Get New 2022 Valid Practice CCNP Enterprise 350-401 Q&A - Testing Engine
350-401 Dumps PDF - 100% Passing Guarantee
What are the prestigious career opportunities?
With CCIE Enterprise Infrastructure, CCIE Enterprise Wireless, and/or CCNP Enterprise under your belt, you can boost your career to a higher level. Thus, the certified professionals can take up various positions, including an Enterprise IT Infrastructure Architect, an Infrastructure Automation Engineer, a Director of Infrastructure, an IT Infrastructure Security Engineer, a Senior Enterprise Architect, a CCIE Consultant, a Principal Wireless Network Engineer, an Infrastructure Solutions Architect, and many more. The average salary can be up to $120,000 per year, depending on your job role, related tasks, and working experience.
Automation (15%)
- Comparing the agentless vs. agent orchestration tools, such as SaltStack, Chef, Ansible, and Puppet;
- Describing APIs for vManage and Cisco DNA Center;
- Constructing the valid file utilizing the JSON code;
- Constructing the EEM applet to automate data collection, troubleshooting, or configuration.
- Interpreting the results in payload and REST API response codes with the usage of RESTCONF and Cisco DNA Center;
- Describing the high-level principles and benefits of the Yet Another Next Generation (YANG) language;
NEW QUESTION 51 
Refer to the exhibit. An engineer must deny HTTP traffic from host A to host V while allowing all other communication between the hosts, drag and drop the commands into the configuration to achieve these results.
Some commands may be used more than once. Not all commands are used.
Answer:
Explanation:
Explanation
Deny
Permit
Action drop
Action forward
NEW QUESTION 52
Refer to the exhibit.
Which outcome is achieved with this Python code?
- A. displays the output of the show command in an unformatted way
- B. connects to a Cisco device using SSH and exports the routing table information
- C. displays the output of the show command in a formatted way
- D. connects to a Cisco device using Telnet and exports the routing table information
Answer: C
NEW QUESTION 53
Which feature must be configured to allow packet capture over Layer 3 infrastructure'?
- A. ERSPAN
- B. RSPAN
- C. IPSPAN
- D. VSPAN
Answer: A
Explanation:
Explanation
Encapsulated remote SPAN (ERSPAN): encapsulated Remote SPAN (ERSPAN), as the name says, brings generic routing encapsulation (GRE) for all captured traffic and allows it to be extended across Layer 3 domains.
NEW QUESTION 54
Which outbound access list, applied to the WAN interface of a router, permits all traffic except for http traffic sourced from the workstation with IP address 10.10.10.1?
A)
B)
C)
D)
- A. Option A
- B. Option B
- C. Option D
- D. Option C
Answer: A
NEW QUESTION 55
Drag and drop the REST API authentication method from the left to the description on the right.
Answer:
Explanation:
Explanation
NEW QUESTION 56
Refer to the exhibit.
What is the result when a switch that is running PVST+ is added to this network?
- A. Spanning tree is disabled automatically on the network
- B. Both switches operate in the PVST+ mode
- C. Both switches operate in the Rapid PVST+ mode.
- D. DSW2 operates in Rapid PVST+ and the new switch operates in PVST+
Answer: D
NEW QUESTION 57
An engineer must configure HSRP group 300 on a Cisco IOS router. When the router is functional, it must be the active HSRP router The peer router has been configured using the default priority value. Which three commands are required? (Choose three.)
- A. standby 300 priority 90
- B. standby version 1
- C. standby 300 priority 110
- D. standby version 2
- E. standby 300 timers 1 110
- F. standby 300 preempt
Answer: C,D,F
NEW QUESTION 58
Drag and drop the Qos mechanisms from the left to the correct descriptions on the right
Answer:
Explanation:
Explanation
NEW QUESTION 59
Refer to the exhibit.
The connection between SW1 and SW2 is not operational. Which two actions resolve the issue? (Choose two.)
- A. configure switchport mode dynamic desirable on SW2
- B. configure switchport nonegotiate on SW2
- C. configure switchport mode access on SW2
- D. configure no switchport nonegotiate on SW1
- E. configure switchport mode trunk on SW2
Answer: A,D
Explanation:
Explanation
From the outputs (line: "Administrative Mode: dynamic auto") we notice that both interfaces were configured with "dynamic auto" mode so they cannot form a trunking link. We need to change one of them to "dynamic desirable" mode to activate the trunk -> Answer D is correct.
Another problem is SW1 was set to "nonegotiate" (from the line: "Negotiation of Trunking: Off") which prevents DTP negotiation packets from being sent out the interface. We need to re-enable with the "no switchport nonegotiate" command -> Answer E is correct.
For your reference, the table below lists trunking condition:
DTP_modes.png
NEW QUESTION 60 
Refer to the exhibit. Which two commands are needed to allow for full reachability between AS 1000 and AS
2000? (Choose two)
- A. R2#network 19.168.0.0 mask 255.255.0.0
- B. R1#network 19.168.0.0 mask 255.255.0.0
- C. R2#network 209.165.201.0 mask 255.255.192.0
- D. R1#no network 10.0.0.0 255.255.255.0
- E. R2#no network 10.0.0.0 255.255.255.0
Answer: A,E
NEW QUESTION 61
Based on this interface configuration, what is the expected state of OSPF adjacency?
- A. FULL/BDR on R1 and FULL/BDR on R2
- B. 2WAY/DROTHER on both routers
- C. not established
- D. Full on both routers
Answer: C
Explanation:
Explanation
On Ethernet interfaces the OSPF hello intervl is 10 second by default so in this case there would be a Hello interval mismatch -> the OSPF adjacency would not be established.
NEW QUESTION 62
Refer to the exhibit.
What is the effect of introducing the sampler feature into the Flexible NetFlow configuration on the router?
- A. CPU and memory utilization are reduced when compared with what is required for full NetFlow.
- B. The resolution of sampling data increases, but it requires more performance from the router.
- C. NetFlow updates to the collector are sent 50% less frequently.
- D. Every second IPv4 packet is forwarded to the collector for inspection.
Answer: C
Explanation:
Reference: https://github.com/aabc/pkt-netflow
NEW QUESTION 63
Drag and drop the virtual components from the left onto their deceptions on the right.
Answer:
Explanation:
Explanation
Table Description automatically generated
NEW QUESTION 64
Refer to the exhibit.
What does the snippet of code achieve?
- A. It creates a temporary connection to a Cisco Nexus device and retrieves a token to be used for API calls.
- B. It creates an SSH connection using the SSH key that is stored, and the password is ignored.
- C. It opens a tunnel and encapsulates the login information, if the host key is correct.
- D. It opens an ncclient connection to a Cisco Nexus device and maintains it for the duration of the context.
Answer: D
Explanation:
Explanation
ncclient is a Python library that facilitates client-side scripting and application development around the NETCONF protocol.
The above Python snippet uses the ncclient to connect and establish a NETCONF session to a Nexus device (which is also a NETCONF server).
NEW QUESTION 65
What NTP Stratum level is a server that is connected directly to an authoritative time source?
- A. Stratum 0
- B. Stratum 14
- C. Stratum 15
- D. Stratum 1
Answer: D
Explanation:
Explanation
The stratum levels define the distance from the reference clock. A
reference clock is a stratum 0 device that is assumed to be accurate and has little or no delay associated with it. Stratum 0 servers cannot be used on the network but they are directly connected to computers which then operate as stratum-1 servers. A stratum 1 time server acts as a primary network time standard.
A stratum 2 server is connected to the stratum 1 server; then a stratum 3 server is connected to the stratum 2 server and so on. A stratum 2 server gets its time via NTP packet requests from a stratum 1 server. A stratum 3 server gets its time via NTP packet requests from a stratum-2 server... A stratum server may also peer with other stratum servers at the same level to provide more stable and robust time for all devices in the peer group (for example a stratum 2 server can peer with other stratum 2 servers).
NTP uses the concept of a stratum to describe how many NTP hops away a
machine is from an authoritative time source. A stratum 1 time server
typically has an authoritative time source (such as a radio or atomic clock, or a Global Positioning System (GPS) time source) directly attached, a stratum 2 time server receives its time via NTP from a stratum 1 time server, and so on.
NEW QUESTION 66
Which unit measures the power of a radio signal with reference to 1 milliwatt?
- A. dBw
- B. dBi
- C. mW
- D. dBm
Answer: C
NEW QUESTION 67
Refer to the exhibit.
Link1 is a copper connection and Link2 is a fiber connection. The fiber port must be the primary port for all forwarding. The output of the show spanning-tree command on SW2 shows that the fiber port is blocked by spanning tree. An engineer enters the spanning- tree port-priority 32 command on GO/1 on SW2, but the port remains blocked. Which command should be entered on the ports that are connected to Link2 to resolve the issue?
- A. Enter spanning-tree port-priority 64 on SW2.
- B. Enter spanning-tree port-priority 32 on SW1.
- C. Enter spanning-tree port-priority 224 on SW1.
- D. Enter spanning-tree port-priority 4 on SW2.
Answer: B
NEW QUESTION 68
An engineer uses the Design workflow to create a new network infrastructure in Cisco DNA Center. How is the physical network device hierarchy structured?
- A. by role
- B. by location
- C. by organization
- D. by hostname naming convention
Answer: B
Explanation:
NEW QUESTION 69
Refer to the exhibit.
A GRE tunnel has been created between HO and BR routers.
What is the tunnel IP on the HQ router?
- A. 209.165.202.130
- B. 209.165.202.134
- C. 10.111.111.1
- D. 10.111.111.2
Answer: C
Explanation:
Explanation
In the above output, the IP address of "209.165.202.130" is the tunnel source IP while the IP 10.111.1.1 is the tunnel IP address.
An example of configuring GRE tunnel is shown below:
NEW QUESTION 70
Refer to the exhibit. A network engineer configures NAT on R1 and enters me show command to verity the configuration What toes the output confirm?
- A. The first pocket triggered NAT to add on entry to NAT table
- B. R1 is configured with NAT overload parameters
- C. R1 to configured with PAT overload parameters
- D. A Telnet from 160.1.1 1 to 10.1.1.10 has been initiated.
Answer: A
NEW QUESTION 71
Which function does a fabric edge node perform in an SD-Access deployment?
- A. Provides reachability border nodes in the fabric underlay
- B. Connects the SD-Access fabric to another fabric or external Layer 3 networks
- C. Connects endpoints to the fabric and forwards their traffic
- D. Encapsulates end-user data traffic into LISP.
Answer: C
Explanation:
Explanation
There are five basic device roles in the fabric overlay:
+ Control plane node: This node contains the settings, protocols, and mapping tables to provide the endpoint-to-location (EID-to-RLOC) mapping system for the fabric overlay.
+ Fabric border node: This fabric device (for example, core layer device) connects external Layer
3 networks to the SDA fabric.
+ Fabric edge node: This fabric device (for example, access or distribution layer device) connects wired endpoints to the SDA fabric.
+ Fabric WLAN controller (WLC): This fabric device connects APs and wireless endpoints to the SDA fabric.
+ Intermediate nodes: These are intermediate routers or extended switches that do not provide any sort of SD-Access fabric role other than underlay services.
NEW QUESTION 72
Which TCP setting is tuned to minimize the risk of fragmentation on a GRE/IP tunnel?
- A. MSS
- B. Window size
- C. MRU
- D. MTU
Answer: A
Explanation:
Explanation
The TCP Maximum Segment Size (TCP MSS) defines the maximum amount of data that a host is willing to accept in a single TCP/IP datagram. This TCP/IP datagram might be fragmented at the IP layer. The MSS value is sent as a TCP header option only in TCP SYN segments. Each side of a TCP connection reports its MSS value to the other side. Contrary to popular belief, the MSS value is not negotiated between hosts. The sending host is required to limit the size of data in a single TCP segment to a value less than or equal to the MSS reported by the receiving host.
TCP MSS takes care of fragmentation at the two endpoints of a TCP connection, but it does not handle the case where there is a smaller MTU link in the middle between these two endpoints.
PMTUD was developed in order to avoid fragmentation in the path between the endpoints. It is
NEW QUESTION 73
Refer to the exhibit.
Which configuration change ensures that R1 is the active gateway whenever it is in a functional state for the 172.30.110.0/24 network?
- A. Option B
- B. Option C
- C. Option A
- D. Option D
Answer: D
NEW QUESTION 74
What are two differences between the RIB and the FIB? (Choose two.)
- A. The FIB is derived from the data plane, and the RIB is derived from the FIB.
- B. The RIB is derived from the control plane, and the FIB is derived from the RIB.
- C. FIB is a database of routing prefixes, and the RIB is the information used to choose the egress interface for each packet.
- D. The RIB is a database of routing prefixes, and the FIB is the Information used to choose the egress interface for each packet.
- E. The FIB is derived from the control plane, and the RIB is derived from the FIB.
Answer: B,D
Explanation:
Reference:
The Forwarding Information Base (FIB) contains destination reachability information as well as next hop information. This information is then used by the router to make forwarding decisions. The FIB allows for very efficient and easy lookups
NEW QUESTION 75
......
350-401 Braindumps Real Exam Updated on Feb 17, 2022 with 305 Questions: https://braindumps.actual4exams.com/350-401-real-braindumps.html