{"id":12918,"date":"2026-09-15T13:12:06","date_gmt":"2026-09-15T13:12:06","guid":{"rendered":"https:\/\/www.examlabs.com\/certification\/?p=12918"},"modified":"2026-09-15T13:12:06","modified_gmt":"2026-09-15T13:12:06","slug":"cisco-ccie-350-401-practice-test-questions-and-exam-dumps-part13-q241-260","status":"publish","type":"post","link":"https:\/\/www.examlabs.com\/certification\/cisco-ccie-350-401-practice-test-questions-and-exam-dumps-part13-q241-260\/","title":{"rendered":"Cisco CCIE 350-401 Practice Test Questions and Exam Dumps Part13 Q241-260"},"content":{"rendered":"

View Full Cisco 350-401 Exam Dumps<\/a> and Practice Test Dumps<\/b><\/h2>\n

 <\/p>\n

Question 241<\/b><\/h3>\n

Which OSPF router is responsible for reducing the number of adjacencies on a multiaccess network?<\/b><\/p>\n

    \n
  1. Designated Router<\/span><\/li>\n
  2. Area Border Router<\/span><\/li>\n
  3. Autonomous System Boundary Router<\/span><\/li>\n
  4. Backup Gateway Router<\/span><\/li>\n<\/ol>\n

    Correct Answer: 1<\/b><\/p>\n

    Explanation<\/b><\/p>\n

    The Designated Router (DR) reduces the number of OSPF adjacencies required on multiaccess networks such as Ethernet. Instead of every OSPF router forming a full adjacency with every other router, routers establish full adjacencies with the DR and Backup Designated Router. The DR also generates a Type 2 LSA representing the multiaccess network. This design reduces the amount of routing protocol traffic and simplifies database synchronization. The BDR provides redundancy if the current DR becomes unavailable.<\/span><\/p>\n

    Question 242<\/b><\/h3>\n

    Which Cisco IOS feature can automatically generate a log message when an interface changes state?<\/b><\/p>\n

      \n
    1. NAT<\/span><\/li>\n
    2. Syslog<\/span><\/li>\n
    3. DHCP<\/span><\/li>\n
    4. NTP<\/span><\/li>\n<\/ol>\n

      Correct Answer: 2<\/b><\/p>\n

      Explanation<\/b><\/p>\n

      Syslog provides a mechanism for Cisco devices to generate and send messages about operational events, including interface state changes. These messages can be displayed locally or forwarded to a centralized logging server for monitoring and troubleshooting. Interface up\/down events can help administrators identify connectivity problems, link failures, or configuration changes. NTP does not generate event logs; it synchronizes device clocks. DHCP provides address configuration, while NAT translates addresses. Syslog is therefore the appropriate service for recording and centralizing interface-related event information.<\/span><\/p>\n

      Question 243<\/b><\/h3>\n

      Which BGP attribute is primarily used to influence outbound traffic within an autonomous system?<\/b><\/p>\n

        \n
      1. MED<\/span><\/li>\n
      2. AS Path<\/span><\/li>\n
      3. Local Preference<\/span><\/li>\n
      4. Origin<\/span><\/li>\n<\/ol>\n

        Correct Answer: 3<\/b><\/p>\n

        Explanation<\/b><\/p>\n

        Local Preference is a BGP attribute used to influence outbound traffic from an autonomous system. A higher Local Preference value is generally preferred, allowing administrators to indicate which exit point should be selected for external destinations. The attribute is distributed through iBGP so that routers within the autonomous system can make consistent decisions. MED can influence how neighboring networks enter an autonomous system, while AS Path length and Origin are considered later in the BGP selection process. Local Preference is therefore a key outbound-routing policy mechanism.<\/span><\/p>\n

        Question 244<\/b><\/h3>\n

        Which IPv4 address range is reserved for link-local addressing when a host cannot obtain an address through normal configuration?<\/b><\/p>\n

          \n
        1. 10.0.0.0\/8<\/span><\/li>\n
        2. 172.16.0.0\/12<\/span><\/li>\n
        3. 192.168.0.0\/16<\/span><\/li>\n
        4. 169.254.0.0\/16<\/span><\/li>\n<\/ol>\n

          Correct Answer: 4<\/b><\/p>\n

          Explanation<\/b><\/p>\n

          The IPv4 range 169.254.0.0\/16 is reserved for link-local addressing, commonly associated with Automatic Private IP Addressing (APIPA). A host may assign itself an address from this range when it cannot obtain a suitable IPv4 address through DHCP. Link-local addresses are intended for communication on the local network segment and are not normally routed between networks. The other listed ranges are private IPv4 address spaces used for internal networks. Therefore, 169.254.0.0\/16 is the correct link-local range.<\/span><\/p>\n

          Question 245<\/b><\/h3>\n

          Which technology separates routing information into independent virtual routing tables on the same device?<\/b><\/p>\n

            \n
          1. VRF<\/span><\/li>\n
          2. VLAN<\/span><\/li>\n
          3. STP<\/span><\/li>\n
          4. EtherChannel<\/span><\/li>\n<\/ol>\n

            Correct Answer: 1<\/b><\/p>\n

            Explanation<\/b><\/p>\n

            Virtual Routing and Forwarding (VRF) allows a network device to maintain multiple independent routing tables. Each VRF can contain its own routes, interfaces, and forwarding decisions, allowing different networks to use overlapping IP address spaces without interfering with one another. VRFs are commonly used by service providers, enterprises, and organizations requiring traffic isolation. VLANs provide Layer 2 segmentation, STP prevents Layer 2 loops, and EtherChannel combines physical links. VRF specifically provides separation at the Layer 3 routing and forwarding level.<\/span><\/p>\n

            Question 246<\/b><\/h3>\n

            Which protocol allows network devices to exchange information about directly connected neighbors without requiring Cisco-specific implementation?<\/b><\/p>\n

              \n
            1. CDP<\/span><\/li>\n
            2. LLDP<\/span><\/li>\n
            3. VTP<\/span><\/li>\n
            4. DTP<\/span><\/li>\n<\/ol>\n

              Correct Answer: 2<\/b><\/p>\n

              Explanation<\/b><\/p>\n

              Link Layer Discovery Protocol (LLDP) is an open, vendor-neutral protocol that allows directly connected network devices to advertise and learn information about their neighbors. It can provide details such as system name, interface identification, device capabilities, and management information. LLDP is especially useful in networks containing equipment from multiple vendors. Cisco Discovery Protocol (CDP) provides similar functionality but is Cisco proprietary. VTP manages VLAN information, while DTP negotiates trunking. LLDP is therefore the appropriate standard-based discovery protocol.<\/span><\/p>\n

              Question 247<\/b><\/h3>\n

              Which routing protocol uses hop count as its primary metric and considers 15 hops the maximum usable distance?<\/b><\/p>\n

                \n
              1. OSPF<\/span><\/li>\n
              2. EIGRP<\/span><\/li>\n
              3. BGP<\/span><\/li>\n
              4. RIP<\/span><\/li>\n<\/ol>\n

                Correct Answer: 4<\/b><\/p>\n

                Explanation<\/b><\/p>\n

                Routing Information Protocol (RIP) uses hop count as its routing metric. A route with 1 hop is preferred over a route with more hops, and a maximum hop count of 15 is considered reachable. A metric of 16 represents an unreachable destination. This limitation makes RIP unsuitable for many large modern networks. OSPF uses a cost metric, EIGRP uses multiple parameters such as bandwidth and delay, and BGP relies on path attributes and routing policy. RIP is therefore identified by its simple hop-count metric.<\/span><\/p>\n

                Question 248<\/b><\/h3>\n

                Which mechanism can prevent an unauthorized switch from becoming the spanning-tree root?<\/b><\/p>\n

                  \n
                1. DHCP Snooping<\/span><\/li>\n
                2. Port Security<\/span><\/li>\n
                3. Root Guard<\/span><\/li>\n
                4. IP Source Guard<\/span><\/li>\n<\/ol>\n

                  Correct Answer: 3<\/b><\/p>\n

                  Explanation<\/b><\/p>\n

                  Root Guard helps protect the spanning-tree topology by preventing a designated port from accepting superior Bridge Protocol Data Units (BPDUs) that could cause an unauthorized switch to become the STP root. If a superior BPDU is received on a Root Guard-enabled interface, the interface can enter a root-inconsistent state. This prevents the neighboring device from influencing the root election through that port. DHCP Snooping, Port Security, and IP Source Guard address different security concerns and do not directly protect the STP root role.<\/span><\/p>\n

                  Question 249<\/b><\/h3>\n

                  Which IPv6 address type is intended for communication with a group of receivers?<\/b><\/p>\n

                    \n
                  1. Multicast<\/span><\/li>\n
                  2. Anycast<\/span><\/li>\n
                  3. Unicast<\/span><\/li>\n
                  4. Link-local unicast<\/span><\/li>\n<\/ol>\n

                    Correct Answer: 1<\/b><\/p>\n

                    Explanation<\/b><\/p>\n

                    IPv6 multicast addresses identify groups of interfaces and allow a packet to be delivered to multiple interested receivers. IPv6 uses multicast extensively for functions such as Neighbor Discovery and routing protocol communication. Unlike IPv4, IPv6 does not use broadcast addresses. Anycast addresses identify multiple interfaces where traffic is delivered to the nearest appropriate instance according to routing. Unicast identifies a single interface, while link-local unicast is restricted to the local network segment. Multicast is therefore the correct address type for group communication.<\/span><\/p>\n

                    Question 250<\/b><\/h3>\n

                    Which Cisco command displays the MAC addresses learned by a switch and the interfaces associated with them?<\/b><\/p>\n

                      \n
                    1. show vlan brief<\/span><\/li>\n
                    2. show interfaces status<\/span><\/li>\n
                    3. show mac address-table<\/span><\/li>\n
                    4. show spanning-tree<\/span><\/li>\n<\/ol>\n

                      Correct Answer: 3<\/b><\/p>\n

                      Explanation<\/b><\/p>\n

                      The <\/span>show mac address-table<\/span> command displays MAC addresses learned by a Cisco switch and associates those addresses with VLANs and switch interfaces. This information is valuable when troubleshooting Layer 2 connectivity, identifying where a device is connected, or investigating unexpected MAC learning. The MAC address table is dynamically populated as the switch examines source MAC addresses in received frames. Other commands provide VLAN, interface-status, or spanning-tree information, but <\/span>show mac address-table<\/span> directly displays the switch’s learned Layer 2 forwarding information.<\/span><\/p>\n

                      Question 251<\/b><\/h3>\n

                      Which BGP message is periodically exchanged to maintain an established BGP session when no UPDATE messages are being sent?<\/b><\/p>\n

                        \n
                      1. OPEN<\/span><\/li>\n
                      2. KEEPALIVE<\/span><\/li>\n
                      3. UPDATE<\/span><\/li>\n
                      4. NOTIFICATION<\/span><\/li>\n<\/ol>\n

                        Correct Answer: 2<\/b><\/p>\n

                        Explanation<\/b><\/p>\n

                        BGP KEEPALIVE messages are periodically exchanged between established BGP peers to confirm that the session remains operational. If a router does not receive an expected KEEPALIVE or other valid BGP message within the configured hold time, it can consider the peer unreachable and terminate the session. OPEN messages establish the session, UPDATE messages exchange routing information, and NOTIFICATION messages report errors. KEEPALIVE messages therefore play an important role in maintaining the health of an established BGP peering relationship.<\/span><\/p>\n

                        Question 252<\/b><\/h3>\n

                        Which network design approach divides the campus network into access, distribution, and core layers?<\/b><\/p>\n

                          \n
                        1. Spine-leaf<\/span><\/li>\n
                        2. Flat network<\/span><\/li>\n
                        3. Three-tier hierarchical design<\/span><\/li>\n
                        4. Peer-to-peer design<\/span><\/li>\n<\/ol>\n

                          Correct Answer: 3<\/b><\/p>\n

                          Explanation<\/b><\/p>\n

                          The three-tier hierarchical design divides a traditional campus network into access, distribution, and core layers. The access layer connects end devices, the distribution layer provides policy enforcement and aggregation, and the core layer provides fast and highly available transport between major network segments. This separation improves scalability, troubleshooting, and operational consistency. Spine-leaf is a different architecture commonly associated with modern data centers. Flat and peer-to-peer designs do not provide the same structured hierarchy. The three-tier model remains an important enterprise network design concept.<\/span><\/p>\n

                          Question 253<\/b><\/h3>\n

                          Which protocol is commonly used to monitor and manage network devices using structured management information and object identifiers?<\/b><\/p>\n

                            \n
                          1. SNMP<\/span><\/li>\n
                          2. NTP<\/span><\/li>\n
                          3. Syslog<\/span><\/li>\n
                          4. DHCP<\/span><\/li>\n<\/ol>\n

                            Correct Answer: 1<\/b><\/p>\n

                            Explanation<\/b><\/p>\n

                            Simple Network Management Protocol (SNMP) is commonly used to monitor and manage network devices. It uses structured management information, including Management Information Base (MIB) objects identified by object identifiers. Network management systems can use SNMP to retrieve information such as interface counters, device status, CPU utilization, and other operational statistics. SNMP can also support notifications such as traps and informs. NTP synchronizes clocks, Syslog handles event logging, and DHCP provides network configuration. SNMP is therefore the appropriate protocol for structured device monitoring.<\/span><\/p>\n

                            Question 254<\/b><\/h3>\n

                            Which mechanism allows a router to distribute traffic across multiple paths when those paths have equal routing cost?<\/b><\/p>\n

                              \n
                            1. Route summarization<\/span><\/li>\n
                            2. Policy-based routing<\/span><\/li>\n
                            3. ECMP<\/span><\/li>\n
                            4. Route redistribution<\/span><\/li>\n<\/ol>\n

                              Correct Answer: 3<\/b><\/p>\n

                              Explanation<\/b><\/p>\n

                              Equal-Cost Multi-Path (ECMP) allows a router to use multiple paths to the same destination when the routing protocol considers those paths equally optimal. Instead of keeping only one route, the router can install several equal-cost routes and distribute traffic across them according to the platform’s forwarding behavior. ECMP can improve link utilization and provide redundancy. Route summarization reduces routing-table size, redistribution exchanges routes between routing protocols, and policy-based routing makes forwarding decisions based on configured policies rather than simply equal routing cost.<\/span><\/p>\n

                              Question 255<\/b><\/h3>\n

                              Which IPv6 protocol replaces ARP for discovering the Layer 2 address associated with a neighboring IPv6 device?<\/b><\/p>\n

                                \n
                              1. DHCPv6<\/span><\/li>\n
                              2. ICMPv6 Neighbor Discovery<\/span><\/li>\n
                              3. DNS<\/span><\/li>\n
                              4. NTP<\/span><\/li>\n<\/ol>\n

                                Correct Answer: 2<\/b><\/p>\n

                                Explanation<\/b><\/p>\n

                                IPv6 uses ICMPv6 Neighbor Discovery rather than ARP to discover neighboring devices and resolve IPv6-to-link-layer information. Neighbor Solicitation and Neighbor Advertisement messages perform functions that are comparable to ARP resolution in IPv4. Neighbor Discovery also supports additional functions such as router discovery, prefix information, and Duplicate Address Detection. DHCPv6 provides optional configuration services, while DNS resolves names and NTP synchronizes clocks. Therefore, ICMPv6 Neighbor Discovery is the mechanism responsible for IPv6 neighbor address resolution and related local-link functions.<\/span><\/p>\n

                                Question 256<\/b><\/h3>\n

                                Which BGP attribute is generally preferred when its value is lower and can influence inbound traffic from a neighboring autonomous system?<\/b><\/p>\n

                                  \n
                                1. MED<\/span><\/li>\n
                                2. Weight<\/span><\/li>\n
                                3. Local Preference<\/span><\/li>\n
                                4. Router ID<\/span><\/li>\n<\/ol>\n

                                  Correct Answer: 1<\/b><\/p>\n

                                  Explanation<\/b><\/p>\n

                                  The Multi-Exit Discriminator (MED) is a BGP attribute commonly used to influence which entry point a neighboring autonomous system selects when multiple connections exist. A lower MED is generally preferred when comparing routes from the same neighboring autonomous system under the relevant BGP decision process. MED is primarily used to communicate a preference for how traffic should enter an autonomous system. Local Preference and Weight influence outbound path selection within an autonomous system, while Router ID is primarily an identifier used in BGP operations.<\/span><\/p>\n

                                  Question 257<\/b><\/h3>\n

                                  Which security feature dynamically builds bindings between IP addresses, MAC addresses, VLANs, and switch ports?<\/b><\/p>\n

                                    \n
                                  1. PortFast<\/span><\/li>\n
                                  2. DHCP Snooping<\/span><\/li>\n
                                  3. Root Guard<\/span><\/li>\n
                                  4. SPAN<\/span><\/li>\n<\/ol>\n

                                    Correct Answer: 2<\/b><\/p>\n

                                    Explanation<\/b><\/p>\n

                                    DHCP Snooping builds a binding database containing information such as the client IP address, MAC address, VLAN, and switch interface. It learns these details by inspecting DHCP messages received through trusted interfaces and client-facing ports. The resulting database can support additional security mechanisms such as Dynamic ARP Inspection and IP Source Guard. DHCP Snooping also allows administrators to identify trusted DHCP-server-facing ports and block unauthorized DHCP server messages. PortFast, Root Guard, and SPAN perform different functions and do not create DHCP binding databases.<\/span><\/p>\n

                                    Question 258<\/b><\/h3>\n

                                    Which protocol is used to resolve a domain name such as<\/b> www.example.com<\/b><\/a> into an IP address?<\/b><\/p>\n

                                      \n
                                    1. SNMP<\/span><\/li>\n
                                    2. DHCP<\/span><\/li>\n
                                    3. DNS<\/span><\/li>\n
                                    4. Syslog<\/span><\/li>\n<\/ol>\n

                                      Correct Answer: 3<\/b><\/p>\n

                                      Explanation<\/b><\/p>\n

                                      The Domain Name System (DNS) translates human-readable domain names into IP addresses and can also provide other types of name-related information. When a user accesses a hostname such as a web server’s domain name, a DNS resolver can query DNS infrastructure to obtain the corresponding address. This allows applications to use meaningful names rather than requiring users to remember numeric IP addresses. DHCP may provide clients with the address of a DNS server, but it does not perform the name-resolution function itself. DNS performs that task.<\/span><\/p>\n

                                      Question 259<\/b><\/h3>\n

                                      Which Cisco IOS command provides detailed information about the operational status, counters, errors, and configuration of interfaces?<\/b><\/p>\n

                                        \n
                                      1. show interfaces<\/span><\/li>\n
                                      2. show ip route<\/span><\/li>\n
                                      3. show vlan brief<\/span><\/li>\n
                                      4. show arp<\/span><\/li>\n<\/ol>\n

                                        Correct Answer: 1<\/b><\/p>\n

                                        Explanation<\/b><\/p>\n

                                        The <\/span>show interfaces<\/span> command provides detailed information about network interfaces, including operational status, bandwidth, encapsulation, packet counters, errors, drops, duplex settings, and other interface-specific information. It is particularly useful when troubleshooting physical or data-link problems. Administrators can identify issues such as input errors, CRC errors, collisions, or interface resets by examining the command output. <\/span>show ip route<\/span> focuses on routing information, <\/span>show vlan brief<\/span> displays VLAN information, and <\/span>show arp<\/span> displays address-resolution entries. Therefore, <\/span>show interfaces<\/span> provides the most comprehensive interface details.<\/span><\/p>\n

                                        Question 260<\/b><\/h3>\n

                                        Which automation approach allows a program to interact with network devices through HTTP methods such as GET, POST, PUT, and DELETE?<\/b><\/p>\n

                                          \n
                                        1. SNMP<\/span><\/li>\n
                                        2. REST API<\/span><\/li>\n
                                        3. Syslog<\/span><\/li>\n
                                        4. TFTP<\/span><\/li>\n<\/ol>\n

                                          Correct Answer: 2<\/b><\/p>\n

                                          Explanation<\/b><\/p>\n

                                          A REST API allows software applications to interact with network services and devices using standard HTTP methods such as GET, POST, PUT, and DELETE. These methods can be used to retrieve information, create resources, modify configurations, or remove resources depending on the API design. REST-based automation is popular because it integrates naturally with web applications and programming environments. SNMP focuses on monitoring and management, Syslog handles event messages, and TFTP provides simple file transfer. REST APIs therefore provide a flexible method for programmatic network interaction.<\/span><\/p>\n

                                           <\/p>\n","protected":false},"excerpt":{"rendered":"

                                          View Full Cisco 350-401 Exam Dumps and Practice Test Dumps   Question 241 Which OSPF router is responsible for reducing the number of adjacencies on a multiaccess network? Designated Router Area Border Router Autonomous System Boundary Router Backup Gateway Router Correct Answer: 1 Explanation The Designated Router (DR) reduces the number of OSPF adjacencies required […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":[],"categories":[1648,1647],"tags":[],"_links":{"self":[{"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/posts\/12918"}],"collection":[{"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/comments?post=12918"}],"version-history":[{"count":1,"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/posts\/12918\/revisions"}],"predecessor-version":[{"id":12933,"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/posts\/12918\/revisions\/12933"}],"wp:attachment":[{"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/media?parent=12918"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/categories?post=12918"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/tags?post=12918"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}