Newly Update CCNP and CCIE Enterprise Core ENCOR 350-401 Real Questions

test2022-08-15T06:14:09+00:00

FreeTestShare is the place to go if you want to acquire all of the Cisco 350-401 questions and answers. We have prepared new CCNP and CCIE Enterprise Core ENCOR 350-401 Real Questions to assist you in properly preparing for the 350-401 test. Studying CCNP and CCIE Enterprise Core ENCOR 350-401 Real Questions ensuring that you pass the exam on your first attempt. FreeTestShare experts spent a lot of time and energy researching Cisco 350-401 exam objectives to collect the most recent practice questions. We guarantee that you will have a better understanding of the 350-401 exam topics and patterns and pass your exam easily.

Try these 350-401 practice test questions to see if you are ready for the real exam.

Page 1 of 16

1. Refer to the exhibit.

Which set of commands on router r R1 Allow deterministic translation of private hosts PC1, PC2, and PC3 to addresses in the public space?

A)

Option A

Option B

Option C

Option D

2. Which JSON syntax is valid?

{“switch”:”name”:”dist1″,”interfaces”:[“gig1″,”gig2″,”gig3”]}

{„switch‟:(„name‟:‟dist1′,‟interfaces‟:[„gig1′,‟gig2′,‟gig3‟])}

{“switch”:{“name”:”dist1″,”interfaces”:[“gig1″,”gig2″,”gig3”]}}

{/”switch/”:{/”name/”:”dist1″,/”interfaces/”:[“gig1″,”gig2″,”gig3”]}}

3. A network engineer is configuring OSPF on a router. The engineer wants to prevent having a route to 177.16.0.0/16 learned via OSPF. In the routing table and configures a prefix list using the command ip prefix-list OFFICE seq S deny 172.16.0.0/16.

Winch two identical configuration commands must be applied to accomplish the goal? (Choose two.)

distribute-list prefix OFFICE in under the OSPF process

Ip prefix-list OFFICE seq 10 permit 0.0.0.0/0 Ie 32

ip prefix-list OFFICE seq 10 permit 0.0.0.0/0 ge 32

distribute-list OFFICE out under the OSPF process

distribute-list OFFICE in under the OSPF process

4. Which element enables communication between guest VMs within a virtualized environment?

hypervisor

vSwitch

virtual router

pNIC

5. How does the RIB differ from the FIB?

The RIB is used to create network topologies and routing tables. The FIB is a list of routes to particular network destinations.

The FIB includes many routes a single destination. The RIB is the best route to a single destination.

The RIB includes many routes to the same destination prefix. The FIB contains only the best route

The FIB maintains network topologies and routing tables. The RIB is a Iist of routes to particular network destinations.

6. DRAG DROP

Drag and drop the characteristics from the left onto the orchestration tools that they describe on the right.

7. Refer to the exhibit.

What is the Json syntax that is formed from the data?

{Name: Bob Johnson, Age: 75, Alive: true, Favorite Foods: [Cereal, Mustard, Onions]}

{"Name": "Bob Johnson", "Age": 75, "Alive": true, "Favorite Foods": ["Cereal", "Mustard", "Onions"]}

{"˜Name': "˜Bob Johnson', "˜Age': 75, "˜Alive': True, "˜Favorite Foods': "˜Cereal', "˜Mustard', "˜Onions'}

{"Name": "Bob Johnson", "Age": Seventyfive, "Alive": true, "Favorite Foods": ["Cereal", "Mustard", "Onions"]}

8. An engineer must create an EEM script to enable OSPF debugging in the event the OSPF neighborship goes down.

Which script must the engineer apply?

Option A

Option B

Option C

Option D

9. A customer has recently implemented a new wireless infrastructure using WLC-5520 at a site directly next to a large commercial airport. Users report that they intermittently lose WI-FI connectivity, and troubleshooting reveals it is due to frequent channel changes.

Which two actions fix this issue? (Choose two)

Remove UNII-2 and Extended UNII-2 channels from the 5 Ghz channel list

Restore the DCA default settings because this automatically avoids channel interference.

Configure channels on the UNIk2 and the Extended UNII-2 sub-bands of the 5 Ghz band only

Enable DFS channels because they are immune to radar interference.

Disable DFS channels to prevent interference with Doppler radar

10. Which TCP setting is tuned to minimize the risk of fragmentation on a GRE/IP tunnel?

MTU

Window size

MRU

MSS

Page 2 of 16

11. Refer to the exhibit.

An engineer is configuring an EtherChannel between Switch1 and Switch2 and notices the console message on switch2.

Based on the output, which action resolves this issue?

Configure less member ports on Switch2.

Configure the same port channel interface number on both switches

Configure the same EtherChannel protocol on both switches

Configure more member ports on Switch1.

12. What is difference between TCAM and the MAC address table?

TCAM is used to make Lalyer 2 forwarding decisions CAM is used to build routing tables.

The MAC address table supports partial matches. TCAM requires an exact match.

The MAC address table is contained in CA

ACL and QoS information is stored in TCA

Router prefix lookups happens in CA

MAC address table lookups happen in TCA

13. What does the number in an NTP stratum level represent?

The number of hops it takes to reach the master time server.

The number of hops it takes to reach the authoritative time source.

The amount of offset between the device clock and true time.

The amount of drift between the device clock and true time.

14. Refer to the exhibit.

A network engineer checks connectivity between two routers. The engineer can ping the remote endpoint but cannot see an ARP entry.

Why is there no ARP entry?

The ping command must be executed in the global routing table.

Interface FastEthernet0/0 Is configured in VRF CUST-A, so the ARP entry is also in that VR

When VRFs are used. ARP protocol must be enabled In each VR

When VRFs are used. ARP protocol is disabled in the global routing table.

15. Refer to the exhibit.

Object tracking has been configured for VRRP-enabled routers Edge-01 and Edge-02.

Which commands cause Edge-02 to preempt Edge-01 in the event that interface G0/0 goes down on Edge-01?

Option A

Edge-01(config)#interface G0/1

Edge-01(config-if)#vrrp 10 track 10

decrement 10

Option B

Edge-02(config)#interface G0/1

Edge-02(config-if)#vrrp 10 track 10

decrement 30

Option C

Edge-02(config)#interface G0/1

Edge-02(config-if)#vrrp 10 track 10

decrement 10

Option D

Edge-01(config)#interface G0/1

Edge-01(config-if)#vrrp 10 track 10

decrement 30

Option A

Option B

Option C

Option D

16. Refer to Exhibit.

MTU has been configured on the underlying physical topology, and no MTU command has been configured on the tunnel interfaces.

What happens when a 1500-byte IPv4 packet traverses the GRE tunnel from host X to host Y, assuming the DF bit is cleared?

The packet arrives on router C without fragmentation.

The packet is discarded on router A

The packet is discarded on router B

The packet arrives on router C fragmented.

17. Refer to the exhibit.

What are two effect of this configuration? (Choose two.)

Inside source addresses are translated to the 209.165.201.0/27 subnet.

It establishes a one-to-one NAT translation.

The 10.1.1.0/27 subnet is assigned as the inside global address range.

The 209.165.201.0/27 subnet is assigned as the outside local address range.

The 10.1.1.0/27 subnet is assigned as the inside local addresses.

18. Which two Cisco SD-WAN components exchange OMP information?

vAnaiytlcs

vSmart

WAN Edge

vBond

vManage

19. Which free application has the ability to make REST calls against Cisco DNA Center?

API Explorer

REST Explorer

Postman

Mozilla

20. A network engineer must configure a switch to allow remote access for all feasible protocols. Only a password must be requested for device authentication and all idle sessions must be terminated in 30 minutes.

Which configuration must be applied?

Option A

Option B

Option C

Option D

Page 3 of 16

21. Which definition describes JWT in regard to REST API security?

an encrypted JSON token that is used for authentication

an encrypted JSON token that is used for authorization

an encoded JSON token that is used to securely exchange information

an encoded JSON token that is used for authentication

22. An engineer configures a WLAN with fast transition enabled Some legacy clients fail to connect to this WLAN.

Which feature allows the legacy clients to connect while still allowing other clients to use fast transition based on then OLTIs?

over the DS

adaptive R

802.11V

802.11k

23. Which protocol is implemented to establish secure control plane adjacencies between Cisco SD-WAN nodes?

IKF

TLS

IPsec

ESP

24. DRAG DROP

Drag and drop the wireless elements on the left to their definitions on the right.

25. Refer to the exhibit.

An engineer must create a configuration that prevents R3from receiving the LSA about 172.16.1.4/32.

Which configuration set achieves this goal?

Option A

Option B

Option C

Option D

26. Refer to the exhibit.

Which command allows hosts that are connected to FastEthernet0/2 to access the Internet?

ip nat inside source list 10 interface FastEthernet0/1 overload

ip nat inside source list 10 interface FastEthernet0/2 overload

ip nat outside source list 10 interface FastEthernet0/2 overload

ip nat outside source static 209.165.200.225 10.10.10.0 overload

27. Which new enhancement was implemented in Wi-Fi 6?

Wi-Fi Protected Access 3

4096 Quadrature Amplitude Modulation Mode

Channel bonding

Uplink and Downlink Orthogonal Frequency Division Multiple Access

28. What Is a characteristic of a WLC that is in master controller mode?

All wireless LAN controllers are managed by the master controller.

All new APs that join the WLAN are assigned to the master controller.

Configuration on the master controller is executed on all wireless LAN controllers.

The master controller is responsible for load balancing all connecting clients to other controllers

29. What is an OVF?

a package that is similar to an IMG and that contains an OVA file used to build a virtual machine

an alternative form of an ISO that Is used to install the base operating system of a virtual machine

the third step in a P2V migration

a package of files that is used to describe a virtual machine or virtual appliance

30. Refer to the exhibit.

Which two commands are required on route R1 to block FTP and allow all other traffic from the Branch 2 network? (Choose two)

Option A

Option B

Option C

Option D

Option E

Page 4 of 16

31. DRAG DROP

Drag and drop the descriptions from the left onto the QoS components on the right.

32. Refer to the exhibit.

The connecting between SW1 and SW2 is not operational.

Which two actions resolve the issue? (Choose two)

configure switchport mode access on SW2

configure switchport nonegotiate on SW2

configure switchport mode trunk on SW2

configure switchport nonegotiate on SW1

configure switchport mode dynamic desirable on SW2

33. Which three resources must the hypervisor make available to the virtual machines? (Choose three)

memory

bandwidth

IP address

processor

storage

secure access

34. Refer to the exhibit.

Which command when applied to the Atlanta router reduces type 3 LSA flooding into the backbone area and summarizes the inter-area routes on the Dallas router?

Atlanta(config-route)#area 0 range 192.168.0.0 255.255.248.0

Atlanta(config-route)#area 0 range 192.168.0.0 255.255.252.0

Atlanta(config-route)#area 1 range 192.168.0.0 255.255.252.0

Atlanta(config-route)#area 1 range 192.168.0.0 255.255.248.0

35. Which component of the Cisco Cyber Threat Defense solution provides user and flow context analysis?

Cisco Firepower and FireSIGHT

Cisco Stealth watch system

Advanced Malware Protection

Cisco Web Security Appliance

36. Which LISP component is required for a LISP site to communicate with a non-LISP site?

ETR

ITR

Proxy ETR

Proxy ITR

37. Refer to the exhibit.

An engineer entered the command no spanning-tree bpduguard enable on interface Fa 1/0/7.

What is the effect of this command on Fa 1/0/7?

It remains in err-disabled state until the shutdown/no shutdown command is entered in the interface configuration mode.

It remains in err-disabled state until the errdisable recovery cause failed-port-state command is entered in the global configuration mode.

It remains in err-disabled state until the no shutdown command is entered in the interface configuration mode.

It remains in err-disabled state until the spanning-tree portfast bpduguard disable command is entered in the interface configuration mode.

38. An engineer is connected to a Cisco router through a Telnet session.

Which command must be issued to view the logging messages from the current session as soon as they are generated by the router?

logging buffer

service timestamps log uptime

logging host

terminal monitor

39. Refer to the exhibit.

An engineer attempts to configure a trunk between switch sw1 and switch SW2 using DTP, but the trunk does not form.

Which command should the engineer apply to switch SW2 to resolve this issue?

switchport mode dynamic desirable

switchport nonegotiate

no switchport

switchport mode access

40. Refer to the exhibit.

R1 has a BGP neighborship with a directly connected router on interface Gi0/0.

Which command set is applied between the iterations of show ip bgp 2.2.2.2?

R1(config)#router bgp 65001 R1(config-router)#neighbor 192.168.50.2 shutdown

R1(config)#router bgp 65002 R1(config-router)#neighbor 192.168.50.2 shutdown

R1(config)#no ip route 192.168.50.2 255.255.255.255 Gi0/0

R1(config)#ip route 2.2.2.2 255.255.255.255 192.168.50.2

Page 5 of 16

41. DRAG DROP

Drag and drop the descriptions of the VSS technology from the left to the right. Not all options are used.

42. Refer to the exhibit.

An engineer must configure a SPAN session.

What is the effect of the configuration?

Traffic sent on VLANs 10, 11, and 12 is copied and sent to interface g0/1.

Traffic sent on VLANs 10 and 12 only is copied and sent to interface g0/1.

Traffic received on VLANs 10, 11, and 12 is copied and sent to Interface g0/1.

Traffic received on VLANs 10 and 12 only is copied and sent to interface g0/1.

43. What is one benefit of implementing a VSS architecture?

It provides multiple points of management for redundancy and improved support

It uses GLBP to balance traffic between gateways.

It provides a single point of management for improved efficiency.

It uses a single database to manage configuration for multiple switches

44. An administrator is configuring NETCONF using the following XML string.

What must the administrator end the request with?

</rpc>]]>]]>

</rpc-reply>

</rpc>

45. Refer to the exhibit.

Which command set must be applied on R1 to establish a BGP neighborship with R2 and to allow communication from R1 to reach the networks?

A)

Option A

Option B

Option C

Option D

46. Refer to the exhibit.

Which python code parses the response and prints “18:32:21.474 UTC sun Mar 10 2019?

print(response['resut'][0||'simple_time']}

print(response[result']['body']['simple_time']}

print(response['body']['simple_time']}

print(response[jresult']['body']['simple_time']}

47. Refer to the exhibit.

Which command set must be added to the configuration to analyze 50 packets out of every 100?

sampler SAMPLER-1 mode random 1-out-of 2 flow FLOW-MONITOR-1 Interface GigabitEthernet 0/0/0 ip flow monitor SAMPLER-1 input

sampler SAMPLER-1 no mode random 1-out-of 2 mode percent 50 interface GigabitEthernet 0/0/0 ip flow monitor FLOW-MONITOR-1 sampler SAMPLER-1 input

interface GigabitEthernet 0/0/0 ip flow monitor FLOW-MONITOR-1 sampler SAMPLER-1 input

flow monitor FLOW-MONITOR-1 record v4_r1 sampler SAMPLER-1 interface GigabitEthernet 0/0/0 ip flow monitor FLOW-MONITOR-1 sampler SAMPLER-1 input

48. Refer to the exhibit:

An engineer configures VRRP and issues the show commands to verify operation.

What does the engineer confirm about VRRP group 1 from the output?

There is no route to 10.10.1.1/32 in R2’s routing table

If R1 reboots, R2 becomes the master virtual router until R2 reboots

Communication between VRRP members is encrypted using MD5

R1 is primary if 10.10.1.1/32 is in its routing table

49. Which method is used by an AP to join HA controllers and is configured in NVRAM?

stored WLC information

DNS

IP Helper Addresses

Primary/Secondary/Tertiary/Backup

50. Refer to the exhibit.

What are two results of the NAT configuration? (Choose two.)

Packets with a destination of 200.1.1.1 are translated to 10.1.1.1 or .2. respectively.

A packet that is sent to 200.1.1.1 from 10.1.1.1 is translated to 209.165.201.1 on R1.

R1 looks at the destination IP address of packets entering S0/0 and destined for inside hosts.

R1 processes packets entering E0/0 and S0/0 by examining the source IP address.

R1 is performing NAT for inside addresses and outside address.

Page 6 of 16

51. A Cisco DNA Center REST API sends a PUT to the /dna/intent/api/v1/network-device endpoint A response code of 504 is received What does the code indicate?

The response timed out based on a configured interval

The user does not have authorization to access this endpoint.

The username and password are not correct

The web server is not available

52. Which data is properly formatted with JSON?

A)

Option A

Option B

Option C

Option D

53. DRAG DROP

A network engineer is adding an additional 10Gps link to an exiting 2x10Gps LACP-based LAG to augment its capacity. Network standards require a bundle interface to be taken out of service if one of its member links goes down, and the new link must be added with minimal impact to the production network.

Drag and drop the tasks that the engineer must perform from the left into the sequence on the right. Not all options are used.

54. An engineer is configuring RADIUS-Based Authentication with EAP MS-CHAPv2 is configured on a client device.

Which outer method protocol must be configured on the ISE to support this authentication type?

EAP-TLS

PEAP

LDAP

EAP-FAST

55. Refer to the exhibit.

What is the result when a technician adds the monitor session 1 destination remote vlan 223 command1?

The RSPAN VLAN is replaced by VLAN 223.

RSPAN traffic is sent to VLANs 222 and 223

An error is flagged for configuring two destinations.

RSPAN traffic is split between VLANs 222 and 223.

56. DRAG DROP

Drag and drop the descriptions from the left onto the QoS components they describe on the right.

57. Which two operational models enable an AP to scan one or more wireless channels for rouge access points and at the same time provide wireless services to clients? (Choose two.)

Rouge detector

Sniffer

FlexConnect

Local

Monitor

58. In a Cisco StackWise Virtual environment, which planes are virtually combined in the common logical switch?

control, and forwarding

management and data

control and management

control and data

59. Refer to the exhibit.

What does the snippet of code achieve?

It creates a temporary connection to a Cisco Nexus device and retrieves a token to be used for API calls.

It opens a tunnel and encapsulates the login information, if the host key is correct.

It opens an ncclient connection to a Cisco Nexus device and maintains it for the duration of the context.

It creates an SSH connection using the SSH key that is stored, and the password is ignored.

60. Refer to the exhibit.

Cisco IOS routers R1 and R2 are interconnected using interface Gi0/0.

Which configuration allows R1 and R2 to form an OSPF neighborship on interface Gi0/0?

Option A

Option B

Option C

Option D

Page 7 of 16

61. In which two ways does the routing protocol OSPF differ from EIGRP? (Choose two.)

OSPF supports an unlimited number of hops. EIGRP supports a maximum of 255 hops.

OSPF provides shorter convergence time than EIGR

OSPF is distance vector protocol. EIGRP is a link-state protocol.

OSPF supports only equal-cost load balancing. EIGRP supports unequal-cost load balancing.

OSPF supports unequal-cost load balancing. EIGRP supports only equal-cost load balancing.

62. What is one characteristic of the Cisco SD-Access control plane?

It is based on VXLAN technology.

Each router processes every possible destination and route

It allows host mobility only in the wireless network.

It stores remote routes in a centralized database server

63. Which there application has the ability to make REST calls against Cisco DNA Center?

API Explorer

REST Explorer

Postman

Mozilla

64. DRAG DROP

Drag and drop the characteristics from the left onto the routing protocols they describe on the right.

65. Which congestion queuing method on Cisco IOS based routers uses four static queues?

Priority

custom

weighted fair

low latency

66. Refer to the exhibit.

An engineer must deny Telnet traffic from the loopback interface of router R3 to the Loopback interface of router R2 during, the weekend hours. All other traffic between the loopback interfaces of routers R3 and R2 must be allowed at all times.

Which command set accomplishes this task?

R3(config)#time-range WEEKEND R3(config-time-range)#periodic Saturday Sunday 00:00 to 23:59 R3(config)#access-list 150 deny tcp host 10.3.3.3 host 10.2.2.2 eq 23 time-range WEEKEND R3(config)#access-list 150 permit ip any any time-range WEEKEND R3(config)#interface Gi0/1 R3(config-if)#ip access-group 150 out

R1(config)#time-range WEEKEND R1(config-time-range)#periodic Friday Sunday 00:00 to 00:00 R1(config)#access-list 150 deny tcp host 10.3.3.3 host 10.2.2.2 eq 23 time-range WEEKEND R1(config)#access-list 150 permit ip any any R1(config)#interface Gi0/1 R1(config-if)#ip access-group 150 in

R1(config)#time-range WEEKEND R1(config-time-range)#periodic weekend 00:00 to 23:59 R1(config)#access-list 150 deny tcp host 10.3.3.3 host 10.2.2.2 eq 23 time-range WEEKEND R1(config)#access-list 150 permit ip any any R1(config)#interface Gi0/1 R1(config-if)#ip access-group 150 in

R3(config)#time-range WEEKEND R3(config-time-range)#periodic weekend 00:00 to 23:59 R3(config)#access-list 150 deny tcp host 10.3.3.3 host 10.2.2.2 eq 23 time-range WEEKEND R3(config)#access-list 150 permit ip any any time-range WEEKEND R3(config)#interface Gi0/1 R3(config-if)#ip access-group 150 out

67. Refer to the exhibit.

Which command is required to verify NETCONF capability reply messages?

show netconf | section rpc-reply

show netconf rpc-reply

show netconf xml rpc-reply

show netconf schema | section rpc-reply

68. Refer to the exhibit.

Which configuration set implements Control plane Policing for SSH and Telnet?

Option A

Option B

Option C

Option D

69. Refer to the exhibit.

A network engineer must simplify the IPsec configuration by enabling IPsec over GRE using IPsec profiles.

Which two configuration changes accomplish this? (Choose two).

Create an IPsec profile, associate the transform-set ACL, and apply the profile to the tunnel interface.

Apply the crypto map to the tunnel interface and change the tunnel mode to tunnel mode ipsec ipv4.

Remove all configuration related to crypto map from R1 and R2 and eliminate the AC

Create an IPsec profile, associate the transform-set, and apply the profile to the tunnel interface.

Remove the crypto map and modify the ACL to allow traffic between 10.10.0.0/24 to 10.20.0.0/24.

70. An engineer must configure HSRP group 300 on a Cisco IOS router. When the router is functional, it must be the must be the active HSRP router. The peer router has been configured using the default priority value.

Which command set is required?

A)

Option A

Option B

Option C

Option D

Page 8 of 16

71. Refer to the exhibit.

A network engineer must block Telnet traffic from hosts in the range of 10.100 2.248 to 10.100.2 255 to the network 10.100.3.0 and permit everything else.

Which configuration must the engineer apply'?

A)

Option A

Option B

Option C

Option D

72. Refer to the exhibit.

After configuring the BGP network, an engineer verifies that the path between Servers and Server2 Is functional.

Why did RouterSF choose the route from RouterDAL instead of the route from RouterCHI?

The Router-ID Tor Router DAL is lower than the Roter-ID for RouterCH

The route from RouterOAL has a lower ME

BGP is not running on RouterCH

There is a static route in RouterSF for 10.0.0.0/24.

73. Refer to the exhibit.

An engineer troubleshoots connectivity issues with an application. Testing is performed from the server gateway, and traffic with the DF bit set is dropped along the path after increasing packet size. Removing the DF bit setting at the gateway prevents the packets from being dropped.

What is the cause of this issue?

PMTUD does not work due to ICMP Packet Too Big messages being dropped by an ACL

The remote router drops the traffic due to high CPU load

The server should not set the DF bit in any type of traffic that is sent toward the network

There is a CoPP policy in place protecting the WAN router CPU from this type of traffic

74. What is a characteristic of MACsec?

802.1AE provides encryption and authentication services

802.1AE is bult between the host and switch using the MKA protocol, which negotiates encryption keys based on the master session key from a successful 802.1X session

802.1AE is bult between the host and switch using the MKA protocol using keys generated via the Diffie-Hellman algorithm (anonymous encryption mode)

802.1AE is negotiated using Cisco AnyConnect NAM and the SAP protocol

75. Refer to the exhibit.

An engineer must protect the CPU of the router from high rates of NTP, SNMP, and SSH traffic.

Which two configurations must be applied to drop these types of traffic when it continuously exceeds 320 kbps? (Choose two)

Option A

Option B

Option C

Option D

Option E

76. By default, which virtual MAC address does HSRP group 30 use?

00:05:0c:07:ac:30

00:00:0c:07:ac:1e

05:0c:5e:ac:07:30

00:42:18:14:05:1e

77. Which DHCP option provides the CAPWAP APs with the address of the wireless controller(s)?

150

78. Refer to the exhibit.

Assuming that R1 is a CE router, which VRF is assigned to Gi0/0 on R1?

VRF VFN_A

VRF VPN_B

management VRF

default VRF

79. What is provided by the Stealthwatch component of the Cisco Cyber Threat Defense solution?

real-time threat management to stop DDoS attacks to the core and access networks

real-time awareness of users, devices and traffic on the network

malware control

dynamic threat control for web traffic

80. If AP power level is increased from 25 mW to 100 mW. what is the power difference in dBm?

6 dBm

14 dBm

17 dBm

20 dBm

Page 9 of 16

81. Which design principle slates that a user has no access by default to any resource, and unless a resource is explicitly granted, it should be denied?

least privilege

fail-safe defaults

economy of mechanism

complete mediation

82. Refer to exhibit.

VLANs 50 and 60 exist on the trunk links between all switches All access ports on SW3 are configured for VLAN 50 and SW1 is the VTP server.

Which command ensures that SW3 receives frames only from VLAN 50?

SW1 (config)#vtp pruning

SW3(config)#vtp mode transparent

SW2(config)=vtp pruning

SW1 (config >»vtp mode transparent

83. An engineer measures the Wi-Fi coverage at a customer site.

The RSSI values are recorded as follows:

- Location A: - 72 dBm

- Location B: -75 dBm

- Location C: -65 dBm

- Location D: -80 dBm

Which two statements does the engineer use to explain these values to the customer? (Choose two)

The signal strength at location C is too weak to support web surfing

Location D has the strongest RF signal strength

The RF signal strength at location B is 50% weaker than location A

The signal strength at location B is 10 dB better than location C

The RF signal strength at location C is 10 times stronger than location B

84. What is one benefit of adopting a data modeling language?

augmenting management process using vendor centric actions around models

refactoring vendor and platform specific configurations with widely compatible configurations

augmenting the use of management protocols like SNMP for status subscriptions

deploying machine-friendly codes to manage a high number of devices

85. Which signal strength and noise values meet the minimum SNR for voice networks?

signal strength -67 dBm, noise 91 dBm

signal strength -69 dBm, noise 94 dBm

signal strength -68 dBm, noise 89 dBm

signal strength -66 dBm, noise 90 dBm

86. Refer to the exhibit.

What step resolves the authentication issue?

use basic authentication

change the port to 12446

target 192 168 100 82 in the URI

restart the vsmart host

87. Refer to the exhibit.

Router BRDR-1 is configured to receive the 0.0.0.0/0 and 172.17.1.0/24 network via BGP and advertise them into OSPF are 0. An engineer has noticed that the OSPF domain is receiving only the 172.17.1.0/24 route and default route 0.0.0.0/0 is still missing.

Which configurating must engineer apply to resolve the problem?

Option A

Option B

Option C

Option D

88. the following system log message is presented after a network administrator configures a GRE tunnel:

%TUN-5-RECURDOWN Interface Tunnel 0 temporarily disabled due to recursive routing

Why is tunnel 0 disabled?

Because dynamic routing is not enabled

Because the tunnel cannot reach its tunnel destination

Because the best path to the tunnel destination is through the tunnel itself

Because the router cannot recursively identify its egress forwarding interface

89. Refer to the exhibit.

Assuming all links are functional, which path does PC1 take to reach DSW1?

PC1 goes from ALSW1 to DSW2 to CORE to DSW1.

PC1 goes from ALSW1 to DSW2 to DSW1.

PC1 goes from ALSW1 to DSW1.

PC1 goes from ALSW1 to DSW2 to ALSW2 to DSW1.

90. Refer to the exhibit.

Which Python code snippet prints the descriptions of disabled interfaces only?

for interface in netconf data["GigabitEthernet“]: if interface["enabled"] l= 'false"; print(interface["description"])

for interface in netconf data["GigabitEthernet"']: if interface["enabled"] ='true": print(interface["description"])

for interface in netconf_data["GigabitEthernet"]: print(interface["enabled""]) print(interface["description"])

for interface in netconf data["GigabitEthernetT if interface["enabled"] = 'true": print(interface["description"])

Page 10 of 16

91. Refer to the exhibit.

An engineer attempts to configure a router on a stick to route packets between Clients, Servers, and Printers; however, initial tests show that this configuration is not working.

Which command set resolves this issue?

interface Vlan10 no ipvrf forwarding Clients ! interface Vlan20 no ipvrf forwarding Servers ! interface Vlan30 no ipvrf forwarding Printers

router eigrp1 network 10.0.0.0 255.255.255.0 network 172.16.0.0 255.255.255.0 network 192.168.1.0 255.255.255.0

interface Vlan10 no ipvrf forwarding Clients ip address 192.168.1.2. 255.255.255.0 ! interface Vlan20 no ipvrf forwarding Servers ip address 172.16.1.2 255.255.255.0 ! interface Vlan30 no ipvrf forwarding Printers ip address 10.1.1.2 255.255.255.0

router eigrp1 network 10.0.0.0 255.0.0.0 network 172.16.0.0 255.255.0.0 network 192.168.1.0 255.255.0.0

92. Refer to the exhibit.

A network engineer must load balance traffic that comes from the NAT Router and is destined to 10.10.110.10, to several FTP servers.

Which two commands sets should be applied? (Choose two).

A)

Option A

Option B

Option C

Option D

Option E

93. The Gig0/0 interface of two routers is directly connected with a 1G Ethernet link.

Which configuration must be applied to the interface of both routers to establish an OSPF adjacency without maintaining a DR/BDR relationship?

A)

Option A

Option B

Option C

Option D

94. A network engineer is enabling HTTPS access to the core switch, which requires a certificate to be installed on the switch signed by the corporate certificate authority.

Which configuration commands are required to issue a certificate signing request from the core switch?

A)

Option A

Option B

Option C

Option D

95. What is the output of this code?

username Cisco

get_credentials

username

CISCO

96. Which technology provides a secure communication channel for all traffic at Layer 2 of the OSI model?

MACsec

IPsec

SSL

Cisco Trustsec

97. DRAG DROP

Drag and drop the LISP components on the left to their descriptions on the right. Not all options are used.

98. An engineer must create a new SSID on a Cisco 9800 wireless LAN controller. The client has asked to use a pre-shared key for authentication.

Which profile must the engineer edit to achieve this requirement?

Policy

WLAN

Flex

99. Refer to the exhibit.

Both controllers are in the same mobility group.

Which result occurs when client 1 roams between APs that are registered to different controllers in the same WLAN?

Client 1 contact controller B by using an EoIP tunnel.

CAPWAP tunnel is created between controller A and controller

Client 1 users an EoIP tunnel to contact controller

The client database entry moves from controller A to controller

100. Refer to the exhibit.

What does the output confirm about the switch's spanning tree configuration?

The spanning-tree mode stp ieee command was entered on this switch

The spanning-tree operation mode for this switch is IEE

The spanning-tree operation mode for this switch is PVST+.

The spanning-tree operation mode for this switch is PVST

Page 11 of 16

101. Refer to the exhibit.

A network engineer configures OSPF and reviews the router configuration.

Which interface or interface or interface are able to establish OSPF adjacency?

GigabitEthemet0/1 and GigabitEthernet0/1.40

only GigabitEthernet0/1

only GigabttEthernet0/0

Gigabit Ethernet0/0 and GigabitEthemet0/1

102. What is an emulated machine that has dedicated compute memory, and storage resources and a fully installed operating system?

Container

Mainframe

Host

virtual machine

103. Refer to the exhibit.

What is required to configure a second export destination for IP address 192.168.10.1?

Specify a VR

Specify a different UDP port.

Specify a different flow ID

Configure a version 5 flow-export to the same destination.

Specify a different TCP port.

104. What do Cisco DNA southbound APIs provide?

Interface between the controller and the network devices

NETCONF API interface for orchestration communication

RESful API interface for orchestrator communication

Interface between the controller and the consumer

105. Which antenna type should be used for a site-to-site wireless connection?

Omnidirectional

dipole

patch

Yagi

106. A company plans to implement intent-based networking in its campus infrastructure.

Which design facilities a migrate from a traditional campus design to a programmer fabric designer?

Layer 2 access

three-tier

two-tier

routed access

107. Refer to the exhibit.

An engineer must permit traffic from these networks and block all other traffic. An informational log message should be triggered when traffic enters from these prefixes.

Which access list must be used?

access-list acl_subnets permit ip 10.0.32.0 0 0.0.255 log

access-list acl_subnets permit ip 10.0.32.0 0.0.7.255 log

access-list acl_subnets permit ip 10.0.32.0 0.0.7.255 access-list acl_subnets deny ip any log

access-list acl_subnets permit ip 10.0.32.0 255.255.248.0 log

108. Refer to the exhibit.

A network engineer configures NAT on R1 and enters the show command to verity the configuration.

What does the output confirm?

The first pocket triggered NAT to add on entry to NAT table

R1 is configured with NAT overload parameters

A Telnet from 160.1.1 1 to 10.1.1.10 has been initiated.

R1 to configured with PAT overload parameters

109. When using BFD in a network design, which consideration must be made?

BFD is used with first hop routing protocols to provide subsecond convergence.

BFD is more CPU-intensive than using reduced hold timers with routing protocols.

BFD is used with dynamic routing protocols to provide subsecond convergence.

BFD is used with NSF and graceful to provide subsecond convergence.

110. Which function in handled by vManage in the cisco SD-WAN fabric?

Establishes BFD sessions to test liveliness of links and nodes.

Distributes polices that govern data forwarding.

Performs remote software upgrades for WAN Edge vSmart and vBond.

Establishes iPsec tunnels with nodes

Page 12 of 16

111. Refer to the exhibit

Communication between London and New York is down.

Which to resolve this issue?

NewYork(config)#int f0/1 NewYork(config)#switchport nonegotiate NewYork(config)#end NewYork#

NewYork(config)#int f0/1 NewYork(config)#switchport mode trunk NewYork(config)#end NewYork#

NewYork(config)#int f0/1 NewYork(config)#switchport trunk encap dot1q NewYork(config)#end NewYork#

NewYork(config)#intf0/1 NewYork(config)#switchport mode dynamic desirable NewYork(config)#end NewYork#

112. Refer to the exhibit.

A company requires that all wireless users authenticate using dynamic key generation.

Which configuration must be applied?

AP(config-if-ssid)# authentication open wep wep_methods

AP(config-if-ssid)# authentication dynamic wep wep_methods

AP(config-if-ssid)# authentication dynamic open wep_dynamic

AP(config-if-ssid)# authentication open eap eap_methods

113. A customer deploys a new wireless network to perform location-based services using Cisco DNA Spaces The customer has a single WLC located on-premises in a secure data center. The security team does not want to expose the WLC to the public Internet.

Which solution allows the customer to securely send RSSI updates to Cisco DNA Spaces?

Implement Cisco Mobility Services Engine

Replace the WLC with a cloud-based controller.

Perform tethering with Cisco DNA Center.

Deploy a Cisco DNA Spaces connector as a V

114. What are two characteristics of VXLAN? (Choose two)

It uses VTEPs to encapsulate and decapsulate frames.

It has a 12-bit network identifier

It allows for up to 16 million VXLAN segments

It lacks support for host mobility

It extends Layer 2 and Layer 3 overlay networks over a Layer 2 underlay.

115. Refer to the exhibit.

An engineer must configure an ERSPAN tunnel that mirrors traffic from linux1 on Switch1 to Linux2 on Switch2.

Which command must be added to the destination configuration to enable the ERSPAN tunnel?

(config-mon-erspan-dst-src)# origin ip address 172.16.10.10

(config-mon-erspan-dst-src)# erspan-id 172.16.10.10

(config-mon-erspan-dst-src)# no shut

(config-mon-erspan-dst-src)# erspan-id 110

116. In cisco SD_WAN, which protocol is used to measure link quality?

OMP

BFD

RSVP

IPsec

117. which entity is a Type 1 hypervisor?

Oracle VM VirtualBox

VMware server

Citrix XenServer

Microsoft Virtual PC

118. A network administrator is implementing a routing configuration change and enables routing debugs to track routing behavior during the change. The logging output on the terminal is interrupting the command typing process.

Which two actions can the network administrator take to minimize the possibility of typing commands incorrectly? (Choose two.)

Configure the logging synchronous global configuration command

Configure the logging delimiter feature

Configure the logging synchronous command under the vty

Press the TAB key to reprint the command in a new line

increase the number of lines on the screen using the terminal length command

119. Which three methods does Cisco DNA Centre use to discover devices? (Choose three)

CDP

SNMP

LLDP

ping

NETCONF

a specified range of IP addresses

120. Refer to the Exhibit.

Running the script causes the output in the exhibit.

What should be the first line of the script?

from ncclient import manager

import manager

from ncclient import *

ncclient manager import

Page 13 of 16

121. Which method displays text directly into the active console with a synchronous EEM applet policy?

event manager applet boom event syslog pattern 'UP' action 1.0 gets 'logging directly to console'

event manager applet boom event syslog pattern 'UP' action 1.0 syslog priority direct msg 'log directly to console'

event manager applet boom event syslog pattern 'UP' action 1.0 puts 'logging directly to console'

event manager applet boom event syslog pattern 'UP' action 1.0 string 'logging directly to console'

122. How does Protocol Independent Multicast function?

In sparse mode, it establishes neighbor adjacencies and sends hello messages at 5-second intervals.

It uses the multicast routing table to perform the multicast forwarding function.

It uses unicast routing information to perform the multicast forwarding function.

It uses broadcast routing information to perform the multicast forwarding function.

123. DRAG DROP

Drag anti drop the characteristics from the ten onto the configuration models on the right.

124. A network administrator has designed a network with two multilayer switches on the distribution layer, which act as default gateways for the end hosts.

Which two technologies allow every end host in a VLAN to use both gateways? (Choose two)

GLBP

HSRP

MHSRP

VSS

VRRP

125. Refer to the exhibit.

An engineer implemented several configuration changes and receives the logging message on switch1.

Which action should the engineer take to resolve this issue?

Change the VTP domain to match on both switches

Change Switch2 to switch port mode dynamic auto

Change Switch1 to switch port mode dynamic auto

Change Switch1 to switch port mode dynamic desirable

126. DRAG DROP

Drag and drop the characteristics from the left onto the orchestration tools that they describe on the right.

127. Which two solutions are used for backing up a Cisco DNA Center Assurance database? (Choose two)

NFS share

non-linux server

local server

remote server

bare metal server

128. Which line must be added in the Python function to return the JSON object {"cat_9k": “FXS193202SE")?

Option A

Option B

Option C

Option D

129. An engineer must configure the strongest password authentication to locally authenticate on a router.

Which configuration must be used?

Option A

Option B

Option C

Option D

130. Refer to the exhibit.

Which type of antenna does the radiation pattern represent?

Yagi

multidirectional

directional patch

omnidirectional

Page 14 of 16

131. DRAG DROP

Drag and drop the REST API authentication methods from the left onto their descriptions on the right.

132. Which two parameters are examples of a QoS traffic descriptor? (Choose two)

MPLS EXP bits

bandwidth

DSCP

ToS

packet size

133. What is a VPN in a Cisco SD-WAN deployment?

common exchange point between two different services

attribute to identify a set of services offered in specific places in the SD-WAN fabric

virtualized environment that provides traffic isolation and segmentation in the SD-WAN fabric

virtual channel used to carry control plane information

134. Refer to the exhibit.

An engineer configures CoPP and enters the show command to verify the implementation.

What is the result of the configuration?

All traffic will be policed based on access-list 120.

If traffic exceeds the specified rate, it will be transmitted and remarked.

Class-default traffic will be dropped.

ICMP will be denied based on this configuration.

135. What occurs when a high bandwidth multicast stream is sent over an MVPN using Cisco hardware?

The traffic uses the default MDT to transmit the data only if it isa (S, G) multicast route entry

A data MDT is created to if it is a (*, G) multicast route entries

A data and default MDT are created to flood the multicast stream out of all PIM-SM neighbors.

A data MDT is created to allow for the best transmission through the core for (S, G) multicast route entries.

136. Refer to the exhibit.

Which GRE tunnel configuration command is missing on R2?

tunnel source 192.181.2

tunnel source 172.16.1.0

tunnel source 200.1.1.1

tunnel destination 200.1.1.1

137. What is the rose of the vSmart controller in a Cisco SD-WN environment?

it performs authentication and authorization

it manages the control plane.

it is the centralized network management system

it manages the data plane

138. Refer to the exhibit.

An engineer configures a trunk between SW1 and SW2 but tagged packets are not passing.

Which action fixes the issue?

Configure SW1 with dynamic auto mode on interface FastEthernet0/1.

Configure the native VLAN to be the same VLAN on both switches on interface FastEthernet0/1.

Configure SW2 with encapsulation dot1q on interface FastEthernet0/1.

Configure FastEthernet0/1 on both switches for static trunking.

139. Refer to the exhibit.

Rapid PVST+ is enabled on all switches.

Which command set must be configured on switch1 to achieve the following results on port fa0/1?

- When a device is connected, the port transitions immediately to a forwarding state.

- The interface should not send or receive BPDUs.

- If a BPDU is received, it continues operating normally.

A)

Option A

Option B

Option C

Option D

140. A company recently decided to use RESTCONF instead of NETCONF and many of their NETCONF scripts contain the operation <edit-config>(operation=”create”).

Which RESTCONF operation must be used to replace these statements?

POST

GET

PUT

CREATE

Page 15 of 16

141. An engineer is concerned with the deployment of new application that is sensitive to inter-packet delay variance.

Which command configures the router to be the destination of jitter measurements?

Router(config)# ip sla responder udp-connect 172.29.139.134 5000

Router(config)# ip sla responder tcp-connect 172.29.139.134 5000

Router(config)# ip sla responder udp-echo 172.29.139.134 5000

Router(config)# ip sla responder tcp-echo 172.29.139.134 5000

142. Refer to the exhibit.

Traffic is not passing between SW1 and SW2.

Which action fixes the issue?

Configure LACP mode on S1 to passive.

Configure switch port mode to ISL on S2.

Configure PAgP mode on S1 to desirable.

Configure LACP mode on S1 to active.

143. An engineer is configuring a GRE tunnel interface in the default mode. The engineer has assigned an IPv4 address on the tunnel and sourced the tunnel from an Ethernet interface.

Which option also is required on the tunnel interface before it is operational?

(config-if)#tunnel destination <ip address>

(config-if)#keepalive <seconds retries>

(config-if)#ip mtu <value>

(config-if)#ip tcp adjust-mss <value>

144. By default, which virtual MAC address Goes HSRP group 25 use?

05:5c:5e:ac:0c:25

04:16:6S:96:1C:19

00:00:0c:07:ac:19

00:00:0c:07:ac:25

145. DRAG DROP

Drag and drop the DHCP messages that are exchanged between a client and an AP into the order they are exchanged on the right.

146. DRAG DROP

An engineer must create a script to append and modify device entries in a JSON-formatted file.

The script must work as follows:

✑ Until interrupted from the keyboard, the script reads in the hostname of a device, its management IP address, operating system type, and CLI remote access protocol.

✑ After being interrupted, the script displays the entered entries and adds them to the JSON-formatted file, replacing existing entries whose hostname matches.

The contents of the JSON-formatted file are as follows:

Drag and drop the statements onto the blanks within the code to complete the script. Not all options are used.

147. Which technology reduces the implementation of STP and leverages both unicast and multicast?

VSS

VXLAN

VPC

VLAN

148. Refer to the exhibit.

An engineer is troubleshooting an application running on Apple phones. The application Is receiving incorrect QoS markings. The systems administrator confirmed that ail configuration profiles are correct on the Apple devices.

Which change on the WLC optimizes QoS for these devices?

Enable Fastlane

Set WMM to required

Change the QoS level to Platinum

Configure AVC Profiles

149. Which IP SLA operation requires the IP SLA responder to be configured on the remote end?

TCP connect

ICMP echo

ICMP jitter

UDP jitter

150. Which protocol is used to encrypt control plane traffic between SD-WAN controllers and SD-WAN endpoints?

DTLS

IPsec

PGP

HTTPS

Page 16 of 16

151. The login method is configured on the VTY lines of a router with these parameters.

✑ The first method for authentication it TACACS

✑ If TACACS is unavailable login is allowed without any provided credentials.

Which configuration accomplishes this task?

R1#sh run | include aaa aaa new-model aaa authentication login VTY group tacacs+ none aaa session-id common R1#sh run | section vty line vty 0 4 password 7 0202039485748 R1#sh run | include username R1#

R1#sh run | include aaa aaa new-model aaa authentication login telnet group tacacs+ none aaa session-id common R1#sh run | section vty line vty 0 4 R1#sh run | include username R1#

R1#sh run | include aaa aaa new-model aaa authentication login default group tacacs+ none aaa session-id common R1#sh run | section vty line vty 0 4 password 7 0202039485748

R1#sh run | include aaa aaa new-model aaa authentication login default group tacacs+ aaa session-id common R1#sh run | section vty line vty 0 4 transport input none R1#

152. What is a characteristic of a Type I hypervisor?

It is installed on an operating system and supports other operating systems above it.

It is referred to as a hosted hypervisor.

Problems in the base operating system can affect the entire system.

It is completely independent of the operating system.

153. Under which network conditions is an outbound QoS policy that is applied on a router WAN interface most beneficial?

under interface saturation condition

under network convergence condition

under all network condition

under traffic classification and marking conditions.