Cisco 350-401 today updated questions - Verified by Cisco Experts

Implementing Cisco Enterprise Network Core Technologies (350-401 ENCOR) Questions and Answers

Question 1

Which lag/profile on a Cisco Catalyst 9800 Series WLC must be modified to allow Cisco ISE to dynamically assign VLANs to users on an 802.1X-based SSID?

Options:

interface lag

site tag

WLAN profile

policy profile

Question 2

Refer to the exhibit. What is the value of the variable list after the code is run?

Options:

[1,2.1.2.1,2]

[1,2] * 3

[3,6]

[1,2]. [1.2]. [1,2]

Question 3

Drag and drop the snippets onto the blanks within the code to construct a script that brings up the failover Ethernet port if the primary port goes down and also shuts down the failover port when the primary returns to service. Not all options are used.

Options:

Question 4

Why would a network engineer configure an AP in SE-Connect mode?

Options:

to redirect WLAN traffic to an endpoint for protocol analysis

to monitor the VLAN traffic for rogue APs

to connect the wired LAN with the wireless infrastructure

to analyze the RF spectrum surrounding the AP

Question 5

Refer to the exibit. How should the programmer access the list of VLANs that are recevied via the API call?

Options:

VlanNames(0)

VlanName[Vlan1']

VlanName['response']

list(VlanNames)

Question 6

What is used to measure the total output energy of a Wi-Fi device?

Options:

dBi

EIRP

dBm

Question 7

Which access control feature does MAB provide?

Options:

user access based on IP address

B slows devices to bypass authentication

network access based on the physical address of a device

simultaneous user and device authentication

Question 8

Which AP mode allows an engineer to scan configured channels for rogue access points?

Options:

sniffer

monitor

bridge

local

Question 9

Which features does Cisco EDR use to provide threat detection and response protection?

Options:

containment, threat intelligence, and machine learning

firewalling and intrusion prevention

container-based agents

cloud analysts and endpoint firewall controls

Question 10

Which two actions are recommended as security best practices to protect REST API? (Choose two.)

Options:

Use SSL for encryption.

Enable out-of-band authentication.

Enable dual authentication of the session.

Use TACACS+ authentication.

Use a password hash.

Question 11

In a campus network design, what are two benefits of using BFD for failure detection'? (Choose two.)

Options:

BFD speeds up routing convergence time

BFD provides path failure detection in less than a second

BFD provides fault tolerance by enabling multiple routers to appear as a single virtual router

BFD is an efficient way to reduce memory and CPU usage

BFD enables network peers to continue forwarding packets in the event of a restart

Question 12

Where is radio resource management performed in a Cisco SD-Access wireless solution?

Options:

DNA Center

wireless controller

Cisco CMX

control plane node

Question 13

What is the calculation that is used to measure the radiated power of a signal after it has gone through the radio, antenna cable, and antenna?

Options:

EIRP

dBm

dBi

Question 14

Refer to the exhibit. Which Python snippet stores the data structure of the device in JSON format?

Options:

A close up of a text AI-generated content may be incorrect.

A close up of a logo AI-generated content may be incorrect.

A close up of a text AI-generated content may be incorrect.

A black text on a white background AI-generated content may be incorrect.

Question 15

What is a characteristic of the Cisco Catalyst Center (formerly DNA Center) Template Editor feature?

Options:

It facilitates software upgrades to network devices from a central point.

It facilitates a vulnerability assessment of the network devices.

It uses a predefined configuration through parameterized elements or variables.

It provides a high-level overview of the health of every network device.

Question 16

Which language defines the structure or modelling of data for NETCONF and RESTCONF?

Options:

JSON

YANG

XML

YAML

Question 17

A client device roams between wireless LAN controllers that are mobility peers, Both controllers have dynamic interface on the same client VLAN which type of roam is described?

Options:

intra-VLAN

inter-controller

intra-controller

inter-subnet

Question 18

What is provided by the Stealthwatch component of the Cisco Cyber Threat Defense solution?

Options:

real-time threat management to stop DDoS attacks to the core and access networks

malware control

real-time awareness of users, devices, and traffic on the network

dynamic threat control for web traffic

Question 19

An engineer must protect their company against ransom ware attacks. Which solution allows the engineer to block the execution stage and prevent file encryption?

Options:

Use Cisco Firepower with Intrusion Policy and snort rules blocking SMB exploitation.

Use Cisco AMP deployment with the Malicious Activity Protection engine enabled.

Use Cisco AMP deployment with the Exploit Prevention engine enabled.

Use Cisco Firepower and block traffic to TOR networks.

Question 20

What is required for a VXLAN tunnel endpoint to operate?

Options:

a VXLAN tunnel endpoint identifier

at least one Layer 2 interface and one Layer 3 interlace

at least one IP for the transit network and one IP for endpoint connectivity

a VXLAN network identifier

Question 21

Drag and drop the configuration management tools from the left onto the configuration styles they use on the right

Options:

Question 22

Refer to the exhibit. Which configuration causes the traffic from PC-1 to the internet to use the link between CoreSW-1 and CoreSW-2 when both switches are up?

Options:

Question 23

Which technology collects location information through data packets received by the APs instead of using mobile device probes?

Options:

detect and locate

FastLocate

hyperlocation

RF fingerprinting

Question 24

Which action controls the maximum cell size in a high-density wireless environment?

Options:

Statically set TX power on access points to max.

Disable low data rates.

Set mandatory data rates.

Decrease TX power on access points.

Question 25

Which measurement is used from a post wireless survey to depict the cell edge of the access points?

Options:

RSSI

SNR

Noise

CCI

Question 26

Which Cisco Catalyst SD-WAN component is responsible for distributing data plane traffic policies?

Options:

vBond

vManage

vSmart

WAN edge

Question 27

Which tool functions in a push model, supports languages like Python or Ruby, and does not require an agent to be installed per host?

Options:

Puppet

Ansible

Saltstack

Chef

Question 28

Refer to the exhibit. A POST /discovery request spawns an asynchronous task. After querying for more information about the task, the Cisco DNA Center platform returns the REST API response. What is the status of the discovery task?

Options:

restarted

failed

stopped

successful

Question 29

Refer to the exhibit. Which HTTP request produced the REST API response that was returned by the Cisco Catalyst Center (formerly DNA Center) platform?

Options:

POST /auth/token

GET /network-device

GET /template-programmer/template/version/42a3df73-3ef4-49e2-b4f0-6927bbd4bf52

POST /discovery

Question 30

Which feature is available to clients using layer 2 roaming in a wireless infrastructure?

Options:

Room to a different wireless controller that is on o different subnet and maintain the same IP address

Associate to a new access point on a different wireless controller and change the IP address without connectivity interruption

Associate to a new access point on the same wireless controller and change the IP address without connectivity interruption

Roam to a different wireless controller that snares The same subnet and maintain the same IP address

Question 31

An engineer is configuring RADIUS-Based Authentication with EAP. MS-CHAPv2 is configured on a client device. Which outer method protocol must be configured on the ISE to support this authentication type?

Options:

EAP-TLS

EAP-FAST

LDAP

PEAP

Question 32

Which two sources cause interference for Wi-Fi networks? (Choose two.)

Options:

incandescent lights

DECT 6.0 cordless phone

mirrored wall

fish tank

900MHz baby monitor

Question 33

Which method requires a client to authenticate and has the capability to function without encryption?

Options:

open

WEP

WebAuth

PSK

Question 34

Which action reduces sticky clients in dense RF environments?

Options:

Decrease radio channel widths to 40 MHz.

Increase the mandatory minimum data rates.

Decrease the mandatory minimum data rates.

Increase radio channel widths to 160 MHz.

Question 35

In Cisco CatalystCenter(formerly DNA Center) Inventory, the Software Version of a networkdevice displays a status of OUTDATED. What does It me?

Options:

There is a later software version available on Cisco Catalyst Center (formerly DNA Center).

The current software image does not match the selected Golden image for this type of network device.

The current type of software image does not match the type of the network device.

There is a later software version available at www.cisco.com website.

Question 36

What is a client who is using 802.1x for authentication referred to as?

Options:

authenticator

policy enforcement point

NAC device

supplicant

Question 37

Which device is responsible for finding EID-to-RLOC mappings when traffic is sent to a LISP-capable site?

Options:

ingress tunnel router

map resolver

egress tunnel router

map server

Question 38

How is Layer 3 roaming accomplished in a unified wireless deployment?

Options:

An EoIP tunnel is created between the client and the anchor controller to provide seamless connectively as the client is associated with the new AP.

The client entry on the original controller is passed to the database on the new controller.

The new controller assign an IP address from the new subnet to the client.

The client database on the original controller is updated with the anchor entry, and the new controller database is updated with the foreign entry.

Question 39

To support new clients in the environment, an engineer must enable Fast Transition on the corporate WLAN. Which command must be applied on a Cisco Catalyst 9800 Series WLC?