Cisco 350-401 Exam Questions V28.02: Your Key to Success

Eleanor2023-03-14T08:21:42+00:00

By Eleanor CCNP Enterprise, Cisco 350-401, 350-401 exam dumps, 350-401 exam questions 0 Comments

If you’re preparing to take the 350-401 Implementing and Operating Cisco Enterprise Network Core Technologies (ENCOR) exam, choosing the right study materials is essential. Our updated Cisco 350-401 Exam Questions V28.02 are available to provide you with the real exam questions and accurate answers you need to succeed. This version includes a comprehensive PDF file with 717 practice exam questions and answers. These questions are similar to the actual exam, giving you a clear idea of what to expect and helping you prepare more effectively. Whether you’re a seasoned professional or just starting your career in networking, our Cisco 350-401 Exam Questions V28.02 can help you prepare for and pass the exam with confidence.

Choose to read the free demo of 350-401 exam questions V28.02 first:

Page 1 of 10

1. What are two benefits of virtual switching when compared to hardware switching? (Choose two.)

increased MTU size

hardware independence

VM-level isolation

increased flexibility

extended 802.1Q VLAN range

2. Refer to exhibit.

VLANs 50 and 60 exist on the trunk links between all switches All access ports on SW3 are configured for VLAN 50 and SW1 is the VTP server Which command ensures that SW3 receives frames only from VLAN 50?

SW1 (config)#vtp pruning

SW3(config)#vtp mode transparent

SW2(config)=vtp pruning

SW1 (config >»vtp mode transparent

3. Which AP mode allows an engineer to scan configured channels for rogue access points?

sniffer

monitor

bridge

local

4. What is the centralized control policy in a Cisco SD-WAN deployment?

list of ordered statements that define user access policies

set of statements that defines how routing is performed

set of rules that governs nodes authentication within the cloud

list of enabled services for all nodes within the cloud

5. Refer to the exhibit.

An engineer is troubleshooting a connectivity issue and executes a traceoute.

What does the result confirm?

The destination server reported it is too busy

The protocol is unreachable

The destination port is unreachable

The probe timed out

6. What are two characteristics of VXLAN? (Choose two)

It uses VTEPs to encapsulate and decapsulate frames.

It has a 12-bit network identifier

It allows for up to 16 million VXLAN segments

It lacks support for host mobility

It extends Layer 2 and Layer 3 overlay networks over a Layer 2 underlay.

7. Refer to the exhibit.

An engineer attempts to create a configuration to allow the Blue VRF to leak into the global routing table, but the configuration does not function as expected.

Which action resolves this issue?

Change the access-list destination mask to a wildcard.

Change the source network that Is specified in access-list 101.

Change the route-map configuration to VRF_BLU

Change the access-list number in the route map

8. What is a benefit of data modeling languages like YANG?

They enable programmers to change or write their own application within the device operating system.

They create more secure and efficient SNMP OIDs.

They make the CLI simpler and more efficient.

They provide a standardized data structure, which results in configuration scalability and consistency.

9. Refer to the exhibit.

An engineer must deny Telnet traffic from the loopback interface of router R3 to the loopback interface of router R2 during the weekend hours. All other traffic between the loopback interfaces of routers R3 and R2 must be allowed at all times.

Which command accomplish this task?

A)

Option A

Option B

Option C

Option D

10. Which two components are supported by LISP? (Choose two.)

Proxy ETR

egress tunnel router

route reflector

HMAC algorithm

spoke

Page 2 of 10

11. How does Cisco Trustsec enable more access controls for dynamic networking

environments and data centers?

classifies traffic based on advanced application recognition

uses flexible NetFlow

classifies traffic based on the contextual identity of the endpoint rather than its IP address correct

assigns a VLAN to the endpoint

12. In cisco SD_WAN, which protocol is used to measure link quality?

OMP

BFD

RSVP

IPsec

13. Refer to the exhibit.

Security policy requires all idle-exec sessions to be terminated in 600 seconds.

Which configuration achieves this goal?

line vty 0 15 absolute-timeout 600

line vty 0 15 exec-timeout

line vty 01 5 exec-timeout 10 0

line vty 0 4 exec-timeout 600

14. When is an external antenna used inside a building?

only when using Mobility Express

when it provides the required coverage

only when using 2 4 GHz

only when using 5 GHz

15. A network administrator applies the following configuration to an IOS device.

What is the process of password checks when a login attempt is made to the device?

A TACACS+server is checked first. If that check fail, a database is checked?

A TACACS+server is checked first. If that check fail, a RADIUS server is checked. If that check fail. a local database is checked.

A local database is checked first. If that fails, a TACACS+server is checked, if that check fails, a RADUIS server is checked.

A local database is checked first. If that check fails, a TACACS+server is checked.

16. A network engineer configures BGP between R1 and R2. Both routers use BGP peer group CORP and are set up to use MD5 authentication.

This message is logged to the console of router R1:

Which two configuration allow peering session to from between R1 and R2? Choose two.)

R1(config-router)#neighbor 10.10.10.1 peer-group CORP R1(config-router)#neighbor CORP password Cisco

R2(config-router)#neighbor 10.120.10.1 peer-group CORP R2(config-router)#neighbor CORP password Cisco

R2(config-router)#neighbor 10.10.10.1 peer-group CORP R2(config-router)#neighbor PEER password Cisco

R1(config-router)#neighbor 10.120.10.1 peer-group CORP R1(config-router)#neighbor CORP password Cisco

R2(config-router)#neighbor 10.10.10.1 peer-group CORP R2(config-router)#neighbor CORP password Cisco

17. A network engineer is configuring Flexible Netflow and enters these commands

Sampler Netflow1

Mode random one-out-of 100

Interface fastethernet 1/0

Flow-sampler netflow1

Which are two results of implementing this feature instead of traditional Netflow? (Choose two.)

CPU and memory utilization are reduced.

Only the flows of top 100 talkers are exported

The data export flow is more secure.

The number of packets to be analyzed are reduced

The accuracy of the data to be analyzed is improved

18. Refer to the exhibit.

Rapid PVST+ is enabled on all switches.

Which command set must be configured on switch1 to achieve the following results on port fa0/1?

Option A

Option B

Option C

Option D

19. After a redundant route processor failure occurs on a Layer 3 device, which mechanism allows for packets to be forwarded from a neighboring router based on the most recent tables?

BFD

RPVST+

RP failover

NSF

20. Which exhibit displays a valid JSON file?

Option A

Option B

Option C

Option D

Page 3 of 10

21. Refer to the exhibit.

An engineer must modify the access control list EGRESS to allow all IP traffic from subnet 10.1.10.0/24 to 10.1.2.0/24. The access control list is applied in the outbound direction on router interface GigabitEthemet 0/1.

Which configuration commands can the engineer use to allow this traffic without disrupting existing traffic flows?

A)

Option A

Option B

Option C

Option D

22. How is Layer 3 roaming accomplished in a unified wireless deployment?

An EoIP tunnel is created between the client and the anchor controller to provide seamless connectivity as the client is associated with the new A

The client entry on the original controller is passed to the database on the new controller.

The new controller assigns an IP address from the new subnet to the client

The client database on the original controller is updated the anchor entry, and the new controller database is updated with the foreign entry.

23. Which devices does Cisco DNA Center configure when deploying an IP-based access control policy?

All devices integrating with ISE

selected individual devices

all devices in selected sites

all wired devices

24. What is the recommended MTU size for a Cisco SD-Access Fabric?

1500

9100

4464

17914

25. When a wireless client roams between two different wireless controllers, a network connectivity outage is experience for a period of time.

Which configuration issue would cause this problem?

Not all of the controllers in the mobility group are using the same mobility group name.

Not all of the controllers within the mobility group are using the same virtual interface IP address.

All of the controllers within the mobility group are using the same virtual interface IP address.

All of the controllers in the mobility group are using the same mobility group name.

26. A customer has recently implemented a new wireless infrastructure using WLC-5520 at a site directly next to a large commercial airport. Users report that they intermittently lose WI-FI connectivity, and troubleshooting reveals it is due to frequent channel changes.

Which two actions fix this issue? (Choose two)

Remove UNII-2 and Extended UNII-2 channels from the 5 Ghz channel list

Restore the DCA default settings because this automatically avoids channel interference.

Configure channels on the UNIk2 and the Extended UNII-2 sub-bands of the 5 Ghz band only

Enable DFS channels because they are immune to radar interference.

Disable DFS channels to prevent interference with Doppler radar

27. Refer to the exhibit.

After implementing the configuration 172.20.20.2 stops replaying to ICMP echoes, but the default route fails to be removed.

What is the reason for this behavior?

The source-interface is configured incorrectly.

The destination must be 172.30.30.2 for icmp-echo

The default route is missing the track feature

The threshold value is wrong.

28. DRAG DROP

Drag and drop the threat defense solutions from the left onto their descriptions on the right.

29. Which component of the Cisco Cyber Threat Defense solution provides user and flow context analysis?

Cisco Firepower and FireSIGHT

Cisco Stealth watch system

Advanced Malware Protection

Cisco Web Security Appliance

30. Refer to the exhibit.

An engineer must ensure that all traffic leaving AS 200 will choose Link 2 as an entry point. Assuming that all BGP neighbor relationships have been formed and that the attributes have not been changed on any of the routers, which configuration accomplish task?

Option A

Option B

Option C

Option D

Page 4 of 10

31. When using TLS for syslog, which configuration allows for secure and reliable transportation of messages to its default port?

logging host 10.2.3.4 vrf mgmt transport tcp port 6514

logging host 10.2.3.4 vrf mgmt transport udp port 6514

logging host 10.2.3.4 vrf mgmt transport tcp port 514

logging host 10.2.3.4 vrf mgmt transport udp port 514

32. Refer to the exhibit.

Which action completes the configuration to achieve a dynamic continuous mapped NAT for all users?

Configure a match-host type NAT pool

Reconfigure the pool to use the 192.168 1 0 address range

Increase the NAT pool size to support 254 usable addresses

Configure a one-to-one type NAT pool

33. A server running Linux is providing support for virtual machines along with DNS and DHCP services for a small business.

Which technology does this represent?

container

Type 1 hypervisor

hardware pass-thru

Type 2 hypervisor

34. Refer to the exhibit.

A network engineer configures NAT on R1 and enters the show command to verity the configuration What does the output confirm?

The first pocket triggered NAT to add on entry to NAT table

R1 is configured with NAT overload parameters

A Telnet from 160.1.1 1 to 10.1.1.10 has been initiated.

R1 to configured with PAT overload parameters

35. What is a characteristic of MACsec?

802.1AE provides encryption and authentication services

802.1AE is bult between the host and switch using the MKA protocol, which negotiates encryption keys based on the master session key from a successful 802.1X session

802.1AE is bult between the host and switch using the MKA protocol using keys generated via the Diffie-Hellman algorithm (anonymous encryption mode)

802.1AE is negotiated using Cisco AnyConnect NAM and the SAP protocol

36. Which method should an engineer use to deal with a long-standing contention issue between any two VMs on the same host?

Adjust the resource reservation limits

Live migrate the VM to another host

Reset the VM

Reset the host

37. What is one fact about Cisco SD-Access wireless network deployments?

The access point is part of the fabric underlay

The WLC is part of the fabric underlay

The access point is part the fabric overlay

The wireless client is part of the fabric overlay

38. Which measure is used by an NTP server to indicate its closeness to the authoritative time source?

latency

hop count

time zone

stratum

39. Refer to the exhibit.

Which action resolves the EtherChannel issue between SW2 and SW3?

Configure switchport mode trunk on SW2.

Configure switchport nonegotiate on SW3

Configure channel-group 1 mode desirable on both interfaces.

Configure channel-group 1 mode active on both interfaces.

40. Refer to the exhibit.

An engineer must ensure that all traffic leaving AS 200 will choose Link 2 as the exit point. Assuming that all BGP neighbor relationships have been formed and that the attributes have not been changed on any of the routers, which configuration accomplish task?

R4(config-router)bgp default local-preference 200

R3(config-router)neighbor 10.1.1.1 weight 200

R3(config-router)bgp default local-preference 200

R4(config-router)nighbor 10.2.2.2 weight 200

Page 5 of 10

41. Refer to the exhibit.

What is the Json syntax that is formed from the data?

{Name: Bob Johnson, Age: 75, Alive: true, Favorite Foods: [Cereal, Mustard, Onions]}

{"Name": "Bob Johnson", "Age": 75, "Alive": true, "Favorite Foods": ["Cereal", "Mustard", "Onions"]}

{"˜Name': "˜Bob Johnson', "˜Age': 75, "˜Alive': True, "˜Favorite Foods': "˜Cereal', "˜Mustard', "˜Onions'}

{"Name": "Bob Johnson", "Age": Seventyfive, "Alive": true, "Favorite Foods": ["Cereal", "Mustard", "Onions"]}

42. Refer to the exhibit.

Which configuration change will force BR2 to reach 209 165 201 0/27 via BR1?

Set the weight attribute to 65.535 on BR1 toward PE1.

Set the local preference to 150 on PE1 toward BR1 outbound

Set the MED to 1 on PE2 toward BR2 outbound.

Set the origin to igp on BR2 toward PE2 inbound.

43. Which JSON syntax is valid?

A)

Option A

Option B

Option C

Option D

44. Refer to the exhibit

How was spanning-tree configured on this interface?

By entering the command spanning-tree portfast trunk in the interface configuration mode.

By entering the command spanning-tree portfast in the interface configuration mode

By entering the command spanning-tree mst1 vlan 10,20,30,40 in the global configuration mode

By entering the command spanning-tree vlan 10,20,30,40 root primary in the interface configuration mode

45. Refer to the exhibit.

Which type of antenna is show on the radiation patterns?

Dipole

Yagi

Patch

Omnidirectional

46. DRAG DROP

Drag and drop the wireless elements on the left to their definitions on the right.

47. Refer to the exhibit.

An engineer must create a configuration that executes the show run command and then terminates the session when user CCNP legs in.

Which configuration change is required?

Add the access-class keyword to the username command

Add the access-class keyword to the aaa authentication command

Add the autocommand keyword to the username command

Add the autocommand keyword to the aaa authentication command

48. An engineer is concerned with the deployment of new application that is sensitive to inter-packet delay variance.

Which command configures the router to be the destination of jitter measurements?

Router(config)# ip sla responder udp-connect 172.29.139.134 5000

Router(config)# ip sla responder tcp-connect 172.29.139.134 5000

Router(config)# ip sla responder udp-echo 172.29.139.134 5000

Router(config)# ip sla responder tcp-echo 172.29.139.134 5000

49. Refer to the exhibit.

The IP SLA is configured in a router. An engineer must configure an EEM applet to shut down the interface and bring it back up when there is a problem with the IP SLA.

Which configuration should the engineer use?

event manager applet EEM_IP_SLA event track 10 state down

event manager applet EEM_IP_SLA event track 10 state unreachable

event manager applet EEM_IP_SLA event sla 10 state unreachable

event manager applet EEM_IP_SLA event sla 10 state down

50. Which method creates an EEM applet policy that is registered with EEM and runs on demand or manually?

event manager applet ondemand event register action 1.0 syslog priority critical msg 'This is a message from ondemand'

event manager applet ondemand event manual action 1.0 syslog priority critical msg 'This is a message from ondemand'

event manager applet ondemand event none action 1.0 syslog priority critical msg 'This is a message from ondemand'

event manager applet ondemand action 1.0 syslog priority critical msg 'This is a message from ondemand'

Page 6 of 10

51. Wireless users report frequent disconnections from the wireless network. While troubleshooting a network engineer finds that after the user a disconnect, the connection re-establishes automatically without any input required. The engineer also notices these message logs .

Which action reduces the user impact?

increase the AP heartbeat timeout

increase BandSelect

enable coverage hole detection

increase the dynamic channel assignment interval

52. Refer the exhibit.

Which router is the designated router on the segment 192.168.0.0/24?

This segment has no designated router because it is a nonbroadcast network type.

This segment has no designated router because it is a p2p network type.

Router Chicago because it has a lower router ID

Router NewYork because it has a higher router ID

53. If the noise floor is -90 dBm and wireless client is receiving a signal of -75 dBm, what is the SNR?

1.2

-165

.83

54. Refer to the exhibit.

A network engineer configures a GRE tunnel and enters the show Interface tunnel command.

What does the output confirm about the configuration?

The keepalive value is modified from the default value.

Interface tracking is configured.

The tunnel mode is set to the default.

The physical interface MTU is 1476 bytes.

55. What is the function of a VTEP in VXLAN?

provide the routing underlay and overlay for VXLAN headers

dynamically discover the location of end hosts in a VXLAN fabric

encapsulate and de-encapsulate traffic into and out of the VXLAN fabric

statically point to end host locations of the VXLAN fabric

56. What is one difference between saltstack and ansible?

SaltStack uses an API proxy agent to program Cisco boxes on agent mode, whereas Ansible uses a Telnet connection

SaltStack uses the Ansible agent on the box, whereas Ansible uses a Telnet server on the box

SaltStack is constructed with minion, whereas Ansible is constructed with YAML

SaltStack uses SSH to interact with Cisco devices, whereas Ansible uses an event bus

57. How is 802.11 traffic handled in a fabric-enabled SSID?

centrally switched back to WLC where the user traffic is mapped to a VXLAN on the WLC

converted by the AP into 802.3 and encapsulated into VXLAN

centrally switched back to WLC where the user traffic is mapped to a VLAN on the WLC

converted by the AP into 802.3 and encapsulated into a VLAN

58. Refer to the exhibit.

Which HTTP JSON response does the python code output give?

NameError: name 'json' is not defined

KeyError 'kickstart_ver_str'

7.61

7.0(3)I7(4)

59. Which line must be added in the Python function to return the JSON object {"cat_9k":

“FXS193202SE")?

Option A

Option B

Option C

Option D

60. What is one benefit of implementing a VSS architecture?

It provides multiple points of management for redundancy and improved support

It uses GLBP to balance traffic between gateways.

It provides a single point of management for improved efficiency.

It uses a single database to manage configuration for multiple switches

Page 7 of 10

61. How does an on-premises infrastructure compare to a cloud infrastructure?

On-premises can increase compute power faster than cloud

On-premises requires less power and cooling resources than cloud

On-premises offers faster deployment than cloud

On-premises offers lower latency for physically adjacent systems than cloud.

62. Which configuration restricts the amount of SSH that a router accepts 100 kbps?

A)

Option A

Option B

Option C

Option D

63. Refer to Exhibit.

MTU has been configured on the underlying physical topology, and no MTU command has been configured on the tunnel interfaces.

What happens when a 1500-byte IPv4 packet traverses the GRE tunnel from host X to host Y, assuming the DF bit is cleared?

The packet arrives on router C without fragmentation.

The packet is discarded on router A

The packet is discarded on router B

The packet arrives on router C fragmented.

64. In a wireless Cisco SD-Access deployment, which roaming method is used when a user moves from one access point to another on a different access switch using a single WLC?

Layer 3

inter-xTR

auto anchor

fast roam

65. Which measurement is used from a post wireless survey to depict the cell edge of the access points?

SNR

Noise

RSSI

CCI

66. Which method of account authentication does OAuth 2.0 within REST APIs?

username/role combination

access tokens

cookie authentication

basic signature workflow

67. An engineer must provide wireless converge in a square office. The engineer has only one AP and believes that it should be placed it in the middle of the room.

Which antenna type should the engineer use?

directional

polarized

Yagi

omnidirectional

68. What does the cisco DNA REST response indicate?

Cisco DNA Center has the Incorrect credentials for cat3850-1

Cisco DNA Center is unable to communicate with cat9000-1

Cisco DNA Center has the incorrect credentials for cat9000-1

Cisco DNA Center has the Incorrect credentials for RouterASR-1

69. Which controller is capable of acting as a STUN server during the onboarding process of Edge devices?

vBond

vSmart

vManage

PNP server

70. Which AP mode allows an engineer to scan configured channels for rogue access points?

sniffer

monitor

bridge

local

Page 8 of 10

71. DRAG DROP

Drag and drop the characteristics from the left onto the orchestration tools they describe on the right.

72. When configuration WPA2 Enterprise on a WLAN, which additional security component configuration is required?

NTP server

PKI server

RADIUS server

TACACS server

73. What is the output of this code?

username Cisco

get_credentials

username

CISCO

74. What is a benefit of a virtual machine when compared with a physical server?

Multiple virtual servers can be deployed on the same physical server without having to buy additional hardware.

Virtual machines increase server processing performance.

The CPU and RAM resources on a virtual machine cannot be affected by other virtual machines.

Deploying a virtual machine is technically less complex than deploying a physical server.

75. 165.200.0/24. The engineer applies access control list EGRESS in the outbound direction on the GigabitEthernet0/0 interface of the router However, the router can still ping hosts on the 209.165.200.0/24 subnet.

Which explanation of this behavior is true?

Access control lists that are applied outbound to a router interface do not affect traffic that is sourced from the router.

Only standard access control lists can block traffic from a source IP address.

After an access control list is applied to an interface, that interface must be shut and no shut for the access control list to take effect.

The access control list must contain an explicit deny to block traffic from the router.

76. Which outbound access list, applied to the WAN interface of a router, permits all traffic except for http traffic sourced from the workstation with IP address 10.10.10.1?

A)

Option A

Option B

Option C

Option D

77. In an SD-Access solution what is the role of a fabric edge node?

to connect external Layer 3- network to the SD-Access fabric

to connect wired endpoint to the SD-Access fabric

to advertise fabric IP address space to external network

to connect the fusion router to the SD-Access fabric

78. DRAG DROP

Refer to the exhibit Drag and drop the snippets into the RESTCONF request to form the request that returns this response Not all options are used

79. Where is radio resource management performed in a cisco SD-access wireless solution?

DNA Center

control plane node

wireless controller

Cisco CMX

80. Which action is the vSmart controller responsible for in an SD-WAN deployment?

handle, maintain, and gather configuration and status for nodes within the SD-WAN fabric

distribute policies that govern data forwarding performed within the SD-WAN fabric

gather telemetry data from vEdge routers

onboard vEdge nodes into the SD-WAN fabric

Page 9 of 10

81. An engineer must configure HSRP group 300 on a Cisco IOS router. When the router is functional, it must be the must be the active HSRP router. The peer router has been configured using the default priority value.

Which command set is required?

A)

Option A

Option B

Option C

Option D

82. Which three elements determine Air Time efficiency? (Choose three)

evert-driven RRM

data rate (modulation density) or QAM

channel bandwidth

number of spatial streams and spatial reuse

RF group leader

dynamic channel assignment

83. Refer to the exhibit.

Based on the configuration in this WLAN security setting, Which method can a client use to authenticate to the network?

text string

username and password

certificate

RADIUS token

84. Refer to the exhibit.

What does the snippet of code achieve?

It creates a temporary connection to a Cisco Nexus device and retrieves a token to be used for API calls.

It opens a tunnel and encapsulates the login information, if the host key is correct.

It opens an ncclient connection to a Cisco Nexus device and maintains it for the duration of the context.

It creates an SSH connection using the SSH key that is stored, and the password is ignored.

85. DRAG DROP

Refer to the exhibit.

An engineer must deny HTTP traffic from host A to host B while allowing all other communication between the hosts, drag and drop the commands into the configuration to achieve these results. Some commands may be used more than once. Not all commands are used.

86. An engineer runs the code against an API of Cisco DMA Center, and the platform returns this output What does the response indicate?

The authentication credentials are incorrect

The URl string is incorrect.

The Cisco DNA Center API port is incorrect

The HTTP method is incorrect

87. Refer to the exhibit.

What does the error message relay to the administrator who is trying to configure a Cisco IOS device?

A NETCONF request was made for a data model that does not exist.

The device received a valid NETCONF request and serviced it without error.

A NETCONF message with valid content based on the YANG data models was made, but the request failed.

The NETCONF running datastore is currently locked.

88. 1.Which two network problems Indicate a need to implement QoS in a campus network? (Choose two.)

port flapping

excess jitter

misrouted network packets

duplicate IP addresses

bandwidth-related packet loss

89. Which technology provides a secure communication channel for all traffic at Layer 2 of the OSI model?

MACsec

IPsec

SSL

Cisco Trustsec

90. An engineer configures HSRP group 37. The configuration does not modify the default virtual MAC address.

Which virtual MAC address does the group use?

C0:00:00:25:00:00

00:00:0c:07:ac:37

C0:39:83:25:258:5

00:00:0c:07:ac:25

Page 10 of 10

91. Which two mechanisms are available to secure NTP? (Choose two.)

IP prefix list-based

IPsec

TACACS-based authentication

IP access list-based

Encrypted authentication

92. A company plans to implement intent-based networking in its campus infrastructure.

Which design facilities a migrate from a traditional campus design to a programmer fabric designer?

Layer 2 access

three-tier

two-tier

routed access

93. At which Layer does Cisco DNA Center support REST controls?

EEM applets or scripts

Session layer

YMAL output from responses to API calls

Northbound APIs

94. Which design principle slates that a user has no access by default to any resource, and unless a resource is explicitly granted, it should be denied?

least privilege

fail-safe defaults

economy of mechanism

complete mediation

95. What are two benefits of YANG? (Choose two.)

It enforces the use of a specific encoding format for NETCON

It collects statistical constraint analysis information.

It enables multiple leaf statements to exist within a leaf list.

It enforces configuration semantics.

It enforces configuration constraints.

96. How does EIGRP differ from OSPF?

EIGRP is more prone to routing loops than OSPF

EIGRP supports equal or unequal path cost, and OSPF supports only equal path cost.

EIGRP has a full map of the topology, and OSPF only knows directly connected neighbors

EIGRP uses more CPU and memory than OSPF

97. A customer has several small branches and wants to deploy a WI-FI solution with local management using CAPWAP.

Which deployment model meets this requirement?

Autonomous

Mobility Express

SD-Access wireless

Local mode

98. Which characteristic distinguishes Ansible from Chef?

Ansible lacs redundancy support for the master server. Chef runs two masters in an active/active mode.

Ansible uses Ruby to manage configurations. Chef uses YAML to manage configurations.

Ansible pushes the configuration to the client. Chef client pulls the configuration from the server.

The Ansible server can run on Linux, Unix or Windows. The Chef server must run on Linux or Unix.

99. Which two operational models enable an AP to scan one or more wireless channels for rouge access points and at the same time provide wireless services to clients? (Choose two.)

Rouge detector

Sniffer

FlexConnect

Local

Monitor

100. Which LISP component is required for a LISP site to communicate with a non-LISP site?

ETR

ITR

Proxy ETR

Proxy ITR

Cisco 350-401 Exam Questions V28.02: Your Key to Success