350-401 Exam Questions
1,329 real 350-401 exam questions with expert-verified answers and explanations. Page 20 of 27.
- Question #968Security
Which security measure mitigates a man-in-the-middle attack of a REST API?
API SecuritySSL/TLSMan-in-the-middle attack - Question #969
A wireless administrator must create a new web authentication corporate SSID that will be using ISE as the external RADIUS server. The guest VLAN must be specified after the authen...
Cisco wirelessAAA overrideRADIUSDynamic VLAN - Question #970
A network engineer wants to configure console access to a router without using AAA so that the privileged exec mode is entered directly after a user provides the correct login cred...
Cisco local authenticationPrivilege levelsConsole access - Question #971
What is one benefit of implementing a data modeling language?
Data ModelingData Modeling LanguageConceptual Representation - Question #972
What is a benefit of YANG modules?
YANG modulesNetwork programmabilityMultivendor interoperability - Question #973
Which language defines the structure or modeling of data for NETCONF and RESTCONF?
NETCONFRESTCONFYANG - Question #974Automation
What is the purpose of an integration API in Cisco DNA Center?
Cisco DNA CenterIntegration APINetwork AutomationEvent Handling - Question #975Architecture
A customer requires their wireless network to be fully functional, even if the wireless controller fails. Which wireless design supports these requirements?
Wireless network designCisco FlexConnectHigh availabilityController resiliency - Question #976Architecture
Which two conditions occur when the primary route processor fails on a switch that is using dual route processors with stateful switchover? (Choose two.)
Stateful Switchover (SSO)High AvailabilityDual Route ProcessorsData Plane Forwarding - Question #977Infrastructure
Lab Simulation 8 Guidelines This is a lab item in which tasks will be performed on virtual devices. - Refer to the Tasks tab to view the tasks for this lab item. - Refer to the Top...
GLBPFHRPHigh AvailabilityLayer 3 Switching - Question #978Security
Which authorization framework gives third-party applications limited access to HTTP services?
OAuth 2.0Authorization FrameworkAPI SecurityHTTP Services - Question #979Automation
Refer to the exhibit. What is the result of running this code?
Python scriptingVLAN configurationNetwork automation - Question #980Network Assurance
Refer to the exhibit. The administrator configures an ERSPAN session, but no packets are received on the destination host. Which action is required to complete the configuration?
ERSPANNetwork MonitoringSPANConfiguration - Question #981Automation
Refer to the exhibit. Which command is required on router R1 to start receiving RESTCONF requests?
RESTCONFNetwork ProgrammabilityCisco IOS XEAPI - Question #982Infrastructure
An engineer receives a report that an application exhibits poor performance. On the switch where the server is connected, this syslog message is visible: SW_MATM-4-MACFLAP_NOTIF: H...
MAC flappingPort ChannelEtherChannelLayer 2 switching - Question #983Automation
What is a command-line tool for consuming REST APIs?
REST APIsCommand-line toolscURLAPI consumption - Question #984Infrastructure Automation and Programmability / High Availability and Redundancy - typically mapped to Cisco CCNP Enterprise or ENCOR exam domain covering automated network event responses and failover configurations.
Drag and Drop Question Drag and drop the snippets onto the blanks within the code to construct a script that brings up the failover Ethernet port if the primary port goes down and...
EEM ScriptingInterface FailoverEmbedded Event ManagerNetwork Automation - Question #985
Refer to the exhibit. Why does the OSPF neighborship fail between the two interfaces?
OSPF troubleshootingOSPF neighborshipIP subnettingNetwork diagnostics - Question #986Architecture
Which technology enables a redundant supervisor engine to take over when the primary supervisor engine fails?
SSOSupervisor Engine RedundancyHigh AvailabilityControl Plane Redundancy - Question #987Architecture
A customer requires their wireless data traffic to egress at the switch port of the access point. Which access point mode supports this?
Wireless AP ModesFlexConnectLocal SwitchingWLAN Architecture - Question #988
What is a capability of the Cisco DNA Center southbound API?
Cisco DNA Centersouthbound APImulti-vendor management - Question #989Automation
Refer to the exhibit. Which command set enables router R2 to be configured via NETCONF?
NETCONFUser ManagementRemote AccessNetwork Automation - Question #990Infrastructure
In the Cisco DNA Center Image Repository, what is a golden image?
Cisco DNA CenterImage ManagementGolden ImageCompliance - Question #991
What are two benefits of implementing a traditional WAN instead of an SD-WAN solution? (Choose two.)
Traditional WANSD-WANWAN architecture - Question #992
Which method requires a client to authenticate and has the capability to function without encryption?
Wireless authenticationOpen authenticationEncryption characteristics - Question #993
Refer to the exhibit. An engineer must configure an eBGP neighborship to Router B on Router A. The network that is connected to G0/1 on Router A must be advertised toRouter B. Whic...
eBGP peeringBGP network advertisementCisco IOS BGP configuration - Question #994
Which IEEE standard provides the capability to permit or deny network connectivity based on the user or device identity?
802.1XNetwork Access ControlIdentity-based networking - Question #995Security
Refer to the exhibit. The CPE router acts as a DHCP server for the locally attached LAN. After DHCP snooping is enabled on the switch where the DHCP clients are connected, clients...
DHCP SnoopingNetwork SecurityOption 82DHCP Troubleshooting - Question #996Infrastructure
Lab Simulation 9 Guidelines This is a lab item in which tasks will be performed on virtual devices. - Refer to the Tasks tab to view the tasks for this lab item. - Refer to the Top...
OSPF ConfigurationRouting ProtocolsOSPF Network TypesDR/BDR - Question #997Security
Which solution simplifies management of secure access to network resources?
Cisco TrustSecNetwork Access ControlPolicy ManagementSecure Access - Question #998Virtualization
What is a characteristic of a Type 2 hypervisor?
Type 2 hypervisorHosted hypervisorVirtualization concepts - Question #999
What is provided to the client to identify the authenticated session in subsequent API calls after authenticating to the Cisco DNA Center API?
Cisco DNA Center APIAPI authenticationAuthentication token - Question #1000Automation
What does the Cisco DNA Center Authentication API provide?
Cisco DNA CenterAuthentication APIAccess Token - Question #1001Virtualization
What does the destination MAC on the outer MAC header identify in a VXLAN packet?
VXLANEncapsulationLayer 2 ForwardingUnderlay Network - Question #1002Automation
What does the statement print(format(0.8, '.0%')) display?
PythonString FormattingNumber Formattingformat() function - Question #1004Infrastructure
When a DNS host record is configured for a new Cisco AireOS WLC, which hostname must be added to allow APs to successfully discover the WLC?
AP DiscoveryDNS Host RecordWLC ConfigurationCAPWAP - Question #1005
Refer to the exhibit. An engineer tries to log in to router R1. Which configuration enables a successful login?
NETCONFYANGNetwork Programmability - Question #1006Automation
Which statement must be used to export the contents of the devices object in JSON format?
JSONPythonSerializationData Export - Question #1007Architecture
Why does the vBond orchestrator have a public IP?
vBond orchestratorSD-WAN architectureNAT traversalPublic IP - Question #1008
Why would a small or mid-size business choose a cloud solution over an on-premises solution?
Cloud benefitsOn-premises vs CloudCloud economicsCAPEX/OPEX - Question #1009
Which template is used when multiple templates are grouped together to run in succession in Cisco DNA Center?
Cisco DNA Centertemplate managementcomposite templates - Question #1010Automation
Refer to the exhibit. An engineer builds an EEM script to apply an access list. Which statement must be added to complete the script?
EEMAutomation ScriptingCisco IOS-XE - Question #1011Infrastructure
Refer to the exhibit. An engineer is troubleshooting an issue with client devices triggering excessive power changes on APs in the 2.4 GHz band. Which action resolves this issue?
Wireless RRMCoverage Hole DetectionWireless Troubleshooting - Question #1012Infrastructure
Refer to the exhibit. What is the effect of these commands on the BR and HQ tunnel interfaces?
Cisco Tunnel InterfacesKeepalive Configuration - Question #1013Security
Which protocol is used to encrypt control plane traffic between SD-WAN controllers and SD-WAN endpoints?
SD-WANControl PlaneDTLSEncryption - Question #1014
What is one difference between SaltStack and Ansible?
SaltStack architectureAnsible architectureConfiguration management - Question #1015Network Assurance
Refer to the exhibit. Why does OSPF fail to establish an adjacency between R1 and R2?
OSPF adjacencyMTU mismatchNetwork troubleshooting - Question #1016
Which configuration filters out DOT1X messages in the format shown below from being sent toward Syslog server 10.15.20.33? Nov 20 13:47:32/553 %DOT1X-5-FAIL:Authentication failed f...
Cisco IOS LoggingSyslog ConfigurationLogging DiscriminatorDOT1X Filtering - Question #1017Network Assurance
Refer to the exhibit. A network engineer is troubleshooting an issue with the file server based on reports of slow file transmissions. Which two commands or command sets are requir...
Cisco SPANPort MirroringTraffic Monitoring - Question #1018Architecture
What are two benefits of implementing a Cisco SD-WAN architecture? (Choose two.)
Cisco SD-WANSD-WAN architectureApplication-aware policiesSD-WAN security