Summer Sale 65% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: exams65

ExamsBrite Dumps

Implementing Cisco Enterprise Network Core Technologies (350-401 ENCOR) Question and Answers

Implementing Cisco Enterprise Network Core Technologies (350-401 ENCOR)

Last Update Jun 23, 2026
Total Questions : 432

We are offering FREE 350-401 Cisco exam questions. All you do is to just go and sign up. Give your details, prepare 350-401 free exam questions and then go for complete pool of Implementing Cisco Enterprise Network Core Technologies (350-401 ENCOR) test questions that will help you more.

350-401 pdf

350-401 PDF

$40.25  $114.99
350-401 Engine

350-401 Testing Engine

$47.25  $134.99
350-401 PDF + Engine

350-401 PDF + Testing Engine

$61.25  $174.99
Questions 1

Which language defines the structure or modelling of data for NETCONF and RESTCONF?

Options:

A.  

JSON

B.  

YANG

C.  

XML

D.  

YAML

Discussion 0
Questions 2

An administrator is configuring NETCONF using the following XML string. What must the administrator end the request with?

Options:

A.  

Option A

B.  

Option B

C.  

Option C

D.  

Option D

Discussion 0
Questions 3

What does the statement print(format(0.8, \0% ' )) display?

Options:

A.  

80%

B.  

8.8%

C.  

.08%

D.  

8%

Discussion 0
Questions 4

A customer wants to use a single SSID to authenticate loT devices using different passwords. Which Layer 2 security type must be configured in conjunction with Cisco ISE to achieve this requirement?

Options:

A.  

Identity PSK

B.  

Fast Transition

C.  

Central Web Authentication

D.  

Cisco Centralized Key Management

Discussion 0
Questions 5

Refer to the exhibit. Authentication for users must first use RADIUS, and fall back to the local database on the router if the RADIUS server is unavailable Which two configuration sets are needed to achieve this result? (Choose two.)

Options:

A.  

Option A

B.  

Option B

C.  

Option C

D.  

Option D

Discussion 0
Questions 6

What is the VXLAN network identifier used to identify?

Options:

A.  

network tunnel interface

B.  

IP subnet

C.  

virtual tunnel endpoint

D.  

broadcast domain

Discussion 0
Questions 7

Refer to the exhibit. An engineer must create a script that appends the output of the show process cpu sorted command to a file.

Options:

A.  

action 4.0 syslog command " show process cpu sorted | append flash:high-cpu-file "

B.  

action 4.0 cli command " show process cpu sorted | append flash:high-cpu-file "

C.  

action 4.0 ens-event " show process cpu sorted | append flash:high-cpu-file "

D.  

action 4.0 publish-event " show process cpu sorted | append flash:high-cpu-file "

Discussion 0
Questions 8

Drag anti drop the characteristics from the ten onto the configuration models on the right.

Options:

Discussion 0
Questions 9

The login method is configured on the VTY lines of a router with these parameters:

    The first method for authentication is TACACS+

    If TACACS is unavailable, login is allowed without any provided credentials

Which configuration accomplishes this task?

Options:

A.  

aaa new-model

aaa authentication login telnet group tacacs+ none

aaa session-id common

B.  

aaa new-model

aaa authentication login default group tacacs+

aaa session-id common

C.  

aaa new-model

aaa authentication login default group tacacs+ none

aaa session-id common

D.  

aaa new-model

aaa authentication login VTY group tacacs+ none

aaa session-id common

Discussion 0
Questions 10

Which security option protects credentials from sniffer attacks in a basic API authentication?

Options:

A.  

VPN connection between client and server

B.  

TLS or SSL for communication

C.  

AAA services to authenticate the API

D.  

next-generation firewall

Discussion 0
Questions 11

On which protocol or technology is the fabric data plane based in Cisco SD-Access fabric?

Options:

A.  

LISP

B.  

IS-IS

C.  

Cisco TrustSec

D.  

VXLAN

Discussion 0
Questions 12

Which two new security capabilities are introduced by using a next-generation firewall at the Internet edge? (Choose two.)

Options:

A.  

integrated intrusion prevention

B.  

VPN

C.  

application-level inspection

D.  

stateful packet inspection

E.  

NAT

Discussion 0
Questions 13

A system must validate access rights to all its resources and must not rely on a cached permission matrix. If the access level to a given resource is revoked but is not reflected in the permission matrix, the security is violates Which term refers to this REST security design principle?

Options:

A.  

economy of mechanism

B.  

complete mediation

C.  

separation of privilege

D.  

least common mechanism

Discussion 0
Questions 14

What is a characteristic of Layer 3 roaming?

Options:

A.  

Clients must obtain a new IP address when they roam between APs.

B.  

It provides seamless roaming between APs that are connected to different Layer 3 networks and different mobility groups.

C.  

It is only supported on controllers that run SSO.

D.  

It provides seamless client roaming between APs in different Layer 3 networks but within the same mobility group.

Discussion 0
Questions 15

Refer to the exhibit. When this Python script, which uses the requests module to communicate with a network device, is executed, what is the anticipated result?

Options:

A.  

The script retrieves device information by sending HTTP requests to the device ' s API endpoints.

B.  

The script configures network device settings by establishing a secure connection with the device.

C.  

The script establishes an SSH connection with the network device.

D.  

The script parses JSON data received from the network device to format it into a tabular structure.

Discussion 0
Questions 16

A network administrator is preparing a Python script to configure a Cisco IOS XE-based device on the network. The administrator is worried that colleagues will make changes to the device while the script is running. Which operation of the NC client manager prevents colleagues from making changes to the devices while the script is running?

Options:

A.  

m.freeze(config-running ' )

B.  

m.freeze(target-running ' )

C.  

m.lock(config= ' running ' )

D.  

m.lock(target-running ' )

Discussion 0
Questions 17

In a Cisco SD-Access solution, which protocol is used by an extended node to connect to a single edge node?

Options:

A.  

VXIAN

B.  

IS-IS

C.  

802.1

D.  

CTS

Discussion 0
Questions 18

Refer to the exhibit. What is determined from the output?

Options:

A.  

10.0.0.100 is managed by Cisco Catalyst Center (formerly DNA Center).

B.  

The URL for the second query is syntactically incorrect.

C.  

The authentication for the second query fails.

D.  

10.0.0.200 is known to DNA Center, but its ID is an empty string.

Discussion 0
Questions 19

An engineer is reviewing a PCAP file that contains a packet capture of a four-way handshake exchange between a dient and AP using WPA2 Enterprise Which EAPOL message validates and confirms that the client device has successfully Installed the GTK?

Options:

A.  

M4-Message

B.  

M3-Message

C.  

M2-Message

D.  

M1-Message

Discussion 0
Questions 20

What is a characteristic of MACsec?

Options:

A.  

8021AE provides encryption and authentication services

B.  

8021AE is butt between the host and switch using the MKA protocol which negotiates encryption keys based on the master session key from a successful 802IX session

C.  

802.1AE is built between the host and switch using the MKA protocol using keys generated via the Diffie-Hellman algorithm (anonymous encryption mode)

D.  

8021AE is negotiated using Cisco AnyConnect NAM and the SAP protocol

Discussion 0
Questions 21

What is a client who is using 802.1x for authentication referred to as?

Options:

A.  

authenticator

B.  

policy enforcement point

C.  

NAC device

D.  

supplicant

Discussion 0
Questions 22

Which two operational modes enable an AP to scan one or more wireless channels for rogue access points and at the same time provide wireless services to clients? (Choose two.)

Options:

A.  

local

B.  

rogue detector

C.  

monitor

D.  

FlexConnect

E.  

sniffer

Discussion 0
Questions 23

What does a YANG model provide?

Options:

A.  

standardized data structure independent of the transport protocols

B.  

creation of transport protocols and their interaction with the OS

C.  

user access to interact directly with the CLI of the device to receive or modify network configurations

D.  

standardized data structure that can be used only with NETCONF or RESTCONF transport protocols

Discussion 0
Questions 24

How is a data modelling language used?

Options:

A.  

To enable data to be easily structured grouped validated and replicated

B.  

To represent finite and well-defined network elements that cannot be changed

C.  

To model the flows of unstructured data within the infrastructure

D.  

To provide human readability to scripting languages

Discussion 0
Questions 25

Drag and drop the Cisco Catalyst Center (formerly DNA Center) northbound API characteristics from the left to the right. Not all options are used.

Options:

Discussion 0
Questions 26

Which location tracking method is used when locating client devices using Cisco hyperlocation?

Options:

A.  

angle of arrival

B.  

location patterning

C.  

TTL

D.  

line of sight

Discussion 0
Questions 27

Which solution should be used in a high-density wireless environment to increase bandwidth for each user?

Options:

A.  

Increase antenna size.

B.  

Increase the cell size of each AP.

C.  

Increase the mandatory minimum data rate.

D.  

Increase TX power.

Discussion 0
Questions 28

An engineer is configuring a new SSID to present users with a splash page for authentication. Which WLAN Layer 3 setting must be configured to provide this functionally?

Options:

A.  

CCKM

B.  

WPA2 policy

C.  

Local Policy

D.  

Web Policy

Discussion 0
Questions 29

Which character formatting is required for DHCP Option 43 to function with current AP models?

Options:

A.  

ASCII

B.  

Hex

C.  

Base64

D.  

MD5

Discussion 0
Questions 30

An engineer must configure a new WLAN that supports 802.11r and requires users to enter a passphrase. What must be configured to support this requirement?

Options:

A.  

802.1XandSUITEB-1X

B.  

FT PSK and Fast Transition

C.  

802.1X and Fast Transition

D.  

FTPSKandSUITEB-1X

Discussion 0
Questions 31

Drag and drop the Cisco Catalyst Center (formerly DNA Center) southbound API characteristics from the left to the right. Not all options are used.

Options:

Discussion 0
Questions 32

What is two characteristic of Cisco DNA Center and vManage northbound APIs?

Options:

A.  

They exchange XML-formatted content

B.  

They exchange JSON-kxmatted content.

C.  

They implement the RESTCONF protocol.

D.  

They implement the NETCONF protocol.

E.  

They exchange protobuf-formatted content.

Discussion 0
Questions 33

Which network design principle should be followed to improve Layer 2 stability in an enterprise campus design?

Options:

A.  

Extend all user VLANs throughout the access layer

B.  

Extend only required user VLANs throughout the access layer

C.  

Extend all user VLANs throughout the core layer

D.  

Extend only required user VLANs throughout the aggregation layer

Discussion 0
Questions 34

What is a client who is running 802.1x for authentication reffered to as?

Options:

A.  

supplicant

B.  

NAC device

C.  

authenticate

D.  

policy enforcement point

Discussion 0
Questions 35

What is used by vManage to interact withCiscoSD-WAN devices in the fabric?

Options:

A.  

northbound API

B.  

RESTCONF

C.  

Southbound API

D.  

IPsec

Discussion 0
Questions 36

Refer to the exhibit. R2 is configured as an NTP master sourcing NTP packets from its locally connected interface of 10.1.1.1. Which additional configuration is needed to complete the configuration?

Options:

A.  

NTP server 10.1.1.1 key NTP-p455w0rd

B.  

NTP trusted-key NTP-p455w0rd

C.  

NTP server 10.1.1.1 key 1

D.  

NTP trusted-key 1

Discussion 0
Questions 37

Drag and drop the characteristics from the left into the orchestration tools that they describe on the right.

Options:

Discussion 0
Questions 38

Which technology reduces the implementation of STP and leverages both unicast and multicast?

Options:

A.  

VLAN

B.  

VXLAN

C.  

VPC

D.  

VSS

Discussion 0
Questions 39

In a Cisco Mobility Express wireless deployment, which AP takes over if the primary AP fails?

Options:

A.  

AP with highest IP address

B.  

AP with the lowest IP address

C.  

AP with highest MAC address

D.  

AP with highest controller up time

Discussion 0
Questions 40

Refer to the exhibit An engineer is troubleshooting an issue with non-Wi-Fi interference on the 5-GHz band The engineer has enabled Cisco CleanAir and set the appropriate traps, but the AP does not change the channel when it detects significant interference Which action will resolve the issue?

Options:

A.  

Enable the Avoid Persistent Non-WiFi Interference option

B.  

Disable the Avoid Foreign AP Interference option.

C.  

Change the DCA Sensitivity option to High

D.  

Enable the Event Driven Radio Resource Management option

Discussion 0
Questions 41

Which plane transports traffic between sites across the SD-WAN fabric?

Options:

A.  

IPsec

B.  

Management

C.  

Data

D.  

Control

Discussion 0
Questions 42

An engineer configures a WLAN with fast transition enabled Some legacy clients fail to connect to this WLAN Which feature allows the legacy clients to connect while still allowing other clients to use fast transition based on then OLTIs?

Options:

A.  

over the DS

B.  

adaptive R

C.  

802.11V

D.  

802.11k

Discussion 0
Questions 43

What is a benefit of Cisco TrustSec in a multilayered LAN network design?

Options:

A.  

Policy can be applied on a hop-by-hop basis.

B.  

There is no requirement to run IEEE 802.1X when TrustSec is enabled on a switch port

C.  

Application flows between hosts on the LAN to remote destinations can be encrypted.

D.  

Policy or ACLs are not required.

Discussion 0
Questions 44

Drag and drop the automation characteristics from the left onto the corresponding tools on the right. Not all options are used.

Options:

Discussion 0
Questions 45

What is a characteristic of a Type 2 hypervisor?

Options:

A.  

quick deployment

B.  

ideal for data center

C.  

complicated deployment

D.  

referred to as bare-metal

Discussion 0
Questions 46

A network administrator prepares to deploy a new software-defined fabric across campuses. What is needed to ensure success for the overall design?

Options:

A.  

A fully meshed Layer 2 topology

B.  

A fully meshed Layer 3 topology

C.  

A point-to-point Layer 3 underlay network with jumbo frames enabled

D.  

A point-to-point Layer 2 network with LACP between devices for redundancy

Discussion 0
Questions 47

What does the LAP send when multiple WLCs respond to the CISCO_CAPWAP-CONTROLLER.localdomain hostname during the CAPWAP discovery and join process?

Options:

A.  

broadcast discover request

B.  

join request to all the WLCs

C.  

unicast discovery request to each WLC

D.  

Unicast discovery request to the first WLS that resolves the domain name

Discussion 0
Questions 48

Which statement describes the IP and MAC allocation requirements for virtual machines on types 1 hypervisors?

Options:

A.  

Each virtual machine requires a unique IP and MAC addresses to be able to reach to other nodes.

B.  

Each virtual machine requires a unique IP address but shares the MAC address with the physical server

C.  

Each virtual machines requires a unique IP address but shares the MAC address with the address of the physical server.

D.  

Each virtual machine requires a unique MAC address but shares the IP address with the physical server.

Discussion 0
Questions 49

What is the recommended minimum SNR for data applications on wireless networks?

Options:

A.  

15

B.  

20

C.  

25

D.  

10

Discussion 0
Questions 50

Refer to the exhibit. A network engineer must configure NETCONF. After creating the configuration, the engineer gets output from the command show line, but not from show running-config. Which command completes the configuration?

Options:

A.  

Device(config)# netconf lock-time 500

B.  

Device(config)# netconf max-message 1000

C.  

Device(config)# no netconf ssh acl 1

D.  

Device(config)# netconf max-sessions 100

Discussion 0
Questions 51

Which features does Cisco EDR use to provide threat detection and response protection?

Options:

A.  

containment, threat intelligence, and machine learning

B.  

firewalling and intrusion prevention

C.  

container-based agents

D.  

cloud analysts and endpoint firewall controls

Discussion 0
Questions 52

Which feature is available to clients using layer 2 roaming in a wireless infrastructure?

Options:

A.  

Room to a different wireless controller that is on o different subnet and maintain the same IP address

B.  

Associate to a new access point on a different wireless controller and change the IP address without connectivity interruption

C.  

Associate to a new access point on the same wireless controller and change the IP address without connectivity interruption

D.  

Roam to a different wireless controller that snares The same subnet and maintain the same IP address

Discussion 0
Questions 53

Refer to the exhibit.

An engineer attempts to connect to another device from Route1’s console port. Which configuration is needed to allow telnet connections?

Options:

A.  

Option A

B.  

Option B

C.  

Option C

D.  

Option D

Discussion 0
Questions 54

An engineer must configure a new 6 Ghz only SSID on a cisco catalyst 9800 series WLC, with these requirements:

Provide 802.11ax data rates for supported devices

All users authenticate using a certificate

Which wireless layer 2 security mode meets the requirements?

Options:

A.  

WPA2 Enterprise

B.  

WPA3 Personal

C.  

WPA2 Personal

D.  

WPA3 Enterprise

Discussion 0
Questions 55

Exhibit.

Security policy requires all idle-exec sessions to be terminated in 600 seconds. Which configuration achieves this goal?

Options:

A.  

line vty 0 15absolute-timeout 600

B.  

line vty 0 15exec-timeout

C.  

line vty 01 5exec-timeout 10 0

D.  

line vty 0 4exec-timeout 600

Discussion 0
Questions 56

Which consideration must be made when using BFD in a network design?

Options:

A.  

BFD requires a FHRP in order to provide sub second host failover.

B.  

BFD can be deployed without any IP routing protocols being configured.

C.  

NSF and graceful restart must be enabled on all participating routers.

D.  

Cisco Express forwarding and IP routing must be enabled on all participating routers.

Discussion 0
Questions 57

A corporate policy mandates that a certificate-based authentication system must be implemented on the wireless infrastructure. All corporate clients will contain a certificate that will be used in conjunction with ISE and user credentials to perform authentication before the clients are allowed to connect to the corporate Wi-Fi. Which authentication key option must be selected to ensure that this authentication can take place?

Options:

A.  

none

B.  

PSK

C.  

802.1x

D.  

CCKM

Discussion 0
Questions 58

What is the API keys option for REST API authentication?

Options:

A.  

a credential that is transmitted unencrypted

B.  

one-time encrypted token

C.  

a username that is stored in the local router

D.  

a predetermined string that is passed from client to server.

Discussion 0
Questions 59

Which protocol is used by vmanage to push centralized policies to vsmart controllers?

Options:

A.  

NETCONF

B.  

TLS

C.  

STUN

D.  

OMP

Discussion 0
Questions 60

What does a next-generation firewall that is deployed at the data center protect against?

Options:

A.  

signature-based malware

B.  

DMZ web server vulnerabilities

C.  

zero-day attacks

D.  

DDoS

Discussion 0
Questions 61

In a Cisco Catalyst SD-WAN solution, how is the health of a data plane tunnel monitored?

Options:

A.  

with IP SLA

B.  

with OMP

C.  

using BFD

D.  

ARP probing

Discussion 0
Questions 62

Refer to the exhibit. Drag and drop the snippets into the RESTCONF request to form the request that returns this response. Not all options are used.

Options:

Discussion 0
Questions 63

Which tool functions in a push model, supports languages like Python or Ruby, and does not require an agent to be installed per host?

Options:

A.  

Puppet

B.  

Ansible

C.  

Saltstack

D.  

Chef

Discussion 0
Questions 64

Refer to the exhibit. What is achieved by this Python script?

Options:

A.  

It configures access list statements

B.  

It reads access list statements into a dictionary list

C.  

It displays access list statements on a terminal screen.

D.  

It converts access list statements to a human-readable format.

Discussion 0
Questions 65

What are two device roles in Cisco SD-Access fabric? (Choose two.)

Options:

A.  

core switch

B.  

vBond controller

C.  

edge node

D.  

access switch

E.  

border node

Discussion 0
Questions 66

Options:

Discussion 0
Questions 67

Options:

Discussion 0
Questions 68

Options:

Discussion 0
Questions 69

Options:

Discussion 0
Questions 70

Options:

Discussion 0
Questions 71

Options:

Discussion 0
Questions 72

Options:

Discussion 0
Questions 73

Options:

Discussion 0
Questions 74

Options:

Discussion 0
Questions 75

Options:

Discussion 0
Questions 76

OR

Options:

Discussion 0
Questions 77

Options:

Discussion 0
Questions 78

Options:

Discussion 0
Questions 79

Options:

Discussion 0
Questions 80

Options:

Discussion 0
Questions 81

Options:

Discussion 0
Questions 82

Options:

Discussion 0
Questions 83

Options:

Discussion 0
Questions 84

Options:

Discussion 0
Questions 85

Options:

Discussion 0
Questions 86

Options:

Discussion 0
Questions 87

Options:

Discussion 0
Questions 88

Options:

Discussion 0
Questions 89

Options:

Discussion 0
Questions 90

Options:

Discussion 0
Questions 91

Options:

Discussion 0
Questions 92

Options:

Discussion 0
Questions 93

Options:

Discussion 0
Questions 94

Options:

Discussion 0