Free 350-401 Sample Questions — Implementing Cisco Enterprise Network Core Technologies (ENCOR)

Free 350-401 sample questions for the Implementing Cisco Enterprise Network Core Technologies (ENCOR) exam. No account required: study at your own pace.

Want an interactive quiz? Take the full 350-401 practice test

Looking for more? Click here to get the full PDF with 618+ practice questions for $10 for offline study and deeper preparation.

Question 1

What is a characteristic of vManage?

  • A. It leverages the overlay management protocol to interface with WAN Edge devices
  • B. It supports protocols such as OSPF to integrate with legacy network devices
  • C. It requires a public IP address to allow WAN Edge devices to discover fabric components
  • D. It uses NETCONF to configure vSmart devices to build the overlay network data plane
Show Answer
Correct Answer:
A. It leverages the overlay management protocol to interface with WAN Edge devices
Question 2

Which of the following are examples of Type 2 hypervisors? (Choose three.)

  • A. VMware ESXi
  • B. Oracle VirtualBox
  • C. Oracle Solaris Zones
  • D. Microsoft Hyper-V
  • E. Microsoft Virtual PC
Show Answer
Correct Answer:
  • B. Oracle VirtualBox
  • C. Oracle Solaris Zones
  • E. Microsoft Virtual PC
Question 3

When a wireless client roams between two different wireless controllers, a network connectivity outage is experienced for a period of time. Which configuration issue would cause this problem?

  • A. Not all of the controllers in the mobility group are using the same mobility group name
  • B. Not all of the controllers within the mobility group are using the same virtual interface IP address
  • C. All of the controllers within the mobility group are using the same virtual interface IP address
  • D. All of the controllers in the mobility group are using the same mobility group name
Show Answer
Correct Answer:
B. Not all of the controllers within the mobility group are using the same virtual interface IP address
Question 4

How is CAPWAP data traffic encapsulated when running an Over the Top WLAN in a Cisco SD-Access wireless environment?

  • A. LISP
  • B. VXLAN
  • C. GRE
  • D. IPsec
Show Answer
Correct Answer:
B. VXLAN
Question 5

A script contains the statement "while loop != 999:" Which value terminates the loop?

  • A. value not equal to 999
  • B. value less than or equal to 999
  • C. value equal to 999
  • D. value greater than or equal to 999
Show Answer
Correct Answer:
C. value equal to 999
Question 6

What is a difference between OSPF and EIGRP?

  • A. OSPF uses a default hello timer of 5 seconds. EIGRP uses a default hello timer of 10 seconds
  • B. OSPF uses multicast addresses 224.0.0.5 and 224.0.0.6. EIGRP uses multicast address 224.0.0.10.
  • C. OSPF uses an administrative distance of 115. EIGRP uses an administrative distance of 160
  • D. OSPF uses IP protocol number 88. EIGRP uses IP protocol number 89
Show Answer
Correct Answer:
B. OSPF uses multicast addresses 224.0.0.5 and 224.0.0.6. EIGRP uses multicast address 224.0.0.10.
Question 7

What is the difference between CEF and process switching?

  • A. CEF processes packets that are too complex for process switching to manage
  • B. Process switching is faster than CEF
  • C. CEF uses the FIB and the adjacency table to make forwarding decisions, whereas process switching punts each packet
  • D. CEF is more CPU-intensive than process switching
Show Answer
Correct Answer:
C. CEF uses the FIB and the adjacency table to make forwarding decisions, whereas process switching punts each packet
Question 8

A network engineer is configuring Flexible NetFlow and enters these commands. sampler NetFlow1 mode random one-out-of 100 interface fastethernet 1/0 flow-sampler NetFlow1 What are two results of implementing this feature instead of traditional NetFlow? (Choose two.)

  • A. Only the flows of top 100 talkers are exported
  • B. CPU and memory utilization are reduced
  • C. The number of packets to be analyzed are reduced
  • D. The data export flow is more secure
  • E. The accuracy of the data to be analyzed is improved
Show Answer
Correct Answer:
  • B. CPU and memory utilization are reduced
  • C. The number of packets to be analyzed are reduced
Question 9

Which solution simplifies management of secure access to network resources?

  • A. RFC 3580-based solution to enable authenticated access leveraging RADIUS and AV pairs
  • B. 802.1AE to secure communication in the network domain
  • C. ISE to automate network access control leveraging RADIUS AV pairs
  • D. TrustSec to logically group internal user environments and assign policies
Show Answer
Correct Answer:
C. ISE to automate network access control leveraging RADIUS AV pairs
Question 10

Which feature does Cisco TrustSec use to provide scalable, secure communication throughout a network?

  • A. security group tag ACL assigned to each port on a switch
  • B. security group tag number assigned to each user on a switch
  • C. security group tag number assigned to each port on a network
  • D. security group tag ACL assigned to each router on a network
Show Answer
Correct Answer:
B. security group tag number assigned to each user on a switch
Question 11

Which entity is a Type 1 hypervisor?

  • A. Oracle VM VirtualBox
  • B. Citrix XenServer
  • C. VMware server
  • D. Microsoft Virtual PC
Show Answer
Correct Answer:
B. Citrix XenServer
Question 12

Which two mechanisms are used with OAuth 2.0 for enhanced validation? (Choose two.)

  • A. authorization
  • B. custom headers
  • C. request management
  • D. authentication
  • E. accounting
Show Answer
Correct Answer:
  • A. authorization
  • D. authentication
Question 13

Which design principle states that a user has no access by default to any resource, and unless a resource is explicitly granted, it should be denied?

  • A. least privilege
  • B. fail-safe defaults
  • C. economy of mechanism
  • D. complete mediation
Show Answer
Correct Answer:
B. fail-safe defaults
Question 14

What are the four stages of obtaining an IP address lease from a DHCP server?

  • A. Discover, Offer, Release, Renew
  • B. Discover, Obtain, Request, Renew
  • C. Determine, Obtain, Release, Acknowledge
  • D. Discover, Offer, Request, Acknowledge
Show Answer
Correct Answer:
D. Discover, Offer, Request, Acknowledge
Question 15

Which NTP mode must be activated when using a Cisco router as an NTP authoritative server?

  • A. primary
  • B. peer
  • C. broadcast client
  • D. server
Show Answer
Correct Answer:
D. server
Question 16

Which element enables communication between guest VMs within a virtualized environment?

  • A. hypervisor
  • B. virtual router
  • C. vSwitch
  • D. pNIC
Show Answer
Correct Answer:
C. vSwitch
Question 17

You have configured router R1 with multiple VRF’s in order to support multiple customer VPN networks. If you wanted to see the best path for the 10.2.1.0.24 route in VRF Green, what command would you use?

  • A. show ip route vrf Green 10.2.1.0
  • B. show ip route 10.2.1.0 vrf Green
  • C. show route all 10.2.1.0
  • D. show ip route 10.2.1.0 Green
Show Answer
Correct Answer:
A. show ip route vrf Green 10.2.1.0
Question 18

An engineer must configure HSRP for VLAN 1200 on SW1. The second switch is configured by using the last usable IP address in the network as the virtual IP. Which command set accomplishes this task?

  • A. SW1(config)# interface vlan 1200 SW1(config-if)# ip address 172.12.0.254 255.255.255.0 SW1(config-if)# standby version 2 SW1(config-if)# standby 1200 ip 172.12.0.2 SW1(conflg-it)# standby 1200 preempt
  • B. SW1(config)# interface vlan 1200 SW1(config-if)# ip address 172.12.0.2 255.255.255.0 SW1(config-if)# standby version 2 SW1(config-if)# standby 1200 ip 172.12.0.254 SW1(conflg-it)# standby 1200 preempt
  • C. SW1(config)# interface vlan 1200 SW1(config-if)# ip address 172.12.0.2 255.255.255.0 SW1(config-if)# standby 1200 ip 172.12.0.254 SW1(config-if)# standby 1200 timers 5 15 SW1(conflg-it)# standby 1200 preempt
  • D. SW1(config)# interface vlan 1200 SW1(config-if)# ip address 172.12.0.1 255.255.255.0 SW1(config-if)# standby 1200 ip 172.12.0.254 SW1(config-if)# standby 1200 timers 5 15 SW1(conflg-it)# standby 1200 preempt
Show Answer
Correct Answer:
B. SW1(config)# interface vlan 1200 SW1(config-if)# ip address 172.12.0.2 255.255.255.0 SW1(config-if)# standby version 2 SW1(config-if)# standby 1200 ip 172.12.0.254 SW1(conflg-it)# standby 1200 preempt
Question 19

By default, which virtual MAC address does HSRP group 12 use?

  • A. 00:00:0c:07:ac:0c
  • B. 00:05:5e:00:0c:12
  • C. 00:5e:0c:07:ac:12
  • D. 05:43:84:57:29:2c
Show Answer
Correct Answer:
A. 00:00:0c:07:ac:0c
Question 20

The Overlay Management Protocol (OMP) is used as the control plane protocol and forms peers between the VSmart Controller and the SD-WAN edge devices. OMP is responsible for advertising which three types of routes in the SD-WAN network? (Choose three.)

  • A. OMP routes
  • B. TLOCs
  • C. MP-BGP
  • D. LISP routes
  • E. Service routes
Show Answer
Correct Answer:
  • A. OMP routes
  • B. TLOCs
  • E. Service routes

Aced these? Get the Full Exam

Download the complete 350-401 study bundle with 618+ questions in a single printable PDF.