350-401 Exam Questions
1,329 real 350-401 exam questions with expert-verified answers and explanations. Page 14 of 27.
- Question #660IP Services
By default, which virtual MAC address does HSRP group 14 use?
HSRPVirtual MAC address - Question #661Architecture
What is one characteristic of the Cisco SD-Access control plane?
SD-AccessControl PlaneLISPCentralized Routing - Question #662Cloud and Automation Concepts – Understanding configuration management models and tools used in modern IT infrastructure automation (e.g., CompTIA Cloud+, DevOps certifications)
Drag and Drop Question Drag and drop the characteristics from the left onto the configuration models on the right. Answer:
Configuration ManagementDeclarative vs ImperativeInfrastructure as CodeDevOps Tools - Question #663Architecture
In a Cisco SD-Access wireless architecture which device manages endpoint ID to edge node bindings?
SD-Access WirelessControl PlaneEndpoint MappingLISP - Question #664Infrastructure
If the maximum power level assignment for global TPC 802.11a/n/ac is configured to 10 dBm, which power level effectively doubles the transmit power?
RF PowerdBmWireless StandardsTransmit Power Control - Question #665
What is the API keys option for REST API authentication?
REST API authenticationAPI keys - Question #666Security Monitoring and Log Management - configuring and retrieving appliance logs within specified time windows using scheduled expressions and remote access protocols on Cisco security platforms (relevant to CCNA Security / CyberOps / ESA/WSA administration objectives).
Drag and Drop Question Drag and drop the snippets onto the blanks within the code to construct a script that shows all logging that occurred on the appliance from Sunday until 9:00...
Cisco Appliance LoggingCron Scheduling SyntaxLog ManagementNetwork Administration Scripting - Question #667IP Connectivity – Compare and contrast routing protocol characteristics including EIGRP and OSPF metrics and algorithms (CCNA 200-301 Domain 3)
Drag and Drop Question Drag and drop the characteristics from the left onto the routing protocols they describe on the right. Answer:
EIGRPOSPFRouting ProtocolsDynamic Routing - Question #668Automation and Orchestration Tools - Understanding the architectural differences, communication methods, and configuration paradigms (declarative vs. procedural) of popular DevOps/configuration management tools such as Chef and Ansible (CompTIA DevOps+, CySA+, or Cloud+ relevant domain).
Drag and Drop Question Drag and drop the characteristics from the left onto the orchestration tools that they describe on the right. Answer:
Configuration ManagementDevOps ToolsChef vs AnsibleIT Orchestration - Question #669Network Automation and Programmability - Understanding the differences between configuration management tools (Puppet, Ansible, Chef) and orchestration platforms, and their roles in automating infrastructure (e.g., Cisco DevNet, CCNA/CCNP Automation Domain)
Drag and Drop Question Drag and drop the characteristics from the left onto the technology types on the right. Answer:
Configuration ManagementOrchestrationAnsiblePuppet - Question #670Cloud Concepts - Understanding the differences between on-premises and cloud deployment models, including their respective benefits, limitations, and cost structures (e.g., CompTIA Cloud+, AWS Cloud Practitioner, or Microsoft Azure Fundamentals)
Drag and Drop Question Drag and drop the characteristics from the left onto the infrastructure deployment models on the right. Answer:
Cloud ComputingInfrastructure Deployment ModelsOn-Premises vs CloudIT Fundamentals - Question #671Understanding LISP architecture and its components, typically covered in CCNP Enterprise (ENCOR 350-401) or Cisco SD-WAN/DNA Center certification tracks under Advanced Routing and Network Programmability domains.
Drag and Drop Question Drag and drop the LISP components on the left to their descriptions on the right. Not all options are used. Answer:
LISPSD-WANNetwork VirtualizationOverlay Networks - Question #672
Which two Cisco SD-Access components provide communication between traditional network elements and controller layer? (choose two)
Cisco SD-AccessSD-Access componentsFabric OverlayNetwork Underlay - Question #673Virtualization
What is an OVF?
OVFVirtualizationVirtual MachineVirtual Appliance - Question #674Virtualization
What is a characteristic of a type 2 hypervisor?
HypervisorType 2 HypervisorVirtualization concepts - Question #675Infrastructure
Refer to the exhibit. An engineer must allow R1 to advertise the 192.168.1.0/24 network to R2. R1 must perform this action without sending OSPF packets to SW1. Which command set sh...
OSPFOSPF interface configurationRoute advertisementCisco IOS - Question #677Network Automation and Programmability - Writing Python scripts to interact with network device APIs and save structured data to files (e.g., Cisco DevNet / CCNP Enterprise automation objectives)
Refer to the exhibit. How should the script be completed so that each device configuration is saved into a JSON-formatted file under the device name? A. B. C. D.
Python scriptingREST APIJSON file handlingnetwork automation - Question #678
Which option works with a DHCP server to return at least one WLAN management interface IP address during the discovery phase and is dependent upon the VCI of the AP?
DHCP Option 43AP discoveryWLAN managementVendor Class Identifier - Question #679Infrastructure
What is a characteristics of traffic policing?
Traffic PolicingQuality of Service (QoS)Traffic ManagementIngress/Egress Traffic - Question #680Automation
Refer to the exhibit. A network engineer must be notified when a user switches to configuration mode. Which script should be applied to receive an SNMP trap and a critical-level lo...
Cisco EEMSNMP trapsSyslog - Question #681
Which two Cisco SD-WAN components exchange OMP information?
Cisco SD-WAN componentsOMPSD-WAN architectureNetwork overlays - Question #682Automation
A Cisco Catalyst Center (formerly DNA Center) REST API sends a PUT to the /dna/intent/api/v1/network-device endpoint. A response code of 504 is received. What does the code indicat...
Cisco Catalyst Center APIREST APIHTTP Status CodesAPI Troubleshooting - Question #683Architecture
Which component transports data plane traffic across a Cisco SD-WAN network?
Cisco SD-WANData PlanecEdgeSD-WAN Components - Question #684Infrastructure Security / Network Access Control - Configuring and applying extended IP access control lists to filter specific traffic based on source/destination IP and port numbers (CCNA 200-301 Domain: Security Fundamentals)
Refer to the exhibit. A network engineer must block Telnet traffic from hosts in the range of 10.100.2.248 to 10.100.2.255 to the network 10.100.3.0 and permit everything else. Whi...
Extended ACLsTelnet Port 23Wildcard MasksAccess Control Lists - Question #685Security
Which configuration creates a CoPP policy that provides unlimited SSH access from dient 10.0.0.5 and denies access from all other SSH clients'? A. B. C. D.
Control Plane Policing (CoPP)Access Control Lists (ACLs)Quality of Service (QoS)Control Plane Security - Question #686
Refer to the exhibit. What is generated by the script?
Network AutomationCisco IOSRunning Configuration - Question #687Configure and verify eBGP between directly connected neighbors, including correct AS numbering and network advertisement using the BGP network command - typically aligned with Cisco CCNP ENCOR or CCNA routing protocol configuration objectives.
Refer to the exhibit. An engineer must configure an eBGP neighborship to Router B on Router A. The network that is connected to G0/1 on Router A must be advertised to Router B. Whi...
eBGPBGP neighbor configurationBGP network advertisementautonomous systems - Question #688Network Assurance
Which benefit is provided by the Cisco DNA Center telemetry feature?
Cisco DNA CenterTelemetryNetwork AssuranceConfiguration Deployment - Question #689
Refer to the exhibit. After configuring the BGP network an engineer verifies that the path between Server1 and Server2 is functional. Why did RouterSF choose the route from RouterD...
BGP Path SelectionBGP Router-IDBGP Attributes - Question #690Network Assurance
Refer to the exhibit. An engineer configures the trunk and proceeds to configure an ESPAN session to monitor VLANs 10, 20, and 30. Which command must be added to complete this conf...
ERSPANNetwork MonitoringCisco SPANVLAN - Question #691
By default, which virtual MAC address Goes HSRP group 25 use?
HSRPVirtual MAC address - Question #692Security
Which statement about Control Plane Policing is true?
Control Plane PolicingCoPPNetwork SecurityRouter Protection - Question #693
Independent, multiple OSPF processes are entered on the same router, and the processes have the same destination route. Which OSPF process is used?
OSPF multi-processRouting table selectionAdministrative distance - Question #694
Which DHCP message type does the DHCP server send to a client to confirm its allocated IP address?
DHCP messagesDHCP process - Question #695Architecture
A company requires a wireless solution to support its main office and multiple branch locations. All sites have local Internet connections and a link to the main office for corpora...
Wireless architectureCentralized WLAN managementEnterprise Wi-FiCisco Unified Wireless - Question #696Network Automation and Programmability - Working with data formats (JSON) and Python scripting for storing and manipulating structured data
Which Python snippet should be used to store the devices data structure in a JSON file? A. B. C. D.
Python JSONFile I/OData Serializationjson module - Question #697Security
What is a benefit of MACsec in a multilayered LAN network design?
MACsecLayer 2 securitySwitch securityLAN security - Question #698
Refer to the exhibit. Which configuration must be added to enable GigabitEthemet 0/1 to participate in OSPF?
OSPF configurationOSPF network commandWildcard masksOSPF area - Question #699Infrastructure
Refer to the exhibit. A network engineer checks connectivity between two routers. The engineer can ping the remote endpoint but cannot see an ARP entry. Why is there no ARP entry?
VRFARP protocolRouting contextsNetwork troubleshooting - Question #700
Which two options are examples of Northbound and/or Southbound protocol?(Choose two)
Northbound protocolsSouthbound protocolsNETCONFBGP-LS - Question #701Infrastructure
Which statement about STP port states is true?
STPSTP port statesLayer 2 switching - Question #702Network Automation
Refer to the exhibit. Which Python code parses the response and prints "18:32:21.474 UTC Sun Mar 10 2019"?
Python dictionaryJSON parsingAPI response - Question #703
Which encapsulation is used when deploying EIGRP OTP?
EIGRP OTPLISP Encapsulation - Question #704Security
Refer to the exhibit. A network engineer must configure the router to use the ISE-Servers group for authentication. If both ISE servers are unavailable, the local username database...
Cisco AAAAuthentication methods listISE server groupLocal authentication - Question #705Architecture
A large campus network has deployed two wireless LAN controllers to manage the wireless network. WLC1 and WLC2 have been configured as mobility peers. A client device roams from AP...
WLC MobilityInter-subnet RoamingAnchor ControllerWireless Roaming - Question #706Security
Refer to the exhibit. An attacker can advertise OSPF fake routes from 172.16.20.0 network to the OSPF domain and black hole traffic. Which action must be taken to avoid this attack...
OSPFPassive InterfaceRouting SecurityNetwork Attack Mitigation - Question #707Security
Which command address learning on the configures port security on a switch to enable permanent MAC interface?
Port securityMAC address learningCisco switch configurationSticky MAC - Question #708Automation
Refer to the exhibit. An engineer tries to log in to router R1. Which configuration enables a successful login?
NETCONFYANGAutomation ProtocolsProgrammable Interfaces - Question #709Network Assurance
Refer to the exhibit. An engineer has configured an IP SLA for UDP echo's. Which command is needed to start the IP SLA to test every 30 seconds and continue until stopped?
Cisco IP SLAIP SLA schedulingNetwork monitoring commands - Question #710Automation
A company recently decided to use RESTCONF instead of NETCONF, and many of their NETCONF scripts contain the operation <edit-config> (operation="create"). Which RESTCONF operation...
RESTCONFNETCONFAPI OperationsNetwork Automation