Cisco Real Dumps Practice Exam Questions by Dumpswarp

Implementing Cisco Enterprise Network Core Technologies (350-401 ENCOR) Questions and Answers

Question 1

Which language defines the structure or modelling of data for NETCONF and RESTCONF?

Options:

JSON

YANG

XML

YAML

Question 2

In a high-density AP environment, which feature can be used to reduce the RF cell size and not demodulate radio packets above a given threshold?

Options:

RX-SOP

FRA

80211k

RRM

Question 3

Drag and drop the configuration management tools from the left onto the configuration styles they use on the right

Options:

Question 4

Refer to lhe exhibit. An engineer deploys a script to retrieve the running configuration from a NETCONF-capable CiscoIOSXE device that Is configured with default settings. The script fails. Which configuration must be applied to retrieve the configuration using NETCONF?

Options:

Option A

Option B

Option C

Option D

Question 5

What is the purpose of a data modeling language?

Options:

to establish a framework to process data by using an object-oriented programming approach

to specify the rules for transcoding between text and binary data encodings

to standardize the procedures that are executed when parsing sent and received data

to describe the structure and meaning of exchanged data

Question 6

What are two device roles in Cisco SD-Access fabric? (Choose two.)

Options:

core switch

vBond controller

edge node

access switch

border node

Question 7

What is a benefit of YANG modules?

Options:

tightly coupled models with encoding to improve performance

easier multivendor interoperability provided by common or industry models

avoidance of ecosystem fragmentation by having fixed modules that cannot be changed

single protocol and model coupling to simplify maintenance and support

Question 8

What is a characteristic of a virtual machine?

Options:

It shares the host OS kernel, binaries, and libraries

It is more resource efficient than a container

It provides an environment completely isolated from the host OS

It is more lightweight than a container

Question 9

What are two methods of ensuring that the multicast RPF check passes without changing the unicast routing table? (Choose two.)

Options:

disabling the interface of the router back to the multicast source

implementing MBGP

disabling BGP routing protocol

implementing static mroutes

implementing OSPF routing protocol

Question 10

Which feature is offered by the Cisco Advanced Malware Protection for Endpoints solution?

Options:

DNS Protection

NetFlow

Trustsec

File Sandboxing

Question 11

What is one characteristic of Cisco Catalyst Center (formerly DNA Center) and vManage northbound APIs?

Options:

They implement the NETCONF protocol.

They push configuration changes down to devices.

They exchange XML-formatted content.

They implement the RESTCONF protocol.

Question 12

Refer to the exhibit. Which python code snippet prints the descriptions of disabled interface only?

Options:

Option A

Option B

Option C

Option D

Question 13

Drag and drop the code snippets from the bottom onto the blanks in the Python script to convert a Python object into a JSON string. Not all options are used.

Options:

Question 14

In a campus network design, what are two benefits of using BFD for failure detection'? (Choose two.)

Options:

BFD speeds up routing convergence time

BFD provides path failure detection in less than a second

BFD provides fault tolerance by enabling multiple routers to appear as a single virtual router

BFD is an efficient way to reduce memory and CPU usage

BFD enables network peers to continue forwarding packets in the event of a restart

Question 15

When deploying a Cisco Unified Wireless solution what is a design justification for using a distributed WLC deployment model?

Options:

It reduces the number of WLCs that network administrators must support by locating them in a common location

It more evenly distributes MAC ARP and ND processing over multiple switches which helps with scalability

The number of wireless clients is low and the size of the physical campus is small

There are no latency concerns about LWAPP and CAPWAP tunnels traversing the campus core network

Question 16

Drag and drop the characteristics of Cisco Catalyst SD-WAN from the left onto the right. Not all options are used.

Options:

Question 17

Which language can be used to model configuration and state data?

Options:

JSON

XML

XDR

YANG

Question 18

Which NGFW mode block flows crossing the firewall?

Options:

Passive

Tap

Inline tap

Inline

Question 19

Which type of tunnel is required between two WLCs to enable intercontroller roaming?

Options:

LWAPP

CAPWAP

IPsec

mobility

Question 20

Which next generation firewall feature supports separate security services for multiple departments?

Options:

state sharing mode to .trade the user data sessions and replication to the neighbor firewall using a failover link

Layer 3 mode with resource tracking capabilities and automatic configuration synchronization between the nodes and security zones

multicontext mode with specific logical or physical interface allocation within each context and grouped into security zones

virtual switch mode to provide traffic inspection capabilities for the flows entering the firewall and dropping packets based on policy configuration

Question 21

What is provided by the Stealthwatch component of the Cisco Cyber Threat Defense solution?

Options:

real-time threat management to stop DDoS attacks to the core and access networks

malware control

real-time awareness of users, devices, and traffic on the network

dynamic threat control for web traffic

Question 22

Which function is performed by vSmart in the Cisco Catalyst SD-WAN architecture?

Options:

facilitation of NAT detection and traversal

redistribution between OMP and other routing protocols

distribution of IPsec keys

execution of localized policies

Question 23

What is a characteristic of the Cisco Catalyst Center (formerly DNA Center) Template Editor feature?

Options:

It facilitates software upgrades to network devices from a central point.

It facilitates a vulnerability assessment of the network devices.

It uses a predefined configuration through parameterized elements or variables.

It provides a high-level overview of the health of every network device.

Question 24

Which three methods does Cisco Catalyst Center (formerly DNA Center) use to discover devices? (Choose three.)

Options:

SNMP

a specified range of IP addresses

NETCONF

LLDP

ping

CDP

Question 25

What is used by vManage to interact withCiscoSD-WAN devices in the fabric?

Options:

northbound API

RESTCONF

Southbound API

IPsec

Question 26

An engineer must create an EEM applet that sends a syslog message in the event a change happens in the network due to trouble with an OSPF process. Which action should the engineer use?

event manager applet LogMessage

event routing network 172.30.197.0/24 type all

Options:

action 1 syslog send "OSPF ROUTING ERROR"

action 1 syslog pattern "OSPF ROUTING ERROR"

action 1 syslog write "OSPF ROUTING ERROR"

action 1 syslog msg "OSPF ROUTING ERROR"

Question 27

What is a characteristic of VXLAN?

Options:

It extends Layers 2 and Layer 3 overlay network over a Layer 2 underly.

It has a 12-byte packet header.

Its frame encapsulation is performed by MAC-in-UDP.

It uses TCP for transport

Question 28

An engineer is configuring local web authentication on a WLAN. The engineer chooses the Authentication radio button under the Layer 3 Security options for Web Policy. Which device presents the web authentication for the WLAN?

Options:

ISE server

local WLC

RADIUS server

anchor WLC

Question 29

In a Cisco SD-Access network architecture, which access layer cabling design is optimal for the underlay network?

Options:

Switches are cross-finned at the same layer and have a single connection to each upstream distribution device

Switches are connected to each upstream distribution and core device.

Switches are connected to each upstream distribution device.

Switches are cross-linked to devices at the same layer and at the upstream and downstream devices.

Question 30

Drag and drop the automation characteristics from the left to the corresponding tools on the right.

Options:

Question 31

Drag and drop the code snippets from the bottom onto the blanks in the code to construct a request that configures a deny rule on an access list?

Options:

Question 32

Drag and drop the code snippets from the bottom onto blanks m the Python script so that the program changes the IP address and saves It as a new JSON Me on the disk Not all options are used

Options:

Question 33

An engineer is configuring a new SSID to present users with a splash page for authentication. Which WLAN Layer 3 setting must be configured to provide this functionally?

Options:

CCKM

WPA2 policy

Local Policy

Web Policy

Question 34

Which method ensures the confidentiality of data exchanged over a REST API?

Options:

Use TLS to secure the underlying HTTP session.

Use me POST method Instead or URL-encoded GET to pass parameters.

Deploy digest-based authentication to protect the access to the API.

Encode sensitive data using Base64 encoding.

Question 35

Refer to the exhibit. The existing configuration must be updated to terminate all EXEC sessions after 120 minutes. Which command set should be applied?

Options:

line vty 0 15

session-limit 120

line vty 0 15

exec-timeout 120

line vty 0 15

absolute-timeout 120

line vty 0 15

session-timeout 120

Question 36

Refer to the exhibit A network engineer must use a Python script lo convert data received from a network device. Which type of data is printed to the console when the script runs?

Options:

dictionary with a key-value pair

list of lists

list of strings

tuple list

Question 37

What is one method for achieving REST API security?

Options:

using a MD5 hash to verify the integrity

using built-in protocols known as Web Services Security

using HTTPS and TLS encryption

using a combination of XML encryption and XML signatures

Question 38

What is a characteristic of Layer 3 roaming?

Options:

Clients must obtain a new IP address when they roam between APs.

It provides seamless roaming between APs that are connected to different Layer 3 networks and different mobility groups.

It is only supported on controllers that run SSO.

It provides seamless client roaming between APs in different Layer 3 networks but within the same mobility group.

Question 39

Which deployment option of Cisco NGFW provides scalability?

Options:

tap

inline tap

high availability

clustering

Question 40

An engineer must create a new SSID on a Cisco 9800 wireless LAN controller. The client has asked to use a pre-shared key for authentication. Which profile must the engineer edit to achieve this requirement?

Options:

WLAN

Policy

Flex

Question 41

What is the VXLAN network identifier used to identify?

Options:

network tunnel interface

IP subnet

virtual tunnel endpoint

broadcast domain

Question 42

What is the JSON syntax that is formed the data?

Options:

Option A

Option B

Option C

Option D

Question 43

What are two characteristics of a directional antenna? (Choose two.)

Options:

high gain

receive signals equally from all directions

commonly used to cover large areas

provides the most focused and narrow beam width

low gain

Question 44

Which security feature does stateless authentication and authorization use for REST API calls?

Options:

OAuth 2 tokens

cookie-based session authentication

API keys

SSL/TLS certificate encryption

Question 45

Which AP mode allows an engineer to scan configured channels for rogue access points?

Options:

sniffer

monitor

bridge

local

Question 46

Which IEEE standard provides the capability to permit or deny network connectivity based on the user or device identity?

Options:

802. 1d

802.1x

802.1q

802.1w

Question 47

Refer to the exhibit. A network engineer must be notified when a user switches to configuration mode. Which script should be applied to receive an SNMP trap and a critical-level log message?