Implementing Cisco Enterprise Network Core Technologies (ENCOR)1,003 questions across 101 pages are complete and free, with no account or card.
1003 questions in this bank
Free access · progress saved on this device
Refer to the exhibit. How does the router handle traffic after the CoPP policy is configured on the router?
Answer: A
I believe the correct answer is A because it is described on the output "Service-policy output: CoPP, so traffic will be policed.
Source: Adapted from community discussion — fernandocirino
What is a characteristic of Cisco StackWise technology?
Answer: D
There are 3 different technologies: VSS: Cat 4500, 6500: std 1/10G, can be geo separated Stackwise: 3750: up to 9 switches, proprietary cables, close range Stackwise Virtual: Cat 9400,9500,9600, some 3850s: geo distribution works, more like VSS.
Source: Adapted from community discussion — djedeen
What is one primary REST security design principle?
Answer: A
- Least Privilege - Fail-Safe Defaults - Economy of Mechanism - Complete Mediation - Open Design - Separation of Privilege - Least Common Mechanism - Psychological Acceptability https://medium.com/strike-sh/rest-security-design-principles-434bd6ee57ea
Source: Adapted from community discussion — aaabattery
Refer to the exhibit. After the code is run on a Cisco IOS-XE router, the response code is 204. What is the result of the script?
Answer: B
HTTP code 2xx means the request was successful. This discard but A and C as possible answers. 204 (No content) indicates the server fulfilled the request but has no body to return. Looking at the script, it just ask to configure the equipment and it expect no response, so B is the answer.
Source: Adapted from community discussion — Manvek
Which time protocol offers security features and utilizes site-local IPv6 multicast addresses?
Answer: C
The Network Time Protocol (NTP) is widely used to synchronize computer clocks in the Internet. This document describes NTP version 4 (NTPv4), which is backwards compatible with NTP version 3 (NTPv3), described in RFC 1305, as well as previous versions of the protocol. NTPv4 includes a modified protocol header to accommodate the Internet Protocol version 6 address family. https://www.rfc-editor.org/rfc/rfc5905.html
Source: Adapted from community discussion — kebkim
Refer to the exhibit. Which command must be applied to Router1 to bring the GRE tunnel to an up/up state?
Answer: A
the given answer is correct because int tunnel 0 is wrong not specified !, G0/1 is not assigned and wont work, only the LO interface works and it matches the ip scheme.
Source: Adapted from community discussion — endy023
DRAG DROP - Drag and drop the characteristics from the left onto the infrastructure deployment models on the right. Select and Place:
This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.
Answer: See figure below
Which statement about a fabric access point is true?
Answer: A
A is correct: "A fabric AP is a local mode AP and needs to be directly connected to the fabric edge switch " https://www.cisco.com/c/dam/en/us/td/docs/cloud-systems-management/network-automation-and-management/dna-center/deploy-guide/cisco-dna-center-sd-access-wl-dg.pdf
Source: Adapted from community discussion — arminio89
Refer to the exhibit. VPN-A sends point-to-point traffic to VPN-B and receives traffic only from VPN-C. VPN-B sends point-to-point traffic to VPN-C and receives traffic only from VPN-A. Which configuration is applied?
Answer: D
Answer is D A. PE-2 vrf VPN-B address-family ipv4 unicast import route-target 100:1 export route-target 100:2 B. PE-3 vrf VPN-B address-family ipv4 unicast import route-target 100:2 export route-target 100:2 C. PE-2 vrf VPN-B address-family ipv4 unicast import route-target 100:2 export route-target 100:2 D. PE-3 vrf VPN-B address-family ipv4 unicast import route-target 100:1 export route-target 100:2
Source: Adapted from community discussion — olaniyijt
A customer wants to use a single SSID to authenticate IoT devices using different passwords. Which Layer 2 security type must be configured in conjunction with Cisco ISE to achieve this requirement?
Answer: C
With the advent of internet of things, the number of devices that connect to the internet is increased multifold. Not all of these devices support 802.1x supplicant and need an alternate mechanism to connect to the internet. One of the security mechanisms, WPA-PSK could be considered as an alternative. With the current configuration, the pre-shared-key is the same for all clients that connect to the same WLAN. In certain deployments such as Educational Institutions, this results in the key being shared to unauthorized users resulting in security breach. Therefore, above mentioned and other requirements lead to the need for provisioning unique pre-shared keys for different clients on a large scale. Identity PSKs are unique pre-shared keys created for individuals or groups of users on the same SSID. No complex configuration required for clients. The same simplicity of PSK, making it ideal for IoT, BYOD, and guest deployments. Supported on most devices, where 802.1X may not, enabling stronger security for IoT. Easily revoke access, for a single device or individual, without affecting everyone else. Thousands of keys can easily be managed and distributed via the AAA server.
Source: Adapted from community discussion — SergeBesse
Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page
350-401 practice, question 371. 1003 questions available.
Version 1.0.0. How we source questions