New 2024 Latest Questions 350-401 Dumps - Use Updated Cisco Exam
Latest 350-401 Exam Dumps Cisco Exam from Training Expert FreeCram
Cisco 350-401 exam is ideal for network engineers and administrators who are looking to advance their careers by obtaining a CCNP certification. Implementing Cisco Enterprise Network Core Technologies (350-401 ENCOR) certification validates the individual's expertise in implementing and managing enterprise-level infrastructures and is highly regarded by employers globally. Being a part of the CCNP certification program, the exam also serves as a stepping stone for professionals who are looking to pursue more advanced Cisco certifications, such as the Cisco Certified Internetwork Expert (CCIE).
NEW QUESTION # 80
A company has an existing Cisco 5520 HA cluster using SSO. An engineer deploys a new single Cisco Catalyst 9800 WLC to test new features. The engineer successfully configures a mobility tunnel between the 5520 cluster and 9800 WLC. Client connected to the corporate WLAN roam seamlessly between access points on the 5520 and 9800 WLC. After a failure on the primary 5520 WLC, all WLAN services remain functional; however, Client roam between the 5520 and 9800 controllers without dropping their connection. Which feature must be configured to remedy the issue?
- A. new mobility on the 5520 cluster
- B. mobility MAC on the 9800 WLC
- C. new mobility on the 9800 WLC
- D. mobility MAC on the 5520 cluster
Answer: B
NEW QUESTION # 81
Refer to the exhibit.
Hosts PC1 PC2 and PC3 must access resources on Serve 1. An engineer
configures NAT on Router R1 1e enable the communication and enters the show command to verify operation Which IP address is used by the hosts when they communicate globally to Server1?
- A. 155.1.1.1
- B. randorm addresses in the 155.1.1.0/24 range
- C. 155.1.1.5
- D. their own address in the 10.10.10.0/24 rance
Answer: A
NEW QUESTION # 82
What are two reasons a company would choose a cloud deployment over an on-prem deployment? (Choose Two)
- A. Cloud costs adjust up or down depending on the amount of resources consumed. On-
Prem costs for hardware, power, and space are ongoing regardless of usage - B. Cloud resources scale automatically to an increase in demand. On-prem requires
additional capital expenditure. - C. In a cloud environment, the company is in full control of access to their data. On-prem
risks access to data due to service provider outages - D. Cloud deployments require long implementation times due to capital expenditure
processes. On-Prem deployments can be accomplished quickly using operational
expenditure processes. - E. In a cloud environment, the company controls technical issues. On-prem environments
rely on the service provider to resolve technical issue.
Answer: A,B
Explanation:
NEW QUESTION # 83
Which statement describes the IP and MAC allocation requirements for virtual machines on types 1 hypervisors?
- A. Each virtual machine requires a unique MAC address but shares the IP address with the physical server.
- B. Each virtual machine requires a unique IP address but shares the MAC address with the physical server
- C. Each virtual machines requires a unique IP address but shares the MAC address with the address of the physical server.
- D. Each virtual machine requires a unique IP and MAC addresses to be able to reach to other nodes.
Answer: D
Explanation:
Explanation
A virtual machine (VM) is a software emulation of a physical server with an operating system.
From an application's point of view, the VM provides the look
and feel of a real physical server, including all its components, such as CPU, memory, and network interface cards (NICs).
The virtualization software that creates VMs and performs the hardware abstraction that allows multiple VMs to run concurrently is known as a hypervisor.
There are two types of hypervisors: type 1 and type 2 hypervisor.
In type 1 hypervisor (or native hypervisor), the hypervisor is installed directly on the physical server. Then instances of an operating system (OS) are installed on the hypervisor. Type 1 hypervisor has direct access to the hardware resources. Therefore they are more efficient than hosted architectures. Some examples of type 1 hypervisor are VMware vSphere/ESXi, Oracle VM Server, KVM and Microsoft Hyper-V.
In contrast to type 1 hypervisor, a type 2 hypervisor (or hosted hypervisor) runs on top of an operating system and not the physical hardware directly. answer 'Each virtual machine requires a unique IP and MAC addresses to be able to reach to other nodes' big advantage of Type 2 hypervisors is that management console software is not required. Examples of type 2 hypervisor are VMware Workstation (which can run on Windows, Mac and Linux) or Microsoft Virtual PC (only runs on Windows).
NEW QUESTION # 84
Refer to the exhibit.
Security policy requires all idle-exec sessions to be terminated in 600 seconds. Which configuration achieves this goal?
- A. line vty 0 4 exec-timeout 600
- B. line vty 0 15 absolute-timeout 600
- C. line vty 0 15 exec-timeout 10 0
- D. line vty 0 15 exec-timeout
Answer: C
Explanation:
The "exec-timeout" command is used to configure the inactive session timeout on the console port or the virtual terminal. The syntax of this command is:
exec-timeout minutes [seconds]
Therefore we need to use the "exec-timeout 10 0" command to set the user inactivity timer to 600 seconds (10 minutes).
NEW QUESTION # 85 
Refer to the exhibit. An engineer must configure an eBGP neighborship to Router B on Router A. The network that is connected to GO/1 on Router A must be advertised to Router B. Which configuration should be applied?
- A.
- B.
- C.
- D.
Answer: A
NEW QUESTION # 86
Drag and drop the virtual component from the left onto their descriptions on the right.
Answer:
Explanation:
Explanation
+ configuration file containing settings for a virtual machine such as guest OS: VMX
+ component of a virtual machine responsible for sending packets to the hypervisor: vNIC
+ zip file containing a virtual machine configuration file and a virtual disk: OVA
+ file containing a virtual machine disk drive: VMDK
The VMX file simply holds the virtual machine configuration.
VMDK (short for Virtual Machine Disk) is a file format that describes containers for virtual hard disk drives to be used in virtual machines like VMware Workstation or VirtualBox.
An OVA file is an Open Virtualization Appliance that contains a compressed, "installable" version of a virtual machine. When you open an OVA file it extracts the VM and imports it into whatever virtualization software you have installed on your computer.
NEW QUESTION # 87
Refer to the exhibit.
An engineer configures a new WLAN that will be used for secure communications; however, wireless clients report that they are able to communicate with each other. Which action resolves this issue?
- A. Enable P2P Blocking.
- B. Enable Wi-Fi Direct Client Policy
- C. Enable Client Exclusions.
- D. Disable Aironet IE
Answer: A
NEW QUESTION # 88
A network engineer is adding an additional 10Gps link to an exiting 2x10Gps LACP-based LAG to augment its capacity. Network standards require a bundle interface to be taken out of service if one of its member links goes down, and the new link must be added with minimal impact to the production network. Drag and drop the tasks that the engineer must perform from the left into the sequence on the right. Not all options are used.
Answer:
Explanation:
Explanation
A picture containing diagram Description automatically generated
NEW QUESTION # 89
Which two advanced security features are available in next-generation firewalls but were not provided by standard firewalls? (Choose two.)
- A. remote access VPN
- B. intrusion prevention
- C. application control
- D. stateful traffic inspection
- E. network telemetry
Answer: B,C
NEW QUESTION # 90
Refer to the exhibit.
Which command when applied to the Atlanta router reduces type 3 LSA flooding into the backbone area and summarizes the inter-area routes on the Dallas router?
- A. Atlanta(config-route)#area 0 range 192.168.0.0 255.255.248.0
- B. Atlanta(config-route)#area 1 range 192.168.0.0 255.255.248.0
- C. Atlanta(config-route)#area 1 range 192.168.0.0 255.255.252.0
- D. Atlanta(config-route)#area 0 range 192.168.0.0 255.255.252.0
Answer: C
NEW QUESTION # 91
Drag and drop the automation characteristics from the left onto the corresponding tools on the right. Not all options are used.
Answer:
Explanation:
Explanation:
NEW QUESTION # 92
Which two southbound interfaces originate from Cisco DMA Center and terminate at fabric underlay switches? (Choose two)
- A. TCP 23: Telnet
- B. UDP 162: SNMP
- C. UDP 6007: NetFlow
- D. ICMP: Discovery
- E. UDP 67: DHCP
Answer: B,D
Explanation:
In the figure below, we can see ICMP & SNMP can reach to underlay switches.
NEW QUESTION # 93
Drag and drop the characteristics from the left onto the routing protocols they describe on the right.
Answer:
Explanation:
Explanation:
A picture containing timeline Description automatically generated
NEW QUESTION # 94
Which two pieces of information are necessary to compute SNR? (Choose two.)
- A. transmit power
- B. noise floor
- C. antenna gain
- D. RSSI
- E. EIRP
Answer: B,D
NEW QUESTION # 95
Refer to the exhibit.
A network engineer must configure the router to use the ISE-Servers group for authentication. If both ISE servers are unavailable, the local username database must be used. If no usernames are defined in the configuration, then the enable password must be the last resort to log in. Which configuration must be applied to achieve this result?
- A. aaa authentication login default group enable local ISE-Servers
- B. aaa authentication login error-enable aaa authentication login default group enable local ISE-Servers
- C. aaa authorization exec default group ISE-Servers local enable
- D. aaa authentication login default group ISE-Servers local enable
Answer: D
Explanation:
The configuration line 'aaa authentication login default group ISE-Servers local enable' sets up the router to use the ISE-Servers group for authentication first. If both servers in the ISE-Servers group are unavailable, it falls back to using the local username database ('local'). If there are no usernames defined in the configuration, then as a last resort, it uses the enable password ('enable') for login. References: Implementing and Operating Cisco Service Provider Network Core Technologies (SPCOR) training materials.
NEW QUESTION # 96
Refer to the exhibit.
An engineer must assign an IP address of 192.168.1.1/24 to the GigabitEtherenet1 interface. Which two commands must be added to the existing configuration to accomplish this task? (Choose two.)
- A. Router(config-if)#address-family ipv4
- B. Router(config-if)#ip address 192.168.1.1 255.255.255.0
- C. Router(config-vrf)#ip address 192.168.1.1 255.255.255.0
- D. Router(config-vrf)#address-family ipv6
- E. Router(config-vrf)#address-family ipv4
Answer: B,E
NEW QUESTION # 97
Which feature allows clients to perform Layer 2 roaming between wireless controllers?
- A. mobility groups
- B. SSO
- C. N+1 high availability
- D. RF grouping
Answer: A
NEW QUESTION # 98
Drag and drop the characteristics from the left onto the routing protocols they describe on the right.
Answer:
Explanation:
NEW QUESTION # 99
Refer to exhibit.
VLANs 50 and 60 exist on the trunk links between all switches All access ports on SW3 are configured for VLAN 50 and SW1 is the VTP server Which command ensures that SW3 receives frames only from VLAN
50?
- A. SW1 (config)#vtp pruning
- B. SW1 (config)#vtp mode transparent
- C. SW3(config)#vtp mode transparent
- D. SW2(config)#vtp pruning
Answer: A
Explanation:
Explanation
SW3 does not have VLAN 60 so it should not receive traffic for this VLAN (sent from SW2).
Therefore we should configure VTP Pruning on SW3 so that SW2 does not forward VLAN 60 traffic to SW3. Also notice that we need to configure pruning on SW1 (the VTP Server), not SW2.
NEW QUESTION # 100
A firewall address of 192 166.1.101 can be pinged from a router but, when running a traceroute to It, this output is received
What is the cause of this issue?
- A. The firewall blocks UDP traffic
- B. The firewall blocks ICMP traffic.
- C. The firewall rule that allows ICMP traffic does not function correctly
- D. The firewall blocks ICMP traceroute traffic.
Answer: A
NEW QUESTION # 101
An engineer is connected to a Cisco router through a Telnet session. Which command must be issued to view the logging messages from the current session as soon as they are generated by the router?
- A. logging host
- B. service timestamps log uptime
- C. terminal monitor
- D. logging buffer
Answer: C
NEW QUESTION # 102
......
Updated Test Engine to Practice 350-401 Dumps & Practice Exam: https://www.freecram.com/Cisco-certification/350-401-exam-dumps.html
Pass Cisco 350-401 PDF Dumps Recently Updated 1282 Questions: https://drive.google.com/open?id=1FKeJFF5dCRdS_9e02ZJWrG6bwkYGFYmj