Cisco 350-401 Quiz 41 Topic 4 Questions 201-205

Question: 1

Refer to the exhibit.

An engineer must deny HTTP traffic from host A to host B while allowing all other communication between the hosts. Which command set accomplishes this task?

q1_350-401

AOption A

BOption B

COption C

DOption D
In this case we need to configure a VLAN access-map to deny HTTP traffic and apply it to VLAN 10. To do it, first create an access-list, by which interesting traffic will be matched. The principle of VLAN access-map config is similar to the route-map principle.
After this we'll create a vlan access-map, which has two main parameters: action and match.
Match: by this parameter the interesting traffic is matched and here RACL or MAC ACL can be applied as well.
Action: what to do with matched traffic. Two main parameters exist: Drop and Forward. In case of Drop, matched traffic will be dropped, and in case of forward, matched traffic will be allowed.
A good reference and example can be found athttps://www.networkstraining.com/vlan-access-map-example-configuration/

Show Answer

Question: 2

Which solution do laas service provides use to extend a Layer 2 segment across a Layer 3 network?

AVLAN

BVTEP

CVXLAN

DVRF

Show Answer

Question: 3

Refer to the exhibit. Communication between London and New York is down. Which command set must be applied to the NewYork switch to resolve the issue?

q3_350-401

AOption A

BOption B

COption C

DOption D

Show Answer

Question: 4

What is the fabric control plane node In a Cisco SD-Access deployment?

AIt is responsible for policy application and network segmentation in the fabric.

BIt performs traffic encapsulation and security profiles enforcement in the fabric.

CIt holds a comprehensive database that tracks endpoints and networks in the fabric.

DIt provides Integration with legacy nonfabric-enabled environments.
Fabric control plane node (C): One or more network elements that implement the LISP Map-Server (MS) and Map-Resolver (MR) functionality. The control plane node's host tracking database keep track of all endpoints in a fabric site and associates the endpoints to fabric nodes in what is known as an EID-to-RLOC binding in LISP.

Show Answer

Question: 5

Refer to the exhibit. Extended access-list 100 is configured on interface GigabitEthernet 0/0 in an inbound direction, but it does not have the expected behavior of allowing only packets to or from 192.168.0.0/16. Which command set properly configures the access list?

q5_350-401

AOption A

BOption B

COption C

DOption D

Show Answer

Cisco 350-401 Quiz:41 Topic:4 Questions:201-205