Cisco ENCOR Cisco ENCOR 350-401 MCQ 3 — Questions and Answers
Question 1: Which wireless security protocol uses Simultaneous Authentication of Equals (SAE) to replace the PSK handshake?
- WPA2-Personal
- WPA3-Personal (Correct answer)
- WPA2-Enterprise
- WPA3-Enterprise
Correct answer: WPA3-Personal
WPA3-Personal uses SAE (Dragonfly handshake) instead of the 4-way PSK handshake, providing forward secrecy and resistance to offline dictionary attacks.
Question 2: In Python, which library is most commonly used to make REST API calls to network devices in Cisco automation scripts?
- paramiko
- netmiko
- requests (Correct answer)
- ncclient
Correct answer: requests
The `requests` library is the standard Python HTTP library used to make REST/HTTPS API calls, including to Cisco DNA Center and IOS-XE RESTCONF APIs.
Question 3: Which protocol is used by NETCONF to transport configuration data between the manager and network devices?
- HTTP
- HTTPS
- SSH (Correct answer)
- Telnet
Correct answer: SSH
NETCONF uses SSH (specifically SSH subsystem) as its transport layer, providing encrypted configuration management.
Question 4: What is the primary purpose of VRF (Virtual Routing and Forwarding) in enterprise networks?
- Segment traffic into separate Layer 3 routing tables on a single device (Correct answer)
- Provide redundant default gateways using HSRP
- Encrypt routing updates between neighbors
- Aggregate multiple interfaces into one logical link
Correct answer: Segment traffic into separate Layer 3 routing tables on a single device
VRF creates multiple independent routing table instances on a single router, allowing overlapping IP address spaces and traffic segmentation.
Question 5: In Cisco SD-WAN (Viptela), which component acts as the centralized management and policy plane?
- vEdge/cEdge
- vBond
- vSmart
- vManage (Correct answer)
Correct answer: vManage
vManage is the centralized NMS/orchestration platform providing GUI-based configuration, monitoring, and policy management for the SD-WAN fabric.
Question 6: Which Cisco DNA Center assurance feature correlates client connectivity issues using machine learning across the entire network lifecycle?
- Network Time Travel (Correct answer)
- Path Trace
- AI-driven Issue Resolution
- Intelligent Capture
Correct answer: Network Time Travel
Network Time Travel in DNA Center allows administrators to replay historical network state to diagnose issues that occurred in the past.
Question 7: Which IPv6 address type is equivalent to IPv4's 169.254.x.x link-local address range?
- Unique local (FC00::/7)
- Multicast (FF00::/8)
- Link-local (FE80::/10) (Correct answer)
- Global unicast (2000::/3)
Correct answer: Link-local (FE80::/10)
IPv6 link-local addresses (FE80::/10) are automatically assigned to interfaces and are only valid within a single network segment, equivalent to IPv4 APIPA addresses.
Cisco ENCOR Cisco ENCOR 350-401 MCQ 3
Which wireless security protocol uses Simultaneous Authentication of Equals (SAE) to replace the PSK handshake?