CCNP ENCOR 350-401 Exam With Complete Solutions
Latest Update
Which role does a fabric edge node play in an SD-Access deployment?
A. Connects endpoints to the fabric and forwards their traffic.
B. Encapsulates end-user data traffic into LISP.
C. Connects the SD-Access fabric to another fabric or external Layer 3 networks.
D. Provides reachability between border nodes in the fabric underlay. - ANSWER A
Which Privilege level is assigned, by default, to VTY users?
A. 1
B. 7
C. 13
D. 15 - ANSWER A
What is the main difference between a RIB and a FIB?
A. The FIB is populated based on RIB content.
B. The RIB keeps a small J milano of the FIB.
C. The RIB is used to perform IP source prefix-based switching decision.
D. The FIB stores all the IP routing information - ANSWER A
Which of the following is prerequisite for an Ansible-managed node?
,A. It should have an SSH server enabled
B. It should be a Linux server or a Cisco device.
C. It should support ad hoc commands.
D. It should have an Ansible Tower installed - ANSWER B
A client device fails to see the enterprise SSID while other client devices are connected
to it. What is the cause of this issue?
A. The client has wrong credentials stored for the configured broadcast SSID.
B. The hidden SSID was not configured manually on the client. C. The broadcast SSID
was not configured manually on the client.
D. The client has wrong credentials stored for the configured hidden SSID - ANSWER B
Which two descriptions of FlexConnect mode for Cisco APs are true? (Choose two.)
A. APs in FlexConnect mode cannot detect rogue APs.
B. When FlexConnect APs connect to the controller, they can tunnel the traffic back to
the controller.
C. FlexConnect is used where the APs are set up in a mesh environment and used to
bridge between each other.
C. FlexConnect mode is designed to allow specified CAPWAP-enabled APs to exclude
themselves from managing data traffic between dents and infrastructure.
D. FlexConnect mode is a wireless solution for branch office and remote office
deployments - ANSWER BD
Which of the following OSPF network types are compatible and allow communication
through the two peering devices?
A. point-to-multipoint to nonbroadcast
, B. broadcast to nonbroadcast
C. point-to-multipoint to broadcast
D. broadcast to point-to-point - ANSWER B
Which NGFW mode blocks flows crossing the firewall?
A. tap
B. inline
C. passive
D. inline tap - ANSWER B
Which statement about route targets is true when using VRF-Lite?
A. Route targets control the import and export of routes into a customer routing table.
B. When BGP is configured, route targets are transmitted as BGP standard
communities.
C. Route targets allow overlapping addresses to be assigned to customers.
D. Route targets uniquely identify the customer routing table - ANSWER A
How does the Cisco TrustSec allow for more flexible access controls for dynamic
networking environments and data centers?
A. uses flexible NetFlow
B. assigns a VLAN to the endpoint -
C. classifies traffic by advanced application recognition D. classifies traffic based on the
contextual identity of the endpoint not by its IP address - ANSWER D
Which statement about the OPSF debug output is true?
A. The output shows OSPF hello messages which router R1 has transmitted or received
on interface Fa0/1 .
B. The output shows OSPF messages which router R1 has transmitted or received on all
interfaces.
Latest Update
Which role does a fabric edge node play in an SD-Access deployment?
A. Connects endpoints to the fabric and forwards their traffic.
B. Encapsulates end-user data traffic into LISP.
C. Connects the SD-Access fabric to another fabric or external Layer 3 networks.
D. Provides reachability between border nodes in the fabric underlay. - ANSWER A
Which Privilege level is assigned, by default, to VTY users?
A. 1
B. 7
C. 13
D. 15 - ANSWER A
What is the main difference between a RIB and a FIB?
A. The FIB is populated based on RIB content.
B. The RIB keeps a small J milano of the FIB.
C. The RIB is used to perform IP source prefix-based switching decision.
D. The FIB stores all the IP routing information - ANSWER A
Which of the following is prerequisite for an Ansible-managed node?
,A. It should have an SSH server enabled
B. It should be a Linux server or a Cisco device.
C. It should support ad hoc commands.
D. It should have an Ansible Tower installed - ANSWER B
A client device fails to see the enterprise SSID while other client devices are connected
to it. What is the cause of this issue?
A. The client has wrong credentials stored for the configured broadcast SSID.
B. The hidden SSID was not configured manually on the client. C. The broadcast SSID
was not configured manually on the client.
D. The client has wrong credentials stored for the configured hidden SSID - ANSWER B
Which two descriptions of FlexConnect mode for Cisco APs are true? (Choose two.)
A. APs in FlexConnect mode cannot detect rogue APs.
B. When FlexConnect APs connect to the controller, they can tunnel the traffic back to
the controller.
C. FlexConnect is used where the APs are set up in a mesh environment and used to
bridge between each other.
C. FlexConnect mode is designed to allow specified CAPWAP-enabled APs to exclude
themselves from managing data traffic between dents and infrastructure.
D. FlexConnect mode is a wireless solution for branch office and remote office
deployments - ANSWER BD
Which of the following OSPF network types are compatible and allow communication
through the two peering devices?
A. point-to-multipoint to nonbroadcast
, B. broadcast to nonbroadcast
C. point-to-multipoint to broadcast
D. broadcast to point-to-point - ANSWER B
Which NGFW mode blocks flows crossing the firewall?
A. tap
B. inline
C. passive
D. inline tap - ANSWER B
Which statement about route targets is true when using VRF-Lite?
A. Route targets control the import and export of routes into a customer routing table.
B. When BGP is configured, route targets are transmitted as BGP standard
communities.
C. Route targets allow overlapping addresses to be assigned to customers.
D. Route targets uniquely identify the customer routing table - ANSWER A
How does the Cisco TrustSec allow for more flexible access controls for dynamic
networking environments and data centers?
A. uses flexible NetFlow
B. assigns a VLAN to the endpoint -
C. classifies traffic by advanced application recognition D. classifies traffic based on the
contextual identity of the endpoint not by its IP address - ANSWER D
Which statement about the OPSF debug output is true?
A. The output shows OSPF hello messages which router R1 has transmitted or received
on interface Fa0/1 .
B. The output shows OSPF messages which router R1 has transmitted or received on all
interfaces.
