2024 Leads4pass Free Latest IT Cert Exam Dumps

Lead4Pass 350-401 Dumps 2023 contains 944 latest exam questions and answers for the latest 350-401 ENCOR certification exam. Lead4Pass 350-401 Dumps provides PDF and VCE lightweight learning tools to facilitate learning and increase learning progress.

Welcome 350-401 ENCOR Exam candidates to download 350-401 Dumps 2023: https://www.leads4pass.com/350-401.html, to help you pass the exam easily.

350-401 Dumps Exam Questions and Answers

Read some free Lead4Pas 350-401 Dumps 2023 exam questions and answers online:

Number of exam questions	Exam name	Exam Code
15	Implementing and Operating Cisco Enterprise Network Core Technologies (ENCOR)	350-401

Question 1:

What is a consideration when designing a Cisco SD-Access underlay network?

A. End user subnets and endpoints are part of the underlay network.

B. The underlay switches provide endpoint physical connectivity for users.

C. Static routing is a requirement,

D. It must support IPv4 and IPv6 underlay networks.

Correct Answer: B

https://www.cisco.com/c/en/us/td/docs/solutions/CVD/Campus/cisco-sda-design-guide.html#Underlay

Question 2:

How does an on-premises infrastructure compare to a cloud infrastructure?

A. On-premises can increase compute power faster than cloud

B. On-premises requires less power and cooling resources than cloud

C. On-premises offers faster deployment than cloud

D. On-premises offer lower latency for physically adjacent systems than the cloud.

Correct Answer: D

Question 3:

Refer to the exhibit.

These commands have been added to the configuration of a switch. Which command flags an error if it is added to this configuration?

A. monitor session 1 source interface port-channel 6

B. monitor session 1 source VLAN 10

C. monitor session 1 source interface FastEthernet0/1 RX

D. monitor session 1 source interface port-channel 7, port-channel 8

Correct Answer: B

RSPAN consists of at least one RSPAN source session, an RSPAN VLAN, and at least one RSPAN destination session. You separately configure RSPAN source sessions and RSPAN destination sessions on different network devices. To configure an RSPAN source session on a device, you associate a set of source ports or source VLANs with an RSPAN VLAN.

Traffic monitoring in a SPAN session has these restrictions: + Sources can be ports or VLANs, but you cannot mix source ports and source VLANs in the same session.

Reference: https://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst3750x_3560x/software/release/12-2_55_se/ configuration/guide/3750xscg/swspan.html

Therefore in this question, we cannot configure a source VLAN because we configured source ports for RSPAN session 1 already.

Question 4:

What is one difference between saltstack and ansible?

A. SaltStack uses an API proxy agent to program Cisco boxes on agent mode, whereas Ansible uses a Telnet connection

B. SaltStack uses the Ansible agent on the box, whereas Ansible uses a Telnet server on the box

C. SaltStack is constructed with minion, whereas Ansible is constructed with YAML

D. SaltStack uses SSH to interact with Cisco devices, whereas Ansible uses an event bus

Correct Answer: C

Question 5:

DRAG DROP

Drag and drop the characteristics from the left onto the deployment models on the right.

Select and Place:

Correct Answer:

Question 6:

In a three-tier hierarchical campus network design, which action is a design best practice for the core layer?

A. provide QoS prioritization services such as marking, queueing, and classification for critical network traffic

B. provide redundant Layer 3 point-to-point links between the core devices for more predictable and faster convergence

C. provide advanced network security features such as 802. IX, DHCP snooping, VACLs, and port security

D. provide redundant aggregation for access layer devices and first-hop redundancy protocols such as VRRP

Correct Answer: B

Question 7:

What is the role of the RP in PIM sparse mode?

A. The RP responds to the PIM join messes with the source of the requested multicast group

B. The RP maintains default aging timeouts for all multicast streams requested by the receivers.

C. The RP acts as a control-plane node and does not receive or forward multicast packets.

D. The RP is the multicast that is the root of the PIM-SM shared multicast distribution tree.

Correct Answer: D

Multicast Distribution Shared Tree – Unlike source trees that have their root at the source, shared trees use a single common root placed at some chosen point in the network. This shared root is called a rendezvous point (RP).

Source:

https://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst9300/software/release/16-5/configuration_guide/ip_mcast_rtng/b_165_ip_mcast_rtng_9300_cg/b_165_ip_mcast_rtng_9300_9500_cg_chapter_0100.html

Question 8:

Which statement about route targets is true when using VRF-Lite?

A. When BGP is configured, route targets are transmitted as BGP standard communities.

B. Route targets control the import and export of routes into a customer routing table.

C. Route targets allow customers to be assigned overlapping addresses.

D. Route targets uniquely identify the customer routing table.

Correct Answer: B

Answer \’Route targets allow customers to be assigned overlapping addresses\’ and answer \’Route targets uniquely identify the customer routing table\’ are not correct as only route distinguisher (RD) identifies the customer routing table and “allows customers to be assigned overlapping addresses”. Answer \’ When BGP is configured, route targets are transmitted as BGP standard communities\’ is not correct as “When BGP is configured, route targets are transmitted as BGP extended communities”

Question 9:

What does the LAP send when multiple WLCs respond to the CISCO-CAPWAPCONTROLLER.localdomain hostname during the CAPWAP discovery and join process?

A. unicast discovery request to the first WLC that resolves the domain name

B. broadcast discovery request

C. join request to all the WLCs

D. unicast discovery request to each WLC

Correct Answer: A

Question 10:

A newly installed spoke router is configured for DMVPN with the IP MTU 1400 command. Which configuration allows the spoke to use fragmentation with the maximum negotiated TCP MTU over GRE?

A. IP TCP adjust-mss 1360 crypto IPsec fragmentation after-encryption

B. IP TCP adjust-mss 1360 crypto IPsec fragmentation MTU-discovery

C. IP TCP payload-MTU 1360 crypto IPsec fragmentation MTU-discovery

D. IP TCP payload-MTU 1360 crypto IPsec fragmentation after-encryption

Correct Answer: A

There is no “IP TCP payload-MTU” command so the correct answer should be “IP TCP adjust-mss”.

Note: The “IP TCP adjust-mss 1360” command will signal the source and destination device during the

three-way handshake to use the TCP MSS size of 1360 bytes so that if they create the full-size packet

there will still not be any drop/fragmentation on the router.

We tested with Cisco IOSv15.4 but could not find the “crypto IPsec fragmentation MTU-discovery”

command.

Question 11:

Which two results occur if Cisco DNA Center loses connectivity to devices in the SD-Access fabric?

(Choose two )

A. All devices reload after detecting a loss of connection to the Cisco DNA Center

B. Already connected users are unaffected, but new users cannot connect

C. User connectivity is unaffected.

D. Cisco DNA Center is unable to collect monitoring data in Assurance.

E. Users lose connectivity

Correct Answer: CD

Question 12:

Refer to the exhibit. Which command must be applied to R2 for an OSPF neighborship to form?

A. network 20.1.1.2.0.0.0.0 area 0

B. network 20.1.1.2 255.255.0.0. area 0

C. network 20.1.1.2.0.0.255.255 area 0

D. network 20.1.1.2 255.255.255 area 0

Correct Answer: A

The network 20.0.0.0 0.0.0.255 area 0 command on R2 did not cover the IP address of the Fa1/1 interface of R2 so OSPF did not run on this interface. Therefore we have to use the command network 20.1.1.2

0.0.255.255 area 0 to turn on OSPF on this interface. Note: The command network 20.1.1.2 0.0.255.255 area 0 can be used too so this answer is also correct but answer C is the best answer here. The network 0.0.0.0 255.255.255.255 area 0 command on R1 will run OSPF on all active

Question 13:

Refer to the exhibit. Which commands are required to allow SSH connection to the router?

A. Router(config)#access-list 100 permit udp any any eq 22 Router(config)#access-list 101 permit top any any eq 22 Router(config)#class-map class-ssh ONU Router(config-cmap)#match access-group 101 Router(config)#policy-map COPP Router(config-pmap)#police 100000 conform-action transmit

B. Router(config)#access-list 100 permit top any eq 22 any Router(config)#class-map class-ssh Router(config-cmap)#match access-group 10 Router(config)#policy-map COPP Router(config-pmap)#class class-ssh Router(config-pmap-c)#police 100000 conform-action transmit

C. Router(config)#access-list 10 permit top any eq 22 any Router(config)#class-map class-ssh Router(config-cmap)#match access-group 10 Router(config)#policy-map COPP Router(config-pmap)#class class-ssh Router(config-pmap-c)#police 100000 conform-action transmit

D. Router(config)#access-list 100 permit TCP any any eq 22 Router(config)#access-list 101 permit TCP any any eq 22 Router(config)#class-map class-ssh Router(config-cmap)#match access-group 101 Router(config)#policy-map COPP Router(config-pmap)#class class-ssh Router(config-pmap-c)#police 100000 conform-action transmit

Correct Answer: D

Question 14:

Refer to the exhibit. An engineer implemented several configuration changes and receives the logging message on switch1. Which action should the engineer take to resolve this issue?

A. Change the VTP domain to match both switches

B. Change Switch2 to switch port mode dynamic auto

C. Change Switch1 to switch port mode dynamic auto

D. Change Switch1 to switch port mode dynamically desirable

Correct Answer: A

Exam D

Question 15:

Refer to the exhibit. An engineer must configure static NAT on R1 to allow users HTTP access to the web server on TCP port 80. The web server must be reachable through ISP 1 and ISP 2. Which command set should be applied to R1 to fulfill these requirements?

A. IP nat inside source static TCP 10.1.1.100 80 209.165.200.225 80 extendable ip nat inside source static TCP 10.1.1.100 80 209.165.201.1 80 extendable

B. IP nat inside source static TCP 10.1.1.100 80 209.165.200.225 80 IP nat inside source static TCP 10.1.1.100 80 209.165.201.1 80

C. IP nat inside source static TCP 10.1.1.100 80 209.165.200.225 80 IP nat inside source static TCP 10.1.1.100 8080 209.165.201.1 8080

D. IP nat inside source static TCP 10.1.1.100 80 209.165.200.225 80 no-alias ip nat inside source static TCP 10.1.1.100 80 209.165.201.1 80 no-alias

Correct Answer: A

the “extendable” keyword should be added if the same Inside Local is mapped to different Inside Global Addresses (the IP address of an inside host as it appears to the outside network). An example of this case is when you have two connections to the Internet on two ISPs for redundancy. So you will need to map two Inside Global IP addresses into one inside local IP address.

…

---

944 latest exam questions and answers are verified by the Cisco expert team, authentic and effective, provide bundled downloads, 2023 350-401 dumps https://www.leads4pass.com/350-401.html, ensure 100% successful pass 350-401 ENCOR Exam.