350-401 Exam - Implementing and Operating Cisco Enterprise Network Core Technologies

NEW QUESTION 1

How does Cisco Trustsec enable more access controls for dynamic networking
environments and data centers?

• A. classifies traffic based on advanced application recognition
• B. uses flexible NetFlow
• C. classifies traffic based on the contextual identity of the endpoint rather than its IP address correct
• D. assigns a VLAN to the endpoint

Answer: C

Explanation:
The Cisco TrustSec solution simplifies the provisioning and management of network access control through the use of software-defined segmentation to classify network traffic and enforce policies for more flexible access controls. Traffic classification is based on endpoint identity, not IP address, enabling policy change without net-work redesign.

NEW QUESTION 2

Refer to the exhibit.

Assuming all links are functional, which path does PC1 take to reach DSW1?

• A. PC1 goes from ALSW1 to DSW2 to CORE to DSW1.
• B. PC1 goes from ALSW1 to DSW2 to DSW1.
• C. PC1 goes from ALSW1 to DSW1.
• D. PC1 goes from ALSW1 to DSW2 to ALSW2 to DSW1.

Answer: B

NEW QUESTION 3
DRAG DROP
Drag and drop the solutions that comprise Cisco Cyber Threat Defense from the left onto
the objectives they accomplish on the right.

• A. Yes
• B. Not Mastered

Answer: A

NEW QUESTION 4

A customer has 20 stores located throughout a city. Each store has a single Cisco access point managed by a central WLC. The customer wants to gather analysis for users in each store. Which technique supports these requirements?

• A. angle of arrival
• B. hyperlocation
• C. trilateration
• D. presence

Answer: B

NEW QUESTION 5

An engineer must create an EEM script to enable OSPF debugging in the event the OSPF neighborship goes down. Which script must the engineer apply?

• A. Option A
• B. Option B
• C. Option C
• D. Option D

Answer: C

NEW QUESTION 6

When is the Design workflow used In Cisco DNA Center?

• A. in a greenfield deployment, with no existing infrastructure
• B. in a greenfield or brownfield deployment, to wipe out existing data
• C. in a brownfield deployment, to modify configuration of existing devices in the network
• D. in a brownfield deployment, to provision and onboard new network devices

Answer: A

Explanation:
The Design area is where you create the structure and framework of your network, including the physical topology, network settings, and device type profiles that you can apply to devices throughout your network. Use the Design workflow if you do not already have an existing infrastructure. If you have an existing infrastructure, use the Discovery feature.
https://www.cisco.com/c/en/us/td/docs/cloud-systems-management/network-automation-and-management/dna-center/2-1-2/user_guide/b_cisco_dna_center_ug_2_1_2/b_cisco_dna_center_ug_2_1_1_chapter_011 0.html
Reference: https://synoptek.com/insights/it-blogs/greenfield-vs-brownfield-software- development/“Greenfield development refers to developing a system for a totally new environment and requires development from a clean slate – no legacy code around. It is an approach used when you’re starting fresh and with no restrictions or dependencies.”

NEW QUESTION 7
DRAG DROP
Drag and drop the characteristics from the left onto the switching architectures on the right.

• A. Yes
• B. Not Mastered

Answer: A

NEW QUESTION 8

In which two ways does TCAM differ from CAM? (Choose two.)

• A. CAM is used to make Layer 2 forwarding decisions, and TCAM is used for Layer 3 address lookups.
• B. The MAC address table is contained in CAM, and ACL and QoS Information Is stored in TCAM.
• C. CAM Is used by routers for IP address lookups, and TCAM is used to make Layer 2 forwarding decisions.
• D. CAM is used for software switching mechanisms, and TCAM is used for hardware switching mechanisms.
• E. The MAC address table Is contained in TCAM, and ACL and QoS information is stored in CAM.

Answer: CE

NEW QUESTION 9

Refer to the exhibit.

CR2 and CR3 ate configured with OSPF. Which configuration, when applied to CR1. allows CR1 to exchange OSPF Information with CR2 and CR3 but not with other network devices or on new Interfaces that are added to CR1?
A)

B)

C)

D)

• A. Option A
• B. Option B
• C. Option C
• D. Option D

Answer: D

NEW QUESTION 10

Refer to the exhibit.

Only administrators from the subnet 10.10.10.0/24 are permitted to have access to the router. A secure protocol must be used for the remote access and management of the router instead of clear-text protocols. Which configuration achieves this goal?

• A. Option A
• B. Option B
• C. Option C
• D. Option D

Answer: B

NEW QUESTION 11

Which method ensures the confidentiality ot data exchanged over a REST API?

• A. Use the POST method instead of URL-encoded GET to pass parameters.
• B. Encode sensitive data using Base64 encoding.
• C. Deploy digest-based authentication to protect the access to the API.
• D. Use TLS to secure the underlying HTTP session.

Answer: B

NEW QUESTION 12


Refer to the exhibit. Link 1 uses a copper connection and link 2 uses a fiber connection. The fiber port must be the primary port for all forwarding. The output of the show spanning- tree command on SW2 shows that the fiber port is blocked by Spanning Tree. After entering the spanning-tree port-priority 32 command on G0/1 on SW2, the port remains blocked. Which command should be entered on the ports connected to Link 2 is resolve the issue?

• A. Enter spanning-tree port-priority 64 on SW2
• B. Enter spanning-tree port-priority 224 on SW1.
• C. Enter spanning-tree port-priority 4 on SW2.
• D. Enter spanning-tree port-priority 32 on SW1.

Answer: D

NEW QUESTION 13


Refer to the exhibit. Which command allows hosts that are connected to FastEthernet0/2 to access the Internet?

• A. ip nat inside source list 10 interface FastEthernet0/1 overload
• B. ip nat inside source list 10 interface FastEthernet0/2 overload
• C. ip nat outside source list 10 interface FastEthernet0/2 overload
• D. ip nat outside source static 209.165.200.225 10.10.10.0 overload

Answer: A

NEW QUESTION 14

How can an engineer prevent basic replay attacks from people who try to brute force a system via REST API?

• A. Add a timestamp to the request In the API header.
• B. Use a password hash
• C. Add OAuth to the request in the API header.
• D. UseHTTPS

Answer: B

NEW QUESTION 15


Refer to the exhibit. Which command set enables router R2 to be configured via NETCONF?
A)

B)

C)

D)

• A. Option A
• B. Option B
• C. Option C
• D. Option D

Answer: A

NEW QUESTION 16

How does the EIGRP metric differ from the OSPF metric?

• A. The EIGRP metric is calculated based on bandwidth onl
• B. The OSPF metric is calculated on delay only.
• C. The EIGRP metric is calculated based on delay onl
• D. The OSPF metric is calculated on bandwidth and delay.
• E. The EIGRP metric Is calculated based on bandwidth and dela
• F. The OSPF metric is calculated on bandwidth only.
• G. The EIGRP metric Is calculated based on hop count and bandwidt
• H. The OSPF metric is calculated on bandwidth and delay.

Answer: C

Explanation:
By default, EIGRP metric is calculated: metric = bandwidth + delay
While OSPF is calculated by:
OSPF metric = Reference bandwidth / Interface bandwidth in bps
(Or Cisco uses 100Mbps (108) bandwidth as reference bandwidth. With this bandwidth, our equation would be:
Cost = 108/interface bandwidth in bps)

NEW QUESTION 17

Which function is performed by vSmart in the Cisco SD-WAN architecture?

• A. distribution of IPsec keys
• B. Redistribution between OMP and other routing protocols
• C. facilitation of NAT detection and traversal
• D. execution of localized policies

Answer: B

NEW QUESTION 18


Reler to the exhibit The EtherChannel between SW1 and SW2 is not operational. Which a coon will resolve the issue?

• A. Configure channel-group 1 mode active on GVO and G1 1 of SW2.
• B. Configure twitchport trunk encapsulation dot1q on SW1 and SW2.
• C. Configure channel-group 1 mode active on Gl'O and GM of SW1 .
• D. Configure switchport mode dynamic desirable on SW1 and SW2

Answer: C

NEW QUESTION 19
......