350-401 Exam Questions Dumps, Selling Cisco Products
350-401 Cert Guide PDF 100% Cover Real Exam Questions
The Implementing Cisco Enterprise Network Core Technologies (350-401 ENCOR) exam covers a range of topics, including automation, network assurance, security, virtualization, and infrastructure. Candidates who pass 350-401 exam will demonstrate their understanding of these topics and their ability to design, implement, and troubleshoot enterprise networks.
Cisco 350-401 (Implementing Cisco Enterprise Network Core Technologies (350-401 ENCOR)) Exam is designed to test the knowledge and skills of IT professionals in implementing and managing enterprise network technologies. 350-401 exam is part of the Cisco Certified Network Professional (CCNP) Enterprise certification program, which is a comprehensive certification program that focuses on advanced skills needed to design, implement, and manage complex enterprise network solutions.
NEW QUESTION # 321
Refer to this output.
R1# *Feb 14 37:09:53.129: %LINEPROTO-5-UPDOWN: Line protocol on Interface GigabitEthernet0/1, changed state to up What is the logging severity level?
- A. critical
- B. notification
- C. emergency
- D. alert
Answer: B
NEW QUESTION # 322
Drag and drop the descriptions from the left onto the QoS components on the right.
Answer:
Explanation:
NEW QUESTION # 323 
Refer to the exhibit. A network engineer must load balance traffic that comes from the NAT Router and is destined to 10.10.110.10, to several FTP servers. Which two commands sets should be applied? (Choose two).
A)
B)
C)
D)
E)
- A. Option B
- B. Option C
- C. Option D
- D. Option E
- E. Option A
Answer: B,E
NEW QUESTION # 324
Which two protocols are used with YANG data models? (Choose two.)
- A. NFTCONF
YANG (Yet Another Next Generation) is a data modeling language for the definition of data sent over network management protocols such as the NETCONF and RESTCONF. - B. TLS
- C. SSH
- D. RESTCONF
- E. HTTPS
Answer: A,D
NEW QUESTION # 325
Drag and drop the characteristics from the left onto the orchestration tools that they describe on the right.
Answer:
Explanation:
NEW QUESTION # 326
When using TLS for syslog, which configuration allows for secure and reliable transportation of messages to its default port?
- A. logging host 10.2.3.4 vrf mgmt transport tcp port 6514
- B. logging host 10.2.3.4 vrf mgmt transport tcp port 514
- C. logging host 10.2.3.4 vrf mgmt transport udp port 6514
- D. logging host 10.2.3.4 vrf mgmt transport udp port 514
Answer: A
Explanation:
The TCP port 6514 has been allocated as the default port for syslog over Transport Layer Security (TLS).
NEW QUESTION # 327
Which statement about multicast RPs is true?
- A. By default, the RP is needed only to start new sessions with sources and receivers.
- B. By default, the RP is needed periodically to maintain sessions with sources and receivers.
- C. RPs are required for protocol independent multicast sparse mode and dense mode.
- D. RPs are required only when using protocol independent multicast dense mode.
Answer: A
Explanation:
Explanation/Reference: https://www.cisco.com/c/en/us/td/docs/ios/solutions_docs/ip_multicast/White_papers/rps.html
NEW QUESTION # 328
Which HTTP code must be returned to prevent the script form exiting?
- A. 0
- B. 1
- C. 2
- D. 3
Answer: A
NEW QUESTION # 329
Drag and drop the snippets onto the blanks within the code to construct a script that shows all logging that occurred on the appliance from Sunday until 9:00 p.m Thursday Not all options are used.
Answer:
Explanation:
NEW QUESTION # 330
Refer to the exhibit.
Which two commands ensure that DSW1 becomes root bridge for VLAN 10 and 20?
- A. spanning-tree mst 1 priority 1
- B. spanning-tree mst 1 priority 4096
- C. spanning-tree mst 1 root primary
- D. spanning-tree mstp vlan 10,20 root primary
- E. spanning-tree mst vlan 10,20 priority root
Answer: B,C
Explanation:
Explanation
From the second command output (show spanning-tree mst) we learn that MST1 includes VLANs 10 &
20.Therefore if we want DSW1 to become root bridge for these VLANs we need to set the MST 1 region to root ->The command "spanning-tree mst 1 root primary" can do the trick. In fact, this command runs a macro and setsthe priority lower than the current root.
Also we can see the current root bridge for these VLANs has the priority of 32769 (default value + sysid) so wecan set the priority of DSW1 to a specific lower value. But notice that the priority must be a multiple of
4096.
NEW QUESTION # 331
How does CEF switching differ from process switching on Cisco devices?
- A. CEF switching saves memory by sorting adjacency tables in dedicate memory on the line cards, and process switching stores all tables in the main memory
- B. CEF switching uses proprietary protocol based on IS-IS for MAC address lookup, and process switching uses in MAC address table
- C. CEF switching uses dedicated hardware processors, and process switching uses the main processor
- D. CEF switching uses adjacency tables built by the CDP protocol, and process switching uses the routing table
Answer: D
Explanation:
Cisco Express Forwarding (CEF) switching is a proprietary form of scalable switching intended to tackle the problems associated with demand caching. With CEF switching, the information which is conventionally stored in a route cache is split up over several data structures. The CEF code is able to maintain these data structures in the Gigabit Route Processor (GRP), and also in slave processors such as the line cards in the 12000 routers. The data structures that provide optimized lookup for efficient packet forwarding include:
The Forwarding Information Base (FIB) table - CEF uses a FIB to make IP destination prefix-based switching decisions. The FIB is conceptually similar to a routing table or information base. It maintains a mirror image of the forwarding information contained in the IP routing table. When routing or topology changes occur in the network, the IP routing table is updated, and these changes are reflected in the FIB. The FIB maintains next-hop address information based on the information in the IP routing table.
Because there is a one-to-one correlation between FIB entries and routing table entries, the FIB contains all known routes and eliminates the need for route cache maintenance that is associated with switching paths such as fast switching and optimum switching.
Adjacency table - Nodes in the network are said to be adjacent if they can reach each other with a single hop across a link layer. In addition to the FIB, CEF uses adjacency tables to prepend Layer 2 addressing information. The adjacency table maintains Layer 2 next-hop addresses for all FIB entries.
CEF can be enabled in one of two modes:
Central CEF mode - When CEF mode is enabled, the CEF FIB and adjacency tables reside on the route processor, and the route processor performs the express forwarding. You can use CEF mode when line cards are not available for CEF switching, or when you need to use features not compatible with distributed CEF switching.
Distributed CEF (dCEF) mode - When dCEF is enabled, line cards maintain identical copies of the FIB and adjacency tables. The line cards can perform the express forwarding by themselves, relieving the main processor - Gigabit Route Processor (GRP) - of involvement in the switching operation. This is the only switching method available on the Cisco 12000 Series Router.
dCEF uses an Inter-Process Communication (IPC) mechanism to ensure synchronization of FIBs and adjacency tables on the route processor and line cards.
For more information about CEF switching, see Cisco Express Forwarding (CEF) White Paper.
NEW QUESTION # 332
A network administrator is Implementing a routing configuration change and enables routing debugs to track routing behavior during the change. The logging output on the terminal is interrupting the command typing process. Which two actions can the network administrator take to minimize the possibility of typing commands incorrectly? (Choose two.)
- A. Configure the logging synchronous global configuration command
- B. Configure the logging delimiter feature
- C. Press the TAB key to reprint the command in a new line
- D. Configure the logging synchronous command under the vty
- E. increase the number of lines on the screen using the terminal length command
Answer: B,D
NEW QUESTION # 333
Which two characteristics define the Intent API provided by Cisco DNA Center? (Choose two.)
- A. business outcome oriented
- B. device-oriented
- C. procedural
- D. northbound API
- E. southbound API
Answer: A,D
NEW QUESTION # 334
Refer to the exhibit.
A network engineer must simplify the IPsec configuration by enabling IPsec over GRE using IPsec profiles. Which two configuration changes accomplish this? (Choose two).
- A. Remove all configuration related to crypto map from R1 and R2 and eliminate the ACL |>]
- B. Create an IPsec profile, associate the transform-set. and apply the profile to the tunnel interface.
- C. Apply the crypto map to the tunnel interface and change the tunnel mode to tunnel mode ipsec ipv4.
- D. Remove the crypto map and modify the ACL to allow traffic between 10.10.0.0/24 to 10.20.0.0/24.
- E. Create an IPsec profile, associate the transform-set ACL. and apply the profile to the tunnel interface
Answer: A,C
NEW QUESTION # 335
Refer to exhibit.
Refer to the exhibit. Clients report that they cannot connect to this SSID using the provided PSK. Which action will resolve this issue?
- A. Apply the correct interface to this WLAN.
- B. Apply the changes this SSID.
- C. Select the PSK under authentication key management.
- D. Define the correct Radio Policy.
Answer: A
NEW QUESTION # 336
Refer to the exhibit.
What is the result when a switch that is running PVST+ is added to this network?
- A. DSW2 operates in Rapid PVST+ and the new switch operates in PVST+
- B. Both switches operate in the Rapid PVST+ mode.
- C. Spanning tree is disabled automatically on the network
- D. Both switches operate in the PVST+ mode
Answer: A
Explanation:
From the output we see DSW2 is running in RSTP mode (in fact Rapid PVST+ mode as Cisco does not support RSTP alone). When a new switch running PVST+ mode is added to the topology, they keep running the old STP instances as RSTP (in fact Rapid PVST+) is compatible with PVST+.
NEW QUESTION # 337
Refer to the exhibit.
An engineer must ensure that all traffic leaving AS 200 will choose Link 2 as an entry point. Assuming that all BGP neighbor relationships have been formed and that the attributes have not been changed on any of the routers, which configuration accomplish task?
- A. Option B
- B. Option C
- C. Option D
- D. Option A
Answer: D
Explanation:
Explanation
R3 advertises BGP updates to R1 with multiple AS 100 so R3 believes the path to reach AS 200 via R3 is farther than R2 so R3 will choose R2 to forward traffic to AS 200.
NEW QUESTION # 338
Refer to the exhibit.
You have just created a new VRF on PE3. You have enabled debug
ip bgp vpnv4 unicast updates on PE1, and you can see the route in the debug, but not in the BGP VPNv4 table. Which two statements are true? (Choose two)
- A. After you configure route-target import 999:999 for a VRF on PE1, the route will be accepted
- B. After you configure route-target import 999:999 for a VRF on PE3, the route will be accepted
- C. PE1 will reject the route due to automatic route filtering
- D. address-family ipv4 vrf is not configured on PE3
- E. VPNv4 is not configured between PE1 and PE3
Answer: A,C
Explanation:
Explanation
Because some PE routers might receive routing information they do not require, a basic requirement is to be able to filter the MP-iBGP updates at the ingress to the PE router so that the router does not need to keep this information in memory.
The Automatic Route Filtering feature fulfills this filtering requirement. This feature is available by default on all PE routers, and no additional configuration is necessary to enable it. Its function is to filter automatically VPN-IPv4 routes that contain a route target extended community that does not match any of the PE's configured VRFs. This effectively discards any unwanted VPN-IPv4 routes silently, thus reducing the amount of information that the PE has to store in memory -> Answer 'PE1 will reject the route due to automatic route filtering' is correct.
Reference: MPLS and VPN Architectures Book, Volume 1
The reason that PE1 dropped the route is there is no "route-target import 999:999" command on PE1 (so we see the "DENIED due to: extended community not supported" in the debug) so we need to type this command to accept this route -> Answer 'After you configure route-target import 999:999 for a VRF on PE1, the route will be accepted' is correct.
NEW QUESTION # 339
Drag the drop the description from the left onto the routing protocol they describe on the right.
Answer:
Explanation:
Explanation
NEW QUESTION # 340
......
Cisco 350-401 Exam is a comprehensive test that requires a deep understanding of networking concepts and technologies. It consists of multiple-choice and simulation questions that are designed to evaluate the candidate's knowledge, skills, and problem-solving abilities. 350-401 exam is computer-based and can be taken at authorized Pearson VUE testing centers worldwide.
Pass 350-401 Exam - Real Questions and Answers: https://www.pass4surequiz.com/350-401-exam-quiz.html
Pass 350-401 Review Guide, Reliable 350-401 Test Engine: https://drive.google.com/open?id=1Q-0pkPuwOwaCkxFdSdn8VyKXAiE80Rvx