ENCOR Final Preparation Exam 350-401 Please enter your email: Which HHTP status code is the correct response for a request with an incorrect password applied to a REST API session? HTTP Status Code 401 HTTP Status Code 200 HTTP Status Code 302 HTTP Status Code: 504 What mechanism does PIM use to forward multicast traffic? PIM dense mode uses a pull model to deliver multicast traffic. PIM sparse mode uses a pull model to deliver multicast traffic. PIM sparse mode uses a flood and prune model to deliver multicast traffic. PIM sparse mode uses receivers to register with the RP. An engineer is configuring local web authentication on a WLAN. The engineer chooses the Authentication radio button under the Layer 3 Security options for Web Policy. Which device presents the web authentication for the WLAN? anchor WLC local WLC ISE server RADIUS server When configuring WPA2 Enterprise on a WLAN, which additional security component configuration is required? TACACS server NTP server PKI server RADIUS server When using TLS for syslog, which configuration allows for secure and reliable transportation of messages to its default port? logging host 10.2.3.4 vrf mgmt transport tcp port 514 logging host 10.2.3.4 vrf mgmt transport tcp port 6514 logging host 10.2.3.4 vrf mgmt transport udp port 6514 logging host 10.2.3.4 vrf mgmt transport udp port 514 A response code of 404 is received while using the REST API on Cisco UNA Center to POST to this URI. /dna/intent/api/v1 /template-programmer/project What does the code mean? The client made a request a resource that does not exist. The request accepted for processing, but the processing was not completed. The POST/PUT request was fulfilled, and a new resource was created, Information about the resource is in the response body. The server has not implemented the functionality that is needed to fulfill the request. Refer to the exhibit. SwitchC connects HR and Sales to the Core switch. However, business needs require that no traffic from the Finance VLAN traverse this switch. Which command meets this requirement? SwitchC(config)#vtp pruning SwitchC(config)#interface port-channel 1 SwitchC(config-if)#switchport trunk allowed vlan add 210,310 SwitchC(config)#interface port-channel 1 SwitchC(config-if)#switchport trunk allowed vlan remove 110 SwitchC(config)#vtp pruning vlan 110 Which statement explains why Type 1 hypervisor is considered more efficient than Type 2 hypervisor? Type 1 hypervisor runs directly on the physical hardware of the host machine without relying on the underlying OS. Type 1 hypervisor enables other operating systems to run on it. Type 1 hypervisor relics on the existing OS of the host machine to access CPU, memory, storage, and network resources. Type 1 hypervisor is the only type of hypervisor that supports hardware acceleration techniques. A client device roams between access points located on different floors in an atrium. The access points are joined to the same controller and configured in local mode. The access points are in different AP groups and have different IP addresses, but the client VLAN in the groups is the same. Which type of roam occurs? intra-controller inter-subnet intra-VLAN inter-controller Which statement about an RSPAN session configuration is true? A special VLAN type must be used as the RSPAN destination. A filter must be configured for RSPAN sessions. Only one session can be configured at a time. Only incoming traffic can be monitored. Which standard access control entry permits from odd-numbered hosts in the 10.0.0.0/24 subnet? Permit 10.0.0.1.0.0.0.254 Permit 10.0.0.1.0.0.0.0 Permit 10.0.0.0.0.0.0.1 Permit 10.0.0.0.255.255.255.254 Refer to the exhibit. Which command when applied to the Atlanta router reduces type 3 LSA flooding into the backbone area and summarizes the inter-area routes on the Dallas router? Atlanta(config-router)#area 1 range 192.168.0.0 255.255.248.0 Atlanta(config-router)#area 1 range 192.168.0.0 255.255.252.0 Atlanta(config-router)#area 0 range 192.168.0.0 255.255.248.0 Atlanta(config-router)#area 0 range 192.168.0.0 255.255.252.0 Refer to the exhibit. An engineer reconfigures the port-channel between SW1 and SW2 from an access port to a trunk and immediately notices this error in SW1’s log: *Mar 1 09:47:22.245: %PM-4-ERR_DISABLE: bpduguard error detected on Gi0/0, putting Gi0/0 in err-disable state Which command set resolves this error? A. SW1(config-if)#interface Gi0/0 SW1(config-if)#no spanning-tree bpdufilter SW1(config-if)#shut SW1(config-if)#no shut B. SW1(config-if)#interface Gi0/0 SW1(config-if)#no spanning-tree bpduguard enable SW1(config-if)#shut SW1(config-if)#no shut D. SW1(config-if)#interface Gi0/1 SW1(config-if)#spanning-tree bpduguard enable SW1(config-if)#shut SW1(config-if)#no shut C. SW1(config-if)#interface Gi0/0 SW1(config-if)#spanning-tree bpduguard enable SW1(config-if)#shut SW1(config-if)#no shut Refer to the exhibit. The traceroute fails from R1 to R3. What is the cause of the failure? Redistribution of connected routes into OSPF is not configured. An ACL applied inbound on loopback0 of R2 is dropping the traffic. The loopback on R3 is in a shutdown state. An ACL applied inbound on fa0/1 of R3 is dropping the traffic. Which statement about Cisco Express Forwarding is true? The CPU of a router becomes directly involved with packet-switching decisions. It makes forwarding decisions by a process that is scheduled through the IOS scheduler. maintains two tables in the data plane the FIB and adjacency table. It uses a fast cache that is maintained in a router data plane. Refer to the exhibit. Based on the configuration in this WLAN security setting, which method can a client use to authenticate to the network? username and password certificate text string RADIUS token Which DHCP option helps lightweight APs find the IP address of a wireless LAN controller? Option 150 Option 67 Option 43 Option 60 Refer to the exhibit. Which type of antenna do the radiation patterns present? Patch Omnidirectional Yagi Dipole Refer to the exhibit. Communication between London and New York is down. Which command set must be applied to resolve this issue? NewYork(config)#int f0/1 NewYork(config)#switchport trunk encap dot1q NewYork(config)#end NewYork# NewYork(config)#int f0/1 NewYork(config)#switchport mode trunk NewYork(config)#end NewYork# NewYork(config)#int f0/1 NewYork(config)#switchport nonegotiate NewYork(config)#end NewYork# NewYork(config)#int f0/1 NewYork(config)#switchport mode dynamic desirable NewYork(config)#end NewYork# Which NTP Stratum level is a server that is connected directly to an authoritative time source? Stratum 14 Stratum 0 Stratum 15 Stratum 1 How does SSO work with HSRP to minimize network disruptions? It enables HSRP to failover to the standby RP on the same device. It enables HSRP to elect another switch in the group as the active HSRP switch. It ensures fast failover in the case of link failure. It enables data forwarding along known routes following a switchover, while the routing protocol reconverges. A client device fails to see the enterprise SSID, but other devices are connected to it. What is the cause of this issue? The client has incorrect credentials stored for the configured broadcast SSID. The hidden SSID was not manually configured on the client. The broadcast SSID was not manually configured on the client. The client has incorrect credentials stored for the configured hidden SSID. An engineer is concerned with the deployment of a new application that is sensitive to inter-packet delay variance. Which command configures the router to be the destination of jitter measurements? Router(config)# ip sla responder udp-connect 172.29.139.134 5000 Router(config)# ip sla responder udp-echo 172.29.139.134 5000 Router(config)# ip sla responder tcp-connect 172.29.139.134 5000 Router(config)# ip sla responder tcp-echo 172.29.139.134 5000 Which exhibit displays a valid JSON file? Option B Option D Option C Option A Which statement about TLS is accurate when using RESTCONF to write configurations on network devices? It is provided using NGINX acting as a proxy web server. It is used for HTTP and HTTPS requests. It requires certificates for authentication. It is not supported on Cisco devices. IS OSPF, which LAS type is responsible for pointing to the ASBR router? type 4 type 2 type 3 type 1 Refer to the exhibit. Which IP address becomes the active next hop for 192.168.102 0/24 when 192.168.101.2 fails? A.-192.168.101.18 192.168.101.6 192.168.101.10 192.168.101.14 What is a benefit of deploying an on-premises infrastructure versus a cloud infrastructure deployment? lower latency between systems that are physically located near each other faster deployment times because additional infrastructure does not need to be purchased less power and cooling resources needed to run infrastructure on-premises ability to quickly increase compute power without the need to install additional hardware Which statement about a fabric access point is true? It is in FlexConnect mode and must be connected directly to the fabric edge switch. It is in FlexConnect mode and must be connected directly to the fabric border node. It is in local mode an must be connected directly to the fabric border node. It is in local mode an must connected directly to the fabric edge switch. Refer to exhibit. VLANs 50 and 60 exist on the trunk links between all switches All access ports on SW3 are configured for VLAN 50 and SW1 is the VTP server Which command ensures that SW3 receives frames only from VLAN 50? SW3(config)#vtp mode transparent SW1 (config >»vtp mode transparent SW2(config)=vtp pruning SW1 (config)#vtp pruning What is a benefit of data modeling languages like YANG? They make the CLI simpler and more efficient. They enable programmers to change or write their own application within the device operating system. They provide a standardized data structure, which results in configuration scalability and consistency. They create more secure and efficient SNMP OIDs. Which method does the enable secret password option use to encrypt device passwords? MD5 CHAP PAP AES When configuration WPA2 Enterprise on a WLAN, which additional security component configuration is required? TACACS server NTP server PKI server RADIUS server A client device fails to see the enterprise SSID, but other client devices are connected to it. What is the cause of this issue? The client has incorrect credentials stored for the configured broadcast SSID. The broadcast SSID was not manually configured on the client. The client has incorrect credentials stored for the configured hidden SSID. The hidden SSID was not manually configured on the client. Refer to the exhibit. An engineer must block all traffic from a router to its directly connected subnet 209.165.200.0/24. The engineer applies access control list EGRESS in the outbound direction on the GigabitEthernet0/0 interface of the router However, the router can still ping hosts on the 209.165.200.0/24 subnet. Not Mastered Mastered Refer to the exhibit. A port channel is configured between SW2 and SW3. SW2 is not running a Cisco operating system. When all physical connections are mode, the port channel does not establish. Based on the configuration excerpt of SW3, what is the cause of the problem? The port-channel should be set to auto The port channel on SW2 is using an incompatible protocol The port-channel trunk is not allowing the native VLAN The port-channel interface lead balance should be set to src-mac Which feature must be configured to allow packet capture over Layer 3 infrastructure? IPSPAN ERSPAN RSPAN VSPAN Which IP SLA operation requires the IP SLA responder to be configured on the remote end? ICMP jitter TCP UDP jitter ICMP echo Refer to the exhibit. An engineer must ensure that all traffic leaving AS 200 will choose Link 2 as the exit point. Assuming that all BGP neighbor relationships have been formed and that the attributes have not been changed on any of the routers, which configuration accomplishes this task? R4(config-router)neighbor 10.2.2.2 weight 200 R3(config-router)neighbor 10.1.1.1 weight 200 R4(config-router)bgp default local-preference 200 R3(config-router)bgp default local-preference 200 How does the EIGRP metric differ from the OSPF metric? The EIGRP metric is calculated based on hop count and bandwidth. The OSPF metric is calculated on bandwidth and delay. The EIGRP metric is calculated based on bandwidth and delay. The OSPF metric is calculated on bandwidth only The EIGRP metric is calculated based on delay only. The OSPF metric is calculated on bandwidth and delay. The EIGRP metric is calculated based on bandwidth only. The OSPF metric is calculated on delay only. Which statement describes the IP and MAC allocation requirements for virtual machines on types 1 hypervisors? Each virtual machine requires a unique IP and MAC addresses to be able to reach to other nodes. Each virtual machines requires a unique IP address but shares the MAC address with the address of the physical server. Each virtual machine requires a unique MAC address but shares the IP address with the physical server. Each virtual machine requires a unique IP address but shares the MAC address with the physical server A customer has several small branches and wants to deploy a WI-FI solution with local management using CAPWAP. Which deployment model meets this requirement? Local mode SD-Access wireless Autonomous Mobility Express Which reason could cause an OSPF neighborship to be in the EXSTART/EXCHANGE state? mismatched OSPF link costs mismatched areas mismatched OSPF network type mismatched MTU size Which First Hop Redundancy Protocol should be used to meet a design requirement for more efficient default gateway bandwidth usage across multiple devices? HSRP LACP GLBP VRRP Which requirement for an Ansible-managed node is true? It must have an Ansible Tower installed. It must have an SSH server running. It must support ad hoc commands. It must be a Linux server or a Cisco device. Refer to the exhibit. Which command must be applied to R2 for an OSPF neighborship to form? network 20.1.1.2 0.0.255.255 area 0 network 20.1.1.2 255.255.0.0 area 0 network 20.1.1.2 255.255.255.255 area 0 network 20.1.1.2 0.0.0.0 area 0 Which access point mode allows a supported AP to function like a WLAN client would, associating and identifying client connectivity issues? sniffer mode sensor mode client mode SE-connect mode Which OSPF network types are compatible and allow communication through the two peering devices? broadcast to point-to-point point-to-multipoint to nonbroadcast point-to-multipoint to broadcast broadcast to nonbroadcast Refer to the exhibit. An engineer must establish eBGP peering between router R3 and router R4. Both routers should use their loopback interfaces as the BGP router ID. Which configuration set accomplishes this task? R3(config)#router bgp 200 R3(config-router)#neighbor 10.4.4.4 remote-as 100 R3(config-router)# neighbor 10.4.4.4 update-source Loopback0 R4(config)#router bgp 100 R4(config-router)#neighbor 10.3.3.3 remote-as 200 R4(config-router)#network 10.3.3.3 update-source Loopback0 R3(config)#router bgp 200 R3(config-router)#neighbor 10.24.24.4 remote-as 100 R3(config-router)#bgp router-id 10.3.3.3 R4(config)#router bgp 100 R4(config-router)#neighbor 10.24.24.3 remote-as 200 R4(config-router)#bgp router-id 10.4.4.4 R3(config)#router bgp 200 R3(config-router)#neighbor 10.4.4.4 remote-as 100 R3(config-router)#bgp router-id 10.3.3.3 R4(config)#router bgp 100 R4(config-router)#neighbor 10.3.3.3 remote-as 200 R4(config-router)#bgp router-id 10.4.4.4 R3(config)#router bgp 200 R3(config-router)#neighbor 10.24.24.4 remote-as 100 R3(config-router)#neighbor 10.24.24.4 update-source Loopback0 R4(config)#router bgp 100 R4(config-router)#neighbor 10.24.24.3 remote-as 200 R4(config-router)#neighbor 10.24.24.3 update-source Loopback0 A network is being migrated from IPv4 to IPv6 using a dual-stack approach. Network management is already 100% IPv6 enabled. In a dual-stack network with two dual-stack NetFlow collectors, how many flow exporters are needed per network device in the flexible NetFlow configuration? 4 8 1 2 Loading … Question 1 of 50 Written by