{"id":12919,"date":"2026-09-15T13:11:56","date_gmt":"2026-09-15T13:11:56","guid":{"rendered":"https:\/\/www.examlabs.com\/certification\/?p=12919"},"modified":"2026-09-15T13:11:56","modified_gmt":"2026-09-15T13:11:56","slug":"cisco-ccie-350-401-practice-test-questions-and-exam-dumps-part14-q261-280","status":"publish","type":"post","link":"https:\/\/www.examlabs.com\/certification\/cisco-ccie-350-401-practice-test-questions-and-exam-dumps-part14-q261-280\/","title":{"rendered":"Cisco CCIE 350-401 Practice Test Questions and Exam Dumps Part14 Q261-280"},"content":{"rendered":"

View Full Cisco 350-401 Exam Dumps<\/a> and Practice Test Dumps<\/b><\/h2>\n

 <\/p>\n

Question 261<\/b><\/h3>\n

Which BGP attribute is used to identify the origin of a route and can have values such as IGP, EGP, and incomplete?<\/b><\/p>\n

    \n
  1. Origin<\/span><\/li>\n
  2. Weight<\/span><\/li>\n
  3. MED<\/span><\/li>\n
  4. Community<\/span><\/li>\n<\/ol>\n

    Correct Answer: 1<\/b><\/p>\n

    Explanation<\/b><\/p>\n

    The BGP Origin attribute identifies how a route was introduced into BGP. Its commonly recognized values are IGP, EGP, and incomplete. An IGP origin is generally preferred over an EGP origin, while an incomplete origin is normally least preferred among these values during the applicable stage of BGP path selection. Routes learned through different mechanisms can receive different origin values. Understanding the Origin attribute helps network administrators analyze why one BGP path may be selected over another when higher-priority attributes are equal.<\/span><\/p>\n

    Question 262<\/b><\/h3>\n

    A network administrator needs to prevent a Layer 2 loop while allowing redundant physical links between switches. Which technology should be used?<\/b><\/p>\n

      \n
    1. DHCP Snooping<\/span><\/li>\n
    2. EtherChannel<\/span><\/li>\n
    3. Spanning Tree Protocol<\/span><\/li>\n
    4. VRF<\/span><\/li>\n<\/ol>\n

      Correct Answer: 3<\/b><\/p>\n

      Explanation<\/b><\/p>\n

      Spanning Tree Protocol (STP) prevents Layer 2 switching loops by logically blocking redundant paths while maintaining them as backup paths. Without loop prevention, redundant Ethernet connections can create broadcast storms, duplicate frames, and MAC-table instability. STP calculates a loop-free topology and can unblock an alternate path when the active path fails. EtherChannel can also use multiple physical links, but it treats them as one logical link rather than simply preventing loops. DHCP Snooping and VRF address different network functions and do not provide Layer 2 loop prevention.<\/span><\/p>\n

      Question 263<\/b><\/h3>\n

      Which OSPF area type allows external routes while reducing the amount of Type 5 LSA information inside the area?<\/b><\/p>\n

        \n
      1. Stub area<\/span><\/li>\n
      2. Standard area<\/span><\/li>\n
      3. Backbone area<\/span><\/li>\n
      4. NSSA<\/span><\/li>\n<\/ol>\n

        Correct Answer: 4<\/b><\/p>\n

        Explanation<\/b><\/p>\n

        A Not-So-Stubby Area (NSSA) provides a way to limit certain external Type 5 LSAs while still allowing an ASBR inside the area to redistribute external routes. The ASBR uses Type 7 LSAs to represent those external routes within the NSSA. An ABR can then translate appropriate Type 7 information into Type 5 LSAs for distribution outside the area. This makes NSSA useful when an area needs limited external route information but still contains a router that must perform external route redistribution.<\/span><\/p>\n

        Question 264<\/b><\/h3>\n

        Which protocol provides a mechanism for dynamically assigning IPv6 addresses and configuration information to clients?<\/b><\/p>\n

          \n
        1. DHCP<\/span><\/li>\n
        2. DHCPv6<\/span><\/li>\n
        3. ARP<\/span><\/li>\n
        4. ICMP<\/span><\/li>\n<\/ol>\n

          Correct Answer: 2<\/b><\/p>\n

          Explanation<\/b><\/p>\n

          DHCPv6 provides IPv6 hosts with addressing and other configuration information through a client-server model. It can operate in stateful mode, where the server assigns IPv6 addresses, or in stateless mode, where hosts obtain other configuration parameters while generating addresses through SLAAC. DHCPv6 uses UDP and supports options for information such as DNS configuration. IPv4 DHCP is designed for IPv4 addressing, while ARP is not used by IPv6. ICMPv6 supports important IPv6 functions but does not replace DHCPv6 for centralized address assignment.<\/span><\/p>\n

          Question 265<\/b><\/h3>\n

          Which BGP attribute is specific to a Cisco router and is considered before Local Preference in the BGP best-path process?<\/b><\/p>\n

            \n
          1. Weight<\/span><\/li>\n
          2. MED<\/span><\/li>\n
          3. Origin<\/span><\/li>\n
          4. AS Path<\/span><\/li>\n<\/ol>\n

            Correct Answer: 1<\/b><\/p>\n

            Explanation<\/b><\/p>\n

            BGP Weight is a Cisco-specific attribute used locally on a router to influence which path it selects. A higher Weight value is preferred, and the attribute takes precedence over Local Preference in Cisco’s BGP best-path selection process. Weight is not advertised to other BGP routers, making it useful when an administrator wants to influence routing decisions on a particular router only. Local Preference is shared within an autonomous system through iBGP. MED, Origin, and AS Path are considered later in the path-selection process.<\/span><\/p>\n

            Question 266<\/b><\/h3>\n

            Which technology allows multiple isolated routing domains to exist on the same physical router?<\/b><\/p>\n

              \n
            1. VLAN<\/span><\/li>\n
            2. VRF<\/span><\/li>\n
            3. STP<\/span><\/li>\n
            4. Port Security<\/span><\/li>\n<\/ol>\n

              Correct Answer: 2<\/b><\/p>\n

              Explanation<\/b><\/p>\n

              Virtual Routing and Forwarding (VRF) creates separate virtual routing tables on the same physical device. Each VRF maintains independent Layer 3 forwarding information, allowing traffic from different routing domains to remain logically isolated. This is especially useful for service providers, multi-tenant environments, and organizations that need overlapping IP address spaces. VLANs provide Layer 2 segmentation, while STP controls Layer 2 loops. Port Security controls MAC address access on switch interfaces. VRF specifically provides separation of routing information and forwarding decisions.<\/span><\/p>\n

              Question 267<\/b><\/h3>\n

              Which BGP feature allows an iBGP router to advertise learned routes to another iBGP router without requiring a full mesh?<\/b><\/p>\n

                \n
              1. Route reflector<\/span><\/li>\n
              2. AS Path prepending<\/span><\/li>\n
              3. MED<\/span><\/li>\n
              4. Local Preference<\/span><\/li>\n<\/ol>\n

                Correct Answer: 1<\/b><\/p>\n

                Explanation<\/b><\/p>\n

                A BGP route reflector reduces the need for a full mesh of iBGP sessions. Normally, routes learned from one iBGP peer cannot simply be advertised to another iBGP peer, which creates scalability challenges as the number of routers increases. A route reflector can receive routes from clients and reflect them to other appropriate clients or non-client peers. This significantly reduces the number of required BGP sessions. Route reflectors are widely used in large enterprise and service-provider networks to simplify iBGP scalability.<\/span><\/p>\n

                Question 268<\/b><\/h3>\n

                Which network virtualization technology uses VXLAN tunnels between devices that perform encapsulation and decapsulation?<\/b><\/p>\n

                  \n
                1. Spine<\/span><\/li>\n
                2. EVPN<\/span><\/li>\n
                3. VTEP<\/span><\/li>\n
                4. VLAN<\/span><\/li>\n<\/ol>\n

                  Correct Answer: 3<\/b><\/p>\n

                  Explanation<\/b><\/p>\n

                  A VXLAN Tunnel Endpoint (VTEP) performs VXLAN encapsulation and decapsulation. It receives an Ethernet frame, encapsulates it into a VXLAN packet carried across the Layer 3 underlay, and removes the encapsulation when traffic reaches the appropriate destination VTEP. VTEPs therefore form the endpoints of VXLAN tunnels. EVPN can provide a control plane for VXLAN environments, while VLANs provide traditional Layer 2 segmentation. Understanding VTEP operation is important when troubleshooting overlay connectivity and endpoint communication in VXLAN-based networks.<\/span><\/p>\n

                  Question 269<\/b><\/h3>\n

                  Which routing behavior allows a router to forward traffic using a route that is less preferred than the currently active route when the preferred route fails?<\/b><\/p>\n

                    \n
                  1. ECMP<\/span><\/li>\n
                  2. Route summarization<\/span><\/li>\n
                  3. Floating static route<\/span><\/li>\n
                  4. Policy-based routing<\/span><\/li>\n<\/ol>\n

                    Correct Answer: 3<\/b><\/p>\n

                    Explanation<\/b><\/p>\n

                    A floating static route provides a backup path by assigning a higher administrative distance than the primary route. Because the administrative distance is higher, the backup route remains inactive while a more preferred route exists. If the preferred route disappears, the floating static route can be installed and used for forwarding. This is a simple and effective method for providing backup connectivity. ECMP uses multiple equal-cost routes simultaneously, while summarization reduces routing information and policy-based routing makes forwarding decisions according to configured policies.<\/span><\/p>\n

                    Question 270<\/b><\/h3>\n

                    Which protocol is responsible for securely transferring files between network devices using an encrypted SSH-based session?<\/b><\/p>\n

                      \n
                    1. TFTP<\/span><\/li>\n
                    2. FTP<\/span><\/li>\n
                    3. SCP<\/span><\/li>\n
                    4. HTTP<\/span><\/li>\n<\/ol>\n

                      Correct Answer: 3<\/b><\/p>\n

                      Explanation<\/b><\/p>\n

                      Secure Copy Protocol (SCP) transfers files between devices using an SSH-based encrypted connection. It is commonly used to securely copy Cisco IOS images, configuration files, and other files between network devices and administrative systems. Because SCP relies on SSH, authentication and data transfer are protected from straightforward interception. TFTP does not provide encryption, while traditional FTP is not inherently encrypted. HTTP is primarily a web protocol. SCP is therefore a suitable choice when secure file transfer is required between network devices.<\/span><\/p>\n

                      Question 271<\/b><\/h3>\n

                      Which routing protocol uses bandwidth and delay as the default components of its composite metric?<\/b><\/p>\n

                        \n
                      1. EIGRP<\/span><\/li>\n
                      2. RIP<\/span><\/li>\n
                      3. OSPF<\/span><\/li>\n
                      4. BGP<\/span><\/li>\n<\/ol>\n

                        Correct Answer: 1<\/b><\/p>\n

                        Explanation<\/b><\/p>\n

                        EIGRP uses a composite metric that, by default, is primarily calculated from bandwidth and delay. Other parameters such as reliability and load can be included when the metric formula is modified, although they are not part of the default active calculation. The bandwidth component reflects the minimum bandwidth along the path, while delay represents cumulative delay across the route. RIP uses hop count, OSPF uses cost, and BGP uses path attributes. EIGRP’s composite metric helps it make routing decisions based on characteristics beyond simple hop count.<\/span><\/p>\n

                        Question 272<\/b><\/h3>\n

                        Which protocol is commonly used to provide secure remote command-line access to a Cisco device?<\/b><\/p>\n

                          \n
                        1. Telnet<\/span><\/li>\n
                        2. FTP<\/span><\/li>\n
                        3. TFTP<\/span><\/li>\n
                        4. SSH<\/span><\/li>\n<\/ol>\n

                          Correct Answer: 4<\/b><\/p>\n

                          Explanation<\/b><\/p>\n

                          Secure Shell (SSH) provides encrypted remote command-line access to Cisco network devices. It protects administrator credentials and management traffic from being transmitted in clear text. SSH commonly uses TCP port 22 and requires appropriate device configuration, including hostname, domain information, user credentials, and cryptographic keys. Telnet can provide remote CLI access but sends information without encryption, making it unsuitable for secure management. FTP and TFTP are file-transfer protocols rather than remote command-line management protocols.<\/span><\/p>\n

                          Question 273<\/b><\/h3>\n

                          Which Cisco IOS command displays the current routing table and the sources of routes installed on the router?<\/b><\/p>\n

                            \n
                          1. show ip route<\/span><\/li>\n
                          2. show ip protocols<\/span><\/li>\n
                          3. show interfaces<\/span><\/li>\n
                          4. show arp<\/span><\/li>\n<\/ol>\n

                            Correct Answer: 1<\/b><\/p>\n

                            Explanation<\/b><\/p>\n

                            The <\/span>show ip route<\/span> command displays the IPv4 routing table, including connected, static, and dynamically learned routes. The output identifies route sources through codes such as O for OSPF, D for EIGRP, B for BGP, and S for static routes. Administrators can use this command to determine whether a destination is reachable and which next hop or outgoing interface the router will use. It is one of the most important commands for troubleshooting Layer 3 forwarding and routing problems.<\/span><\/p>\n

                            Question 274<\/b><\/h3>\n

                            Which OSPF mechanism elects a backup router to assume the DR role if the current DR fails?<\/b><\/p>\n

                              \n
                            1. ABR<\/span><\/li>\n
                            2. BDR<\/span><\/li>\n
                            3. ASBR<\/span><\/li>\n
                            4. Route Reflector<\/span><\/li>\n<\/ol>\n

                              Correct Answer: 2<\/b><\/p>\n

                              Explanation<\/b><\/p>\n

                              The Backup Designated Router (BDR) is elected alongside the Designated Router on OSPF multiaccess networks. The BDR maintains adjacencies with the other OSPF routers and is prepared to assume the DR role if the current DR becomes unavailable. This reduces the disruption caused by a DR failure and helps maintain efficient OSPF adjacency relationships. An ABR connects different OSPF areas, an ASBR introduces external routes, and a route reflector is a BGP feature. BDR specifically provides redundancy for the OSPF DR role.<\/span><\/p>\n

                              Question 275<\/b><\/h3>\n

                              Which IPv6 mechanism allows hosts to discover the default router on their local network?<\/b><\/p>\n

                                \n
                              1. Router Advertisement<\/span><\/li>\n
                              2. DHCP Discover<\/span><\/li>\n
                              3. ARP Request<\/span><\/li>\n
                              4. DNS Query<\/span><\/li>\n<\/ol>\n

                                Correct Answer: 1<\/b><\/p>\n

                                Explanation<\/b><\/p>\n

                                IPv6 hosts can discover default routers through Router Advertisement (RA) messages, which are part of ICMPv6 Neighbor Discovery. Routers periodically send RAs or respond to Router Solicitation messages from hosts. An RA can provide information such as the network prefix, default-router information, and configuration flags. IPv6 does not use ARP for neighbor discovery, and DHCP Discover is associated with IPv4 DHCP. DNS queries resolve names rather than discover default gateways. Router Advertisement is therefore central to IPv6 router discovery.<\/span><\/p>\n

                                Question 276<\/b><\/h3>\n

                                Which security feature limits the number of MAC addresses that can be learned on a switch port?<\/b><\/p>\n

                                  \n
                                1. DHCP Snooping<\/span><\/li>\n
                                2. Dynamic ARP Inspection<\/span><\/li>\n
                                3. Port Security<\/span><\/li>\n
                                4. Root Guard<\/span><\/li>\n<\/ol>\n

                                  Correct Answer: 3<\/b><\/p>\n

                                  Explanation<\/b><\/p>\n

                                  Port Security allows administrators to control which and how many MAC addresses can be associated with a switch interface. It can limit the maximum number of secure MAC addresses and define actions when unauthorized addresses are detected. This helps protect access ports against unauthorized devices and certain MAC-based attacks. DHCP Snooping protects DHCP operations, Dynamic ARP Inspection validates ARP messages, and Root Guard protects the spanning-tree topology. Port Security is therefore the appropriate feature for restricting MAC addresses on a switch port.<\/span><\/p>\n

                                  Question 277<\/b><\/h3>\n

                                  Which BGP attribute is commonly used to influence inbound traffic by making a route less attractive through a neighboring autonomous system?<\/b><\/p>\n

                                    \n
                                  1. Weight<\/span><\/li>\n
                                  2. Local Preference<\/span><\/li>\n
                                  3. AS Path prepending<\/span><\/li>\n
                                  4. Origin<\/span><\/li>\n<\/ol>\n

                                    Correct Answer: 3<\/b><\/p>\n

                                    Explanation<\/b><\/p>\n

                                    AS Path prepending influences inbound traffic by adding additional copies of an autonomous system number to a route’s AS Path. The resulting path appears longer to neighboring BGP routers and is therefore generally less attractive when AS Path length is considered. This can encourage external networks to select another available path. Weight and Local Preference primarily influence outbound routing decisions within the local autonomous system. Origin also participates in BGP path selection but is not normally used in this manner to manipulate inbound traffic.<\/span><\/p>\n

                                    Question 278<\/b><\/h3>\n

                                    Which protocol is used to dynamically negotiate trunking between compatible Cisco switch interfaces?<\/b><\/p>\n

                                      \n
                                    1. VTP<\/span><\/li>\n
                                    2. DTP<\/span><\/li>\n
                                    3. LACP<\/span><\/li>\n
                                    4. STP<\/span><\/li>\n<\/ol>\n

                                      Correct Answer: 2<\/b><\/p>\n

                                      Explanation<\/b><\/p>\n

                                      Dynamic Trunking Protocol (DTP) is a Cisco proprietary protocol used to negotiate trunking between compatible switch interfaces. Depending on the configured modes, switches can dynamically determine whether an interface should operate as a trunk. DTP is separate from VLAN management and EtherChannel negotiation. VTP distributes VLAN information, LACP negotiates link aggregation, and STP prevents Layer 2 loops. In modern network designs, administrators often explicitly configure trunk interfaces instead of relying on dynamic negotiation, but DTP remains an important Cisco switching concept.<\/span><\/p>\n

                                      Question 279<\/b><\/h3>\n

                                      Which network monitoring technology records information about traffic flows rather than capturing every individual packet?<\/b><\/p>\n

                                        \n
                                      1. NetFlow<\/span><\/li>\n
                                      2. SPAN<\/span><\/li>\n
                                      3. TFTP<\/span><\/li>\n
                                      4. DHCP<\/span><\/li>\n<\/ol>\n

                                        Correct Answer: 1<\/b><\/p>\n

                                        Explanation<\/b><\/p>\n

                                        NetFlow provides traffic-flow information by collecting metadata about conversations rather than storing complete packet contents. Depending on the implementation, flow records can include source and destination addresses, ports, protocol information, packet counts, byte counts, and timestamps. This information is useful for traffic analysis, capacity planning, security investigations, and identifying unusual traffic patterns. SPAN mirrors packets to a monitoring interface, while TFTP and DHCP perform file-transfer and address-assignment functions. NetFlow is therefore appropriate when flow-level visibility is required.<\/span><\/p>\n

                                        Question 280<\/b><\/h3>\n

                                        Which network architecture separates the physical transport network from virtualized application and service networks?<\/b><\/p>\n

                                          \n
                                        1. Traditional VLAN-only architecture<\/span><\/li>\n
                                        2. Flat Layer 2 architecture<\/span><\/li>\n
                                        3. Static routing architecture<\/span><\/li>\n
                                        4. Overlay network architecture<\/span><\/li>\n<\/ol>\n

                                          Correct Answer: 4<\/b><\/p>\n

                                          Explanation<\/b><\/p>\n

                                          An overlay network architecture creates logical virtual networks on top of an underlying physical transport network, often called the underlay. Technologies such as VXLAN can encapsulate virtual network traffic and transport it across an IP-based infrastructure. This separation allows the physical network to focus on reliable packet transport while logical segmentation and service requirements are handled by the overlay. Overlay architectures provide greater flexibility and scalability for modern data centers and large enterprise environments compared with purely flat Layer 2 designs.<\/span><\/p>\n

                                           <\/p>\n","protected":false},"excerpt":{"rendered":"

                                          View Full Cisco 350-401 Exam Dumps and Practice Test Dumps   Question 261 Which BGP attribute is used to identify the origin of a route and can have values such as IGP, EGP, and incomplete? Origin Weight MED Community Correct Answer: 1 Explanation The BGP Origin attribute identifies how a route was introduced into BGP. […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":[],"categories":[1648,1647],"tags":[],"_links":{"self":[{"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/posts\/12919"}],"collection":[{"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/comments?post=12919"}],"version-history":[{"count":1,"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/posts\/12919\/revisions"}],"predecessor-version":[{"id":12932,"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/posts\/12919\/revisions\/12932"}],"wp:attachment":[{"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/media?parent=12919"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/categories?post=12919"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/tags?post=12919"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}