Download Cisco 350-401 Exam Dumps to Pass Exam Easily in 2026
Get 100% Real Free CCNP Enterprise 350-401 Sample Questions
NEW QUESTION # 71
An engineer must create an EEM script to enable OSPF debugging in the event the OSPF neighborship goes down. Which script must the engineer apply?
- A. Option A
- B. Option C
- C. Option B
- D. Option D
Answer: B
NEW QUESTION # 72
Why would an architect use an OSPF virtual link?
- A. to allow a stub area to transit another stub area
- B. to connect two networks that have overlapping private IP address space
- C. to merge two existing Area Os through a nonbackbone
- D. to connect a nonbackbone area to Area 0 through another nonbackbone area
Answer: C
Explanation:
An OSPF virtual link is used for two primary purposes:
* Linking an area that does not have a physical connection to the backbone (Area 0): In cases where it is not possible to have a direct physical connection to the backbone area (Area 0), a virtual link allows an OSPF router in a non-backbone area to connect to the backbone through a transit area. This transit area must have full routing information and cannot be a stub area.
* Patching the backbone in case of discontinuity of Area 0: If there is a partitioned backbone (Area 0) due to network changes or other reasons, a virtual link can be used to connect the two parts of the partitioned backbone through a non-backbone area.
In summary, an OSPF virtual link helps maintain connectivity between areas when physical connections are not feasible or when the backbone itself is partitioned12345.
References:
* Cisco Support: Configure OSPF Connection in a Virtual Link Environment
* Network Engineering Stack Exchange: Other Uses of OSPF Virtual-Link
* CiscoZine: OSPF Virtual Link
* Orhan Ergun: OSPF Virtual Link
* Cisco: Understand OSPF Areas and Virtual Links
NEW QUESTION # 73
Refer to the exhibit. A network engineer must configure a password expiry mechanism on the gateway router for all local passwords to expire after 60 days.
What is required to complete this task?
- A. Add the username admin privilege 15 common-criteria-policy Administrators password 0 Cisco13579! command.
- B. The password expiry mechanism is on the AAA server and must be configured there.
- C. Add the aaa authentication enable default Administrators command.
- D. No further action Is required. The configuration is complete.
Answer: A
Explanation:
SUMMARY STEPS
Perform this task to create a password security policy and to apply the policy to a specific user profile.
enable
configure terminal
aaa new-model
aaa common-criteria policy policy-name
char-changes number
max-length number
min-length number
numeric-count number
special-case number
exit
username username common-criteria-policy policy-name password password
end
NEW QUESTION # 74
Drag and drop the tools from the left onto the agent types on the right.
Answer:
Explanation:
NEW QUESTION # 75 
Answer:
Explanation:
See the solution below in Explanation:
Explanation:
Solution:
R3
Config#int et0/1
config-if#ip ospf priority 255
wr
R20
clear ip ospf process
yes
R10
int et0/0
ip ospf priority 0
wr
R2
clear ip ospf process
yes
NEW QUESTION # 76
Which statement about VXLAN is true?
- A. VXLAN extends the Layer 2 Segment ID field to 24-bits. which allows up to 4094 unique Layer 2 segments over the same network.
- B. VXLAN uses TCP 35 the transport protocol over the physical data cento network
- C. VXLAN uses the Spanning Tree Protocol for loop prevention.
- D. VXLAN encapsulates a Layer 2 frame in an IP-UDP header, which allows Layer 2 adjacency across router boundaries.
Answer: C
NEW QUESTION # 77
Which language defines the structure or modelling of data for NETCONF and RESTCONF?
- A. YANG
- B. JSON
- C. YAML
- D. XML
Answer: A
NEW QUESTION # 78
Refer to the exhibit.
These commands have been added to the configuration of a switch. Which command flags an error If It is added to this configuration?
- A. monitor session 1 source interface port-channel 6
- B. monitor session 1 source interface port-channel 7, port-channel 8
- C. monitor session 1 source vlan 10
- D. monitor session 1 source interface FastEthernet0/1 rx
Answer: C
Explanation:
Explanation
RSPAN consists of at least one RSPAN source session, an RSPAN VLAN, and at least one RSPAN destination session. You separately configure RSPAN source sessions and RSPAN destination sessions on different network devices. To configure an RSPAN source session on a device, you associate a set of source ports or source VLANs with an RSPAN VLAN.
Traffic monitoring in a SPAN session has these restrictions: + Sources can be ports or VLANs, but you cannot mix source ports and source VLANs in the same session.
Reference:
https://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst3750x_3560x/software/release/12-2_55_se/configu
Therefore in this question, we cannot configure a source VLAN because we configured source ports for RSPAN session 1 already.
NEW QUESTION # 79
Refer to the exhibit.
An engineer must allow all users in the 10.2.2.0/24 subnet to access the Internet. To conserve address space the public Interface address of 209 165 201.1 must be used for all external communication. Which command set accomplishes these requirements?
A)
B)
C)
D)
- A. Option A
- B. Option C
- C. Option B
- D. Option D
Answer: B
NEW QUESTION # 80
Drag and drop the DHCP messages that are exchanged between a client and an AP into the order they are exchanged on the right.
Answer:
Explanation:
NEW QUESTION # 81
Refer to the exhibit.
A client requests a new SSID that will use web-based authentication and external RADIUS servers. Which Layer 2 security mode must be selected?
- A. WPA2 + WPA3
- B. None
- C. WPA + WPA2
- D. Static WEP
Answer: A
NEW QUESTION # 82
Which DHCP option helps lightweight APs find the IP address of a wireless LAN controller?
- A. Option 67
- B. Option 60
- C. Option 43
- D. Option 150
Answer: C
Explanation:
DHCP Option 43 is used by lightweight APs to discover wireless LAN controllers. This option allows the DHCP server to provide the IP addresses of one or more controllers to the AP. The AP can then use these addresses to discover and join the controller network456.
References := Cisco community documentation on Lightweight AP Discovery Process, Cisco Support documentation on DHCP Option 43
NEW QUESTION # 83
Which JSON script is properly formatted?
- A.
- B.
- C.
- D.
Answer: A
NEW QUESTION # 84 
Refer to the exhibit. Which configuration must be applied to R to enable R to reach the server at 172.16.0.1?
A)
B)
C)
D)
- A. Option A
- B. Option B
- C. Option D
- D. Option C
Answer: C
NEW QUESTION # 85 
Reler to the exhibit. An engineer a configuring WebAuth on a Cisco Catalyst 9000 Series WIC. The engineer has purchased a third-party certificate using the FQDN of the WLC as the CN and intends to use bit on the WebAuth splash page What must be configured so that the clients do not receive a certificate error?
- A. Web Au!h Interoepl HTTPs must be enabled.
- B. Trustpoint must be set to the management certificate of the WLC.
- C. Virtual IPv4 Address must be set to a routatte address
- D. Virtual IPv4 Hostname must match the CN of the certificate.
Answer: D
NEW QUESTION # 86
Refer to the exhibit.
An engineer must ensure that all traffic leaving AS 200 will choose Link 2 as the exit point. Assuming that all BGP neighbor relationships have been formed and that the attributes have not been changed on any of the routers, which configuration accomplish task?
- A. R4(config-router)nighbor 10.2.2.2 weight 200
- B. R3(config-router)bgp default local-preference 200
- C. R4(config-router)bgp default local-preference 200
- D. R3(config-router)neighbor 10.1.1.1 weight 200
Answer: C
NEW QUESTION # 87
Refer to the exhibit.
Which action results from executing the Python script?
- A. display the unformatted output of a command that is entered on that device
- B. display the output of a command that is entered on that device
- C. display the output of a command that is entered on that device in a single line
- D. SSH to the IP address that is manually entered on that device
Answer: C
NEW QUESTION # 88
Refer to the exhibit.
Refer to the exhibit. A network engineer Is troubleshooting an Issue with the file server based on reports of slow file transmissions. Which two commands or command sets are required. In switch SW1 to analyze the traffic from the file server with a packet analyzer? (Choose two.)
- A.
- B.
- C.
- D.
Answer: A,D
NEW QUESTION # 89
Refer to the exhibit.
An engineer must allow all users in the 10.2.2.0/24 subnet to access the Internet. To conserve address space the public Interface address of 209 165 201.1 must be used for all external communication. Which command set accomplishes these requirements?
A)
B)
C)
D)
- A. Option A
- B. Option B
- C. Option D
- D. Option C
Answer: C
NEW QUESTION # 90
Refer to me exhibit.
What is the JSON syntax that is formed the data?
- A. {'Name'';''Bob johnon';''Age': Sevenfive,''Alive'': true,''FavoriteFoods';[''Cereal';''Mustard';''Onions'}}
- B. {'Name'':''Bob johnon':''Age: 75,''Alive: true, FavoriteFoods;[Cereal, Mustard';''Onions}}
- C. {'Name'':''Bob johnon':''Age': 75 ''Alive'': true,''Favorite Foods';[''Cereal';''Mustard';''Onions'}}
- D. {'Name'': 'Bob johnon','Age': 75,'Alive': true,''FavoriteFoods': 'Cereal';'Mustard','Onions'}}
Answer: C
NEW QUESTION # 91
Which protocol does REST API rely on to secure the communication channel?
- A. HTTPS
- B. TCP
- C. SSH
- D. HTTP
Answer: A
Explanation:
The REST API accepts and returns HTTP (not enabled by default) or HTTPS messages that contain JavaScript Object Notation (JSON) or Extensible Markup Language (XML) documents. You can use any programming language to generate the messages and the JSON or XML documents that contain the API methods or Managed Object (MO) descriptions.
Reference: https://www.cisco.com/c/en/us/td/docs/switches/datacenter/aci/apic/sw/2- x/rest_cfg/2_1_x/b_Cisco_APIC_REST_API_Configuration_Guide/b_Cisco_APIC_REST_API_Config uration_Guide_chapter_01.html
NEW QUESTION # 92
......
350-401 Study Guide Realistic Verified Dumps: https://passleader.dumpexams.com/350-401-vce-torrent.html