Pass Your CCNP Enterprise 350-401 Exam on Oct 03, 2026 with 460 Questions
350-401 Free Exam Study Guide! (Updated 460 Questions)
NEW QUESTION # 177
Drag and drop the characteristics from the left to the table types on the right.
Answer:
Explanation:
NEW QUESTION # 178
Graphical user interface, text, application, email Description automatically generated
Refer to the Exhibit. Running the script causes the output in the exhibit. What should be the first line of the script?
- A. ncclient manager import
- B. import manager
- C. from ncclient import manager
- D. from ncclient import *
Answer: D
NEW QUESTION # 179
Refer to the exhibit. Clients are reporting an issue with the voice traffic from the branch site to the central site. What is the cause of this issue?
- A. There is a high delay on the WAN links
- B. Traffic is load-balancing over both links, causing packets to arrive out of order
- C. The voice traffic is using the link with less available bandwidth
- D. There is a routing loop on the network
Answer: D
NEW QUESTION # 180
Which statement about Type-4 LSA in OSPFv2 is true?
- A. It is present only in the backbone area.
- B. It is generated by the ASBR and forwarded throughout the whole OSPF domain.
- C. It is generated by each ABR and forwarded in non-stub areas.
- D. It is forwarded in NSSA areas.
Answer: C
NEW QUESTION # 181
Refer to the exhibit.
A network engineer configures a new GRE tunnel and enters the show run command. What does the output verify?
- A. The tunnel destination will be known via the tunnel interface
- B. The tunnel keepalive is configured incorrectly because they must match on both sites
- C. The tunnel will be established and work as expected
- D. The default MTU of the tunnel interface is 1500 byte.
Answer: A
NEW QUESTION # 182
What is a characteristic of a next-generation firewall?
- A. filters traffic using Layer 3 and Layer 4 information only
- B. required in each layer of the network
- C. only required at the network perimeter
- D. provides intrusion prevention
Answer: D
Explanation:
A next gene ation firewall adds additional features such as application control, integrated intrusion prevention (IPS) and often more advanced threat prevention capabilities like sandboxing.
NEW QUESTION # 183
Refer to the exhibit. What is output by this code?
- A. 8 7 6 5
- B. 4 5 6 7
- C. -4 -5 -6 -7
- D. -1 -2 -3 -4
Answer: A
NEW QUESTION # 184 
Answer:
Explanation:
See the solution below in Explanation:
Explanation:
Solution:
R30
Config t
router ospf 100
router-id 10.0.1.30
int ran lo0 , e0/0-1
ip ospf 100 a 0
exit
int et0/2
ip ospf 100 a 50
exit
router ospf 30
area 50 range 10.10.0.0 255.255.192.0
area 50 range 10.50.0.0 255.255.192.0
end
wr
NEW QUESTION # 185
A customer has recently implemented a new wireless infrastructure using WLC-5520s at a site directly next to a large commercial airport. Users report that they intermittently lose Wi-Fi connectivity, and troubleshooting reveals it is due to frequent channel changes. Which two actions fix this issue? (Choose two.)
- A. Enable DFS channels because they are immune to radar interference
- B. Restore the OCA default settings because this automatically avoids channel interference
- C. Remove UNII-2 and Extended UNII-2 channels from the 5 Ghz channel list
- D. Configure channels on the UNII-2 and the Extended UNII-2 sub-bands of the 5 Ghz band only
- E. Disable DFS channels to prevent interference writ) Doppler radar
Answer: C,E
Explanation:
In the 5GHz spectrum some of the channels used by 802.11 are subject to Dynamic Frequency Selection (DFS) requirements. This is due to our clients coexistence with other RF technologies such as Maritime, Aviation and Weather RADAR.
Dynamic Frequency Selection (DFS) is the process of detecting radar signals that must be protected against interference from 5.0 GHz (802.11a/h) radios, and upon detection switch ng the operating frequency of the 5.0 GHz (802.11a/h) radio to one that is not interfering with he radar systems.
Reference:
https://www.cisco.com/en/US/docs/routers/access/wireless/software/guide/RadioChannelDFS.pdf Although DFS helps reduce interference with radar systems but "DFS channels" refer to the
5GHz channels that require DFS check. In other words, DFS channels are channels that may interfere with radar signal. Therefore we should disable these DFS channels > Answer C is correct. UNII-2 (5.250-5.350 GHz and 5.470-5.725 GHz) which conta ns channels 52, 56, 60, 64,
100, 104, 108, 112, 116, 120, 124, 128, 132, 136, and 140 are permitted in the United States, but shared with radar systems. Therefore, APs operating on UNII-2 channels are required to use Dynamic Frequency Selection (DFS) to avoid interfering with radar signals. If an AP detects a radar signal, it must immediately stop using that channel and randomly pick a new channel.
Reference:
https://documentation.meraki.com/MR/WiFi Basics and Best Practices/Channel Planning Best P ractices
NEW QUESTION # 186
What is a characteristics of VXLAN?
- A. It frame encapsulation is performed by MAC-In-UDP
- B. It has a 12-byt packet header.
- C. It uses TCP for transport
- D. It extends Layer 2 and Layer 3 overlay networks over a Layer 2 underlay.
Answer: A
NEW QUESTION # 187
Refer to the exhibit. Which configuration must be applied to R to enable R to reach the server at 172.16.0.1?
A)
B)
C)
D)
- A. Option C
- B. Option D
- C. Option B
- D. Option A
Answer: B
NEW QUESTION # 188
An engineer must configure the strongest password authentication to locally authenticate on a router. Which configuration must be used?
- A. username netadmin secret $15b1JuSk404850110QzwXyZ1k SZ2
- B. username netadmin secret 9 $9$vFpMfBelbRVV8SseX/bDAxtuV
- C. line Console 0
password $15b1Ju$ - D. username netadmin secret 5 $1$b1JUSkZbBS1Pyh4OzwXyZ1kSZ2
Answer: B
Explanation:
Scrypt is safer than MD5, so answer A is wrong and answer D is correct
R1(config)#username user secret ?
0 Specifies an UNENCRYPTED secret will follow
5 Specifies a MD5 HASHED secret will follow
8 Specifies a PBKDF2 HASHED secret will follow
9 Specifies a SCRYPT HASHED secret will follow
<0-9> Encryption types not explicitly specified
LINE The UNENCRYPTED (cleartext) user secret
LINE The UNENCRYPTED (cleartext) user secret
NEW QUESTION # 189
Refer to the exhibit.
Which commands are required to allow SSH connection to the router?
A)
B)
C)
D)
- A. Option A
- B. Option C
- C. Option B
- D. Option D
Answer: A
NEW QUESTION # 190
Which statement about Cisco Express Forwarding is true?
- A. it maintains two tables in the data plane the FIB and adjacency table.
- B. It makes forwarding decisions by a process that is scheduled through the IOS scheduler.
- C. The CPU of a router becomes directly involved with packet-switching decisions.
- D. It uses a fast cache that is maintained in a router data plane.
Answer: A
Explanation:
Explanation
Cisco Express Forwarding (CEF) provides the ability to switch packets through a device in a very quick and efficient way while also keeping the load on the router's processor low. CEF is made up of two different main components: the Forwarding Information Base (FIB) and the Adjacency Table. These are automatically updated at the same time as the routing table.
The Forwarding Information Base (FIB) contains destination reachability information as well as next hop information. This information is then used by the router to make forwarding decisions.
The FIB allows for very efficient and easy lookups. Below is an example of the FIB table:
The adjacency table is tasked with maintaining the layer 2 next-hop information for the FIB. An example of the adjacency table is shown below:
It uses a fast cache that is maintained in a router data plane' fast cache is only used when fast switching is enabled while CEF is disabled.
NEW QUESTION # 191
Drag and drop the characteristics from the left onto the orchestration tools they describe on the right.
Answer:
Explanation:
NEW QUESTION # 192
An engineer creates the configuration below. Drag and drop the authentication methods from the left into the order of priority on the right. Not all options are used.
Answer:
Explanation:
NEW QUESTION # 193
Refer to the exhibit.
Which privilege level is assigned to VTY users?
- A. 0
- B. 1
- C. 2
- D. 3
Answer: D
Explanation:
Explanation
Lines (CON, AUX, VTY) default to level 1 privileges.
NEW QUESTION # 194 
Answer:
Explanation:
See the solution below in Explanation.
Explanation:
R22
int tun0
vrf forwarding FINANCE
ip add 10.10.10.2 255.255.255.0
tunn source e0/0
tunnel dest 209.165.200.230
no shut
ip route vrf FINANCE 10.10.111.0 255.255.255.0 tunn0
int et0/1
vrf forwarding FINANCE
ip address 10.22.22.1 255.255.255.252
wr
Verification:-
OR
NEW QUESTION # 195
......
350-401 Dumps for CCNP Enterprise Certified Exam Questions and Answer: https://www.ipassleader.com/Cisco/350-401-practice-exam-dumps.html
Realistic Verified 350-401 exam dumps Q&As - 350-401 Free Update: https://drive.google.com/open?id=1yqdY3w5tpkjeCGLJTIlUoecV_CTGsLfF