Question 391 · 1003 in bank
What does a northbound API accomplish?
Show answer
Answer: A
350-401ProfessionalCiscoAll questions freePage 40 of 101
350-401 practice questions 391–400
Implementing Cisco Enterprise Network Core Technologies (ENCOR)1,003 questions across 101 pages are complete and free, with no account or card.
Official study references
1003 questions in this bank
Free access · progress saved on this device
Question 392 · 1003 in bank
In a Cisco SD-WAN solution, how is the health of a data plane tunnel monitored?
Show answer
Answer: C
Question 393 · 1003 in bank
Which solution do IaaS service providers use to extend a Layer 2 segment across a Layer 3 network?
Show answer
Answer: A
Explanation
The answer is **A. VXLAN**. VXLAN is a network virtualization technology that allows Layer 2 networks to be extended across Layer 3 networks. It uses a MAC-in-UDP encapsulation scheme to create a Layer 2 tunnel over a Layer 3 network. IaaS service providers use VXLAN to extend Layer 2 segments across their networks so that customers can have a single Layer 2 network even if their devices are located in different locations. This allows customers to easily move their devices between locations without having to reconfigure their networks. The other options are not correct: * VTEP (Virtual Tunnel Endpoint) is a device that encapsulates and decapsulates VXLAN traffic. * VRF (Virtual Routing and Forwarding) is a technology that allows multiple routing tables to exist on a single router. * VLAN (Virtual Local Area Network) is a Layer 2 technology that segments a network into multiple broadcast domains. I hope this helps!
Source: Adapted from community discussion — shefo1
Question 394 · 1003 in bank
By default, which virtual MAC address does HSRP group 16 use?
Show answer
Answer: C
Explanation
16 = 00010000 in binary then split into base16 so 0001 and 0000. Convert those individual hex bits back into decimal. so 1|0 = answer is 10
Source: Adapted from community discussion — mgiuseppe86
Question 395 · 1003 in bank
Refer to the exhibit. Why was the response code generated?
Show answer
Answer: B
Explanation
The given answer is correct. If the credentials were bad, the return code would have been 401 instead. 403 implies that the creds were good, but the permissions associated with the account in question limit what resources it can access.
Source: Adapted from community discussion — jdholmes423
Question 396 · 1003 in bank
Refer the exhibit. Which configuration elects SW4 as the root bridge for VLAN 1 and puts G0/2 on SW2 into a blocking state?
Show answer
Answer: A
Explanation
https://community.cisco.com/t5/routing/spanning-tree-with-port-priority/td-p/1815059 "You just configure "port priority" on upstream switches on designated ports or modify "port cost" on downstream switches on root ports" https://packetlife.net/blog/2008/sep/5/spanning-tree-port-costs/ The default cost of the 1 Gig link would be 4. Changing the cost to 128 makes the link less preferred.
Source: Adapted from community discussion — HungarianDish_111
Question 397 · 1003 in bank
What happens when a FlexConnect AP changes to standalone mode?
Show answer
Answer: D
Explanation
When a FlexConnect access point enters standalone mode, it disassociates all clients that are on centrally switched WLANs. [ not all clients, locally switched WLAN clients stay connected] Controller-dependent activities, such as network access control (NAC) and web authentication (guest access), are disabled, and the access point does not send any intrusion detection system (IDS) reports to the controller. Most radio resource management (RRM) features (such as neighbor discovery; noise, interference, load, and coverage measurements; use of the neighbor list; and rogue containment and detection) are disabled. However, a FlexConnect access point supports dynamic frequency selection in standalone mode. https://www.cisco.com/c/en/us/td/docs/wireless/controller/7-2/configuration/guide/cg/cg_flexconnect.html
Source: Adapted from community discussion — dnjJ56
References
Question 398 · 1003 in bank
If the maximum power level assignment for global TPC 802.11a/n/ac is configured to 10 dBm. which power level effectively doubles the transmit power?
Show answer
Answer: A
Explanation
3 dB of gain = +3 dB = doubles signal strength (Let’s say, the base is P. So 10*log10(P/P) = 10*log101 = 0 dB and 10*log10(2P/P) = 10*log10(2) = 3dB -> double signal)
Source: Adapted from community discussion — jj970us
Question 399 · 1003 in bank
An engineer must create an EEM script to enable OSPF debugging in the event the OSPF neighborship goes down. Which script must the engineer apply?
Show answer
Answer: A
Explanation
This is the correct explanation of why A is the correct answer: There are 4 options, but only 2 has "FULL to DOWN" which is what we are tying to catch. Out of these two only A begin the script with "enable" which is required in EEM because the applet assumes that the user is in EXEC mode, not privileged EXEC or config mode.
Source: Adapted from community discussion — x3rox
References
Question 400 · 1003 in bank
A customer wants to provide wireless access to contractors using a guest portal on Cisco ISE. The portal is also used by employees. A solution is implemented, but contractors receive a certificate error when they attempt to access the portal. Employees can access the portal without any errors. Which change must be implemented to allow the contractors and employees to access the portal?
Show answer
Answer: A
Explanation
"It is recommended to use the Company Internal CA for Admin and EAP certificates, and a publicly-signed certificate for Guest/Sponsor/Hotspot/etc portals. The reason is that if a user or guest comes onto the network and ISE portal uses a privately-signed certificate for the Guest Portal, they get certificate errors or potentially have their browser block them from the portal page. To avoid all that, use a publicly-signed certificate for Portal use to ensure better user experience". Thanks @jj970us for the reference - https://www.cisco.com/c/en/us/support/docs/security/identity-services-engine/215621-tls-ssl-certificates-in-ise.html
Source: Adapted from community discussion — zpacket
References
Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page
350-401 practice, question 391. 1003 questions available.
About this question bank
Version 1.0.0. How we source questions