admin
Are you looking for the latest 350-401 dumps exam materials?
Lead4Pass shares the best exam materials for the 2023 350-401 certification exam, download the latest Lead4Pass 350-401 dumps: https://www.leads4pass.com/350-401.html, use PDF or
VCE practice tools help you practice the test and ensure you pass the exam with ease and success.
There are many learning methods, and the most efficient way is to practice. Participating in the 350-401 online practice test will help you understand your current learning situation and make the best judgment in the end, ensuring that you are 100% confident in preparing for the 350-401 certification exam.
350-401 Online Practice Tests:
| Type | Number of exam questions | Exam name | Exam code | Verify answer | Last updated |
| Free | 15 | Implementing and Operating Cisco Enterprise Network Core Technologies (ENCOR) & CCIE Enterprise Infrastructure & CCIE Enterprise Wireless | 350-401 | View | 350-401 dumps |
Question 1:
If the maximum power level assignment for global TPC 802.11a/n/ac is configured to 10 dBm, which power level effectively doubles the transmit power?
A. 13dBm
B. 14 dBm
C. 17dBm
D. 20 dBm
Suppose a transmitter is configured for a power level of 10 dBm. A cable with 5-dB loss connects the transmitter to an antenna with an 8-dBi gain. The resulting EIRP of the system is EIRP = 10 dBm ?5 dB + 8 dBi = 13 dBm.
Question 2:
Company policy restricts VLAN 10 to be allowed only on SW1 and SW2. All other VLANs can be on all three switches. An administrator has noticed that VLAN 10 has propagated to SW3.
Which configuration corrects the issue?
A. SW1(config)#int gi1/1 SW1(config)#switchport trunk allowed VLAN 1-9,11-4094
B. SW2(config)#int gi1/2 SW2(config)#switchport trunk allowed VLAN 10
C. SW2(config)#int gi1/2 SW2(config)#switchport trunk allowed VLAN 1-9,11-4094
D. SW1(config)#int gi1/1 SW1(config)#switchport trunk allowed VLAN 10
Question 3:
Which feature must be configured to allow packet capture over Layer 3 infrastructure\’?
A. VSPAN
B. IPSPAN
C. RSPAN
D. ERSPAN
Encapsulated remote SPAN (ERSPAN): encapsulated Remote SPAN (ERSPAN), as the name says, brings generic routing encapsulation (GRE) for all captured traffic and allows it to be extended across Layer 3 domains.
Reference: https://community.cisco.com/t5/networking-documents/understanding-span-rspan-and-erspan/ta-p/3144951
Question 4:
In a Cisco SD-Access wireless architecture, which device manages endpoint ID to Edge Node bindings?
A. fabric control plane node
B. fabric wireless controller
C. fabric border node
D. fabric edge node.
SD-Access Wireless Architecture Control Plane Node Closer Look Fabric Control-Plane Node is based on a LISP Map Server / Resolver that Runs the LISP Endpoint ID Database to provide overlay reachability information
+
A simple Host Database, that tracks Endpoint ID to Edge Node bindings (RLOCs)
+
Host Database supports multiple types of Endpoint ID (EID), such as IPv4 /32, IPv6 /128*, or MAC/48
+
Receives prefix registrations from Edge Nodes for wired clients and from Fabric mode WLCs for wireless clients
+
Resolves lookup requests from FE to locate Endpoints
+
Updates Fabric Edge nodes, Border nodes with wireless client mobility and RLOC information
Reference: https://www.ciscolive.com/c/dam/r/ciscolive/latam/docs/2018/pdf/BRKEWN-2020.pdf
Question 5:
DRAG DROP
Drag and drop packet switching architecture from the left onto the correct positions on the right.
Select and Place:
Correct Answer:
Question 6:
DRAG DROP
Drag and drop the characteristics from the left onto the routing protocols they describe on the right.
Select and Place:
Correct Answer:
Question 7:
Which statement about a fabric access point is true?
A. It is in local mode and must be connected directly to the fabric border node.
B. It is in FlexConnect mode and must be connected directly to the fabric border node.
C. It is in local mode and must connect directly to the fabric edge switch.
D. It is in FlexConnect mode and must be connected directly to the fabric edge switch.
Fabric mode APs continue to support the same wireless media services that traditional APs support; apply AVC, quality of service (QoS), and other wireless policies; and establish the CAPWAP control plane to the fabric WLC. Fabric APs join as local-mode APs and must be directly connected to the fabric edge node switch to enable fabric registration events, including RLOC assignment via the fabric WLC. The fabric edge nodes use CDP to recognize APs as special wired hosts, applying special port configurations and assigning the APs to a unique overlay network within a common EID space across a fabric. The assignment allows management simplification by using a single subnet to cover the AP infrastructure at a fabric site.
Reference: https://www.cisco.com/c/en/us/td/docs/solutions/CVD/Campus/sda-sdg-2019oct.html
Question 8:
Which protocol is used to encrypt control plane traffic between SD-WAN controllers and SDWAN endpoints?
A. DTLS
B. IPsec
C. PGP
D. HTTPS
Question 9:
Refer to the exhibit.
Which command set is needed to configure and verify router R3 to measure the response time from router R3 to the file server located in the data center?
A. ip sla 6 icmp-echo 10.0.1.3 source-ip 10.0.0.3 frequency 300 ip sla schedule 6 life forever start-time now
show ip sla statistics 6
B. ip sla 6 icmp-echo 172.29.139.134 source-ip 172.29.139.132 frequency 300 ip sla schedule 6 start-time now
C. ip sla 6 icmp-echo 172.29.139.134 source-ip 172.29.139.132 frequency 300 ip sla schedule 6 Start-time now show ip protocol
D. ip sla 6 icmp-echo 10.0.1.3 source-ip 10.0.0.3 frequency 300 ip sla schedule 6 life forever start-time now show ip protocol
Question 10:
Refer to the exhibit.
POSTMAN is showing an attempt to retrieve network device information from Cisco DNA Center API. What is the issue?
A. The URI string is incorrect
B. The token has expired.
C. Authentication has failed.
D. The JSON payload contains the incorrect UUID
With \’s\’
GET https://DNAC:Port//dna/intent/api/v1/network-devices
{
“response”: {
“errorCode”: “Bad Request”,
“message”: “Invalid input request”,
“detail”: “s is not a valid UUID of device”
},
“version”: “1.0”
}
without \’s\’
GET https://DNAC:Port//dna/intent/api/v1/network-device
{
“response”: [
{
“type”: “Cisco 3504 Wireless LAN Controller”,
“description”: “Cisco Controller Wireless Version:8.5.140.0”,
“serialNumber”: “FOL25040021”,
Question 11:
Which statement about TLS is true when using RESTCONF to write configurations on network devices?
A. It is provided using NGINX acting as a proxy web server.
B. It is not supported on Cisco devices.
C. It required certificates for authentication.
D. It is used for HTTP and HTTPS requests.
When a device boots up with the startup configuration, the nginx process will be running. NGINX is an internal webserver that acts as a proxy webserver. It provides Transport Layer Security (TLS)-based HTTPS. RESTCONF request sent via HTTPS is first received by the NGINX proxy web server, and the request is transferred to the confd web server for further syntax/semantics check.
Reference: https://www.cisco.com/c/en/us/td/docs/iosxml/ ios/prog/configuration/168/b_168_programmability_cg/RESTCONF.html https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/prog/configuration/166/b_166_programmability_cg/b_166_programmability_cg_chapter_01011.html
The HTTP-based protocol-RESTCONF (RFC 8040), which is a stateless protocol, uses secure HTTP methods to provide CREATE, READ, UPDATE, and DELETE (CRUD) operations on a conceptual datastore containing YANG-defined data > RESTCONF only uses HTTPS.
Question 12:
Which function does a Cisco SD-Access extended node perform?
A. provides fabric extension to nonfabric devices through remote registration and configuration
B. performs tunneling between fabric and nonfabric devices to route traffic over unknown networks
C. used to extend the fabric connecting to downstream nonfabric-enabled Layer 2 switches
D. in charge of establishing Layer 3 adjacencies with nonfabric unmanaged node
Question 13:
What is a characteristic of a Type 2 hypervisor?
A. It is installed on an operating system and supports other operating systems above it.
B. It is referred to as a hosted hypervisor.
C. Problems in the base operating system can affect the entire system.
D. It is completely independent of the operating system.
Type 2 It is completely dependent on Host Operating System for its operations. While having a base operating system allows better specification of policies, any problem in the base operating system affects the entire system even if the hypervisor running above the base OS is secure.
Question 14:
A network engineer is enabling HTTPS access to the core switch, which requires a certificate to be installed on the switch signed by the corporate certificate authority Which configuration commands are required to issue a certificate signing request from the core switch?
A. Core-Switch(config)#crypto pki enroll Core-Switch Core-Switch(config)#ip http secure-trustpoint Core-Switch
B. Core-Switch(config)#crypto pki trustpoint Core-Switch Core-Switch(ca-trustpoint)#enrollment terminal Core-Switch(config)#crypto pki enroll Core-Switch
C. Core-Switch(config)#crypto pki trustpoint Core-Switch Core-Switch(ca-trustpoint)#enrollment terminal Core-Switch(config)#ip http secure-trustpoint Core-Switch
D. Core-Switch(config)#ip http secure-trustpoint Core-Switch Core-Switch(config)#crypto pki enroll Core-Switch
1.
generate an RSA key
2.
Create a trust point.
3.
Enter the command “Crypto PKI enroll”
https://community.cisco.com/t5/vpn/certificate-signing-request-csr-guideline/td-p/2778928
Question 15:
Refer to the exhibit. What happens to access interfaces where VLAN 222 is assigned?
A. STP BPDU guard is enabled
B. A description “RSPAN” is added
C. They are placed into an inactive state
D. They cannot provide PoE
…
Verify answer:
| Number | Q1 | Q2 | Q3 | Q4 | Q5 | Q6 | Q7 | Q8 | Q9 | Q10 | Q11 | Q12 | Q13 | Q14 | Q15 |
| Answers | A | C | D | A | IMAGE | IMAGE | C | A | A | A | A | C | C | B | C |
Lead4Pass 350-401 dumps contain 1044 latest exam questions and answers, download 350-401 dumps: https://www.leads4pass.com/350-401.html, and practice the test carefully to make sure you pass the exam 100%.
Why use 350-401 dumps?
If you are not confident to take the next exam, you can use 350-401 dumps to help you practice the test and help you pass the 350-401 certification exam. If you are fully prepared, you can also download 350-401 dumps for your participation A verification opportunity for the actual exam. The 350-401 dumps can be used as supplementary material as well as to verify your readiness for the actual exam.
Summarize:
This is a pleasure sharing, you can use the 350-401 online practice test to help you clarify your current learning situation, and download the real and effective Lead4Pass 350-401 Dumps test materials to help you really solve the test questions.