Unlock your Full 350-401 Cisco Stable Exam

Implementing Cisco Enterprise Network Core Technologies (350-401 ENCOR) Questions and Answers

Question 1

What is an advantage of utilizing data models in a multivendor environment?

Options:

facilitating a unified approach to configuration and management

improving communication security with binary-encoded protocols

lowering CPU load incurred to managed devices

removing the distinction between configuration and runtime state data

Question 2

Which lag/profile on a Cisco Catalyst 9800 Series WLC must be modified to allow Cisco ISE to dynamically assign VLANs to users on an 802.1X-based SSID?

Options:

interface lag

site tag

WLAN profile

policy profile

Question 3

In Cisco Catalyst Center (formerly DNA Center) Inventory, the Software Version of a network device displays a status of OUTDATED. What does It me?

Options:

There is a later software version available on Cisco Catalyst Center (formerly DNA Center).

The current software image does not match the selected Golden image for this type of network device.

The current type of software image does not match the type of the network device.

There is a later software version available at www.cisco.com website.

Question 4

To support new clients in the environment, an engineer must enable Fast Transition on the corporate WLAN. Which command must be applied on a Cisco Catalyst 9800 Series WLC?

Options:

security ft adaptive

security wpa akm dotlx

security wpa akm psk

security wpa akm ft psk

Question 5

A response code of 404 is received while using the REST API on Cisco UNA Center to POST to this URI.

/dna/intent/api/v1 /template-programmer/project

What does the code mean?

Options:

The client made a request a resource that does not exist.

The server has not implemented the functionality that is needed to fulfill the request.

The request accepted for processing, but the processing was not completed.

The POST/PUT request was fulfilled and a new resource was created, Information about the resource is in the response body.

Question 6

Drag and drop the code snippets from the bottom onto the blanks in the code to construct a request that configures a deny rule on an access list?

Question # 6

Options:

Question 7

Question # 7

Refer to the exhibit Which command set is required on router R1 to allow the network administrator to authenticate via RADIUS'?

Question # 7

Options:

Option A

Option B

Option C

Option D

Question 8

What is a characteristic of VRRP?

Options:

It inherently balances load amongst the available gateways.

It ensures symmetric traffic flow upstream and downstream.

It Is a Cisco proprietary protocol.

It uses a virtual IP address and a virtual MAC address to achieve redundancy

Question 9

An engineer must configure a new 6 Ghz only SSID on a cisco catalyst 9800 series WLC, with these requirements:

Provide 802.11ax data rates for supported devices

All users authenticate using a certificate

Which wireless layer 2 security mode meets the requirements?

Options:

WPA2 Enterprise

WPA3 Personal

WPA2 Personal

WPA3 Enterprise

Question 10

Which technology collects location information through data packets received by the APs instead of using mobile device probes?

Options:

detect and locate

FastLocate

hyperlocation

RF fingerprinting

Question 11

What is the function of an intermediate node in a Cisco SD-Access fabric?

Options:

to route packets within the fabric based on the Layer 3 information in the header

to provide an entry and exit point between the fabric and external resources

to encapsulate and de-encapsulate packets with a VXLAN header

to provide reachability between fabric clients and nonfabric clients on the same subnet

Question 12

A script contains the statement white loop != 999 ’ Which value terminates the loop?

Options:

A value equal to 999.

A value not equal to 999.

A value greater than or equal to 999.

A value less than or equal to 999.

Question 13

Which protocol is used by vmanage to push centralized policies to vsmart controllers?

Options:

NETCONF

TLS

STUN

OMP

Question 14

What does the statement print(format(0.8, \0%')) display?

Options:

80%

8.8%

.08%

Question 15

Drag and drop the automation characteristics from the left to the corresponding tools on the right.

Question # 15

Options:

Question 16

What is the data policy in a Cisco SD-WAN deployment?

Options:

list of ordered statements that define node configurations and authentication used within the SD-WAN overlay

set of statements that defines how data is forwarded based on IP pocket information and specific VPNs

detailed database mapping several kinds of addresses with their corresponding location

group of services tested to guarantee devices and links liveliness within the SD-WAN overlay

Question 17

Refer to the exhibit.

Question # 17

What does the error message relay to the administrator who is trying to configure a Cisco IOS device?

Options:

A NETCONF request was made for a data model that does not exist.

The device received a valid NETCONF request and serviced it without error.

A NETCONF message with valid content based on the YANG data models was made, but the request failed.

The NETCONF running datastore is currently locked.

Question 18

What is the primary responsibility of the vBond orchestrator?

Options:

to provide centralized management and provisioning of all elements into the network

to configure NAT communication on WAN Edge routers

to provide configuration synchronization of an WAN Edge devices

to facilitate start-up by performing authentication and authorization of all elements into the network

Question 19

An engineer must create a new SSID on a Cisco 9800 wireless LAN controller. The client has asked to use a pre-shared key for authentication. Which profile must the engineer edit to achieve this requirement?

Options:

WLAN

Policy

Flex

Question 20

Drag and drop the snippets onto the blanks within the code to create an EEM script that adds an entry to a locally stored text file with a timestamp when a configuration change is made. Not all options are used.

Question # 20

Options:

Question 21

What is the intent API in Cisco Catalyst Center (formerly DNA Center)?

Options:

northbound consumer-facing RESTful API, which enables network discovery and configuration management

southbound consumer-facing RESTful API. which enables network discovery and configuration management

interface between the controller and the network devices, which enables network discovery and configuration management

westbound interface, which allows the exchange of data such as ITSM. IPAM, and reporting information

Question 22

Which AP mode analyzes the spectrum to detect sources of interference?

Options:

Monitor

Rogue detector

SE-Connect

Sniffer

Question 23

What are two of benefits of using VXLAN? (Choose two.)

Options:

It allows for an unlimited number of segments.

It has fewer devices to manage.

It uses all available Layer 3 paths in the underlying network.

It allows multi-tenanted segmentation.

It uses a MAC in IP/TCP encapsulation technique.

Question 24

What is the API keys option for REST API authentication?

Options:

a credential that is transmitted unencrypted

one-time encrypted token

a username that is stored in the local router

a predetermined string that is passed from client to server.

Question 25

Question # 25

Refer to the exhibit. A POST /discovery request spawns an asynchronous task. After querying for more information about the task, the Cisco DNA Center platform returns the REST API response. What is the status of the discovery task?

Options:

restarted

failed

stopped

successful

Question 26

An engineer must protect their company against ransom ware attacks. Which solution allows the engineer to block the execution stage and prevent file encryption?

Options:

Use Cisco Firepower with Intrusion Policy and snort rules blocking SMB exploitation.

Use Cisco AMP deployment with the Malicious Activity Protection engine enabled.

Use Cisco AMP deployment with the Exploit Prevention engine enabled.

Use Cisco Firepower and block traffic to TOR networks.

Question 27

A customer wants to use a single SSID to authenticate loT devices using different passwords. Which Layer 2 security type must be configured in conjunction with Cisco ISE to achieve this requirement?