Pass Your 350-401 Dumps as PDF Updated on 2022 With 305 Questions
Cisco 350-401 Real Exam Questions and Answers FREE
How to schedule Implementing Cisco Enterprise Network Core Technologies (350-401 ENCOR)
- Select Proctored Exams and enter the exam number 350-401
- Follow the prompts to register
- Log into your account at Pearson VUE
Understanding functional and technical aspects of Implementing Cisco Enterprise Network Core Technologies (350-401 ENCOR) Automation
The following will be discussed in CISCO 350-401 dumps pdf:
- Threat defense
- Endpoint security
- WebAuth
- Configure and verify infrastructure security features
- Describe the concepts, purpose, and features of multicast protocols, including Internet Group Management Protocol (IGMP) v2/v3, Protocol-Independent Multicast (PIM) dense mode/sparse mode, and rendezvous points
- Describe APIs in Cisco DNA Center and vManage
- Describe REST API security
- Authentication and authorization using AAA
- CoPP
- Describe the concepts and features of Quality of Service (QoS), and describe the need within the enterprise network
- Describe network programmability protocols such as Network Configuration Protocol (NETCONF) and RESTCONF
- Explain basic Python components and conditionals with script writing and analysis
- Network access control with 802.1X, MAB, and WebAuth
- Configure and verify device access control
- Next-generation firewall
- Describe the components and features of the Cisco SD-Access solution, including the nodes, fabric control plane, and data plane, while illustrating the purpose and function of the Virtual Extensible LAN (VXLAN) gateways
- Lines and password protection
- Define the components and features of Cisco SD-WAN solutions, including the orchestration plane, management plane, control plane, and data plane
- EAP
- TrustSec, MACsec
- Describe the components of network security design
- Configure and verify wireless security features
- ACLs
- PSK
NEW QUESTION 56
Refer to the exhibit.
Which privilege level is assigned to VTY users?
- A. 0
- B. 1
- C. 2
- D. 3
Answer: B
NEW QUESTION 57
Which method displays text directly into the active console with a synchronous EEM applet policy?
- A. event manager applet boom
event syslog pattern 'UP'
action 1.0 gets 'logging directly to console' - B. event manager applet boom
event syslog pattern 'UP'
action 1.0 string 'logging directly to console' - C. event manager applet boom
event syslog pattern 'UP'
action 1.0 puts 'logging directly to console' - D. event manager applet boom
event syslog pattern 'UP'
action 1.0 syslog priority direct msg 'log directly to console'
Answer: D
Explanation:
Explanation
To enable the action of printing data directly to the local tty when an Embedded Event Manager (EEM) applet is triggered, use the action puts command in applet configuration mode.
The following example shows how to print data directly to the local tty:
The action puts command applies to synchronous events. The output of this command for a synchronous applet is directly displayed to the tty, bypassing the syslog.
NEW QUESTION 58
Refer to the exhibit.
The traceroute fails from R1 to R3. What is the cause of the failure?
- A. Redistribution of connected routes into OSPF is not configured.
- B. An ACL applied Inbound on loopback0 of R2 Is dropping the traffic.
- C. The loopback on R3 Is in a shutdown stale.
- D. An ACL applied Inbound on fa0/1 of R3 is dropping the traffic.
Answer: D
Explanation:
Reference:
We see in the traceroute result the packet could reach 10.99.69.5 (on R2) but it could not go any further so we can deduce an ACL on R3 was blocking it.
Note: Record option displays the address(es) of the hops (up to nine) the packet goes through.
NEW QUESTION 59
Refer to the exhibit.
What does the snippet of code achieve?
- A. It creates a temporary connection to a Cisco Nexus device and retrieves a token to be used for API calls.
- B. It opens an ncclient connection to a Cisco Nexus device and maintains it for the duration of the context.
- C. It creates an SSH connection using the SSH key that is stored, and the password is ignored.
- D. It opens a tunnel and encapsulates the login information, if the host key is correct.
Answer: B
Explanation:
Explanation
ncclient is a Python library that facilitates client-side scripting and application development around the NETCONF protocol.
The above Python snippet uses the ncclient to connect and establish a NETCONF session to a Nexus device (which is also a NETCONF server).
NEW QUESTION 60
AN engineer is implementing a route map to support redistribution within BGP. The route map must configured to permit all unmatched routes. Which action must the engineer perform to complete this task?
- A. Include at least one explicit deny statement
- B. Remove the implicit deny entry
- C. Include a permit statement as the last entry
- D. Include a permit statement as the first entry
Answer: C
NEW QUESTION 61
What does the Cisco DMA REST response Indicate?
- A. Cisco DNA Center has the Incorrect credentials for RouterASR-1
- B. Cisco DONA Center has the incorrect credentials for cat3000-1
- C. Cisco DNA Center Is unable to communicate with cat9000-1
- D. Cisco DNA Center has the incorrect credentials for cat3850-1
Answer: B
NEW QUESTION 62
Refer to the exhibit.
An engineer must modify the access control list EGRESS to allow all IP traffic from subnet 10.1.10.0/24 to
10.1.2.0/24. The access control list is applied in the outbound direction on router interface GigabitEthemet 0/1.
Which configuration commands can the engineer use to allow this traffic without disrupting existing traffic flows?
A)
B)
C)
D)
- A. Option B
- B. Option A
- C. Option C
- D. Option D
Answer: A
NEW QUESTION 63
Drag and drop the characteristics from the left onto the correct routing protocol types on the right.
Answer:
Explanation:
Explanation
OSPF: SEGMENT, LINK STATE, TABLES
EIGRP: UNEQUAL PATH, DISTANCE VECTOR, METRIC
NEW QUESTION 64
How do agent-based versus agentless configuration management tools compare?
- A. Agentless tools use proxy nodes to interface with slave nodes.
- B. Agent-based tools do not require installation of additional software packages on the slave nodes.
- C. Agent-based tools do not require a high-level language interpreter such as Python or Ruby on slave nodes.
- D. Agentless tools require no messaging systems between master and slaves.
Answer: D
NEW QUESTION 65
Which tool is used in Cisco DNA Center to build generic configurations that are able to be applied on device with similar network settings?
- A. Command Runner
- B. Authentication Template
- C. Application Policies
- D. Template Editor
Answer: D
Explanation:
Explanation
Cisco DNA Center provides an interactive editor called Template Editor to author CLI templates. Template Editor is a centralized CLI management tool to help design a set of device configurations that you need to build devices in a branch. When you have a site, office, or branch that uses a similar set of devices and configurations, you can use Template Editor to build generic configurations and apply the configurations to one or more devices in the branch.
Reference: https://www.cisco.com/c/en/us/td/docs/cloud-systemsmanagement/network-automation-and-management/dna-center/1-3/user_guide/b_cisco_dna_center_ug_1_3/b_cisco_dna_center_ug_1_3_chapter_0111.html
NEW QUESTION 66
Refer to the exhibit.
An engineer reconfigures the pot-channel between SW1 and SW2 from an access port to a trunk and immediately notices this error in SW1's log.
Which command set resolves this error?
A)
B)
C)
D)
- A. Option B
- B. Option A
- C. Option C
- D. Option D
Answer: A
NEW QUESTION 67
Which configuration restricts the amount of SSH that a router accepts 100 kbps?
A)
B)
C)
D)
- A. Option A
- B. Option B
- C. Option C
- D. Option D
Answer: C
Explanation:
CoPP protects the route processor on network devices by treating route processor resources as a separate entity with its own ingress interface (and in some implementations, egress also). CoPP is used to police traffic that is destined to the route processor of the router such as:
+ routing protocols like OSPF, EIGRP, or BGP.
+ Gateway redundancy protocols like HSRP, VRRP, or GLBP.
+ Network management protocols like telnet, SSH, SNMP, or RADIUS.
Therefore we must apply the CoPP to deal with SSH because it is in the
management plane. CoPP must be put under "control-plane" command.
NEW QUESTION 68
Refer to the exhibit.
All switches are configured with the default port priority value. Which two commands ensure that traffic from PC1 is forwarded over Gi1/3 trunk port between DWS1 and DSW2? (Choose two)
- A. DSW2(config)#interface gi1/3
- B. DSW1(config-if)#spanning-tree port-priority 0
- C. DSW1(config)#interface gi1/3
- D. DSW2(config-if)#spanning-tree port-priority 128
- E. DSW2(config-if)#spanning-tree port-priority 16
Answer: A,E
NEW QUESTION 69
Drag and drop the LISP components on the left to the correct description on the right
Answer:
Explanation:
Explanation
https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/iproute_lisp/configuration/xe-3s/irl-xe-3s-book/irloverview.h
NEW QUESTION 70
Which statement about an RSPAN session configuration is true?
- A. Only incoming traffic can be monitored
- B. A fitter mutt be configured for RSPAN Regions
- C. A special VLAN type must be used as the RSPAN destination.
- D. Only one session can be configured at a time
Answer: C
Explanation:
The traffic for each RSPAN session is carried over a user-specified RSPAN VLAN that is dedicated for that RSPAN session in all participating switches -> This VLAN can be considered a special VLAN type -> Answer C is correct.
Reference:
https://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst3750x_3560x/software/release/12-
2_55_se/configuration/guide/3750xscg/swspan.html
We can configure multiple RSPAN sessions on a switch at a time, then continue configuring multiple RSPAN sessions on the other switch without any problem -> Answer B is not correct.
This is how to configure Remote SPAN (RSPAN) feature on two switches. Traffic on FastEthernet0/1 of Switch 1 will be sent to Fa0/10 of Switch2 via VLAN 40.
+ Configure on both switches
Switch1,2(config)#vlan 40
Switch1,2(config-vlan)#remote-span
+ Configure on Switch1
Switch1(config)# monitor session 1 source interface FastEthernet 0/1
Switch1(config)# monitor session 1 destination remote vlan 40
+ Configure on Switch2
Switch2(config)#monitor session 5 source remote vlan 40
Switch2(config)# monitor session 5 destination interface FastEthernet 0/10
NEW QUESTION 71
What are two device roles in Cisco SD-Access fabric? (Choose two.)
- A. core switch
- B. edge node
- C. border node
- D. access switch
- E. vBond controller
Answer: B,C
Explanation:
Explanation
There are five basic device roles in the fabric overlay:
+ Control plane node: This node contains the settings, protocols, and mapping tables to provide the endpoint-to-location (EID-to-RLOC) mapping system for the fabric overlay.
+ Fabric border node: This fabric device (for example, core layer device) connects external Layer 3 networks to the SDA fabric.
+ Fabric edge node: This fabric device (for example, access or distribution layer device) connects wired endpoints to the SDA fabric.
+ Fabric WLAN controller (WLC): This fabric device connects APs and wireless endpoints to the SDA fabric.
+ Intermediate nodes: These are intermediate routers or extended switches that do not provide any sort of SD-Access fabric role other than underlay services.
NEW QUESTION 72
A local router shows an EBGP neighbor in the Active state. Which statement is true about the local router?
- A. The local router has active prefix in the forwarding table from the neighboring router
- B. The local router has BGP passive mode configured for the neighboring router
- C. The local router is attempting to open a TCP session with the neighboring router.
- D. The local router is receiving prefixes from the neighboring router and adding them in RIB-IN
Answer: C
Explanation:
Explanation
The BGP session may report in the following states
1 - Idle: the initial state of a BGP connection. In this state, the BGP speaker is waiting for a BGP start event, generally either the establishment of a TCP connection or the re-establishment of a previous connection. Once the connection is established, BGP moves to the next state.
2 - Connect: In this state, BGP is waiting for the TCP connection to be formed. If the TCP connection completes, BGP will move to the Open Sent stage; if the connection cannot complete, BGP goes to Active
3 - Active: In the Active state, the BGP speaker is attempting to initiate a TCP session with the BGP speaker it wants to peer with. If this can be done, the BGP state goes to Open Sent state.
4 - Open Sent: the BGP speaker is waiting to receive an OPEN message from the remote BGP speaker
5 - Open Confirm: Once the BGP speaker receives the OPEN message and no error is detected, the BGP speaker sends a KEEPALIVE message to the remote BGP speaker
6 - Established: All of the neighbor negotiations are complete. You will see a number, which tells us the number of prefixes the router has received from a neighbor or peer group.
NEW QUESTION 73
Drag and drop the characteristics from the left onto the protocols they apply to on the right?
Answer:
Explanation:
Explanation
Diagram Description automatically generated
NEW QUESTION 74
Drag and drop the threat defense solutions from the left onto their descriptions on the right.
Answer:
Explanation:
Explanation
NEW QUESTION 75
Refer to the exhibit.
Which command set must be added to the configuration to analyze 50 packets out of every 100?
- A. Option A
- B. Option B
- C. Option C
- D. Option D
Answer: C
NEW QUESTION 76
Which two actions, when applied in the LAN network segment, will facilitate Layer 3 CAPWAP discovery for lightweight AP? (Choose two.)
- A. Configure WLC IP address on LAN switch.
- B. Utilize DHCP option 43.
- C. Configure an ip helper-address on the router interface
- D. Enable port security on the switch port
- E. Utilize DHCP option 17.
Answer: B,C
NEW QUESTION 77
What is a characteristic of a next-generation firewall?
- A. provides intrusion prevention
- B. required in each layer of the network
- C. only required at the network perimeter
- D. filters traffic using Layer 3 and Layer 4 information only
Answer: C
NEW QUESTION 78
......
Pass Cisco 350-401 Exam Info and Free Practice Test: https://www.free4torrent.com/350-401-braindumps-torrent.html
New 2022 Latest Questions 350-401 Dumps - Use Updated Cisco Exam: https://drive.google.com/open?id=1RSkW2ry6zPG6W0Zd1ts_29tGHq1DMQss