350-401 Dumps Updated (V34.02) – Great Choice to Pass Your CCNP Enterprise Certification 350-401 Exam

1. What are two benefits of YANG? (Choose two.)

2. DRAG DROP

Drag and drop the threat defense solutions from the left onto their descriptions on the right.

3. Refer to the exhibit.

An engineer must create a configuration that executes the show run command and then terminates the session when user CCNP legs in.

Which configuration change is required?

4. Wireless users report frequent disconnections from the wireless network. While troubleshooting a network engineer finds that after the user a disconnect, the connection re-establishes automatically without any input required.

The engineer also notices these message logs.

Which action reduces the user impact?

5. Refer to the exhibit.

An engineer must modify the access control list EGRESS to allow all IP traffic from subnet 10.1.10.0/24 to 10.1.2.0/24. The access control list is applied in the outbound direction on router interface GigabitEthemet 0/1.

Which configuration commands can the engineer use to allow this traffic without disrupting existing traffic flows?

A)

B)

C)

D)

6. What is used to perform OoS packet classification?

7. What is the recommended MTU size for a Cisco SD-Access Fabric?

8. Refer to the Exhibit.

After configurating an IPsec VPN, an engineer enters the show command to verify the ISAKMP SA status.

What does the status show?

9. Refer to the exhibit.

Which configuration allows Customer2 hosts to access the FTP server of Customer1 that has the IP address of 192.168.1.200?

10. A customer requests a network design that supports these requirements:

Which protocol does the design include?

11. Which two network problems Indicate a need to implement QoS in a campus network? (Choose two.)

12. Which configuration restricts the amount of SSH that a router accepts 100 kbps?

13. DRAG DROP

Drag and drop the virtual components from the left onto their deceptions on the right.

14. DRAG DROP

Refer to the exhibit.

An engineer must deny HTTP traffic from host A to host B while allowing all other communication between the hosts, drag and drop the commands into the configuration to achieve these results. Some commands may be used more than once. Not all commands are used.

15. A customer has several small branches and wants to deploy a WI-FI solution with local management using CAPWAP.

Which deployment model meets this requirement?

16. Refer to the Exhibit.

Communication between London and New York is down.

Which command set must be applied to the NewYork switch to resolve the issue?

17. Which method of account authentication does OAuth 2.0 within REST APIs?

18. How does the RIB differ from the FIB?

19. A network engineer is configuring Flexible Netflow and enters these commands

Sampler Netflow1

Mode random one-out-of 100

Interface fastethernet 1/0

Flow-sampler netflow1

Which are two results of implementing this feature instead of traditional Netflow? (Choose two.)

20. Which benefit is offered by a cloud infrastructure deployment but is lacking in an on-premises deployment?

21. Refer to the Exhibit.

Rapid PVST+ is enabled on all switches.

Which command set must be configured on switch1 to achieve the following results on port fa0/1?

✑ When a device is connected, the port transitions immediately to a forwarding state.

✑ The interface should not send or receive BPDUs.

✑ If a BPDU is received, it continues operating normally.

22. Refer to the exhibit.

What is the Json syntax that is formed from the data?

23. In a wireless Cisco SD-Access deployment, which roaming method is used when a user moves from one access point to another on a different access switch using a single WLC?

24. Refer to the exhibit.

Which type of antenna is show on the radiation patterns?

25. DRAG DROP

Drag and drop the characteristics from the left onto the orchestration tools they describe on the right.

26. Which command set configures RSPAN to capture outgoing traffic from VLAN 3 on interface GigabitEthernet 0/3 while ignoring other VLAN traffic on the same interface?

27. What is a fact about Cisco EAP-FAST?

28. What is the data policy in a Cisco SD-WAN deployment?

29. Refer to the Exhibit.

What is the effect of this configuration?

30. DRAG DROP

Refer to the Exhibit.

Drag and drop the snippets into the RESTCONF request to form the request that returns this response Not all options are used

31. Refer to the Exhibit.

What is the cause of the log messages?

32. What is the function of a VTEP in VXLAN?

33. An engineer is concerned with the deployment of new application that is sensitive to inter-packet delay variance.

Which command configures the router to be the destination of jitter measurements?

34. Which method creates an EEM applet policy that is registered with EEM and runs on demand or

manually?

35. Refer to the Exhibit.

Which two commands are needed to allow for full reachability between AS 1000 and AS 2000? (Choose two)

36. Which TCP setting is tuned to minimize the risk of fragmentation on a GRE/IP tunnel?

37. What is a benefit of data modeling languages like YANG?

38. Refer to exhibit.

VLANs 50 and 60 exist on the trunk links between all switches All access ports on SW3 are configured for VLAN 50 and SW1 is the VTP server.

Which command ensures that SW3 receives frames only from VLAN 50?

39. Refer to the Exhibit.

What does the error message relay to the administrator who is trying to configure a Cisco IOS device?

40. Which LISP component is required for a LISP site to communicate with a non-LISP site?

41. Which data is properly formatted with JSON?

A)

B)

C)

D)

42. How are the different versions of IGMP compatible?

43. Refer to the exhibit.

Which configuration establishes EBGP neighborship between these two directly connected neighbors and exchanges the loopback network of the two routers through BGP?

44. In a Cisco SD-Access solution, what is the role of the Identity Services Engine?

45. Which encryption hashing algorithm does NTP use for authentication?

46. Which controller is capable of acting as a STUN server during the onboarding process of Edge devices?

47. Which outbound access list, applied to the WAN interface of a router, permits all traffic except for http traffic sourced from the workstation with IP address 10.10.10.1?

48. Which protocol does REST API rely on to secure the communication channel?

49. Which three methods does Cisco DNA Centre use to discover devices? (Choose three)

A. CDP

B. SNMP

C. LLDP

D. ping

E. NETCONF

F. a specified range of IP addresses

50. Which line must be added in the Python function to return the JSON object {"cat_9k": “FXS193202SE")?

A)

B)

C)

D)

51. What is a characteristic of a virtual machine?

52. Refer to the exhibit.

An engineer must ensure that all traffic leaving AS 200 will choose Link 2 as the exit point.

Assuming that all BGP neighbor relationships have been formed and that the attributes have not been changed on any of the routers, which configuration accomplish task?

53. A company has an existing Cisco 5520 HA cluster using SSO. An engineer deploys a new single Cisco Catalyst 9800 WLC to test new features. The engineer successfully configures a mobility tunnel between the 5520 cluster and 9800 WLC. Client connected to the corporate WLAN roam seamlessly between access points on the 5520 and 9800 WLC. After a failure on the primary 5520 WLC, all WLAN services remain functional; however, Client roam between the 5520 and 9800 controllers without dropping their connection.

Which feature must be configured to remedy the issue?

54. Refer to the exhibit.

Based on the configuration in this WLAN security setting,.

Which method can a client use to authenticate to the network?

55. Refer to the exhibit.

A network engineer configures OSPF and reviews the router configuration.

Which interface or interface or interface are able to establish OSPF adjacency?

56. Refer to the exhibit.

What are two effects of this configuration? (Choose two.)

57. Refer to the exhibit.

What does the snippet of code achieve?

58. What is one fact about Cisco SD-Access wireless network deployments?

59. Refer to the Exhibit.

A network engineer configures a new GRE tunnel and enters the show run command.

What does the output verify?

60. Refer to the Exhibit.

Which single security feature is recommended to provide Network Access Control in the enterprise?

61. Refer to the Exhibit.

Which configuration change will force BR2 to reach 209 165 201 0/27 via BR1?

62. Which two methods are used to reduce the AP coverage area? (Choose two)

63. Refer to the exhibit.

Security policy requires all idle-exec sessions to be terminated in 600 seconds.

Which configuration achieves this goal?

64. Which two threats does AMP4E have the ability to block? (Choose two.)

65. Refer to the Exhibit.

What does the cisco DNA REST response indicate?

66. Refer to the exhibit.

An engineer configures monitoring on SW1 and enters the show command to verify operation.

What does the output confirm?

67. Refer to the Exhibit.

A network engineer configures NAT on R1 and enters the show command to verity the configuration.

What does the output confirm?

68. An engineer is troubleshooting the Ap join process using DNS.

Which FQDN must be resolvable on the network for the access points to successfully register to the WLC?

69. Running the script causes the output in the exhibit.

Which change to the first line of the script resolves the error?

70. An engineer must configure HSRP group 300 on a Cisco IOS router. When the router is functional, it must be the must be the active HSRP router. The peer router has been configured using the default priority value.

Which command set is required?

71. Refer to the Exhibit.

An engineer is investigating why guest users are able to access other guest user devices when the users are connected to the customer guest WLAN.

What action resolves this issue?

72. Which characteristic distinguishes Ansible from Chef?

73. Refer to the exhibit.

Assuming the WLC's interfaces are not in the same subnet as the RADIUS server, which interface would the WLC use as the source for all RADIUS-related traffic?

74. In an SD-Access solution what is the role of a fabric edge node?

75. What is a benefit of a virtual machine when compared with a physical server?

76. When using TLS for syslog, which configuration allows for secure and reliable transportation of messages to its default port?

77. DRAG DROP

Drag and drop the characteristics from the left onto the routing protocols they describe on the right.

78. At which Layer does Cisco DNA Center support REST controls?

79. Refer to the exhibit.

Which troubleshooting a routing issue, an engineer issues a ping from S1 to S2.

When two actions from the initial value of the TTL? (Choose two.)

80. Which technology provides a secure communication channel for all traffic at Layer 2 of the OSI model?

81. Refer to the Exhibit.

An engineer is configuring an EtherChannel between Switch1 and Switch2 and notices the console message on switch2.

Based on the output, which action resolves this issue?

82. Which entity is responsible for maintaining Layer 2 isolation between segments In a VXLAN environment?

83. Which DHCP option helps lightweight APs find the IP address of a wireless LAN controller?

84. Refer the exhibit.

Which router is the designated router on the segment 192.168.0.0/24?

85. What are two differences between the RIB and the FIB? (Choose two.)

86. Which algorithms are used to secure REST API from brute attacks and minimize the impact?

87. Refer to the Exhibit.

Which command must be applied to R2 for an OSPF neighborship to form?

88. Which two operations are valid for RESTCONF? (Choose two.)

89. Refer to the exhibit.

The IP SLA is configured in a router. An engineer must configure an EEM applet to shut down the interface and bring it back up when there is a problem with the IP SLA.

Which configuration should the engineer use?

90. Which JSON syntax is valid?

91. Refer to the exhibit.

An engineer must deny Telnet traffic from the loopback interface of router R3 to the loopback interface of router R2 during the weekend hours. All other traffic between the loopback interfaces of routers R3 and R2 must be allowed at all times.

Which command accomplish this task?

A)

B)

C)

D)

92. When configuration WPA2 Enterprise on a WLAN, which additional security component configuration is required?

93. Which devices does Cisco DNA Center configure when deploying an IP-based access control policy?

94. Refer to the exhibit.

An engineer implemented several configuration changes and receives the logging message on switch1.

Which action should the engineer take to resolve this issue?

95. Which AP mode allows an engineer to scan configured channels for rogue access points?