Implementing Cisco Enterprise Network Core Technologies (ENCOR)1,003 questions across 101 pages are complete and free, with no account or card.
1003 questions in this bank
Free access · progress saved on this device
Which IEEE standard provides the capability to permit or deny network connectivity based on the user or device identity?
Answer: D
A. 802.1d: Original Spanning Tree Protocol for loop prevention. B. 802.1w: Rapid Spanning Tree Protocol for faster convergence. C. 802.1q: VLAN tagging standard for network segmentation. D. 802.1x: Port-based network access control based on identity.
Source: Adapted from community discussion — due
Refer to the exhibit.
The CPE router acts as a DHCP server for the locally attached LAN. After DHCP snooping is enabled on the switch where the DHCP clients are connected, clients are unable to obtain their configuration from the DHCP server. What is the cause of this issue?
Answer: C
With the information available, option C seems to be the most relevant: C. The DHCP server drops DHCP packets carrying Option 82 and an empty relay agent IP address. This is because the DHCP server itself is on the router (as evidenced by the presence of the DHCP pool configuration), and there's no need for an ip helper-address on the local router's interface for DHCP server functionality. The error message indicates an issue with DHCP Option 82, which suggests that the problem lies in how the DHCP server or relay agent is handling the packets, rather than a missing DHCP relay configuration. In practical scenarios, when DHCP snooping is configured on a switch, the switch inserts information into the DHCP packets (Option 82) to indicate where the packets came from. If the DHCP server is not expecting or is not configured to handle Option 82, it may drop the packets, hence the error message about inconsistent relay information. This is consistent with the symptoms described in the debug output provided.
Source: Adapted from community discussion — HammyHamster
SIMULATION - Guidelines - This is a lab item in which tasks will be performed on virtual devices. • Refer to the Tasks tab to view the tasks for this lab item. • Refer to the Topology tab to access the device console(s) and perform the tasks. • Console access is available for all required devices by clicking the device icon or using the tab(s) above the console window. • All necessary preconfigurations have been applied. • Do not change the enable password or hostname for any device. • Save your configurations to NVRAM before moving to the next item. • Click Next at the bottom of the screen to submit this lab and move to the next question • When Next is clicked, the lab closes and cannot be reopened. Topology -
Tasks - Configure OSPF on all three routers according to the topology to achieve these goals: 1. Configure OSPF without using the “network” statement under the “router ospf” configuration section. 2. Ensure that all networks are advertised between the routers. 3. Configure a single command under each Ethernet interface to prevent OSPF neighbors from participating in a DR/BDR election and ensure that no extra host routes are generated.
This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.
Answer: See figure below
I don't believe the lo0 need ip ospf network point-to-point. It works correctly without it. If someone else believes the loopbacks need it, please let us know. Only the interfaces between the routers need the ip ospf network point-to-point command.
Source: Adapted from community discussion — NewLife77
Which solution simplifies management of secure access to network resources?
Answer: C
the solution that specifically emphasizes the automation and central management of network access control, leveraging RADIUS attributes (AV pairs), is Cisco Identity Services Engine (ISE). ISE not only simplifies secure access management but also integrates well with existing network infrastructure to provide comprehensive access control and policy enforcement. Therefore, while TrustSec (D) is an important solution for managing secure access through logical grouping and policy assignment, the best answer in terms of simplifying management specifically through automation and leveraging RADIUS AV pairs is C
Source: Adapted from community discussion — Shri_Fcb10
What is the recommended minimum SNR for data applications on wireless networks?
Answer: A
What does the Cisco DNA Center Authentication API provide?
Answer: C
The Cisco DNA Center Authentication API provides an access token that allows external applications and services to make authorized API calls to Cisco DNA Center. This access token acts as a secure authentication mechanism, ensuring that only authorized clients can interact with the Cisco DNA Center APIs.
Source: Adapted from community discussion — eddgg
What does the destination MAC on the outer MAC header identify in a VXLAN packet?
Answer: B
Question ask for outer MAC header. The outer MAC header is the Ethernet header added to encapsulated packets for transport across the underlay network. It guides the packet within the physical network. The inner MAC header is from the original packet and guides the packet's delivery within the overlay network. destination MAC address in the outer MAC header could indeed represent the next hop device, which is the device responsible for forwarding the packet to its final destination. This is commonly seen in standard Ethernet forwarding. destination MAC address in the inner MAC header should be the leaf switch.
Source: Adapted from community discussion — due
What does the statement print(format(0.8, '.0%')) display?
Answer: D
The statement print(format(0.8, '.2%')) will display the value 0.8 as a percentage with a precision of 2 decimal places, resulting in the output '80.00%'.
Source: Adapted from community discussion — due
Refer to the exhibit. A network engineer configures a GRE tunnel and enters the show interface tunnel command. What does the output confirm about the configuration?
Answer: C
cisco(config-if)#do s runn int tun111 Building configuration... Current configuration : 116 bytes ! interface Tunnel111 ip address 1.1.1.1 255.255.255.252 tunnel source Loopback0 tunnel destination 2.2.2.2 end cisco(config-if)# cisco(config-if)#do s int tun111 | i trans Tunnel protocol/transport GRE/IP ...
Source: Adapted from community discussion — nushadu
An engineer must implement a configuration to allow a network administrator to connect to the console port of a router and authenticate over the network. Which command set should the engineer use?
Answer: B
network means Radius, TACACS+ So correct answer should be: aaa new-model aaa authentication login default group radius or aaa new-model aaa authentication login console group radius line con 0 aaa authentication login console
Source: Adapted from community discussion — andyforreg
Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page
350-401 practice, question 781. 1003 questions available.
Version 1.0.0. How we source questions