Free Cisco ENCOR 350-401 Trivia Question and Answers — Questions and Answers

Question 1: Inputting the command clear ip route * causes a network administrator to get the notice "Please update the network documentation to record why the ip routing table was cleaned." What router function was employed in this instance?

CEF
EEM (Correct answer)
SNMP
NetFlow

Correct answer: EEM

Sending messages to the console based on certain commands input is one of EEM's functions. None of the alternate choices will offer that function.

Question 2: What categories does LISP divide IP addresses into?

LISP entities
RLOCs (Correct answer)
Subnets and hosts
EIDs (Correct answer)

Correct answer: RLOCs

LISP divides IP addresses into route locators and endpoint identifiers (EIDs) (RLOCs).

Question 3: Applying an IPv6 ACL to an interface requires what Cisco IOS command?

ipv6 access-list
ipv6 access-class
ipv6 traffic-filter (Correct answer)
ipv6 access-group

Correct answer: ipv6 traffic-filter

You can apply an existing IPv6 ACL to an interface in either the in or out direction with the ipv6 traffic-filter command.

Question 4: What command is entered into a router to enable an EEM applet?

Router(config)# event manager applet enable (Correct answer)
Router(config)# event manager policy enable
Router# event manager applet enable
None of the above

Correct answer: Router(config)# event manager applet enable

The router(config)# event manager applet enable command can be used to enable an EEM applet on a router.

Question 5: What kind of Wi-Fi encryption technique does pre-shared key (PSK) authentication normally employ?

MD5
SHA-1
DES
AES (Correct answer)

Correct answer: AES

To achieve the highest level of security, Advanced Encryption Standard (AES) is often employed with Pre-Shared Key (PSK) authentication.

Question 6: What do solutions for application whitelisting serve?

To protect an endpoint from network threats
To monitor and control the activities of users on an endpoint
To prevent unauthorized applications from being installed/ran on an endpoint (Correct answer)
To detect and block malicious software on an endpoint

Correct answer: To prevent unauthorized applications from being installed/ran on an endpoint

To stop unauthorized apps from being installed or run on an endpoint, application whitelisting solutions are used. It does not safeguard an endpoint from network risks, identify and prevent harmful applications, or track and manage user activity.

Question 7: Network functions from proprietary hardware-based appliances can be decoupled and run on x86 servers that are more commonly found. What is the ETSI-created standard that governs this procedure?

NFVI
VNF
NFVIS
NFV (Correct answer)

Correct answer: NFV

The European Telecommunications Standards Institute (ETSI) developed the architectural framework known as "Network Functions Virtualization" (NFV) to define standards for decoupling network functions from proprietary hardware-based appliances and allowing them to run in software on common x86 servers. It also specifies how to coordinate and manage network operations.

Question 8: Which two network issues warrant implementing Quality of Service (QoS) in a college network? (Select two.)

port flapping
excess jitter (Correct answer)
misrouted network packets
duplicate IP addresses
bandwidth-related packet loss (Correct answer)

Correct answer: excess jitter

QoS exists to protect real-time, delay-sensitive traffic like voice and video, and excess jitter (variation in packet delay) directly degrades those applications by causing choppy audio and frozen video—QoS prioritizes and smooths this traffic. Port flapping, misrouted packets, and duplicate IP addresses are Layer 1/2/3 connectivity or addressing faults that QoS cannot fix; they're solved by hardware, routing, or DHCP/IP management, not traffic prioritization.

Question 9: Which component of the Cisco SD-Access wireless architecture controls endpoint ID to edge node bindings?

fabric control plane node (Correct answer)
fabric wireless controller
fabric border node
fabric edge node

Correct answer: fabric control plane node

In the Cisco SD-Access wireless architecture, the component that controls endpoint ID to edge node bindings is the "fabric control plane node." The fabric control plane node plays a central role in managing the control plane of the SD-Access fabric. It is responsible for overseeing various control plane functions, including the mapping and resolution of endpoint IDs to the corresponding edge nodes in the fabric.

Question 10: What control plane protocol is employed between vSmart controllers and Cisco SD-WAN routers?

TCP
OMP (Correct answer)
UDP
BGP

Correct answer: OMP

The control plane protocol employed between vSmart controllers and Cisco SD-WAN routers is "OMP" (Overlay Management Protocol). OMP is a key control plane protocol in the Cisco SD-WAN (Software-Defined Wide Area Network) architecture. It is used for communication and coordination between the centralized vSmart controllers and the edge routers (also known as vEdge routers) deployed at remote locations.

Question 11: Which action would be considered a design best-practice for the core layer in a three-tier hierarchical campus network design?

provide QoS prioritization services such as marking, queueing, and classification for critical network traffic
provide redundant Layer 3 point-to-point links between the core devices for more predictable and faster convergence (Correct answer)
provide advanced network security features such as 802.1X, DHCP snooping, VACLs, and port security
provide redundant aggregation for access layer devices and first-hop redundancy protocols such as VRRP

Correct answer: provide redundant Layer 3 point-to-point links between the core devices for more predictable and faster convergence

The action that would be considered a design best-practice for the core layer in a three-tier hierarchical campus network design is to "provide redundant Layer 3 point-to-point links between the core devices for more predictable and faster convergence."

Question 12: In a Cisco SD-WAN configuration, what is a VPN?

attribute to identify a set of services offered in specific places in the SD-WAN fabric
common exchange point between two different services
virtual channel used to carry control plane information
virtualized environment that provides traffic isolation and segmentation in the SD-WAN fabric (Correct answer)

Correct answer: virtualized environment that provides traffic isolation and segmentation in the SD-WAN fabric

In a Cisco SD-WAN (Software-Defined Wide Area Network) configuration, a VPN (Virtual Private Network) refers to a virtualized environment that provides traffic isolation and segmentation within the SD-WAN fabric.

Question 13: What job does a fabric edge node have in an SD-Access setup?

Connects endpoints to the fabric and forwards their traffic. (Correct answer)
Connects the SD-Access fabric to another fabric or external Layer 3 networks.
Encapsulates end-user data traffic into LISP.
Provides reachability between border nodes in the fabric underlay.

Correct answer: Connects endpoints to the fabric and forwards their traffic.

In an SD-Access (Software-Defined Access) setup, a fabric edge node plays a crucial role in connecting endpoints to the fabric and forwarding their traffic. It serves as the access layer in the SD-Access architecture and is responsible for providing connectivity to end-user devices and IoT devices.

Question 14: What function does a fusion router serve in an SD-Access system?

provides additional forwarding capacity to the fabric
acts as a DNS server
provides connectivity to external networks
performs route leaking between user-defined virtual networks and shared services (Correct answer)

Correct answer: performs route leaking between user-defined virtual networks and shared services

In an SD-Access (Software-Defined Access) system, a fusion router serves the function of performing route leaking between user-defined virtual networks and shared services. Route leaking is a mechanism that allows the exchange of routing information between different virtual networks or VPNs (Virtual Private Networks) within the SD-Access fabric. It enables communication between endpoints located in separate virtual networks, facilitating connectivity and data exchange across different network segments.

Question 15: The vSmart controller is in charge of what in an SD-WAN deployment?

gather telemetry data from vEdge routers
onboard vEdge nodes into the SD-WAN fabric
manage, maintain, and gather configuration and status for nodes within the SD-WAN fabric
distribute security information for tunnel establishment between vEdge routers (Correct answer)

Correct answer: distribute security information for tunnel establishment between vEdge routers

In an SD-WAN (Software-Defined Wide Area Network) deployment, the vSmart controller is in charge of distributing security information for tunnel establishment between vEdge routers. The vSmart controller is a centralized management and control plane element in the SD-WAN architecture. It plays a critical role in overseeing the entire SD-WAN fabric and facilitating communication and coordination among the various SD-WAN devices, including vEdge routers, vBond orchestrators, and vManage network management system.

Question 16: What is one truth about the use of Cisco SD-Access in wireless networks?

The wireless client is part of the fabric overlay.
The WLC is part of the fabric underlay.
The access point is part of the fabric overlay. (Correct answer)
The access point is part of the fabric underlay.

Correct answer: The access point is part of the fabric overlay.

One truth about the use of Cisco SD-Access in wireless networks is that "the access point is part of the fabric overlay." In Cisco SD-Access, the fabric overlay extends to wireless networks, allowing seamless integration and management of wired and wireless endpoints within the same fabric. This means that wireless access points (APs) are considered an integral part of the SD-Access fabric and are treated as part of the overlay network.

Free Cisco ENCOR 350-401 Trivia Question and Answers

Inputting the command clear ip route * causes a network administrator to get the notice "Please update the network documentation to record why the ip routing table was cleaned." What router function was employed in this instance?