CiscoProfessional level350-401Page 7 of 7

350-401 exam dumps: questions 601 to 629 of 629

Page 7 of the free 350-401 question bank for the Implementing Cisco Enterprise Network Core Technologies exam. Questions 601 to 629 are listed below, the first 5 in full with answers and explanations. Back to page 1 for the exam overview and FAQ.

Question bank last updated February 2025

Start timed practice exam Questions 601 to 629

Free 350-401 practice questions

Questions 602 to 606 of 629

Pick an answer before you open the explanation. Each question also has its own page with a permalink.

350-401 Question 602

Single answer

A network administrator is troubleshooting an SNMPv3 configuration issue on a Cisco router. The SNMP Manager is unable to retrieve information from the router. Upon investigation, the administrator finds the following configuration on the router:

snmp-server group MGMT v3 auth snmp-server user ADMIN MGMT v3 auth sha mysecretpassword snmp-server host 192.168.1.100 version 3 auth ADMIN

What could be causing the SNMP communication failure?

A
The SNMP group 'MGMT' is not configured for 'priv' (privacy) level.
B
The SNMP user 'ADMIN' does not have the correct password configured.
C
The SNMP server host IP address is incorrectly configured.
D
The SNMPv3 user 'ADMIN' is not assigned to the SNMP group 'MGMT'.

Show answer and explanation

Correct answer: A

Explanation

The issue lies in the mismatch between the SNMP group configuration and the expected communication level by the SNMP Manager. The SNMP group 'MGMT' is set to 'auth' level, but if the SNMP Manager requires 'authPriv' (authentication and encryption), the communication will fail. To resolve the issue, the SNMP group should be updated to 'authPriv' level to use both authentication and privacy.

A. Correct.
The SNMP group 'MGMT' is configured for 'auth' level, but the SNMPv3 user 'ADMIN' requires 'authPriv' (authentication and privacy) configuration if the host expects encrypted communication. This mismatch can cause communication failure.
B. Incorrect.
The password for the SNMP user 'ADMIN' is correctly configured as 'mysecretpassword' using SHA. Therefore, this is not the issue.
C. Incorrect.
The SNMP server host IP address (192.168.1.100) is correctly configured, so this is not the problem.
D. Incorrect.
The SNMPv3 user 'ADMIN' is correctly assigned to the SNMP group 'MGMT' in the configuration, so this is not the issue.

350-401 Question 603

Single answer

A network administrator is troubleshooting an SNMP issue on a Cisco router. The SNMP manager is unable to retrieve device information using SNMPv3, but SNMPv2c queries are working correctly. Upon checking the configuration, the administrator observes the following snippet:

snmp-server group ADMIN v3 auth snmp-server user ADMIN_USER ADMIN v3 auth md5 admin123

What could be the reason the SNMPv3 queries are failing?

A
The SNMPv3 user is not configured for encryption.
B
The SNMPv3 user is configured with an incorrect authentication protocol.
C
The SNMP manager is not using the correct SNMPv3 credentials.
D
The SNMPv3 group does not have read access to the necessary MIBs.

Show answer and explanation

Correct answer: C

Explanation

SNMPv3 requires the SNMP manager to use the correct username, authentication protocol, and password to successfully communicate with the SNMP agent. In this scenario, the failure is likely due to a mismatch in the credentials configured on the SNMP manager and those on the device. The other options either do not align with the configuration provided or would not cause complete SNMPv3 query failure.

A. Incorrect.
SNMPv3 encryption is optional when the user is configured with 'auth' level. Since the group and user are configured for 'auth' only, encryption is not required in this case.
B. Incorrect.
The configuration shows the SNMPv3 user is correctly using 'auth' with MD5, which is a valid authentication protocol.
C. Correct.
If the SNMP manager is not using the correct username (ADMIN_USER), password (admin123), or authentication protocol (MD5), it will fail to retrieve information using SNMPv3.
D. Incorrect.
Read access permissions for the MIBs are not explicitly shown in the configuration snippet, but this issue would typically result in partial data retrieval rather than complete failure.

350-401 Question 604

Select 3

A network administrator is troubleshooting SNMP communication issues between a network management system (NMS) and a router. The NMS is configured to use SNMPv3 for secure communication. However, SNMP queries are failing, and no responses are returned from the router. Upon verifying the configuration, the administrator confirms that the SNMPv3 user and group are correctly configured on the router. Which of the following could be the cause of the issue?

A
The SNMPv3 authentication protocol is mismatched between the NMS and the router.
B
The SNMPv3 privacy (encryption) protocol is disabled on the router.
C
The SNMPv3 user is not assigned the appropriate access control permissions on the router.
D
The router's SNMP agent is configured with an access list that blocks requests from the NMS.
E
The SNMP community string is mismatched between the NMS and the router.

Show answer and explanation

Correct answers: A, C, D

Explanation

SNMPv3 uses secure methods for authentication and optional encryption. Communication issues can arise if the authentication protocols are mismatched, the SNMPv3 user lacks appropriate access permissions, or if an access list blocks requests. SNMPv3 does not use community strings, so mismatched community strings only apply to SNMPv1/v2c and are irrelevant here.

A. Correct.
Correct. SNMPv3 requires both the NMS and the router to use the same authentication protocol (e.g., MD5 or SHA). A mismatch will prevent successful communication.
B. Incorrect.
Incorrect. While SNMPv3 supports optional encryption, disabling the privacy protocol does not prevent SNMP queries from functioning unless encryption is specifically required by the NMS.
C. Correct.
Correct. In SNMPv3, the user must be assigned the correct access privileges (e.g., read-only or read-write) to successfully respond to queries.
D. Correct.
Correct. An access list on the router could restrict SNMP traffic from the NMS if the NMS IP is not explicitly permitted.
E. Incorrect.
Incorrect. SNMP community strings are used in SNMPv1/v2c, not SNMPv3, so this is not relevant for the given scenario.

350-401 Question 605

Single answer

A network engineer is troubleshooting an SNMP issue on a Cisco router. The SNMPv3 manager is unable to collect data from the router, even though the SNMP user credentials are correct. Upon inspection, the following configuration is found on the router:

snmp-server group PRIV_GROUP v3 priv snmp-server user USER1 PRIV_GROUP v3 auth md5 my_auth_password priv aes 128 my_priv_password snmp-server host 192.168.1.100 version 3 priv USER1

What could be the cause of the issue?

A
The SNMPv3 user is configured with authentication and privacy, but the SNMP manager is not using privacy settings.
B
The SNMPv3 group PRIV_GROUP is incorrectly configured to use 'priv' instead of 'auth'.
C
The SNMP host 192.168.1.100 is not reachable from the router.
D
The SNMP manager's IP address is not configured in the 'snmp-server host' command.

Show answer and explanation

Correct answer: A

Explanation

In SNMPv3, the group configuration determines the required security level (e.g., 'auth', 'priv'). If the group is set to 'priv', the manager must also use privacy settings when communicating with the router. In this case, the group PRIV_GROUP is configured with 'priv', but the manager is not using privacy, which causes the communication failure.

A. Correct.
The SNMPv3 configuration requires both authentication and privacy settings ('priv') if the group is configured with 'priv'. If the SNMP manager does not match this requirement, communication will fail.
B. Incorrect.
The group PRIV_GROUP is correctly configured with 'priv', which matches the user configuration. This is not the cause of the issue.
C. Incorrect.
If the SNMP host were unreachable, the issue would be related to network connectivity, not SNMP configuration. The question focuses on SNMP troubleshooting.
D. Incorrect.
The SNMP manager's IP address is correctly configured in the 'snmp-server host' command, so this is not the issue.

350-401 Question 606

Select 3

A network engineer is troubleshooting intermittent issues with OSPF neighbor adjacencies in a branch office. They decide to enable logging and use conditional debugging to isolate the issue. Which of the following steps should the engineer take to effectively troubleshoot the problem?

A
Enable logging timestamps to correlate events.
B
Use the 'debug ip ospf events' command to capture all OSPF-related activity.
C
Configure an access control list (ACL) to filter specific IP traffic and apply it to the debugging.
D
Use the 'debug condition interface ' command to limit debugging to the affected interface.
E
Set the logging level to 'critical' to avoid excessive log messages.

Show answer and explanation

Correct answers: A, C, D

Explanation

When troubleshooting a specific issue like OSPF neighbor adjacency problems, it is essential to use focused tools and methods to avoid excessive or irrelevant output. Enabling logging timestamps helps correlate events with specific problems. Using an ACL to filter relevant traffic and applying conditional debugging to the affected interface ensures that the debugging output is manageable and targeted. Setting the logging level too high or using generic debug commands without filtering could overwhelm the engineer with unnecessary information.

A. Correct.
Enabling logging timestamps is crucial for correlating log messages with network events, especially when troubleshooting intermittent issues.
B. Incorrect.
While 'debug ip ospf events' captures OSPF-related activity, it generates excessive output and is not filtered to the specific issue. This could make troubleshooting more difficult.
C. Correct.
Using an ACL to filter specific IP traffic helps narrow down the debugging to relevant traffic, making the output more manageable and focused.
D. Correct.
The 'debug condition interface ' command helps limit debugging output to only the affected interface, reducing noise and isolating the issue.
E. Incorrect.
Setting the logging level to 'critical' might suppress useful debugging messages required for troubleshooting OSPF neighbor adjacency issues.

Timed practice exam

Take a 350-401 practice test under exam conditions

75 questions in 120 minutes, drawn from this bank, with a score report and a per-question review when you finish.

Start timed exam

350-401 practice questions 601 to 629 of 629

Every question has a page with the answer and explanation. Numbers are stable, so you can bookmark or share them. The bank is split into 7 pages of up to 100 questions.

More Cisco exam dumps

All Cisco exams

300-435321 questions

Cisco ENAUTO exam dumps

Automating Cisco Enterprise Solutions

200-301503 questions

Cisco CCNA exam dumps

Cisco Certified Network Associate

100-160264 questions

Cisco CCST Cybersecurity exam dumps

Cisco Certified Support Technician (CCST) Cybersecurity

100-140389 questions

Cisco CCST IT Support exam dumps

Cisco Certified Support Technician (CCST) IT Support

100-150294 questions

Cisco CCST Networking exam dumps

Cisco Certified Support Technician (CCST) Networking

200-201403 questions

Cisco CyberOps Associate (CBROPS) exam dumps

Cisco Cybersecurity Associate

200-901203 questions

Cisco DevNet Associate (DEVASC) exam dumps

Cisco DevNet Associate

300-215228 questions

Cisco CBRFIR (Forensic Analysis and Incident Response) exam dumps

Conducting Forensic Analysis and Incident Response Using Cisco Technologies for Cybersecurity