CCNP ENCOR 350-401 NEWEST 2025 EXAM
QUESTIONS AND CORRECT ANSWERS | A+ GRADE
Which function does a fabric edge node perform in an SD-Access deployment?
A. Connects endpoints to the fabric and forwards their traffic.
B. Encapsulates end-user data traffic into LISP.
C. Connects the SD-Access fabric to another fabric or external Layer 3 networks.
D. Provides reachability between border nodes in the fabric underlay. - ans -A
Which privilege level is assigned to VTY users?
A. 1
B. 7
C. 13
D. 15 - ans -A
What is the difference between a RIB and a FIB?
A. The FIB is populated based on RIB content.
B. The RIB maintains a minor image of the FIB.
C. The RIB is used to make IP source prefix-based switching decisions.
D. The FIB is where all IP routing information is stored - ans -A
Which requirement for an Ansiblemanaged node is true?
A. It must have an SSH server running.
B. It must be a Linux server or a Cisco device.
C. It must support ad hoc commands.
D. It must have an Ansible Tower installed - ans -B
A client device fails to see the enterprise SSID, but other client devices are
connected to it. What is the cause of this issue?
A. The client has incorrect credentials stored for the configured broadcast SSID.
B. The hidden SSID was not manually configured on the client. C. The broadcast
SSID was not manually configured on the client.
,D. The client has incorrect credentials stored for the configured hidden SSID - ans
-B
Which two descriptions of FlexConnect mode for Cisco APs are true? (Choose
two.)
A. APs that operate in FlexConnect mode cannot detect rogue APs.
B. When connected to the controller, FlexConnect APs can tunnel traffic back to
the controller.
C. FlexConnect mode is used when the APs are set up in a mesh environment and
used to bridge between each other.
C. FlexConnect mode is a feature that is designed to allow specified CAPWAP-
enabled APs to exclude themselves from managing data traffic between dents
and infrastructure.
D. FlexConnect mode is a wireless solution for branch office and remote office
deployments - ans -BD
Which OSPF network types are compatible and allow communication through the
two peering devices?
A. point-to-multipoint to nonbroadcast
B. broadcast to nonbroadcast
C. point-to-multipoint to broadcast
D. broadcast to point-to-point - ans -B
Which NGFW mode blocks flows crossing the firewall?
A. tap
B. inline
C. passive
D. inline tap - ans -B
Which statement about route targets is true when using VRF-Lite?
A. Route targets control the import and export of routes into a customer routing
table.
B. When BGP is configured, route targets are transmitted as BGP standard
communities.
C. Route targets allow customers to be assigned overlapping addresses.
, D. Route targets uniquely identify the customer routing table - ans -A
How does Cisco TrustSec enable more flexible access controls for dynamic
networking environments and data centers?
A. uses flexible NetFlow
B. assigns a VLAN to the endpoint
C. classifies traffic based on advanced application recognition D. classifies traffic
based on the contextual identity of the endpoint rather than its IP address - ans -
D
Which statement about the OPSF debug output is true?
A. The output displays OSPF hello messages which router R1 has sent or received
on interface Fa0/1.
B. The output displays OSPF messages which router R1 has sent or received on all
interfaces.
C. The output displays OSPF messages which router R1 has sent or received on
interface Fa0/1.
D. The output displays OSPF hello and LSACK messages which router R1 has sent
or received - ans -A
Which LISP infrastructure device provides connectivity between non-LISP sites
and LISP sites by receiving non-LISP traffic with a LISP site destination?
A. PITR
B. map resolver
C. map server
D. PETR - ans -A
Which two protocols are used with YANG data models? (Choose two.)
A. TLS
B. RESTCONF
C. SSH
D. NETCONF
E. HTTPS - ans -BD
QUESTIONS AND CORRECT ANSWERS | A+ GRADE
Which function does a fabric edge node perform in an SD-Access deployment?
A. Connects endpoints to the fabric and forwards their traffic.
B. Encapsulates end-user data traffic into LISP.
C. Connects the SD-Access fabric to another fabric or external Layer 3 networks.
D. Provides reachability between border nodes in the fabric underlay. - ans -A
Which privilege level is assigned to VTY users?
A. 1
B. 7
C. 13
D. 15 - ans -A
What is the difference between a RIB and a FIB?
A. The FIB is populated based on RIB content.
B. The RIB maintains a minor image of the FIB.
C. The RIB is used to make IP source prefix-based switching decisions.
D. The FIB is where all IP routing information is stored - ans -A
Which requirement for an Ansiblemanaged node is true?
A. It must have an SSH server running.
B. It must be a Linux server or a Cisco device.
C. It must support ad hoc commands.
D. It must have an Ansible Tower installed - ans -B
A client device fails to see the enterprise SSID, but other client devices are
connected to it. What is the cause of this issue?
A. The client has incorrect credentials stored for the configured broadcast SSID.
B. The hidden SSID was not manually configured on the client. C. The broadcast
SSID was not manually configured on the client.
,D. The client has incorrect credentials stored for the configured hidden SSID - ans
-B
Which two descriptions of FlexConnect mode for Cisco APs are true? (Choose
two.)
A. APs that operate in FlexConnect mode cannot detect rogue APs.
B. When connected to the controller, FlexConnect APs can tunnel traffic back to
the controller.
C. FlexConnect mode is used when the APs are set up in a mesh environment and
used to bridge between each other.
C. FlexConnect mode is a feature that is designed to allow specified CAPWAP-
enabled APs to exclude themselves from managing data traffic between dents
and infrastructure.
D. FlexConnect mode is a wireless solution for branch office and remote office
deployments - ans -BD
Which OSPF network types are compatible and allow communication through the
two peering devices?
A. point-to-multipoint to nonbroadcast
B. broadcast to nonbroadcast
C. point-to-multipoint to broadcast
D. broadcast to point-to-point - ans -B
Which NGFW mode blocks flows crossing the firewall?
A. tap
B. inline
C. passive
D. inline tap - ans -B
Which statement about route targets is true when using VRF-Lite?
A. Route targets control the import and export of routes into a customer routing
table.
B. When BGP is configured, route targets are transmitted as BGP standard
communities.
C. Route targets allow customers to be assigned overlapping addresses.
, D. Route targets uniquely identify the customer routing table - ans -A
How does Cisco TrustSec enable more flexible access controls for dynamic
networking environments and data centers?
A. uses flexible NetFlow
B. assigns a VLAN to the endpoint
C. classifies traffic based on advanced application recognition D. classifies traffic
based on the contextual identity of the endpoint rather than its IP address - ans -
D
Which statement about the OPSF debug output is true?
A. The output displays OSPF hello messages which router R1 has sent or received
on interface Fa0/1.
B. The output displays OSPF messages which router R1 has sent or received on all
interfaces.
C. The output displays OSPF messages which router R1 has sent or received on
interface Fa0/1.
D. The output displays OSPF hello and LSACK messages which router R1 has sent
or received - ans -A
Which LISP infrastructure device provides connectivity between non-LISP sites
and LISP sites by receiving non-LISP traffic with a LISP site destination?
A. PITR
B. map resolver
C. map server
D. PETR - ans -A
Which two protocols are used with YANG data models? (Choose two.)
A. TLS
B. RESTCONF
C. SSH
D. NETCONF
E. HTTPS - ans -BD
