Cisco 350-401 Implementing and Operating Cisco Enterprise Network Core Technologies (ENCOR) Online Training
Cisco 350-401 Online Training
The questions for 350-401 were last updated at Sep 15,2025.
- Exam Code: 350-401
- Exam Name: Implementing and Operating Cisco Enterprise Network Core Technologies (ENCOR)
- Certification Provider: Cisco
- Latest update: Sep 15,2025
DRAG DROP
Drag and drop the characteristics from the left onto the routing protocols they describe on the right.
At which Layer does Cisco DNA Center support REST controls?
- A . EEM applets or scripts
- B . Session layer
- C . YMAL output from responses to API calls
- D . Northbound APIs
Refer to the exhibit.
Which troubleshooting a routing issue, an engineer issues a ping from S1 to S2.
When two actions from the initial value of the TTL? (Choose two.)
- A . The packet reaches R3, and the TTL expires
- B . R2 replies with a TTL exceeded message
- C . R3 replies with a TTL exceeded message.
- D . The packet reaches R2 and the TTL expires
- E . R1 replies with a TTL exceeded message
- F . The packet reaches R1 and the TTL expires.
Which technology provides a secure communication channel for all traffic at Layer 2 of the OSI model?
- A . MACsec
- B . IPsec
- C . SSL
- D . Cisco Trustsec
Refer to the Exhibit.
An engineer is configuring an EtherChannel between Switch1 and Switch2 and notices the console message on switch2.
Based on the output, which action resolves this issue?
- A . Configure less member ports on Switch2.
- B . Configure the same port channel interface number on both switches
- C . Configure the same EtherChannel protocol on both switches
- D . Configure more member ports on Switch1.
Which entity is responsible for maintaining Layer 2 isolation between segments In a VXLAN environment?
- A . switch fabric
- B . VTEP
- C . VNID
- D . host switch
Which DHCP option helps lightweight APs find the IP address of a wireless LAN controller?
- A . Option 43
- B . Option 60
- C . Option 67
- D . Option 150
Refer the exhibit.
Which router is the designated router on the segment 192.168.0.0/24?
- A . This segment has no designated router because it is a nonbroadcast network type.
- B . This segment has no designated router because it is a p2p network type.
- C . Router Chicago because it has a lower router ID
- D . Router NewYork because it has a higher router ID
What are two differences between the RIB and the FIB? (Choose two.)
- A . The FIB is derived from the data plane, and the RIB is derived from the FIB.
- B . The RIB is a database of routing prefixes, and the FIB is the Information used to choose the egress interface for each packet.
- C . FIB is a database of routing prefixes, and the RIB is the information used to choose the egress interface for each packet.
- D . The FIB is derived from the control plane, and the RIB is derived from the FIB.
- E . The RIB is derived from the control plane, and the FIB is derived from the RIB.
Which algorithms are used to secure REST API from brute attacks and minimize the impact?
- A . SHA-512 and SHA-384
- B . MD5 algorithm-128 and SHA-384
- C . SHA-1, SHA-256, and SHA-512
- D . PBKDF2, BCrypt, and SCrypt
Question 91 has a wrong answer marked s correct. The answer is B.
BPDU filter is the only option to block BPDUs while not going inte err disabled when a BPDU is received.
https://www.exam4training.com/which-command-set-must-be-configured-on-switch1-to-achieve-the-following-results-on-port-fa0-1/
https://www.cisco.com/en/US/docs/switches/metro/me3600x_3800x/trash/swstpopt.html#:~:text=The%20BPDU%20filtering%20feature%20can,bpdufilter%20default%20global%20configuration%20command.