Cisco ENCOR Cisco ENCOR 350-401 5 — Questions and Answers
Question 1: In a Cisco ACI fabric, which component acts as the centralized policy and management controller?
- APIC (Correct answer)
- Spine switch
- Leaf switch
- vCenter plugin
Correct answer: APIC
The Application Policy Infrastructure Controller (APIC) is the centralized automation and policy engine for Cisco ACI, managing the entire fabric.
Question 2: What is the purpose of 'route distinguishers' (RDs) in MPLS Layer 3 VPNs?
- Encrypt VPN traffic between PE routers
- Make overlapping customer IP prefixes unique in the BGP table (Correct answer)
- Define MPLS label switching paths
- Assign OSPF process IDs per VRF
Correct answer: Make overlapping customer IP prefixes unique in the BGP table
Route distinguishers are prepended to customer prefixes to create unique VPNv4 addresses in the BGP table, allowing overlapping IP spaces across different VPN customers.
Question 3: Which Cisco IOS feature allows traffic to be directed to a service (such as a firewall) transparently before forwarding, based on a policy map?
- Policy-Based Routing (PBR) (Correct answer)
- Flexible NetFlow
- IP SLA
- WCCP
Correct answer: Policy-Based Routing (PBR)
Policy-Based Routing (PBR) uses route-maps to forward traffic based on match criteria (source IP, protocol, port) rather than the routing table destination.
Question 4: A wireless engineer notices that 5 GHz clients are connecting to 2.4 GHz due to strong RSSI. Which feature should be enabled to push capable clients to 5 GHz?
- 802.11r fast transition
- Band steering (Correct answer)
- DTIM interval adjustment
- RRM TPC
Correct answer: Band steering
Band steering monitors client probes and discourages dual-band clients from associating to the more-congested 2.4 GHz band, steering them toward 5 GHz.
Question 5: Which field in the IP header does DSCP marking use to classify traffic for QoS?
- TTL field
- Protocol field
- ToS byte (DSCP bits) (Correct answer)
- Fragment offset
Correct answer: ToS byte (DSCP bits)
DSCP uses the first 6 bits of the 8-bit Type of Service (ToS) byte in the IP header to encode per-hop behavior classifications.
Question 6: In Cisco's intent-based networking, what does 'Network Assurance' primarily verify?
- Physical layer cable integrity
- That the network's actual behavior matches the operator's intent (Correct answer)
- Firewall rule compliance
- BGP prefix hijack detection
Correct answer: That the network's actual behavior matches the operator's intent
Network Assurance continuously monitors telemetry and compares actual network behavior against the configured intent, flagging deviations proactively.
Question 7: Which command verifies the OSPF neighbor state and shows the DR/BDR election result on a Cisco router?
- show ip ospf database
- show ip ospf neighbor (Correct answer)
- show ip route ospf
- show ip ospf interface brief
Correct answer: show ip ospf neighbor
The 'show ip ospf neighbor' command displays neighbor adjacency states (Full, 2-Way, etc.) and identifies which neighbor is the DR and BDR.
Cisco ENCOR Cisco ENCOR 350-401 5
In a Cisco ACI fabric, which component acts as the centralized policy and management controller?