enabled interface and is used for communication on the local link?

  1. Global unicast
  2. Anycast
  3. Link-local
  4. Multicast

Correct Answer: 3

Explanation

IPv6 interfaces normally configure a link-local address automatically. Link-local addresses use the FE80::/10 prefix and are valid only on the local network segment. They are essential for Neighbor Discovery and are commonly used as next-hop addresses by IPv6 routing protocols. Routers do not normally forward link-local packets between interfaces. Global unicast addresses provide routable IPv6 connectivity, anycast addresses identify multiple possible destinations, and multicast addresses identify groups of receivers. Link-local addressing is therefore fundamental to normal IPv6 operation.

Question 308

Which protocol allows a network administrator to discover neighboring devices in a multivendor environment?

  1. CDP
  2. LLDP
  3. VTP
  4. DTP

Correct Answer: 2

Explanation

Link Layer Discovery Protocol (LLDP) is an open-standard neighbor-discovery protocol that works across equipment from different vendors. Devices can advertise information such as system name, port identification, device capabilities, and management details. LLDP is useful for documenting physical topology and troubleshooting connectivity in multivendor networks. CDP provides similar discovery functionality but is Cisco proprietary. VTP distributes VLAN information, while DTP negotiates trunking on compatible Cisco interfaces. LLDP is therefore the preferred standards-based protocol for discovering directly connected multivendor devices.

Question 309

Which routing technique combines several contiguous network prefixes into one larger advertisement?

  1. Route summarization
  2. Route redistribution
  3. Policy-based routing
  4. Default routing

Correct Answer: 1

Explanation

Route summarization combines multiple more-specific prefixes into a single broader prefix. This reduces the number of routes that need to be advertised and maintained, which can decrease routing-table size and routing-update overhead. Summarization can also improve network stability because topology changes within the summarized range may remain hidden from other routers. The summary must be designed carefully so that legitimate destinations are not accidentally blackholed. Route redistribution moves routes between routing protocols, while policy-based routing changes forwarding behavior according to configured policies.

Question 310

Which protocol provides encrypted remote CLI access to a Cisco router or switch?

  1. Telnet
  2. FTP
  3. SSH
  4. TFTP

Correct Answer: 3

Explanation

Secure Shell (SSH) provides encrypted remote command-line access to Cisco network devices. SSH protects administrative credentials and management traffic from being transmitted in clear text and normally uses TCP port 22. Cisco devices require appropriate configuration, including a hostname, domain name, user credentials, and cryptographic keys. Telnet also provides remote CLI access but does not encrypt the session. FTP and TFTP are file-transfer protocols. SSH is therefore the preferred protocol for secure remote device administration.

Question 311

Which BGP mechanism is used to reduce the number of iBGP peer sessions required in a large autonomous system?

  1. Route reflector
  2. AS Path prepending
  3. MED
  4. Community

Correct Answer: 1

Explanation

A BGP route reflector reduces the number of iBGP sessions required in a large autonomous system. Without route reflection, iBGP routers traditionally require a full-mesh arrangement so that routing information can be exchanged correctly. As the number of routers increases, the number of sessions can become difficult to manage. A route reflector receives routes from its clients and reflects appropriate routes to other clients or peers. This improves scalability while preserving the basic iBGP routing model. Route reflection is therefore an important BGP scalability mechanism.

Question 312

Which Cisco feature allows multiple physical interfaces to operate as one logical link?

  1. EtherChannel
  2. VLAN
  3. VRF
  4. SPAN

Correct Answer: 1

Explanation

EtherChannel combines multiple physical Ethernet interfaces into a single logical port-channel. This provides increased aggregate bandwidth and redundancy while allowing the network to treat the member links as one logical connection. EtherChannel can be negotiated using protocols such as LACP or configured using static methods. If one physical member fails, the remaining links can continue forwarding traffic when properly configured. VLANs provide Layer 2 segmentation, VRFs provide routing-table isolation, and SPAN mirrors traffic. EtherChannel is specifically designed for link aggregation.

Question 313

Which security feature prevents unauthorized DHCP servers from responding to client requests?

  1. Port Security
  2. DHCP Snooping
  3. Root Guard
  4. DAI

Correct Answer: 2

Explanation

DHCP Snooping helps protect a switched network against rogue DHCP servers. Interfaces connected toward legitimate DHCP servers are configured as trusted, while client-facing interfaces remain untrusted. DHCP server messages received on untrusted interfaces can be blocked, preventing unauthorized devices from offering incorrect network configuration to clients. DHCP Snooping also builds a binding database containing IP and MAC information that can support security features such as Dynamic ARP Inspection and IP Source Guard. Port Security, Root Guard, and DAI address different security concerns.

Question 314

Which OSPF packet is used to exchange summaries of the LSAs contained in a router’s link-state database?

  1. Hello
  2. Link-State Request
  3. Database Description
  4. Link-State Acknowledgment

Correct Answer: 3

Explanation

OSPF Database Description (DBD) packets are used during adjacency formation to summarize the contents of a router’s Link-State Database. Routers compare the information in received DBD packets with their own databases to determine which LSAs they need. Missing or outdated LSAs can then be requested using Link-State Request packets. Hello packets discover and maintain neighbors, while Link-State Acknowledgment packets confirm receipt of LSAs. DBD packets are therefore an important part of OSPF database synchronization during adjacency establishment.

Question 315

Which QoS mechanism limits traffic to a configured rate and typically drops or remarks packets that exceed the permitted rate?

  1. Classification
  2. Shaping
  3. Policing
  4. Queuing

Correct Answer: 3

Explanation

QoS policing monitors traffic against a configured rate and takes action when traffic exceeds the permitted limit. Depending on the policy, excess packets can be dropped or remarked with a different QoS value. Unlike shaping, policing generally does not buffer excess traffic for later transmission. Classification identifies traffic, marking assigns QoS values, and queuing determines transmission order during congestion. Policing is commonly used to enforce bandwidth contracts or prevent a particular traffic class from consuming more resources than its allocated rate.

Question 316

Which protocol is commonly used to synchronize the clocks of routers and switches with a reliable time source?

  1. NTP
  2. DNS
  3. DHCP
  4. FTP

Correct Answer: 1

Explanation

Network Time Protocol (NTP) synchronizes the clocks of network devices with configured time sources. Accurate time is important for correlating Syslog messages, analyzing security events, troubleshooting network problems, validating certificates, and maintaining consistent operational records. Devices can obtain time from trusted NTP servers and can sometimes act as NTP sources for downstream devices. DNS resolves hostnames, DHCP provides network configuration, and FTP transfers files. NTP is therefore the appropriate protocol for maintaining consistent and accurate time across network infrastructure.

Question 317

Which IPv6 address is used to represent all IPv6 nodes on the local link?

  1. FF02::2
  2. FF02::1
  3. FF05::1
  4. FE80::1

Correct Answer: 2

Explanation

FF02::1 is the IPv6 multicast address for all nodes on the local link. IPv6 hosts listen to this multicast group and can receive traffic sent to it when they are members of the relevant local-link scope. FF02::2 represents all IPv6 routers on the local link. IPv6 uses multicast rather than broadcast for these types of group communications. FE80::/10 represents link-local unicast addressing rather than a multicast group. FF02::1 is therefore the appropriate address for all IPv6 nodes on the local link.

Question 318

Which protocol is used to collect structured management information from network devices and can support polling and notifications?

  1. SNMP
  2. SMTP
  3. NTP
  4. FTP

Correct Answer: 1

Explanation

Simple Network Management Protocol (SNMP) provides a framework for monitoring and managing network devices. Network management systems can poll devices for information such as interface counters, CPU utilization, memory usage, and operational status. SNMP can also support asynchronous notifications, including traps and informs, allowing devices to report significant events to management systems. SNMP commonly relies on MIB objects and object identifiers to organize information. NTP handles time synchronization, FTP transfers files, and SMTP handles email delivery. SNMP is therefore appropriate for structured network monitoring.

Question 319

Which routing method forwards packets based on configured policy rules rather than relying solely on the destination routing table?

  1. ECMP
  2. Policy-Based Routing
  3. Route summarization
  4. Default routing

Correct Answer: 2

Explanation

Policy-Based Routing (PBR) allows administrators to make forwarding decisions based on criteria beyond the destination address. Policies can match characteristics such as source IP address, destination, protocol, or other traffic attributes and then specify a particular next hop or forwarding behavior. This can be useful when selected traffic needs to follow a path different from the normal routing-table decision. ECMP uses multiple equal-cost paths, summarization reduces routing information, and default routing provides a fallback path. PBR provides policy-driven forwarding control.

Question 320

Which data modeling language is commonly used with NETCONF and RESTCONF to describe network configuration and operational data?

  1. JSON
  2. XML
  3. YAML
  4. YANG

Correct Answer: 4

Explanation

YANG is a data modeling language designed to describe configuration data, operational state, notifications, and relationships between network-management objects. NETCONF and RESTCONF commonly use YANG models to provide structured and standardized representations of network information. JSON and XML can be used as data encoding formats, while YAML is commonly used for configuration files and automation playbooks. YANG defines what the data means and how it is organized. It therefore plays an important role in modern model-driven network management and automation.