350-401 Implementing Cisco Enterprise Network Core Technologies (350-401 ENCOR) Questions and Answers
An engineer is configuring local web authentication on a WLAN. The engineer chooses the Authentication radio button under the Layer 3 Security options for Web Policy. Which device presents the web authentication for the WLAN?
Which two operational modes enable an AP to scan one or more wireless channels for rogue access points and at the same time provide wireless services to clients? (Choose two.)
Which language defines the structure or modeling of data for NETCONF and RESTCONF?
Which protocol is implemented to establish secure control plane adjacencies between Cisco Catalyst SD-WAN nodes?
Which two namespaces does the LISP network architecture and protocol use? (Choose two.)
Which feature is used to propagate ARP. broadcast, and link-local frames across a Cisco SD-Access fabric to address connectivity needs for silent hosts that require reception of traffic to start communicating?

Reler to the exhibit. An engineer configuring WebAuth on a Cisco Catalyst 9000 Series WIC. The engineer has purchased a third-party certificate using the FQDN of the WLC as the CN and intends to use bit on the WebAuth splash page What must be configured so that the clients do not receive a certificate error?
Refer to the exhibit. A network engineer must configure NETCONF. After creating the configuration, the engineer gets output from the command show line, but not from show running-config. Which command completes the configuration?
When deploying Cisco SD-Access Fabric APs, where does the data plane VXLAN tunnel terminate?
A wireless network engineer must configure a WPA2+WPA3 policy with the Personal security type. Which action meets this requirement?

Refer to the exhibit. Authentication for users must first use RADIUS, and fall back to the local database on the router if the RADIUS server is unavailable Which two configuration sets are needed to achieve this result? (Choose two.)


Refer to the exhibit. The network administrator must be able to perform configuration changes when all the RADIUS servers are unreachable. Which configuration allows all commands to be authorized if the user has successfully authenticated?
Which new security enhancement is introduced by deploying a next-generation firewall at the data center in addition to the Internet edge?
A customer has several small branches and wants to deploy a Wi-Fi solution with local management using CAPWAP. Which deployment model meets this requirement?
What is the role of the vSmart controller in a Cisco Catalyst SD-WAN environment?
Drag and drop the characteristics from the left onto the tools on the right. Not all options are used.


Assuming the WLC ' s interfaces are not in the same subnet as the RADIUS server, which interface would the WLC use as the source for all RADIUS-related traffic?
Which measurement is used from a post wireless survey to depict the cell edge of the access points?
A wireless administrator must create a new web authentication corporate SSID that will be using ISE as the external RADIUS server. The guest VLAN must be specified after the authentication completes. Which action must be performed to allow the ISE server to specify the guest VLAN?
Which two mechanisms are used with OAuth 2.0 for enhanced validation? (Choose two.)
When using a Cisco Catalyst 9800 Series WLC, which tag/profile can be applied to APs to change the mode to FlexConnect in a specific location?
Which two new security capabilities are introduced by using a next-generation firewall at the Internet edge? (Choose two.)
Refer to the exhibit.

Which EEM script generates a critical-level syslog message and saves a copy of the running configuration to the bootflash when an administrator saves the running configuration to the startup configuration?

A script contains the statement •white loop != 999 ’ Which value terminates the loop?
A customer requests a design that includes GLBP as the FHRP. The network architect discovers that the members of the GLBP group have different throughput capabilities. Which GLBP load balancing method supports this environment?
Which characteristic applies to a traditional WAN solution but not to a Cisco Catalyst SD-WAN solution?

Refer to the exhibit A network engineer must use a Python script lo convert data received from a network device. Which type of data is printed to the console when the script runs?
An engineer is implementing a new SSID on a Cisco Catalyst 9800 Series WLC that must be broadcast on 6 GHz radios. Users will be required to use EAP-TLS to authenticate. Which wireless Layer 2 security method is required?
An engineer must create a new SSID on a Cisco 9800 wireless LAN controller. The client has asked to use a pre-shared key for authentication. Which profile must the engineer edit to achieve this requirement?
Which language defines the structure or modelling of data for NETCONF and RESTCONF?
In a Cisco SD-WAN solution, which two functions are performed by OMP? (Choose two.)
What is used to validate the authenticity of the client and is sent in HTTP requests as a JSON object?
Which task Is mandatory when provisioning a device through the plug-and-play workflow in Cisco DNA Center?
Drag and drop the characteristics from the left onto the orchestration tools they describe on the right.

What is the measure of the difference between the received signal and the noise floor in a wireless environment?

Refer to the exhibit. The key value pairs must be extracted by iterating through a list of tuples. Which statement completes the snippet and prints each key value pair as a tuple?
A customer wants to use a single SSID to authenticate loT devices using different passwords. Which Layer 2 security type must be configured in conjunction with Cisco ISE to achieve this requirement?
Ascriptcontainsthe statement white loop != 999 ’ Which value terminates the loop?

Refer to the exhibit. A POST /discovery request spawns an asynchronous task. After querying for more information about the task, the Cisco DNA Center platform returns the REST API response. What is the status of the discovery task?
An engineer is configuring a new SSID to present users with a splash page for authentication. Which WLAN Layer 3 setting must be configured to provide this functionally?
























































































