Online Access Free Cisco.350-401.v2023-01-21.q206 Practice Test (Page 22)

350-401 Exam Question 101

Refer to the exhibit.

An engineer must block all traffic from a router to its directly connected subnet 209.165.200.0/24. The engineer applies access control list EGRESS in the outbound direction on the GigabitEthernet0/0 interface of the router However, the router can still ping hosts on the 209.165.200.0/24 subnet. Which of this behavior is true?

A.After an access control list is applied to an interface, that interface must be shut and no shut for the access control list to take effect.

B.The access control list must contain an explicit deny to block traffic from the router.

C.Only standard access control lists can block traffic from a source IP address.

D.Access control lists that are applied outbound to a router interface do not affect traffic that is sourced from the router.

350-401 Exam Question 102

Refer to the exhibit. What is the effect of this configuration?

A.The device will allow only users at 192.166.0.202 to connect to vty lines 0 through 4

B.When users attempt to connect to vty lines 0 through 4, the device will authenticate them against TACACS+ if local authentication fails

C.The device will allow users at 192.168.0.202 to connect to vty lines 0 through 4 using the password ciscotestkey

D.The device will authenticate all users connecting to vty lines 0 through 4 against TACACS+

350-401 Exam Question 103

A network engineer is enabling HTTPS access to the core switch, which requires a certificate to be installed on the switch signed by the corporate certificate authority Which configuration commands are required to issue a certificate signing request from the core switch?
A)