Free Cisco ENCOR 350-401 Question and Answers — Questions and Answers

Question 1: What measures can be taken to stop an AS from turning into a transit AS?

Delay
Distribution lists (Correct answer)
Routing updates
BGP filtering

Correct answer: Distribution lists

Distribution lists help prevent an autonomous system (AS) from functioning as a transit AS.

Question 2: What command parameter can be changed to encrypt data traffic?

Security model (Correct answer)
Readview
IfAdminStatus
Access-list

Correct answer: Security model

The security model command set can be configured to enable data traffic encryption.

Question 3: What happens to traffic coming from the PC if the switch is set up for 802.1x EAPOL but the PC isn't?

The EAPOL is overridden because the protocol has not been agreed upon between the switchport and PC, and the traffic continues to flow through the switch as usual.
Traffic passes as normal because the port goes into an authorized state.
No traffic passes, because the port goes into a shutdown state.
No traffic passes. The switchport remains in an unauthorized state (Correct answer)

Correct answer: No traffic passes. The switchport remains in an unauthorized state

In the event that the PC is unable to support 802.1X, the switch will maintain the PC's port in an unauthorized state and prevent data from flowing via the port. Not 802.1x, but port security is what shutdown has to do with as a response to a violation.

Question 4: What function does the monitoring workflow for the Cisco DNA Center serve?

To manage and troubleshoot network devices.
To monitor and analyze the network for performance and health issues. (Correct answer)
To configure network devices for optimal performance
None of the above

Correct answer: To monitor and analyze the network for performance and health issues.

Monitoring and analysis of the network for performance and health issues is the primary goal of the Cisco DNA Center monitoring workflow.

Question 5: Which command allows IP SLA to monitor an HTTP application's performance?

ip sla 1 type http (Correct answer)
ip sla 1 type icmp-echo
ip sla 1 type web-application
ip sla 1 type traceroute

Correct answer: ip sla 1 type http

To enable IP SLA to monitor the efficiency of an HTTP application, use the ip sla 1 type http command.

Question 6: What is the proper JSON syntax for an array?

Key: value;
Key; value
Key-value
[value] (Correct answer)

Correct answer: [value]

[value] is the proper syntax in JSON for an array. This indicates that each array is made up of a list of values that are enclosed in square brackets and are separated by commas.

Question 7: Which support level does SNMPv3 not support?

noAuthPriv (Correct answer)
noAuthNoPriv
authNoPriv
authPriv

Correct answer: noAuthPriv

The noAuthNoPriv, authNoPriv, and authPriv security levels are supported by SNMP Version 3.

Question 8: What makes a FIB different from a RIB?

The RIB maintains a mirror image of the FIB.
The FIB is populated based on RIB content. (Correct answer)
The RIB is used to make IP source prefix-based switching decisions.
The FIB is where all IP routing information is stored.

Correct answer: The FIB is populated based on RIB content.

A FIB (Forwarding Information Base) and a RIB (Routing Information Base) are both components of a router used in computer networking to facilitate the forwarding of data packets.

Question 9: Which QoS component modifies a packet to influence how network traffic is handled?

classification
shaping
policing
marking (Correct answer)

Correct answer: marking

The Quality of Service (QoS) component that modifies a packet to influence how network traffic is handled is called "marking." <br> <br> In QoS implementation, packets are marked with specific values or tags in their headers to indicate their priority or class of service. These markings allow network devices, such as routers and switches, to identify and treat the packets differently based on their assigned priority. By modifying packets with appropriate markings, network administrators can control and prioritize the handling of different types of traffic to ensure that critical data receives better treatment and resources compared to less important traffic.

Question 10: Which of the following is true regarding Cisco Express Forwarding?

It uses a fast cache that is maintained in a router data plane.
It maintains two tables in the data plane: the FIB and adjacency table. (Correct answer)
The CPU of a router becomes directly involved with packet-switching decisions.
It makes forwarding decisions by a process that is scheduled through the IOS scheduler.

Correct answer: It maintains two tables in the data plane: the FIB and adjacency table.

The statement regarding Cisco Express Forwarding (CEF) is true. CEF is a high-performance IP switching technology used in Cisco routers to improve the efficiency of packet forwarding.

Question 11: What advantages do on-premises infrastructure deployments have over cloud infrastructure deployments?

less power and cooling resources needed to run infrastructure on-premises
ability to quickly increase compute power without the need to install additional hardware
lower latency between systems that are physically located near each other (Correct answer)
faster deployment times because additional infrastructure does not need to be purchased

Correct answer: lower latency between systems that are physically located near each other

On-premises infrastructure deployments have certain advantages over cloud infrastructure deployments, and one of them is lower latency between systems that are physically located near each other.

Question 12: How is network congestion alleviated by QoS traffic shaping?

It buffers and queues packets above the committed rate. (Correct answer)
It drops packets when traffic exceeds a certain bitrate.
It drops packets randomly from lower priority queues.
It fragments large packets and queues them for delivery.

Correct answer: It buffers and queues packets above the committed rate.

Network congestion can be alleviated by QoS (Quality of Service) traffic shaping through the use of packet buffering and queuing. When traffic shaping is implemented, it regulates the flow of packets to ensure that they adhere to specific bandwidth limits and priorities, which helps to manage network congestion

Question 13: A client is listening to an engineer describe QoS. Which two facts apply to traffic policing? (Choose two.)

Policing adapts to network congestion by queuing excess traffic.
Policing should be performed as close to the source as possible. (Correct answer)
Policing should be performed as close to the destination as possible.
Policing typically delays the traffic, rather than drops it.
Policing drops traffic that exceeds the defined rate. (Correct answer)

Correct answer: Policing should be performed as close to the source as possible.

Policing should be performed as close to the source as possible so excess traffic is controlled at the network's entry point. Policing enforces a rate by dropping (or re-marking) excess traffic rather than queuing or delaying it—queuing and delaying describe shaping, not policing.

Question 14: Which Cisco SD-WAN component manages the orchestration plane?

vManage
vSmart
vBond (Correct answer)
WAN Edge

Correct answer: vBond

In Cisco SD-WAN, vBond manages the orchestration plane, authenticating devices and facilitating their initial secure connections. vManage handles management, vSmart handles the control plane, and WAN Edge routers handle the data plane.

Question 15: Two device functions in the Cisco SD-Access fabric are what? (Select two.)

edge node (Correct answer)
access switch
core switch
border node (Correct answer)
vBond controller

Correct answer: edge node

In a Cisco SD-Access fabric, the edge node connects endpoints to the fabric and provides their initial access (the border node is the other fabric role). 'Access switch' and 'core switch' are traditional network terms, and the vBond controller belongs to SD-WAN, not SD-Access.

Question 16: What function does the vSmart controller perform within the Cisco SD-WAN environment?

It performs authentication and authorization
It manages the data plane.
It manages the control plane. (Correct answer)
It is the centralized network management system.

Correct answer: It manages the control plane.

The vSmart controller performs the function of managing the control plane within the Cisco SD-WAN (Software-Defined Wide Area Network) environment. The control plane is responsible for making decisions about how traffic should be forwarded across the SD-WAN network.

Free Cisco ENCOR 350-401 Question and Answers

What measures can be taken to stop an AS from turning into a transit AS?