Update 350-401 ENCOR Dumps For Your CCNP Enterprise Certification

test2022-05-25T09:01:56+00:00

Do you want to be able to pass the Cisco 350-401 ENCOR test with flying colors? To pass your Cisco 350-401 test, the best method is to challenge and improve your knowledge. We recommend that you prepare with FreeTestShare 350-401 ENCOR Dumps to test your knowledge and identify areas for development using genuine exam format. 350-401 ENCOR Dumps are exactly the right study tools that contain actual exam questions and answers to help you pass the CCNP Enterprise 350-401 exam on the first try!

You can use the following 350-401 practice exam to determine your level of preparation.

Page 1 of 15

1. Which benefit is offered by a cloud infrastructure deployment but is lacking in an on-premises deployment?

efficient scalability

virtualization

storage capacity

supported systems

2. DRAG DROP

Drag and drop the descriptions from the left onto the routing protocol they describe on the right.

3. Refer to the exhibit.

The network administrator must be able to perform configuration changes when all the RADIUS servers are unreachable .

Which configuration allows all commands to be authorized if the user has successfully authenticated?

aaa authorization exec default group radius none

aaa authentication login default group radius local none

aaa authorization exec default group radius if-authenticated

aaa authorization exec default group radius

4. DRAG DROP

Drag and drop the characteristics from the left onto the routing protocols they describe on the right.

5. Which solution do laaS service providers use to extend a Layer 2 segment across a Layer 3 network?

VLAN

VTEP

VXLAN

VRF

6. Refer to the exhibit.

Clients report that they cannot connect to this SSID using the provided PSK .

Which action will resolve this issue?

Apply the correct interface to this WLA

Apply the changes this SSI

Select the PSK under authentication key management.

Define the correct Radio Policy.

7. Which two threats does AMP4E have the ability to block? (Choose two.)

DDoS

ransomware

Microsoft Word macro attack

SQL injection

email phishing

8. DRAG DROP

Drag and drop the automation characteristics from the left onto the appropriate tools on the right.

9. Refer to the exhibit.

An engineer must configure a SPAN session .

What is the effect of the configuration?

Traffic sent on VLANs 10, 11, and 12 is copied and sent to interface g0/1.

Traffic sent on VLANs 10 and 12 only is copied and sent to interface g0/1.

Traffic received on VLANs 10, 11, and 12 is copied and sent to Interface g0/1.

Traffic received on VLANs 10 and 12 only is copied and sent to interface g0/1.

10. Refer to the exhibit.

An engineer must ensure that all traffic leaving AS 200 will choose Link 2 as an entry point.

Assuming that all BGP neighbor relationships have been formed and that the attributes have not been changed on any of the routers, which configuration accomplish task?

Option A

Option B

Option C

Option D

Page 2 of 15

11. DRAG DROP

Drag and drop the characteristics from the left onto the routing protocols they describe on the right.

12. Refer to the exhibit.

What is the Json syntax that is formed from the data?

{Name: Bob Johnson, Age: 75, Alive: true, Favorite Foods: [Cereal, Mustard, Onions]}

{"Name": "Bob Johnson", "Age": 75, "Alive": true, "Favorite Foods": ["Cereal", "Mustard", "Onions"]}

{"˜Name': "˜Bob Johnson', "˜Age': 75, "˜Alive': True, "˜Favorite Foods': "˜Cereal', "˜Mustard', "˜Onions'}

{"Name": "Bob Johnson", "Age": Seventyfive, "Alive": true, "Favorite Foods": ["Cereal", "Mustard", "Onions"]}

13. Refer to the exhibit.

An engineer must create a configuration that prevents R3from receiving the LSA about 172.16.1.4/32.

Which configuration set achieves this goal?

A)

Option A

Option B

Option C

Option D

14. Refer to the exhibit.

A network engineer troubleshoots an issue with the port channel between SW1 and SW2. which command resolves the issue?

SW1(config-if)#channel-group 10 mode desirable

SW1(config-if)#channel-group 10 mode active

SW2(config-if)#switchport mode trunk

SW2(config-if)#channel-group 10 mode on

15. Based on the router's API output In JSON format below, which Python code will display the value of the 'role' key?

Option A

Option B

Option C

Option D

16. The login method is configured on the VTY lines of a router with these parameters

✑ The first method for authentication it TACACS

✑ If TACACS is unavailable login is allowed without any provided credentials.

Which configuration accomplishes this task?

Option A

Option B

Option C

Option D

17. What are two differences between the RIB and the FIB? (Choose two.)

The FIB is derived from the data plane, and the RIB is derived from the FI

The RIB is a database of routing prefixes, and the FIB is the Information used to choose the egress interface for each packet.

FIB is a database of routing prefixes, and the RIB is the information used to choose the egress interface for each packet.

The FIB is derived from the control plane, and the RIB is derived from the FI

The RIB is derived from the control plane, and the FIB is derived from the RI

18. What is the data policy in a Cisco SD-WAN deployment?

list of ordered statements that define node configurations and authentication used within the SD-WAN overlay

Set of statements that defines how data is forwarded based on IP packet information and specific VPNs

detailed database mapping several kinds of addresses with their corresponding location

group of services tested to guarantee devices and links liveliness within the SD-WAN overlay

19. An engineer must configure a new loopback Interface on a router and advertise the interface as a fa4 in OSPF .

Which command set accomplishes this task?

A)

Option A

Option B

Option C

Option D

20. DRAG DROP

Drag and drop the characteristics from the left onto the switching mechanisms they describe on the right.

Page 3 of 15

21. Refer to the exhibit.

An engineer must protect the CPU of the router from high rates of NTP, SNMP, and SSH traffic .

Which two configurations must be applied to drop these types of traffic when it continuously exceeds 320 kbps? (Choose two)

Option A

Option B

Option C

Option D

Option E

22. Which action is performed by Link Management Protocol in a Cisco StackWise Virtual domain?

It rejects any unidirectional link traffic forwarding

It determines if the hardware is compatible to form the StackWise Virtual domain

discovers the StackWise domain and brings up SVL interfaces.

It determines which switch becomes active or standby

23. Which LISP component is required for a LISP site to communicate with a non-LISP site?

ETR

ITR

Proxy ETR

Proxy ITR

24. Refer to the exhibit.

Which configuration establishes EBGP neighborship between these two directly connected neighbors and exchanges the loopback network of the two routers through BGP?

R1(config)#router bgp 1 R1(config-router)#neighbor 192.168.10.2 remote-as 2 R1(config-router)#network 10.1.1.0 mask 255.255.255.0 R2(config)#router bgp 2 R2(config-router)#neighbor 192.168.10.1 remote-as 1 R2(config-router)#network 10.2.2.0 mask 255.255.255.0

R1(config)#router bgp 1 R1(config-router)#neighbor 10.2.2.2 remote-as 2 R1(config-router)#network 10.1.1.0 mask 255.255.255.0 R2(config)#router bgp 2 R2(config-router)#neighbor 10.1.1.1 remote-as 1 R2(config-router)#network 10.2.2.0 mask 255.255.255.0

R1(config)#router bgp 1 R1(config-router)#neighbor 192.168.10.2 remote-as 2 R1(config-router)#network 10.0.0.0 mask 255.0.0.0 R2(config)#router bgp 2 R2(config-router)#neighbor 192.168.10.1 remote-as 1 R2(config-router)#network 10.0.0.0 mask 255.0.0.0

R1(config)#router bgp 1 R1(config-router)#neighbor 10.2.2.2 remote-as 2 R1(config-router)#neighbor 10.2.2.2 update-source |o0 R1(config-router)#network 10.1.1.0 mask 255.255.255.0 R2(config)#router bgp 2 R2(config-router)#neighbor 10.1.1.1 remote-as 1 R2(config-router)#neighbor 10.1.1.1 update-source |o0 R2(config-router)#network 10.2.2.0 mask 255.255.255.0

25. An engineer has deployed a single Cisco 5520 WLC with a management IP address of 172.16.50.5/24. The engineer must register 50 new Cisco AIR-CAP2802I-E-K9 access points to the WLC using DHCP option 43. The access points are connected to a switch in VLAN 100 that uses the 172.16.100.0/24 subnet.

The engineer has configured the DHCP scope on the switch as follows:

The access points are failing to join the wireless LAN controller .

Which action resolves the issue?

configure option 43 Hex F104.AC10.3205

configure option 43 Hex F104.CA10.3205

configure dns-server 172.16.50.5

configure dns-server 172.16.100.1

26. DRAG DROP

Drag anti drop the characteristics from the ten onto the configuration models on the right.

27. Refer to the exhibit.

Which privilege level is assigned to VTY users?

28. AN engineer is implementing a route map to support redistribution within BGP. The route map must configured to permit all unmatched routes .

Which action must the engineer perform to complete this task?

Include a permit statement as the first entry

Include at least one explicit deny statement

Remove the implicit deny entry

Include a permit statement as the last entry

29. DRAG DROP

Drag and drop the characteristics from the left onto the orchestration tools that they describe on the right.

30. Which method should an engineer use to deal with a long-standing contention issue between any two VMs on the same host?

Adjust the resource reservation limits

Live migrate the VM to another host

Reset the VM

Reset the host

Page 4 of 15

31. How is Layer 3 roaming accomplished in a unified wireless deployment?

An EoIP tunnel is created between the client and the anchor controller to provide seamless connectivity as the client is associated with the new A

The client entry on the original controller is passed to the database on the new controller.

The new controller assigns an IP address from the new subnet to the client

The client database on the original controller is updated the anchor entry, and the new controller database is updated with the foreign entry.

32. Which technology does VXLAN use to provide segmentation for Layer 2 and Layer 3 traffic?

bridge domain

VLAN

VRF

VNI

33. Which protocol is responsible for data plane forwarding in a Cisco SD-Access deployment?

VXLAN

IS-IS

OSPF

LISP

34. A customer deploys a new wireless network to perform location-based services using Cisco DNA Spaces The customer has a single WLC located on-premises in a secure data center. The security team does not want to expose the WLC to the public Internet .

Which solution allows the customer to securely send RSSI updates to Cisco DNA Spaces?

Implement Cisco Mobility Services Engine

Replace the WLC with a cloud-based controller.

Perform tethering with Cisco DNA Center.

Deploy a Cisco DNA Spaces connector as a V

35. DRAG DROP

Drag and drop the characteristics from the left onto the infrastructure deployment models they describe on the right.

36. DRAG DROP

A network engineer is adding an additional 10Gps link to an exiting 2x10Gps LACP-based LAG to augment its capacity. Network standards require a bundle interface to be taken out of service if one of its member links goes down, and the new link must be added with minimal impact to the production network.

Drag and drop the tasks that the engineer must perform from the left into the sequence on the right. Not all options are used.

37. A customer requests a design that includes GLBP as the FHRP. The network architect discovers that the members of the GLBP group have different throughput capabilities.

Which GLBP load balancing method supports this environment?

host dependent

least connection

round robin

weighted

38. DRAG DROP

Drag and drop the Cisco SD-Access solution areas from the left onto the protocols they use on the right.

39. What is the recommended MTU size for a Cisco SD-Access Fabric?

1500

9100

4464

17914

40. What is the function of a control-plane node In a Cisco SD-Access solution?

to run a mapping system that manages endpoint to network device relationships

to implement policies and communicate with networks outside the fabric

to connect external Layer 3 networks to the SD-Access fabric

to connect APs and wireless endpoints to the SD-Access fabric

Page 5 of 15

41. Which devices does Cisco DNA Center configure when deploying an IP-based access control policy?

All devices integrating with ISE

selected individual devices

all devices in selected sites

all wired devices

42. Refer to the exhibit.

Which command must be configured for RESTCONF to operate on port 8888?

ip http port 8888

restconf port 8888

ip http restconf port 8888

restconf http port 8888

43. A network engineer configures a new GRE tunnel and enters the show run command .

What does the output verify?

The tunnel will be established and work as expected

The tunnel destination will be known via the tunnel interface

The tunnel keepalive is configured incorrectly because they must match on both sites

The default MTU of the tunnel interface is 1500 byte.

44. Which option works with a DHCP server to return at least one WLAN management interface IP address during the discovery phase and is dependent upon the VCI of the AP?

Option 42

Option 15

Option 125

Option 43

45. DRAG DROP

Drag and drop the characteristics from the left onto the orchestration tools they describe on the right.

46. DRAG DROP

Drag and drop the DHCP messages that are exchanged between a client and an AP into the order they are exchanged on the right.

47. DRAG DROP

Drag and drop the characteristics from the left onto the infrastructure deployment models on the right.

48. A network engineer must configure a router to send logging messages to a syslog server based on these requirements:

✑ uses syslog IP address: 10.10.10.1

✑ uses a reliable protocol

✑ must not use any well-known TCP/UDP ports

Which configuration must be used?

logging host 10.10.10.1 transport tcp port 1024

logging origin-id 10.10.10.1

logging host 10.10.10.1 transport udp port 1023

logging host 10.10.10.1 transport udp port 1024

49. What is the function of the LISP map resolver?

to send traffic to non-LISP sites when connected to a service provider that does not accept nonroutable ElDs as packet sources

to connect a site to the LISP-capable part of a core network publish the EID-to-RLOC mappings for the site, and respond to map-request messages

to decapsulate map-request messages from ITRs and forward the messages to the M

to advertise routable non-LISP traffic from one address family to LISP sites in a different address family

50. An engineer configures GigabitEthernet 0/1 for VRRP group 115. The router must assume the primary role when it has the highest priority in the group .

Which command set is required to complete this task?

Option A

Option B

Option C

Option D

Page 6 of 15

51. Which method of account authentication does OAuth 2.0 within REST APIs?

username/role combination

access tokens

cookie authentication

basic signature workflow

52. By default, which virtual MAC address Goes HSRP group 25 use?

05:5c:5e:ac:0c:25

04:16:6S:96:1C:19

00:00:0c:07:ac:19

00:00:0c:07:ac:25

53. What NTP Stratum level is a server that is connected directly to an authoritative time source?

Stratum 0

Stratum 1

Stratum 14

Stratum 15

54. Refer to me exhibit .

What is the cause of the log messages?

hello packet mismatch

OSPF area change

MTU mismatch

IP address mismatch

55. What is the role of the RP in PIM sparse mode?

The RP responds to the PIM join messages with the source of requested multicast group

The RP maintains default aging timeouts for all multicast streams requested by the receivers.

The RP acts as a control-plane node and does not receive or forward multicast packets.

The RP is the multicast that is the root of the PIM-SM shared multicast distribution tree.

56. By default, which virtual MAC address does HSRP group 16 use?

c0:41:43:64:13:10

00:00:0c 07:ac:10

00:05:5c:07:0c:16

05:00:0c:07:ac:16

57. A vulnerability assessment highlighted that remote access to the switches is permitted using unsecure and unencrypted protocols.

Which configuration must be applied to allow only secure and reliable remote access for device administration?

line vty 0 15 login local transport input none

line vty 0 15 login local transport input telnet ssh

line vty 0 15 login local transport input ssh

line vty 0 15 login local transport input all

58. DRAG DROP

Drag and drop the REST API authentication methods from the left onto their descriptions on the right.

59. What is required for intercontroller Layer 3 roaming?

Mobility groups are established between wireless controllers.

The management VLAN is present as a dynamic VLAN on the second WL

WLCs use separate DHCP servers.

WLCs have the same IP addresses configured on their interfaces.

60. A customer has recently implemented a new wireless infrastructure using WLC-5520 at a site directly next to a large commercial airport. Users report that they intermittently lose WI-FI connectivity, and troubleshooting reveals it is due to frequent channel changes .

Which two actions fix this issue? (Choose two)

Remove UNII-2 and Extended UNII-2 channels from the 5 Ghz channel list

Restore the DCA default settings because this automatically avoids channel interference.

Configure channels on the UNIk2 and the Extended UNII-2 sub-bands of the 5 Ghz band only

Enable DFS channels because they are immune to radar interference.

Disable DFS channels to prevent interference with Doppler radar

Page 7 of 15

61. An engineer is configuring Local WebAuth on a Cisco Wireless LAN Controller.

According to RFC 5737, which virtual ip address must be used in this configuration?

192.0.2.1

172.20.10.1

1.1.1.1

192.168.0.1

62. An engineer is concerned with the deployment of new application that is sensitive to inter-packet delay variance .

Which command configures the router to be the destination of jitter measurements?

Router(config)# ip sla responder udp-connect 172.29.139.134 5000

Router(config)# ip sla responder tcp-connect 172.29.139.134 5000

Router(config)# ip sla responder udp-echo 172.29.139.134 5000

Router(config)# ip sla responder tcp-echo 172.29.139.134 5000

63. What is a characteristic of Cisco DNA Northbound APIs?

They simplify the management of network infrastructure devices.

They enable automation of network infrastructure based on intent.

They utilize RESTCON

They utilize multivendor support APIs.

64. What is the function of cisco DNA center in a cisco SD-access deployment?

It is responsible for routing decisions inside the fabric

It is responsible for the design, management, deployment, provisioning and assurance of the fabric network devices.

It possesses information about all endpoints, nodes and external networks related to the fabric

It provides integration and automation for all nonfabric nodes and their fabric counterparts.

65. Refer to the exhibit.

SwitchC connects HR and Sales to the Core switch However, business needs require that no traffic from the Finance VLAN traverse this switch.

Which command meets this requirement?

SwitchC(config)#vtp pruning

SwitchC(config)#vtp pruning vlan 110

SwitchC(config)#interface port-channel 1 SwitchC(config-if)#switchport trunk allowed vlan add 210,310

SwitchC(config)#interface port-channel 1 SwitchC(config-if)#switchport trunk allowed vlan remove 110

66. Refer to the exhibit.

A network engineer configures NAT on R1 and enters the show command to verity the configuration.

What does the output confirm?

The first pocket triggered NAT to add on entry to NAT table

R1 is configured with NAT overload parameters

A Telnet from 160.1.1 1 to 10.1.1.10 has been initiated.

R1 to configured with PAT overload parameters

67. Refer to the exhibit.

POSTMAN is showing an attempt to retrieve network device information from Cisco DNA Center API .

What is the issue?

The URI string is incorrect

The token has expired.

Authentication has failed

The JSON payload contains the incorrect UUID

68. Refer to the exhibit.

What is the result of the API request?

The "params" variable sends data fields to the network appliance.

The native interface information is read from the network appliance.

The Information for all interfaces is read from the network appliance.

The "params" variable reads data fields from the network appliance

69. Refer to the exhibit.

The connecting between SW1 and SW2 is not operational .

Which two actions resolve the issue? (Choose two)

configure switchport mode access on SW2

configure switchport nonegotiate on SW2

configure switchport mode trunk on SW2

configure switchport nonegotiate on SW1

configure switchport mode dynamic desirable on SW2

70. Which two components are supported by LISP? (Choose two.)

Proxy ETR

egress tunnel router

route reflector

HMAC algorithm

spoke

Page 8 of 15

71. In a Cisco StackWise Virtual environment, which planes are virtually combined in the common logical switch?

control, and forwarding

management and data

control and management

control and data

72. DRAG DROP

UESTION NO: 13 DRAG DROP

Drag and drop the virtual components from the left onto their deceptions on the right.

73. Refer to the exhibit.

Router BRDR-1 is configured to receive the 0.0.0.0/0 and 172.17.1.0/24 network via BGP and advertise them into OSPF are 0. An engineer has noticed that the OSPF domain is receiving only the 172.17.1.0/24 route and default route 0.0.0.0/0 is still missing .

Which configurating must engineer apply to resolve the problem?

Option A

Option B

Option C

Option D

74. Refer to the exhibit.

The IP SLA is configured in a router. An engineer must configure an EEM applet to shut down the interface and bring it back up when there is a problem with the IP SLA .

Which configuration should the engineer use?

event manager applet EEM_IP_SLA event track 10 state down

event manager applet EEM_IP_SLA event track 10 state unreachable

event manager applet EEM_IP_SLA event sla 10 state unreachable

event manager applet EEM_IP_SLA event sla 10 state down

75. Which deployment option of Cisco NGFW provides scalability?

tap

clustering

inline tap

high availability

76. Refer to the exhibit.

Which HTTP JSON response does the python code output give?

NameError: name 'json' is not defined

KeyError 'kickstart_ver_str'

7.61

7.0(3)I7(4)

77. Refer to the exhibit.

A network engineer must configure NETCONF. After creating the configuration, the engineer gets output from the command show line, but not from show running-config .

Which command completes the configuration?

Device(config)# netconf lock-time 500

Device(config)# netcont max-message 1000

Device(config)# no netconf ssh acl 1

Device(config)# netconf max-sessions 100

78. Which two actions, when applied in the LAN network segment, will facilitate Layer 3 CAPWAP discovery for lightweight AP? (Choose two.)

Utilize DHCP option 17.

Configure WLC IP address on LAN switch.

Utilize DHCP option 43.

Configure an ip helper-address on the router interface

Enable port security on the switch port

79. Refer to the exhibit.

An engineer must add the SNMP interface table to the NetFlow protocol flow records.

Where should the SNMP table option be added?

under the interface

under the flow record

under the flow monitor

under the flow exporter

80. Refer to the exhibit.

Communication between London and New York is down .

Which command set must be applied to the NewYork switch to resolve the issue?

A)

Option A

Option B

Option C

Option D

Page 9 of 15

81. A network monitoring system uses SNMP polling to record the statistics of router interfaces The SNMP queries work as expected until an engineer installs a new interface and reloads

the router After this action, all SNMP queries for the router fail.

What is the cause of this issue?

The SNMP community is configured incorrectly

The SNMP interface index changed after reboot.

The SNMP server traps are disabled for the interface index

The SNMP server traps are disabled for the link state.

82. What occurs when a high bandwidth multicast stream is sent over an MVPN using Cisco hardware?

The traffic uses the default MDT to transmit the data only if it isa (S, G) multicast route entry

A data MDT is created to if it is a (*, G) multicast route entries

A data and default MDT are created to flood the multicast stream out of all PIM-SM neighbors.

A data MDT is created to allow for the best transmission through the core for (S, G) multicast route entries.

83. In an SD-Access solution what is the role of a fabric edge node?

to connect external Layer 3- network to the SD-Access fabric

to connect wired endpoint to the SD-Access fabric

to advertise fabric IP address space to external network

to connect the fusion router to the SD-Access fabric

84. Refer to the exhibit.

All switches are configured with the default port priority value .

Which two commands ensure that traffic from PC1 is forwarded over Gi1/3 trunk port between DWS1 and DSW2? (Choose two)

DSW2(config-if)#spanning-tree port-priority 16

DSW2(config)#interface gi1/3

DSW1(config-if)#spanning-tree port-priority 0

DSW1(config) #interface gi1/3

DSW2(config-if)#spanning-tree port-priority 128

85. Refer the exhibit.

Which router is the designated router on the segment 192.168.0.0/24?

This segment has no designated router because it is a nonbroadcast network type.

This segment has no designated router because it is a p2p network type.

Router Chicago because it has a lower router ID

Router NewYork because it has a higher router ID

86. Refer to the exhibit.

> Frame 24: 138 bytes on wire (1104 bits), 138 bytes captured (1104 bits) on interface 0

> Ethernet II, Src: 50:00:00:01:00:01 (50:00:00:01:00:01), Dst: 50:00:00:02:00:01 (50:00:00:02:00:01)

> Internet Protocol Version 4, Src: 209.165.202.130, Dst: 209.165.202.134

> Generic Routing Encapsulation (IP)

> Internet Protocol Version 4, Src: 10.111.111.1, Dst: 10.111.111.2

> Internet Control Message Protocol

A GRE tunnel has been created between HO and BR routers .

What is the tunnel IP on the HQ router?

10.111.111.1

10.111.111.2

209.165.202.130

209.165.202.134

87. In cisco SD_WAN, which protocol is used to measure link quality?

OMP

BFD

RSVP

IPsec

88. What is the structure of a JSON web token?

three parts separated by dots: header payload, and signature

header and payload

three parts separated by dots: version header and signature

payload and signature

89. Refer to the exhibit .

What are two results of the NAT configuration? (Choose two.)

Packets with a destination of 200.1.1.1 are translated to 10.1.1.1 or .2. respectively.

A packet that is sent to 200.1.1.1 from 10.1.1.1 is translated to 209.165.201.1 on R1.

R1 looks at the destination IP address of packets entering S0/0 and destined for inside hosts.

R1 processes packets entering E0/0 and S0/0 by examining the source IP address.

R1 is performing NAT for inside addresses and outside address.

90. Refer to the exhibit.

A network engineer is enabling logging to a local buffer, to the terminal and to a syslog server for all debugging level logs filtered by facility code 7 .

Which command is needed to complete this configuration snippet?

logging buffered debugging

logging discriminator Disc1 severity includes 7

logging buffered discriminator Disc1 debugging

logging discriminator Disc1 severity includes 7 facility includes fac7

Page 10 of 15

91. Refer to the exhibit.

An engineer configures the BGP adjacency between R1 and R2, however, it fails to establish.

Which action resolves the issue?

Change the network statement on R1 to 172.16 10.0

Change the remote-as number for 192 168.100.11.

Enable synchronization on R1 and R2

Change the remote-as number on R1 to 6500.

92. How do EIGRP metrics compare to OSPF metrics?

EIGRP metrics are based on a combination of bandwidth and packet loss, and OSPF metrics are based on interface bandwidth.

EIGRP uses the Dijkstra algorithm, and OSPF uses The DUAL algorithm

The EIGRP administrative distance for external routes is 170. and the OSPF administrative distance for external routes is undefined

The EIGRP administrative distance for external routes is 170. and the OSPF administrative distance for external routes is 110

93. How does the RIB differ from the FIB?

The RIB is used to create network topologies and routing tables. The FIB is a list of routes to particular network destinations.

The FIB includes many routes a single destination. The RIB is the best route to a single destination.

The RIB includes many routes to the same destination prefix. The FIB contains only the best route

The FIB maintains network topologies and routing tables. The RIB is a Iist of routes to particular network destinations.

94. Refer to the exhibit.

A network engineer must be notified when a user switches to configuration mode .

Which script should be applied to receive an SNMP trap and a critical-level log message?

A)

Option

95. Refer to the exhibit.

External users require HTTP connectivity to an internal company web server that is listening on TCP port 8080 .

Which command set accomplishes this requirement?

A)

Option A

Option B

Option C

Option D

96. DRAG DROP

Drag and drop the characteristics from the left onto the routing protocols they describe on the right

97. What is the calculation that is used to measure the radiated power of a signal after it has gone through the radio, antenna cable, and antenna?

EIRP

dBm

dBi

98. DRAG DROP

An engineer must create a script to append and modify device entries in a JSON-formatted file.

The script must work as follows:

✑ Until interrupted from the keyboard, the script reads in the hostname of a device, its management IP address, operating system type, and CLI remote access protocol.

✑ After being interrupted, the script displays the entered entries and adds them to the JSON-formatted file, replacing existing entries whose hostname matches.

The contents of the JSON-formatted file are as follows:

Drag and drop the statements onto the blanks within the code to complete the script. Not all options are used.

99. What is the difference between CEF and process switching?

CEF processes packets that are too complex for process switching to manage.

CEF is more CPU-intensive than process switching.

CEF uses the FIB and the adjacency table to make forwarding decisions, whereas process switching punts each packet.

Process switching is faster than CE

100. Which device makes the decision for a wireless client to roam?

wireless client

wireless LAN controller

access point

WCS location server

Page 11 of 15

101. A network administrator applies the following configuration to an IOS device.

aaa new-model

aaa authentication login default local group tacacs+

What is the process of password checks when a login attempt is made to the device?

A TACACS+server is checked first. If that check fail, a database is checked?

A TACACS+server is checked first. If that check fail, a RADIUS server is checked. If that check fail. a local database is checked.

A local database is checked first. If that fails, a TACACS+server is checked, if that check fails, a RADUIS server is checked.

A local database is checked first. If that check fails, a TACACS+server is checked.

102. What is one fact about Cisco SD-Access wireless network deployments?

The access point is part of the fabric underlay

The WLC is part of the fabric underlay

The access point is part the fabric overlay

The wireless client is part of the fabric overlay

103. By default, which virtual MAC address does HSRP group 32 use?

00:5e:0c:07:ac:20

04:18:20:83:2e:32

05:5e:5c:ac:0c:32

00:00:0c:07:ac:20

104. Refer to the exhibit.

An engineer tries to log in to router R1 .

Which configuration enables a successful login?

R1#username admin privilege 15 aaa authorization exec default local netconf-yang

R1# username admin privilege 15 aaa authorization exec default local

R1# aaa new-model aaa authorization exec default local enable aaa admin privilege 15

R1#netconf-yang username admin privilege 15 secret cisco123 aaa new-model aaa authorization exec default local

105. Refer to the exhibit.

An engineer reconfigures the pot-channel between SW1 and SW2 from an access port to a trunk and immediately notices this error in SW1's log.

Which command set resolves this error?

Sw1(config)# interface G0/0 Sw1(config-if)# no spanning-tree bpduguard enable Sw1(config-if)# shut Sw1(config-if)# no shut

Sw1(config)# interface G0/0 Sw1(config-if)# spanning-tree bpduguard enable Sw1(config-if)# shut Sw1(config-if)# no shut

Sw1(config)# interface G0/1 Sw1(config-if)# spanning-tree bpduguard enable Sw1(config-if)# shut Sw1(config-if)# no shut

Sw1(config)# interface G0/0 Sw1(config-if)# no spanning-tree bpdufilter Sw1(config-if)# shut Sw1(config-if)# no shut

106. Which HTTP code must be returned to prevent the script form exiting?

200

201

300

301

107. What is one primary REST security design principle?

fail-safe defaults

password hash

adding a timestamp in requests

OAuth

108. What is an OVF?

a package that is similar to an IMG and that contains an OVA file used to build a virtual machine

an alternative form of an ISO that Is used to install the base operating system of a virtual machine

the third step in a P2V migration

a package of files that is used to describe a virtual machine or virtual appliance

109. How can an engineer prevent basic replay attacks from people who try to brute force a system via REST API?

Add a timestamp to the request In the API header.

Use a password hash

Add OAuth to the request in the API header.

Use HTTPS

110. Which tool is used in Cisco DNA Center to build generic configurations that are able to be applied on device with similar network settings?

Command Runner

Template Editor

Application Policies

Authentication Template

Page 12 of 15

111. How does a fabric AP fit in the network?

It is in local mode and must be connected directly to the fabric border node

It is in FlexConnect mode and must be connected directly to the fabric edge switch.

It is in FlexConnect mode and must be connected directly to the fabric border node

It is in local mode and must be connected directly to the fabric edge switch.

112. An engineer must provide wireless converge in a square office. The engineer has only one AP and believes that it should be placed it in the middle of the room .

Which antenna type should the engineer use?

directional

polarized

Yagi

omnidirectional

113. Refer to the exhibit.

CR2 and CR3 ate configured with OSPF .

Which configuration, when applied to CR1. allows CR1 to exchange OSPF Information with CR2 and CR3 but not with other network devices or on new Interfaces that are added to CR1?

A)

Option A

Option B

Option C

Option D

114. When are multicast RPs required?

RPs are required only when using protocol independent multicast dense mode.

By default, the RP is needed penodically to maintain sessions with sources and receivers.

RPs are required for protocol Independent multicast sparse mode and dense mode.

By default, the RP Is needed only start new sessions with sources and receivers.

115. Refer to the exhibit.

Rapid PVST+ is enabled on all switches .

Which command set must be configured on switch1 to achieve the following results on port fa0/1?

- When a device is connected, the port transitions immediately to a forwarding state.

- The interface should not send or receive BPDUs.

- If a BPDU is received, it continues operating normally.

A)

Option A

Option B

Option C

Option D

116. In an SD-WAN deployment, which action in the vSmart controller responsible for?

handle, maintain, and gather configuration and status for nodes within the SD-WAN fabric

distribute policies that govern data forwarding performed within the SD-WAN fabric

gather telemetry data from vEdge routers

onboard vEdge nodes into the SD-WAN fabric

117. How does SSO work with HSRP to minimize network disruptions?

It enables HSRP to elect another switch in the group as the active HSRP switch.

It ensures fast failover in the case of link failure.

It enables data forwarding along known routes following a switchover, white the routing protocol recon verges.

It enables HSRP to failover to the standby RP on the same device.

118. What is required for a virtual machine to run?

a Type 1 hypervisor and a host operating system

a hypervisor and physical server hardware

only a Type 1 hypervisor

only a Type 2 hypervisor

119. Refer to the exhibit.

What is the result when a technician adds the monitor session 1 destination remote vlan 223 command1?

The RSPAN VLAN is replaced by VLAN 223.

RSPAN traffic is sent to VLANs 222 and 223

An error is flagged for configuring two destinations.

RSPAN traffic is split between VLANs 222 and 223.

120. An engineer must configure AAA on a Cisco 9800 WLC for central web authentication.

Which two commands are needed to accomplish this task? (Choose two.)

Option A

Option B

Option C

Option D

Option E

Page 13 of 15

121. What is one characteristic of VXLAN?

It supports a maximum of 4096 VLANs.

It supports multitenant segments.

It uses STP to prevent loops in the underlay network.

It uses the Layer 2 header to transfer packets through the network underlay.

122. What happens when a FlexConnect AP changes to standalone mode?

All controller-dependent activities stop working except the DF

All client roaming continues to work

Only clients on central switching WLANs stay connected.

All clients on an WLANs are disconnected

123. A customer has several small branches and wants to deploy a WI-FI solution with local management using CAPWAP .

Which deployment model meets this requirement?

Autonomous

Mobility Express

SD-Access wireless

Local mode

124. Refer to the exhibit.

After running the code in the exhibit .

Which step reduces the amount of data that NETCONF server returns to the NETCONF client, to only the interface’s configuration?

Create an XML filter as a string and pass it to get_config() method as an argument

Use the txml library to parse the data returned by the NETCONF server for the interface’s configuration

Create a JSON filter as a string and pass it to the get_config() method as an argument

Use the JSON library to parse the data returned by the NETCONF server for the interface’s configuration

125. Refer to the exhibit.

An engineer must block all traffic from a router to its directly connected subnet 209.165.200.0/24. The engineer applies access control list EGRESS in the outbound direction on the GigabitEthernet0/0 interface of the router However, the router can still ping hosts on the 209.165.200.0/24 subnet .

Which explanation of this behavior is true?

Access control lists that are applied outbound to a router interface do not affect traffic that is sourced from the router.

Only standard access control lists can block traffic from a source IP address.

After an access control list is applied to an interface, that interface must be shut and no shut for the access control list to take effect.

The access control list must contain an explicit deny to block traffic from the router.

126. DRAG DROP

Drag and drop the snippets onto the blanks within the code to construct a script that configures BGP according to the topology. Not all options are used, and some options may be used twice.

127. Which router is elected the IGMP Querier when more than one router is in the same LAN segment?

The router with the shortest uptime

The router with the lowest IP address

The router with the highest IP address

The router with the longest uptime

128. Which benefit is provided by the Cisco DNA Center telemetry feature?

provides improved network security

inventories network devices

aids In the deployment network configurations

improves the user experience

129. Refer to the exhibit.

An engineer has configured an IP SLA for UDP echo’s .

Which command is needed to start the IP SLA to test every 30 seconds and continue until stopped?

ip sla schedule 100 start-time now life forever

ip sla schedule 30 start-time now life forever

ip sla schedule 100 start-time now life 30

ip sla schedule 100 life forever

130. DRAG DROP

Drag and drop the descriptions from the left onto the QoS components on the right.

Page 14 of 15

131. How do stratum levels relate to the distance from a time source?

Stratum 1 devices are connected directly to an authoritative time source.

Stratum 15 devices are connected directly to an authoritative time source

Stratum 0 devices are connected directly to an authoritative time source.

Stratum 15 devices are an authoritative time source.

132. What is the process for moving a virtual machine from one host machine to another with no downtime?

high availability

disaster recovery

live migration

multisite replication

133. Which VXLAN component is used to encapsulate and decapsulate Ethernet frames?

VNI

GRE

VTEP

EVPN

134. By default, which virtual MAC address does HSRP group 22 use?

c0:42:01:67:05:16

c0:07:0c:ac:00:22

00:00:0c:07:ac:16

00:00:0c:07:ac:22

135. What is a TLOC in a Cisco SD-WAN deployment?

value that identifies a specific tunnel within the Cisco SD-WAN overlay

identifier that represents a specific service offered by nodes within the Cisco SD-WAN overlay

attribute that acts as a next hop for network prefixes

component set by the administrator to differentiate similar nodes that offer a common service

136. Refer to the exhibit.

Traffic is not passing between SW1 and SW2 .

Which action fixes the issue?

Configure LACP mode on S1 to passive.

Configure switch port mode to ISL on S2.

Configure PAgP mode on S1 to desirable.

Configure LACP mode on S1 to active.

137. Refer to the exhibit.

Which action resolves the EtherChannel issue between SW2 and SW3?

Configure switchport mode trunk on SW2.

Configure switchport nonegotiate on SW3

Configure channel-group 1 mode desirable on both interfaces.

Configure channel-group 1 mode active on both interfaces.

138. Which benefit is realized by implementing SSO?

IP first-hop redundancy

communication between different nodes for cluster setup

physical link redundancy

minimal network downtime following an RP switchover

139. Refer to the exhibit.

Both controllers are in the same mobility group .

Which result occurs when client 1 roams between APs that are registered to different controllers in the same WLAN?

Client 1 contact controller B by using an EoIP tunnel.

CAPWAP tunnel is created between controller A and controller

Client 1 users an EoIP tunnel to contact controller

The client database entry moves from controller A to controller

140. Which QoS queuing method transmits packets out of the interface in the order the packets arrive?

custom

weighted- fair

FIFO

priority

Page 15 of 15

141. DRAG DROP

Drag and drop the characteristics from the left onto the orchestration tools that they describe on the right.

142. What is the recommended minimum SNR for data applications on wireless networks?

143. The Gig0/0 interface of two routers is directly connected with a 1G Ethernet link .

Which configuration must be applied to the interface of both routers to establish an OSPF adjacency without maintaining a DR/BDR relationship?

A)

Option A

Option B

Option C

Option D