Cisco Updated 350-401 Exam Questions and Answers by saint

 In the context of Cisco routers, to analyze a subset of packets, a sampling method is used. The correct command set to configure the router to sample 50 packets out of every 100 would involve setting up a flow sampler map that defines the rate at which packets are sampled. In this case, since we want to sample 50 out of every 100 packets, we need to specify a sampling rate where one out of every two packets is sampled. This can be achieved with the following configuration:

sampler SAMPLER-1

mode random 1-out-of-2

!

flow monitor FLOW-MONITOR-1

record netflow original-input

exporter EXPORTER-1

cache timeout active 60

sampler SAMPLER-1

!

interface GigabitEthernet0/0/0

ip flow monitor FLOW-MONITOR-1 input sampler SAMPLER-1

This configuration creates a sampler called “SAMPLER-1” that randomly selects one packet out of every two for analysis (which equates to analyzing 50% or 50 out of every 100 packets). The flow monitor “FLOW-MONITOR-1” is then applied to an interface with the specified sampler.

In a redundant router configuration, it is crucial for routers to authenticate each other to ensure they are allowed to communicate and establish a standby relationship. Matching key-strings are used for authentication purposes. If the key-strings do not match, the routers will not trust each other, and the standby router will not take over when needed.

 Cisco Stealthwatch provides visibility across the entire network infrastructure, giving a comprehensive view of everything happening within your network. It uses advanced security analytics to rapidly detect and respond to threats in real time, thus providing situational awareness of users, devices, and traffic. This helps in identifying anomalous behavior that could indicate a securitythreat. References: Implementing and Operating Cisco Service Provider Network Core Technologies (SPCOR) v1.1

Page 1

The correct command set to change the neighbor state from Idle (Admin) to Active is found in Option C. In the context of Cisco Service Provider network core technologies, the Idle (Admin) state indicates that the BGP (Border Gateway Protocol) neighbor is administratively down. To bring it up, the no neighbor shutdown command is used, which removes the administrative shutdown on the specified BGP neighbor, allowing the BGP state to transition to Active. The Active state is where BGP is trying to establish a peering session with the specified neighbor. References: The explanation is based on the concepts covered in the Implementing and Operating Cisco Service Provider Network Core Technologies (SPCOR) source book, which provides detailed information on BGP operations and configurations within Service Provider networks