CCNP 350-401模拟考试题及答案解析｜ENCOR练习题强化训练

What does the Cisco DNA REST response indicate?

Refer to the exhibit. After running the code in the exhibit. Which step reduces the amount of data that NETCONF server returns to the NETCONF client, to only the interface's configuration?

A network engineer configures BGP between R1 and R2. Both routers use BGP peer group CORP and are set up to use MD5 authentication. This message is logged to the console of router R1: *Jun 5 33:34:33.033: %TCP-6-BADAUTH: Invalid MD5 digest from 10.10.10.1

Which three elements determine Air Time efficiency? (Choose three)

Which features does Cisco EDR use to provide threat detection and response protection?

Which two threats does AMP4E have the ability to block? (Choose two)

Refer to the exhibit. %OSPF-5-ADJCHG: Process 1, Nbr 10.0.0.2 on FastEthernet0/0 from FULL to DOWN, Neighbor Down: Interface down or detached %OSPF-6-AREACHG: 10.0.0.1/32 changed from area 0 to area 1 %OSPF-4-ERRRCV: Received invalid packet: mismatch area

What are two characteristics of VXLAN? (Choose two)

Refer to the exhibit. A network engineer configures a new GRE tunnel and enters the show run command. What does the output verify?

Which design principle slates that a user has no access by default to any resource, and unless a resource is explicitly granted, it should be denied?

How does an on-premises infrastructure compare to a cloud infrastructure?

What is the function of a VTEP in VXLAN?

Refer to the exhibit. An engineer implemented several configuration changes and receives the logging message on switch1. Which action should the engineer take to resolve this issue?

Refer to the exhibit. What is the effect of the configuration?

Refer to the exhibit.After configuring the BGP network,an engineer verifies that the path between server1 and server2 is functional,why did RouterSF choose the route from RouterDAL instead of the route from RouterCHI?

An engineer is configuring RADIUS-Based Authentication with EAP MS-CHAPv2 is configured on a client device.which outer method protocol must be configured on the ISE to support this anthentication type ?

Under which network conditions is an outbound QoS policy that is applied on a router WAN interface most beneficial?

Refer to the exhibit. Which command is required to verify NETCONF capability reply messages?

A network engineer must configure a router to send logging messages to a syslog server based on these requirements: uses syslog IP address: 10.10.10.1 uses a reliable protocol must not use any well-known TCP/UDP ports Which configuration must be used?

Refer to the exhibit.What is the value of the variable list after the code is run ?

A network engineer is designing a Qos policy for voice and video applications. which software queuing feature provides strict-priority servicing ?

What is the difference in dBm when an AP power increases from 25 mW to 100mW?

Which free application make REST call against DNA center?

Which marking field is used only as an internal marking within a router?

Refer to the exhibit. Which command set enables router R2 to be configured via NETCONF?

Which two actions are recommended as security best practice to protect REST API (Choose two)

What are the two protocols redistributed into OMP?

An organization wants to use the cisco SD-WAN regionalized service-chaining feature to optimize cost and user experience with application in the network, which allows branch routers to analyze and steer traffic toward the required network function. Which

A customer has two Cisco WLCs that manage separate APs throughout a building. Each WLC advertises the same SSID but terminates on different interfaces. Users report that they drop their connections and change IP addresses when roaming. Which action resolv

Refer to the exhibit. What is displayed when the code is run?

A script contains the statement "while loop != 999:". Which value terminates the loop?

Which CISCO SD-WAN component authenticates the routers and the vSmart controllers?

When voice services are deployed over a wireless environment, which service must be disabled to ensure the quality of calls?

What is a characteristic of an AP operating in FlexConnect Mode?

Refer to the exhibit. An engineer must configure an ERSPAN tunnel that mirrors traffic from Linux1 on Switch1 to Linux2 on Switch2. Which command must be added to the source configuration to enable the ERSPAN tunnel?

Refer to the exhibit. An engineer configured the Bonjour Gateway on a Cisco WLC to support Apple Airplay. Users cannot see Apple TV while on the WLAN. Which action resolves this issue?

Refer to the exhibit. What is the value of the variable list after the code is run? list = [1, 2, 3, 4] list[3] = 10 print(list)

Refer to the exhibit.A network engineer must log in to the router via the console, but the RADIUS servers are not reachable. Which credentials allow console access?

A customer transitions a wired environment to a Cisco SD-Access solution. The customer does not want to integrate the wireless network with the fabric. Which wireless deployment approach enables the two systems to coexist and meets the customer requiremen

Which two solutions are used for backing up a Cisco DNA Center Assurance database? (Choose two)

Refer to the exhibit. Which command set must be applied on R1 to establish a BGP neighborship with R2 and to allow communication from R1 to reach the networks?

A customer wants to provide wireless access to contractors using a guest portal on Cisco ISE. The portal is also used by employees. A solution is implemented, but contractors receive a certificate error when they attempt to access the portal. Employees ca

Refer the exhibit. Which configuration elects SW4 as the root bridge for VLAN 1 and puts G0/2 on SW2 into a blocking state?

Which Python code snippet must be added to the script to save the returned configuration as a JSON-formatted file?

Refer to the exhibit. An engineer must configure an ERSPAN session with the remote end of the session 10.10.0.1. Which commands must be added to complete the configuration?

What is the result when an active route processor fails in a design that combines NSF with SSO?

An engineer uses the Design workflow to create a new network infrastructure in Cisco DNA Center. How is the physical network device hierarchy structured?

Refer to the exhibit. A network engineer must configure NETCONF. After creating the configuration, the engineer gets output from the command show line, but not from show runningconfig. Which command completes the configuration?

Refer to the exhibit. Router BRDR-1 is configured to receive the 0.0.0.0/0 and 172.17.1.0/24 network via BGP and advertise them into OSPF are 0. An engineer has noticed that the OSPF domain is receiving only the 172.17.1.0/24 route and default route 0.0.0

An engineer must create an EEM script to enable OSPF debugging in the event the OSPF neighborship goes down. Which script must the engineer apply?

An engineer is implementing a Cisco MPLS TE tunnel to improve the streaming experience for the clients of a video-on-demand server. Which action must the engineer perform to configure extended discovery to support the MPLS LDP session between the headend

AN engineer is implementing a route map to support redistribution within BGP. The route map must configured to permit all unmatched routes. Which action must the engineer perform to complete this task?

Refer to the exhibit. A network operator is attempting to configure an IS-IS adjacency between two routers, but the adjacency cannot be established. To troubleshoot the problem, the operator collects this debugging output. Which interfaces are misconfigur

What occurs when a high bandwidth multicast stream is sent over an MVPN using Cisco hardware?

AN engineer is implementing MPLS OAM to monitor traffic within the MPLS domain. Which action must the engineer perform to prevent from being forwarded beyond the service provider domain when the LSP is down?

An engineer must configure AAA on a cisco 9800 WLC for central web authentication.which two commands are needed to accomplish this task?(choose two)

An engineer configures GigabitEthernet 0/1 for VRRP group 115.The router must assume the primary role when it has the highest priority in the group.which command set is required to complete this task? interface GigabitEthernet0/1 ip address 10.10.10.2 255

what is required for a virtual machine to run?

Under which network conditions is an outbound QoS policy that is applied on a router WAN interface most beneficial?

Which network devices secure API platform?

Which protocol is used to encrypt control plane traffic between SD-WAN controllers and SDWAN endpoints?

An engineer must configure the strongest password authentication to locally authenticate on a router. Which configuration must be used?

Which two items are found in YANG data models? (Choose two.)

Which threat defence mechanism, when deployed at the network perimeter, protects against zero-day attacks?

What is a characteristic of MACsec?

What are two benefits of implementing a Cisco SD-WAN architecture? (Choose two)

What is the role of vSmart in a Cisco SD-WAN environment ?

Refer to the exhibit.Which result does the Python code achieve ?

Refer to the exhibit. An engineer is troubleshooting an application running on Apple phones. The application Is receiving incorrect QoS markings. The systems administrator confirmed that ail configuration profiles are correct on the Apple devices. Which c

What is a characteristic of Cisco DNA Northbound APIs?

What is a benefit of Type 1 hypervisors?

Which technology uses network traffic telemetry, contextual information, and file reputation to provide insight into cyber threats?

What is required for intercontroller Layer 3 roaming?

Refer to the exhibit. A company requires that all wireless users authenticate using dynamic key generation. Which configuration must be applied?

What is the difference between the MAC address table and TCAM?

Which architectural component enables a zero-trust security model?

Which component does Cisco Threat Defense use to measure bandwith,application performance,and utlization?

Which two new security capabilities are introduced by using a next-generation frewall at the Internet edge?(Choose two)

A network engineer is enabling HTTPS access to the core switch, which requires a cetficale to be installed on the switch signed by the corporate certficate autihority ,Which configuration commands are required to issue a certificate signing request from t

What is one primary REST security design principle?

Refer to the exhibit ，An engineer is reaching network 172.16.10.0/24 via the R1-R2-R4 path.Which configuration forces the trafic to take a path of R1-R3-R4?

Why would an engineer use YANG?

Refer to the exhibit. An engineer must establish eBGP peering between router R3 and router R4.Both routers should use their loopback interfaces as the BGP router ID . Which configuration set accomplishes this task?

By default,which virtual MAC address does HSRP group 16 use?

When is the Design workflow used in Cisco DNA Center?

A vulnerability assessment highlighted that remote access to the switches is permitted using unsecure and unencrypted protocols.Which configuration must be applied to allow only secure and reliable remote access for device administration?

sw2(config)#track 1000 interface gigabitEthernet 0/0 line-protocol sw2(config-track)# exit sw2(config)# interface vlan 1000 sW2(confia-if)# ip address 10.23.87.3 255.255.255.0 Refer to the exhibit An engineer must confgure HSRP for VLAN 1000 on SW2. The s

Refer to the exhibit. A network administrator must configure router B to allow trafic only from network 10.100.2.0 to networks outside of routerB . Which configuration must be applied?

In a Cisco SD-WAN solution, which two functions are performed by OMP?(Choose two.)

In a Cisco StackWise Virtual environment, which planes are virtually combined in the common logical switch?

Refer to the exhibit. An engineer must create a configuration that prevents R3 from receiving the LSA about 172.16.1.4/32. Which configuration set achieves this goal?

Based on the router's APl output in JSON format below,which Python code will display the value of the "hostname" key?

An engineer is configuring a new SSID to present users with a splash page for authentication. Which WLAN Layer 3 setting must be configured to provide this functionality?

enable secret cisco username cisco privilege 15 secret cisco aaa new-model aaa authentication login default group radius local aaa authorization network default group radius Refer to the exhibit ,The network administrator must be able to perform configura

Which two parameters are examples of a QoS traffic descriptor?(Choose two.)

Refer to the exhibit.An engineer configures OSPF and wants to verify the configuration. Which configuration is applied to this device?

Refer to the exhibit. How does the router handle traffic after the CoPP policy is configured on the router?

What is a characteristic of Cisco DNA southbound APIs?

What is a characteristic of Cisco StackWise technology?

Refer to the exhibit.After coniguring HSRP an engineer enters the show standby command. Which two facts are derived from the output?(Choose two.)

Refer to the exhibit. After the code is run on a Cico IOS-XE router, the response code is 204 ,What is the result of the script?

Refer to the exhibit. An engineer must configure static NAT on R1 to allow users HTTP access to the web server on TCP pot 80.The web server must be reachable through ISP 1 and ISP 2.Which command set should be applied to R1 to fulfill these requirements?

A network engineer configures a WLAN controller with increased security for web access .There is IP connectvity with the WLAN contoller but the engineer cannot start a management session from a web browser. Which action resolves the issue?

In a Cisco SD-Access solution, which protocol is used by an extended node to connect to a single edge node ?

An engineer must configure and validate a CoPP policy that allws the network management server to monitor router R1 via SNMP while protecting the control plane. Which two commands or command sets must be used? (Choose two.)

What does a northbound API accomplish?

Refer to the exhibit ,The trunk does not work over the back-to-back link between Swich1 interface Gig1/0/20 and Switch2 inerace Gig1/0/20. which configuration fixes the problem?

An engineer must enable a login authentication method that allows a user to log in by using local authentication if all other defined authentication methods fail Which configuration should be applied?

Refer to the exhibit. Which command set changes the neighbor state from Idle (Admin) to Active?

Refer to the exhibit. A network engineer is enabling logging to a local buffer, to the terminal and to a syslog server for all debugging level logs filtered by facility code 7. Which command is needed to complete this configuration snippet? logging buffer

An engineer must create a new SSID on a Cisco 9800 wireless LAN controller. The client has asked to use a pre-shared key for authentication Which profile must the engineer edit to achieve this requirement?

Refer to the exhibit. VPN-A sends point-to-point traffic to VPN-B and receives traffic only from VPN-C VPN-B sends point-to-point traffic to VPN-C and receives traffic only from VPN-A. Which configuration is applied?

Refer to the exhibit. An engineer configures the BGP adjacency between R1 and R2, however, it fails to establish Which action resolves the issue?

Which method is used by an AP to join HA controllers and is configured in NVRAM?

If a client's radio device receives a signal strength of -67 dBm and the noise floor is -85 dBm, what is the SNR value?

A customer wants to use a single SSID to authenticate loT devices using different passwords. Which Layer 2 security type must be configured in conjunction with Cisco ISE to achieve this requirement?

Refer to the exhibit. R2 is the neighboring router of R1. R2 receives an advertisement for network 192 168.10.50/32. Which configuration should be applied for the subnet to be advertised with the original /24 netmask? R1#show run | b router ospf router os

How are map-register messages sent in a LISP deployment?

A network monitoring system uses SNMP polling to record the statistics of router interfaces The SNMP queries work as expected until an engineer installs a new interface and reloads the router After this action, all SNMP queries for the router fail What is

Refer to the exhibit. An engineer must permit traffic from these networks and block all other traffic An informational log message should be triggered when traffic enters from these prefixes Which access list must be used? 10.0.32.0/24 10.0.33.0/24 10.0.3

A customer requests a design that includes GLBP as the FHRP The network architect discovers that the members of the GLBP group have different throughput capabilities. Which GLBP load balancing method supports this environment?

Refer to the exhibit. An engineer attempts to bundle interface Gi0/0 into the port channel, but it does not function as expected. Which action resolves the issue?

Refer to the exhibit. An engineer must prevent the R6 loopback from getting into Area 2 and Area 3 from Area 0. Which action must the engineer take?

How can an engineer prevent basic replay attacks from people who try to brute force a system via REST API?

An administrator must enable Telnet access to Router X using the router username and password database for authentication. Which configuration should be applied?

When firewall capabilities are considered, which feature is found only in Cisco nextgeneration firewalls?

Refer to the exhibit. CR2 and CR3 ate configured with OSPF. Which configuration, when applied to CR1. allows CR1 to exchange OSPF Information with CR2 and CR3 but not with other network devices or on new Interfaces that are added to CR1?

In which two ways does TCAM differ from CAM? (Choose two.)

Refer to the exhibit. An engineer must configure HSRP for VLAN 1000 on SW2. The secondary switch must immediately take over the role of active router If the interlink with the primary switch fails. Which command set completes this task? SW2(config)#track

Refer to the exhibit. An engineer attempts to establish BGP peering between router CORP and two ISP routers. What is the root cause for the failure between CORP and ISP#2?

Refer to the exhibit Users cannot reach the web server at 192.168.100.1.What is the root cause for the failure?

An engineer must configure a multicast UDP jitter operation. Which configuration should be applied?

What is the API keys option for REST API authentication?

Refer to the exhibit. An administrator configures two switches with LACP EtherChannels, but packets are not being exchanged between the switches. What is the reason, and what fixes the issue?

How must network management traffic be treated when defining QoS policies?

Refer to the exhibit. Which configuration enables password checking on the console line, using only a password? router#sh run I b line con line con 0 password cisco stopbits 1 line aux 0 stopbits 1 line vty 0 4 ！ end router#sh run | i username|aaa no aaa

Refer to the exhibit. An engineer must allow R1 to advertise the 192.168.1.0/24 network to R2. R1 must perform this action without sending OSPF packets to SW1. Which command set should be applied?

Which IPv4 packet field carries the QoS IP classification marking?

Refer to the exhibit. What does the response "204 No Content" mean for the REST API request?

Which beneft is realized by implementing SSO?

How does Cisco Express Forwarding (CEF) switching differ from process switching on Cisco devices?

What is one difference between EIGRP and OSPF?

Which function does a fabric wireless LAN controller perform In a Cisco SD-Access deployment?

Refer to the exhibit. An engineer must set up connectivity between a campus aggregation layer and a branch office access layer. The engineer uses dynamic trunking protocol to establish this connection, however, management traffic on VLAN1 is not passing.

How must network management traffic be treated when defining QoS policies?