{"id":12907,"date":"2026-09-15T13:14:08","date_gmt":"2026-09-15T13:14:08","guid":{"rendered":"https:\/\/www.examlabs.com\/certification\/?p=12907"},"modified":"2026-09-15T13:14:08","modified_gmt":"2026-09-15T13:14:08","slug":"cisco-ccie-350-401-practice-test-questions-and-exam-dumps-part2-q21-40","status":"publish","type":"post","link":"https:\/\/www.examlabs.com\/certification\/cisco-ccie-350-401-practice-test-questions-and-exam-dumps-part2-q21-40\/","title":{"rendered":"Cisco CCIE 350-401 Practice Test Questions and Exam Dumps Part2 Q21-40"},"content":{"rendered":"

View Full Cisco 350-401 Exam Dumps<\/a> and Practice Test Dumps<\/b><\/h2>\n

 <\/p>\n

Question 21<\/b><\/h3>\n

Which routing protocol uses the Dijkstra shortest path first algorithm?<\/b><\/p>\n

    \n
  1. EIGRP<\/span><\/li>\n
  2. OSPF<\/span><\/li>\n
  3. BGP<\/span><\/li>\n
  4. RIP<\/span><\/li>\n<\/ol>\n

    Correct Answer: 2<\/b><\/p>\n

    Explanation<\/b><\/p>\n

    OSPF uses the Shortest Path First algorithm, commonly associated with Dijkstra’s algorithm, to calculate the best paths through an area. Each OSPF router maintains a link-state database representing the network topology and independently calculates the shortest-path tree. OSPF then installs the best routes into the routing table. This link-state approach allows OSPF to converge efficiently after topology changes. EIGRP uses a different algorithm called DUAL, while BGP uses path attributes and policy-based route selection. RIP uses a distance-vector approach based primarily on hop count.<\/span><\/p>\n

    Question 22<\/b><\/h3>\n

    Which BGP message is used to establish and maintain a BGP session?<\/b><\/p>\n

      \n
    1. UPDATE<\/span><\/li>\n
    2. NOTIFICATION<\/span><\/li>\n
    3. KEEPALIVE<\/span><\/li>\n
    4. OPEN<\/span><\/li>\n<\/ol>\n

      Correct Answer: 4<\/b><\/p>\n

      Explanation<\/b><\/p>\n

      The BGP OPEN message is exchanged after a TCP connection is established and is used to establish a BGP peering session. It contains information such as the BGP version, autonomous system number, hold time, and BGP identifier. Once the session is established, UPDATE messages exchange routing information, KEEPALIVE messages maintain the session, and NOTIFICATION messages report errors and terminate the session. Understanding BGP message types is important when troubleshooting peering relationships and determining why a BGP session is failing to establish or remain operational.<\/span><\/p>\n

      Question 23<\/b><\/h3>\n

      Which IPv6 address type is used for communication with the nearest member of a group?<\/b><\/p>\n

        \n
      1. Anycast<\/span><\/li>\n
      2. Multicast<\/span><\/li>\n
      3. Link-local<\/span><\/li>\n
      4. Global unicast<\/span><\/li>\n<\/ol>\n

        Correct Answer: 1<\/b><\/p>\n

        Explanation<\/b><\/p>\n

        An IPv6 anycast address is assigned to multiple interfaces, and packets sent to that address are delivered to the nearest interface according to the routing protocol’s path calculation. Anycast is useful for services that need geographically or topologically distributed instances, such as DNS or gateway services. Multicast delivers traffic to multiple members of a multicast group, while link-local addresses are used for communication within the local link. Global unicast addresses are routable across IPv6 networks. Anycast therefore provides a useful mechanism for reaching the closest available service instance.<\/span><\/p>\n

        Question 24<\/b><\/h3>\n

        Which command is commonly used on Cisco IOS to display the IP routing table?<\/b><\/p>\n

          \n
        1. show interfaces<\/span><\/li>\n
        2. show ip route<\/span><\/li>\n
        3. show vlan brief<\/span><\/li>\n
        4. show cdp neighbors<\/span><\/li>\n<\/ol>\n

          Correct Answer: 2<\/b><\/p>\n

          Explanation<\/b><\/p>\n

          The Cisco IOS command <\/span>show ip route<\/span> displays the IPv4 routing table. It provides information about connected, static, and dynamically learned routes, along with route sources, administrative distances, metrics, next-hop addresses, and outgoing interfaces. Network engineers frequently use this command when troubleshooting reachability and routing decisions. Other commands serve different purposes: <\/span>show interfaces<\/span> displays interface information, <\/span>show vlan brief<\/span> provides VLAN details, and <\/span>show cdp neighbors<\/span> identifies directly connected Cisco devices. Understanding routing-table output is fundamental to troubleshooting Layer 3 connectivity.<\/span><\/p>\n

          Question 25<\/b><\/h3>\n

          Which OSPF area type is designed to reduce the amount of external routing information carried within an area?<\/b><\/p>\n

            \n
          1. Stub area<\/span><\/li>\n
          2. Backbone area<\/span><\/li>\n
          3. Transit area<\/span><\/li>\n
          4. Standard area<\/span><\/li>\n<\/ol>\n

            Correct Answer: 1<\/b><\/p>\n

            Explanation<\/b><\/p>\n

            An OSPF stub area reduces the amount of external routing information that must be maintained inside the area. Instead of receiving individual external routes, routers in a stub area can use a default route toward the Area Border Router for destinations outside the area. This can reduce routing-table size and simplify routing information within the area. The backbone area, Area 0, provides the central structure for inter-area OSPF communication. Proper OSPF area design can improve scalability and control the distribution of routing information.<\/span><\/p>\n

            Question 26<\/b><\/h3>\n

            Which protocol is commonly used to securely transfer files between network devices and servers?<\/b><\/p>\n

              \n
            1. TFTP<\/span><\/li>\n
            2. FTP<\/span><\/li>\n
            3. SCP<\/span><\/li>\n
            4. SNMP<\/span><\/li>\n<\/ol>\n

              Correct Answer: 3<\/b><\/p>\n

              Explanation<\/b><\/p>\n

              Secure Copy Protocol (SCP) provides encrypted file transfers using SSH. It can be used to securely move configuration files, software images, and other files between network devices and servers. TFTP and traditional FTP do not provide the same level of encryption and security. SCP is therefore preferable when confidentiality and authentication are important. Network administrators should still verify file integrity and use appropriate access controls when transferring Cisco IOS images or configuration files. Secure file-transfer methods are an important component of network device management.<\/span><\/p>\n

              Question 27<\/b><\/h3>\n

              What is the primary purpose of a network ACL?<\/b><\/p>\n

                \n
              1. Encrypt routing updates<\/span><\/li>\n
              2. Filter traffic based on defined criteria<\/span><\/li>\n
              3. Assign IP addresses automatically<\/span><\/li>\n
              4. Synchronize device clocks<\/span><\/li>\n<\/ol>\n

                Correct Answer: 2<\/b><\/p>\n

                Explanation<\/b><\/p>\n

                Access Control Lists (ACLs) are used to permit or deny network traffic based on criteria such as source IP address, destination IP address, protocol, and port numbers. They can be applied to interfaces or other supported features to control traffic flows. ACLs are commonly used to enforce security policies, restrict access to services, and control communication between network segments. Because ACLs are processed according to their rules and order, administrators must design them carefully. An implicit deny at the end of many ACL types should also be considered during configuration.<\/span><\/p>\n

                Question 28<\/b><\/h3>\n

                Which technology provides Layer 3 routing between VLANs?<\/b><\/p>\n

                  \n
                1. Inter-VLAN routing<\/span><\/li>\n
                2. Port security<\/span><\/li>\n
                3. STP<\/span><\/li>\n
                4. DHCP snooping<\/span><\/li>\n<\/ol>\n

                  Correct Answer: 1<\/b><\/p>\n

                  Explanation<\/b><\/p>\n

                  Inter-VLAN routing allows devices in different VLANs to communicate through a Layer 3 routing function. This can be implemented using a router with subinterfaces, a multilayer switch using switched virtual interfaces, or other Layer 3 technologies. VLANs themselves create separate Layer 2 broadcast domains and do not automatically provide communication between those domains. The routing device must have an appropriate Layer 3 interface and routing configuration. Inter-VLAN routing is therefore essential when users or applications in separate VLANs need to communicate with each other.<\/span><\/p>\n

                  Question 29<\/b><\/h3>\n

                  Which EIGRP metric component is primarily based on bandwidth and delay by default?<\/b><\/p>\n

                    \n
                  1. Reliability and load<\/span><\/li>\n
                  2. Bandwidth and delay<\/span><\/li>\n
                  3. MTU and hop count<\/span><\/li>\n
                  4. Administrative distance and cost<\/span><\/li>\n<\/ol>\n

                    Correct Answer: 2<\/b><\/p>\n

                    Explanation<\/b><\/p>\n

                    By default, EIGRP calculates its composite metric primarily using bandwidth and delay. Other parameters, such as reliability and load, can be included through specific configuration, but they are not normally part of the default calculation. EIGRP uses the Diffusing Update Algorithm (DUAL) to maintain loop-free paths and converge efficiently. Understanding the metric components helps engineers predict route selection and troubleshoot unexpected EIGRP paths. Administrative distance determines trust between routing sources and is separate from the EIGRP metric calculation.<\/span><\/p>\n

                    Question 30<\/b><\/h3>\n

                    Which Cisco feature can restrict the number of MAC addresses learned on a switch port?<\/b><\/p>\n

                      \n
                    1. Port security<\/span><\/li>\n
                    2. HSRP<\/span><\/li>\n
                    3. NAT<\/span><\/li>\n
                    4. OSPF<\/span><\/li>\n<\/ol>\n

                      Correct Answer: 1<\/b><\/p>\n

                      Explanation<\/b><\/p>\n

                      Port security allows a switch administrator to control which and how many MAC addresses can be associated with a switch port. It can help prevent unauthorized devices from connecting to access ports and reduce certain Layer 2 security risks. Administrators can configure maximum MAC address limits and specify violation actions such as shutdown, restrict, or protect depending on the platform and requirements. Port security is commonly used on access ports where the expected number of connected devices is known. It should be configured carefully to avoid disrupting legitimate users.<\/span><\/p>\n

                      Question 31<\/b><\/h3>\n

                      Which protocol is primarily used to collect and monitor network device information?<\/b><\/p>\n

                        \n
                      1. SSH<\/span><\/li>\n
                      2. SNMP<\/span><\/li>\n
                      3. BGP<\/span><\/li>\n
                      4. DHCP<\/span><\/li>\n<\/ol>\n

                        Correct Answer: 2<\/b><\/p>\n

                        Explanation<\/b><\/p>\n

                        Simple Network Management Protocol (SNMP) is commonly used to monitor and manage network devices. An SNMP manager can collect information from devices using managed objects stored in a Management Information Base. Administrators can monitor interface status, traffic statistics, CPU utilization, memory usage, and other operational information. SNMP versions differ in their security capabilities, with SNMPv3 providing stronger authentication and encryption features than earlier versions. Monitoring systems can use SNMP data to identify abnormal conditions and generate alerts when network performance or availability changes.<\/span><\/p>\n

                        Question 32<\/b><\/h3>\n

                        Which VXLAN component performs encapsulation and decapsulation of VXLAN traffic?<\/b><\/p>\n

                          \n
                        1. VTEP<\/span><\/li>\n
                        2. Route reflector<\/span><\/li>\n
                        3. DHCP server<\/span><\/li>\n
                        4. DNS resolver<\/span><\/li>\n<\/ol>\n

                          Correct Answer: 1<\/b><\/p>\n

                          Explanation<\/b><\/p>\n

                          A VXLAN Tunnel Endpoint (VTEP) performs VXLAN encapsulation and decapsulation. When a frame enters the VXLAN overlay, the VTEP encapsulates the original Layer 2 frame inside a VXLAN, UDP, and IP header before forwarding it across the Layer 3 underlay. At the destination, another VTEP removes the encapsulation and delivers the original frame. VTEPs therefore provide the connection between the virtual overlay network and the physical underlay. They are fundamental components of VXLAN-based data center architectures.<\/span><\/p>\n

                          Question 33<\/b><\/h3>\n

                          Which BGP mechanism can reduce the number of iBGP peerings required in a large autonomous system?<\/b><\/p>\n

                            \n
                          1. Route reflector<\/span><\/li>\n
                          2. Stub area<\/span><\/li>\n
                          3. Root bridge<\/span><\/li>\n
                          4. DHCP relay<\/span><\/li>\n<\/ol>\n

                            Correct Answer: 1<\/b><\/p>\n

                            Explanation<\/b><\/p>\n

                            A BGP route reflector reduces the need for a full mesh of iBGP peerings within an autonomous system. Instead of requiring every iBGP router to establish a session with every other iBGP router, selected routers can act as route reflectors and distribute routes to their clients. This significantly improves scalability in large networks. Without route reflection or another appropriate design such as confederations, a large number of iBGP sessions can become difficult to manage. Route reflectors must still be designed carefully to maintain routing consistency and redundancy.<\/span><\/p>\n

                            Question 34<\/b><\/h3>\n

                            Which mechanism allows a switch to learn the MAC address associated with an incoming frame?<\/b><\/p>\n

                              \n
                            1. ARP<\/span><\/li>\n
                            2. DHCP<\/span><\/li>\n
                            3. MAC address learning<\/span><\/li>\n
                            4. DNS<\/span><\/li>\n<\/ol>\n

                              Correct Answer: 3<\/b><\/p>\n

                              Explanation<\/b><\/p>\n

                              Ethernet switches use MAC address learning to build their MAC address tables. When a frame arrives, the switch examines the source MAC address and associates it with the incoming interface and VLAN. When forwarding subsequent frames, the switch can use this information to send traffic directly toward the appropriate port rather than flooding it throughout the VLAN. Entries may age out if they are not refreshed. ARP maps IPv4 addresses to MAC addresses, while DHCP provides IP configuration and DNS resolves names to addresses.<\/span><\/p>\n

                              Question 35<\/b><\/h3>\n

                              Which routing protocol uses autonomous system numbers and path attributes to select routes?<\/b><\/p>\n

                                \n
                              1. OSPF<\/span><\/li>\n
                              2. IS-IS<\/span><\/li>\n
                              3. BGP<\/span><\/li>\n
                              4. EIGRP<\/span><\/li>\n<\/ol>\n

                                Correct Answer: 3<\/b><\/p>\n

                                Explanation<\/b><\/p>\n

                                BGP is a path-vector routing protocol that uses autonomous system numbers and multiple path attributes to make routing decisions. Attributes such as local preference, AS path, origin, MED, and weight can influence which route is selected. BGP is designed for policy-based interdomain routing and can handle very large routing tables. OSPF, IS-IS, and EIGRP are primarily designed for internal routing and use different mechanisms for calculating paths. Understanding BGP attributes is essential when implementing routing policies across enterprise and service-provider environments.<\/span><\/p>\n

                                Question 36<\/b><\/h3>\n

                                Which technology provides encrypted communication between network sites over an untrusted network?<\/b><\/p>\n

                                  \n
                                1. IPsec VPN<\/span><\/li>\n
                                2. STP<\/span><\/li>\n
                                3. VLAN<\/span><\/li>\n
                                4. CDP<\/span><\/li>\n<\/ol>\n

                                  Correct Answer: 1<\/b><\/p>\n

                                  Explanation<\/b><\/p>\n

                                  An IPsec VPN provides secure communication across an untrusted network such as the public Internet. IPsec can provide confidentiality, integrity, authentication, and anti-replay protection depending on the configured algorithms and security policies. Site-to-site IPsec VPNs are commonly used to connect branch offices, data centers, or remote networks securely. Unlike VLANs and STP, which operate within local network architectures, IPsec protects traffic as it travels across potentially insecure infrastructure. Proper key management and security configuration are essential for maintaining a secure VPN.<\/span><\/p>\n

                                  Question 37<\/b><\/h3>\n

                                  What is the primary function of a DNS server?<\/b><\/p>\n

                                    \n
                                  1. Assign IP addresses dynamically<\/span><\/li>\n
                                  2. Resolve domain names to IP addresses<\/span><\/li>\n
                                  3. Encrypt network traffic<\/span><\/li>\n
                                  4. Select BGP routes<\/span><\/li>\n<\/ol>\n

                                    Correct Answer: 2<\/b><\/p>\n

                                    Explanation<\/b><\/p>\n

                                    The Domain Name System (DNS) translates human-readable domain names into IP addresses and can also provide other types of name-related information. This allows users and applications to access services using names rather than remembering numerical addresses. DNS operates through a hierarchical naming system and can use different record types, such as A, AAAA, CNAME, and MX records. DHCP may provide clients with the address of a DNS server, but DHCP itself does not perform name resolution. Reliable DNS service is essential for many network applications.<\/span><\/p>\n

                                    Question 38<\/b><\/h3>\n

                                    Which data modeling language is commonly associated with YANG-based network management?<\/b><\/p>\n

                                      \n
                                    1. JSON<\/span><\/li>\n
                                    2. XML<\/span><\/li>\n
                                    3. YANG<\/span><\/li>\n
                                    4. YAML<\/span><\/li>\n<\/ol>\n

                                      Correct Answer: 3<\/b><\/p>\n

                                      Explanation<\/b><\/p>\n

                                      YANG is a data modeling language designed to model configuration and operational state data for network management protocols such as NETCONF and RESTCONF. It defines structured data models that describe network device capabilities and configuration elements. XML and JSON are data encoding formats that may be used to represent information exchanged with network management systems, while YAML is commonly used for configuration files and automation tools. YANG provides the structured model behind many modern model-driven network management and automation solutions.<\/span><\/p>\n

                                      Question 39<\/b><\/h3>\n

                                      Which protocol is commonly used by NETCONF for secure communication with network devices?<\/b><\/p>\n

                                        \n
                                      1. SSH<\/span><\/li>\n
                                      2. FTP<\/span><\/li>\n
                                      3. SMTP<\/span><\/li>\n
                                      4. SNMP<\/span><\/li>\n<\/ol>\n

                                        Correct Answer: 1<\/b><\/p>\n

                                        Explanation<\/b><\/p>\n

                                        NETCONF commonly uses SSH as its secure transport protocol. NETCONF provides mechanisms for installing, modifying, and retrieving device configuration using structured data models. SSH protects the management session by providing encryption and authentication. NETCONF can also support transactional configuration operations, making it useful for automated network management. SNMP is primarily associated with monitoring and management information retrieval rather than transactional configuration. Using secure transport is important because configuration data can contain sensitive operational and security information.<\/span><\/p>\n

                                        Question 40<\/b><\/h3>\n

                                        A network engineer observes excessive broadcast traffic on a switched network. Which technology can help reduce the broadcast domain size?<\/b><\/p>\n

                                          \n
                                        1. EtherChannel<\/span><\/li>\n
                                        2. VLAN segmentation<\/span><\/li>\n
                                        3. Port mirroring<\/span><\/li>\n
                                        4. HSRP<\/span><\/li>\n<\/ol>\n

                                          Correct Answer: 2<\/b><\/p>\n

                                          Explanation<\/b><\/p>\n

                                          VLAN segmentation divides a switched network into separate Layer 2 broadcast domains. Broadcast traffic generated in one VLAN generally remains within that VLAN unless a Layer 3 device forwards appropriate traffic between networks. Segmenting users and applications into logical VLANs can therefore reduce unnecessary broadcast propagation and improve network organization. EtherChannel increases link capacity, port mirroring copies traffic for analysis, and HSRP provides gateway redundancy. VLAN design should be combined with appropriate Layer 3 routing, security policies, and addressing to create an efficient network architecture.<\/span><\/p>\n

                                           <\/p>\n","protected":false},"excerpt":{"rendered":"

                                          View Full Cisco 350-401 Exam Dumps and Practice Test Dumps   Question 21 Which routing protocol uses the Dijkstra shortest path first algorithm? EIGRP OSPF BGP RIP Correct Answer: 2 Explanation OSPF uses the Shortest Path First algorithm, commonly associated with Dijkstra’s algorithm, to calculate the best paths through an area. Each OSPF router maintains […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":[],"categories":[1648,1647],"tags":[],"_links":{"self":[{"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/posts\/12907"}],"collection":[{"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/comments?post=12907"}],"version-history":[{"count":1,"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/posts\/12907\/revisions"}],"predecessor-version":[{"id":12944,"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/posts\/12907\/revisions\/12944"}],"wp:attachment":[{"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/media?parent=12907"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/categories?post=12907"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/tags?post=12907"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}