Summer Sale 65% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: exams65

ExamsBrite Dumps

Implementing Cisco Enterprise Network Core Technologies (350-401 ENCOR) Question and Answers

Implementing Cisco Enterprise Network Core Technologies (350-401 ENCOR)

Last Update Jul 16, 2026
Total Questions : 459

We are offering FREE 350-401 Cisco exam questions. All you do is to just go and sign up. Give your details, prepare 350-401 free exam questions and then go for complete pool of Implementing Cisco Enterprise Network Core Technologies (350-401 ENCOR) test questions that will help you more.

350-401 pdf

350-401 PDF

$40.25  $114.99
350-401 Engine

350-401 Testing Engine

$47.25  $134.99
350-401 PDF + Engine

350-401 PDF + Testing Engine

$61.25  $174.99
Questions 1

Options:

Discussion 0
Questions 2

Options:

Discussion 0
Questions 3

Options:

Discussion 0
Questions 4

Options:

Discussion 0
Questions 5

Options:

Discussion 0
Questions 6

Options:

Discussion 0
Questions 7

Options:

Discussion 0
Questions 8

Options:

Discussion 0
Questions 9

OR

Options:

Discussion 0
Questions 10

Options:

Discussion 0
Questions 11

Options:

Discussion 0
Questions 12

Options:

Discussion 0
Questions 13

Options:

Discussion 0
Questions 14

Options:

Discussion 0
Questions 15

Options:

Discussion 0
Questions 16

Options:

Discussion 0
Questions 17

Options:

Discussion 0
Questions 18

Options:

Discussion 0
Questions 19

Options:

Discussion 0
Questions 20

Options:

Discussion 0
Questions 21

Options:

Discussion 0
Questions 22

Options:

Discussion 0
Questions 23

Options:

Discussion 0
Questions 24

Options:

Discussion 0
Questions 25

Options:

Discussion 0
Questions 26

Options:

Discussion 0
Questions 27

Options:

Discussion 0
Questions 28

Options:

Discussion 0
Questions 29

Drag and drop the DHCP messages that are exchanged between a client and an AP into the order they are exchanged on the right.

Options:

Discussion 0
Questions 30

Options:

Discussion 0
Questions 31

Which solution simplifies management of secure access to network resources?

Options:

A.  

TrustSec to logically group internal user environments and assign policies

B.  

ISE to automate network access control leveraging RADIUS AV pairs

C.  

RFC 3580-based solution to enable authenticated access leveraging RADIUS and AV pairs

D.  

802.1AE to secure communication in the network domain

Discussion 0
Questions 32

Which two items are found in YANG data models? (Choose two.)

Options:

A.  

HTTP return codes

B.  

rpc statements

C.  

JSON schema

D.  

XML schema

E.  

container statements

Discussion 0
Questions 33

Which statement describes the IP and MAC allocation requirements for virtual machines on types 1 hypervisors?

Options:

A.  

Each virtual machine requires a unique IP and MAC addresses to be able to reach to other nodes.

B.  

Each virtual machine requires a unique IP address but shares the MAC address with the physical server

C.  

Each virtual machines requires a unique IP address but shares the MAC address with the address of the physical server.

D.  

Each virtual machine requires a unique MAC address but shares the IP address with the physical server.

Discussion 0
Questions 34

Refer to the exhibit.

An engineer attempts to connect to another device from Route1’s console port. Which configuration is needed to allow telnet connections?

Options:

A.  

Option A

B.  

Option B

C.  

Option C

D.  

Option D

Discussion 0
Questions 35

What is one characteristic of an AP that is operating in Mobility Express mode?

Options:

A.  

It is recommended for large scale deployments.

B.  

It requires a centralized WLC.

C.  

At least three APs are needed for WLC redundancy.

D.  

It requires an AP to act as a WLC.

Discussion 0
Questions 36

Which nodes require VXLAN encapsulation support In a Cisco SD-Access deployment?

Options:

A.  

core nodes

B.  

distribution nodes

C.  

border nodes

D.  

aggregation nodes

Discussion 0
Questions 37

What is a client who is using 802.1x for authentication referred to as?

Options:

A.  

authenticator

B.  

policy enforcement point

C.  

NAC device

D.  

supplicant

Discussion 0
Questions 38

Refer to the exhibit. The network administrator must be able to perform configuration changes when all the RADIUS servers are unreachable. Which configuration allows all commands to be authorized if the user has successfully authenticated?

Options:

A.  

aaa authorization exec default group radius if-authenticated

B.  

aaa authorization exec default group radius none

C.  

aaa authorization exec default group radius

D.  

aaa authentication login default group radius local none

Discussion 0
Questions 39

Drag and drop the command snippets from the right onto the blanks in the configuration to create an EEM applet that will enable interface Loopback0 and log a message when the logging message -Interface Loopback0. changed state to administratively down " is received. Not all commands are used.

Options:

Discussion 0
Questions 40

Refer to the exhibit. POSTMAN is showing an attempt to retrieve network device information from Cisco Catalyst Center (formerly DNA Center) API. What is the issue?

Options:

A.  

The token has expired

B.  

The URI string is incorrect

C.  

Authentication has failed

D.  

The JSON payload contains the incorrect UUID

Discussion 0
Questions 41

Drag and drop the configuration management tools from the left onto the configuration styles they use on the right

Options:

Discussion 0
Questions 42

Refer to the exhibit. Which HTTP request produced the REST API response that was returned by the Cisco Catalyst Center (formerly DNA Center) platform?

Options:

A.  

POST /auth/token

B.  

GET /network-device

C.  

GET /template-programmer/template/version/42a3df73-3ef4-49e2-b4f0-6927bbd4bf52

D.  

POST /discovery

Discussion 0
Questions 43

Which tool is used in Cisco Catalyst Center (formerly DNA Center) to build generic configurations that are able to be applied on devices with similar network settings?

Options:

A.  

Authentication Template

B.  

Template Editor

C.  

Application Policies

D.  

Command Runner

Discussion 0
Questions 44

Refer to the exhibit.

Which configuration enables fallback to local authentication and authorization when no TACACS+ server is available?

Options:

A.  

Router(config)# aaa fallback local

B.  

Router(config)# aaa authentication login FALLBACK local

Router(config)# aaa authorization exec FALLBACK local

C.  

Router(config)# aaa authentication login default local

Router(config)# aaa authorization exec default local

D.  

Router(config)# aaa authentication login default group tacacs+ local

Router(config)# aaa authorization exec default group tacacs+ local

Discussion 0
Questions 45

Which function is performed by vSmart in the Cisco Catalyst SD-WAN architecture?

Options:

A.  

facilitation of NAT detection and traversal

B.  

redistribution between OMP and other routing protocols

C.  

distribution of IPsec keys

D.  

execution of localized policies

Discussion 0
Questions 46

In a Cisco SD-Access solution, which protocol is used by an extended node to connect to a single edge node?

Options:

A.  

VXIAN

B.  

IS-IS

C.  

802.1

D.  

CTS

Discussion 0
Questions 47

What is a benefit of MACsec in a multilayered LAN network design?

Options:

A.  

There is no requirement to run IEEE 802.1X when MACsec is enabled on a switch port.

B.  

Layer 2 trunk links between switches can be secured.

C.  

Application flows between hosts on the LAN to remote destinations can be encrypted.

D.  

Layer 3 links between switches can be secured.

Discussion 0
Questions 48

A customer requires their wireless data traffic to egress at the switch port of the access point. Which access point mode supports this?

Options:

A.  

Bridge

B.  

Sniffer

C.  

FlexConnect

D.  

Monitor

Discussion 0
Questions 49

What is the API keys option for REST API authentication?

Options:

A.  

a credential that is transmitted unencrypted

B.  

one-time encrypted token

C.  

a username that is stored in the local router

D.  

a predetermined string that is passed from client to server.

Discussion 0
Questions 50

What is one advantage of using a data modeling language to develop an API client application?

Options:

A.  

Increase in compatibility

B.  

easier feature extensibility

C.  

stronger security properties

D.  

lower resource requirements

Discussion 0
Questions 51

Which tag defines the roaming domain and properties of an AP deployment?

Options:

A.  

RF tag

B.  

policy tag

C.  

site tag

D.  

AP tag

Discussion 0
Questions 52

What do Cisco DNA southbound APIs provide?

Options:

A.  

interface between the controller and the network devices

B.  

interface between the controller and the consumer

C.  

NETCONF API interface for orchestrator communication

D.  

RESTful API interface for orchestrator communication

Discussion 0
Questions 53

Which common type of attack does a data center next-generation firewall protect against?

Options:

A.  

DDoS protection

B.  

Unauthorized analyzers

C.  

Rogue APs

D.  

Malicious or risky applications

Discussion 0
Questions 54

How does NETCONF YANG represent data structures?

Options:

A.  

as strict data structures defined by RFC 6020

B.  

in an XML tree format

C.  

In an HTML format

D.  

as modules within a tree

Discussion 0
Questions 55

Which authorization framework gives third-party applications limited access to HTTP services?

Options:

A.  

IPsec

B.  

GRE

C.  

Basic Auth

D.  

OAuth 2.0

Discussion 0
Questions 56

Refer to the exhibit.

The request shows the following response information:

Request URL: https://www.cisco.com/libs/granite/csrf/token.json

Request Method: GET

Status Code: 403

Remote Address: 23.207.65.173:443

Referrer Policy: strict-origin-when-cross-origin

Why was the response code generated?

Options:

A.  

The resource is no longer available on the server.

B.  

The resource was unreachable.

C.  

There is a conflict in the current state of the resource.

D.  

Access was denied based on the user permissions.

Discussion 0
Questions 57

Which feature does the Cisco DNA Center User-Defined Network workflow provide?

Options:

A.  

automatic segmentation of loT devices

B.  

replacement of malfunctioning devices

C.  

automatic provisioning of AP devices

D.  

interface for AP configuration

Discussion 0
Questions 58

A network administrator prepares to deploy a new software-defined fabric across campuses. What is needed to ensure success for the overall design?

Options:

A.  

A fully meshed Layer 2 topology

B.  

A fully meshed Layer 3 topology

C.  

A point-to-point Layer 3 underlay network with jumbo frames enabled

D.  

A point-to-point Layer 2 network with LACP between devices for redundancy

Discussion 0
Questions 59

What is a characteristic of VRRP?

Options:

A.  

It inherently balances load amongst the available gateways.

B.  

It ensures symmetric traffic flow upstream and downstream.

C.  

It Is a Cisco proprietary protocol.

D.  

It uses a virtual IP address and a virtual MAC address to achieve redundancy

Discussion 0
Questions 60

Which task Is mandatory when provisioning a device through the plug-and-play workflow in Cisco DNA Center?

Options:

A.  

site assignment

B.  

slack serial number assignment

C.  

golden image upgrade

D.  

template configuration application

Discussion 0
Questions 61

Drag and drop the characteristics of Cisco Catalyst SD-WAN from the left onto the right. Not all options are used.

Options:

Discussion 0
Questions 62

Refer to the exhibit. What is achieved by this Python script?

Options:

A.  

It configures access list statements

B.  

It reads access list statements into a dictionary list

C.  

It displays access list statements on a terminal screen.

D.  

It converts access list statements to a human-readable format.

Discussion 0
Questions 63

How is the OAuth framework used in REST API?

Options:

A.  

by providing the external application a token that authorizes access to the account

B.  

as a framework to hide the security information in the REST URL

C.  

as a framework to hash the security information in the REST URL

D.  

by providing the user credentials to the external application

Discussion 0
Questions 64

Which unit of measure is used to measure wireless RF SNR?

Options:

A.  

mw

B.  

dbm

C.  

db

D.  

dBi

Discussion 0
Questions 65

What is a Type 1 hypervisor?

Options:

A.  

runs directly on a physical server and depends on a previously installed operating system

B.  

runs directly on a physical server and includes its own operating system

C.  

runs on a virtual server and depends on an already installed operating system

D.  

run on a virtual server and includes its own operating system.

Discussion 0
Questions 66

Drag and drop characteristics of PIM dense mode from the left to the right.

Options:

Discussion 0
Questions 67

What is a characteristic of omnidirectional antennas?

Options:

A.  

It includes dish antennas.

B.  

It has high gain.

C.  

It provides the most focused and narrow beamwidth.

D.  

It includes dipole antennas.

Discussion 0
Questions 68

What is a characteristics of Wi-Fi channels?

Options:

A.  

The 2 4-GHz balWMS§24 non-overlapping channels

B.  

Devices that connect to the same Wi-Fi channel reside in the same collision domain.

C.  

Wi-Fi channels are spaced 30 MHz apart.

D.  

The 5-GHz band offers 11 different channels for Wi-Fi clients

Discussion 0
Questions 69

What is a capability of the Cisco DNA Center southbound API?

Options:

A.  

It connects 1o ITSM services such as ServiceNow.

B.  

It allows administrators to make API calls to Cisco DNA Center.

C.  

It sends webhooks from Cisco DNA Center when alerts are triggered

D.  

It adds support for managing non-Cisco devices from Cisco DNA Center.

Discussion 0
Questions 70

Which action reduces sticky clients in dense RF environments?

Options:

A.  

Decrease radio channel widths to 40 MHz.

B.  

Increase the mandatory minimum data rates.

C.  

Decrease the mandatory minimum data rates.

D.  

Increase radio channel widths to 160 MHz.

Discussion 0
Questions 71

What is a characteristic of Layer 3 roaming?

Options:

A.  

Clients must obtain a new IP address when they roam between APs.

B.  

It provides seamless roaming between APs that are connected to different Layer 3 networks and different mobility groups.

C.  

It is only supported on controllers that run SSO.

D.  

It provides seamless client roaming between APs in different Layer 3 networks but within the same mobility group.

Discussion 0
Questions 72

Which protocol is used by vmanage to push centralized policies to vsmart controllers?

Options:

A.  

NETCONF

B.  

TLS

C.  

STUN

D.  

OMP

Discussion 0
Questions 73

Which three methods does Cisco DNA Centre use to discover devices? (Choose three)

Options:

A.  

CDP

B.  

SNMP

C.  

LLDP

D.  

ping

E.  

NETCONF

F.  

a specified range of IP addresses

Discussion 0
Questions 74

Drag and drop the code snippets from the bottom onto the blanks in the code to construct a request that configures a deny rule on an access list?

Options:

Discussion 0
Questions 75

Which deployment option of Cisco NGFW provides scalability?

Options:

A.  

tap

B.  

inline tap

C.  

high availability

D.  

clustering

Discussion 0
Questions 76

An engineer must configure a new WLAN that supports 802.11r and requires users to enter a passphrase. What must be configured to support this requirement?

Options:

A.  

802.1XandSUITEB-1X

B.  

FT PSK and Fast Transition

C.  

802.1X and Fast Transition

D.  

FTPSKandSUITEB-1X

Discussion 0
Questions 77

Which technology is the Cisco SD-Access control plane based on?

Options:

A.  

LISP

B.  

CTS

C.  

SGT

D.  

VRF

Discussion 0
Questions 78

Which AP mode allows an engineer to scan configured channels for rogue access points?

Options:

A.  

sniffer

B.  

monitor

C.  

bridge

D.  

local

Discussion 0
Questions 79

Which protocol does Cisco SD-WAN uso to protect control plane communication?

Options:

A.  

iPsec

B.  

DTLS

C.  

STUN

D.  

OMP

Discussion 0
Questions 80

What are two benefits of implementing a traditional WAN instead of an SD-WAN solution? (Choose two.)

Options:

A.  

Comprehensive configuration standardization

B.  

Lower data plane overhead

C.  

Simplified troubleshooting

D.  

Lower control plane abstraction

E.  

Faster fault detection

Discussion 0
Questions 81

How does Cisco DNA Center perform a network discovery?

Options:

A.  

using SNMP

B.  

using ICMP

C.  

through a DHCP server

D.  

using CDP with a seed IP address

Discussion 0
Questions 82

How can an engineer prevent basic replay attacks from people who try to brute force a system via REST API?

Options:

A.  

Add a timestamp to the request in the API header.

B.  

Use a password hash.

C.  

Add OAuth to the request in the API header.

D.  

Use HTTPS.

Discussion 0
Questions 83

What is contained in the VXLAN header?

Options:

A.  

original Layer 2 VLAN ID

B.  

Endpoint ID

C.  

VXLAN network identifier

D.  

source and destination RLOC ID

Discussion 0
Questions 84

What is the JSON syntax that is formed the data?

A)

B)

C)

D)

Options:

A.  

Option A

B.  

Option B

C.  

Option C

D.  

Option D

Discussion 0
Questions 85

What is the recommended minimum SNR for data applications on wireless networks?

Options:

A.  

15

B.  

20

C.  

25

D.  

10

Discussion 0
Questions 86

Which RF value represents the decline of the RF signal amplitude over a given distance " ?

Options:

A.  

signal-to-noise ratio

B.  

received signal strength indicator

C.  

free space path loss

D.  

effective isotropic radiated power

Discussion 0
Questions 87

An engineer must protect their company against ransom ware attacks. Which solution allows the engineer to block the execution stage and prevent file encryption?

Options:

A.  

Use Cisco Firepower with Intrusion Policy and snort rules blocking SMB exploitation.

B.  

Use Cisco AMP deployment with the Malicious Activity Protection engine enabled.

C.  

Use Cisco AMP deployment with the Exploit Prevention engine enabled.

D.  

Use Cisco Firepower and block traffic to TOR networks.

Discussion 0
Questions 88

Which feature allows clients to perform Layer 2 roaming between wireless controllers?

Options:

A.  

SSO

B.  

N+1 high availably

C.  

mobility groups

D.  

RF grouping

Discussion 0
Questions 89

What is the role of a LISP map server?

Options:

A.  

It receives information from ETRs that map EIDs to RLOCs

B.  

It transmits requests for EID-to-RLOC resolution

C.  

It transmits information from ETRs that map EIDs to RLOCs

D.  

It responds to requests for EID-to-RLOC resolution.

Discussion 0
Questions 90

Which two components are needed when a Cisco SD-Access fabric is designed? (Choose two.)

Options:

A.  

Cisco Catalyst Center (formerly DNA Center) application

B.  

Firepower Threat Defense

C.  

Identity Service Engine

D.  

Cisco Data Center Network Manager

E.  

Cisco Prime Infrastructure

Discussion 0
Questions 91

What role does Auto-RP serve in a PIM network?

Options:

A.  

Distributes IGMP traffic between sparse- and dense-mode PIM networks

B.  

Automates the distribution of group-to-RP mappings

C.  

Automates the configuration of leaf routers

D.  

Performs the rendezvous point election

Discussion 0
Questions 92

An engineer must create a new SSID on a Cisco 9800 wireless LAN controller. The client has asked to use a pre-shared key for authentication. Which profile must the engineer edit to achieve this requirement?

Options:

A.  

RF

B.  

WLAN

C.  

Policy

D.  

Flex

Discussion 0
Questions 93

Refer to the exhibit. Which device is considered the supplicant when using network device admission control?

Options:

A.  

client

B.  

SW1

C.  

RADIUS server

D.  

R1

Discussion 0
Questions 94

Drag and drop the characteristics from the left onto the corresponding orchestration tool on the right.

Options:

Discussion 0
Questions 95

Refer to the exhibit. Drag and drop the snippets into the RESTCONF request to form the request that returns this response. Not all options are used.

Options:

Discussion 0
Questions 96

Refer to the exhibit. How should the script be completed so that each device configuration is saved into a JSON-formatted file under the device name?

Options:

A.  

Option A

B.  

Option B

C.  

Option C

D.  

Option D

Discussion 0
Questions 97

Assuming the WLC ' s interfaces are not in the same subnet as the RADIUS server, which interface would the WLC use as the source for all RADIUS-related traffic?

Options:

A.  

the interface specified on the WLAN configuration

B.  

any interface configured on the WLC

C.  

the controller management interface

D.  

the controller virtual interface

Discussion 0
Questions 98

Refer to the exhibit. What is the output of this code?

Options:

A.  

Option A

B.  

Option B

C.  

Option C

D.  

Option D

Discussion 0