CISCO 350-401 Implementing and Operating Cisco Enterprise Network Core Technologies (ENCOR) Free Practice Test — 30 Questions
Exam Code: 350-401
30 questions · Full explanations · No account required

Question 1

In a virtual switching environment, a network engineer is tasked with configuring a Virtual Local Area Network (VLAN) that spans multiple switches to ensure efficient traffic management and segmentation. The engineer decides to implement a Virtual Switching System (VSS) to combine two physical switches into a single logical switch. Given that the VLAN ID is 10 and the engineer needs to ensure that the traffic from VLAN 10 is properly routed through the VSS, which of the following configurations is essential for maintaining VLAN integrity and ensuring that the VLAN is operational across both switches?

Accepted Answer

Configuring the same VLAN ID on both switches and enabling Inter-Switch Link (ISL) trunking between them.

Question 2

A company is planning to design a new enterprise network that will support a mix of voice, video, and data traffic. The network must ensure high availability and minimal latency while accommodating future growth. The design team is considering various topologies and protocols to achieve these goals. Which design principle should the team prioritize to ensure that the network can efficiently handle the diverse traffic types and scale as needed?

Accepted Answer

Implementing a hierarchical network design model

Question 3

A company is designing a resilient network architecture to ensure high availability and minimal downtime. They are considering implementing a dual-homed design with two separate ISPs for their internet connectivity. If one ISP experiences a failure, the other should seamlessly take over without any noticeable impact on the users. What is the primary benefit of this dual-homed design in terms of network resiliency?

Accepted Answer

It provides redundancy and load balancing across multiple paths to the internet.

Question 4

A network engineer is tasked with ensuring the reliability and performance of a corporate network that spans multiple geographical locations. The engineer decides to implement a network assurance strategy that includes proactive monitoring and automated remediation. Which of the following approaches best exemplifies an effective network assurance strategy that balances performance monitoring with fault management?

Accepted Answer

Utilizing a combination of SNMP traps and NetFlow analysis to monitor traffic patterns and automatically adjust Quality of Service (QoS) policies based on real-time bandwidth usage.

Question 5

In a corporate network, a network engineer is tasked with implementing an Access Control List (ACL) to restrict access to a sensitive database server located at IP address 192.168.1.10. The engineer needs to allow only specific users from the subnet 192.168.1.0/24 to access the server via TCP port 3306 (MySQL). Additionally, the engineer wants to ensure that all other traffic to the server is denied. Which ACL configuration would best achieve this requirement?

Accepted Answer

`access-list 100 permit tcp 192.168.1.0 0.0.0.255 host 192.168.1.10 eq 3306`

Question 6

In a network utilizing Rapid Spanning Tree Protocol (RSTP), you have a topology consisting of three switches: Switch A, Switch B, and Switch C. Switch A is the root bridge, and it has two ports connected to Switch B and Switch C. Switch B has a port connected to Switch C. If Switch A receives a Bridge Protocol Data Unit (BPDU) from Switch B indicating that it has a lower Bridge ID than Switch C, what will be the resulting port states for each switch, and how will RSTP ensure loop-free topology in this scenario?

Accepted Answer

Switch A's ports to B and C will be in forwarding state, while Switch B's port to C will be in blocking state.

Question 7

In a large enterprise network, a network engineer is tasked with implementing an automation framework to streamline the deployment of network configurations across multiple devices. The engineer decides to use Ansible for this purpose. Given the scenario, which of the following best describes how Ansible achieves idempotency in its operations, ensuring that repeated executions of the same playbook do not lead to unintended changes in the network configuration?

Accepted Answer

Ansible uses a declarative language to define the desired state of the system, allowing it to compare the current state with the desired state before making any changes.

Question 8

A network engineer is troubleshooting a connectivity issue in a corporate environment where users are unable to access a critical application hosted on a remote server. The engineer uses a combination of tools including ping, traceroute, and Wireshark to diagnose the problem. After running a traceroute, the engineer notices that packets are being dropped at a specific hop. What is the most likely cause of this issue, and which troubleshooting tool would be most effective in further diagnosing the problem?

Accepted Answer

A misconfigured router at the identified hop; using Wireshark to capture packets at that hop will provide insights into the traffic flow.

Question 9

A company is experiencing a series of unauthorized access attempts to its network. The security team has implemented a multi-layered security approach, including firewalls, intrusion detection systems (IDS), and regular security audits. However, they notice that despite these measures, there are still vulnerabilities being exploited. Which of the following strategies would most effectively enhance the security posture of the network while addressing the identified vulnerabilities?

Accepted Answer

Implementing a zero-trust architecture that requires verification for every user and device attempting to access the network.

Question 10

In a corporate network, a network engineer is tasked with analyzing the types of traffic flowing through the network to optimize performance. The engineer identifies three primary traffic types: voice, video, and data. Each type has distinct characteristics and requirements. Given that voice traffic is sensitive to latency and jitter, video traffic requires a certain bandwidth to maintain quality, and data traffic is generally less sensitive to these factors, how should the engineer prioritize Quality of Service (QoS) policies to ensure optimal performance for all traffic types?

Accepted Answer

Prioritize voice traffic first, followed by video traffic, and then data traffic.

Question 11

A financial institution is assessing its network security posture and has identified several potential threats and vulnerabilities. They are particularly concerned about the risk of a Distributed Denial of Service (DDoS) attack, which could overwhelm their web services and disrupt operations. To mitigate this risk, they are considering implementing a combination of rate limiting and traffic filtering. Which of the following strategies would most effectively reduce the impact of a DDoS attack while ensuring legitimate traffic is not adversely affected?

Accepted Answer

Implementing a Web Application Firewall (WAF) with rate limiting based on user behavior analysis.

Question 12

In a virtualized data center environment, a network engineer is tasked with optimizing resource allocation for a set of virtual machines (VMs) running on a hypervisor. Each VM has specific resource requirements: VM1 needs 2 vCPUs and 4 GB of RAM, VM2 requires 1 vCPU and 2 GB of RAM, and VM3 demands 4 vCPUs and 8 GB of RAM. The hypervisor host has a total of 8 vCPUs and 16 GB of RAM available. If the engineer decides to allocate resources based on the principle of overcommitment, which allows for more virtual resources to be allocated than the physical resources available, what is the maximum number of VMs that can be effectively run on the hypervisor without exceeding the physical limits, assuming the engineer wants to maintain a minimum of 20% resource headroom for performance?

Accepted Answer

3 VMs

Question 13

In a network automation scenario, a network engineer is tasked with creating a Python script that retrieves the current configuration of multiple Cisco routers using the Netmiko library. The script should connect to each router, execute the command `show running-config`, and save the output to a text file named after each router\'s hostname. The engineer needs to ensure that the script handles exceptions properly and retries the connection up to three times in case of a failure. Which of the following best describes the key components that should be included in the script to achieve this functionality?

Accepted Answer

A loop to iterate through the list of routers, a try-except block for error handling, and a function to save the output to a file.

Question 14

In a large enterprise network, an organization is implementing AI-driven operations to enhance its network management capabilities. The network consists of multiple branches, each with its own set of devices and applications. The AI system is designed to analyze traffic patterns, predict potential failures, and optimize resource allocation. If the AI system identifies a sudden spike in traffic that exceeds the normal threshold by 150%, what would be the most effective initial response to mitigate potential network congestion and ensure service continuity?

Accepted Answer

Automatically allocate additional bandwidth to the affected segment of the network.

Question 15

In a corporate environment, a network engineer is tasked with designing a scalable and resilient network architecture for a growing organization. The organization plans to implement a hybrid cloud solution that integrates on-premises resources with public cloud services. Which of the following design principles should the engineer prioritize to ensure optimal performance and reliability in this hybrid environment?

Accepted Answer

Implementing a software-defined WAN (SD-WAN) to optimize traffic routing and improve application performance across both on-premises and cloud resources.

Question 16

In a corporate environment, a network security team is tasked with implementing a Defense in Depth strategy to protect sensitive data from potential breaches. They decide to deploy multiple layers of security controls, including firewalls, intrusion detection systems (IDS), and endpoint protection. After assessing the current security posture, they identify that the firewall is configured to allow all outbound traffic, while the IDS is set to alert on suspicious activities but does not block them. Given this scenario, which combination of adjustments would most effectively enhance the Defense in Depth strategy while ensuring that sensitive data remains protected?

Accepted Answer

Configure the firewall to restrict outbound traffic based on application and user roles, and enable blocking features on the IDS to prevent suspicious activities from occurring.

Question 17

In a corporate network, a network engineer is tasked with implementing Quality of Service (QoS) to prioritize voice traffic over regular data traffic. The engineer decides to classify and mark the voice packets using Differentiated Services Code Point (DSCP) values. If the voice traffic is assigned a DSCP value of 46, what is the expected behavior of the network devices when handling this traffic, and how does it compare to a DSCP value of 0?

Accepted Answer

The voice traffic will receive expedited forwarding treatment, ensuring low latency and high priority, while the traffic with a DSCP value of 0 will be treated as best-effort traffic.

Question 18

In a large enterprise network, a company is planning to implement a Cisco Enterprise Architecture that includes a hierarchical design model. The network will consist of core, distribution, and access layers. The IT team is tasked with ensuring that the architecture supports scalability, redundancy, and efficient traffic management. Given the following requirements: the core layer must provide high-speed connectivity and redundancy, the distribution layer must aggregate traffic from multiple access layer switches, and the access layer must connect end devices while providing security features. Which design principle should the team prioritize to ensure optimal performance and reliability across all layers?

Accepted Answer

Implementing a modular design that allows for easy upgrades and scalability

Question 19

A company is implementing a new network security policy that includes the use of a firewall and intrusion detection system (IDS). The network administrator is tasked with ensuring that the firewall is configured to allow only specific types of traffic while the IDS monitors for any unauthorized access attempts. Given the following traffic types: HTTP, HTTPS, FTP, and Telnet, which configuration would best enhance the security posture of the network while allowing necessary business operations?

Accepted Answer

Allow HTTP and HTTPS traffic, deny FTP and Telnet traffic.

Question 20

In a corporate network, a network engineer is tasked with implementing Quality of Service (QoS) to ensure that voice traffic is prioritized over regular data traffic. The engineer decides to use Differentiated Services Code Point (DSCP) values to classify and mark packets. If the voice traffic is assigned a DSCP value of 46 and the data traffic is assigned a DSCP value of 0, what is the expected behavior of the network devices when handling these packets, and how does this relate to the overall QoS strategy?

Accepted Answer

The network devices will prioritize packets with a DSCP value of 46, ensuring that voice traffic experiences minimal latency and jitter compared to data traffic with a DSCP value of 0.

Question 21

In a network utilizing Rapid Spanning Tree Protocol (RSTP), a switch receives a Bridge Protocol Data Unit (BPDU) indicating that a neighboring switch has a lower Bridge ID. If the local switch has a Bridge ID of 32768 and the neighboring switch has a Bridge ID of 32769, what action should the local switch take in response to this BPDU? Additionally, consider that the local switch has a port in the Discarding state and another in the Learning state. How will the local switch\'s port states change as a result of this BPDU?

Accepted Answer

Transition the port in the Discarding state to the Learning state and keep the port in the Learning state unchanged.

Question 22

In a 5G network architecture, consider a scenario where a mobile operator is deploying a new service that requires ultra-reliable low-latency communication (URLLC). The operator needs to determine the optimal configuration of the Radio Access Network (RAN) and the Core Network (CN) to meet the stringent latency requirements of less than 1 millisecond. Which of the following configurations would best support this requirement while ensuring efficient resource allocation and minimal interference?

Accepted Answer

Utilizing a distributed RAN architecture with edge computing capabilities and a Service-Based Architecture (SBA) in the Core Network

Question 23

A network engineer is tasked with designing a VLAN architecture for a medium-sized enterprise that has multiple departments, including HR, Finance, and IT. Each department requires its own VLAN for security and traffic management. The engineer decides to implement VLANs with the following configurations: VLAN 10 for HR, VLAN 20 for Finance, and VLAN 30 for IT. The engineer also needs to ensure that inter-VLAN routing is configured correctly to allow communication between these VLANs while maintaining security policies. If the engineer uses a Layer 3 switch for inter-VLAN routing, what is the minimum number of IP subnets required to support this configuration, assuming each VLAN will have a separate subnet?

Accepted Answer

3

Question 24

In a network utilizing the OpenFlow protocol, a network administrator is tasked with configuring a flow table to manage traffic for a specific application that requires low latency. The application generates packets that must be forwarded to a specific server based on their source IP address. The administrator decides to implement a flow entry that matches packets from the source IP range of 192.168.1.0/24 and sets the action to forward these packets to port 2. Given that the flow table has a maximum of 100 entries and the administrator wants to ensure that the flow table remains efficient, which of the following strategies should the administrator consider to optimize the flow table usage while maintaining the required functionality?

Accepted Answer

Use wildcard matching to consolidate multiple flow entries into a single entry that matches a broader range of source IP addresses.

Question 25

In a corporate network, the IT department is tasked with implementing Quality of Service (QoS) to prioritize voice traffic over regular data traffic. The network consists of multiple VLANs, and the IT team decides to use Differentiated Services Code Point (DSCP) values to classify and mark packets. If the voice traffic is assigned a DSCP value of 46, what is the expected behavior of the network devices when they encounter packets with this DSCP value, and how should the IT team configure the network to ensure that voice packets receive the highest priority?

Accepted Answer

Network devices should treat packets with DSCP 46 as Expedited Forwarding (EF) and ensure they are forwarded with low latency and minimal jitter.

Question 26

A company is planning to deploy a wireless network across a large office building with multiple floors. The building has a total area of 50,000 square feet, and the company wants to ensure optimal coverage and minimal interference. They decide to use 802.11ac access points, which have a maximum range of approximately 150 feet indoors. Given that the access points will be mounted on the ceiling, how many access points should the company deploy to ensure complete coverage, assuming each access point can effectively cover a circular area with a radius of 150 feet?

Accepted Answer

10

Question 27

A financial institution is implementing an Intrusion Detection and Prevention System (IDPS) to monitor its network traffic for potential threats. The IDPS is configured to operate in inline mode, allowing it to actively block malicious traffic. During a routine analysis, the security team notices that the IDPS is generating a high number of false positives, leading to legitimate traffic being blocked. To address this issue, the team decides to adjust the sensitivity settings of the IDPS. What is the most effective approach for the team to take in order to reduce false positives while maintaining a robust security posture?

Accepted Answer

Implement a more granular rule set that allows for specific traffic patterns while excluding known benign traffic.

Question 28

In a large enterprise network utilizing Cisco DNA Center, the network administrator is tasked with implementing a policy-based approach to manage network resources effectively. The administrator needs to ensure that the Quality of Service (QoS) policies are applied correctly to prioritize voice traffic over video traffic. Given that the voice traffic requires a minimum bandwidth of 100 kbps and a maximum latency of 150 ms, while video traffic can tolerate a minimum bandwidth of 200 kbps and a maximum latency of 300 ms, how should the administrator configure the QoS policies to ensure optimal performance for both types of traffic?

Accepted Answer

Configure the QoS policy to classify voice traffic with a higher priority than video traffic, ensuring that voice packets are marked with DSCP values that reflect their priority level.

Question 29

A company is implementing a new network security policy that includes the use of a firewall and an intrusion detection system (IDS). The network administrator is tasked with ensuring that the firewall is configured to allow only necessary traffic while the IDS is set to monitor for any unauthorized access attempts. After configuring the firewall, the administrator notices that legitimate traffic is being blocked. What is the most effective approach to resolve this issue while maintaining a high level of security?

Accepted Answer

Review and adjust the firewall rules to allow the specific legitimate traffic while keeping the overall security posture intact.

Question 30

In a service provider network utilizing MPLS, a network engineer is tasked with configuring a new MPLS label-switched path (LSP) between two routers, R1 and R2. The engineer needs to ensure that the LSP can handle a traffic load of 1 Gbps with a maximum latency of 50 ms. Given that the average packet size is 1500 bytes, calculate the minimum number of labels required to maintain the desired performance, considering that each label adds an overhead of 4 bytes. Additionally, if the network experiences a 10% increase in traffic, how would this affect the LSP configuration in terms of bandwidth allocation?

Accepted Answer

The minimum number of labels required is 2, and the LSP should be configured to accommodate 1.1 Gbps.

CISCO 350-401 Implementing and Operating Cisco Enterprise Network Core Technologies (ENCOR) Free Practice Test — 30 Questions

A lot more is already mapped out

About the CISCO 350-401 Implementing and Operating Cisco Enterprise Network Core Technologies (ENCOR) Certification