exam questions

Exam 350-401 All Questions

View all questions & answers for the 350-401 exam

Exam 350-401 topic 1 question 1066 discussion

Actual exam question from Cisco's 350-401
Question #: 1066
Topic #: 1
[All 350-401 Questions]

SIMULATION
-


Guidelines
-

This is a lab item in which tasks will be performed on virtual devices.

• Refer to the Tasks tab to view the tasks for this lab item.
• Refer to the Topology tab to access the device console(s) and perform the tasks.
• Console access is available for all required devices by clicking the device icon or using the tab(s) above the console window.
• All necessary preconfigurations have been applied.
• Do not change the enable password or hostname for any device.
• Save your configurations to NVRAM before moving to the next item.
• Click Next at the bottom of the screen to submit this lab and move to the next question.
• When Next is clicked, the lab closes and cannot be reopened.


Topology
-




Tasks
-

The operations team started configuring network devices for a new site. R10 and R20 are preconfigured with the CORP VRF. R10 has network connectivity to R20. Complete the configurations to achieve these goals:

1. Extend the CORP VRF between R10 and R20 using Tunnel0.
2. Protect Tunnel0 using the preconfigured profile.

Show Suggested Answer Hide Answer
Suggested Answer:

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
acook0411
Highly Voted 8 months, 3 weeks ago
the ip vrf forwarding command should be the first command as this usually removes the IP address which will need to be added back again.
upvoted 9 times
zbeugene7
5 months, 1 week ago
Correct plus it needs two static routes: R10(config)#ip route vrf CORP 10.101.2.0 255.255.255.0 10.100.100.2 R20(config)#ip route vrf CORP 10.100.1.0 255.255.255.0 10.100.100.1
upvoted 3 times
WENG_POGI
5 months ago
it does not says configure static route only 2 task.
upvoted 2 times
abrielirus123
4 months, 1 week ago
Without those, the tunnel won't come up, so it remains unusable. I think we can assume that is not how it should remain.
upvoted 1 times
...
...
...
...
ZZL
Most Recent 2 days, 16 hours ago
The exam I took last night had this sim, it has FINANCE vrf, you need to extend the VRF across the GRE, but the task never mentioned about configuring VRF on the connected switch, where the VLAN222 is there, so please be careful and you do you need to extend the VRF to the downstream switch as well, which mean reconfig the p2p interface and the VLAN222. Also, out of 54 questions, only about half them were from here, the rest were new but related the topics here. About 15 questions were Wireless, at least 15 of them were Programming, 10 of them were SD-WAN/SD-Access, and finally some networking questions. Good luck all.
upvoted 1 times
...
tltechcert
3 weeks, 1 day ago
Just want to let everybody know there's a version of this question that doesn't provide the IPSEC Profile and the question doesn't deliberately say "create an ipsc profile" but when I got the results of the test, the "security" section of the test was only 20% out of 100%. I think there's a version of this question where they expect you go create the IPSEC Profile from scratch to protect the Tunneled Interface.
upvoted 1 times
...
junior34pl
4 months, 1 week ago
Had similar sim on exams. The vrf called FINANCE. First task was to extend vrf. The second task was to set static routes.
upvoted 2 times
Gray99
4 months ago
How did the other sim / questions compare the list here?
upvoted 1 times
junior34pl
3 months, 3 weeks ago
Sims were similar but most of the questions were new
upvoted 2 times
chmacnp
3 months, 3 weeks ago
what do you mean most questions were new? many were not one of the 1067 in exam topics?
upvoted 1 times
sjorwen
3 months ago
I have taken the examn recently, got 6 labs. Troubleshoot etherchannel and all had some different variation of these examples. 60 questions and maybe 10 from this site. ALOT of new ones!!
upvoted 1 times
...
...
...
...
...
ali_sh85
6 months ago
I think the following static routes are missing: R10(config)#ip route vrf CORP 10.101.2.0 255.255.255.0 tunnel 0 R20(config)#ip route vrf CORP 10.100.1.0 255.255.255.0 tunnel 0
upvoted 3 times
WENG_POGI
5 months ago
it not says configure static route only 2 task
upvoted 2 times
...
...
Alisars
7 months, 1 week ago
why need "tunnel mode gre ip" doesnt see this from question
upvoted 1 times
NetworkJanitor
7 months ago
You don't need it. GRE is the default mode for a tunnel. "The default tunnel mode for a Cisco interface is "GRE" (Generic Routing Encapsulation), meaning that when you configure a tunnel interface, it will automatically be set to use GRE encapsulation unless explicitly specified otherwise"
upvoted 3 times
...
...
post20
7 months, 2 weeks ago
[Task 1] R10(config)# interface Tunnel 0 R10(config-if)# ip vrf forwarding CORP R10(config-if)# ip address 10.100.100.1 255.255.255.0 R10(config-if)# tunnel source e0/1 R10(config-if)# tunnel destination 10.10.2.20 R10(config-if)# tunnel mode gre ip R20(config)# interface Tunnel 0 R20(config-if)# ip vrf forwarding CORP R20(config-if)# ip address 10.100.100.2 255.255.255.0 R20(config-if)# tunnel source e0/2 R20(config-if)# tunnel destination 10.10.1.10 R20(config-if)# tunnel mode gre ip [Task 2] R10(config-if)# tunnel protection ipsec profile MYPROFILE R20(config-if)# tunnel protection ipsec profile MYPROFILE
upvoted 4 times
LearningInProgress
4 months, 2 weeks ago
tunnel dest should be 10.10.2.1 for R10 and 10.10.1.1 for R20.
upvoted 1 times
LearningInProgress
4 months, 2 weeks ago
disregard, dont know the ips for the interfaces.
upvoted 1 times
...
...
NetworkJanitor
7 months ago
This config needs static vrf routes as well, otherwise, traffic will not be routed through t0
upvoted 5 times
WENG_POGI
5 months ago
it doesnt says configure static route on between R10 R20
upvoted 1 times
...
...
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...