350-401 Exam Questions
1,329 real 350-401 exam questions with expert-verified answers and explanations. Page 24 of 27.
- Question #1172
How are control traffic, client authentication and data traffic handled in a mobility express environment?
Cisco Mobility ExpressWireless traffic flowClient authenticationControl plane traffic - Question #1173
Which feature allows clients to perform Layer 2 roaming between wireless controllers?
Wireless Layer 2 RoamingMobility GroupsWireless Controllers - Question #1174
What is a characteristic of Cisco DNA Northbound APIs?
Cisco DNANorthbound APIsNetwork automationIntent-based networking - Question #1175
Refer to the exhibit. R1 and R2 are on the same VLAN. VRRP is configured between the two routers. What is the cause of the VRRP error?
VRRPLayer 3 RedundancyNetwork TroubleshootingRouter Configuration - Question #1176Wireless
An engineer is implementing a new SSID on a Cisco Catalyst 9800 Series WLC that must be broadcast on 6 GHz radios. Users will be required to use EAP-TLS to authenticate. Which wire...
WPA3 EnterpriseWi-Fi 6E802.1XWireless Security - Question #1177
Which Cisco SD-WAN component authenticates the routers and the vSmart controllers?
Cisco SD-WANSD-WAN componentsvBond orchestrator - Question #1178Automation
Refer to the exhibit. What is output by this code?
Python scriptingCode interpretationControl flow - Question #1179
What are two characteristics of a directional antenna? (Choose two.)
Directional antennaAntenna gainAntenna beamwidth - Question #1180Automation
When does Cisco DNA Center make changes to a device?
Cisco DNA CenterDevice managementNetwork automationSite assignment - Question #1181Security
Which security actions must be implemented to prevent an API injection attack?
API injectionInput validationData sanitizationAPI security - Question #1182Security
Refer to the exhibit. Which action automatically enables privilege exec mode when logging in via SSH?
Cisco User AccountsPrivilege LevelsSSH Authentication - Question #1183Network Assurance
Refer to the exhibit. An engineer must verify the operational status of ISP 1 by testing the IP reachability of the ISP1 DNS server every 10 seconds. If the DNS server is not reach...
Cisco IP SLAStatic routingReachability testing - Question #1184Network Assurance
Refer to the exhibit. What can be determined from the output?
Cisco NetFlowNetFlow exporterNetFlow monitor - Question #1185
Refer to the exhibit. Which action results from executing the Python script?
Python scriptingNetwork automationCLI interaction - Question #1186Network Programmability and Automation - specifically working with data formats (JSON) and Python scripting to read, modify, and write structured configuration data, commonly tested in CCNA (200-301) or DEVASC (200-901) certification domains.
Drag and Drop Question Drag and drop the code snippets from the bottom onto blanks in the Python script so that the program changes the IP address and saves it as a new JSON file o...
Python file I/OJSON parsingNetwork automationData serialization - Question #1187Understanding Cisco SD-WAN architecture, components, and characteristics - typically mapped to CCNP Enterprise (ENSDWI) or CCNA/ENCOR SD-WAN domain objectives covering software-defined WAN design and operation.
Drag and Drop Question Drag and drop the characteristics of Cisco SD-WAN from the left onto the right. Not all options are used. Answer:
Cisco SD-WANSD-WAN ArchitecturevSmart ControllerWAN Technologies - Question #1188Network Automation and Programmability - specifically working with Python scripts to interact with network device data, manipulate JSON data structures, and perform file operations using the json module (commonly tested in CCNA/CCNP DevNet or Network Automation certification tracks).
Drag and Drop Question Drag and drop the code snippets from the bottom onto the blanks in the Python script to print the device model to the screen and write JSON data to a file. N...
Python scriptingJSON file handlingNetwork automationFile I/O - Question #1189Network Infrastructure - Quality of Service (QoS) Mechanisms and Traffic Management (e.g., CompTIA Network+, CCNA)
Drag and Drop Question Drag and drop the QoS mechanisms from the left onto their descriptions on the right. Answer:
QoSTraffic ShapingPolicingClass of Service - Question #1190Python Programming Fundamentals - Working with Data Formats and Serialization (JSON handling using the `json` standard library module)
Drag and Drop Question Drag and drop the code snippets from the bottom onto the blanks in the script to convert a Python object into a JSON string. Not all options are used. Answer...
JSON serializationPython json moduleJSONEncoderdata encoding - Question #1191Understanding Python's JSON module, specifically the encoding (serialization) process using JSONEncoder and its .encode() method to convert Python objects into JSON-formatted strings.
Drag and Drop Question Drag and drop the characteristics from the left onto the corresponding switching architectures on the right. Answer:
JSON serializationPython encodingJSONEncoderdata handling - Question #1192Cisco CCNA/CCNP - Infrastructure Services: Configure and verify NTP operating in client/server mode, including NTP associations, authentication, access groups, and broadcast client functionality (aligned with Cisco exam blueprint domain covering IP Services and Network Management)
Drag and Drop Question Drag and drop the NTP elements from the left onto the correct descriptions on the right. Answer:
NTPNetwork Time ProtocolNetwork SecurityInfrastructure Services - Question #1193Automation and Programmability - Understand the role and characteristics of Cisco Catalyst Center APIs including northbound (Intent API) and southbound interfaces in the context of network automation (CCNA/CCNP Enterprise)
Drag and Drop Question Drag and drop the Cisco Catalyst Center (formerly DNA Center) northbound API characteristics from the left to the right. Not all options are used. Answer:
Cisco Catalyst CenterNorthbound APIIntent APISDN APIs - Question #1194IP Routing and Switching Architecture - Understanding the relationship between per-protocol databases, the RIB, and the FIB/CEF forwarding table, typically aligned with CCNP ENCOR or CCIE-level routing architecture objectives.
Drag and Drop Question Drag and drop the characteristics from the left onto the corresponding switching architectures on the right. Answer:
Routing Information Base (RIB)Forwarding Information Base (FIB)CEF (Cisco Express Forwarding)Dynamic Routing Protocols - Question #1195Infrastructure
Which multicast operational mode sends a prune message to the source when there are no connected members or downstream neighbors?
Multicast RoutingPIM Dense ModePrune Message - Question #1196
Refer to the exhibit. Which type of antenna is shown on the radiation patterns?
Antenna typesRadiation patternsWireless fundamentals - Question #1197Infrastructure
Refer to the exhibit. An engineer must implement HSRP between two WAN routers. In the event R1 fails and then regains operational status, it must allow 100 seconds for the routing...
HSRPFirst Hop Redundancy ProtocolsNetwork RedundancyPreemption Delay - Question #1198
Refer to the exhibit. A network engineer connected two routers using OSPF but the routers are not sharing routes. Which command completes the configuration?
OSPF configurationOSPF troubleshootingRouting updates - Question #1199
Which security feature does stateless authentication and authorization use for REST API calls?
OAuth 2.0REST API securityStateless authenticationAPI authorization - Question #1200Infrastructure
Which port is required to allow APs to join a WLC when directed broadcasts are used on a Cisco IOS switch?
CAPWAPWLC AP CommunicationUDP PortsWireless Infrastructure - Question #1201Understanding and applying proper data serialization and interchange formats, specifically JSON structure and syntax rules, commonly tested in IT Fundamentals, CompTIA A+, or web development certification exams.
Which JSON script is properly formatted? A. B. C. D.
JSON formattingdata structuressyntax validationweb technologies - Question #1202Security
An engineer must configure AAA on a Cisco 9800 WLC for central web authentication. Which two commands are needed to accomplish this task? (Choose two.)
AAACisco 9800 WLCCentral Web Authentication (CWA)RADIUS Dynamic Authorization (CoA) - Question #1203Infrastructure
Refer to the exhibit. Which command or set of commands configures switch B as the primary root for VLANs 10, 15, and 20?
MSTP configurationSpanning Tree ProtocolRoot bridgeVLANs - Question #1204
How does a Type 2 hypervisor function?
Type 2 hypervisorHypervisor typesVirtualization fundamentals - Question #1205Network Automation and Programmability – Using RESTCONF to configure network devices via Python scripting with correct HTTP methods and data structures
Refer to the exhibit. An engineer attempts to use RESTCONF to configure GigabitEthernet2 on a remote router with IP address 192.168.159.10, but the configuration fails. Which confi...
RESTCONFPython APINetwork ProgrammabilityCisco IOS-XE YANG - Question #1206
Which element is unique to a Type 2 hypervisor?
Hypervisor typesType 2 hypervisor - Question #1207
How do OSPF and EIGRP compare?
OSPFEIGRPRouting Protocol ComparisonRoute Advertisement - Question #1208Automation
What do Chef and Ansible have in common?
ChefAnsibleConfiguration Management - Question #1209Security
Refer to the exhibit. A client requests a new SSID that will use web-based authentication and external RADIUS servers. Which Layer 2 security mode must be selected?
Wi-Fi SecurityWeb-based AuthenticationCaptive PortalRADIUS - Question #1210Infrastructure
Refer to the exhibit. Users in the Operations VLAN on Switch A are unable to communicate with users in the Operations VLAN on Switch B. Which action resolves the issue?
VLAN trunkingVLAN pruningInter-VLAN communicationNetwork troubleshooting - Question #1211Network Access Control and Identity Services / Infrastructure Security - Securing Management Plane Access on Cisco IOS devices with ISE integration
A customer deployed an ISE solution that allows for web authentication and URL redirect enforced from the access layer. Due to control plane security concerns, only host IP 10.0.1....
ISE Web AuthenticationControl Plane SecurityHTTP Access ControlACL Management - Question #1212Security
An engineer must construct an access list for a Cisco Catalyst 9800 Series WLC that will redirect wireless guest users to a splash page that is hosted on a Cisco ISE server. The Ci...
Wireless Guest AccessWeb AuthenticationAccess Control Lists (ACL)Cisco Catalyst 9800 WLC - Question #1213Automation
A script contains the statement "while loop != 999:" Which value terminates the loop?
ScriptingLoopsControl FlowProgramming Fundamentals - Question #1214Security
Which method ensures the confidentiality of data exchanged over a REST API?
TLSREST API securityData confidentiality - Question #1215Security
Which two advanced security features are available in next-generation firewalls but were not provided by standard firewalls? (Choose two.)
Next-Generation FirewallIntrusion Prevention SystemApplication Control - Question #1216Infrastructure
Which wireless deployment mode uses a Flex architecture and allows Layer 2 roaming between APs without a physical wireless controller?
Cisco Wireless ModesMobility ExpressFlexConnectLayer 2 Roaming - Question #1217Security
When should the MAC authentication bypass feature be used on a switch port?
MAC Authentication Bypass802.1XNetwork Access ControlAuthentication - Question #1218Network Security / Infrastructure Security - Implementing MAC-based access controls and scripting automation for blocking unauthorized devices on network interfaces (relevant to certifications such as Cisco CyberOps, CompTIA Security+, or CCNP Security)
Drag and Drop Question Drag and drop the snippets onto the blanks within the code to construct a script that blocks a MAC address. Answer:
MAC Address FilteringNetwork Security ScriptingInterface ConfigurationAccess Control - Question #1219Security
A wireless network engineer must configure a WPA2+WPA3 policy with the Personal security type. Which action meets this requirement?
Wireless SecurityWPA2WPA3Encryption Ciphers - Question #1220Automation
Which two items are found in YANG data models? (Choose two.)
YANGData ModelsNetwork AutomationNETCONF - Question #1221Security
The Radio Resource Management software that is embedded in the Cisco WLC acts as a manager to constantly monitor over-the-air metrics. Which other factor does the Radio Resource Ma...
Radio Resource ManagementCisco WLCRogue AP detectionWireless Security