Best Grades | Must Pass | Latest Update | Correct Answers | 2024/2025
CCNP ENCOR 350-401 Questions and
Correct Answers | Latest Update
Which function does a fabric edge node perform in an SD-Access deployment?
A. Connects endpoints to the fabric and forwards their traffic.
B. Encapsulates end-user data traffic into LISP.
C. Connects the SD-Access fabric to another fabric or external Layer 3 networks.
D. Provides reachability between border nodes in the fabric underlay.
→ ~~> A
Which privilege level is assigned to VTY users?
A. 1
B. 7
C. 13
D. 15
→ ~~> A
What is the difference between a RIB and a FIB?
A. The FIB is populated based on RIB content.
~1~ for inquiry mail me @
, Best Grades | Must Pass | Latest Update | Correct Answers | 2024/2025
B. The RIB maintains a minor image of the FIB.
C. The RIB is used to make IP source prefix-based switching decisions.
D. The FIB is where all IP routing information is stored
→ ~~> A
Which requirement for an Ansiblemanaged node is true?
A. It must have an SSH server running.
B. It must be a Linux server or a Cisco device.
C. It must support ad hoc commands.
D. It must have an Ansible Tower installed
→ ~~> B
A client device fails to see the enterprise SSID, but other client devices are connected to it.
What is the cause of this issue?
A. The client has incorrect credentials stored for the configured broadcast SSID.
B. The hidden SSID was not manually configured on the client. C. The broadcast SSID was not
manually configured on the client.
D. The client has incorrect credentials stored for the configured hidden SSID
→ ~~> B
~2~ for inquiry mail me @
, Best Grades | Must Pass | Latest Update | Correct Answers | 2024/2025
Which two descriptions of FlexConnect mode for Cisco APs are true? (Choose two.)
A. APs that operate in FlexConnect mode cannot detect rogue APs.
B. When connected to the controller, FlexConnect APs can tunnel traffic back to the controller.
C. FlexConnect mode is used when the APs are set up in a mesh environment and used to
bridge between each other.
C. FlexConnect mode is a feature that is designed to allow specified CAPWAP-enabled APs
to exclude themselves from managing data traffic between dents and infrastructure.
D. FlexConnect mode is a wireless solution for branch office and remote office deployments
→ ~~> BD
Which OSPF network types are compatible and allow communication through the two peering
devices?
A. point-to-multipoint to nonbroadcast
B. broadcast to nonbroadcast
C. point-to-multipoint to broadcast
D. broadcast to point-to-point
→ ~~> B
Which NGFW mode blocks flows crossing the firewall?
A. tap
~3~ for inquiry mail me @
, Best Grades | Must Pass | Latest Update | Correct Answers | 2024/2025
B. inline
C. passive
D. inline tap
→ ~~> B
Which statement about route targets is true when using VRF-Lite?
A. Route targets control the import and export of routes into a customer routing table.
B. When BGP is configured, route targets are transmitted as BGP standard communities.
C. Route targets allow customers to be assigned overlapping addresses.
D. Route targets uniquely identify the customer routing table
→ ~~> A
How does Cisco TrustSec enable more flexible access controls for dynamic networking
environments and data centers?
A. uses flexible NetFlow
B. assigns a VLAN to the endpoint
C. classifies traffic based on advanced application recognition D. classifies traffic based on
the contextual identity of the endpoint rather than its IP address
→ ~~> D
Which statement about the OPSF debug output is true?
~4~ for inquiry mail me @
CCNP ENCOR 350-401 Questions and
Correct Answers | Latest Update
Which function does a fabric edge node perform in an SD-Access deployment?
A. Connects endpoints to the fabric and forwards their traffic.
B. Encapsulates end-user data traffic into LISP.
C. Connects the SD-Access fabric to another fabric or external Layer 3 networks.
D. Provides reachability between border nodes in the fabric underlay.
→ ~~> A
Which privilege level is assigned to VTY users?
A. 1
B. 7
C. 13
D. 15
→ ~~> A
What is the difference between a RIB and a FIB?
A. The FIB is populated based on RIB content.
~1~ for inquiry mail me @
, Best Grades | Must Pass | Latest Update | Correct Answers | 2024/2025
B. The RIB maintains a minor image of the FIB.
C. The RIB is used to make IP source prefix-based switching decisions.
D. The FIB is where all IP routing information is stored
→ ~~> A
Which requirement for an Ansiblemanaged node is true?
A. It must have an SSH server running.
B. It must be a Linux server or a Cisco device.
C. It must support ad hoc commands.
D. It must have an Ansible Tower installed
→ ~~> B
A client device fails to see the enterprise SSID, but other client devices are connected to it.
What is the cause of this issue?
A. The client has incorrect credentials stored for the configured broadcast SSID.
B. The hidden SSID was not manually configured on the client. C. The broadcast SSID was not
manually configured on the client.
D. The client has incorrect credentials stored for the configured hidden SSID
→ ~~> B
~2~ for inquiry mail me @
, Best Grades | Must Pass | Latest Update | Correct Answers | 2024/2025
Which two descriptions of FlexConnect mode for Cisco APs are true? (Choose two.)
A. APs that operate in FlexConnect mode cannot detect rogue APs.
B. When connected to the controller, FlexConnect APs can tunnel traffic back to the controller.
C. FlexConnect mode is used when the APs are set up in a mesh environment and used to
bridge between each other.
C. FlexConnect mode is a feature that is designed to allow specified CAPWAP-enabled APs
to exclude themselves from managing data traffic between dents and infrastructure.
D. FlexConnect mode is a wireless solution for branch office and remote office deployments
→ ~~> BD
Which OSPF network types are compatible and allow communication through the two peering
devices?
A. point-to-multipoint to nonbroadcast
B. broadcast to nonbroadcast
C. point-to-multipoint to broadcast
D. broadcast to point-to-point
→ ~~> B
Which NGFW mode blocks flows crossing the firewall?
A. tap
~3~ for inquiry mail me @
, Best Grades | Must Pass | Latest Update | Correct Answers | 2024/2025
B. inline
C. passive
D. inline tap
→ ~~> B
Which statement about route targets is true when using VRF-Lite?
A. Route targets control the import and export of routes into a customer routing table.
B. When BGP is configured, route targets are transmitted as BGP standard communities.
C. Route targets allow customers to be assigned overlapping addresses.
D. Route targets uniquely identify the customer routing table
→ ~~> A
How does Cisco TrustSec enable more flexible access controls for dynamic networking
environments and data centers?
A. uses flexible NetFlow
B. assigns a VLAN to the endpoint
C. classifies traffic based on advanced application recognition D. classifies traffic based on
the contextual identity of the endpoint rather than its IP address
→ ~~> D
Which statement about the OPSF debug output is true?
~4~ for inquiry mail me @
