Free Cisco 350-401 Practice Exam with Questions & Answers | Set: 2

Solution:

R1

config

flow exporter Export-NetFlowENCOR

transport udp 2055

ip sla schedule 100 life forever start-time now

wr

Sw1

monitor session 11 source interface e0/2

monitor session 11 destination interface et1/1

wr

OR

Solution:

R22

config t

int tunn0

vrf forwarding FINANCE

ip add 10.11.22.2 255.255.255.0

tunn so e0/0

tunn dest 209.165.200.230

no shut

int et0/1

vrf forward FINANCE

ip add 10.22.22.1 255.255.255.252

no shut

ip route vrf FINANCE 10.10.111.0 255.255.255.0 tunn0

wr

Solution:

R30

Config t

router ospf 100

router-id 10.0.1.30

int ran lo0 , e0/0-1

ip ospf 100 a 0

exit

int et0/2

ip ospf 100 a 50

exit

router ospf 30

area 50 range 10.10.0.0 255.255.192.0

area 50 range 10.50.0.0 255.255.192.0

end

wr

Solution:

R30

Config t

router ospf 10

router-id 10.0.1.30

int ran lo0 , e0/0-1

ip ospf 10 a 0

exit

int et0/2

ip ospf 10 a 50

exit

router ospf 10

area 50 range 10.10.0.0 255.255.128.0

area 50 range 10.50.0.0 255.255.128.0

end

Solution:

R30

Config t

router ospf 100

router-id 10.0.1.30

int ran lo0 , e0/0-1

ip ospf 100 a 0

exit

int et0/2

ip ospf 100 a 50

exit

router ospf 30

area 50 range 10.10.0.0 255.255.192.0

area 50 range 10.50.0.0 255.255.192.0

end

wr

Sw10

Config t

no int po1

default int ran et0/0-2

int ran e0/0-2

switchport trunk encap dot1q

switchport mode trunk

channel-group 1 mode active

no shut

wr

The correct answer is A. integrated IPS.

A traditional firewall provides:

Stateful inspection

Basic ACL filtering

NAT

Sometimes VPN services

A Next-Generation Firewall (NGFW) adds advanced capabilities such as:

Integrated Intrusion Prevention System (IPS)

Application awareness and control

Advanced malware protection

Integrated IPS (Intrusion Prevention System) is a defining feature of NGFWs.

It allows the firewall to:

Detect and block known and unknown threats

Perform deep packet inspection

Stop attacks in real time

This capability is not part of traditional firewalls, which only inspect traffic based on state and basic rules.

B. Stateful firewall policies This is a core feature of traditional firewalls, not unique to NGFWs.

C. SSL VPN VPN functionality exists in both traditional and next-generation firewalls.

D. NAT NAT is a basic firewall/network feature, not exclusive to NGFWs.

Remember the distinction:

Traditional Firewall → Stateful filtering, NAT, VPN

Next-Generation Firewall → Adds IPS + Application Awareness + Advanced Security

NGFW = Traditional Firewall + Advanced Threat Protection

Solution:

R1

en

Conf t

Router ospf 10

Router-id 10.x.x.x – lo0 address

Int range lo0, e0/0-1

Ip ospf 10 area 0

Exit

wr

R2

Router ospf 10

Area 10 range 10.1.0.0 255.255.0.0

exit

wr

R3

Router ospf 10

Area 10 range 10.2.0.0 255.255.0.0

Exit

Wr

OR

Solution:

R3

Int e0/1

Ip ospf priority 255

End

Copy run start

R2

Int e0/1

Ip ospf network point-to-point

End

Copy run start

R10

Int e0/0

Ip ospf network point-to-point

End

Copy run start