Cisco Real Dumps Practice Exam Questions by Dumpswarp

Implementing Cisco Enterprise Network Core Technologies (350-401 ENCOR) Questions and Answers

Question 1

Which function does a Cisco SD-Access extended node perform?

Options:

in charge of establishing Layer 3 adjacencies with nonfabric unmanaged node

performs tunnelling between fabric and nonfabric devices to route traffic over unknown networks

provides fabric extension to nonfabric devices through remote registration and configuration

used to extend the fabric connecting to downstream nonfabric enabled Layer 2 switches

Question 2

What is the purpose of a data modeling language?

Options:

to establish a framework to process data by using an object-oriented programming approach

to specify the rules for transcoding between text and binary data encodings

to standardize the procedures that are executed when parsing sent and received data

to describe the structure and meaning of exchanged data

Question 3

What is a client considered when it is in web authentication state and roams between two controllers with mobility tunnels?

Options:

anchor

mobile

foreign

new

Question 4

A system must validate access rights to all its resources and must not rely on a cached permission matrix. If the access level to a given resource is revoked but is not reflected in the permission matrix, the security is violates Which term refers to this REST security design principle?

Options:

economy of mechanism

complete mediation

separation of privilege

least common mechanism

Question 5

Refer to the exhibit. POSTMAN is showing an attempt to retrieve network device information from Cisco Catalyst Center (formerly DNA Center) API. What is the issue?

Options:

The token has expired

The URI string is incorrect

Authentication has failed

The JSON payload contains the incorrect UUID

Question 6

Refer to the exhibit. An engineer deployed a wireless QoS setting for a new building within a campus. All network devices support 802.1p priority tags. What can be determined from the WLC settings?

Options:

The WLC configuration prioritizes traffic based on access group assignment.

The WLC uses the Platinum, Gold, Silver, and Bronze levels for traffic classification based on priority.

The WLC configuration inherits DSCP values from an upstream AP.

The WLC configuration maps user data ToS level priorities to IP precedence levels.

Question 7

In Cisco CatalystCenter(formerly DNA Center) Inventory, the Software Version of a networkdevice displays a status of OUTDATED. What does It me?

Options:

There is a later software version available on Cisco Catalyst Center (formerly DNA Center).

The current software image does not match the selected Golden image for this type of network device.

The current type of software image does not match the type of the network device.

There is a later software version available at www.cisco.com website.

Question 8

Drag and drop the solutions that comprise Cisco Cyber Threat Defense from the left onto the objectives they accomplish on the right.

Options:

Question 9

Which component transports data plane traffic across a Cisco SD-WAN network?

Options:

vSmart

vManage

cEdge

vBond

Question 10

Which configuration enables a Cisco router lo send information to a TACACS+ server for individual EXEC commands associated with privilege level 15?

Options:

Router(config)# aaa accounting commands 15 default start-stop group tacacs+

Router(config)# aaa authorization exec default group tacacs+

Router(config)# aaa authorization commands 15 default group tacacs+

Router(config)# aaa accounting exec default start-stop group tacacs+

Question 11

Which next generation firewall feature supports separate security services for multiple departments?

Options:

state sharing mode to .trade the user data sessions and replication to the neighbor firewall using a failover link

Layer 3 mode with resource tracking capabilities and automatic configuration synchronization between the nodes and security zones

multicontext mode with specific logical or physical interface allocation within each context and grouped into security zones

virtual switch mode to provide traffic inspection capabilities for the flows entering the firewall and dropping packets based on policy configuration

Question 12

Which protocol is implemented to establish secure control plane adjacencies between Cisco Catalyst SD-WAN nodes?

Options:

IPsec

TLS

IKE

ESP

Question 13

Refer to the exhibit. Which router is elected as the VRRP primary virtual router?

Options:

Router D

Router A

Router C

Router B

Question 14

Refer to the exhibit. What is output by this code?

Options:

012345

(0.5)

01234

Question 15

Which Cisco Catalyst SD-WAN component is responsible for distributing data plane traffic policies?

Options:

vBond

vManage

vSmart

WAN edge

Question 16

Refer to the exhibit. The existing configuration must be updated to terminate all EXEC sessions after 120 minutes. Which command set should be applied?

Options:

line vty 0 15session-limit 120

line vty 0 15exec-timeout 120

line vty 0 15absolute-timeout 120

line vty 0 15session-timeout 120

Question 17

Which two new security capabilities are introduced by using a next-generation firewall at the Internet edge? (Choose two.)

Options:

integrated intrusion prevention

VPN

application-level inspection

stateful packet inspection

NAT

Question 18

Which RF value represents the decline of the RF signal amplitude over a given distance " ?

Options:

signal-to-noise ratio

received signal strength indicator

free space path loss

effective isotropic radiated power

Question 19

Drag and drop the threat defense solutions from the left onto their descriptions on the right.

Options:

Question 20

Which First Hop Redundancy Protocol should be used to meet a design requirements for more efficient default bandwidth usage across multiple devices?

Options:

GLBP

LCAP

HSRP

VRRP

Question 21

Refer to the exhibit. A customer asks an engineer to create a new secure WLAN to support only WPA3. Users must connect using a passphrase. Which encryption and key management configuration is required?

Options:

CCMP256 encryption with CCKM key management

GCMP128 encryption with OWE key management

CCMP128 encryption with SAE key management

GCMP256 encryption with 802.1x key management

Question 22

Which character formatting is required for DHCP Option 43 to function with current AP models?

Options:

ASCII

Hex

Base64

MD5

Question 23

Refer to the exibit. How should the programmer access the list of VLANs that are recevied via the API call?

Options:

VlanNames(0)

VlanName[Vlan1 ' ]

VlanName[ ' response ' ]

list(VlanNames)

Question 24

Which task Is mandatory when provisioning a device through the plug-and-play workflow in Cisco DNA Center?

Options:

site assignment

slack serial number assignment

golden image upgrade

template configuration application

Question 25

DRAG DROP. Drag and drop the tools from the left onto the agent types on the right.

Options:

Question 26

A network administrator prepares to deploy a new software-defined fabric across campuses. What is needed to ensure success for the overall design?

Options:

A fully meshed Layer 2 topology

A fully meshed Layer 3 topology

A point-to-point Layer 3 underlay network with jumbo frames enabled

A point-to-point Layer 2 network with LACP between devices for redundancy

Question 27

Which nodes require VXLAN encapsulation support In a Cisco SD-Access deployment?

Options:

core nodes

distribution nodes

border nodes

aggregation nodes

Question 28

Which method creates an EEM applet policy that is registered with EEM and runs on demand or manually?

Options:

event manager applet ondemandevent registeraction 1.0 syslog priority critical msg ' This is a message from ondemand '

event manager applet ondemandevent manualaction 1.0 syslog priority critical msg ' This is a message from ondemand '

event manager applet ondemandevent noneaction 1.0 syslog priority critical msg ' This is a message from ondemand '

event manager applet ondemandaction 1.0 syslog priority critical msg ' This is a message from ondemand '

Question 29

What is a benefit of MACsec in a multilayered LAN network design?

Options:

There is no requirement to run IEEE 802.1X when MACsec is enabled on a switch port.

Layer 2 trunk links between switches can be secured.

Application flows between hosts on the LAN to remote destinations can be encrypted.

Layer 3 links between switches can be secured.

Question 30

When using a Cisco Catalyst 9800 Series WLC, which tag/profile can be applied to APs to change the mode to FlexConnect in a specific location?

Options:

policy tag

site tag

AP join profile

flex profile

Question 31

What is YANG used for?

Options:

scraping data via CLI

processing SNMP read-only polls

describing data models

prowling a transport for network configuration data between client and server

Question 32

What is the role of the vSmart controller in a Cisco Catalyst SD-WAN environment?

Options:

It is the centralized network management system.

It manages the data plane.

It manages the control plane.

It performs authentication and authorization.

Question 33

What is the purpose of data modeling languages?

Options:

to describe a data schema convertible into any data encoding format

to specify algorithms necessary to decode binary-encoded protocol data units

to translate encoded data for interoperability between different CPU architectures

to provide a framework to describe data flow patterns in networks

Question 34

Which two pieces of information are necessary to compute SNR? (Choose two.)

Options:

EIRP

noise floor

antenna gain

RSSI

transmit power

Question 35

Which action is a function of VTEP in VXLAN?

Options:

tunneling traffic from IPv6 to IPv4 VXLANs

allowing encrypted communication on the local VXLAN Ethernet segment

encapsulating and de-encapsulating VXLAN Ethernet frames

tunneling traffic from IPv4 to IPv6 VXLANs

Question 36

Which device makes the decision for a wireless client to roam?

Options:

wireless client

Wireless LAN controller

access point

WCS location server

Question 37

What are two of benefits of using VXLAN? (Choose two.)

Options:

It allows for an unlimited number of segments.

It has fewer devices to manage.

It uses all available Layer 3 paths in the underlying network.

It allows multi-tenanted segmentation.

It uses a MAC in IP/TCP encapsulation technique.

Question 38

Which technology is the Cisco SD-Access control plane based on?

Options:

IS-IS

LISP

Cisco TrustSec

VXLAN

Question 39

Which WLC discovery method uses CISCO-CAPWAP-CONTROLLER as an identifier?

Options:

static configuration

DHCP

L3 broadcast

DNS

Question 40

Refer to the exhibit.

What does the snippet of code achieve?

Options:

It creates a temporary connection to a Cisco Nexus device and retrieves a token to be used for API calls.

It opens a tunnel and encapsulates the login information, if the host key is correct.

It opens an ncclient connection to a Cisco Nexus device and maintains it for the duration of the context.

It creates an SSH connection using the SSH key that is stored, and the password is ignored.

Question 41

What is the JSON syntax that is formed from the data?

Options:

Make”:‘Gocar, “Model’: “Zoom”, “Features”: [“Power Windows”, “Manual Dnve”, “Auto AC”]}

' Make ”: “Gocar1, “Model”: “Zoom”, “Features”: [“Power Windows”, “Manual Drive”, “Auto AC”]

{“Make”: Gocar, “Model " : Zoom, “Features " : Power Windows, Manual Drive, Auto AC}

(“Make”:[ “Gocar”, “Model " : “Zoom " ], Features”: [“Power Windows " , “Manual Drive " , “Auto AC”]}

Question 42

Which protocol does Cisco Catalyst SD-WAN use to protect control plane communication?

Options:

OMP

STUN

DTLS

IPsec

Question 43

Drag and drop the command snippets from the right onto the blanks in the configuration to create an EEM applet that will enable interface Loopback0 and log a message when the logging message -Interface Loopback0. changed state to administratively down " is received. Not all commands are used.

Options:

Question 44

Why would an architect use an OSPF virtual link?

Options:

to allow a stub area to transit another stub area

to merge two existing Area 0s through a nonbackbone

to connect two networks that have overlapping private IP address space

to connect a nonbackbone area to Area 0 through another nonbackbone area

Question 45

Which solution simplifies management of secure access to network resources?

Options:

TrustSec to logically group internal user environments and assign policies

ISE to automate network access control leveraging RADIUS AV pairs

RFC 3580-based solution to enable authenticated access leveraging RADIUS and AV pairs

802.1AE to secure communication in the network domain

Question 46

Which action is a LISP Map Resolver responsible for?

Options:

forwarding user data traffic

accepting map-request messages from ITRs

finding EID-to-RLOC mappings

accepting registration requests from ETRs

Question 47

Which measurement is used from a post wireless survey to depict the cell edge of the access points?

Options:

RSSI

SNR

Noise

CCI

Question 48

What are two benefits of virtualizing the server with the use of VMs in a data center environment? (Choose two.)

Options:

smaller Layer 2 domain

speedy deployment

increased security

reduced IP and MAC address requirements

reduced rack space, power, and cooling requirements

Question 49

Refer to the exhibit. Which action results from executing the Python script?

Options:

display the unformatted output of a command that is entered on that device

display the output of a command that is entered on that device in a single line

SSH to the IP address that is manually entered on that device

display the output of a command that is entered on that device

Question 50

Refer to the exhibit.

An engineer must modify the access control list EGRESS to allow all IP traffic from subnet 10.1.10.0/24 to 10.1.2.0/24. The access control list is applied in the outbound direction on router interface GigabitEthemet 0/1. Which configuration commands can the engineer use to allow this traffic without disrupting existing traffic flows?

Options:

Option A

Option B

Option C

Option D

Question 51

What is one primary REST security design principle?

Options:

fail-safe defaults

password hash

adding a timestamp in requests

OAuth

Question 52

In a Cisco SD-Access solution, what is the role of a fabric edge node?

Options:

to connect the fusion router to the SD-Access fabric

to connect wired endpoints to the SD-Access fabric

to advertise fabric IP address space to external networks

to connect external Layer 3 networks to the SD-Access fabric

Question 53

What is one role of an AP join profile on a Cisco wireless network?

Options:

To allocate IP addresses to APs.

To provide the settings and credentials that allow APs to authenticate to the network.

To allocate network resources dynamically based on demand.

To manage the radio frequency settings in different areas.

Question 54

Refer to the exhibit. What is the output of this code?

Options:

Option A

Option B

Option C

Option D

Question 55

What is the VXLAN network identifier used to identify?

Options:

network tunnel interface

IP subnet

virtual tunnel endpoint

broadcast domain

Question 56

Refer to the exhibit. As part of the preparation for network automation, a client network is deployed with on-box Python. The test script fails to convert the output type from a string value to an object. Which line of code enables the output to be printed in JSON object format?

Options:

json_final = json.loads(json_data)

print(json_final[ " TABLE_intf " ][ " ROW_intf " ][0] [ " prefix " ])

From cli import json

cmd1 = ' show ip int brief | json '

Question 57

Which lag/profile on a Cisco Catalyst 9800 Series WLC must be modified to allow Cisco ISE to dynamically assign VLANs to users on an 802.1X-based SSID?

Options:

interface lag

site tag

WLAN profile

policy profile

Question 58

Which method ensures the confidentiality of data exchanged over a REST API?

Options:

Use TLS to secure the underlying HTTP session.

Use me POST method Instead or URL-encoded GET to pass parameters.

Deploy digest-based authentication to protect the access to the API.

Encode sensitive data using Base64 encoding.

Question 59

An engineer is installing a new pair of routers in a redundant configuration. Which protocol ensures that traffic is not disrupted in the event of a hardware failure?

Options:

HSRPv1

GLBP

VRRP

HSRPv2

Question 60

Refer to the exhibit. Which result does the python code achieve?

Options:

The code encrypts a base64 decrypted password.

The code converts time to the " year/month/day " time format.

The code converts time to the yyyymmdd representation.

The code converts time to the Epoch LINUX time format.

Question 61

Which protocol does Cisco SD-WAN uso to protect control plane communication?

Options:

iPsec

DTLS

STUN

OMP

Question 62

An engineer must create an EEM script to enable OSPF debugging in the event the OSPF neighborship goes down. Which script must the engineer apply?

Options:

event manager applet ENABLE_OSPF_DEBUGevent syslog pattern " %OSPF-1-ADJCHG: Process 5. Nbr 1.1.1.1 on SerialO/0 from FULL to DOWN " action 1.0 cli command " debug ip ospf event " action 2.0 cli command " debug ip ospf adj " action 3.0 syslog priority informational msg " ENABLE_OSPF_DEBUG

event manager applet ENABLEOSPFDEBUGevent syslog pattern " %OSPF-5-ADJCHG: Process 5, Nbr 1.1.1.1 on SerialO/0 from LOADING to FULL " action 1.0 cli command " debug ip ospf event " action 2.0 cli command " debug ip ospf adj " action 3.0 syslog priority informational msg " ENABLE JDSPF_DEBUG "

event manager apple! ENABLE OSPFDEBUGevent syslog pattern " %OSPF-5-ADJCHG: Process 5. Nbr 1.1.1.1 on SerialO/0 from LOADING to FULL " action 1.0 cli command " enable " action 2.0 cli command " debug ip ospf event " action 3.0 cli command " debug ip ospf adj " action 4.0 syslog priority informational msg " ENABLE_OSPFJ} EBUG "

event manager applet ENABLE_OSPF_DEBUGevent syslog pattern " %OSPF-5-ADJCHG: Process 6. Nbr 1.1.1.1 on SerialO/0 from FULL to DOWN " action 1.0 cli command " enable " action 2.0 cli command " debug ip ospf event " action 3.0 cli command " debug ip ospf adj " action 4.0 syslog priority informational msg " ENABLE_OSPF_DEBUG ' *

Question 63

Why is a Type 1 hypervisor more efficient than a Type 2 hypervisor?

Options:

Type 1 hypervisor is the only type of hypervisor that supports hardware acceleration techniques.

Type 1 hypervisor runs directly on the physical hardware of the host machine without relying on the underlying OS.

Type 1 hypervisor enables other operating systems to run on it.

Type 1 hypervisor relies on the existing OS of the host machine to access CPU, memory, storage, and network resources.

Question 64

A customer requests a design that includes GLBP as the FHRP. The network architect discovers that the members of the GLBP group have different throughput capabilities. Which GLBP load balancing method supports this environment?