Cisco Real Dumps Practice Exam Questions by Dumpswarp

Implementing Cisco Enterprise Network Core Technologies (350-401 ENCOR) Questions and Answers

Question 1

What are two benefits of using Cisco TrustSec? (Choose two.)

Options:

unknown file analysis using sandboxing

advanced endpoint protection against malware

end-to-end traffic encryption

simplified management of network access

consistent network segmentation

Question 2

Drag and drop the wireless elements on the left to their definitions on the right.

Options:

Question 3

What happens when a FlexConnect AP changes to standalone mode?

Options:

All client roaming continues to work.

All controller-dependent activities stop working except the DFS.

Only clients on central switching WLANs stay connected.

All clients on all WLANs are disconnected.

Question 4

Drag and drop the DHCP messages that are exchanged between a client and an AP into the order they are exchanged on the right.

Options:

Question 5

An engineer configures a WLAN with fast transition enabled Some legacy clients fail to connect to this WLAN Which feature allows the legacy clients to connect while still allowing other clients to use fast transition based on then OLTIs?

Options:

over the DS

adaptive R

802.11V

802.11k

Question 6

Refer to the exhibit. What is achieved by this Python script?

Options:

It configures access list statements

It reads access list statements into a dictionary list

It displays access list statements on a terminal screen.

It converts access list statements to a human-readable format.

Question 7

When does a Cisco StackWise primary switch lose its role?

Options:

when a stack member fails

when the stack primary is reset

when a switch with a higher priority is added to the stack

when the priority value of a stack member is changed to a higher value

Question 8

Drag and drop the command snippets from the right onto the boxes to create an EEM applet that will enable interface LoopbackO when the logging message 'Interface LoopbackO. changed state to administratively down" is received. Not all commands are used and some commands are used more than once.

Options:

Question 9

An engineer measures the Wi-Fi coverage at a customer site. The RSSI values are recorded as follows:

•LocationA -72dBm

• Location B:-75 dBm

• Location C; -65 dBm

• Location D -80 dBm

Which two statements does the engineer use to explain these values to the customer? (Choose two.)

Options:

The signal strength at location B is 10 dB better than location C.

The signal strength at location C is too weak to support web surfing

Location D has the strongest RF signal strength.

The RF signal strength at location B is 50% weaker than location A.

The RF signal strength at location C is 10 times stronger than location B

Question 10

Which architectural component enables a zero-trust security model?

Options:

management plane

plug-and-play

data plane

control plane

Question 11

Which method is used by an AP to join HA controllers and is configured in NVRAM?

Options:

Primary/Secondary- Tertiary/Backup

stored WLC information

DNS

IP Helper Addresses

Question 12

Drag and drop the code snippets from the bottom onto the blanks in the script to convert a Python object into a JSON string. Not all options are used

Options:

Question 13

A wireless network engineer must configure a WPA2+WPA3 policy with the Personal security type. Which action meets this requirement?

Options:

Configure the GCMP256 encryption cipher.

Configure the CCMP128 encryption cipher.

Configure the GCMP128 encryption cipher.

Configure the CCMP256 encryption cipher.

Question 14

Which protocol does Cisco Catalyst Center (formerly DNA Center) SDK use to discover the topology of non-Cisco devices in a network?

Options:

CDP

LLDP

Telnet

SSH

Question 15

What is one advantage of using a data modeling language to develop an API client application?

Options:

Increase in compatibility

easier feature extensibility

stronger security properties

lower resource requirements

Question 16

What is the measure of the difference between the received signal and the noise floor in a wireless environment?

Options:

XOR

RSSI

RRM

SNR

Question 17

Which nodes require VXLAN encapsulation support In a Cisco SD-Access deployment?

Options:

core nodes

distribution nodes

border nodes

aggregation nodes

Question 18

Refer to the exhibit. An engineer must adjust the configuration so that Router A becomes the active router. Which commands should be applied to router A? (Choose two)

Options:

vrrp 1 priority 90

vrrp 1 timers advertise 1

vrrp lip 10.1.0.11

ip address 10.1.0.11 255.0.0.0

vrrp 1 priority 120

Question 19

Which device is responsible for finding EID-to-RLOC mappings when traffic is sent to a LISP-capable site?

Options:

ingress tunnel router

map resolver

egress tunnel router

map server

Question 20

What is a TLOC in a Cisco SD-WAN deployment?

Options:

value that identifies a specific tunnel within the Cisco SD-WAN overlay

identifier that represents a specific service offered by nodes within the Cisco SD-WAN overlay

attribute that acts as a next hop for network prefixes

component set by the administrator to differentiate similar nodes that offer a common service

Question 21

What is one primary REST security design principle?

Options:

fail-safe defaults

password hash

adding a timestamp in requests

OAuth

Question 22

A network administrator is preparing a Python script to configure a Cisco IOS XE-based device on the network. The administrator is worried that colleagues will make changes to the device while the script is running. Which operation of the NC client manager prevents colleagues from making changes to the devices while the script is running?

Options:

m.freeze(config-running')

m.freeze(target-running')

m.lock(config='running')

m.lock(target-running')

Question 23

Drag and drop the characteristics from the left onto the corresponding orchestration tool on the right.

Options:

Question 24

Refer to the exhibit. Drag and drop the snippets into the RESTCONF request to form the request that returns this response. Not all options are used.

Options:

Question 25

A customer wants to use a single SSID to authenticate loT devices using different passwords. Which Layer 2 security type must be configured in conjunction with Cisco ISE to achieve this requirement?

Options:

Identity PSK

Fast Transition

Central Web Authentication

Cisco Centralized Key Management

Question 26

What is required for a VXLAN tunnel endpoint to operate?

Options:

a VXLAN tunnel endpoint identifier

at least one Layer 2 interface and one Layer 3 interlace

at least one IP for the transit network and one IP for endpoint connectivity

a VXLAN network identifier

Question 27

Which action reduces sticky clients in dense RF environments?

Options:

Decrease radio channel widths to 40 MHz.

Increase the mandatory minimum data rates.

Decrease the mandatory minimum data rates.

Increase radio channel widths to 160 MHz.

Question 28

What is the recommended minimum SNR for data applications on wireless networks?

Options:

Question 29

Which tag defines the properties to be applied to each specific WLAN?

Options:

RF tag

policy tag

AP tag

site tag

Question 30

What is an advantage of utilizing data models in a multivendor environment?

Options:

facilitating a unified approach to configuration and management

improving communication security with binary-encoded protocols

lowering CPU load incurred to managed devices

removing the distinction between configuration and runtime state data

Question 31

Which A record type should be configured for access points to resolve the IP address of a wireless LAN controller using DNS?

Options:

CISCO.CONTROLLER.Iocaldomain

CISCO.CAPWARCONTROLLERJocaldomain

CISCO-CONTROLLER.Iocaldomain

CISCO-CAPWAP-CONTROLLER.Iocaldomain

Question 32

In a Cisco SD-Access network architecture, which access layer cabling design is optimal for the underlay network?

Options:

Switches are cross-finned at the same layer and have a single connection to each upstream distribution device

Switches are connected to each upstream distribution and core device.

Switches are connected to each upstream distribution device.

Switches are cross-linked to devices at the same layer and at the upstream and downstream devices.

Question 33

Refer to the exhibit.

Which EEM script generates a critical-level syslog message and saves a copy of the running configuration to the bootflash when an administrator saves the running configuration to the startup configuration?

Options:

Option A

Option B

Option C

Option D

Question 34

Refer to the exhibit.

Which JSON syntax is derived from this data?

Options:

Option A

Option B

Option C

Option D

Question 35

Which mobility role is assigned to a client in the client table of the new controller after a Layer 3 roam?

Options:

anchor

foreign

mobility

transparent

Question 36

Which two mechanisms are used with OAuth 2.0 for enhanced validation? (Choose two.)

Options:

custom headers

authentication

authorization

request management

accounting

Question 37

What are two best practices when designing a campus Layer 3 infrastructure? (Choose two.)

Options:

Summarize routes from the aggregation layer toward the core layer.

Summarize from the access layer toward the aggregation layer.

Configure passive-interface on nontransit links.

Implement security features at the core.

Tune Cisco Express Forwarding load balancing hash for ECMP routing.

Question 38

Which feature provides data-plane security for Cisco Catalyst SD-WAN networks'?

Options:

IPsec

SSH

IPS

TLS/DTLS

Question 39

Which solution should be used in a high-density wireless environment to increase bandwidth for each user?

Options:

Increase antenna size.

Increase the cell size of each AP.

Increase the mandatory minimum data rate.

Increase TX power.

Question 40

Which definition describes JWT in regard to REST API security?

Options:

an encrypted JSON token that is used for authentication

an encrypted JSON token that is used for authorization

an encoded JSON token that is used to securely exchange information

an encoded JSON token that is used for authentication

Question 41

Drag and drop the characteristics from the left onto the orchestration tools they describe on the right.

Options:

Question 42

What does a YANG model provide?

Options:

standardized data structure independent of the transport protocols

creation of transport protocols and their interaction with the OS

user access to interact directly with the CLI of the device to receive or modify network configurations

standardized data structure that can be used only with NETCONF or RESTCONF transport protocols

Question 43

Refer to the exhibit. What is determined from the output?

Options:

10.0.0.100 is managed by Cisco Catalyst Center (formerly DNA Center).

The URL for the second query is syntactically incorrect.

The authentication for the second query fails.

10.0.0.200 is known to DNA Center, but its ID is an empty string.

Question 44

What is the structure of a JSON web token?

Options:

header and payload

three parts separated by dots: version, header, and signature

payload and signature

three parts separated by dots: header, payload. and signature

Question 45

Refer to the exhibit. The existing configuration must be updated to terminate all EXEC sessions after 120 minutes. Which command set should be applied?

Options:

line vty 0 15session-limit 120

line vty 0 15exec-timeout 120

line vty 0 15absolute-timeout 120

line vty 0 15session-timeout 120

Question 46

Drag and drop the automation characteristics from the left to the corresponding tools on the right.

Options:

Question 47

Which framework is used for third-party authorization?

Options:

API keys

custom tokens

OAuth

SOAP

Question 48

In a Cisco SD-Access wireless architecture, which device manages endpoint ID to edge node bindings?

Options:

fabric control plane node

fabric edge node

fabric border node

fabric wireless controller

Question 49

Which type of API enables Cisco Catalyst Center (formerly DNA Center) to focus on outcome instead of the individual steps that are required to achieve the outcome?

Options:

southbound Multivendor Support

westbound Integration

northbound Intent

eastbound Events and Notifications

Question 50

What is the calculation that is used to measure the radiated power of a signal after it has gone through the radio, antenna cable, and antenna?

Options:

EIRP

dBm

dBi

Question 51

Drag and drop the snippets onto the blanks within the code to construct a script that brings up the failover Ethernet port if the primary port goes down and also shuts down the failover port when the primary returns to service. Not all options are used.

Options:

Question 52

Which tag defines the roaming domain and properties of an AP deployment?

Options:

RF tag

policy tag

site tag

AP tag

Question 53

An engineer must configure a new WLAN that supports 802.11r and requires users to enter a passphrase. What must be configured to support this requirement?

Options:

802.1XandSUITEB-1X

FT PSK and Fast Transition

802.1X and Fast Transition

FTPSKandSUITEB-1X

Question 54

Refer to the exhibit.

A client requests a new SSID that will use web-based authentication and external RADIUS servers. Which Layer 2 security mode must be selected?

Options:

Static WEP

WPA2 + WPA3

None

WPA + WPA2

Question 55

Which technology collects location information through data packets received by the APs instead of using mobile device probes?

Options:

detect and locate

FastLocate

hyperlocation

RF fingerprinting

Question 56

An engineer is implementing a new SSID on a Cisco Catalyst 9800 Series WLC that must be broadcast on 6 GHz radios. Users will be required to use EAP-TLS to authenticate. Which wireless Layer 2 security method is required?