Dumps Moneyack Guarantee - 350-401 Dumps UpTo 50% Off
Updated Jan-2022 Pass 350-401 Exam - Real Practice Test Questions
The benefit in Obtaining the Implementing Cisco Enterprise Network Core Technologies (350-401 ENCOR)
This exam will help you:
- Configure, troubleshoot, and manage enterprise wired and wireless networks
- Implement security principles within an enterprise network
- Earn 64 CE credits toward recertification
This exam is for:
- Network support technicians
- Mid-level network engineers
- Help desk technicians
- Network administrators
NEW QUESTION 63
Drag the drop the description from the left onto the routing protocol they describe on the right.
Answer:
Explanation:
Explanation
NEW QUESTION 64
Drag and drop the snippets onto the blanks within the code to construct a script that configures BGP according to the topology. Not all options are used, and some options may be used twice.
Answer:
Explanation:
NEW QUESTION 65
Refer to the exhibit. Which troubleshooting a routing issue, an engineer issues a ping from S1 to S2. When two actions from the initial value of the TTL? (Choose two.)
- A. The packet reaches R3, and the TTL expires
- B. The packet reaches R1 and the TTL expires.
- C. R2 replies with a TTL exceeded message
- D. R3 replies with a TTL exceeded message.
- E. R1 replies with a TTL exceeded message
- F. The packet reaches R2 and the TTL expires
Answer: A,D
NEW QUESTION 66
Which data modeling language is commonly used by NETCONF?
- A. XML
- B. YANG
- C. HTML
- D. REST
Answer: B
Explanation:
Cisco IOS XE supports the Yet Another Next Generation (YANG) data modeling language. YANG can be used with the Network Configuration Protocol (NETCONF) to provide the desired solution of automated and programmable network operations. NETCONF(RFC6241) is an XML-based protocol that client applications use to request information from and make configuration changes to the device. YANG is primarily used to model the configuration and state data used by NETCONF operations.
Reference: https://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst9500/software/release/16-
5/configuration_guide/prog/b_165_prog_9500_cg/data_models.pdf
Note: Although NETCONF also uses XML but XML is not a data modeling language.
NEW QUESTION 67
A response code of 404 is received while using the REST API on Cisco UNA Center to POST to this URI.
/dna/intent/api/v1 /template-programmer/project
What does the code mean?
- A. The client made a request a resource that does not exist.
- B. The request accepted for processing, but the processing was not completed.
- C. The server has not implemented the functionality that is needed to fulfill the request.
- D. The POST/PUT request was fulfilled and a new resource was created, Information about the resource is in the response body.
Answer: A
Explanation:
The 404 (Not Found) error status code indicates that the REST API can't map the client's URI to a resource but may be available in the future. Subsequent requests by the client are permissible.
Reference: https://restfulapi.net/http-status-codes/
NEW QUESTION 68 
Refer to the exhibit. What does the error message relay to the administrator who is trying to configure a Cisco IOS device?
- A. The NETCONF running datastore is currently locked.
- B. The device received a valid NETCONF request and serviced it without error.
- C. A NETCONF request was made for a data model that does not exist.
- D. A NETCONF message with valid content based on the YANG data models was made, but the request failed.
Answer: C
Explanation:
Explanation
NEW QUESTION 69
On which protocol or technology is the fabric data plane based in Cisco SD-Access fabric?
- A. Cisco TrustSec
- B. IS-IS
- C. VXLAN
- D. LISP
Answer: C
Explanation:
The tunneling technology used for the fabric data plane is based on Virtual Extensible LAN (VXLAN). VXLAN encapsulation is UDP based, meaning that it can be forwarded by any IP- based network (legacy or third party) and creates the overlay network for the SD-Access fabric.
Although LISP is the control plane for the SD-Access fabric, it does not use LISP data encapsulation for the data plane; instead, it uses VXLAN encapsulation because it is capable of encapsulating the original Ethernet header to perform MAC-in-IP encapsulation, while LISP does not. Using VXLAN allows the SD-Access fabric to support Layer 2 and Layer 3 virtual topologies (overlays) and the ability to operate over any IP-based network with built-in network segmentation (VRF instance/VN) and built-in group-based policy.
NEW QUESTION 70
Drag and drop the QoS mechanisms from the left onto their descriptions on the right
Answer:
Explanation:
Explanation
NEW QUESTION 71
Refer to the exhibit.
An engineer is installing a new pair of routers in a redundant configuration. Which protocol ensures that traffic is not disrupted in the event of a hardware failure?
- A. HSRPv1
- B. VRRP
- C. GLBP
- D. HSRPv2
Answer: A
Explanation:
Explanation
The virtual MAC address is 0000.0c07.acXX (XX is the hexadecimal group number) so it is using HSRPv1.
Note: HSRP Version 2 uses a new MAC address which ranges from 0000.0C9F.F000 to 0000.0C9F.FFFF.
NEW QUESTION 72
Refer to the exhibit.
The WLC administrator sees that the controller to which a roaming client associates has Mobility Role Anchor configured under Clients > Detail. Which type of roaming is supported?
- A. Intracontroller
- B. Layer 2 intercontroller
- C. Layer 3 intercontroller
- D. Indirect
Answer: C
Explanation:
If the clients roam between APs registered to different controllers and the client WLAN on the two controllers is on different subnet, then it is called inter-controller L3 roam.
In this situation as well controllers exchange mobility messages. Client database entry change is completely different that toL2 roam(instead of move, it will copy). In this situation the original controller marks the client entry as "Anchor" where as new controller marks the client entry as "Foreign". The two controllers now referred to as "Anchor controller" & "Foreign Controller" respectively. Client will keep the original IP address & that is the real advantage.
Note: Inter-Controller (normally layer 2) roaming occurs when a client roam between two APs registered to two different controllers, where each controller has an interface in the client subnet.
NEW QUESTION 73
In an SD-Access solution what is the role of a fabric edge node?
- A. to connect the fusion router to the SD-Access fabric
- B. to connect wired endpoint to the SD-Access fabric
- C. to connect external Layer 3- network to the SD-Access fabric
- D. to advertise fabric IP address space to external network
Answer: B
Explanation:
Explanation
+ Fabric edge node: This fabric device (for example, access or distribution layer device) connects wired endpoints to the SDA fabric.
NEW QUESTION 74
A network administrator is preparing a Python scrip to configure a Cisco IOS XE-based device on the network. The administrator is worried that colleagues will make changes to the device while the script is running. Which operation of he in client manager prevent colleague making changes to the device while the scrip is running?
- A. m.lock(config='running')
- B. m.freeze(config='running')
- C. m.freeze(target='running')
- D. m.lock(target='running')
Answer: D
Explanation:
Explanation
The example below shows the usage of lock command:
def demo(host, user, names):
With manager. Connect(host=host, port=22, username=user) as m:
With m.locked(target='running'):
for n in names:
m.edit_config (target='running', config=template % n)
The command "m.locked (target='running')" causes a lock to be acquired on the running datastore.
NEW QUESTION 75
A network engineer configures BGP between R1 and R2. Both routers use BGP peer group CORP and are set up to use MD5 authentication. This message is logged to the console of router R1:
Which two configuration allow peering session to from between R1 and R2? Choose two.) A)
B)
C)
D)
E)
- A. Option C
- B. Option B
- C. Option E
- D. Option A
- E. Option D
Answer: A,E
NEW QUESTION 76
What is used to validate the authenticity of the client and is sent in HTTP requests as a JSON object?
- A. TLS
- B. JVVT
- C. HTTPS
- D. SSH
Answer: C
Explanation:
Explanation
https://developer.atlassian.com/server/crowd/json-requests-and-responses/
NEW QUESTION 77
Refer to the exhibit.
Edge-01 is currently operational as the HSRP primary with priority 110. Which command on Edge-02 causes it to take over the forwarding role when Edge-01 is down?
- A. standby 10 timers
- B. standby 10 preempt
- C. standby 10 priority
- D. standby 10 track
Answer: B
Explanation:
The -preempt command enables the HSRP router with the highest priority to immediately become the active router.
NEW QUESTION 78
Refer to the exhibit.
Which configuration establishes EBGP neighborship between these two directly connected neighbors and exchanges the loopback network of the two routers through BGP?
A)
B)
C)
D)
- A. Option A
- B. Option B
- C. Option D
- D. Option C
Answer: A
Explanation:
Explanation
With BGP, we must advertise the correct network and subnet mask in the "network" command (in this case network 10.1.1.0/24 on R1 and network 10.2.2.0/24 on R2). BGP is very strict in the routing advertisements. In other words, BGP only advertises the network which exists exactly in the routing table. In this case, if you put the command "network x.x.0.0 mask 255.255.0.0" or
"network x.0.0.0 mask 255.0.0.0" or "network x.x.x.x mask 255.255.255.255" then BGP will not advertise anything.
It is easy to establish eBGP neighborship via the direct link. But let's see what are required when we want to establish eBGP neighborship via their loopback interfaces. We will need two commands:
+ the command "neighbor 10.1.1.1 ebgp-multihop 2" on R1 and "neighbor 10.2.2.2 ebgpmultihop
2" on R1. This command increases the TTL value to 2 so that BGP updates can reach the BGP neighbor which is two hops away.
+ Answer 'R1 (config) #router bgp 1
R1 (config-router) #neighbor 192.168.10.2 remote-as 2
R1 (config-router) #network 10.1.1.0 mask 255.255.255.0
R2 (config) #router bgp 2
R2 (config-router) #neighbor 192.168.10.1 remote-as 1
R2 (config-router) #network 10.2.2.0 mask 255.255.255.0
Quick Wireless Summary
Cisco Access Points (APs) can operate in one of two modes: autonomous or lightweight
+ Autonomous: self-sufficient and standalone. Used for small wireless networks.
+ Lightweight: A Cisco lightweight AP (LAP) has to join a Wireless LAN Controller (WLC) to function.
LAP and WLC communicate with each other via a logical pair of CAPWAP tunnels.
- Control and Provisioning for Wireless Access Point (CAPWAP) is an IETF standard for control messaging for setup, authentication and operations between APs and WLCs. CAPWAP is similar to LWAPP except the following differences:
+CAPWAP uses Datagram Transport Layer Security (DTLS) for authentication and encryption to protect traffic between APs and controllers. LWAPP uses AES.
+ CAPWAP has a dynamic maximum transmission unit (MTU) discovery mechanism.
+ CAPWAP runs on UDP ports 5246 (control messages) and 5247 (data messages) An LAP operates in one of six different modes:
+ Local mode (default mode): measures noise floor and interference, and scans for intrusion detection (IDS) events every 180 seconds on unused channels
+ FlexConnect, formerly known as Hybrid Remote Edge AP (H-REAP), mode: allows data traffic to be switched locally and not go back to the controller. The FlexConnect AP can perform standalone client authentication and switch VLAN traffic locally even when it's disconnected to the WLC (Local Switched). FlexConnect AP can also tunnel (via CAPWAP) both user wireless data and control traffic to a centralized WLC (Central Switched).
+ Monitor mode: does not handle data traffic between clients and the infrastructure. It acts like a sensor for location-based services (LBS), rogue AP detection, and IDS
+ Rogue detector mode: monitor for rogue APs. It does not handle data at all.
+ Sniffer mode: run as a sniffer and captures and forwards all the packets on a particular channel to a remote machine where you can use protocol analysis tool (Wireshark, Airopeek, etc) to review the packets and diagnose issues. Strictly used for troubleshooting purposes.
+ Bridge mode: bridge together the WLAN and the wired infrastructure together.
Mobility Express is the ability to use an access point (AP) as a controller instead of a real WLAN controller. But this solution is only suitable for small to midsize, or multi-site branch locations where you might not want to invest in a dedicated WLC. A Mobility Express WLC can support up to 100 Aps
NEW QUESTION 79
Drag and drop the characteristics from the left onto the infrastructure types on the right.
Answer:
Explanation:
Explanation
NEW QUESTION 80
Which cisco DNA center application is responsible for group-based access control permissions?
- A. Design
- B. Provision
- C. Assurance
- D. Policy
Answer: D
NEW QUESTION 81
Which DHCP option provides the CAPWAP APs with the address of the wireless controller(s)?
- A. 0
- B. 1
- C. 2
- D. 3
Answer: A
Explanation:
NEW QUESTION 82
Drag and drop the descriptions from the left onto the routing protocol they describe on the right.
Answer:
Explanation:
Explanation
NEW QUESTION 83
Refer to this output. What is the logging severity level?
R1#Feb 14 37:15:12:429: %LINEPROTO-5-UPDOWN: Line protocol on interface GigabitEthernet0/1, changed state to up
- A. Emergency
- B. Critical
- C. Alert
- D. Notification
Answer: D
NEW QUESTION 84
A customer has a pair of Cisco 5520 WLCs set up in an SSO cluster to manage all APs. Guest traffic is anchored to a Cisco 3504 WLC located in a DM2. Which action is needed to ensure that the EolP tunnel remains in an UP state in the event of failover on the SSO cluster?
- A. Configure back-to-back connectivity on the RP ports
- B. Use the same mobility domain on all WLCs
- C. Enable default gateway reachability check
- D. Use the mobility MAC when the mobility peer is configured
Answer: D
Explanation:
Explanation
In order to keep the mobility network stable without any manual intervention and in the event of failure or switchover, the back-and-forth concept of Mobility MAC has been introduced.
Reference:
https://www.cisco.com/c/en/us/td/docs/wireless/controller/technotes/7-5/High_Availability_DG.html
NEW QUESTION 85
Refer to the exhibit.
An engineer must deny Telnet traffic from the loopback interface of router R3 to the loopback interface of router R2 during the weekend hours. All other traffic between the loopback interfaces of routers R3 and R2 must be allowed at all times. Which command accomplish this task?
A)
B)
C)
D)
- A. Option C
- B. Option B
- C. Option D
- D. Option A
Answer: A
NEW QUESTION 86
......
Virtualization: This topic also measures one’s skills and knowledge as they relate to virtualization technologies. The covered areas include the following:
- Explain the concepts of network virtualization, including LISP and VXLAN.
- Configure and authenticate data paths virtualization technologies, such as IPsec tunneling, GRE, and VRF;
- Explain device virtualization technologies, including Hypervisor type one and two, virtual switching, and virtual machine;
Network Assurance: The areas of focus in this exam subject are as follows:
- Configuring and verifying Flexible NetFlow and NetFlow;
- Configuring and verifying device monitoring;
- Configuring and verifying RESTCONF and NETCONF;
- Diagnosing network problems with the use of SNMP, debugs, conditional debugs, trace route, Syslog, and ping tools;
Download Free Cisco 350-401 Real Exam Questions: https://www.pass4leader.com/Cisco/350-401-exam.html
Pass Your Exam With 100% Verified 350-401 Exam Questions: https://drive.google.com/open?id=1OP4I7lIz7YyEY7e-k_N9irG2xZo2uaeP