Cisco Updated 350-401 Exam Questions and Answers by moses

To block FTP traffic from the Branch 2 network on router R1 while allowing all other traffic, the commands “access-list 101 deny tcp 10.0.2.0 0.0.0.255 host 10.0.101.3 eq ftp” and “access-list 101 deny tcp 10.0.2.0 0.0.0.255 host 10.0.101.3 eq ftp-data” are required. These commands specify an access control list that denies FTP (port 21) and FTP-data (port 20) traffic from the 10.0.2.0/24 network to the host 10.0.101.3, while the command “access-list 101 permit ip any any” allows all other traffic.

Cisco DNA Center and vManage northbound APIs are characterized by their implementation of the RESTCONF protocol, which is a REST API interface for accessing the automation and assurance workflows of these network management platforms3.

 Static Network Address Translation (NAT) is used to translate a private IP address to a public IP address one-to-one. To complete the configuration of static NAT, you need to specify which interfaces are connected to the inside network (usually the private network) and which are connected to the outside network (usually the public network). The correct commands to complete the configuration are:

R1(config)#interface GigabitEthernet0/0

R1(config-if)#ip nat outside

R1(config)#interface GigabitEthernet0/1

R1(config-if)#ip nat inside

This configuration designates GigabitEthernet0/0 as the outside interface connected to the public network and GigabitEthernet0/1 as the inside interface connected to the private network. The ip nat inside command is applied to the inside interface, and the ip nat outside command is applied to the outside interface.

References:

Implementing and Operating Cisco Service Provider Network Core Technologies (SPCOR) training materials.

Cisco documentation and configuration guides for NAT on Cisco IOS routers.

RESTCONF is a protocol used for network management and configuration that leverages YANG data models. It is designed to work with HTTP-based REST APIs, providing a mechanism for CRUD (Create, Read, Update, Delete) operations on the data defined by the YANG model. Unlike SNMP, which uses a different data modeling language, RESTCONF directly interacts with the YANG models to manage network configurations and state data.