Cisco ENCOR Cisco ENCOR 350-401 4 — Questions and Answers
Question 1: Which protocol does Cisco TrustSec use to propagate Security Group Tags (SGTs) between network devices?
- 802.1X
- MACSec (802.1AE)
- SXP (SGT Exchange Protocol) (Correct answer)
- RADIUS
Correct answer: SXP (SGT Exchange Protocol)
SXP (SGT Exchange Protocol) propagates IP-to-SGT bindings between devices that cannot carry SGT information inline in the data plane.
Question 2: A network runs OSPF with multiple areas. Which LSA type carries summary routes from one area into another through the ABR?
- Type 1 (Router LSA)
- Type 2 (Network LSA)
- Type 3 (Summary LSA) (Correct answer)
- Type 5 (AS External LSA)
Correct answer: Type 3 (Summary LSA)
Type 3 Summary LSAs are generated by ABRs to advertise inter-area routes between OSPF areas.
Question 3: Which WAN technology uses a control plane separated from the data plane and centralized policy management?
- MPLS Layer 3 VPN
- Metro Ethernet
- SD-WAN (Correct answer)
- DMVPN
Correct answer: SD-WAN
SD-WAN decouples the control and data planes, using a centralized controller (such as vSmart) to push policies to edge devices.
Question 4: What is the primary function of the Cisco IOS 'ip flow-export' command in a NetFlow deployment?
- Captures packet payloads for deep inspection
- Sends cached flow records to a NetFlow collector (Correct answer)
- Enables SNMP traps on interface statistics
- Configures IPFIX sampling rate
Correct answer: Sends cached flow records to a NetFlow collector
The ip flow-export command specifies the destination IP, UDP port, and NetFlow version for exporting flow cache records to an external collector.
Question 5: In a DMVPN Phase 3 network, which protocol allows spoke-to-spoke tunnels to form dynamically while still routing through the hub initially?
- EIGRP with summarization
- NHRP redirect (Correct answer)
- BGP route reflector
- OSPF virtual link
Correct answer: NHRP redirect
In DMVPN Phase 3, NHRP redirect messages from the hub enable spokes to learn each other's NBMA addresses and build direct spoke-to-spoke tunnels.
Question 6: Which Cisco platform provides network-wide policy management, device provisioning, and telemetry for campus and branch environments?
- Cisco Prime Infrastructure
- Cisco DNA Center (Correct answer)
- Cisco NSO
- Cisco vManage
Correct answer: Cisco DNA Center
Cisco DNA Center is the centralized management and assurance platform for intent-based networking in campus and branch environments.
Question 7: Which Python library is commonly used with Cisco NETCONF to manage network devices programmatically?
- Paramiko
- ncclient (Correct answer)
- Netmiko
- PyATS
Correct answer: ncclient
ncclient is a Python library specifically designed for NETCONF operations, providing RPC calls to get, edit, and validate device configurations.
Cisco ENCOR Cisco ENCOR 350-401 4
Which protocol does Cisco TrustSec use to propagate Security Group Tags (SGTs) between network devices?