Summer Certification Sale Limited Time 65% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: pass65

350-401 Implementing Cisco Enterprise Network Core Technologies (350-401 ENCOR) Questions and Answers

Questions 4

An engineer is configuring local web authentication on a WLAN. The engineer chooses the Authentication radio button under the Layer 3 Security options for Web Policy. Which device presents the web authentication for the WLAN?

Options:

A.

ISE server

B.

local WLC

C.

RADIUS server

D.

anchor WLC

Buy Now
Questions 5

350-401 Question 5

350-401 Question 5

Options:

Buy Now
Questions 6

350-401 Question 6

350-401 Question 6

Options:

Buy Now
Questions 7

350-401 Question 7

350-401 Question 7

Options:

Buy Now
Questions 8

350-401 Question 8

350-401 Question 8

Options:

Buy Now
Questions 9

350-401 Question 9

OR

350-401 Question 9

350-401 Question 9

Options:

Buy Now
Questions 10

350-401 Question 10

350-401 Question 10

350-401 Question 10

Options:

Buy Now
Questions 11

350-401 Question 11

350-401 Question 11

Options:

Buy Now
Questions 12

350-401 Question 12

350-401 Question 12

Options:

Buy Now
Questions 13

350-401 Question 13

350-401 Question 13

Options:

Buy Now
Questions 14

350-401 Question 14

What is the JSON syntax that is formed the data?

A)

350-401 Question 14

B)

350-401 Question 14

C)

350-401 Question 14

D)

350-401 Question 14

Options:

A.

Option A

B.

Option B

C.

Option C

D.

Option D

Buy Now
Questions 15

350-401 Question 15

350-401 Question 15

350-401 Question 15

Options:

Buy Now
Questions 16

350-401 Question 16

350-401 Question 16

Options:

Buy Now
Questions 17

Which two operational modes enable an AP to scan one or more wireless channels for rogue access points and at the same time provide wireless services to clients? (Choose two.)

Options:

A.

local

B.

rogue detector

C.

monitor

D.

FlexConnect

E.

sniffer

Buy Now
Questions 18

Which language defines the structure or modeling of data for NETCONF and RESTCONF?

Options:

A.

YAML

B.

YANG

C.

JSON

D.

XML

Buy Now
Questions 19

Which protocol is implemented to establish secure control plane adjacencies between Cisco Catalyst SD-WAN nodes?

Options:

A.

IPsec

B.

TLS

C.

IKE

D.

ESP

Buy Now
Questions 20

Which two namespaces does the LISP network architecture and protocol use? (Choose two.)

Options:

A.

TLOC

B.

RLOC

C.

DNS

D.

VTEP

E.

EID

Buy Now
Questions 21

Why is a Type 1 hypervisor more efficient than a Type 2 hypervisor?

Options:

A.

Type 1 hypervisor is the only type of hypervisor that supports hardware acceleration techniques.

B.

Type 1 hypervisor runs directly on the physical hardware of the host machine without relying on the underlying OS.

C.

Type 1 hypervisor enables other operating systems to run on it.

D.

Type 1 hypervisor relies on the existing OS of the host machine to access CPU, memory, storage, and network resources.

Buy Now
Questions 22

What is a characteristics of Wi-Fi channels?

Options:

A.

The 2 4-GHz balWMS§24 non-overlapping channels

B.

Devices that connect to the same Wi-Fi channel reside in the same collision domain.

C.

Wi-Fi channels are spaced 30 MHz apart.

D.

The 5-GHz band offers 11 different channels for Wi-Fi clients

Buy Now
Questions 23

What is a difference between OSPF and EIGRP?

Options:

A.

OSPF uses IP protocol number 88. EIGRP uses IP protocol number 89.

B.

OSPF uses a default hello timer of 5 seconds. EIGRP uses a default hello timer of 10 seconds.

C.

OSPF uses an administrative distance of 115. EIGRP uses an administrative distance of 160.

D.

OSPF uses multicast addresses 224.0.0.5 and 224.0.0.6. EIGRP uses multicast address 224.0.0.10.

Buy Now
Questions 24

350-401 Question 24

Refer to the exhibit. What is the output of this code?

350-401 Question 24

Options:

A.

Option A

B.

Option B

C.

Option C

D.

Option D

Buy Now
Questions 25

Which feature is used to propagate ARP. broadcast, and link-local frames across a Cisco SD-Access fabric to address connectivity needs for silent hosts that require reception of traffic to start communicating?

Options:

A.

Native Fabric Multicast

B.

Layer 2 Flooding

C.

SDA Transit

D.

Multisite Fabric

Buy Now
Questions 26

Which method does FastLocate use to collect location-based information?

Options:

A.

RFID

B.

client probing

C.

beacons

D.

data packets

Buy Now
Questions 27

Which method ensures the confidentiality of data exchanged over a REST API?

Options:

A.

Use TLS to secure the underlying HTTP session.

B.

Use me POST method Instead or URL-encoded GET to pass parameters.

C.

Deploy digest-based authentication to protect the access to the API.

D.

Encode sensitive data using Base64 encoding.

Buy Now
Questions 28

350-401 Question 28

Reler to the exhibit. An engineer configuring WebAuth on a Cisco Catalyst 9000 Series WIC. The engineer has purchased a third-party certificate using the FQDN of the WLC as the CN and intends to use bit on the WebAuth splash page What must be configured so that the clients do not receive a certificate error?

Options:

A.

Virtual IPv4 Address must be set to a routable address.

B.

Virtual IPv4 Hostname must match the CN of the certificate.

C.

Trustpoint must be set to the management certificate of the WLC.

D.

Web Auth Intercept HTTPs must be enabled.

Buy Now
Questions 29

How does SSO work with HSRP to minimize network disruptions?

Options:

A.

It enables HSRP to elect another switch in the group as the active HSRP switch.

B.

It ensures fast failover in the case of link failure.

C.

It enables data forwarding along known routes following a switchover, white the routing protocol reconverges.

D.

It enables HSRP to failover to the standby RP on the same device.

Buy Now
Questions 30

Refer to the exhibit. A network engineer must configure NETCONF. After creating the configuration, the engineer gets output from the command show line, but not from show running-config. Which command completes the configuration?

Options:

A.

Device(config)# netconf lock-time 500

B.

Device(config)# netconf max-message 1000

C.

Device(config)# no netconf ssh acl 1

D.

Device(config)# netconf max-sessions 100

Buy Now
Questions 31

When deploying Cisco SD-Access Fabric APs, where does the data plane VXLAN tunnel terminate?

Options:

A.

on the first-hop fabric edge switch

B.

on the WLC node

C.

on the fabric border node switch

D.

directly on the fabric APs

Buy Now
Questions 32

A wireless network engineer must configure a WPA2+WPA3 policy with the Personal security type. Which action meets this requirement?

Options:

A.

Configure the GCMP256 encryption cipher.

B.

Configure the CCMP128 encryption cipher.

C.

Configure the GCMP128 encryption cipher.

D.

Configure the CCMP256 encryption cipher.

Buy Now
Questions 33

350-401 Question 33

Refer to the exhibit. Authentication for users must first use RADIUS, and fall back to the local database on the router if the RADIUS server is unavailable Which two configuration sets are needed to achieve this result? (Choose two.)

350-401 Question 33

Options:

A.

Option A

B.

Option B

C.

Option C

D.

Option D

Buy Now
Questions 34

350-401 Question 34

Refer to the exhibit. The network administrator must be able to perform configuration changes when all the RADIUS servers are unreachable. Which configuration allows all commands to be authorized if the user has successfully authenticated?

Options:

A.

aaa authorization exec default group radius if-authenticated

B.

aaa authorization exec default group radius none

C.

aaa authorization exec default group radius

D.

aaa authentication login default group radius local none

Buy Now
Questions 35

Which new security enhancement is introduced by deploying a next-generation firewall at the data center in addition to the Internet edge?

Options:

A.

virtual private network for remote access

B.

DDoS protection

C.

firewall protection of the east-west traffic at the data center

D.

firewall protection of the south-north traffic at the data center

Buy Now
Questions 36

A customer has several small branches and wants to deploy a Wi-Fi solution with local management using CAPWAP. Which deployment model meets this requirement?

Options:

A.

local mode

B.

SD-Access wireless

C.

autonomous

D.

Mobility Express

Buy Now
Questions 37

What is the role of the vSmart controller in a Cisco Catalyst SD-WAN environment?

Options:

A.

It is the centralized network management system.

B.

It manages the data plane.

C.

It manages the control plane.

D.

It performs authentication and authorization.

Buy Now
Questions 38

Drag and drop the characteristics from the left onto the tools on the right. Not all options are used.

350-401 Question 38

Options:

Buy Now
Questions 39

350-401 Question 39

Assuming the WLC ' s interfaces are not in the same subnet as the RADIUS server, which interface would the WLC use as the source for all RADIUS-related traffic?

Options:

A.

the interface specified on the WLAN configuration

B.

any interface configured on the WLC

C.

the controller management interface

D.

the controller virtual interface

Buy Now
Questions 40

What are two device roles in Cisco SD-Access fabric? (Choose two.)

Options:

A.

core switch

B.

vBond controller

C.

edge node

D.

access switch

E.

border node

Buy Now
Questions 41

Which measurement is used from a post wireless survey to depict the cell edge of the access points?

Options:

A.

RSSI

B.

SNR

C.

Noise

D.

CCI

Buy Now
Questions 42

A wireless administrator must create a new web authentication corporate SSID that will be using ISE as the external RADIUS server. The guest VLAN must be specified after the authentication completes. Which action must be performed to allow the ISE server to specify the guest VLAN?

Options:

A.

Set RADIUS Profiling.

B.

Set AAA Policy name.

C.

Enable Network Access Control State.

D.

Enable AAA Override.

Buy Now
Questions 43

Which technology is the Cisco SD-Access control plane based on?

Options:

A.

LISP

B.

CTS

C.

SGT

D.

VRF

Buy Now
Questions 44

What is the base unit of definition in YANG?

Options:

A.

module

B.

include statement

C.

stanza

D.

node

Buy Now
Questions 45

What is a client who is using 802.1x for authentication referred to as?

Options:

A.

authenticator

B.

policy enforcement point

C.

NAC device

D.

supplicant

Buy Now
Questions 46

What does a YANG model provide?

Options:

A.

standardized data structure independent of the transport protocols

B.

creation of transport protocols and their interaction with the OS

C.

user access to interact directly with the CLI of the device to receive or modify network configurations

D.

standardized data structure that can be used only with NETCONF or RESTCONF transport protocols

Buy Now
Questions 47

Which two mechanisms are used with OAuth 2.0 for enhanced validation? (Choose two.)

Options:

A.

custom headers

B.

authentication

C.

authorization

D.

request management

E.

accounting

Buy Now
Questions 48

When using a Cisco Catalyst 9800 Series WLC, which tag/profile can be applied to APs to change the mode to FlexConnect in a specific location?

Options:

A.

policy tag

B.

site tag

C.

AP join profile

D.

flex profile

Buy Now
Questions 49

Which two new security capabilities are introduced by using a next-generation firewall at the Internet edge? (Choose two.)

Options:

A.

integrated intrusion prevention

B.

VPN

C.

application-level inspection

D.

stateful packet inspection

E.

NAT

Buy Now
Questions 50

What is used by vManage to interact withCiscoSD-WAN devices in the fabric?

Options:

A.

northbound API

B.

RESTCONF

C.

Southbound API

D.

IPsec

Buy Now
Questions 51

What is the recommended minimum SNR for Voice applications for networks?

Options:

A.

15

B.

20

C.

25

D.

10

Buy Now
Questions 52

Refer to the exhibit.

350-401 Question 52

Which EEM script generates a critical-level syslog message and saves a copy of the running configuration to the bootflash when an administrator saves the running configuration to the startup configuration?

350-401 Question 52

Options:

A.

Option A

B.

Option B

C.

Option C

D.

Option D

Buy Now
Questions 53

A script contains the statement •white loop != 999 ’ Which value terminates the loop?

Options:

A.

A value equal to 999.

B.

A value not equal to 999.

C.

A value greater than or equal to 999.

D.

A value less than or equal to 999.

Buy Now
Questions 54

A customer requests a design that includes GLBP as the FHRP. The network architect discovers that the members of the GLBP group have different throughput capabilities. Which GLBP load balancing method supports this environment?  

Options:

A.

host dependent  

B.

weighted

C.

least connection

D.

round robin

Buy Now
Questions 55

Which characteristic applies to a traditional WAN solution but not to a Cisco Catalyst SD-WAN solution?

Options:

A.

Centralized reachability, security, and application policies

B.

Time-consuming configuration and maintenance

C.

Low complexity and increased overall solution scale

D.

Operates over DTLS/TLS-authenticated and secured tunnels

Buy Now
Questions 56

350-401 Question 56

Refer to the exhibit A network engineer must use a Python script lo convert data received from a network device. Which type of data is printed to the console when the script runs?

Options:

A.

dictionary with a key-value pair

B.

list of lists

C.

list of strings

D.

tuple list

Buy Now
Questions 57

What is a TLOC in a Cisco Catalyst SD-WAN deployment?

Options:

A.

component set by the administrator to differentiate similar nodes that offer a common service

B.

value that identifies a specific tunnel within the Cisco Catalyst SD-WAN overlay

C.

identifier that represents a specific service offered by nodes within the Cisco Catalyst SD-WAN overlay

D.

attribute that acts as a next hop for network prefixes

Buy Now
Questions 58

What is a characteristic of VXLAN?

Options:

A.

It extends Layers 2 and Layer 3 overlay network over a Layer 2 underly.

B.

It has a 12-byte packet header.

C.

Its frame encapsulation is performed by MAC-in-UDP.

D.

It uses TCP for transport

Buy Now
Questions 59

An engineer is implementing a new SSID on a Cisco Catalyst 9800 Series WLC that must be broadcast on 6 GHz radios. Users will be required to use EAP-TLS to authenticate. Which wireless Layer 2 security method is required?

Options:

A.

WPA3 Personal

B.

WPA3 Enterprise

C.

WPA3 Enterprise

D.

WPA2 Personal

Buy Now
Questions 60

An engineer must create a new SSID on a Cisco 9800 wireless LAN controller. The client has asked to use a pre-shared key for authentication. Which profile must the engineer edit to achieve this requirement?

Options:

A.

RF

B.

WLAN

C.

Policy

D.

Flex

Buy Now
Questions 61

Which language defines the structure or modelling of data for NETCONF and RESTCONF?

Options:

A.

JSON

B.

YANG

C.

XML

D.

YAML

Buy Now
Questions 62

Which JSON syntax is valid?

A)

350-401 Question 62

B)

350-401 Question 62

C)

350-401 Question 62

D)

350-401 Question 62

Options:

A.

Option A

B.

Option B

C.

Option C

D.

Option D

Buy Now
Questions 63

In a Cisco SD-WAN solution, which two functions are performed by OMP? (Choose two.)

Options:

A.

advertisement of network prefixes and their attributes

B.

configuration of control and data policies

C.

gathering of underlay infrastructure data

D.

delivery of crypto keys

E.

segmentation and differentiation of traffic

Buy Now
Questions 64

What is used to validate the authenticity of the client and is sent in HTTP requests as a JSON object?

Options:

A.

SSH

B.

TLS

C.

HTTPS

D.

JWT

Buy Now
Questions 65

Which task Is mandatory when provisioning a device through the plug-and-play workflow in Cisco DNA Center?

Options:

A.

site assignment

B.

slack serial number assignment

C.

golden image upgrade

D.

template configuration application

Buy Now
Questions 66

Why would an architect use an OSPF virtual link?

Options:

A.

to allow a stub area to transit another stub area

B.

to merge two existing Area 0s through a nonbackbone

C.

to connect two networks that have overlapping private IP address space

D.

to connect a nonbackbone area to Area 0 through another nonbackbone area

Buy Now
Questions 67

Drag and drop the characteristics from the left onto the orchestration tools they describe on the right.

350-401 Question 67

Options:

Buy Now
Questions 68

In which two ways does PIM dense mode function in the network? (Choose two.)

Options:

A.

It waits to forward multicast traffic until a downstream router requests the traffic.

B.

It utilizes the designated forwarder election to avoid multicast packet loops.

C.

It receives traffic from only one Reverse Path Forwarding interface.

D.

It forwards multicast traffic on all interfaces until a downstream router requests that forwarding stop.

E.

It uses a push method, and fallback occurs when RP information is lost.

Buy Now
Questions 69

How is a data modelling language used?

Options:

A.

To enable data to be easily structured grouped validated and replicated

B.

To represent finite and well-defined network elements that cannot be changed

C.

To model the flows of unstructured data within the infrastructure

D.

To provide human readability to scripting languages

Buy Now
Questions 70

What is the measure of the difference between the received signal and the noise floor in a wireless environment?

Options:

A.

XOR

B.

RSSI

C.

RRM

D.

SNR

Buy Now
Questions 71

What is a client who is running 802.1x for authentication reffered to as?

Options:

A.

supplicant

B.

NAC device

C.

authenticate

D.

policy enforcement point

Buy Now
Questions 72

350-401 Question 72

Refer to the exhibit. The key value pairs must be extracted by iterating through a list of tuples. Which statement completes the snippet and prints each key value pair as a tuple?

Options:

A.

for device, value In device_ip.items(): print(device)

B.

for device in device_ip.items(): print(device)

C.

for device in device_ip.values(): print(device)

D.

for device in deviceip: print(device)

Buy Now
Questions 73

A customer wants to use a single SSID to authenticate loT devices using different passwords. Which Layer 2 security type must be configured in conjunction with Cisco ISE to achieve this requirement?

Options:

A.

Identity PSK

B.

Fast Transition

C.

Central Web Authentication

D.

Cisco Centralized Key Management

Buy Now
Questions 74

Ascriptcontainsthe statement white loop != 999 ’ Which value terminates the loop?

Options:

A.

A value equal to 999.

B.

A value not equal to 999.

C.

A value greater than or equal to 999.

D.

A value less than or equal to 999.

Buy Now
Questions 75

350-401 Question 75

Refer to the exhibit. What does this code achieve?!

Options:

A.

It generates a list containing only the hostname of the LLDP neighbor.

B.

It generates a list of the LLDP neighbors and their capabilities

C.

It generates a list of routers with the Repeater capability.

D.

It generates a count of the LLDP neighbors.

Buy Now
Questions 76

350-401 Question 76

Refer to the exhibit. A POST /discovery request spawns an asynchronous task. After querying for more information about the task, the Cisco DNA Center platform returns the REST API response. What is the status of the discovery task?

Options:

A.

restarted

B.

failed

C.

stopped

D.

successful

Buy Now
Questions 77

Which two operations are valid for RESTCONF? (Choose two)

Options:

A.

PULL

B.

ADD

C.

HEAD

D.

REMOVE

E.

GET

F.

PUSH

Buy Now
Questions 78

Which two pieces of information are necessary to compute SNR? (Choose two.)

Options:

A.

EIRP

B.

noise floor

C.

antenna gain

D.

RSSI

E.

transmit power

Buy Now
Questions 79

An engineer is configuring a new SSID to present users with a splash page for authentication. Which WLAN Layer 3 setting must be configured to provide this functionally?

Options:

A.

CCKM

B.

WPA2 policy

C.

Local Policy

D.

Web Policy

Buy Now
Questions 80

350-401 Question 80

350-401 Question 80

Options:

Buy Now
Questions 81

350-401 Question 81

350-401 Question 81

Options:

Buy Now
Questions 82

350-401 Question 82

350-401 Question 82

Options:

Buy Now
Questions 83

350-401 Question 83

350-401 Question 83

Options:

Buy Now
Questions 84

350-401 Question 84

350-401 Question 84

Options:

Buy Now
Questions 85

350-401 Question 85

350-401 Question 85

Options:

Buy Now
Questions 86

350-401 Question 86

350-401 Question 86

Options:

Buy Now
Questions 87

350-401 Question 87

350-401 Question 87

Options:

Buy Now
Questions 88

350-401 Question 88

350-401 Question 88

Options:

Buy Now
Questions 89

350-401 Question 89

350-401 Question 89

Options:

Buy Now
Questions 90

350-401 Question 90

350-401 Question 90

Options:

Buy Now
Questions 91

350-401 Question 91

350-401 Question 91

Options:

Buy Now
Questions 92

350-401 Question 92

350-401 Question 92

Options:

Buy Now
Questions 93

350-401 Question 93

350-401 Question 93

Options:

Buy Now
Questions 94

350-401 Question 94

Options:

Buy Now
Exam Code: 350-401
Exam Name: Implementing Cisco Enterprise Network Core Technologies (350-401 ENCOR)
Last Update: Jun 5, 2026
Questions: 432

PDF + Testing Engine

$64.99   $185.69

Testing Engine

$49.99   $142.83

PDF (Q&A)

$54.99   $157.11