[April-2024]New Braindump2go 350-401 PDF and 350-401 VCE Dumps(1199-1220)

Braindump2go Guarantee All Exams 100% Pass 

‣ Vendor: Cisco 

One Time! 

‣ Exam Code: 350-401 

‣ Exam Name: Implementing and Operating Cisco Enterprise Network 

Core Technologies (ENCOR) 

‣ New Updated Questions from Braindump2go (Updated in April/2024) 

Visit Braindump2go and Download Full Version 350-401 Exam Dumps 

QUESTION 1199 

Which security feature does stateless authentication and authorization use for REST API calls? 

A. OAuth 2 tokens 

B. API keys 

C. SSL/TLS certificate encryption 

D. cookie-based session authentication 

Answer: A 

QUESTION 1200 

Which port is required to allow APs to join a WLC when directed broadcasts are used on a Cisco IOS switch? 

A. UDP 5246 

B. TCP 5246 

C. TCP 5247 

D. UDP 5247 

Answer: A 

Explanation: 

To discover a WLC, an AP sends a unicast CAPWAP Discovery Request to a controller’s IP address over UDP port 

5246 or a broadcast to the local subnet. 

QUESTION 1201 

Which JSON script is properly formatted? 

350-401 Exam Dumps 350-401 Exam Questions 350-401 PDF Dumps 350-401 VCE Dumps 

https://www.braindump2go.com/350-401.html

Braindump2go Guarantee All Exams 100% Pass One Time! 

A. 

B. 

C. 

D. 

Answer: A 




QUESTION 1202 

An engineer must configure AAA on a Cisco 9800 WLC for central web authentication. Which two commands are 

needed to accomplish this task? (Choose two.) 

A. Device(config)# aaa server radius dynamic-author 

B. (Cisco Controller) > config wlan aaa-override disable < wlan-id > 

C. (Cisco Controller) > config radius acct add 10.10.10.12 1812 SECRET 

D. Device(config-locsvr-da-radius)# client 10.10.10.12 server-key 0 SECRET 

E. (Cisco Controller) > config wlan aaa-override enable < wlan-id > 

Answer: AD 

Explanation: 

https://www.cisco.com/c/en/us/td/docs/wireless/controller/9800/config-guide/b_wl_16_10_cg/central-webauthentication.html 

QUESTION 1203 

Refer to the exhibit. Which command or set of commands configures switch B as the primary root for VLANs 10, 15, 

and 20? 

A. SwitchB(config-mst)# instance 1 vlan 10,20 

B. SwitchB(config)# spanning-tree vlan 10,20 root primary 

C. SwitchB(config)# interface range g0/0/0-15 

SwitchB(config-if)# spanning-tree port-priority 100 

SwitchA (config)# interface range g0/0/0-15 

SwitchA(config-if)# spanning-tree port-priority 200 

D. SwitchB(config)# spanning-tree mst 1 root primary 

Answer: D 

QUESTION 1204 

How does a Type 2 hypervisor function? 

A. It runs on a virtual server and includes its own operating system. 

B. It runs directly on a physical server and includes its own operating system. 

C. It is installed as an application on an already installed operating system. 

D. It enables other operating systems to run on it. 

Answer: C 




QUESTION 1205 

Refer to the exhibit. An engineer attempts to use RESTCONF to configure GigabitEthernet2 on a remote router with IP 

address 192.168.159.10, but the configuration fails. Which configuration is required to complete the action? 

A. 

B. 

C. 

D. 

Answer: B 

QUESTION 1206 

Which element is unique to a Type 2 hypervisor? 

A. host hardware 

B. memory 




C. host OS 

D. VM OS 

Answer: C 

QUESTION 1207 

How do OSPF and EIGRP compare? 

A. Both OSPF and EIGRP use the concept of areas. 

B. OSPF and EIGRP use the same administrative distance. 

C. EIGRP shows successor and feasible successor routes, and OSPF shows all known routes. 

D. EIGRP shows all known routes, and OSPF shows successor and feasible successor routes. 

Answer: C 

QUESTION 1208 

What do Chef and Ansible have in common? 

A. They use YAML as their primary configuration syntax. 

B. They rely on a procedural approach. 

C. They rely on a declarative approach 

D. They are clientless architectures. 

Answer: B 

QUESTION 1209 

Refer to the exhibit. A client requests a new SSID that will use web-based authentication and external RADIUS servers. 

Which Layer 2 security mode must be selected? 

A. WPA2 + WPAS 

B. None 

C. Static WEP 

D. WPA+WPA2 

Answer: B 

Explanation: 

https://www.cisco.com/c/en/us/support/docs/wireless/catalyst-9800-series-wireless-controllers/213920-central-webauthentication-cwa-on-cata.html#toc-hId-2024006454 




QUESTION 1210 

Refer to the exhibit. Users in the Operations VLAN on Switch A are unable to communicate with users in the 

Operations VLAN on Switch B. Which action resolves the issue? 

A. Set the switchport mode to dynamic desirable on Switch B. 

B. Set the EtherChannel mode to LACP on Switch A. 

C. Configure the same allowed VLAN list on Switch A and Switch B. 

D. Set the EtherChannel mode to PAGP on Switch B. 

Answer: A 

QUESTION 1211 

A customer deployed an ISE solution that allows for web authentication and URL redirect enforced from the access 

layer. Due to control plane security concerns, only host IP 10.0.1.25 should have HTTP access to these switches. 

Which configuration must be applied to the switches? 

A. 

B. 




C. 

D. 

Answer: A 

QUESTION 1212 

An engineer must construct an access list for a Cisco Catalyst 9800 Series WLC that will redirect wireless guest users 

to a splash page that is hosted on a Cisco ISE server. The Cisco ISE servers are hosted at 10.9.11.144 and 

10.1.11.141. Which access list meets the requirements? 

A. 




B. 

C. 

D. 

Answer: D 

Explanation: 

https://www.cisco.com/c/en/us/support/docs/wireless/catalyst-9800-series-wireless-controllers/213920-central-webauthentication-cwa-on-cata.html#toc-hId-881505252 

QUESTION 1213 

A script contains the statement "while loop != 999:" Which value terminates the loop? 

A. A value not equal to 999. 

B. A value less than or equal to 999. 

C. A value equal to 999. 

D. A value greater than or equal to 999. 

Answer: C 

Explanation: 

A while continues as far the condition is true. The true condition is "Loop" variable to be different from 999. When the 

"Loop" variable is equal to 999 the condition is false then the while finish. 

QUESTION 1214 

Which method ensures the confidentiality of data exchanged over a REST API? 

A. Use the POST method instead of URL-encoded GET to pass parameters. 




B. Use TLS to secure the underlying HTTP session. 

C. Deploy digest-based authentication to protect the access to the API. 

D. Encode sensitive data using Base64 encoding. 

Answer: B 

QUESTION 1215 

Which two advanced security features are available in next-generation firewalls but were not provided by standard 

firewalls? (Choose two.) 

A. stateful traffic inspection 

B. remote access VPN 

C. network telemetry 

D. intrusion prevention 

E. application control 

Answer: DE 

QUESTION 1216 

Which wireless deployment mode uses a Flex architecture and allows Layer 2 roaming between APs without a physical 

wireless controller? 

A. autonomous mode 

B. fabric 

C. unified 

D. Cisco Mobility Express 

Answer: D 

QUESTION 1217 

When should the MAC authentication bypass feature be used on a switch port? 

A. when the attached host supports 802.1X and must authenticate itself based on its MAC address 

instead of user credentials 

B. when the attached host supports limited 802.1X 

C. when authentication is required, but the attached host does not support 802.1X 

D. when authentication should be bypassed for select hosts based on their MAC address 

Answer: C 

Explanation: 

MAC Authentication Bypass (MAB) is an access control technique that enables port-based access control using the 

MAC address of an endpoint, and it is typically used as a fallback mechanism to 802.1x. 

QUESTION 1218 

Drag and Drop Question 

Drag and drop the snippets onto the blanks within the code to construct a script that blocks a MAC address. 




Answer: 

QUESTION 1219 

Which resource must the hypervisor make available to the virtual machines? 

A. bandwidth 

B. IP address 

C. processor 

D. secure access 

Answer: C 

QUESTION 1220 

Which two items are found in YANG data models? (Choose two.) 

A. HTTP return codes 

B. rpc statements 

C. JSON schema 

D. container statements 

E. XML schema 

Answer: BD

[April-2024]New Braindump2go 350-401 PDF and 350-401 VCE Dumps(1199-1220)

Create successful ePaper yourself

Delete template?

Save as template?