Summer Sale Limited Time 75% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code = simple75

Pass the Cisco CCNP Enterprise 350-401 Questions and answers with Dumpstech

Home
Cisco
CCNP Enterprise
350-401
350-401 Questions and Answers

Exam 350-401 Premium Access

View all detail and faqs for the 350-401 exam

Go to Exam

Practice at least 50% of the questions to maximize your chances of passing.

Viewing page 14 out of 14 pages

Viewing questions 131-140 out of questions

Questions # 131:

What is the intent API in Cisco Catalyst Center (formerly DNA Center)?

Options:

northbound consumer-facing RESTful API, which enables network discovery and configuration management

southbound consumer-facing RESTful API. which enables network discovery and configuration management

interface between the controller and the network devices, which enables network discovery and configuration management

westbound interface, which allows the exchange of data such as ITSM. IPAM, and reporting information

Answer

Questions # 132:

Question # 132

Refer to the exhibit. What is achieved by this Python script?

Options:

It configures access list statements

It reads access list statements into a dictionary list

It displays access list statements on a terminal screen.

It converts access list statements to a human-readable format.

Answer

Questions # 133:

What is the function of the statement " import actions " in this script?

Question # 133

Options:

It imports the functions that are not available natively in Python

It imports the functions of a third-party module

It imports a Python module

It imports an external reference

Answer

Questions # 134:

An engineer is configuring a new SSID to present users with a splash page for authentication. Which WLAN Layer 3 setting must be configured to provide this functionally?

Options:

CCKM

WPA2 policy

Local Policy

Web Policy

Answer

Questions # 135:

Which solution supports end-to-end line-rate encryption between two sites?

Options:

TrustSec

MACsec

IPsec

GRE

Answer

Questions # 136:

Question # 136

Refer to the exhibit. A network engineer checks connectivity between two routers. The engineer can ping the remote endpoint but cannot see an ARP entry. Why is there no ARP entry?

Options:

Interface FastEthernet0/0 is configured in VRF CUST-A, so the ARP entry is also in that VRF.

When VRFs are used, ARP protocol is disabled in the global routing table.

When VRFs are used, ARP protocol must be enabled in each VRF.

The ping command must be executed in the global routing table.

Answer

Explanation

The correct answer is A. Interface FastEthernet0/0 is configured in VRF CUST-A, so the ARP entry is also in that VRF.

In Cisco VRF implementations, ARP entries are maintained separately per VRF, not in the global routing table. Cisco documentation states that with Multi-VRF CE, ARP entries are learned in separate VRFs, and the user can display them for a specific VRF. Cisco also documents the command show ip arp vrf < vrf-name > to display the ARP table for a specified VRF.

That means if the interface belongs to VRF CUST-A, a normal global show ip arp 192.168.12.2 may not display the entry, even though ping vrf CUST-A 192.168.12.2 succeeds. The ARP entry exists, but it is stored under the CUST-A VRF ARP table, not the global ARP table.

B. When VRFs are used, ARP protocol is disabled in the global routing table. This is incorrect. ARP is not disabled; it is simply VRF-aware and tracked separately per VRF.

C. When VRFs are used, ARP protocol must be enabled in each VRF. This is incorrect. There is no separate requirement to manually enable ARP in each VRF for normal operation in this context.

D. The ping command must be executed in the global routing table. This is incorrect because Cisco supports pinging within a specific VRF, and the exhibit already shows the use of ping vrf CUST-A .

ENCOR exam point:

With VRF-aware services, always remember:

Routing table = per VRF

ARP table = per VRF

Verification commands often require the VRF keyword

Questions # 137:

Refer to the exhibit.

Question # 137

An engineer attempts to connect to another device from Route1’s console port. Which configuration is needed to allow telnet connections?

Question # 137

Options:

Option A

Option B

Option C

Option D

Answer

Questions # 138:

Which framework is used for third-party authorization?

Options:

API keys

custom tokens

OAuth

SOAP

Answer

Questions # 139:

A customer wants to use a single SSID to authenticate loT devices using different passwords. Which Layer 2 security type must be configured in conjunction with Cisco ISE to achieve this requirement?

Options:

Identity PSK

Fast Transition

Central Web Authentication

Cisco Centralized Key Management

Answer

Questions # 140:

Question # 140

Refer to the exhibit. Which result does the python code achieve?

Options:

The code encrypts a base64 decrypted password.

The code converts time to the " year/month/day " time format.

The code converts time to the yyyymmdd representation.

The code converts time to the Epoch LINUX time format.

Answer

Viewing page 14 out of 14 pages

Viewing questions 131-140 out of questions

Modal title

Registered Required

In order to participate in the comments you need to be logged-in.
You can sign-up or login (it's free).