ENCOR_350-401_June_2023-v1.8.pdf

Implementing Cisco Enterprise Network Core Technologies (ENCOR)
Exam Name: Implementing Cisco Enterprise Network Core Technologies (ENCOR)
Exam Code: 350-401
Exam Price: $400 (USD)
Duration: 120 mins
Number of Questions: 102
Passing Score: 825/1000
Get Latest & Actual Exam's Question and Answers from © Homer CO., LTD. We cover ALL Cisco and Non-Cisco Exam
Dumps. Cisco Written & CCIE LAB Dump, AWS, Azure, Oracle, Huawei, Aruba, Fortinet, F5 101 & F5 201, RedHat
Linux, Comptia, CEHv10, Palo Alto, Check Point, EC Council and many more.
"We make sale ONLY if the dump is stable" Contact us: cciehomer@gmail.com Whatsapp +13024401843
Developed by: Hussain & Aaron
Dump Vendor: Homer Co., Ltd.
Website: COMING SOON
Contact us: cciehomer@gmail.com
© 2021 Homer Co., Ltd.
Get Latest & Actual Exam's Question and Answers from © Homer CO., LTD. We cover ALL Cisco and Non-Cisco Exam Dumps.
Cisco Written & CCIE LAB Dump, AWS, Azure, Oracle, Huawei, Aruba, Fortinet, F5 101 & F5 201, RedHat Linux, Comptia, CEHv11, Palo Alto, Check Point, EC Council and many more.
CCIEHOMER "We make sale ONLY if the dump is stable" Contact us: cciehomer@gmail.com Whatsapp +1-302-440-1843 homerwilliams@cciehomer.com
CCIEHOMER We provide Pratice Test's in PDF and VCE format. FREE VCE PLAYER

Exam A
QUESTION 1
Router R1 must be configured as a UDP responder on port 6336. Which configuration accomplishes this task?
A. (config)#ip sla responder udp-echo ipaddress 10.10.10.1 port 6336
B. (config-if)#ip sla responder udp-port ipaddress 10.10.10.1 port 6336
C. (config)#ip sla responder ipaddress 10.10.10.1 port 6336
D. (config)#ip sla responder udp-echo ipv4 10.10.10.1 port 6336
Correct Answer: A
QUESTION 2
A network engineer wants to configure console access to a router without using AAA so that the privileged exec mode is entered directly after a user
provide the correct login credentials. Which action achieves this goal?
A. Configure login authentication privileged on line con 0
B. Configure a local username with privilege level 15
C. Configure privilege level 15 on line con 0
D. Configure a RADIUS or TACACS+ server and use it to send the privilege level
Correct Answer: C
QUESTION 3
Refer to the exhibit.
*Sep 16 09:13:40:974: %SPANTREE-7-RECV_1Q_NON_TRUNK: Received 802.1Q BPDU on non trunk GigabitEthernet0/0 VLAN0001.
*Sep 16 09:13:40:977: %SPANTREE-7-BLOCK_PORT_TYPE: Blocking GigabitEthernet0/0 on VLAN0001. Inconsistent port type.
Two switches are interconnected using interface GigabitEthernet0/0 on both sides. While configuring one of the switches, a network engineer receives
the logging message. Which action resolves this issue?
A. Shutdown interface GigabitEthernet0/0 and bring it back up
B. Configure interface GigabitEthernet0/0 as a trunk port
C. Block VLAN1 on the trunk interface GigaEthernet0/0
D. Configure interface GigabitEthernet0/0 as an access port
Correct Answer: B
QUESTION 4

An engineer must configure router R1 to allow only NETCONF connections from the management VLAN. Which command completes this
configuration?
A. R1(config)# netconf-yang ssh ipv4 access-list name netconfacl
B. R1(config)# ip http secure-server
R1(config)# ip http accounting commands 12 default
C. R1(config-if)# ip access-group netconfacl out
D. R1(config-if)# ip access-group netconfacl in
Correct Answer: A
QUESTION 5

An engineer is troubleshooting an issue with client devices triggering excessive power changes on APs in the 2.4 GHz band. Which action resolves this
issue?
A. Disable Coverage Hole Detection
B. Disable Aironet IE
C. Set the 802.11 b/g/n DTIM interval to 0
D. Enable MFP Client Protection

Correct Answer: B
QUESTION 6
Which virtual mac address does HSRP group 12 use?
A. 00:5e:0c:07:ac:12
B. 00:00:0c:07:ac:0c
C. 00:05:5e:00:0c:12
D. 05:43:97:80:88:1c
Correct Answer: B
QUESTION 7
How is OAuth framework used in REST API?
A. by providing the external application a token that authorizes access to the account
B. by providing the user credentials to the external application
C. as a framework to hide the security information in the REST URL
D. as a framework to hash the security information in the REST URL
Correct Answer: A
QUESTION 8
hostname Cat3850
!
interface GigabitEthernet0/0
vrf forwarding Mgmt-vrf
ip address 198.51.100.214 255.255.255.0
no shutdown
!
ip route vrf Mgmt-vrf 0.0.0.0 0.0.0.0 198.51.100.1
The administrator must extend the configuration of the switch to perform remote logging using syslog according to these requirements:
+ syslog server: 203.0.113.11 reachable through Gi0/0
+ initial message severity: notifications
+ message transport: reliable
Which two commands must be added to the configuration to accomplish this goal? (Choose two)

A. logging source-interface GigabitEthernet0/0 vrf Mgmt-vrf
B. logging host 203.0.113.11 vrf Mgmt-vrf
C. logging trap notifications
D. logging host 203.0.113.11 vrf Mgmt-vrf transport tcp
E. logging monitor notifications
Correct Answer: CD
QUESTION 9
A wireless administrator must create a new web authentication corporate SSID that will be using ISE as the external RADIUS server. The guest VLAN
must be specified after the authentication completes. Which action must be performed to allow the ISE server to specify the guest VLAN?
A. enable NAC state
B. set AAA Policy name
C. enable AAA Override
D. set RADIUS Profiling
Correct Answer: A
QUESTION 10
args_dict = {'1st_item': '645298791871446',
'2nd_item_that_must_display':'jlugyydt'}
for key,value in args_dict.items():
txt='{:#<15} : {:#<10}'.format(key,str(value))
print(txt)
What is the output of this code?
A. 1st_item####### : 8791871446
at_must_display: jlugyydt
B. 1st_item#######: 645298791871446
2nd_item_that_must_display: jlugyydt##
C. 1st_item#######: 6452987918
2nd_item_that_m: jlugyydt##
D. 645298791871446
##jlugyydt

Correct Answer: B
QUESTION 11
devices = []
file = open('devices.txt','r')
for line in file:
device_info_list = line.strip().split(',')
device_info = {}
device_info['name'] = device_info_list[0]
device_info['os-type'] = device_info_list[1]
device_info['ip'] = device_info_list[2]
device_info['username'] = device_info_list[3]
device_info['password'] = device_info_list[4]
devices.append(device_info)
print(devices)
file.close()
What is achieved when this Python script is executed?
A. All devices that are looped through in the devices.txt file are put into a single dictionary that is appended to the parent list
B. Each device that is looped through in the devices.txt file is put into its own dictionary that is appended to the parent list.
C. Each device that is looped through in the devices.txt file is put into its own list that is appended to the parent dictionary.
D. All devices that are looped through in the devices.txt file are put into a list that is appended to the parent dictionary.
Correct Answer: B
QUESTION 12
Which feature is available to clients using Layer 2 roaming in a wireless infrastructure?
A. Roam to a different wireless controller that is on a different subnet and maintain the same IP address.
B. Associate to a new access point on a different wireless controller and change the IP address without connectivity interruption.
C. Associate to a new access point on the same wireless controller and change the IP address without connectivity interruption.
D. Roam to a different wireless controller that shares the same subnet and maintain the same IP address.
Correct Answer: D

QUESTION 13
What is one difference between the RIB and the FIB?
A. The RIB works at the data plane, and the FIB works at the control plane.
B. The RIB is known as the CEF table, and the FIB is known as the routing table.
C. The FIB contains routing prefixes, and the RIB contains the Layer 2 and Layer 3 information necessary to make a forwarding decision.
D. The RIB keeps all routing information received from peers, and the FIB keeps the minimum information necessary to make a forwarding decision.
Correct Answer: D
QUESTION 14
An engineer must save the configuration of router R2 using the NETCONF protocol. Which script must be used?
A.

B.
C.
D.
Correct Answer: A
QUESTION 15
Which language defines the structure or modeling of data for NETCONF and RESTCONF?
A. YAML
B. XML
C. JSON
D. YANG
Correct Answer: D

QUESTION 16
What is a benefit of YANG modules?
A. tightly coupled models with encoding to improve performance
B. easier multivendor interoperability provided by common or industry models
C. avoidance of ecosystem fragmentation by having fixed modules that cannot be changed
D. single protocol and model coupling to simplify maintenance and support
Correct Answer: B
QUESTION 17
What is the purpose of an integration API in Cisco DNA Center?
A. Allow the platform into approval chains in ITSM.
B. Enable external systems to take actions in response to an event.
C. Enable discovery and control of the network by using HTTPS verbs.
D. Obtain information about clients, sites, and topology from Cisco DNA Center.
Correct Answer: A
QUESTION 18
A customer requires their wireless network to be fully functional, even if the wireless controller fails. Which wireless design supports these
requirements?
A. FlexConnect
B. mesh
C. centralized
D. embedded
Correct Answer: A
QUESTION 19
Which two conditions occur when the primary route processor fails on a switch that is using dual route processors with stateful switchover? (Choose
two)
A. Data forwarding can continue along known paths until routing protocol information is restored.
B. Data forwarding is stopped until the routing protocols reconverge after the switchover.
C. The standby route processor is fully initialized and state information is maintained.
D. User sessions are immediately recreated on the new active route processor.

E. The standby route processor initialization is started when the primary router processor fails.
Correct Answer: AE
QUESTION 20

Which configuration must be added to R2 to enable PC3 to obtain a DHCP address and successfully ping PC1?
A. Router(config)# vrf definition PRODUCTION
Router(config-vrf)# vnet tag 100
Router(config)# interface GigabitEthernet 0/0
Router(config-if)# vnet trunk
B. Router(config)# vrf definition PRODUCTION
Router(config-vrf)# rd 1:100
Router(config-vrf)# address-family ipv4
Router(config)# router eigrp 100
Router(config-rtr)# route-target export 1:100
C. Router(config)# vrf definition PRODUCTION
Router(config-vrf)# rd 1:100
Router(config)# router eigrp 100
Router(config-rtr)# redistribute vrf PRODUCTION
D. Router(config)# vrf definition PRODUCTION
Router(config-vrf)# address-family ipv4
Router(config)# interface GigabitEthernet 0/0
Router(config-if)# vrf forwarding PRODUCTION
Router(config-if)# ip address 10.199.0.1 255.255.252.0
Router(config)# ip dhcp pool R&D
Router(dhcp-config)# vrf PRODUCTION
Correct Answer: D
QUESTION 21
In Cisco DNA Center, what is used to publish events and notifications to a third-party product such as IPAM?
A. intent API
B. southbound SDK
C. integration API
D. RESTful API
Correct Answer: C
QUESTION 22

Which command is required to validate that an IP SLA configuration matches the traffic between the branch office and the central site?
A. R1# show ip sla group schedule
B. R1# show ip route
C. R1# show ip sla configuration
D. R1# show ip sla statistics
Correct Answer: D
QUESTION 23

PC 2 cannot communicate with PC 4. Which configuration resolves this issue?
A. SW1(config)# interface Gigabitethernet 2/1
SW1(config-if)# switchport mode trunk
B. SW1(config)# interface Gigabitethernet 2/1
SW1(config-if)# switchport mode access
SW1(config-if)# switchport access vlan 10
C. SW1(config)# interface Gigabitethernet 2/1
SW1(config-if)# switchport trunk allowed vlan add 10

D. SW1(config)# interface Gigabitethernet 2/1
SW1(config-if)# switchport vlan mapping 10 10
Correct Answer: C
QUESTION 24
Which function does a virtual switch provide?
A. RAID storage for virtual machines
B. connectivity between virtual machines
C. CPU context switching for multitasking between virtual machines
D. emulation of power for virtual machines
Correct Answer: B
QUESTION 25
In which way are EIGRP and OSPF similar?
A. They both support unequal-cost load balancing.
B. They both support MD5 authentication for routing updates.
C. They both support autosummarization.
D. They have similar CPU usage, scalability, and network convergence times.
Correct Answer: B
QUESTION 26
1 def main():
2 vlans = {'vlan10':'192.168.1.0',
3 'vlan20':'192.168.2.0',
4 'vlan30':'192.168.3.0' }
5 vlans_key(vlans)
7 def vlans_key(vlans):
8 for key in vlans.keys():
9 print(str(key) + ' '+ str(vlans[key]))
11 if __name__ == '__main__':
12 main()
What is printed to the console when this script is run?

A. a key-value pair in tuple type
B. a key-value pair in list type
C. a key-value pair in string type
D. an error
Correct Answer: C
QUESTION 27
Drag and drop the characteristics from the left onto the corresponding infrastructure deployment models on the right.
A. Cloud Infrastructure
-> costs based on usage
-> able to scale rapidly
-> shared control of resources
On-Primises
-> complete control of resources
-> large up-front costs
Correct Answer: A
QUESTION 28

Drag and drop the characteristics from the left onto the corresponding infrastructure deployment models on the right.
A. Cloud
-> saves on capital costs
-> fast depoyment of new services
On-Primises
-> provides full control of sensitive data
-> improves service availability by supporting multiple WAN connectivity options
Correct Answer: A
QUESTION 29
Which unit of measure is used to measure wireless RF SNR?
A. mW
B. bBm
C. dB
D. dBi
Correct Answer: C
QUESTION 30
What do Chef and Ansible have in common?
A. They rely on a declarative approach.

B. They rely on a procedural approach.
C. They use YAML as their primary configuration syntax.
D. They are clientless architectures.
Correct Answer: B
QUESTION 31
Request URL: https://www.cisco.com/libs/granite/csrf/token.json
Request Method: GET
Status Code: 403
Remote Address: 23.207.65.173:443
Referrer Policy: strict-origin-when-cross-origin
Why was the response code generated?
A. The resource was unreachable
B. Access was denied based on the user permissions.
C. The resource 15 no longer available on the server.
D. There is a conflict in the current state of the resource.
Correct Answer: B
QUESTION 32

A network engineer is troubleshooting an issue with the file server based on reports of slow file transmissions. Which two commands or command sets
are required in switch SW1 to analyze the traffic from the file server with a packet analyzer? (Choose two)
A. SW1#show monitor
B. SW1(config)#monitor session 1 source interface gigabitethernet0/3
SW1(config)#monitor session 1 destination interface gigabitethernet0/1 encapsulation replicate
C. SW1#show ip route
D. SW1#show vlan
Correct Answer: AB
QUESTION 33
When is GLBP preferred over HSRP?
A. When encrypted helm are required between gateways h a single group
B. When the traffic load needs to be shared between multiple gateways using a single virtual IP
C. When the gateway routers are a mix of Cisco and non-Cisco routers
D. When clients need the gateway MAC address lo Be the same between multiple gateways
Correct Answer: B

QUESTION 34
The NETCONF object is sent to a Cisco IOS XE switch. What is the purpose of the object?
A. View the configuration of all GigabitEthernet interfaces.
B. Discover the IP address of interface GigabitEthernet.
C. Set the description of interface GigabitEthernet1 to “1”.
D. Remove the IP address from interface GigabitEthernet1.
Correct Answer: B
QUESTION 35
Drag and drop the automation characteristics from the left onto the corresponding tools on the right.

A. Ansible
-> all functions are performed over SSH
-> YAML configuration language
-> based on Python
Chef
-> Ruby syntax in configuration files
Correct Answer: A
QUESTION 36
Router# configure terminal
Router(config)# interface GigabitEthernet0/1
Router(config-if)#ip address 10.0.0.3 255.255.255.0
Router(config-if)# standby 512 ip 10.0.0.1
An engineer attempts to configure standby group 512 on interface GigabitEthernet0/1, but the configuration is not accepted. Which command resolves
this problem?
A. standby version 2
B. standby 512 preempt
C. standby redirects
D. standby 512 priority 100

Correct Answer: A
QUESTION 37
Drag and drop the characteristics from the left onto the deployment models on the right.
A. Cloud
-> Remote access requires an Internet connection only
-> This model is cost-effective
On-Premises
-> Remote access must be arranged via third-party solutions
-> This model is high-maintenance and has high operating costs
Correct Answer: A
QUESTION 38
An engineer must configure router R1 to validate user logins via RADIUS and fall back to the local user database if the RADIUS server is not available.
Which configuration must be applied?
A. aaa authorization exec default radius local
B. aaa authorization exec default radius
C. aaa authentication exec default radius local
D. aaa authentication exec default radius

Correct Answer: C
QUESTION 39
What is a characteristics of Cisco SD-WAN?
A. operates over DTLS/TLS authenticated and secured tunnels
B. requires manual secure tunnel configuration
C. uses unique per-device feature templates
D. uses control connections between routers
Correct Answer: A
QUESTION 40
R1#ping 10.4.4.4 repeat 1

Type escape sequence to abort.
Sending 1, 100-byte ICMP Echos to 10.4.4.4, timeout is 2 seconds:
U
Success rate is 0 percent (0/1)
R1#traceroute 10.4.4.4 numeric probe 1
Tracing the route to 10.4.4.4
VRF info: (vrf in name/id, vrf out name/id)
1 10.0.0.2 5 msec
2 10.23.0.3 7 msec
3 10.34.0.4 8 msec
R1#show logging
--Output omitted--
*Sep 1 13:55:33.416: ICMP: dst (10.0.0.1) administratively prohibited unreachable rcv from 10.23.0.3
*Sep 1 13:55:33.845: ICMP: time exceeded rcv from 10.0.0.2
*Sep 1 13:55:33.856: ICMP: time exceeded rcv from 10.23.0.3
*Sep 1 13:55:33.867: ICMP: dst (10.0.0.1) port unreachable rcv from 10.34.0.4
What is the cause of the communication failure between R1 and R4?
A. R1 is configured with the no ip unreachables command.
B. R2 is denying ICMP
C. R4 is denying ICMP.
D. R3 is denying ICMP.
Correct Answer: D
QUESTION 41
Which two functions is an edge node responsible for? (Choose two)
A. provides multiple entry and exit points for fabric traffic
B. provides the default exit point for fabric traffic
C. provides the default entry point for fabric traffic
D. provides a host database that maps endpoint IDs to a current location
E. authenticates endpoints
Correct Answer: AE
QUESTION 42
Which hypervisor requires a host OS to run and is not allowed to directly access the hosts hardware and resources?

A. native
B. bare metal
C. type 1
D. type 2
Correct Answer: D
QUESTION 43
Where is the wireless LAN controller located in a mobility express deployment?
A. There is no wireless LAN controller in the network.
B. The wireless LAN controller is embedded into the access point.
C. The wireless LAN controller exists in the cloud.
D. The wireless LAN controller exists in a server that is dedicated for this purpose.
Correct Answer: A
QUESTION 44
Which mechanism can be used to enforce network access authentication against an AAA server if the endpoint does not support the 802.1X supplicant
functionality?
A. private VLANs
B. port security
C. MAC Authentication Bypass
D. MACsec
Correct Answer: C
QUESTION 45
Which configuration enables a device to be configured via NETCONF over SSHv2?
A. hostname Device
!
username admin password 0 admin
!
ip domain-name cisco.com
crypto key generator rsa modulus 2048
ip ssh version 2
!

netconf-yang
!
line vty 0 15
login local
B. hostname Device
!
aaa new-model
!
username cisco privilege 15 password cisco
!
crypto key generate rsa modulus 2048
ip ssh version 2
!
aaa authentication login default local
aaa authorization exec default local
!
netconf-yang
netconf ssh
C. hostname Device
!
aaa new-model
!
username admin privilege 15 password 0 admin
!
ip ssh version 2
!
netconf-yang
D. hostname Device
!
username cisco1 privilege 15 password 0 cisco1
!
ip ssh version 2
!
netconf ssh
!
line vty 0 15
login local

Correct Answer: B
QUESTION 46
An engineer receives a report that an application exhibits poor performance. On the switch where the server is connected, this syslog message is visible:
SW_MATM-4-MACFLAP_NOTIF: Host 0054.3962.7651 in vlan 14 is flapping between port Gi1/0/1 and port Gi1/0/2.
What is causing the problem?
A. undesirable load-balancing configuration on the switch
B. invalid port channel configuration on the switch
C. wrong SFP+ and cable connected between the server and the switch
D. failed NIC on the server
Correct Answer: B
QUESTION 47
Drag and drop the snippets onto the blanks within the code to construct a script that brings up the failover Ethernet port if the primary port goes down
and also shuts down the failover port when the primary returns to service. Not all options are used.

A. 1. Down
2. GigabitEthernet4/0/9
3. Shutdown
Correct Answer: A
QUESTION 48
A customer requires their wireless data traffic to egress at the switch port of the access point. Which access point mode supports this?
A. FlexConnect
B. Sniffer
C. Bridge
D. Monitor
Correct Answer: A
QUESTION 49
What is a capability of the Cisco DNA Center southbound API?
A. It adds support for managing non-Cisco devices from Cisco DNA Center.
B. It connects to ITSM services such as ServiceNow.
C. It sends webhooks from Cisco DNA Center when alerts are triggered.
D. It allows administrators to make API calls to Cisco DNA Center.
Correct Answer: A
QUESTION 50
What is a command-line tool for consuming REST APIs?
A. Python requests
B. Postman
C. cURL
D. Firefox
Correct Answer: C
QUESTION 51

Which command is required on router R1 to start receiving RESTCONF requests?
A. R1(config)# ip http accounting commands 12 default
B. R1(config)# ip http server
C. R1(config)# restconf
D. R1(config)# ip http access-class 12
Correct Answer: C
QUESTION 52

Cat9300(config)# monitor session 1 type erspan-source
Cat9300(config-mon-erspan-src)# source interface Gi1/0/3
Cat9300(config-mon-erspan-src)# destination
Cat9300(config-mon-erspan-src-dst)# erspan-id 1
Cat9300(config-mon-erspan-src-dst)# ip address 198.51.100.123
Cat9300(config-mon-erspan-src-dst)# origin ip address 10.4.255.100
Cat9300(config-mon-erspan-src-dst)# do ping 198.51.100.123 source 10.4.255.100
Sending 5, 100-byte ICMP Echos to 198.51.100.123, timeout is 2 seconds:
Packet sent with a source address of 10.4.255.100
.!!!!
Success rate is 80 percent (4/5), round-trip min/avg/max = 1/1/1 ms
The administrator configures an ERSPAN session, but no packets are received on the destination host. Which action is required to complete the
configuration?
A. Ensure that the ERSPAN destination addresses are not reachable through the Mgmt-vrf VRF.
B. Ensure that the ERSPAN destination is reachable from the switch.
C. Configure the ERSPAN destination VLAN as an RSPAN VLAN.
D. Enable the ERSPAN session.
Correct Answer: D
QUESTION 53
1 def main ():
2 vlans_list = [10, 20, 30]
3 add_vlans(vlans_list)
4 print(vlans_list)
5 def add_vlans(vlans):
6 for i in range(len(vlans)):
7 vlans[i]+=100
9 if __name__ == '__main__':
10 main()
What is the result of running this code?
A. A list of lists is created.
B. A list of new VLANs is created.
C. An error is displayed.

D. A dictionary is created.
Correct Answer: B
QUESTION 54
How does Cisco Express Forwarding switching differ from process switching on Cisco devices?
A. Cisco Express Forwarding switching saves memory by storing adjacency tables in dedicated memory on the line cards, and process switching stores
all tables in the main memory.
B. Cisco Express Forwarding switching uses adjacency tables built by the CDP protocol, and process switching uses the routing table.
C. Cisco Express Forwarding switching uses dedicated hardware processors, and process switching uses the main processor.
D. Cisco Express Forwarding switching uses a proprietary protocol based on IS-IS for MAC address lookup, and process switching uses the MAC
address table.
Correct Answer: C

Exam B
QUESTION 1
A customer has a wireless network deployed within a multi-tenant building. The network provides client access, location-based services, and is
monitored using Cisco DNA Center. The security department wants to locate and track malicious devices based on threat signatures. Which feature is
required for this solution?
A. Cisco aWIPS policies on Cisco DNA Center
B. Cisco aWIPS policies on the WLC
C. malicious rogue rules on Cisco DNA Center
D. malicious rogue rules on the WLC
Correct Answer: A
QUESTION 2

An engineer configures a trunk between SW1 and SW2 but tagged packets are not passing. Which action fixes the issue?
A. Configure SW2 with encapsulation dot1q on interface FastEthernet0/1.
B. Configure SW1 with dynamic auto mode on interface FastEthernet0/1
C. Configure FastEthernet0/1 on both switches for static trunking.
D. Configure the native VLAN to be the same VLAN on both switches on interface FastEthernet0/1
Correct Answer: A
QUESTION 3

In a Cisco SD-Access wireless environment, which device is responsible for hosting the anycast gateway?
A. fabric border node
B. fusion router
C. fabrice edge node
D. control plance node
Correct Answer: C
QUESTION 4
Drag and drop the characteristics from the left onto the switching architectures on the right.
A. Process Switching
-> low switching performance
Cisco Express Forwarding
-> proprietary switching mechanism
-> supports the centralized and distributed modes of operation
Correct Answer: A
QUESTION 5
monitor session 11 type erspan-source
source interface GigabitEthernet3
destination
erspan-id 12

ip address 10.10.10.10
origin ip address 10.100.10.10
Which command set completes the ERSPAN session configuration?
A. monitor session 12 type erspan-destination
destination interface GigabitEthernet4
source
erspan-id 12
B. monitor session 11 type erspan-destination
source
erspan-id 11
C. monitor session 12 type erspan-destination
source
erspan-id 11
D. monitor session 11 type erspan-destination
source
erspan-id 12
ip address 10.100.10.10
Correct Answer: A
QUESTION 6
Based on the router’s API output in JSON format below, which Python code will display the value of the “role” key?

A. json_data = json.loads(response.text)
print(json_data[response][0][role])
B. json_data = response.json()
print(json_data[‘response’][family][‘role’])
C. json_data = response.json()
print(json_data[‘response’][0][‘role’])
D. json_data = json.loads(response.text)
print(json_data[‘response’][‘family’][‘role’])
Correct Answer: C
QUESTION 7

Clients report that they cannot connect to this SSID using the provided PSK. Which action will resolve this issue?
A. Select the PSK under authentication key management.
B. Define the correct Radio Policy.
C. Apply the changes this SSID.
D. Apply the correct interface to this WLAN.
Correct Answer: D
QUESTION 8

Which configuration is required to summarize Area 2 networks that are advertised to Area 0?
A. RouterB(config)# router ospf 1
RouterB(config-router)# network 192.168.38.0 255.255.252.0
B. RouterB(config)# router ospf 1
RouterB(config-router)# area 2 range 192.168.36.0 255.255.255.0
C. RouterB(config)# router ospf 1
RouterB(config-router)# network 192.168.38.0 255.255.255.0
D. RouterB(config)# router ospf 1
RouterB(config-router)# area 2 range 192.168.36.0 255.255.252.0
Correct Answer: D
QUESTION 9
ip access-list extended ACL-CoPP-Management
permit udp any eq ntp any
permit udp any any eq snmp
permit tcp any any eq 22
permit tcp any eq 22 any established
class-map match-all CLASS-CoPP-Management
match access-group name ACL-CoPP-Management
An engineer must protect the CPU of the router from high rates of NTP, SNMP, and SSH traffic. Which two configurations must be applied to drop these
types of traffic when it continuously exceeds 320 kbps? (Choose two)
A. R1 (config)#policy-map POLICY-CoPP
R1(config-pmap)#class CLASS-CoPP-Management
R1(config-pmap-c)#police 320000 conform-action transmit exceed-action drop violate-action drop
B. R1(config)#control-plane
R1(config-cp)# service-policy output POLICY-CoPP
C. R1(config-pmap)#class CLASS-CoPP-Management

R1(config-pmap-c)#police 32 conform-action transmit exceed-action drop violate-action transmit
D. R1(config)#policy-map POLICY-CoPP
R1(config-pmap)#class CLASS-CoPP-Management
R1(config-pmap-c)#police 320000 conform-action transmit exceed-action transmit violate-action drop
E. R1(config)#control-plane
R1(config-cp)# service-policy input POLICY-CoPP
Correct Answer: AE
QUESTION 10

What are two results of the NAT configuration? (Choose two)
A. R1 is performing NAT for inside addresses and outside address
B. R1 looks at the destination IP address of packets entering S0/0 and destined for inside hosts
C. Packets with a destination of 200.1.1.1 are translated to 10.1.1.1 or .2, respectively
D. A packet that is sent to 200.1.1.1 from 10.1.1.1 is translated to 209.165.201.1 on R1
E. R1 processes packets entering E0/0 and S0/0 by examining the source IP address

Correct Answer: BD
QUESTION 11
Which set of commands is required to configure and verify the VRF for Site 1 Network A on router R1?
A. R1#ip routing
R1(config)#ip vrf 100
!
R1(config)#interface Gi0/2
R1(config-if)#ip address 10.0.1.1 255.255.255.0
R1#show ip vrf
B. R1#ip routing
!
C. R1#ip routing

!
R1(config-if)#ip vrf forwarding 100
R1#show ip vrf
D. R1#ip routing
R1(config-vrf)#rd 100:1
R1(config-vrf)# address family ipv4
!
R1#show ip route
Correct Answer: C
QUESTION 12
Where in Cisco DNA Center is documentation of each API call, organized by its functional area?
A. Developer Toolkit
B. platform management
C. platform bundles
D. Runtime Dashboard
Correct Answer: A
QUESTION 13
How do the RIB and the FIB differ?
A. FIB contains routes learned through a dynamic routing protocol, and the RIB contains routes that are static or directly connected.
B. RIB contains the interface for a destination, and the FIB contains the next hop information.
C. FIB is derived from the control plane, and the RIB is derived from the data plane.
D. RIB is derived from the control plane, and the FIB is derived from the RIB.
Correct Answer: D
QUESTION 14
What does a YANG model provide?
A. standardized data structure independent of the transport protocols

B. creation of transport protocols and their interaction with the OS
C. user access to interact directly with the CLI of the device to receive or modify network configurations
D. standardized data structure that can be used only with NETCONF or RESTCONF transport protocols
Correct Answer: D
QUESTION 15
A network engineer must configure a switch to allow remote access for all feasible protocols. Only a password must be requested for device
authentication and all idle sessions must be terminated in 30 minutes. Which configuration must be applied?
A. line vty 0 15
password cisco
transport input all
exec-timeout 0 30
B. line console 0
password cisco
exec-timeout 30 0
C. line vty 0 15
password cisco
transport input telnet ssh
exec-timeout 30 0
D. username cisco privilege 15 cisco
line vty 0 15
transport input telnet ssh
login local
exec-timeout 0 30
Correct Answer: C
QUESTION 16

A company has an internal wireless network with a hidden SSID and RADIUS-based client authentication for increased security. An employee attempts
to manually add the company network to a laptop, but the laptop does not attempt to connect to the network. The regulatory domains of the access
points and the laptop are identical. Which action resolves this issue?
A. Ensure that the “Connect even if this network is not broadcasting” option is selected.
B. Limit the enabled wireless channels on the laptop to the maximum channel range that is supported by the access points.
C. Change the security type to WPA2-Personal AES.
D. Use the empty string as the hidden SSID network name.
Correct Answer: A
QUESTION 17
What is the recommended minimum SNR for voice applications on wireless networks?
A. 10
B. 25
C. 15
D. 20
Correct Answer: B
QUESTION 18
Drag and drop the tools from the left onto the agent types on the right.
A. Agentless
-> Terraform

-> Ansible
Agent-Based
-> Chef
Correct Answer: A
QUESTION 19
Which free application has the ability to make REST cans against Cisco DMA Center?
A. API Explorer
B. REST Explorer
C. Postman
D. Mozilla
Correct Answer: C
QUESTION 20
If AP power level is increased from 25 mW to 100 mW, what is the power difference in dBm?
A. 6 dBm
B. 14 dBm
C. 17 dBm
D. 20 dBm
Correct Answer: A
QUESTION 21
When does a Cisco StackWise primary switch lose its role?
A. when the priority value of a stack member is changed to a higher value
B. when a switch with a higher priority is added to the stack
C. when the stack primary is reset
D. when a stack member fails
Correct Answer: C
QUESTION 22
Which activity requires access to Cisco DNA Center CLI?

A. provisioning a wireless LAN controller
B. creating a configuration template
C. upgrading the Cisco DNA Center software
D. graceful shutdown of Cisco DNA Center
Correct Answer: D
QUESTION 23
Which A record type should be configured for access points to resolve the IP address of a wireless LAN controller using DNS?
A. CISCO.CONTROLLER.localdomain
B. CISCO.CAPWAP.CONTROLLER.localdomain
C. CISCO-CONTROLLER.localdomain
D. CISCO-CAPWAP-CONTROLLER.localdomain
Correct Answer: D
QUESTION 24
Which NTP mode must be activated when using a Cisco router as an NTP authoritative server?
A. primary
B. server
C. broadcast client
D. peer
Correct Answer: B
QUESTION 25
Refer to the exhibit. Which router is elected as the VRRP primary virtual router?
A. Interface GigabitEthernet 1/0
ip address 192.168.0.1 255.255.255.0
vrrp priority 120
B. Interface GigabitEthernet 1/0
ip address 192.168.0.200 255.255.255.0
vrrp priority 100
C. Interface GigabitEthernet 1/0
ip address 192.168.0.3 255.255.255.0
vrrp priority 130

D. Interface GigabitEthernet 1/0
ip address 192.168.0.4 255.255.255.0
vrrp priority 90
Correct Answer: C
QUESTION 26
Which signal strength and noise values meet the minimum SNR for voice networks?
A. signal strength -67 dBm, noise 91 dBm
B. signal strength -69 dBm, noise 94 dBm
C. signal strength -68 dBm, noise 89 dBm
D. signal strength -66 dBm, noise 90 dBm
Correct Answer: B
QUESTION 27
An engineer is connected to a Cisco router through a Telnet session. Which command must be issued to view the logging messages from the current
session as soon as they are generated by the router?
A. logging buffer
B. service timestamps log uptime
C. logging host
D. terminal monitor
Correct Answer: D
QUESTION 28
An engineer is configuring RADIUS-Based Authentication with EAP. MS-CHAPv2 is configured on a client device. Which outer method protocol must be
configured on the ISE to support this authentication type?
A. EAP-TLS
B. EAP-FAST
C. LDAP
D. PEAP
Correct Answer: D
QUESTION 29
Drag and drop the characteristics from the left onto the orchestration tool classifications on the right.

A. Configuration Management
-> mutable infrastructure
-> designed to install and manage software on existing servers
Orchestration
-> immutable infrastructure
-> designed to provision the servers
Correct Answer: A
QUESTION 30
R1#show ip bgp summary
BGP router identifier 1.1.1.1, local AS number 65001
BGP table version is 1, main routing table version 1
Neighbor V AS MsgRcvd MsgSent TblVer InQ OutQ Up/Down State/PfxRcd
192.168.12.2 4 65002 0 0 1 0 0 00:00:15 Idle
R1#show ip interface brief | include 192.168.12
FastEthernet0/0 192.168.12.1 YES NVRAM up up
R2#show ip bgp summary

192.168.12.1 4 65001 0 0 1 0 0 00:01:00 Idle (Admin)
R2#show ip interface brief | include 192.168.12
Ethernet0/0 192.168.12.2 YES NVRAM up up
R2#ping 192.168.12.1
Sending 5,100-byte ICMP Echos to 192.168.12.1, timeout is 2 seconds:
!!!!!
R1 and R2 are directly connected, but the BGP session does not establish. Which action must be taken to build an eBGP session?
A. Configure ip route 1.1.1.1 0.0.0.0 192.168.12.1 on R2.
B. Configure neighbor 192.168.12.1 activate under R2 BGP process.
C. Configure neighbor 2.2.2.2 remote-as 65002 under R1 BGP process.
D. Configure no neighbor 192.168.12.1 shutdown under R2 BGP process.
Correct Answer: D
QUESTION 31

Hosts PC1 PC2 and PC3 must access resources on Server1. An engineer configures NAT on Router R1 to enable the communication and enters the
show command to verify operation. Which IP address is used by the hosts when they communicate globally to Server1?
A. 155.1.1.5
B. random addresses in the 155.1.1.0/24 range
C. their own address in the 10.10.10.0/24 range
D. 155.1.1.1
Correct Answer: D
QUESTION 32
Drag and drop the characteristics from the left onto the infrastructure deployment models on the right.

A. On-Premises
-> Infrastructure requires large and regular investments
-> It requires capacity planning for power and cooling
Cloud
-> Capacity easily scales up or down
-> It enables users to access resources from anywhere
Correct Answer: A
QUESTION 33
Which technology reduces the implementation of STP and leverages both unicast and multicast?
A. VPC
B. VXLAN
C. VSS
D. VLAN
Correct Answer: C
QUESTION 34
Which application has the ability to make REST calls against Cisco DNA Center?
A. API Explorer
B. Postman

C. REST Explorer
D. Mozilla
Correct Answer: B
QUESTION 35

Which GRE tunnel configuration command is missing on R2?
A. tunnel source 192.181.2
B. tunnel source 172.16.1.0
C. tunnel source 200.1.1.1

D. tunnel destination 200.1.1.1
Correct Answer: C
QUESTION 36
A company recently decided to use RESTCONF instead of NETCONF and many of their NETCONF scripts contain the operation <edit-config>
(operation=”create”). Which RESTCONF operation must be used to replace these statements?
A. CREATE
B. GET
C. PUT
D. POST
Correct Answer: D
QUESTION 37
An engineer must protect the password for the VTY lines against over-the-shoulder attacks. Which configuration should be applied?
A. service password-encryption
B. username netadmin secret 9 $9$vFpMf8elb4RVV8$seZ/bDA
C. username netadmin secret 7$1$42J36k33008Pyh4QzwXyZ4
D. line vty 0 15 p3ssword XD822j
Correct Answer: A
QUESTION 38
Which QoS feature uses the IP Precedence bits in the ToS field of the IP packet header to partition traffic into different priority levels?
A. marking
B. shaping
C. policing
D. classification
Correct Answer: D
QUESTION 39

R1 has a BGP neighborship with a directly connected router on interface Gi0/0. Which command set is applied between the iterations of show ip bgp
2.2.2.2?
A. R1(config)#router bgp 65001
R1(config-router)#neighbor 192.168.50.2 shutdown
B. R1(config)#router bgp 65002
R1(config-router)#neighbor 192.168.50.2 shutdown
C. R1(config)#ip route 2.2.2.2 255.255.255.255 192.168.50.2
D. R1(config)#no ip route 192.168.50.2 255.255.255.255 Gi0/0
Correct Answer: C
QUESTION 40

An engineer must configure an ERSPAN tunnel that mirrors traffic from Linux1 on Switch1 to Linux2 on Switch2. Which command must be added to the
source configuration to enable the ERSPAN tunnel?
A. (config-mon-erspan-dst-src)#origin ip address 172.16.10.10
B. (config-mon-erspan-dst-src)#no shut
C. (config-mon-erspan-dst-src)#erspan-id 110

D. (config-mon-erspan-dst-src)#erspan-id 172.16.10.10
Correct Answer: C
QUESTION 41
An engineer applies this EEM applet to a router
What does the applet accomplish?
A. It checks the MAC address table every 600 seconds to see if the specified address has been learned.
B. It compares syslog output to the MAC address table every 600 seconds and generates an event when no match is found.
C. It compares syslog output to the MAC address table every 600 seconds and generates an event when there is a match.
D. It generates a syslog message every 600 seconds on the status of the specified MAC address.
Correct Answer: A
QUESTION 42
Drag and drop the code snippets from the bottom onto the blanks in the code to construct a request that configures a deny rule on an access list.

A. 1. access-list-seq-rule
2. deny
3. ip
4. dst-any
Correct Answer: A
QUESTION 43
How is traffic classified when using Cisco TrustSec technology?
A. with the IP address
B. with the VLAN
C. with the security group tag
D. with the MAC address

Correct Answer: C
QUESTION 44
A network administrator must configure router B to allow traffic only from network 10.100.2.0 to networks outside of router B. Which configuration must
be applied?
A. RouterB(config)# access-list 101 permit ip 10.100.2.0 0.0.0.255 any
RouterB(config)# access-list 101 deny any
!
RouterB(config)# int g0/0/0
RouterB(config-if)# ip access-group 101 out
B. RouterB(config)# access-list 101 permit ip 10.100.3.0 0.0.0.255 any
!
C. RouterB(config)# access-list 101 permit ip 10.100.2.0 0.0.0.255 any

!
RouterB(config-if)# ip access-group 101 in
D. RouterB(config)# access-list 101 permit ip 10.100.2.0 0.0.0.255 any
!
Correct Answer: D
QUESTION 45
What is a benefit of using segmentation with TrustSec?
A. Integrity checks prevent data from being modified in transit.
B. Packets sent between endpoints on a LAN are encrypted using symmetric key cryptography.
C. Security group tags enable network segmentation.
D. Firewall rules are streamlined by using business-level profiles.
Correct Answer: C
QUESTION 46

An engineer must reduce the number of Type 1 and Type 2 LSAs that are advertised to R4 within OSPF area 0. Which configuration must be applied?
A. R1# conf t
Router(config)# router ospf 1
Router(config-router)# prefix-suppression
B. R4# conf t
Router(config)# router ospf 1
Router(config-router)# summary-address 10.0.0.0 255.255.255.0
C. R2# conf t
Router(config)# interface Gig0/0
Router(config-router)# ip ospf prefix-suppression
D. R2# conf t
Router(config)# int Gig0/0
Router(config-if)# ip summary-address 10.0.0.0 255.255.255.0
Correct Answer: C

QUESTION 47
Which configuration must be applied to ensure that the preferred path for traffic from AS 65010 toward AS 65020 uses the R2 to R4 path?
A. R4(config)# router bgp 65020
R4(config-router)# bgp default local-preference 300
R5(config)# router bgp 65020
B. R2(config)# router bgp 65010
C. R2(config)# router bgp 65010

D. R4(config)# router bgp 65020
Correct Answer: B
QUESTION 48
What are two best practices when designing a campus Layer 3 infrastructure? (Choose two)
A. Configure passive-interface on nontransit links.
B. Implement security features at the core.
C. Summarize routes from the aggregation layer toward the core layer.
D. Tune Cisco Express Forwarding load balancing hash for ECMP routing.
E. Summarize from the access layer toward the aggregation layer.
Correct Answer: CD
QUESTION 49

Which antenna emits this radiation pattern?
A. omnidirectional
B. RP-TNC
C. dish
D. Yagi
Correct Answer: A
QUESTION 50
import requests
### The authentication part is omitted for brevity purposes

URL = "https://dnac/dna/intent/api/v1/topology/vlan/vlan-names"
VlanNames = requests.get(URL, headers=Header).json()
print(VlanNames)
{'response': ['Vlan1','Vlan3002', 'Vlan3003', 'Vlan1023','Vlan2046','Vlan3009','Vlan3999'], 'version': '1.0'}
How should the programmer access the list of VLANs that were received via the API call?
A. VlanNames[‘response’]
B. VlanNames[0]
C. VlanNames[‘Vlan1’]
D. list(VlanNames)
Correct Answer: A
QUESTION 51
An EEM applet contains this command:
event snmp oid 1.3.6.1.4.3.8.0.5.8.7.1.3 get-type next entry-op gt entry-val 80 poll-interval 8
What is the result of the command?
A. An SNMP event is generated when the value equals 80% for eight polling cycles.
B. An SNMP event is generated when the value is greater than 80% for eight polling cycles.
C. An SNMP event is generated when the value reaches 80%.
D. An SNMP variable is monitored and an action is triggered when the value exceeds 80%.
Correct Answer: D
QUESTION 52
import sqllite3
a= sqlite3.connect.('/home/sdwan-lab/user.sqlite3')
b= a.cursor()
c= "select user from monitor_branch where loopbackip='" + str(ip[i]) + "'"
d= b.execute(c)
e= b.fetchall()
usr= str(e[0])
usr= usr.replace("('","")
usr= usr.replace("',)","")

What does this Python script do?
A. enters the TACACS+ username for a specific IP address
B. reads the username for a specific IP address from a light database
C. writes the username for a specific IP address into a light database
D. enters the RADIUS username for a specific IP address
Correct Answer: B
QUESTION 53
for x in range(6):
print(x)
What is output by this code?
A. 0 5
B. 0 1 2 3 4 5
C. 0 1 2 3 4
D. (0,5)
Correct Answer: B
QUESTION 54
What is the purpose of the weight attribute in an EID-to-RLOC mapping?
A. It determines the administrative distance of LISP generated routes in the RIB.
B. It indicates the load-balancing ratio between ETRs of the same priority.
C. It indicates the preference for using LISP over native IP connectivity.
D. It identifies the preferred RLOC address family.
Correct Answer: B
QUESTION 55
A network engineer is designing a QoS policy for voice and video applications. Which software queuing feature provides strict-priority servicing?
A. Class-Based Weighted Fair Queuing
B. Low Latency Queuing
C. Link Fragmentation

D. Automatic QoS
Correct Answer: B
QUESTION 56
Which characteristic applies to a traditional WAN solution but not to a Cisco SD-WAN solution?
A. lengthy installation times
B. centralized reachability, security, and application policies
C. low complexity and increased overall solution scale
D. operates over DTLS/TLS authenticated and secured tunnels
Correct Answer: A
QUESTION 57
Which of the following are features typically only found in a Next Generation (NextGen) firewall? (Choose two)
A. Network Address Translation (NAT)
B. Secure remote access VPN (RA VPN)
C. Deep packet inspection
D. reputation based malware detection
E. IPSec site-to-site VPN
Correct Answer: CD
QUESTION 58
JSON web tokens (JWT) are used to secure JSON based communications. Which of the following fields make up a JWT? (Choose three)
A. Header
B. Trailer
C. Payload
D. Sequence number
E. Signature
Correct Answer: ACE
QUESTION 59
Ansible is being used in a network for configuration and management automation. Which of the following are true statements regarding Ansible?
(Choose two)

A. Requires an agent on the end device.
B. Utilizes the concept of playbooks to execute the configuration.
C. Uses a pull model, where the end devices pull configuration files from the Ansible server.
D. Utilizes SSH.
Correct Answer: BD
QUESTION 60
In a Cisco Software Defined Networking (SDN) architecture, what is used to describe the API communication between the SDN controller and the
network elements (routers and switches) that it manages?
A. Southbound API
B. Northbound API
C. Westbound API
D. Eastbound API
Correct Answer: A
QUESTION 61
In a Cisco VXLAN based network, which of the following best describes the main function of a VXLAN Tunnel Endpoint (VTEP)?
A. A device that performs VXLAN encapsulation and decapsulation.
B. It is a 24 bit segment ID that defines the broadcast domain.
C. It is the Logical interface where the encapsulation and de-encapsulation occurs.
D. It is a device that performs tunneling using GRE.
Correct Answer: A
QUESTION 62
What does the Cisco DNA Center Authentication API provide?
A. list of global issues that are logged in Cisco DNA Center
B. access token to make calls to Cisco DNA Center
C. list of VLAN names
D. dent health status
Correct Answer: B

QUESTION 63
What is a client who is running 802.1x for authentication reffered to as?
A. supplicant
B. NAC device
C. authenticator
D. policy enforcement point
Correct Answer: A
QUESTION 64

What is achieved by the XML code?
A. It reads the access list sequence numbers from the output of the show ip access-list extended flp command into a dictionary list
B. It displays the output of the show ip access-list extended flp command on the terminal screen
C. It displays the access list sequence numbers from the output of the show ip access-list extended flp command on the terminal screen
D. It reads the output of the show ip access-list extended flp command into a dictionary list
Correct Answer: A
QUESTION 65
What does the statement print(format(0.8, ‘.0%’)) display?
A. 80%
B. 8%
C. .08%
D. 8.8%
Correct Answer: A
QUESTION 66
Router#show running-config | include aaa
aaa new-model
aaa authentication login default group tacacs+
aaa authorization exec default group tacacs+
aaa session-id common
Which configuration enables fallback to local authentication and authorization when no TACACS+ server is available?
A. Router(config)# aaa authentication login default local
Router(config)# aaa authorization exec default local
B. Router(config)# aaa authentication login default group tacacs+ local
Router(config)# aaa authorization exec default group tacacs+ local
C. Router(config)# aaa fallback local
D. Router(config)# aaa authentication login FALLBACK local
Router(config)# aaa authorization exec FALLBACK local
Correct Answer: B

QUESTION 67
Which collection contains the resources to obtain a list of fabric nodes through the vManage API?
A. device management
B. administration
C. device inventory
D. monitoring
Correct Answer: C
QUESTION 68
Which security measure mitigates a man-in-the-middle attack of a REST API?
A. SSL certificates
B. biometric authentication
C. password hash
D. non repudiotion feature
Correct Answer: A
QUESTION 69
Refer to the exhibit. Which two commands ensure that DSW1 becomes root bridge for VLAN 10 and 20? (Choose two)

A. spanning-tree mstp 1 priority 0
B. spanning-tree mst 1 root primary
C. spanning-tree mst vlan 10,20 priority root
D. spanning-tree mst 1 priority 4096
E. spanning-tree mst 1 priority 1
F. spanning-tree mstp vlan 10,20 root primary

Correct Answer: BD
QUESTION 70
Which solution supports end to end line-rate encryption between two sites?
A. IPsec
B. TrustSec
C. MACsec
D. GRE
Correct Answer: C
QUESTION 71
R1# show ip bgp summary
10.255.255.3 4 65000 0 0 1 0 0 Never Idle
R1# ping 10.255.255.3 source lo0
Sending 5, 100-byte ICMP Echos to 10.255.255.3, timeout is 2 seconds
Packet sent with a source address of 10.255.255.1
!!!!!
R1# telnet 10.255.255.3 179 /source-interface lo0
Trying 10.255.255.3, 179 . . .
% Destination unreachable; gateway or host down
R1# debug ip tcp transactions
TCP special event debugging is on
R1#
*Sep 12 10:17:07.268: TCB7F0E49C5AA38 created
*Sep 12 10:17:07.268: TCP0: state was LISTEN -> SYNRCVD [179 -> 10.255.255.3(55290)]
*Sep 12 10:17:07.268: TCP: tcb 7F0E49C5AA38 connection to 10.255.255.3:55290, peer MSS 1460, MSS is 516
*Sep 12 10:17:07.268: TCP: pmtu enabled, mss is now set to 1460
*Sep 12 10:17:07.268: TCP: sending SYN, seq 2953990054, ack 2359850152
*Sep 12 10:17:07.268: TCP0: Connection to 10.255.255.3:55290, advertising MSS 1460

*Sep 12 10:17:07.268: TCP0: ICMP destination unreachable received
An engineer is troubleshooting a newly configured BGP peering that does not establish. What is the reason for the failure?
A. BGP peer 10.255.255.3 is not configured for peering with R1
B. Mandatory BGP parameters between R1 and 10.255.255.3 are mismatched
C. A firewall is blocking access to TCP port 179 on the BGP peer 10.255.255.3
D. Both BGP peers are configured for passive TCP transport
Correct Answer: C
QUESTION 72
Which access control feature does MAB provide?
A. user access based on IP address
B. allows devices to bypass authenticate
C. network access based on the physical address of a device
D. simultaneous user and device authentication
Correct Answer: C
QUESTION 73
Which authorization framework gives third-party applications limited access to HTTP services?
A. IPsec
B. Basic Auth
C. GRE
D. OAuth 2.0
Correct Answer: D
QUESTION 74
In the Cisco DNA Center Image Repository, what is a golden image?
A. The latest software image that is available for a specific device type
B. The Cisco recommended software image for a specific device type.
C. A software image that is compatible with multiple device types.
D. A software image that meets the compliance requirements of the organization.

Correct Answer: B
QUESTION 75
client.load_system_host_keys()
client.set_missing_host_key_policy(paramiko.AutoAddPolicy())
client.connect(ip, port= 22, username= usr, password= pswd)
stdin, stdout, stderr = client.exec_command(t + 'n')
time.sleep(3)
print(t)
for u in stdout:
print(u)
client.close()
Which action results from executing the Python script?
A. display the output of a command that is entered on that device in a single line
B. SSH to the IP address that is manually entered on that device
C. display the output of a command that is entered on that device
D. display the unformatted output of a command that is entered on that device
Correct Answer: C
QUESTION 76
Which two methods are used to assign security group tags to the user in a Cisco Trust Sec architecture? (Choose two)
A. modular QoS
B. policy routing
C. web authentication
D. DHCP
E. IEEE 802.1x
Correct Answer: CE
QUESTION 77
count = 8
while count > 4 :
print(count)

count -= 1
What is output by this code?
A. 8 7 6 5
B. -4 -5 -6 -7
C. -1 -2-3-4
D. 4 5 6 7
Correct Answer: A
QUESTION 78
When a DNS host record is configured for a new Cisco AireOS WLC, which hostname must be added to allow APs to successfully discover the WLC?
A. CONTROLLER-CAPWAP-CISCO
B. CISCO-CONTROLLER-CAPWAP
C. CAPWAP-CISCO-CONTROLLER
D. CISCO-CAPWAP-CONTROLLER
Correct Answer: D
QUESTION 79

An engineer configures a new WLAN that will be used for secure communications; however, wireless clients report that they are able to communicate
with each other. Which action resolves this issue?
A. Enable Client Exclusions
B. Disable Aironet IE
C. Enable Wi-Fi Direct Client Policy
D. Enable P2P Blocking
Correct Answer: D

ENCOR_350-401_June_2023-v1.8.pdf

ENCOR_350-401_June_2023-v1.8.pdf

Recommended

Recommended

More Related Content

Similar to ENCOR_350-401_June_2023-v1.8.pdf

Similar to ENCOR_350-401_June_2023-v1.8.pdf (20)

More from CCIEHOMER

More from CCIEHOMER (9)

Recently uploaded

Recently uploaded (20)

ENCOR_350-401_June_2023-v1.8.pdf