350-401 Exam Questions
1,329 real 350-401 exam questions with expert-verified answers and explanations. Page 15 of 27.
- Question #711Security
What is one main REST security design principle?
REST API SecuritySecurity Design PrinciplesSeparation of PrivilegeAPI Security - Question #712
How does NETCONF YANG represent data structures?
NETCONFYANGData modelingXML data structures - Question #713Infrastructure
What is the recommended minimum SNR for data applications on wireless networks?
WirelessSNRWLAN designNetwork performance - Question #714Security
A system must validate access rights to all its resources and must not rely on a cached permission matrix. If the access level to a given resource is revoked but is not reflected i...
Security PrinciplesAccess ControlComplete Mediation - Question #715Infrastructure Services – Configure and verify NAT/PAT including destination NAT with load balancing (CCNP ENCOR / CCNA Advanced NAT)
Refer to the exhibit. A network engineer must load balance traffic that comes from the NAT Router and is destined to 10.10.110.10, to several FTP servers. Which two commands sets s...
NAT Load BalancingDestination NATRotary NATIP NAT Inside/Outside - Question #717
What is a characteristic of the overlay network in the Cisco SD-Access architecture?
Cisco SD-AccessSD-Access overlay networkNetwork virtualization - Question #718
An administrator is configuring NETCONF using the following XML string. What must the administrator end the request with?
NETCONFXML syntaxAPI request termination - Question #719Virtualization
Which VXLAN component is used to encapsulate and decapsulate Ethernet frames?
VXLANVTEPEncapsulationNetwork Virtualization - Question #720Infrastructure
Refer to the exhibit. The port channel between the switches does not work as expected. Which action resolves the issue?
EtherChannelLACPSwitchingNetwork Configuration - Question #721
Which statement about the EIGRP SRTT is true?
EIGRPSRTTRouting Protocol Metrics - Question #722Infrastructure
What command can you enter on a Cisco router so that it can both poll a time server and be polled by a time server?
NTPCisco IOS NTPNTP configurationNTP peer - Question #723
Refer to the exhibit. An administrator troubleshoots intermittent connectivity from internal hosts to an external public server. Some internal hosts can connect to the server while...
NAT troubleshootingNAT overloadingPort Address TranslationNAT pool exhaustion - Question #724
Refer to the exhibit. What is achieved by this code?
Cisco IOS interface commandsLoopback interfaceInterface status - Question #725Security
An engineer must configure an EXEC authorization list that first checks a AAA server then a local username. If both methods fail, the user is denied. Which configuration should be...
AAA AuthorizationRADIUSLocal AuthenticationCisco CLI - Question #726
What is a characteristics of a vSwitch?
vSwitchVirtualizationVM communication - Question #727
Which tunnel type allows clients to perform a seamless Layer 3 roam between a Cisco AireOS WLC and a Cisco IOS XE WLC?
Cisco WLC mobilityLayer 3 roamingWireless tunnels - Question #728Security
Which two characteristics apply to the endpoint security aspect of the Cisco Threat Defense architecture? (Choose two.)
Cisco Threat DefenseEndpoint protectionFileless malware blockingData transfer controls - Question #729
Refer to the exhibit. Which EEM script generates a critical-level syslog message and saves a copy of the running configuration to the bootflash when an administrator saves the runn...
Cisco EEMSyslog generationConfiguration backupEvent-driven automation - Question #730Network Fundamentals – Understanding switching and routing table types and their functions in Cisco infrastructure (CCNA/CCNP)
Drag and Drop Question Drag and drop the characteristics from the left to the table types on the right. Answer:
MAC Address TableCAM/TCAMLayer 2 SwitchingIP Routing - Question #731Network Fundamentals - Explain the role and function of network components including Layer 2 switching (MAC address table) and Layer 3 routing (IP routing table) and specialized forwarding tables (TCAM) used in Cisco devices (CCNA/CCNP)
Drag and Drop Question Drag and drop the characteristics from the left onto the deployment types on the right. Answer:
CAM TableMAC Address TableIP Routing TableTCAM - Question #732
Which two statements about OSPF route filtering are true? (Choose two)
OSPF route filteringOSPF external route tagsOSPF filtering criteria - Question #733Understanding the differences between on-premises and cloud-based infrastructure models, including operational responsibilities and scalability characteristics - commonly tested in CompTIA Cloud+, Network+, or similar IT fundamentals certifications.
Drag and Drop Question Drag and drop the automation characteristics from the left onto the appropriate tools on the right. Answer:
Cloud ComputingOn-Premises InfrastructureAutomation ToolsScalability - Question #734Cisco Enterprise Networking (ENCOR 350-401) - Domain: Infrastructure / SD-Access Fabric Architecture and Protocols
Drag and Drop Question Drag and drop the Cisco SD-Access solution areas from the left onto the protocols they use on the right. Answer:
SD-AccessLISPVXLANTrustSecBGP - Question #735Configure and verify eBGP between directly connected neighbors, including correct AS number assignment and neighbor IP address specification - typically covered under Layer 3 Technologies or IP Routing in CCNP/CCIE certification exams.
Refer to the exhibit. Which configuration must be implemented to establish EBGP peering between R1 and R2? A. B. C. D.
EBGPBGP PeeringAutonomous SystemsNeighbor Configuration - Question #736Automation
What is one benefit of adopting a data modeling language?
Data modeling languagesNetwork programmabilityConfiguration managementVendor neutrality - Question #737Security
Refer to the exhibit. Which command set must be added to permit and log all traffic that comes from 172.20.10.1 in interface GigabitEthernet0/1 without impacting the functionality...
Access Control Lists (ACLs)Cisco IOS CommandsNetwork SecurityTraffic Filtering - Question #738
Which option must be used to support a WLC with an IPv6 management address and 100 Cisco Aironet 2800 Series access points that will use DHCP to register?
WLC managementAP registrationDHCP optionsIPv6 - Question #739Security
An engineer is configuring Local WebAuth on a Cisco Wireless LAN Controller. According to RFC 5737, WHICH VIRTUAL IP address must be used in this configuration?
Cisco WLCLocal WebAuthRFC 5737Virtual IP - Question #740Infrastructure
By default, which virtual MAC address does HSRP group 32 use?
HSRPVirtual MAC AddressFirst Hop Redundancy ProtocolHigh Availability - Question #741
Which statement about the feasible distance in EIGRP is true?
EIGRP feasible distanceEIGRP metrics - Question #742
What are the two variants of NTPv4? (Choose two.)
NTPNTPv4 modes - Question #743
Which two statements about the EIGRP Over the Top feature are true? (Choose two.)
EIGRP Over the TopLISP encapsulationEIGRP configuration - Question #744
Which two options describe the effect of configuring an interface as passive under OSPF? (Choose two)
OSPF passive interfaceOSPF adjacencyOSPF network advertisement - Question #745Infrastructure
Which three statements about dot1Q trunking are true? (Choose three)
dot1Q trunkingswitchport modes802.1X - Question #746Virtualization
What is one characteristic of VXLAN?
VXLANnetwork virtualizationmultitenancy - Question #747Infrastructure
In which two ways does the routing protocol OSPF differ from EIGRP? (Choose two.)
OSPFEIGRPRouting ProtocolsLoad Balancing - Question #748
Refer to the exhibit. Traffic is not passing between SW1 and SW2. Which action fixes the issue?
EtherChannelPAgPPort Channel ConfigurationInter-Switch Link Troubleshooting - Question #749Infrastructure
Which two statements about 6to4 tunnels are true? (Choose two.)
6to4 tunnelsIPv6 transitionIPv6 encapsulation - Question #750
How does an IPv6 host automatically generate a global address?
IPv6 SLAACIPv6 address generationRouter Advertisement - Question #751Security
An engineer must configure a new WLAN that allows a user to enter a passphrase and provides forward secrecy as a security measure. Which Layer 2 WLAN configuration is required on t...
WLAN SecurityWPA3 PersonalForward SecrecyWireless Security Protocols - Question #752Architecture
In Cisco DNA Center, what is the integration API?
Cisco DNA CenterAPINetwork AutomationSDN Integration - Question #753Infrastructure
A customer wants to connect a device to an autonomous Cisco AP configured as a WGB. The WGB is configured properly: however, it fails to associate to a CAPWAP-enabled AP. Which cha...
WGBWireless AssociationAironet IEWLC - Question #754
Refer to the exhibit. Which command filters the ERSPAN session packets only to interface GigabitEthernet1?
ERSPANPacket filteringCisco IOS configuration - Question #755IP Services
In IPv6 Path MTU Discovery, which ICMP message is sent by an intermediary router that requires a smaller MTU?
IPv6 PMTUDICMPv6MTU discoveryPacket Too Big - Question #756
Which three technologies can be used to implement redundancy for IPv6? (Choose three)
IPv6 redundancyHSRPGLBPIPv6 RA - Question #757Infrastructure
Refer to the exhibit. An engineer configures HSRP and enters the show standby command. Which two facts about the network environment are derived from the output? (Choose two.)
HSRPshow standby outputHSRP timersHSRP priority election - Question #758
Which two statements about the STP dispute function are true? (Choose two)
STP dispute functionBPDUs - Question #759Implement OSPF
Which two statements about the OSPF two-way neighbor state are true? (Choose two.)
OSPF neighbor statesOSPF Hello protocolRouting protocols - Question #760Infrastructure
Refer to the exhibit. Cisco IOS routers R1 and R2 are interconnected using interface Gi0/0. Which configuration allows R1 and R2 to form an OSPF neighborship on interface Gi0/0?
OSPF configurationOSPF neighborshipCisco IOS OSPF - Question #761Infrastructure
Refer to the exhibit. The OSPF neighborship fails between two routers. What is the cause of this issue?
OSPFRouting ProtocolsTroubleshootingMTU