350-401 Exam Questions
1,329 real 350-401 exam questions with expert-verified answers and explanations. Page 16 of 27.
- Question #762Architecture
Which function does a Cisco SD-Access extended node perform?
Cisco SD-AccessSD-Access extended nodeFabric extension - Question #763
Which two commands should you enter to enable IP Source Guard with IP and MAC address filtering?(Choose two)
IP Source GuardCisco switch securityLayer 2 securityIOS configuration - Question #764
When using BFD in a network design, which consideration must be made?
BFDDynamic Routing ProtocolsNetwork Convergence - Question #765Software Development and Design / Network Programmability - writing Python scripts to interact with REST APIs and persist configuration data to local files using JSON formatting (e.g., Cisco DevNet or CCNP Enterprise certification objectives)
Which Python code snippet must be added to the script to store the changed interface configuration to a local JSON-formatted file? A. B. C. D.
Python file I/OJSON handlingREST API scriptingNetwork automation - Question #766Security
Refer to the exhibit. Which configuration set implements Control Plane Policing for SSH and Telnet? A. B. C. D.
Control Plane Policing (CoPP)QoSSecurityClass-map - Question #767Cisco CCNA/CCNP - Network Fundamentals: Understanding switching methods including process switching, fast switching, and CEF (Cisco Express Forwarding) and their characteristics.
Drag and Drop Question Drag and drop the characteristics from the left onto the switching architectures on the right. Answer:
Cisco Switching ArchitecturesProcess SwitchingCisco Express Forwarding (CEF)Network Packet Forwarding - Question #768Cisco CCNA/CCNP - Network Fundamentals: Understanding Cisco switching mechanisms including process switching, fast switching, and Cisco Express Forwarding (CEF) and their performance characteristics.
Drag and Drop Question Drag and drop the characteristics from the left onto the switching mechanisms they describe on the right. Answer:
Process SwitchingCEFPacket Switching MechanismsRouter Architecture - Question #769Network Automation and Programmability - specifically writing Python scripts to manipulate JSON-formatted data files, handle keyboard interrupts, and perform file I/O operations, aligning with Cisco CCNP/ENCOR or DevNet Associate exam objectives.
Drag and Drop Question An engineer must create a script to append and modify device entries in a JSON-formatted file. The script must work as follows: Until interrupted from the ke...
Python scriptingJSON file handlingexception handlingnetwork automation - Question #770Automation and Orchestration Tools - understanding the key characteristics, languages, and paradigms (declarative vs. procedural) of common IaC and configuration management tools such as Terraform, Ansible, and Chef.
Drag and Drop Question Drag and drop the characteristics from the left onto the orchestration tools that they describe on the right. Answer:
Infrastructure as CodeOrchestration ToolsTerraformAnsibleChef - Question #771
A customer deploys a new wireless network to perform location-based services using Cisco DNA Spaces. The customer has a single WLC located on-premises in a secure data center. The...
Cisco DNA SpacesCisco DNA Spaces connectorWireless LAN securityLocation-based services - Question #772Automation
What does a YANG model provide?
YANGData ModelingNetwork Automation - Question #773
Which IPv4 feature prevents multicast joins on a per-port basis?
IGMP filteringIPv4 multicastPort security - Question #774Infrastructure
Refer to the exhibit. Which set of commands is required to configure and verify the VRF for Site 1 Network A on router R1?
VRF configurationCisco IOS commandsVirtual Routing and ForwardingRouter configuration - Question #775
By default, which virtual MAC address does HSRP group 22 use?
HSRPVirtual MAC address - Question #776
Refer to the exhibit. An engineer must protect the CPU of the router from high rates of NTP, SNMP, and SSH traffic. Which two configurations must be applied to drop these types of...
CoPPControl Plane PolicingQoS PolicyRate Limiting - Question #777
Which two statements are true about 6to4 tunneling? (Choose two)
6to4 tunnelingIPv6 transitionIPv6 encapsulation - Question #779Security
A customer has a wireless network deployed within a multi-tenant building. The network provides client access, location-based services, and is monitored using Cisco DNA Center. The...
Wireless SecurityCisco aWIPSCisco DNA CenterThreat Detection - Question #780
Refer to the exhibit. An engineer configures a trunk between SW1 and SW2 but tagged packets are not passing. Which action fixes the issue?
VLAN trunking802.1Q encapsulationTrunk configurationSwitch interfaces - Question #781Architecture
In a Cisco SD-Access wireless environment, which device is responsible for hosting the anycast gateway?
SD-AccessAnycast GatewayFabric Edge NodeWireless - Question #782
Which circumstance can cause interface overruns?
Interface OverrunsMicrobursts - Question #783Automation
Where in Cisco DNA Center is documentation of each API call, organized by its functional area?
Cisco DNA CenterAPI documentationDeveloper ToolkitProgrammability - Question #784
Refer to the exhibit. A company has an internal wireless network with a hidden SSID and RADIUS-based client authentication for increased security. An employee attempts to manually...
Hidden SSIDWireless client configurationTroubleshooting Wi-FiWLAN connectivity - Question #785Security
A network engineer must configure a switch to allow remote access for all feasible protocols. Only a password must be requested for device authentication and all idle sessions must...
Cisco VTY configurationRemote accessIdle timeoutDevice authentication - Question #786Infrastructure
When does a Cisco StackWise primary switch lose its role?
Cisco StackWiseSwitch StackingPrimary ElectionHigh Availability - Question #787Infrastructure
Refer to the exhibit. What are two results of the NAT configuration? (Choose two.)
Cisco NATNAT configurationNAT translationIP addressing - Question #788
Refer to the exhibit. Clients report that they cannot connect to this SSID using the provided PSK. Which action will resolve this issue?
Wireless authenticationPSK configurationWLAN troubleshootingCisco WLAN Controller - Question #789Network Assurance
Refer to the exhibit. Which command set completes the ERSPAN session configuration?
ERSPANNetwork MonitoringCisco SPANPacket Mirroring - Question #790
How do the RIB and the FIB differ?
RIBFIBrouting concepts - Question #791Infrastructure
How do stratum levels relate to the distance from a time source?
NTPTime SynchronizationStratum LevelsNetwork Services - Question #792Automation and Configuration Management - understanding the operational differences between agent-based and agentless infrastructure automation tools (commonly tested in CompTIA DevOps+, AWS DevOps Engineer, or similar certifications).
Drag and Drop Question Drag and drop the tools from the left onto the agent types on the right. Answer:
Configuration ManagementInfrastructure as CodeDevOps ToolingAgent vs Agentless Architecture - Question #793Understanding Cisco IOS switching mechanisms and packet forwarding architectures, typically covered in CCNP Enterprise (ENCOR 350-401) or advanced CCNA routing and switching domains.
Drag and Drop Question Drag and drop the characteristics from the left onto the switching architectures on the right. Answer:
Cisco Switching ArchitecturesCEFProcess SwitchingFast Switching - Question #794Architecture
What is the recommended minimum SNR for Voice applications for networks?
SNRVoice applicationsWireless network designPerformance metrics - Question #795
Which trunking configuration between two Cisco switches can cause a security risk?
VLAN TrunkingNative VLANSwitch SecurityVLAN Hopping - Question #796Infrastructure
Refer to the exhibit. R1 has a BGP neighborship with a directly connected router on interface Gi0/0. Which command set is applied between the iterations of show ip bgp 2.2.2.2?
BGPStatic RoutingBGP PeeringNext-hop Resolution - Question #797Automation
Which free application has the ability to make REST calls against Cisco DNA Center?
REST APICisco DNA CenterAPI ToolsNetwork Automation - Question #798Routing Services
Refer to the exhibit. R1 and R2 are directly connected, but the BGP session does not establish. Which action must be taken to build an eBGP session?
eBGPBGP neighbor configurationBGP session establishmentBGP troubleshooting - Question #799Infrastructure
If AP power level is increased from 25 mW to 100 mW. What is the power difference in dBm?
Wireless powerdBm calculationsRF fundamentalsAccess Point configuration - Question #800Infrastructure
Which signal strength and noise values meet the minimum SNR for voice networks?
Signal-to-Noise Ratio (SNR)Wireless RF designVoice over WLAN (VoWLAN)dBm calculations - Question #801
Which two methods are used by an AP that is typing to discover a wireless LAN controller? (Choose two.)
AP discoveryWLC discoveryDHCP Option 43 - Question #802
Refer to the exhibit. Which router is elected as the VRRP primary virtual router?
VRRPVRRP electionFHRP - Question #803Infrastructure
Which statement is true about PIM?
PIMPIM SMPIM DMMulticast routing - Question #804ERROR: Official Exam Domains list not provided in prompt.
Which A record type should be configured for access points to resolve the IP address of a wireless LAN controller using DNS?
Cisco WLC discoveryDNS A recordsCAPWAP DNSAP discovery - Question #805
By default, which virtual MAC address does HSRP group 30 use?
HSRPvirtual MAC address - Question #806
Which activity requires access to Cisco DNA Center CLI?
Cisco DNA CenterDNA Center CLISystem operationsGraceful shutdown - Question #807Infrastructure
Which NTP mode must be activated when using a Cisco router as an NTP authoritative server?
NTPNTP server configurationNetwork services - Question #808Network Assurance
Refer to the exhibit. An engineer must configure an ERSPAN tunnel that mirrors traffic from linux1 on Switch1 to Linux2 on Switch2. Which command must be added to the destination c...
ERSPAN configurationTraffic mirroringCisco Catalyst CLI - Question #809Security
An engineer is configuring RADIUS-Based Authentication with EAP MS-CHAPv2 is configured on a client device. Which outer method protocol must be configured on the ISE to support thi...
EAP ProtocolsRADIUS AuthenticationNetwork Access ControlCisco ISE - Question #810
Which two statements about IGMP are true?(Choose two.)
IGMPIGMPv2IGMPv3Multicast protocols - Question #811
Refer to the exhibit. What is the result of the IP SLA configuration?
IP SLAIP SLA configurationNetwork monitoringScheduling - Question #812
Lab Simulation 1 Guidelines This is a lab item in which tasks will be performed on virtual devices. - Refer to the Tasks tab to view the tasks for this lab item. - Refer to the Top...
BGP configurationBGP troubleshootingNetwork reachabilityInter-site connectivity