Cisco 350-401 Implementing and Operating Cisco Enterprise Network Core Technologies (ENCOR) Online Training
Cisco 350-401 Online Training
The questions for 350-401 were last updated at Nov 03,2025.
- Exam Code: 350-401
- Exam Name: Implementing and Operating Cisco Enterprise Network Core Technologies (ENCOR)
- Certification Provider: Cisco
- Latest update: Nov 03,2025
Refer to the Exhibit.

An engineer must create a script that appends the output of the show process cpu sorted command to a file.
- A . action 4.0 syslog command “show process cpu sorted | append flash:high-cpu-file”
- B . action 4.0 publish-event “show process cpu sorted | append flash:high-cpu-file”
- C . action 4.0 ens-event “show process cpu sorted | append flash:high-cpu-file”
- D . action 4.0 cli command “show process cpu sorted | append flash:high-cpu-file”
Which two mechanisms are available to secure NTP? (Choose two.)
- A . IP prefix list-based
- B . IPsec
- C . TACACS-based authentication
- D . IP access list-based
- E . Encrypted authentication
What is the difference between CEF and process switching?
- A . CEF processes packets that are too complex for process switching to manage.
- B . CEF is more CPU-intensive than process switching.
- C . CEF uses the FIB and the adjacency table to make forwarding decisions, whereas process switching
punts each packet. - D . Process switching is faster than CEF.
Which AP mode allows an engineer to scan configured channels for rogue access points?
- A . sniffer
- B . monitor
- C . bridge
- D . local
What is a characteristic of MACsec?
- A . 802.1AE provides encryption and authentication services
- B . 802.1AE is bult between the host and switch using the MKA protocol, which negotiates encryption keys based on the master session key from a successful 802.1X session
- C . 802.1AE is bult between the host and switch using the MKA protocol using keys generated via the Diffie-Hellman algorithm (anonymous encryption mode)
- D . 802.1AE is negotiated using Cisco AnyConnect NAM and the SAP protocol
Which method should an engineer use to deal with a long-standing contention issue between any two VMs on the same host?
- A . Adjust the resource reservation limits
- B . Live migrate the VM to another host
- C . Reset the VM
- D . Reset the host
Refer to the exhibit.

The EtherChannel between SW2 and SW3 is not operational which action resolves this issue?
- A . Configure the channel-group mode on SW2 Gi0/1 and Gi0/1 to on.
- B . Configure the channel-group mode on SW3 Gi0/1 to active
- C . Configure the mode on SW2 Gi0/0 to trunk
- D . Configure the mode on SW2 Gi0/1 to access.
Refer to the Exhibit.

Which action completes the configuration to achieve a dynamic continuous mapped NAT for all users?
- A . Configure a match-host type NAT pool
- B . Reconfigure the pool to use the 192.168 1 0 address range
- C . Increase the NAT pool size to support 254 usable addresses
- D . Configure a one-to-one type NAT pool
Refer to the exhibit.

SwitchC connects HR and Sales to the Core switch However, business needs require that no traffic from the Finance VLAN traverse this switch.
Which command meets this requirement?
- A . SwitchC(config)#vtp pruning
- B . SwitchC(config)#vtp pruning vlan 110
- C . SwitchC(config)#interface port-channel 1
SwitchC(config-if)#switchport trunk allowed vlan add 210,310 - D . SwitchC(config)#interface port-channel 1
SwitchC(config-if)#switchport trunk allowed vlan remove 110
An engineer configures HSRP group 37. The configuration does not modify the default virtual MAC address.
Which virtual MAC address does the group use?
- A . C0:00:00:25:00:00
- B . 00:00:0c:07:ac:37
- C . C0:39:83:25:258:5
- D . 00:00:0c:07:ac:25
Question 91 has a wrong answer marked s correct. The answer is B.
BPDU filter is the only option to block BPDUs while not going inte err disabled when a BPDU is received.
https://www.exam4training.com/which-command-set-must-be-configured-on-switch1-to-achieve-the-following-results-on-port-fa0-1/
https://www.cisco.com/en/US/docs/switches/metro/me3600x_3800x/trash/swstpopt.html#:~:text=The%20BPDU%20filtering%20feature%20can,bpdufilter%20default%20global%20configuration%20command.