350-401 Exam PDF [2024] Tests Free Updated Today with Correct 1175 Questions
Cisco 350-401 Exam Preparation Guide and PDF Download
Cisco 350-401 ENCOR exam comprises of 350-401 exam dumps that include multiple-choice questions, drag-and-drop questions, and simulation questions. The duration of the exam is 120 minutes, and the passing score is 825 out of 1000. 350-401 exam can be taken at any Pearson VUE testing center, and it can also be taken online.
Cisco 350-401 (Implementing Cisco Enterprise Network Core Technologies) certification exam is a highly sought-after certification for IT professionals who want to demonstrate their expertise in implementing and managing enterprise level networks. 350-401 exam is designed to test the candidate's knowledge and skills related to Cisco enterprise network technologies, including network security, automation, virtualization, and infrastructure.
NEW QUESTION # 457
What NTP Stratum level is a server that is connected directly to an authoritative time source?
- A. Stratum 1
- B. Stratum 15
- C. Stratum 0
- D. Stratum 14
Answer: A
Explanation:
Explanation
The stratum levels define the distance from the reference clock. A
reference clock is a stratum 0 device that is assumed to be accurate and has little or no delay associated with it. Stratum 0 servers cannot be used on the network but they are directly connected to computers which then operate as stratum-1 servers. A stratum 1 time server acts as a primary network time standard.
A stratum 2 server is connected to the stratum 1 server; then a stratum 3 server is connected to the stratum 2 server and so on. A stratum 2 server gets its time via NTP packet requests from a stratum 1 server. A stratum 3 server gets its time via NTP packet requests from a stratum-2 server... A stratum server may also peer with other stratum servers at the same level to provide more stable and robust time for all devices in the peer group (for example a stratum 2 server can peer with other stratum 2 servers).
NTP uses the concept of a stratum to describe how many NTP hops away a
machine is from an authoritative time source. A stratum 1 time server
typically has an authoritative time source (such as a radio or atomic clock, or a Global Positioning System (GPS) time source) directly attached, a stratum 2 time server receives its time via NTP from a stratum 1 time server, and so on.
NEW QUESTION # 458
Refer to the exhibit.
An engineer entered the command no spanning-tree bpduguard enable on interface Fa 1/0/7. What is the effect of this command on Fa 1/0/7?
- A. It remains in err-disabled state until the no shutdown command is entered in the interface configuration mode.
- B. It remains in err-disabled state until the spanning-tree portfast bpduguard disable command is entered in the interface configuration mode.
- C. It remains in err-disabled state until the shutdown/no shutdown command is entered in the interface configuration mode.
- D. It remains in err-disabled state until the errdisable recovery cause failed-port-state command is entered in the global configuration mode.
Answer: C
Explanation:
sw2#show errdisable recovery
ErrDisable Reason Timer Status
----------------- --------------
arp-inspection Disabled
bpduguard Disabled
channel-misconfig (STP) Disabled
dhcp-rate-limit Disabled
dtp-flap Disabled
gbic-invalid Disabled
inline-power Disabled
l2ptguard Disabled
link-flap Disabled
mac-limit Disabled
link-monitor-failure Disabled
loopback Disabled
oam-remote-failure Disabled
pagp-flap Disabled
port-mode-failure Disabled
pppoe-ia-rate-limit Disabled
psecure-violation Disabled
security-violation Disabled
sfp-config-mismatch Disabled
storm-control Disabled
udld Disabled
unicast-flood Disabled
...
sw2#
NEW QUESTION # 459
Which requirement for an Ansible-managed node is true?
- A. It must support ad hoc commands.
- B. It must have an SSH server running
- C. It must be a Linux server or a Cisco device
- D. It must have an Ansible Tower installed
Answer: B
Explanation:
While it is true Ansible cannot be installed on Windows machine, it cannot also be installed on Cisco device.
However for all Ansible managed host i.e cisco device, windows device, etc, SSH must be running to manage them.
NEW QUESTION # 460
A GRE tunnel is down with the error message %TUN-5-RECURDOWN:
Which two options describe possible causes of the error? (Choose two.)
- A. The tunnel destination is being routed out of the tunnel interface.
- B. There is instability in the network due to route flapping.
- C. The tunnel mode and tunnel IP address are misconfigured.
- D. Incorrect destination IP addresses are configured on the tunnel.
- E. There is link flapping on the tunnel.
Answer: A,B
Explanation:
The %TUN-5-RECURDOWN: Tunnel0 temporarily disabled due to recursive routing error message means that the generic routing encapsulation (GRE) tunnel router has discovered a recursive routing problem. This condition is usually due to one of these causes:
+ A misconfiguration that causes the router to try to route to the tunnel destination address using the tunnel interface itself (recursive routing)
+ A temporary instability caused by route flapping elsewhere in the network Reference: https://www.cisco.com/c/en/us/support/docs/ip/enhanced-interior-gateway- routingprotocol-eigrp/22327-gre-flap.html
NEW QUESTION # 461
Refer to the exhibit.
An engineer reconfigures the pot-channel between SW1 and SW2 from an access port to a trunk and immediately notices this error in SW1's log.
Which command set resolves this error?
- A.
- B.
- C.
- D.
Answer: D
NEW QUESTION # 462
Which algorithms are used to secure REST API from brute attacks and minimize the impact?
- A. PBKDF2, BCrypt, and SCrypt
- B. SHA-1, SHA-256, and SHA-512
- C. SHA-512 and SHA-384
- D. MD5 algorithm-128 and SHA-384
Answer: A
Explanation:
One of the best practices to secure REST APIs is using password hash. Passwords must always be hashed to protect the system (or minimize the damage) even if it is compromised in some hacking attempts. There are many such hashing algorithms which can prove really effective for password security e.g. PBKDF2, bcrypt and scrypt algorithms.
Other ways to secure REST APIs are: Always use HTTPS, Never expose information on URLs (Usernames, passwords, session tokens, and API keys should not appear in the URL), Adding Timestamp in Request, Using OAuth, Input Parameter Validation.
Reference: https://restfulapi.net/security-essentials/
NEW QUESTION # 463
Drag and drop the LISP components from the left onto the function they perform on the right. Not all options are used.
Answer:
Explanation:
Explanation
+ accepts LISP encapsulated map requests: LISP map resolver
+ learns of EID prefix mapping entries from an ETR: LISP map server
+ receives traffic from LISP sites and sends it to non-LISP sites: LISP proxy ETR
+ receives packets from site-facing interfaces: LISP ITR
Explanation
ITR is the function that maps the destination EID to a destination RLOC and then encapsulates the original packet with an additional header that has the source IP address of the ITR RLOC and the destination IP address of the RLOC of an Egress Tunnel Router (ETR).
After the encapsulation, the original packet become a LISP packet.
ETR is the function that receives LISP encapsulated packets, decapsulates them and forwards to its local EIDs. This function also requires EID-to-RLOC mappings so we need to point out an "map-server" IP address and the key (password) for authentication.
A LISP proxy ETR (PETR) implements ETR functions on behalf of non-LISP sites. A PETR is typically used when a LISP site needs to send traffic to non-LISP sites but the LISP site is connected through a service provider that does not accept no routable EIDs as packet sources. PETRs act just like ETRs but for EIDs that send traffic to destinations at non-LISP sites.
Map Server (MS) processes the registration of authentication keys and EID-to-RLOC mappings. ETRs sends periodic Map-Register messages to all its configured Map Servers.
Map Resolver (MR): a LISP component which accepts LISP Encapsulated Map Requests, typically from an ITR, quickly determines whether or not the destination IP address is part of the EID namespace
NEW QUESTION # 464
the following system log message is presented after a network administrator configures a GRE tunnel:
%TUN-5-RECURDOWN Interface Tunnel 0 temporarily disabled due to recursive routing
Why is tunnel 0 disabled?
- A. Because the best path to the tunnel destination is through the tunnel itself
- B. Because the router cannot recursively identify its egress forwarding interface
- C. Because dynamic routing is not enabled
- D. Because the tunnel cannot reach its tunnel destination
Answer: A
NEW QUESTION # 465
A network administrator has designed a network with two multilayer switches on the distribution layer, which act as default gateways for the end hosts. Which two technologies allow every end host in a VLAN to use both gateways? (Choose two)
- A. VRRP
- B. VSS
- C. HSRP
- D. GLBP
- E. MHSRP
Answer: A,E
NEW QUESTION # 466
Which function does a fabric edge node perform in an SD-Access deployment?
- A. Connects the SD-Access fabric to another fabric or external Layer 3 networks
- B. Encapsulates end-user data traffic into LISP.
- C. Connects endpoints to the fabric and forwards their traffic
- D. Provides reachability border nodes in the fabric underlay
Answer: C
Explanation:
There are five basic device roles in the fabric overlay:
+ Control plane node: This node contains the settings, protocols, and mapping tables to provide
the endpoint-to-location (EID-to-RLOC) mapping system for
the fabric overlay.
+ Fabric border node: This fabric device (for example, core layer device) connects external Layer
3 networks to the SDA fabric.
+ Fabric edge node: This fabric device (for example, access or distribution layer device) connects
wired endpoints to the SDA fabric.
+ Fabric WLAN controller (WLC): This fabric device connects APs and wireless endpoints to the
SDA fabric.
+ Intermediate nodes: These are intermediate routers or extended switches that do not provide
any sort of SD-Access fabric role other than underlay services.
NEW QUESTION # 467
What are two common sources of interference for WI-FI networks? (Choose two.)
- A. rogue AP
- B. radar
- C. conventional oven
- D. fire alarm
- E. LED lights
Answer: A,B
Explanation:
Explanation
According to the Meraki webpage, radar and rogue AP are two sources of Wireless Interference.
Interference between different WLANs occurs when the access points within range of each other are set to the same RFchannel.
Note: Microwave ovens (not conventional oven) emit damaging interfering signals at up to 25 feet or so from an operatingoven. Some microwave ovens emit radio signals that occupy only a third of the 2.4-GHz band, whereas others occupy theentire band.
Reference: https://www.ciscopress.com/articles/article.asp?p=2351131&seqNum=2
NEW QUESTION # 468
Refer to the exhibit.
Which two statements about the EEM applet configuration are true? (Choose two.)
- A. The EEM applet runs before the CLI command is executed
- B. The running configuration is displayed only if the letter Y is entered at the CLI
- C. The EEM applet requires a case-insensitive response
- D. The EEM applet runs after the CLI command is executed
Answer: A,B
Explanation:
When you use the sync yes option in the event cli command, the EEM applet runs before the CLI
command is executed. The EEM applet should set the _exit_status variable to indicate whether the
CLI command should be executed (_exit_status set to one) or not (_exit_status set to zero).
With the sync no option, the EEM applet is executed in background in parallel with the CLI
command.
NEW QUESTION # 469
Refer to the exhibit.
Refer to the exhibit. POSTMAN is showing an attempt to retrieve network device information from Cisco DNA Center API. What is the issue?
- A. The JSON payload contains the incorrect UUID
- B. The token has expired.
- C. Authentication has failed
- D. The URI string is incorrect
Answer: D
NEW QUESTION # 470
Which unit measures the power of a radio signal with reference to 1 milliwatt?
- A. dBm
- B. mW
- C. dBw
- D. dBi
Answer: A
Explanation:
dBm is an abbreviation for "decibels relative to one milliwatt," where one milliwatt (1 mW) equals 1/1000 of a watt. It follows the same scale as dB. Therefore 0 dBm = 1 mW, 30 dBm = 1 W, and -20 dBm = 0.01 mW
NEW QUESTION # 471
Which Python code snippet must be added to the script to store the changed interface configuration to a local JSON-formatted file?
- A. Option D
- B. Option C
- C. Option B
- D. Option A
Answer: C
NEW QUESTION # 472
Drag and drop the characteristics from the left onto the routing protocols they describe on the right.
Answer:
Explanation:
NEW QUESTION # 473
Refer to the exhibit.
On which interfaces should VRRP commands be applied to provide first hop redundancy to PC-01 and PC-02?
- A. G0/0 on Edge-01 and G0/0 on Edge-02
- B. G0/0 and G0/1 on Core
- C. G0/1on Edge-01 and G0/1 on Edge-02
- D. G0/0 and G0/1 on ASW-01
Answer: C
NEW QUESTION # 474
An engineer must create an EEM applet that sends a syslog message in the event a change happens in the network due to trouble with an OSPF process. Which action should the engineer use?
- A. action 1 syslog pattern "OSPF ROUTING ERROR"
- B. action 1 syslog msg "OSPF ROUTING ERROR"
- C. action 1syslog write "OSPF ROUTING ERROR"
- D. action 1 syslog send "OSPF ROUTING ERROR"
Answer: A
NEW QUESTION # 475
Drag and drop the characteristics from the left onto the routing protocols they describe on the right
Answer:
Explanation:
NEW QUESTION # 476
Drag and drop the LIPS components on the left to the correct description on the right.
Answer:
Explanation:
* Map server
* EID
* ETR
NEW QUESTION # 477
What are two considerations when using SSO as a network redundancy feature? (Choose two)
- A. both supervisors must be configured separately
- B. the multicast state is preserved during switchover
- C. must be combined with NSF to support uninterrupted Layer 3 operations
- D. requires synchronization between supervisors in order to guarantee continuous connectivity
- E. must be combined with NSF to support uninterrupted Layer 2 operations
Answer: C,D
Explanation:
Explanation
NEW QUESTION # 478
While configuring an IOS router for HSRP with a virtual IP of 10 1.1.1. an engineer sees this log message.
- A. Change the HSRP virtual address on the local router to 10.1.1.1
- B. Change the HSRP group configuration on the local router to 1.
- C. Change the HSRP group configuration on the remote router to 1.
- D. Change the HSRP virtual address on the remote router to 10.1.1.1
Answer: B
NEW QUESTION # 479
Refer to the exhibit.
Which IP address becomes the active next hop for 192.168.102 0/24 when 192.168.101.2 fails?
- A. 192.168.101.18
- B. 192.168.101.10
- C. 192.168.101.6
- D. 192.168.101.14
Answer: A
Explanation:
Explanation
The '>' shown in the output above indicates that the path with a next hop of 192.168.101.2 is the current best path.
Path Selection Attributes: Weight > Local Preference > Originate > AS Path > Origin > MED > External > IGP Cost > eBGP Peering > Router ID BGP prefers the path with highest weight but the weights here are all 0 (which indicate all routes that are not originated by the local router) so we need to check the Local Preference. Answer
'192.168.101.18' path without LOCAL_PREF (LocPrf column) means it has the default value of 100.
Therefore we can find the two next best paths with the next hop of 192.168.101.18 and
192.168.101.10.
We have to move to the next path selection attribute: Originate. BGP prefers the path that the local router originated (which is indicated with the "next hop 0.0.0.0"). But none of the two best paths is self-originated.
The AS Path of the next hop 192.168.101.18 is shorter than the AS Path of the next hop
192.168.101.10 then the next hop 192.168.101.18 will be chosen as the next best path.
NEW QUESTION # 480
Drag and drop the tools from the left onto the agent types on the right.
Answer:
Explanation:
NEW QUESTION # 481
Which OSPF networks types are compatible and allow communication through the two peering devices?
- A. point-to-multipoint to nonbroadcast
- B. point-to-multipoint to broadcast
- C. broadcast to nonbroadcast
- D. broadcast to point-to-point
Answer: C
Explanation:
Reference:
The following different OSPF types are compatible with each other:
+ Broadcast and Non-Broadcast (adjust hello/dead timers)
+ Point-to-Point and Point-to-Multipoint (adjust hello/dead timers)
Broadcast and Non-Broadcast networks elect DR/BDR so they are compatible. Point-topoint/ multipoint do not elect DR/BDR so they are compatible.
NEW QUESTION # 482
......
Verified & Correct 350-401 Practice Test Reliable Source Apr 28, 2024 Updated: https://www.lead2passed.com/Cisco/350-401-practice-exam-dumps.html
Free Cisco 350-401 Exam Files Downloaded Instantly: https://drive.google.com/open?id=1LLrmftEdbZWwyQBneTZhXbkdt5Ab-z-q
