350-401 Exam Questions
1,329 real 350-401 exam questions with expert-verified answers and explanations. Page 8 of 27.
- Question #357Security
Refer to the exhibit. A network engineer must simplify the IPsec configuration by enabling IPsec over GRE using IPsec profiles. Which two configuration changes accomplish this? (Ch...
IPsecGRE TunnelsIPsec ProfilesVPN Configuration - Question #358Infrastructure
Refer to the exhibit. Which two facts does the device output confirm? (Choose two)
HSRPFHRPNetwork RedundancyShow Command Interpretation - Question #359Architecture
Refer to the exhibit. What step resolves the authentication issue?
SD-WANAuthenticationControl PlaneTroubleshooting - Question #360LAN Switching Technologies - Configure, verify, and troubleshoot VLANs and interswitch connectivity including trunk encapsulation and trunk mode configuration
Refer to the exhibit, Communication between London and New York is down. Which command set must be applied to resolve this issue? A. B. C. D.
VLAN Trunking802.1QDTPSwitchport Configuration - Question #361Infrastructure
Which two methods are used to reduce the AP coverage area? (Choose two.)
AP coverageRF designTransmit powerMinimum data rates - Question #362Virtualization
What is a VPN in a Cisco SD-WAN deployment?
SD-WAN VPNTraffic IsolationSegmentationVirtualized Environment - Question #363Security Concepts and Network Security Architecture - Understanding Cisco security product portfolios and how integrated solutions like Cyber Threat Defense address visibility, identity, and content security objectives (relevant to CCNA Security / IINS or legacy Cisco security certifications)
Drag and Drop Question Drag and drop the solutions that comprise Cisco Cyber Threat Defense from the left onto the objectives they accomplish on the right. Answer:
Cisco Cyber Threat DefenseNetwork Security ArchitectureThreat DetectionSecurity Solutions - Question #364Infrastructure (Layer 2 Technologies / High Availability and Redundancy) - typically aligned with CCNP Enterprise or CCIE Enterprise Infrastructure certification objectives covering chassis virtualization and stacking technologies.
Drag and Drop Question Drag and drop the descriptions of the VSS technology from the left to the right. Not all options are used. Answer:
VSSVirtual Switching SystemCisco High AvailabilityCampus Network Design - Question #365Infrastructure - Implement and configure Layer 2 redundancy and high-availability technologies including VSS and StackWise on Cisco enterprise switching platforms (CCNP Enterprise / ENCOR)
Drag and Drop Question Drag and drop the characteristics from the left onto the orchestration tools that they describe on the right. Answer:
VSSStackWiseHigh AvailabilityCisco Switching Technologies - Question #366Infrastructure
Which data plane protocol does EIGRP Over the Top use?
EIGRP Over the TopLISPdata plane - Question #367Infrastructure
Which two actions, when applied in the LAN network segment, will facilitate Layer 3 CAPWAP discovery for lightweight AP? (Choose two.)
CAPWAP discoveryWLC discoveryDHCP option 43IP Helper - Question #368Automation
Refer to the exhibit. Which JSON syntax is derived from this data?
JSON SyntaxData StructuresData SerializationAPI Data Formats - Question #369Infrastructure
Which two network problems indicate a need to implement QoS in a campus network? (Choose two)
QoSNetwork performanceJitterPacket loss - Question #370Architecture
What is the function of vBond in a Cisco SDWAN deployment?
Cisco SD-WANvBondSD-WAN onboardingOverlay network - Question #371
Which function does a fabric AP perform in a Cisco SD-Access deployment?
Cisco SD-AccessFabric APWireless Client Access - Question #372Security
In a Cisco SD-Access solution, what is the role of the Identity Services Engine?
Cisco SD-AccessIdentity Services Engine (ISE)Network PolicyEndpoint Segmentation - Question #373Infrastructure
What is the data policy in a Cisco SD-WAN deployment?
SD-WANData PolicyTraffic ForwardingPolicy Enforcement - Question #374Architecture
In a three-tier hierarchical campus network design, which action is a design best-practice for the core layer?
Core LayerHierarchical DesignNetwork Design Best PracticesRedundancy - Question #375Infrastructure
Refer to the exhibit. Which configuration change ensures that R1 is the active gateway whenever it is in a functional state for the 172.30.110.0/24 network?
HSRPFirst Hop Redundancy ProtocolNetwork RedundancyGateway Configuration - Question #376Architecture
What are two characteristics of Cisco SD-Access elements? (Choose two)
SD-AccessFabric ArchitectureBorder NodeControl Plane Node - Question #377Automation
What is YANG used for?
YANGData ModelingNetwork Automation - Question #378Infrastructure
Refer to the exhibit. Which action resolves the EtherChannel issue between SW2 and SW3?
EtherChannelPAgPLink AggregationNetwork Troubleshooting - Question #379Security
A customer has completed the installation of a Wi-Fi 6 greenfield deployment at their new campus. They want to leverage Wi-Fi 6 enhanced speeds on the trusted employee WLAN. To con...
Wi-Fi 6Wireless Security802.1XWLAN Configuration - Question #380Infrastructure
The following system log message is presented after a network administrator configures a GRE tunnel: %TUN-RECURDOWN Interface Tunnel 0 temporarily disabled due to recursive routing...
GRE TunnelsRecursive RoutingTunnel ConfigurationTroubleshooting - Question #381Infrastructure
Which encryption hashing algorithm does NTP use for authentication?
NTP authenticationHashing algorithmsMD5 - Question #382Understanding JSON data structure and syntax rules, including proper use of commas, string delimiters, and data types - commonly tested in web development, API integration, and data interchange certification domains.
Which data is properly formatted with JSON? A. B. C. D.
JSONData FormattingWeb Data ExchangeSyntax Validation - Question #383Infrastructure
Refer to the exhibit. An engineer must assign an IP address of 192.168.1.1/24 to the GigabitEthemet1 interface. Which two commands must be added to the existing configuration to ac...
IP AddressingInterface ConfigurationVRF ConfigurationIPv4 - Question #384Infrastructure
How does Protocol Independent Multicast function?
PIMMulticast RoutingUnicast RoutingRPF - Question #385Virtualization
Which technology does VXLAN use to provide segmentation for Layer 2 and Layer 3 traffic?
VXLANVNINetwork segmentation - Question #386IP Services
What are two methods of ensuring that the multicast RPF check passes without changing the unicast routing table? (Choose two.)
Multicast RPFStatic MroutesMBGP - Question #387Infrastructure
Under which network conditions is an outbound QoS policy that is applied on a router WAN interface most beneficial?
QoSWANCongestion ManagementTraffic Prioritization - Question #388Security
What is provided by the Stealthwatch component of the Cisco Cyber Threat Defense solution?
StealthwatchNetwork VisibilityCyber Threat DefenseThreat Detection - Question #389Infrastructure
A company has an existing Cisco 5520 HA cluster using SSO. An engineer deploys a new single Cisco Catalyst 9800 WLC to test new features. The engineer successfully configures a mob...
Wireless MobilityWLC High AvailabilityMobility MACCisco Catalyst 9800 WLC - Question #390Architecture
Refer to the exhibit. Assuming all links are functional, which path does PC1 take to reach DSW1?
Spanning Tree Protocol (STP)Layer 2 ForwardingNetwork TopologyRedundancy - Question #391Infrastructure Security - Configuring and verifying AAA authentication method lists including TACACS+, RADIUS, and local authentication fallback on Cisco IOS devices (CCNP ENCOR / SCOR Security domain)
Drag and Drop Question An engineer creates the configuration below. Drag and drop the authentication methods from the left into the order of priority on the right. Not all options...
AAA AuthenticationTACACS+RADIUSaaa authentication login - Question #392Infrastructure
What does the number in an NTP stratum level represent?
NTPTime SynchronizationStratum Level - Question #393
Which method should an engineer use to deal with a long-standing contention issue between any two VMs on the same host?
VM resource contentionResource reservationVirtualization management - Question #394Network Assurance
Refer to the exhibit. What is the effect of introducing the sampler feature into the Flexible NetFlow configuration on the router?
NetFlowFlexible NetFlowNetwork MonitoringNetFlow Sampling - Question #395
Refer to the exhibit. All switches are configured with the default port priority value. Which two commands ensure that traffic from PC1 is forwarded over Gi1/3 trunk port between D...
STPSTP port priorityLayer 2 path selectiontrunk ports - Question #396Infrastructure
Refer to the exhibit. After implementing the configuration, 172.20.20.2 stops replying to ICMP echos, but the default route fails to be removed. What is the reason for this behavio...
IP SLARoute TrackingStatic RoutingHigh Availability - Question #397Network Assurance
What are two features of NetFlow flow monitoring? (Choose two.)
NetFlowFlow monitoringTraffic analysisNetwork visibility - Question #398Infrastructure
Refer to the exhibit. Which type of antenna is show on the radiation patterns?
AntennasRadiation PatternsWireless NetworkingDipole Antenna - Question #399Security
Which protocol is implemented to establish secure control plane adjacencies between Cisco SD- WAN nodes?
SD-WANControl PlaneDTLSSecurity Protocols - Question #400Architecture
What is the recommended MTU size for a Cisco SD-Access Fabric?
Cisco SD-AccessFabric MTUVXLANNetwork Design - Question #401Virtualization
What Is the process for moving a virtual machine from one host machine to another with no downtime?
live migrationvirtual machine managementhypervisorzero downtime - Question #402Infrastructure
What is the wireless received signal strength indicator?
WirelessRSSISignal StrengthdBm - Question #403Infrastructure
What is the calculation that is used to measure the radiated power of a signal after it has gone through the radio, antenna cable, and antenna?
EIRPRF powerAntenna systemsWireless fundamentals - Question #404Infrastructure
When does a stack master lose its role?
Switch StackingStackWiseHigh AvailabilityMaster Election - Question #405None
Which effect of configuring the passive-interface S0/0 command under the EIGRP routing process is true?
EIGRPPassive InterfaceRouting Protocol Configuration - Question #406Architecture
Which controller is capable of acting as a STUN server during the onboarding process of Edge devices?
Cisco SD-WANvBondSTUN serverDevice onboarding