Clear your concepts with 350-401 Questions Before Attempting Real exam [Q28-Q44]

Clear your concepts with 350-401 Questions Before Attempting Real exam

Get professional help from our 350-401 Dumps PDF

Cisco 350-401 ENCOR exam covers a wide range of topics related to enterprise networking, including network design, infrastructure, security, automation, and troubleshooting. It is a 120-minute exam that consists of 90-110 questions, and it can be taken either in-person or online. 350-401 exam is available in multiple languages, including English, Japanese, and Chinese.

Cisco 350-401, also known as Implementing Cisco Enterprise Network Core Technologies (350-401 ENCOR), is a certification exam that tests candidates' knowledge of enterprise networking technologies. 350-401 exam is designed to validate a candidate's skills in implementing and troubleshooting core enterprise network technologies. Passing 350-401 exam will help candidates to earn the Cisco Certified Network Professional (CCNP) Enterprise certification.

NEW QUESTION # 28
The login method is configured on the VTY lines of a router with these parameters.
The first method for authentication is TACACS
If TACACS is unavailable, login is allowed without any provided credentials Which configuration accomplishes this task?

A. R1#sh run | include aaa
aaa new-model
aaa authentication login default group tacacs+ none
aaa session-id common
R1#sh run | section vty
line vty 0 4
password 7 0202039485748
B. R1#sh run | include aaa
aaa new-model
aaa authentication login default group tacacs+
aaa session-id common
R1#sh run | section vty
line vty 0 4
transport input none
R1#
C. R1#sh run | include aaa
aaa new-model
aaa authentication login telnet group tacacs+ none
aaa session-id common
R1#sh run | section vty
line vty 0 4
R1#sh run | include username
R1#
D. R1#sh run | include aaa
aaa new-model
aaa authentication login VTY group tacacs+ none
aaa session-id common
R1#sh run | section vty
line vty 0 4
password 7 0202039485748
R1#sh run | include username
R1#

Answer: A

Explanation:
Reference:
According to the requirements (first use TACACS+, then allow login with no authentication), we have to use "aaa authentication login ... group tacacs+ none" for AAA command.
The next thing to check is the if the "aaa authentication login default" or "aaa authentication login list-name" is used. The 'default' keyword means we want to apply for all login connections (such as tty, vty, console and aux). If we use this keyword, we don't need to configure anything else under tty, vty and aux lines. If we don't use this keyword then we have to specify which line(s) we want to apply the authentication feature.
From above information, we can find out answer 'R1#sh run | include aaa aaa new-model aaa authentication login default group tacacs+ none aaa session-id common R1#sh run | section vty line vty 0 4 password 7 0202039485748 If you want to learn more about AAA configuration, please read our AAA TACACS+ and RADIUS Tutorial - Part 2.
For your information, answer 'R1#sh run | include aaa
aaa new-model
aaa authentication login telnet group tacacs+ none
aaa session-id common
R1#sh run | section vty
line vty 0 4
R1#sh run | include username
R1#' would be correct if we add the following command under vty line ("line vty 0 4"): "login authentication telnet" ("telnet" is the name of the AAA list above)

NEW QUESTION # 29
Which component transports data plane traffic across a Cisco SD-WAN network?

A. vBond
B. vSmart
C. cEdge
D. vManage

Answer: C

Explanation:
In a Cisco SD-WAN network, the data plane traffic is transported by the cEdge devices. These devices are responsible for the forwarding of packets across the network, ensuring that data reaches its intended destination. The cEdge operates at the network edge and is a critical component in the Cisco SD-WAN architecture, handling the actual transmission of data packets.

NEW QUESTION # 30

Refer to the exhibit. An engineer attempts to create a configuration to allow the Blue VRF to leak into the global routing table, but the configuration does not function as expected. Which action resolves this issue?

A. Change the access-list destination mask to a wildcard.
B. Change the route-map configuration to VRF_BLUE.
C. Change the source network that Is specified in access-list 101.
D. Change the access-list number in the route map

Answer: A

NEW QUESTION # 31
Drag and drop the characteristics from the left onto the infrastructure deployment models on the right.

Answer:

Explanation:

.

NEW QUESTION # 32
Refer to the exhibit.

Refer to the exhibit Which two commands are required on route.
R1 to block FTP and allow all other traffic from the Branch 2 network' (Choose two)

A. Option D
B. Option B
C. Option C
D. Option A
E. Option E

Answer: B,C

NEW QUESTION # 33
Refer to the exhibit.

Which HTTP JSON response does the python code output give?

A. 7.61
B. NameError: name 'json' is not defined
C. 7.0(3)I7(4)
D. KeyError 'kickstart_ver_str'

Answer: C

NEW QUESTION # 34
Which statement about an RSPAN session configuration is true?

A. Only incoming traffic can be monitored
B. Only one session can be configured at a time
C. A fitter mutt be configured for RSPAN Regions
D. A special VLAN type must be used as the RSPAN destination.

Answer: D

Explanation:
The traffic for each RSPAN session is carried over a user-specified RSPAN VLAN that is dedicated for that RSPAN session in all participating switches -> This VLAN can be considered a special VLAN type -> Answer C is correct.
Reference:
https://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst3750x_3560x/software/release/12-
2_55_se/configuration/guide/3750xscg/swspan.html
We can configure multiple RSPAN sessions on a switch at a time, then continue configuring multiple RSPAN sessions on the other switch without any problem -> Answer B is not correct.
This is how to configure Remote SPAN (RSPAN) feature on two switches. Traffic on FastEthernet0/1 of Switch 1 will be sent to Fa0/10 of Switch2 via VLAN 40.
+ Configure on both switches
Switch1,2(config)#vlan 40
Switch1,2(config-vlan)#remote-span
+ Configure on Switch1
Switch1(config)# monitor session 1 source interface FastEthernet 0/1
Switch1(config)# monitor session 1 destination remote vlan 40
+ Configure on Switch2
Switch2(config)#monitor session 5 source remote vlan 40
Switch2(config)# monitor session 5 destination interface FastEthernet 0/10

NEW QUESTION # 35
An engineer must create an EEM applet that sends a syslog message in the event a change happens in the network due to trouble with an OSPF process. Which action should the engineer use?

A. action 1 syslog pattern "OSPF ROUTING ERROR"
B. action 1 syslog send "OSPF ROUTING ERROR"
C. action 1syslog write "OSPF ROUTING ERROR"
D. action 1 syslog msg "OSPF ROUTING ERROR"

Answer: A

NEW QUESTION # 36
Drag and drop the LISP components from the left onto the function they perform on the right. Not all options are used.

Answer:

Explanation:

Explanation

+ accepts LISP encapsulated map requests: LISP map resolver
+ learns of EID prefix mapping entries from an ETR: LISP map server
+ receives traffic from LISP sites and sends it to non-LISP sites: LISP proxy ETR
+ receives packets from site-facing interfaces: LISP ITR
Explanation
ITR is the function that maps the destination EID to a destination RLOC and then encapsulates the original packet with an additional header that has the source IP address of the ITR RLOC and the destination IP address of the RLOC of an Egress Tunnel Router (ETR).
After the encapsulation, the original packet become a LISP packet.
ETR is the function that receives LISP encapsulated packets, decapsulates them and forwards to its local EIDs. This function also requires EID-to-RLOC mappings so we need to point out an "map-server" IP address and the key (password) for authentication.
A LISP proxy ETR (PETR) implements ETR functions on behalf of non-LISP sites. A PETR is typically used when a LISP site needs to send traffic to non-LISP sites but the LISP site is connected through a service provider that does not accept no routable EIDs as packet sources. PETRs act just like ETRs but for EIDs that send traffic to destinations at non-LISP sites.
Map Server (MS) processes the registration of authentication keys and EID-to-RLOC mappings. ETRs sends periodic Map-Register messages to all its configured Map Servers.
Map Resolver (MR): a LISP component which accepts LISP Encapsulated Map Requests, typically from an ITR, quickly determines whether or not the destination IP address is part of the EID namespace

NEW QUESTION # 37
Drag and drop the LISP components on the left to the correct description on the right.

Answer:

Explanation:

Explanation:
Table Description automatically generated with medium confidence

NEW QUESTION # 38
Simulation 05

Answer:

Explanation:
See the solution below.
Explanation:
R1
enable
Config t
Int loop0
Ip ospf 1 area 0
Int et0/0
Ip ospf 1 area 0
Ip ospf network point-to-point
copy run start
R2
Enable
Config t
Int loop0
Ip ospf 1 area 0
Int et0/0
Ip ospf 1 area 0
Ip ospf network point-to-point
Int et0/1
Ip ospf 1 area 0
Ip ospf network point-to-point
copy run start
R3
Enable
Config t
Int loop0
Ip ospf 1 area 0
Int et0/1
Ip ospf 1 area 0
Ip ospf network point-to-point
copy run start
Verification:-

NEW QUESTION # 39
Refer to the exhibit.

Which password allows access to line con 0 for a username of "tommy" under normal operation?

A. 0 Cisco
B. local
C. Tommy
D. Cisco

Answer: D

NEW QUESTION # 40
Refer to the exhibit.

Which JSON syntax is derived from this data?
A)

B)

C)

D)

A. Option D
B. Option B
C. Option A
D. Option C

Answer: A

NEW QUESTION # 41
The login method is configured on the VTY lines of a router with these parameters The first method for authentication it TACACS If TACACS is unavailable login is allowed without any provided credentials Which configuration accomplishes this task?

A. Option D
B. Option B
C. Option A
D. Option C

Answer: B

NEW QUESTION # 42
Drag and Drop Question
Drag and drop the snippets onto the blanks within the code to construct a script that blocks a MAC address.

Answer:

Explanation:

NEW QUESTION # 43
Refer to the exhibit.

VPN-A sends point-to-point traffic to VPN-B and receives traffic only from VPN-C VPN-B sends point-to-point traffic to VPN-C and receives traffic only from VPN-A Which configuration is applied?