Cisco 350-401 Real Exam Questions
The questions for 350-401 were last updated at Jul 24,2024.
- Exam Code: 350-401
- Exam Name: Implementing and Operating Cisco Enterprise Network Core Technologies (ENCOR)
- Certification Provider: Cisco
- Latest update: Jul 24,2024
An engineer is troubleshooting the Ap join process using DNS.
Which FQDN must be resolvable on the network for the access points to successfully register to the WLC?
- A . wlcbostname.domain.com
- B . cisco-capwap-controller.domain.com
- C . ap-manager.domain.com
- D . primary-wlc.domain.com
A network engineer is configuring Flexible Netflow and enters these commands Sampler Netflow1
Mode random one-out-of 100
Interface fastethernet 1/0
Flow-sampler netflow1
Which are two results of implementing this feature instead of traditional Netflow? (Choose two.)
- A . CPU and memory utilization are reduced.
- B . Only the flows of top 100 talkers are exported
- C . The data export flow is more secure.
- D . The number of packets to be analyzed are reduced
- E . The accuracy of the data to be analyzed is improved
Refer to the Exhibit.
A network engineer configures a new GRE tunnel and enters the show run command.
What does the output verify?
- A . The tunnel will be established and work as expected
- B . The tunnel destination will be known via the tunnel interface
- C . The tunnel keepalive is configured incorrectly because they must match on both sites
- D . The default MTU of the tunnel interface is 1500 byte.
An engineer is concerned with the deployment of new application that is sensitive to inter-packet delay variance.
Which command configures the router to be the destination of jitter measurements?
- A . Router(config)# ip sla responder udp-connect 172.29.139.134 5000
- B . Router(config)# ip sla responder tcp-connect 172.29.139.134 5000
- C . Router(config)# ip sla responder udp-echo 172.29.139.134 5000
- D . Router(config)# ip sla responder tcp-echo 172.29.139.134 5000
What is the recommended MTU size for a Cisco SD-Access Fabric?
- A . 1500
- B . 9100
- C . 4464
- D . 17914
Which DHCP option helps lightweight APs find the IP address of a wireless LAN controller?
- A . Option 43
- B . Option 60
- C . Option 67
- D . Option 150
Refer to the Exhibit.
After configurating an IPsec VPN, an engineer enters the show command to verify the ISAKMP SA status.
What does the status show?
- A . ISAKMP SA is authenticated and can be used for Quick Mode.
- B . Peers have exchanged keys, but ISAKMP SA remains unauthenticated.
- C . VPN peers agreed on parameters for the ISAKMP SA
- D . ISAKMP SA has been created, but it has not continued to form.
Refer to the exhibit.
An engineer must create a configuration that executes the show run command and then terminates the session when user CCNP legs in.
Which configuration change is required?
- A . Add the access-class keyword to the username command
- B . Add the access-class keyword to the aaa authentication command
- C . Add the autocommand keyword to the username command
- D . Add the autocommand keyword to the aaa authentication command
DRAG DROP
Refer to the exhibit.
An engineer must deny HTTP traffic from host A to host B while allowing all other communication between the hosts, drag and drop the commands into the configuration to achieve these results. Some commands may be used more than once. Not all commands are used.
Which characteristic distinguishes Ansible from Chef?
- A . Ansible lacs redundancy support for the master server. Chef runs two masters in an active/active mode.
- B . Ansible uses Ruby to manage configurations. Chef uses YAML to manage configurations.
- C . Ansible pushes the configuration to the client. Chef client pulls the configuration from the server.
- D . The Ansible server can run on Linux, Unix or Windows. The Chef server must run on Linux or Unix.