350-401 Exam Details
-
Exam Code
:350-401 -
Exam Name
:Implementing and Operating Cisco Enterprise Network Core Technologies (ENCOR) -
Certification
:CCIE Enterprise Wireless -
Vendor
:Cisco -
Total Questions
:1493 Q&As -
Last Updated
:Jun 01, 2026
Cisco 350-401 Online Questions & Answers
-
Question 661:
Which wireless deployment mode uses a Flex architecture and allows Layer 2 roaming between APs without a physical wireless controller?
A. Unified
B. autonomous mode
C. fabric
D. Cisco Mobility Express -
Question 662:
Refer to the exhibit.
R1 and R2 are directly connected, but the BGP session does not establish. Which action must be taken to build an eBGP session?
A. Configure ip route 1.1.1.1 0.0.0.0 192.168.12.1 on R2.
B. Configure neighbor 192.168.12.1 activate under R2 BGP process.
C. Configure neighbor 2.2.2.2 remote-as 65002 under R1 BGP process.
D. Configure no neighbor 192.168.12.1 shutdown under R2 BGP process. -
Question 663:
DRAG DROP
An engineer must create a script to append and modify device entries in a JSON-formatted file. The script must work as follows:
1. Until interrupted from the keyboard, the script reads in the hostname of a device, its management IP address, operating system type, and CLI remote access protocol.
2. After being interrupted, the script displays the entered entries and adds them to the JSON-formatted file,replacing existing entries whose hostname matches.
The contents of the JSON-formatted file are as follows:
{ "examplerouter":{ "ip":"203.0.113.1", "os":"ios-xe", "protocol":"ssh"
}, ...
}
Drag and drop the statements onto the blanks within the code to complete the script. Not all options are used.
Select and Place:
-
Question 664:
What does a northbound API accomplish?
A. programmatic control of abstracted network resources through a centralized controller
B. access to controlled network resources from a centralized node
C. communication between SDN controllers and physical switches
D. controlled access to switches from automated security applications -
Question 665:
Refer to the exhibit.
The trunk between Gig1/0/1 of switch SW2 and Gig1/0/1 of switch SW1 is not operational.
Which action resolves this issue?
A. Configure both interfaces in dynamic auto DTP mode and ensure that the switches are in the same VTP domain
B. Configure both interfaces in dynamic desirable DTP mode and ensure that the switches are in the same VTP domain
C. Configure both interfaces in nonegotiate and ensure that the switches are in the different VTP domain
D. Configure both interfaces in dynamic auto DTP mode and ensure that the switches are in the different VTP domain -
Question 666:
Refer to the exhibit.
What does the error message relay to the administrator who is trying to configure a Cisco IOS device?
A. A NETCONF request was made for a data model that does not exist.
B. The device received a valid NETCONF request and serviced it without error.
C. A NETCONF message with valid content based on the YANG data models was made, but the request failed.
D. The NETCONF running datastore is currently locked. -
Question 667:
What is a characteristic of a Type 1 hypervisor?
A. It is referred to as a hosted hypervisor.
B. It is completely independent of the operating system.
C. Problems in the base operating system can affect the entire system.
D. It is installed on an operating system and supports other operating systems above it. -
Question 668:
Router R1 must be configured as a UDP responder on port 6336. Which configuration accomplishes this task?
A. (config)#ip sla responder udp-echo ipaddress 10.10.10.1 port 6336
B. (config)#ip sla responder udp-echo ipv4 10.10.10.1 port 6336
C. (config)#ip sla responder ipaddress 10.10.10.1 port 6336
D. (config-if)#ip sla responder udp-port ipaddress 10.10.10.1 port 6336 -
Question 669:
Refer to the exhibit.
A network administrator must configure router B to allow traffic only from network 10.100.2.0 to networks outside of router B. Which configuration must be applied?
A. RouterB(config)# access-list 101 permit ip 10.100.2.0 0.0.0.255 anyRouterB(config)# access-list 101 deny anyRouterB(config)# int g0/0/0RouterB(config-if)# ip access-group 101 out
B. RouterB(config)# access-list 101 permit ip 10.100.3.0 0.0.0.255 anyRouterB(config)# access-list 101 deny anyRouterB(config)# int g0/0/0RouterB(config-if)# ip access-group 101 outRouterB(config)# int g0/0/1RouterB(config-if)# ip access-group 101 out
C. RouterB(config)# access-list 101 permit ip 10.100.2.0 0.0.0.255 anyRouterB(config)# access-list 101 deny anyRouterB(config)# int g0/0/2RouterB(config-if)# ip access-group 101 in
D. RouterB(config)# access-list 101 permit ip 10.100.2.0 0.0.0.255 anyRouterB(config)# int g0/0/0RouterB(config-if)# ip access-group 101 outRouterB(config)# int g0/0/1RouterB(config-if)# ip access-group 101 out -
Question 670:
An engineer must configure a new WLAN that allows a user to enter a passphrase and provides forward secrecy as a security measure. Which Layer 2 WLAN configuration is required on the Cisco WLC?
A. WPA2 Personal
B. WPA3 Enterprise
C. WPA3 Personal
D. WPA2 Enterprise
Tips on How to Prepare for the Exams
Nowadays, the certification exams become more and more important and required by more and more enterprises when applying for a job. But how to prepare for the exam effectively? How to prepare for the exam in a short time with less efforts? How to get a ideal result and how to find the most reliable resources? Here on Vcedump.com, you will find all the answers. Vcedump.com provide not only Cisco exam questions, answers and explanations but also complete assistance on your exam preparation and certification application. If you are confused on your 350-401 exam preparations and Cisco certification application, do not hesitate to visit our Vcedump.com to find your solutions here.