Free 350-401 Exam braindumps download (350-401 exam dumps Free)

QUESTION: 301

What is a characteristic of MACsec?

802.1AE is built between the host and switch using the MKA protocol, which negotiates encryption keys based on the primary session key from a successful 802.1X session.
802.1AE is negotiated using Cisco AnyConnect NAM and the SAP protocol.
802.1AE is built between the host and switch using the MKA protocol using keys generated via the Diffie-Hellman algorithm (anonymous encryption mode).
802.1AE provides encryption and authentication services.

Answer(s): A

Reference:

https://www.cisco.com/c/en/us/products/collateral/ios-nx-os-software/identity-based-networking-services/deploy_guide_c17-663760.html

Show Answer Next Question

QUESTION: 302

Refer to the exhibit. A network engineer attempts to connect to the Router1 console port.
Which configuration is needed to allow Telnet connections?

Router1(config)# line vty 0 15 Router1(config-line)# transport output telnet
Router1(config)# telnet client
Router1(config)# line console 0 Router1(config-line)# transport output telnet
Router1(config)# access-list 100 permit tcp any any eq telnet Router1(config)# line console 0 Router1(config-line)# access-class 100 out

Answer(s): C

Reference:

https://www.cisco.com/c/en/us/td/docs/routers/sdwan/command/iosxe/qualified-cli-command-reference-guide/m-line-commands.pdf

Show Answer Next Question

QUESTION: 303

Refer to the exhibit.

A network engineer must configure a password expiry mechanism on the gateway router for all local passwords to expire after 60 days. What is required to complete this task?

Add the username admin privilege 15 common-criteria-policy Administrators password 0 Cisco13579! command.
The password expiry mechanism is on the AAA server and must be configured there.
Add the aaa authentication enable default Administrators command.
No further action is required. The configuration is complete.

Answer(s): A