350-401 Exam Questions
1,329 real 350-401 exam questions with expert-verified answers and explanations. Page 4 of 27.
- Question #155Automation
What does the Cisco DNA Center use to enable the delivery of applications through a network and to yield analytics for innovation?
Cisco DNA CenterIntent-based NetworkingAPIsNetwork Automation - Question #156Infrastructure
Why is an AP joining a different WLC than the one specified through option 43?
AP DiscoveryWLC ManagementDHCP Option 43AP Priming - Question #157Security
Refer to the exhibit. Assuming the WLC's interfaces are not in the same subnet as the RADIUS server, which interface would the WLC use as the source for all RADIUS-related traffic?
WLC interfacesRADIUS trafficWLAN securityWireless authentication - Question #158Security
An engineer must protect their company against ransomware attacks. Which solution allows the engineer to block the execution stage and prevent file encryption?
Ransomware protectionEndpoint securityCisco Secure Endpoint (AMP)Malicious Activity Protection - Question #159Infrastructure
Wireless users report frequent disconnections from the wireless network. While troubleshooting a network engineer finds that after the user a disconnect, the connection re-establis...
WirelessRRMDCATroubleshooting - Question #160Security
Which algorithms are used to secure REST API from brute attacks and minimize the impact?
REST API SecurityBrute-force ProtectionPassword Hashing AlgorithmsKey Derivation Functions - Question #161
Company policy restricts VLAN 10 to be allowed only on SW1 and SW2. All other VLANs can be on all three switches. An administrator has noticed that VLAN 10 has propagated to SW3. W...
VTP pruningVLAN trunkingSwitchport allowed VLANsVLAN security - Question #162Infrastructure
Refer to the exhibit. An engineer reconfigures the pot-channel between SW1 and SW2 from an access port to a trunk and immediately notices this error in SW1's log. Which command set...
EtherChannel configurationVLAN TrunkingSwitchport modeInterface configuration - Question #163Architecture
A company plans to implement intent-based networking in its campus infrastructure. Which design facilities a migrate from a traditional campus design to a programmer fabric designe...
Intent-based networkingCampus designRouted accessNetwork migration - Question #164Virtualization
Which two entities are Type 1 hypervisors? (Choose two.)
HypervisorType 1 HypervisorVirtualization - Question #165Security
A network administrator applies the following configuration to an IOS device: aaa new-model aaa authentication login default local group tacacs+ What is the process of password che...
AAAAuthenticationTACACS+Local database - Question #166Security
Which devices does Cisco DNA Center configure when deploying an IP-based access control policy?
Cisco DNA CenterAccess Control PolicyNetwork AutomationSite-based policy - Question #167Automation
A network administrator is preparing a Python scrip to configure a Cisco IOS XE-based device on the network. The administrator is worried that colleagues will make changes to the d...
Python scriptingNETCONFDevice configuration lockncclient - Question #168Architecture
Which component handles the orchestration plane of the Cisco SD-WAN?
Cisco SD-WANOrchestration PlanevBondSD-WAN Architecture - Question #169Architecture
Which First Hop Redundancy Protocol should be used to meet a design requirement for more efficient default gateway bandwidth usage across multiple devices?
First Hop Redundancy ProtocolsGLBPNetwork RedundancyLoad Balancing - Question #170Infrastructure
A client device roams between access points located on different floors in an atrium. The access points joined to the same controller and configuration in local mode. The access po...
Wireless RoamingWLCAccess PointClient Mobility - Question #171Virtualization
Which action is a function of VTEP in VXLAN?
VXLANVTEPEncapsulationNetwork Virtualization - Question #172Security
Refer to the exhibit. An engineer must deny Telnet traffic from the loopback interface of router R3 to the loopback interface of router R2 during the weekend hours. All other traff...
Access Control Lists (ACLs)Time-based ACLsNetwork SecurityRouter Configuration - Question #174Architecture
What is the role of the vSmart controller in a Cisco Catalyst SD-WAN environment?
Cisco SD-WANvSmart ControllerControl PlaneSD-WAN Architecture - Question #175
What mechanism does PIM use to forward multicast traffic?
PIM MulticastPIM Sparse Mode - Question #176
Which two security features are available when implementing NTP? (Choose two )
NTP securityNTP authenticationNTP access control - Question #177Infrastructure
What is calculated using the numerical values of the transmitter power level, cable loss, and antenna gain?
WirelessRF PowerEIRPAntenna Gain - Question #178Architecture
In a Cisco SD-WAN solution, how is the health of a data plane tunnel monitored?
Cisco SD-WANBFDTunnel monitoring - Question #179
Which two LISP infrastructure elements are needed to support LISP to non-LISP internetworking? (Choose two)
LISPLISP componentsLISP internetworking - Question #180Architecture
In an SD-WAN deployment, which action in the vSmart controller responsible for?
SD-WANvSmart ControllerControl PlanePolicy Distribution - Question #181Infrastructure
In OSPF, which LSA type is responsible for pointing to the ASBR router?
OSPFLSA TypesASBRRouting Protocols - Question #182Architecture
Which protocol is responsible for data plane forwarding in a Cisco SD-Access deployment?
Cisco SD-AccessVXLANData PlaneNetwork Overlay - Question #183Infrastructure - Understanding LISP architecture and the roles of its components in mapping Endpoint Identifiers (EIDs) to Routing Locators (RLOCs), commonly tested in CCNP/CCIE Enterprise or SD-WAN certification tracks.
Drag and Drop Question Drag and drop the LISP components from the left onto the function they perform on the right. Not all options are used. Answer:
LISPOverlay NetworkingSD-WANNetwork Virtualization - Question #184Network Programmability and Automation – Understanding REST API authentication mechanisms including Basic Auth, token-based auth, OAuth, and secure credential storage (aligns with Cisco DevNet / CCNP Enterprise or similar certification API security objectives)
Drag and Drop Question Drag and drop the REST API authentication method from the left to the description on the right. Answer:
REST API SecurityAuthentication MethodsOAuthAPI Design - Question #185Virtualization
A server running Linux is providing support for virtual machines along with DNS and DHCP services for a small business. Which technology does this represent?
VirtualizationHypervisorType 2 HypervisorHosted Hypervisor - Question #186Automation
Which characteristic distinguishes Ansible from Chef?
AnsibleChefConfiguration ManagementAutomation Model - Question #187Security
What is the result of applying this access control list? ip access-list extended STATEFUL 10 permit tcp any any established 20 deny ip any any
Access Control ListsTCP FlagsStateful FilteringTraffic Filtering - Question #188Architecture
What function does VXLAN perform in a Cisco SD-Access deployment?
VXLANSD-AccessData PlaneOverlay Network - Question #189Infrastructure
Refer to the exhibit. An engineer must establish eBGP peering between router R3 and router R4. Both routers should use their loopback interfaces as the BGP router ID. Which configu...
eBGP peeringBGP router IDLoopback interface configuration - Question #190
Refer to the exhibit. Which configuration enables password checking on the console line, using only a password?
Console securityLine configurationPassword authentication - Question #191Architecture
Refer to Exhibit. MTU has been configured on the underlying physical topology, and no MTU command has been configured on the tunnel interfaces. What happens when a 1500-bye IPv4 pa...
GRE TunnelIP FragmentationMTUEncapsulation - Question #192Infrastructure
What is used to measure the total output energy of a Wi-Fi device?
Wi-Fi Power MeasurementWireless FundamentalsRF PowerMilliwatts - Question #193Infrastructure
Drag and Drop Question Drag and drop the Qos mechanisms from the left to the correct descriptions on the right. Answer:
QoSTraffic ClassificationTraffic ManagementQoS Configuration - Question #194Architecture
An engineer uses the Design workflow to create a new network infrastructure in Cisco DNA Center. How is the physical network device hierarchy structured?
Cisco DNA CenterNetwork DesignSite HierarchySDN - Question #195Virtualization
Which technology is used to provide Layer 2 and Layer 3 logical networks in the Cisco SD- Access architecture?
SD-AccessOverlay NetworkLogical NetworksNetwork Virtualization - Question #196Infrastructure
What is the difference between CEF and process switching?
CEFProcess SwitchingPacket ForwardingFIB - Question #197Security
Refer to the exhibit. An engineer entered the command no spanning-tree bpduguard enable on interface Fa 1/0/7. What is the effect of this command on Fa 1/0/7?
BPDU GuardErr-disabled stateInterface recoverySpanning Tree Protocol - Question #198Infrastructure
How does the RIB differ from the FIB?
RIBFIBRouting TableForwarding Plane - Question #199Security
Refer to the exhibit. PC-1 must access the web server on port 8080. To allow this traffic, which statement must be added to an access control list that is applied on SW2 port G0/0...
Access Control Lists (ACLs)Network SecurityTraffic Flow AnalysisTCP/IP Ports - Question #200Infrastructure
Refer to the exhibit. Which two commands are needed to allow for full reachability between AS 1000 and AS 2000? (Choose two)
BGPeBGPNetwork AdvertisementRouting Protocols - Question #201Automation
Refer to the exhibit. What does the error message relay to the administrator who is trying to configure a Cisco IOS device?
NETCONFYANG data modelsError interpretation - Question #202Virtualization
Witch two actions provide controlled Layer 2 network connectivity between virtual machines running on the same hypervisor? (Choose two.)
Virtual switchVM networkingLayer 2 connectivity - Question #203
Refer to the exhibit. An engineer configures CoPP and enters the show command to verify the implementation. What is the result of the configuration?
Control Plane PolicingAccess Control ListsQoS Policy Maps - Question #204Virtualization
What is a Type 1 hypervisor?
HypervisorType 1 HypervisorBare-metal - Question #205Infrastructure
Refer to the exhibit. A network engineer configures a GRE tunnel and enters the show Interface tunnel command. What does the output confirm about the configuration?
GRE TunnelTunnel ConfigurationCommand Output InterpretationDefault Settings