1. Home
  2. Cisco
  3. 350-401

Cisco 350-401 Online Practice Questions and Exam Preparation

350-401 Exam Details

  • Exam Code
    :350-401
  • Exam Name
    :Implementing and Operating Cisco Enterprise Network Core Technologies (ENCOR)
  • Certification
    :CCIE Enterprise Wireless
  • Vendor
    :Cisco
  • Total Questions
    :1524 Q&As
  • Last Updated
    :Jul 18, 2026

Cisco 350-401 Online Questions & Answers

  • Question 1191:

    In a traditional 3 tier topology, an engineer must explicitly configure a switch as the root bridge and exclude it from any further election process for the spanning-tree domain.

    Which action accomplishes this task?

    A. Configure the spanning-tree priority to 32768
    B. Configure root guard and portfast on all access switch ports.
    C. Configure BPDU guard in all switch-to-switch connections.
    D. Configure the spanning-tree priority equal to 0.

  • Question 1192:

    An engineer must use IP SLA to measure the network performance and record statistics hop-by-hop.

    Which configuration must be used?

    A. Option A
    B. Option B
    C. Option C
    D. Option D

  • Question 1193:

    Refer to the exhibit.

    An engineer reconfigures the port-channel between SW1 and SW2 from an access port to a trunk and immediately notices this error in SW1's log:

    *Mar 1 09:47:22.245: %PM-4-ERR_DISABLE: bpduguard error detected on Gi0/0, putting Gi0/0 in err-disable state

    Which command set resolves this error?

    A. SW1(config-if)#interface G0/0 SW1(config-if)#no spanning-tree bpdufilter SW1(config-if)#shut SW1(config-if)#no shut
    B. SW1(config-if)#interface G0/0 SW1(config-if)#no spanning-tree bpduguard enable SW1(config-if)#shut SW1(config-if)#no shut
    C. SW1(config-if)#interface G0/0 SW1(config-if)#spanning-tree bpduguard enable SW1(config-if)#shut SW1(config-if)#no shut
    D. SW1(config-if)#interface G0/1 SW1(config-if)#spanning-tree bpduguard enable SW1(config-if)#shut SW1(config-if)#no shut

  • Question 1194:

    Which next generation firewall feature supports separate security services for multiple departments?

    A. state sharing mode to .trade the user data sessions and replication to the neighbor firewall using a failover link
    B. Layer 3 mode with resource tracking capabilities and automatic configuration synchronization between the nodes and security zones
    C. multicontext mode with specific logical or physical interface allocation within each context and grouped into security zones
    D. virtual switch mode to provide traffic inspection capabilities for the flows entering the firewall and dropping packets based on policy configuration

  • Question 1195:

    DRAG DROP

    Drag and drop the code snippets from the bottom onto the blanks in the PHP script to convert a PHP array into JSON format. Not all options are used.

    Select and Place:

  • Question 1196:

    Refer to the exhibit.

    Which two facts does the device output confirm? (Choose two)

    A. The device is using the default HSRP hello timer
    B. The standby device is configured with the default HSRP priority
    C. The device's HSRP group uses the virtual IP address 10.0.3.242.
    D. The device is configured with the default HSRP priority
    E. The device sends unicast messages to its peers

  • Question 1197:

    Refer to the exhibit.

    The administrator must extend the configuration of the switch to perform remote logging using syslog according to these requirements:

    1. syslog server: 203.0.113.11 reachable through Gi0/0

    2. initial message severity: notifications

    3. message transport: reliable.

    Which two commands must be added to the configuration to accomplish this goal? (Choose two.)

    A. logging monitor notifications
    B. logging host 203.0.113.11 vrf Mgmt-vrf transport tcp
    C. logging source-Interface GigabitEthernet0/0 vrf Mgmt-vrf
    D. logging trap notifications
    E. logging host 203.0.113.11 vrf Mgmt-vrf

  • Question 1198:

    Which protocol does REST API rely on to secure the communication channel?

    A. TCP
    B. HTTPS
    C. SSH
    D. HTTP

  • Question 1199:

    In a virtual environment, what is a VMDK file?

    A. A file containing information about snapshots of a virtual machine.
    B. A zip file connecting a virtual machine configuration file and a virtual disk.
    C. A configuration file containing settings for a virtual machine such as a guest OS.
    D. A file containing a virtual machine disk drive.

  • Question 1200:

    A client requests a wireless solution for remote branch offices to eliminate the need for a local controller at each branch. The branch users require local termination in a specifc VLAN for local internet breakout.

    Which solution must be deployed?

    A. central switched
    B. FlexConnect local switching
    C. auto-anchor mobility
    D. asymmetric tunneling

Related Exams:

Tips on How to Prepare for the Exams

Nowadays, the certification exams become more and more important and required by more and more enterprises when applying for a job. But how to prepare for the exam effectively? How to prepare for the exam in a short time with less efforts? How to get a ideal result and how to find the most reliable resources? Here on Vcedump.com, you will find all the answers. Vcedump.com provide not only Cisco exam questions, answers and explanations but also complete assistance on your exam preparation and certification application. If you are confused on your 350-401 exam preparations and Cisco certification application, do not hesitate to visit our Vcedump.com to find your solutions here.