cisco 350-401 Exam Questions
Questions for the 350-401 were updated on : Nov 30 ,2025
Page 1 out of 26. Viewing questions 1-15 out of 380
Question 1
SIMULATION
Answer:
See the
solution below in
Explanation:
Solution:
R2
show ip access-list
config t
ip access-list extended 151
5 permit eigrp any any
wr
R3
config t
ip access-list extended 100
permit tcp 192.168.211.0 0.0.0.255 any eq 22
class-map match-any SSH
match access-group 100
policy-map CoPP
class SSH
police 8000 conform-action transmit exceed-action drop
control-plane
service-policy input CoPP
wr
Question 2
SIMULATION
Answer:
See the
solution below in
Explanation:
Solution:
R30
show ip access-list
config t
ip access-list extended 120
5 permit eigrp any any
wr
R20
config t
ip access-list extended 100
permit tcp 192.168.25.0 0.0.0.255 any eq 23
class-map match-any TELNET
match access-group 100
policy-map CoPP
class TELNET
police 10000 conform-action transmit exceed-action drop
control-plane
service-policy input CoPP
wr
Question 3
SIMULATION
Answer:
See the
solution below in
Explanation:
Solution:
R2
config t
username NetworkAdmin privilege 15 password CiscoENCOR
line vty 0 4
login local
transport input telnet rlogin
exec-timepit 20
Question 4
SIMULATION
Answer:
See the
solution below in
Explanation:
Solution:
Sw10
config t
no int po2
int et0/0
channel-group 2 mode active
no shut
spanning-tree vlan 10a pri 0
wr
Question 5
SIMULATION
Answer:
See the
solution below in
Explanation:
Solution:
Sw10
config t
no int po20
int et0/0
channel-group 20 mode active
no shut
spanning-tree vlan 20 pri 0
wr
Verification:-
Question 6
SIMULATION
Answer:
See the
solution below in
Explanation:
Sw10
Config t
no int po1
default int ran et0/0-2
int ran e0/0-2
switchport trunk encap dot1q
switchport mode trunk
channel-group 1 mode active
no shut
wr
Question 7
SIMULATION
Answer:
See the
solution below in
Explanation:
Solution:-
Default int range et0/0-1
Int range e0/0 – 1
Sw trunk encap dot1
Switch mode trunk
Channel-group 2 mode passive
No shut
Spanning-tree vlan 10 priority 0
Spanning-tree vlan 30 priority 0
Question 8
SIMULATION
Answer:
See the
solution below in
Explanation:
Solution:
R30
Config t
router ospf 10
router-id 10.0.1.30
int ran lo0 , e0/0-1
ip ospf 10 a 0
exit
int et0/2
ip ospf 10 a 50
exit
router ospf 10
area 50 range 10.10.0.0 255.255.128.0
area 50 range 10.50.0.0 255.255.128.0
end
Question 9
SIMULATION
Answer:
See the
solution below in
Explanation:
Solution:
R30
Config t
router ospf 100
router-id 10.0.1.30
int ran lo0 , e0/0-1
ip ospf 100 a 0
exit
int et0/2
ip ospf 100 a 50
exit
router ospf 30
area 50 range 10.10.0.0 255.255.192.0
area 50 range 10.50.0.0 255.255.192.0
end
wr
Question 10
SIMULATION
Answer:
See the
solution below in
Explanation:
Solution:
R30
Config t
router ospf 100
router-id 10.0.1.30
int ran lo0 , e0/0-1
ip ospf 100 a 0
exit
int et0/2
ip ospf 100 a 50
exit
router ospf 30
area 50 range 10.10.0.0 255.255.192.0
area 50 range 10.50.0.0 255.255.192.0
end
wr
Question 11
SIMULATION
Answer:
See the
solution below in
Explanation:
Solution:
R22
config t
int tunn0
vrf forwarding FINANCE
ip add 10.11.22.2 255.255.255.0
tunn so e0/0
tunn dest 209.165.200.230
no shut
int et0/1
vrf forward FINANCE
ip add 10.22.22.1 255.255.255.252
no shut
ip route vrf FINANCE 10.10.111.0 255.255.255.0 tunn0
wr
Question 12
SIMULATION
Answer:
See the
solution below in
Explanation:
Solution:
R22
int tun0
vrf forwarding FINANCE
ip add 10.10.10.2 255.255.255.0
tunn source e0/0
tunnel dest 209.165.200.230
no shut
ip route vrf FINANCE 10.10.111.0 255.255.255.0 tunn0
int et0/1
vrf forwarding FINANCE
ip address 10.22.22.1 255.255.255.252
wr
Verification:-
Question 13
SIMULATION
Answer:
See the
solution below in
Explanation:
Solution:
router bgp 10
bgp router-id 10.1.1.111
no bgp defa ipv4-unicast
nei 209.165.200.226 remote-as 20
nei 209.165.202.130 remote-as 30
address-family ipv4
neigh 209.165.200.226 activate
neigh 209.165.202.130 activate
network 10.1.1.10 mask 255.255.255.255
network 209.165.201.10 mask 255.255.255.255
network 209.165.201.20 mask 255.255.255.255
wr
Question 14
SIMULATION
Answer:
See the
solution below in
Explanation:
Solution:
R1
Config t
Int et0/0
Ip flow monitor Monitor-R1Flow input
Ip flow monitor Monitor-R1Flow output
Exit
Ip sla 1
Icmp-echo 10.12.1.2
Freq 300
Ip sla schedule 1 life foreve start-time now
Sw1
Config t
Monitor session 12 source vlan 12
Monitor session 12 destination interface et1/3
Question 15
SIMULATION
Answer:
See the
solution below in
Explanation:
Solution:
R1
config t
flow record NetFlow-Record
match ipv4 source address
match ipv4 destination address
collect country bytes
flow exporter NetFlow-Exporter
destination 10.10.1.10
transport udp 9996
flow monitor NetFlow-Monitor
record NetFlow-Record
exporter NetFlow-Exporter
exit
int et0/0
ip flow monitor NetFlow-Monitor input
ip sla 1
http get http://10.10.1.100
frequency 600
exit
ip sla schedule 1 start-time now
wr
Sw1
config t
monitor session 2 source int e0/0
monitor session 2 source int et0/2
monitor session 2 destination interface e1/0
wr