Cisco 350-401 today updated questions - Verified by Cisco Experts

Implementing Cisco Enterprise Network Core Technologies (350-401 ENCOR) Questions and Answers

Question 1

Drag and drop the characteristics from the left onto the orchestration tools that they describe on the right.

Options:

Question 2

Refer to the exhibit. An engineer must create a script that appends the output of the show process cpu sorted command to a file.

Options:

action 4.0 syslog command "show process cpu sorted | append flash:high-cpu-file"

action 4.0 cli command "show process cpu sorted | append flash:high-cpu-file"

action 4.0 ens-event "show process cpu sorted | append flash:high-cpu-file"

action 4.0 publish-event "show process cpu sorted | append flash:high-cpu-file"

Question 3

When a wireless client roams between two different wireless controllers, a network connectivity outage is experience for a period of time. Which configuration issue would cause this problem?

Options:

Not all of the controllers in the mobility group are using the same mobility group name.

All of the controllers within the mobility group are using the same virtual Interface IP address.

Not all of the controllers within the mobility group are using the same virtual interface IP address.

All of the controllers in the mobility group are using the same mobility group name

Question 4

Refer to the exhibit. What is achieved by this Python script?

Options:

It configures access list statements

It reads access list statements into a dictionary list

It displays access list statements on a terminal screen.

It converts access list statements to a human-readable format.

Question 5

Which device makes the decision for a wireless client to roam?

Options:

wireless client

Wireless LAN controller

access point

WCS location server

Question 6

Drag and drop the code snippets from the bottom onto the blanks in the Python script to convert a Python object into a JSON string. Not all options are used.

Options:

Question 7

Which component of the Cisco Cyber Threat Defense solution provides user and flow context analysis?

Options:

Cisco Firepower and FireSIGHT

Cisco Stealth watch system

Advanced Malware Protection

Cisco Web Security Appliance

Question 8

A client device roams between wireless LAN controllers that are mobility peers, Both controllers have dynamic interface on the same client VLAN which type of roam is described?

Options:

intra-VLAN

inter-controller

intra-controller

inter-subnet

Question 9

How does NETCONF YANG represent data structures?

Options:

as strict data structures defined by RFC 6020

in an XML tree format

In an HTML format

as modules within a tree

Question 10

What is a characteristic of the Cisco Catalyst Center (formerly DNA Center) Template Editor feature?

Options:

It facilitates software upgrades to network devices from a central point.

It facilitates a vulnerability assessment of the network devices.

It uses a predefined configuration through parameterized elements or variables.

It provides a high-level overview of the health of every network device.

Question 11

In a wireless network environment, which measurement compares the received signal to the background noise?

Options:

free space path loss

link power budget

fading

SNR

Question 12

Which protocol does Cisco Catalyst Center (formerly DNA Center) SDK use to discover the topology of non-Cisco devices in a network?

Options:

CDP

LLDP

Telnet

SSH

Question 13

Drag and drop the threat defense solutions from the left onto their descriptions on the right.

Options:

Question 14

At which plane does vBond operate in Cisco SD-WAN solutions?

Options:

control plane

data plane

orchestration plane

management plane

Question 15

Which measurement is used from a post wireless survey to depict the cell edge of the access points?

Options:

RSSI

SNR

Noise

CCI

Question 16

A customer requests a design that includes GLBP as the FHRP. The network architect discovers that the members of the GLBP group have different throughput capabilities. Which GLBP load balancing method supports this environment?

Options:

host dependent

weighted

least connection

round robin

Question 17

Refer to the exhibit.

What does the error message relay to the administrator who is trying to configure a Cisco IOS device?

Options:

A NETCONF request was made for a data model that does not exist.

The device received a valid NETCONF request and serviced it without error.

A NETCONF message with valid content based on the YANG data models was made, but the request failed.

The NETCONF running datastore is currently locked.

Question 18

Which antenna type should be used for a site-to-site wireless connection?

Options:

omnidirectional

patch

dipole

Yagi

Question 19

Which RF value represents the decline of the RF signal amplitude over a given distance"?

Options:

signal-to-noise ratio

received signal strength indicator

free space path loss

effective isotropic radiated power

Question 20

Which two sources cause interference for Wi-Fi networks? (Choose two.)

Options:

incandescent lights

DECT 6.0 cordless phone

mirrored wall

fish tank

900MHz baby monitor

Question 21

Which solution supports end-to-end line-rate encryption between two sites?

Options:

TrustSec

MACsec

IPsec

GRE

Question 22

Which two pieces of information are necessary to compute SNR? (Choose two.)

Options:

EIRP

noise floor

antenna gain

RSSI

transmit power

Question 23

Refer to the exhibit. The key value pairs must be extracted by iterating through a list of tuples. Which statement completes the snippet and prints each key value pair as a tuple?

Options:

for device, value In device_ip.items(): print(device)

for device in device_ip.items(): print(device)

for device in device_ip.values(): print(device)

for device in deviceip: print(device)

Question 24

A company recently decided to use RESTCONF instead of NETCONF. and many of their NETCONF scripts contain the operation (operation-create). Which RESTCONF operation must be used to replace these statements?

Options:

CREATE

POST

GET

PUT

Question 25

Drag and drop the automation characteristics from the left onto the appropriate tools on the right. Not all options are used.

Options:

Question 26

In a Cisco SD-WAN solution, which two functions are performed by OMP? (Choose two.)

Options:

advertisement of network prefixes and their attributes

configuration of control and data policies

gathering of underlay infrastructure data

delivery of crypto keys

segmentation and differentiation of traffic

Question 27

How can an engineer prevent basic replay attacks from people who try to brute force a system via REST API?

Options:

Add a timestamp to the request in the API header.

Use a password hash.

Add OAuth to the request in the API header.

Use HTTPS.

Question 28

To support new clients in the environment, an engineer must enable Fast Transition on the corporate WLAN. Which command must be applied on a Cisco Catalyst 9800 Series WLC?

Options:

security ft adaptive

security wpa akm dotlx

security wpa akm psk

security wpa akm ft psk

Question 29

In a campus network design, what are two benefits of using BFD for failure detection'? (Choose two.)

Options:

BFD speeds up routing convergence time

BFD provides path failure detection in less than a second

BFD provides fault tolerance by enabling multiple routers to appear as a single virtual router

BFD is an efficient way to reduce memory and CPU usage

BFD enables network peers to continue forwarding packets in the event of a restart

Question 30

Which LISP device is responsible for publishing EID-to-RLOC mappings for a site?

Options:

ETR

ITR

Question 31

Refer to the exhibit. An engineer must configure a Cisco WLC with WPA2 Enterprise mode and avoid global server lists. Which action is required?

Options:

Enable EAP parameters.

Apply CISCO ISE default settings.

Disable the RADIUS server accounting interim update.

Select a RADIUS authentication server.

Question 32

Which two functions is an edge node responsible for? (Choose two.)

Options:

provides multiple entry and exit points for fabric traffic

provides the default exit point for fabric traffic

provides the default entry point for fabric traffic

provides a host database that maps endpoint IDs to a current location

authenticates endpoints

Question 33

Which Cisco WLC feature allows a wireless device to perform a Layer 3 roam between two separate controllers without changing the client IP address?

Options:

mobile IP

mobility tunnel

LWAPP tunnel

GRE tunnel

Question 34

Reler to the exhibit. An engineer configuring WebAuth on a Cisco Catalyst 9000 Series WIC. The engineer has purchased a third-party certificate using the FQDN of the WLC as the CN and intends to use bit on the WebAuth splash page What must be configured so that the clients do not receive a certificate error?

Options:

Virtual IPv4 Address must be set to a routable address.

Virtual IPv4 Hostname must match the CN of the certificate.

Trustpoint must be set to the management certificate of the WLC.

Web Auth Intercept HTTPs must be enabled.

Question 35

Which feature works with SSO to continue forwarding packets after a route processor failure until the control plane recovers?

Options:

ECMP

HSRP

RSVP

NSF

Question 36

Which features does Cisco EDR use to provide threat detection and response protection?

Options:

containment, threat intelligence, and machine learning

firewalling and intrusion prevention

container-based agents

cloud analysts and endpoint firewall controls

Question 37

An engineer must configure a new 6 Ghz only SSID on a cisco catalyst 9800 series WLC, with these requirements:

Provide 802.11ax data rates for supported devices

All users authenticate using a certificate

Which wireless layer 2 security mode meets the requirements?

Options:

WPA2 Enterprise

WPA3 Personal

WPA2 Personal

WPA3 Enterprise

Question 38

A company hires a network architect to design a new OTT wireless solution within a Cisco SD-Access Fabric wired network. The architect wants to register access points to the WLC to centrally switch the traffic. Which AP mode must the design include?

Options:

Bridge

Fabric

FlexConnect

local

Question 39

Drag and drop the configuration management tools from the left onto the configuration styles they use on the right

Options:

Question 40

What is the primary responsibility of the vBond orchestrator?

Options:

to provide centralized management and provisioning of all elements into the network

to configure NAT communication on WAN Edge routers

to provide configuration synchronization of an WAN Edge devices

to facilitate start-up by performing authentication and authorization of all elements into the network

Question 41

What are two best practices when designing a campus Layer 3 infrastructure? (Choose two.)

Options:

Summarize routes from the aggregation layer toward the core layer.

Summarize from the access layer toward the aggregation layer.

Configure passive-interface on nontransit links.

Implement security features at the core.

Tune Cisco Express Forwarding load balancing hash for ECMP routing.

Question 42

Which devices does Cisco DNA Center configure when deploying an IP-based access control policy?

Options:

All devices integrating with ISE

selected individual devices

all devices in selected sites

all wired devices

Question 43

Refer to the exhibit. An engineer must adjust the configuration so that Router A becomes the active router. Which commands should be applied to router A? (Choose two)

Options:

vrrp 1 priority 90

vrrp 1 timers advertise 1

vrrp lip 10.1.0.11

ip address 10.1.0.11 255.0.0.0

vrrp 1 priority 120

Question 44

What is the purpose of data modeling languages?

Options:

to describe a data schema convertible into any data encoding format

to specify algorithms necessary to decode binary-encoded protocol data units

to translate encoded data for interoperability between different CPU architectures

to provide a framework to describe data flow patterns in networks

Question 45

Refer to the exhibit. What is output by this code?

Options:

012345

(0.5)

01234

Question 46

In a fabric-enabled wireless network, which device is responsible for maintaining the endpoint ID database?

Options:

fabric border node

fabric edge node

fabric wireless controller

control plane node

Question 47

Which method is used by an AP to join HA controllers and is configured in NVRAM?

Options:

Primary/Secondary- Tertiary/Backup

stored WLC information

DNS

IP Helper Addresses

Question 48

Drag and drop the characteristics from the left onto the orchestration tool classifications on the right.

Options:

Question 49

Which method requires a client to authenticate and has the capability to function without encryption?

Options:

open

WEP

WebAuth

PSK

Question 50

Which action reduces sticky clients in dense RF environments?

Options:

Decrease radio channel widths to 40 MHz.

Increase the mandatory minimum data rates.

Decrease the mandatory minimum data rates.

Increase radio channel widths to 160 MHz.

Question 51

Drag and drop the solutions that comprise Cisco Cyber Threat Defense from the left onto the objectives they accomplish on the right.

Options:

Question 52

Why does the vBond orchestrator have a public IP?

Options:

to enable vBond to learn the public IP of WAN Edge devices that are behind NAT gateways or in private address space

to facilitate downloading and distribution of operational and security patches

to allow for global reachability from all WAN Edges in the Cisco SD-WAN and to facilitate NAT traversal

to provide access to Cisco Smart Licensing servers for license enablement

Question 53

Which solution supports end to end line-rate encryption between two sites?

Options:

IPsec

TrustSec

MACSec

GRE

Question 54

An engineer must protect their company against ransom ware attacks. Which solution allows the engineer to block the execution stage and prevent file encryption?