350-401 Implementing Cisco Enterprise Network Core Technologies (350-401 ENCOR) Question and Answers

SE-connect mode

sensor mode

client mode

sniffer mode

economy of mechanism

fail-safe defaults

complete mediation

least privilege

import manager

ncclient manager import

from ncclient import *

from ncclient import manager

authenticator

policy enforcement point

NAC device

supplicant

Option A

Option B

Option C

Option D

tap

inline tap

high availability

clustering

Option A

Option B

Option C

Option D

RFID

client probing

beacons

data packets

Add a timestamp to the request in the API header.

Use a password hash.

Add OAuth to the request in the API header.

Use HTTPS.

It reduces the number of WLCs that network administrators must support by locating them in a common location

It more evenly distributes MAC ARP and ND processing over multiple switches which helps with scalability

The number of wireless clients is low and the size of the physical campus is small

There are no latency concerns about LWAPP and CAPWAP tunnels traversing the campus core network

Puppet

Ansible

Saltstack

Chef

dBi

mW

dBw

dBm

text string

username and password

certificate

RADIUS token

leave group

hello

graft

source-specific membership report

ICMP Discovery

UDP67 DHCP

TCP 23 Telnet

UDP6007 NetFlow

UDP 162 SNMP

smaller Layer 2 domain

speedy deployment

increased security

reduced IP and MAC address requirements

reduced rack space, power, and cooling requirements

CNAME record

A record

NS record

SOA record

It waits to forward multicast traffic until a downstream router requests the traffic.

It utilizes the designated forwarder election to avoid multicast packet loops.

It receives traffic from only one Reverse Path Forwarding interface.

It forwards multicast traffic on all interfaces until a downstream router requests that forwarding stop.

It uses a push method, and fallback occurs when RP information is lost.

component set by the administrator to differentiate similar nodes that offer a common service

value that identifies a specific tunnel within the Cisco Catalyst SD-WAN overlay

identifier that represents a specific service offered by nodes within the Cisco Catalyst SD-WAN overlay

attribute that acts as a next hop for network prefixes

There is a later software version available on Cisco Catalyst Center (formerly DNA Center).

The current software image does not match the selected Golden image for this type of network device.

The current type of software image does not match the type of the network device.

There is a later software version available at www.cisco.com website.

high gain

receive signals equally from all directions

commonly used to cover large areas

provides the most focused and narrow beam width

low gain

Decrease radio channel widths to 40 MHz.

Increase the mandatory minimum data rates.

Decrease the mandatory minimum data rates.

Increase radio channel widths to 160 MHz.

GLBP

HSRP v2

VRRP

HSRP v1

FHRPs provide gateway redundancy, and SSO provides failover within a single device

FHRPs maintain state information within a single device, and SSO manages state information across multiple devices.

FHRPs use OTV for redundancy, and SSO uses VXLAN for state synchronization.

FHRPs influence bandwidth allocation, and SSO influences routing decisions.

custom headers

authentication

authorization

request management

accounting

Configure the GCMP256 encryption cipher.

Configure the CCMP128 encryption cipher.

Configure the GCMP128 encryption cipher.

Configure the CCMP256 encryption cipher.

a VXLAN tunnel endpoint identifier

at least one Layer 2 interface and one Layer 3 interlace

at least one IP for the transit network and one IP for endpoint connectivity

a VXLAN network identifier

to enable vBond to learn the public IP of WAN Edge devices that are behind NAT gateways or in private address space

to facilitate downloading and distribution of operational and security patches

to allow for global reachability from all WAN Edges in the Cisco SD-WAN and to facilitate NAT traversal

to provide access to Cisco Smart Licensing servers for license enablement

security ft adaptive

security wpa akm dotlx

security wpa akm psk

security wpa akm ft psk

site assignment

slack serial number assignment

golden image upgrade

template configuration application

crypto file ransomware protection using a file hash calculation

file retrospection using continuous scan and analyses

phishing file quarantine using an internal environment to store attached files

file sandboxing using a protected environment to analyze and simulate the behavior of unknown files

WPA2 Enterprise

WPA3 Personal

WPA2 Personal

WPA3 Enterprise

economy of mechanism

complete mediation

separation of privilege

least common mechanism

lower monitoring requirements

low latency

scalability

quick failure isolation

improved throughput

virtual private network for remote access

DDoS protection

firewall protection of the east-west traffic at the data center

firewall protection of the south-north traffic at the data center

supplicant

NAC device

authenticate

policy enforcement point

quick deployment

ideal for data center

complicated deployment

referred to as bare-metal

event manager applet ENABLE_OSPF_DEBUGevent syslog pattern "%OSPF-1-ADJCHG: Process 5. Nbr 1.1.1.1 on SerialO/0 from FULL to DOWN"action 1.0 cli command "debug ip ospf event"action 2.0 cli command "debug ip ospf adj"action 3.0 syslog priority informational msg "ENABLE_OSPF_DEBUG

event manager applet ENABLEOSPFDEBUGevent syslog pattern "%OSPF-5-ADJCHG: Process 5, Nbr 1.1.1.1 on SerialO/0 from LOADING to FULL"action 1.0 cli command "debug ip ospf event"action 2.0 cli command "debug ip ospf adj"action 3.0 syslog priority informational msg "ENABLE JDSPF_DEBUG"

event manager apple! ENABLE OSPFDEBUGevent syslog pattern "%OSPF-5-ADJCHG: Process 5. Nbr 1.1.1.1 on SerialO/0 from LOADING to FULL"action 1.0 cli command "enable"action 2.0 cli command "debug ip ospf event"action 3.0 cli command "debug ip ospf adj"action 4.0 syslog priority informational msg "ENABLE_OSPFJ} EBUG"

event manager applet ENABLE_OSPF_DEBUGevent syslog pattern "%OSPF-5-ADJCHG: Process 6. Nbr 1.1.1.1 on SerialO/0 from FULL to DOWN"action 1.0 cli command "enable"action 2.0 cli command "debug ip ospf event"action 3.0 cli command "debug ip ospf adj"action 4.0 syslog priority informational msg "ENABLE_OSPF_DEBUG'*

It facilitates software upgrades to network devices from a central point.

It facilitates a vulnerability assessment of the network devices.

It uses a predefined configuration through parameterized elements or variables.

It provides a high-level overview of the health of every network device.

802.1XandSUITEB-1X

FT PSK and Fast Transition

802.1X and Fast Transition

FTPSKandSUITEB-1X

runs directly on a physical server and depends on a previously installed operating system

runs directly on a physical server and includes its own operating system

runs on a virtual server and depends on an already installed operating system

run on a virtual server and includes its own operating system.

It avoids congestion on the primary controller by sharing the registration load on the LAPs.

It registers the LAPs if the primary controller fails.

It enables Layer 2 and Layer 3 roaming between itself and the primary controller.

It shares the traffic load of the LAPs with the primary controller

separation of privilege

password hashing

confidential algorithms

OAuth

Statically set TX power on access points to max.

Disable low data rates.

Set mandatory data rates.

Decrease TX power on access points.

network tunnel interface

IP subnet

virtual tunnel endpoint

broadcast domain

to establish a framework to process data by using an object-oriented programming approach

to specify the rules for transcoding between text and binary data encodings

to standardize the procedures that are executed when parsing sent and received data

to describe the structure and meaning of exchanged data

802. 1d

802.1x

802.1q

802.1w

detect and block ransomware in email attachments

cloud-based analysis of threats

outbound URL analysis and data transfer controls

user context analysis

printfresponset[jsonrpc'][‘body’]['simple_time'])

print(response[result'][0][,simple_time,])

printfresponsefresult'Jfbody'JfsimpleJime'])

printfresponsel'body'jrsimplejime'])

Static WEP

WPA2 + WPA3

None

WPA + WPA2