Free 350-401 Exam Dumps

Question 26

- (Exam Topic 3)
An engineer must configure an EXEC authorization list that first checks a AAA server then a local username. If both methods fail, the user is denied. Which configuration should be applied?

A. aaa authorization exec default local group tacacs+
B. aaa authorization exec default local group radius none
C. aaa authorization exec default group radius local none
D. aaa authorization exec default group radius local

Correct Answer:D

Question 27

- (Exam Topic 4)
How is a data modelling language used?

A. To enable data to be easily structured, grouped, validated, and replicated.
B. To represent finite and well-defined network elements that cannot be changed.
C. To model the flows of unstructured data within the infrastructure
D. To provide human readability to scripting languages

Correct Answer:A

Question 28

- (Exam Topic 2)
The login method is configured on the VTY lines of a router with these parameters.
350-401 dumps exhibit The first method for authentication is TACACS
If TACACS is unavailable, login is allowed without any provided credentials Which configuration accomplishes this task?

A. R1#sh run | include aaa aaa new-modelaaa authentication login VTY group tacacs+ none aaa session-id commonR1#sh run | section vty line vty 0 4password 7 0202039485748 R1#sh run | include username R1#
B. R1#sh run | include aaa aaa new-modelaaa authentication login telnet group tacacs+ noneaaa session-id common R1#sh run | section vty line vty 0 4R1#sh run | include username R1#
C. R1#sh run | include aaa aaa new-modelaaa authentication login default group tacacs+ none aaa session-id commonR1#sh run | section vty line vty 0 4password 7 0202039485748
D. R1#sh run | include aaa aaa new-modelaaa authentication login default group tacacs+ aaa session-id commonR1#sh run | section vty line vty 0 4transport input none R1#

Correct Answer:C
According to the requirements (first use TACACS+, then allow login with no authentication), we have to use “aaa authentication login … group tacacs+ none” for AAA command.
The next thing to check is the if the “aaa authentication login default” or “aaa authentication login list-name” is used. The ‘default’ keyword means we want to apply for all login connections
(such as tty, vty, console and aux). If we use this keyword, we don’t need to configure anything else under tty, vty and aux lines. If we don’t use this keyword then we have to specify which line(s) we want to apply the authentication feature.
From above information, we can find out answer 'R1#sh run | include aaa aaa new-model
aaa authentication login default group tacacs+ none aaa session-id common
R1#sh run | section vty line vty 0 4
password 7 0202039485748
If you want to learn more about AAA configuration, please read our AAA TACACS+ and RADIUS Tutorial – Part 2.
For your information, answer 'R1#sh run | include aaa aaa new-model
aaa authentication login telnet group tacacs+ none aaa session-id common
R1#sh run | section vty line vty 0 4
R1#sh run | include username
R1#' would be correct if we add the following command under vty line (“line vty 0 4”): “login authentication telnet” (“telnet” is the name of the AAA list above)

Question 29

- (Exam Topic 1)
What is the function of the LISP map resolver?

A. to send traffic to non-LISP sites when connected to a service provider that does not accept nonroutable ElDs as packet sources
B. to connect a site to the LISP-capable part of a core network publish the EID-to-RLOC mappings for the site, and respond to map-request messages
C. to decapsulate map-request messages from ITRs and forward the messages to the MS.
D. to advertise routable non-LISP traffic from one address family to LISP sites in a different address family

Correct Answer:C
Map resolver (MR): The MR performs the following functions: Receives MAP requests, which are encapsulated by ITRs. Provides a service interface to the ALT router, de-encapsulates MAP requests, and forwards on the ALT topology.

Question 30

- (Exam Topic 4)
In Cisco DNA Center, what is the integration API?

A. southbound consumer-facing RESTful AP
B. which enables network discovery and configuration management
C. westbound interface, which allows the exchange of data to be used by ITS
D. IPAM and reporting
E. an interface between the controller and the network devices, which enables network discovery andconfiguration management
F. northbound consumer-facing RESTful API, which enables network discovery and configuration management

Correct Answer:B