Excelentes preguntas de examen 350-401 [actualizado 2022] para ser sus materiales para el examen Cisco Encor

Posted by: Martina Comments: 0 Post Date: junio 6, 2022

Martina2022-06-06T08:15:10+00:00

Su preparación para la implementación 350-401 de implementación y operación del examen Cisco Enterprise Network Core Technologies (ENCOR) depende de la fuente de preparación que utilice, así que haga su elección con cuidado. Puede obtener las excelentes preguntas de examen Cisco 350-401 para ser sus materiales para implementar y operar el examen de certificación Cisco Enterprise Network Core Technologies (ENCOR). Las preguntas del examen Cisco 350-401 actualizadas 2022 contienen preguntas reales y corrigen respuestas para el aprendizaje. Realex.es sabe lo que necesita para tomar el examen Cisco Encor 350-401, por lo que ha preparado las excelentes preguntas del examen 350-401 de acuerdo con el programa de estudios real con la ayuda de expertos. Para más información, las preguntas de examen gratuitas de Cisco 350-401 también están disponibles a continuación para leer en línea.

Page 1 of 7

1. A Cisco DNA Center REST API sends a PUT to the /dna/intent/api/v1/network-device endpoint A response code of 504 is received.

What does the code indicate?

The response timed out based on a configured interval

The user does not have authorization to access this endpoint.

The username and password are not correct

The web server is not available

2. DRAG DROP

Drag and drop the snippets onto the blanks within the code to construct a script that adds a prefix list to a route map and sets the local preference. Not all options are used

3. Refer to the exhibit .

What are two results of the NAT configuration? (Choose two.)

Packets with a destination of 200.1.1.1 are translated to 10.1.1.1 or .2. respectively.

A packet that is sent to 200.1.1.1 from 10.1.1.1 is translated to 209.165.201.1 on R1.

R1 looks at the destination IP address of packets entering S0/0 and destined for inside hosts.

R1 processes packets entering E0/0 and S0/0 by examining the source IP address.

R1 is performing NAT for inside addresses and outside address.

4. Refer to the exhibit.

An engineer must configure an ERSPAN session with the remote end of the session 10.10.0.1 .

Which commands must be added to complete the configuration?

A)

Option A

Option B

Option C

Option D

5. How do the RIB and the FIB differ?

FIB contains routes learned through a dynamic routing protocol, and the RIB contains routes that are static or directly connected.

RIB contains the interface for a destination, and the FIB contains the next hop information.

FIB is derived from the control plane, and the RIB is derived from the data plane.

RIB is derived from the control plane, and the FIB is derived from the RI

6. Why would a log file contain a * next to the date?

The network device was receiving NTP time when the log messages were recorded.

The network device was unable to reach The NTP server when the log messages were recorded

The network device is not configured to use NT

The network device is nor configured to use NTP time stamps for logging

7. Refer to the exhibit.

After configuring the BGP network, an engineer verifies that the path between Servers and Server2 Is functional .

Why did RouterSF choose the route from RouterDAL instead of the route from RouterCHI?

The Router-ID Tor Router DAL is lower than the Roter-ID for RouterCH

The route from RouterOAL has a lower ME

BGP is not running on RouterCH

There is a static route in RouterSF for 10.0.0.0/24.

8. Which option works with a DHCP server to return at least one WLAN management interface IP address during the discovery phase and is dependent upon the VCI of the AP?

Option 42

Option 15

Option 125

Option 43

9. DRAG DROP

Drag and drop the characteristics from the left onto the deployment models on the right.

10. Refer to the exhibit.

Which configuration establishes EBGP neighborship between these two directly connected neighbors and exchanges the loopback network of the two routers through BGP?

R1(config)#router bgp 1 R1(config-router)#neighbor 192.168.10.2 remote-as 2 R1(config-router)#network 10.1.1.0 mask 255.255.255.0 R2(config)#router bgp 2 R2(config-router)#neighbor 192.168.10.1 remote-as 1 R2(config-router)#network 10.2.2.0 mask 255.255.255.0

R1(config)#router bgp 1 R1(config-router)#neighbor 10.2.2.2 remote-as 2 R1(config-router)#network 10.1.1.0 mask 255.255.255.0 R2(config)#router bgp 2 R2(config-router)#neighbor 10.1.1.1 remote-as 1 R2(config-router)#network 10.2.2.0 mask 255.255.255.0

R1(config)#router bgp 1 R1(config-router)#neighbor 192.168.10.2 remote-as 2 R1(config-router)#network 10.0.0.0 mask 255.0.0.0 R2(config)#router bgp 2 R2(config-router)#neighbor 192.168.10.1 remote-as 1 R2(config-router)#network 10.0.0.0 mask 255.0.0.0

R1(config)#router bgp 1 R1(config-router)#neighbor 10.2.2.2 remote-as 2 R1(config-router)#neighbor 10.2.2.2 update-source |o0 R1(config-router)#network 10.1.1.0 mask 255.255.255.0 R2(config)#router bgp 2 R2(config-router)#neighbor 10.1.1.1 remote-as 1 R2(config-router)#neighbor 10.1.1.1 update-source |o0 R2(config-router)#network 10.2.2.0 mask 255.255.255.0

Page 2 of 7

11. Refer to the exhibit.

Traffic is not passing between SW1 and SW2 .

Which action fixes the issue?

Configure LACP mode on S1 to passive.

Configure switch port mode to ISL on S2.

Configure PAgP mode on S1 to desirable.

Configure LACP mode on S1 to active.

12. What is the difference between CEF and process switching?

CEF processes packets that are too complex for process switching to manage.

CEF is more CPU-intensive than process switching.

CEF uses the FIB and the adjacency table to make forwarding decisions, whereas process switching punts each packet.

Process switching is faster than CE

13. What is the calculation that is used to measure the radiated power of a signal after it has gone through the radio, antenna cable, and antenna?

EIRP

dBm

dBi

14. A network engineer configures a new GRE tunnel and enters the show run command .

What does the output verify?

The tunnel will be established and work as expected

The tunnel destination will be known via the tunnel interface

The tunnel keepalive is configured incorrectly because they must match on both sites

The default MTU of the tunnel interface is 1500 byte.

15. Refer to the exhibit.

Based on the configuration in this WLAN security setting,

Which method can a client use to authenticate to the network?

text string

username and password

certificate

RADIUS token

16. Why is an AP joining a different WLC than the one specified through option 43?

The WLC is running a different software version.

The API is joining a primed WLC

The AP multicast traffic unable to reach the WLC through Layer 3.

The APs broadcast traffic is unable to reach the WLC through Layer 2.

17. Refer to the Exhibit.

An engineer is installing a new pair of routers in a redundant configuration. When checking on the standby status of each router the engineer notices that the routers are not functioning as expected .

Which action will resolve the configuration error?

configure matching hold and delay timers

configure matching key-strings

configure matching priority values

configure unique virtual IP addresses

18. An engineer is configuring a GRE tunnel interface in the default mode. The engineer has assigned an IPv4 address on the tunnel and sourced the tunnel from an Ethernet interface .

Which option also is required on the tunnel interface before it is operational?

(config-if)#tunnel destination <ip address>

(config-if)#keepalive <seconds retries>

(config-if)#ip mtu <value>

(config-if)#ip tcp adjust-mss <value>

19. Refer to the exhibit.

All switches are configured with the default port priority value .

Which two commands ensure that traffic from PC1 is forwarded over Gi1/3 trunk port between DWS1 and DSW2? (Choose two)

DSW2(config-if)#spanning-tree port-priority 16

DSW2(config)#interface gi1/3

DSW1(config-if)#spanning-tree port-priority 0

DSW1(config) #interface gi1/3

DSW2(config-if)#spanning-tree port-priority 128

20. DRAG DROP

Drag and drop the descriptions from the left onto the QoS components on the right.

Page 3 of 7

21. DRAG DROP

Drag and drop the characteristics from the left onto the deployment types on the right.

22. Refer to the exhibit.

PC-1 must access the web server on port 8080.

To allow this traffic, which statement must be added to an access control list that is applied on SW2 port G0/0 in the inbound direction?

permit host 172.16.0.2 host 192.168.0.5 eq 8080

permit host 192.168.0.5 host 172.16.0.2 eq 8080

permit host 192.168.0.5 eq 8080 host 172.16.0.2

permit host 192.168.0.5 it 8080 host 172.16.0.2

23. DRAG DROP

Refer to the exhibit.

Drag and drop the snippets into the RESTCONF request to form the request that returns this response Not all options are used

24. Refer to the exhibit.

What is the result when a switch that is running PVST+ is added to this network?

DSW2 operates in Rapid PVST+ and the new switch operates in PVST+

Both switches operate in the PVST+ mode

Spanning tree is disabled automatically on the network

Both switches operate in the Rapid PVST+ mode.

25. By default, which virtual MAC address does HSRP group 32 use?

00:5e:0c:07:ac:20

04:18:20:83:2e:32

05:5e:5c:ac:0c:32

00:00:0c:07:ac:20

26. Refer to the exhibit.

An engineer troubleshoots connectivity issues with an application. Testing is performed from the server gateway, and traffic with the DF bit set is dropped along the path after increasing packet size. Removing the DF bit setting at the gateway prevents the packets from being dropped .

What is the cause of this issue?

PMTUD does not work due to ICMP Packet Too Big messages being dropped by an ACL

The remote router drops the traffic due to high CPU load

The server should not set the DF bit in any type of traffic that is sent toward the network

There is a CoPP policy in place protecting the WAN router CPU from this type of traffic

27. What occurs when a high bandwidth multicast stream is sent over an MVPN using Cisco hardware?

The traffic uses the default MDT to transmit the data only if it isa (S, G) multicast route entry

A data MDT is created to if it is a (*, G) multicast route entries

A data and default MDT are created to flood the multicast stream out of all PIM-SM neighbors.

A data MDT is created to allow for the best transmission through the core for (S, G) multicast route entries.

28. Refer to the exhibit.

An attacker can advertise OSPF fake routes from 172.16.20.0 network to the OSPF domain and black hole traffic .

Which action must be taken to avoid this attack and still be able to advertise this subnet into OSPF?

Configure 172.16.20.0 as a stub network.

Apply a policy to filter OSPF packets on R2.

Configure a passive Interface on R2 toward 172.16.20.0.

Configure graceful restart on the 172.16.20.0 interface.

29. What is the function of a VTEP in VXLAN?

provide the routing underlay and overlay for VXLAN headers

dynamically discover the location of end hosts in a VXLAN fabric

encapsulate and de-encapsulate traffic into and out of the VXLAN fabric

statically point to end host locations of the VXLAN fabric

30. Which DHCP option helps lightweight APs find the IP address of a wireless LAN controller?

Option 43

Option 60

Option 67

Option 150

Page 4 of 7

31. Which DHCP option provides the CAPWAP APs with the address of the wireless controller(s)?

150

32. Which element enables communication between guest VMs within a virtualized environment?

hypervisor

vSwitch

virtual router

pNIC

33. A network is being migrated from IPV4 to IPV6 using a dual-stack approach. Network management is already 100% IPV6 enabled.

In a dual-stack network with two dual-stack NetFlow collections, how many flow exporters are needed per network device in the flexible NetFlow configuration?

34. What is the function of vBond in a Cisco SD-WAN deployment?

initiating connections with SD-WAN routers automatically

pushing of configuration toward SD-WAN routers

onboarding of SD-WAN routers into the SD-WAN overlay

gathering telemetry data from SD-WAN routers

35. Refer to the exhibit .

What is achieved by this code?

It unshuts the loopback interface

It renames the loopback interface

It deletes the loopback interface

It displays the loopback interface

36. Which LISP infrastructure device provides connectivity between non-sites and LISP sites by receiving non-LISP traffic with a LISP site destination?

PETR

PITR

map resolver

map server

37. An engineer configures GigabitEthernet 0/1 for VRRP group 115. The router must assume the primary role when it has the highest priority in the group .

Which command set is required to complete this task?

Option A

Option B

Option C

Option D

38. A client device roams between wireless LAN controllers that are mobility peers, Both controllers have dynamic interface on the same client VLAN which type of roam is described?

intra-VLAN

inter-controller

intra-controller

inter-subnet

39. How does SSO work with HSRP to minimize network disruptions?

It enables HSRP to elect another switch in the group as the active HSRP switch.

It ensures fast failover in the case of link failure.

It enables data forwarding along known routes following a switchover, white the routing protocol recon verges.

It enables HSRP to failover to the standby RP on the same device.

40. A customer requests a network design that supports these requirements:

- FHRP redundancy

- multivendor router environment

- IPv4 and IPv6 hosts

Which protocol does the design include?

HSRP version 2

VRRP version 2

GLBP

VRRP version 3

Page 5 of 7

41. Refer to the exhibit .

What is the effect of this configuration?

When users attempt to connect to vty lines 0 through 4, the device will authenticate them against TACACS+ if local authentication fails

The device will authenticate all users connecting to vty lines 0 through 4 against TACACS+

The device will allow users at 192.168.0.202 to connect to vty lines 0 through 4 using the password ciscotestkey

The device will allow only users at 192.166.0.202 to connect to vty lines 0 through 4

42. Refer to the exhibit .

Which command set must be added to permit and log all traffic that comes from 172.20.10.1 in interface GigabitEthernet0/1 without impacting the functionality of the access list?

Option A

Option B

Option C

Option D

43. Which data is properly formatted with JSON?

A)

Option A

Option B

Option C

Option D

44. A network engineer must configure a router to send logging messages to a syslog server based on these requirements:

✑ uses syslog IP address: 10.10.10.1

✑ uses a reliable protocol

✑ must not use any well-known TCP/UDP ports

Which configuration must be used?

logging host 10.10.10.1 transport tcp port 1024

logging origin-id 10.10.10.1

logging host 10.10.10.1 transport udp port 1023

logging host 10.10.10.1 transport udp port 1024

45. DRAG DROP

Drag and drop the DHCP messages that are exchanged between a client and an AP into the order they are exchanged on the right.

46. Which HTTP code must be returned to prevent the script form exiting?

200

201

300

301

47. When is an external antenna used inside a building?

only when using Mobility Express

when it provides the required coverage

only when using 2 4 GHz

only when using 5 GHz

48. Based on the router's API output in JSON format below, which Python code will display the value of the "hostname" key?

Option

49. An engineer must provide wireless converge in a square office. The engineer has only one AP and believes that it should be placed it in the middle of the room .

Which antenna type should the engineer use?

directional

polarized

Yagi

omnidirectional

50. A customer transitions a wired environment to a Cisco SD-Access solution. The customer does not want to integrate the wireless network with the fabric .

Which wireless deployment approach enables the two systems to coexist and meets the customer requirement?

Deploy the APs in autonomous mode

Deploy the wireless network over the top of the fabric

Deploy a separate network for the wireless environment

Implement a Cisco DNA Center to manage the two networks

Page 6 of 7

51. Refer to the exhibit.

An engineer tries to log in to router R1 .

Which configuration enables a successful login?

R1#username admin privilege 15 aaa authorization exec default local netconf-yang

R1# username admin privilege 15 aaa authorization exec default local

R1# aaa new-model aaa authorization exec default local enable aaa admin privilege 15

R1#netconf-yang username admin privilege 15 secret cisco123 aaa new-model aaa authorization exec default local

52. In a Cisco SD-WAN solution, which two functions are performed by OMP? (Choose two.)

advertisement of network prefixes and their attributes

configuration of control and data policies

gathering of underlay infrastructure data

delivery of crypto keys

segmentation and differentiation of traffic

53. DRAG DROP

Drag and drop the characteristics from the left onto the orchestration tools they describe on the right.

54. Which technology uses network traffic telemetry, contextual information, and file reputation to provide insight into cyber threats?

threat defense

security services

security intelligence

segmentation

55. Which command set configures RSPAN to capture outgoing traffic from VLAN 3 on interface GigabitEthernet 0/3 while ignoring other VLAN traffic on the same interface?

monitor session 2 source interface gigabitethernet0/3 tx monitor session 2 filter vlan3

monitor session 2 source interface gigabitethernet0/3 rx monitor session 2 filter vlan3

monitor session 2 source interface gigabitethernet0/3 tx monitor session 2 filter vlan 1 - 2, 4 C4094

monitor session 2 source interface gigabitethernet0/3 rx: monitor session 2 filter vlan 1 - 2, 4 C4094

56. Which cisco DNA center application is responsible for group-based accesss control permissions?

Design

Provision

Assurance

Policy

57. Wireless users report frequent disconnections from the wireless network. While troubleshooting a network engineer finds that after the user a disconnect, the connection re-establishes automatically without any input required. The engineer also notices these message logs.

Which action reduces the user impact?

increase the AP heartbeat timeout

increase BandSelect

enable coverage hole detection

increase the dynamic channel assignment interval

58. Which feature does Cisco TrustSec use to provide scalable, secure communication throughout a network?

security group tag ACL assigned to each port on a switch

security group tag number assigned to each port on a network

security group tag number assigned to each user on a switch

security group tag ACL assigned to each router on a network

59. Refer to the exhibit.

After configurating an IPsec VPN, an engineer enters the show command to verify the ISAKMP SA status .

What does the status show?

ISAKMP SA is authenticated and can be used for Quick Mode.

Peers have exchanged keys, but ISAKMP SA remains unauthenticated.

VPN peers agreed on parameters for the ISAKMP SA

ISAKMP SA has been created, but it has not continued to form.

60. DRAG DROP

Drag and drop the characteristics from the left onto the switching mechanisms they describe on the right.

Page 7 of 7

61. A customer wants to provide wireless access to contractors using a guest portal on Cisco ISE. The portal Is also used by employees A solution is implemented, but contractors receive a certificate error when they attempt to access the portal Employees can access the portal without any errors .

Which change must be implemented to allow the contractors and employees to access the portal?

Install a trusted third-party certificate on the Cisco IS

Install an Internal CA signed certificate on the contractor devices

Install an internal CA signed certificate on the Cisco ISE

install a trusted third-party certificate on the contractor devices.

62. DRAG DROP

Drag and drop the LIPS components on the left to the correct description on the right.

63. What is the data policy in a Cisco SD-WAN deployment?

list of ordered statements that define node configurations and authentication used within the SD-WAN overlay

Set of statements that defines how data is forwarded based on IP packet information and specific VPNs

detailed database mapping several kinds of addresses with their corresponding location

group of services tested to guarantee devices and links liveliness within the SD-WAN overlay

64. What is one primary REST security design principle?

fail-safe defaults

password hash

adding a timestamp in requests

OAuth

65. 1.Refer to the exhibit.

What does the output confirm about the switch's spanning tree configuration?

The spanning-tree mode stp ieee command was entered on this switch

The spanning-tree operation mode for this switch is IEE

The spanning-tree operation mode for this switch is PVST+.

The spanning-tree operation mode for this switch is PVST

66. Refer to the exhibit.

After the code is run on a Cisco IOS-XE router, the response code is 204 .

What is the result of the script?

The configuration fails because another interface is already configured with IP address 10.10.10.1/24.

The configuration fails because interface GigabitEthernet2 is missing on the target device.

The configuration is successfully sent to the device in cleartext.

Interface GigabitEthernet2 is configured with IP address 10.10.10.1/24

67. How does NETCONF YANG represent data structures?

as strict data structures denned by RFC 6020

in an XML tree format

in an HTML format

as modules within a tree

68. Which access point mode allows a supported AP to function like a WLAN client would, associating and identifying client connectivity issues?

client mode

SE-connect mode

sensor mode

sniffer mode

69. Which method of account authentication does OAuth 2.0 within REST APIs?

username/role combination

access tokens

cookie authentication

basic signature workflow

70. Refer to the exhibit.

What is the effect of introducing the sampler feature into the Flexible NetFlow configuration on the router?

NetFlow updates to the collector are sent 50% less frequently.

Every second IPv4 packet is forwarded to the collector for inspection.

CPU and memory utilization are reduced when compared with what is required for full NetFlow.

The resolution of sampling data increases, but it requires more performance from the router.

Excelentes preguntas de examen 350-401 [actualizado 2022] para ser sus materiales para el examen Cisco Encor

Author

Deja una respuesta Cancelar la respuesta