CCNP ENCOR 350-401 Practice Quiz – CISCONET Training Solutions

Welcome to CCNP ENCOR 350-401 Practice Quiz

Test score and correct answers provided with the end of quiz review.

What access list permits all TCP-based application traffic from clients except SSH?

access-list 100 permit tcp any any range 22

access-list 100 permit tcp any any gt 22

access-list 100 deny tcp any any neq 22

access-list 100 permit tcp any any neq 22

None

What IOS command disables 802.1x authentication (EAPOL) on a switch port?

authentication port-control force-authorized

authentication port-control force-unauthorized

dot1x system-authentication none

authentication port-control none

None

What operational plane is vSmart component within Cisco SD-WAN solution?

orchestration plane

service plane

management plane

control plane

data plane

None

How is a root port selected by a switch when there are multiple interfaces with the same speed to the root bridge?

lowest bridge ID

highest interface number

lowest port ID

lowest MAC address

None

How is the MAC address and IP address of a wireless client managed when there is active Layer 2 inter-controller roaming?

client database entry is updated on master controller

foreign entry is added to new controller

client database entry is anchored to old controller and moved to new controller

client database entry is copied to new controller

client database entry is moved to new anchor controller

None

What is the correct order for BGP best path selection algorithm?

local preference > weight > AS path length > MED

weight > local preference > AS path length > router-id

weight > local preference > locally originated route > AS path length

AS path length > weight > local preference > origin type

None

What is the purpose of VTEP function within VXLAN architecture?

mapping VLANs to VXLANs within fabric

mapping VXLANs to VRF routes

map host endpoints to a LISP RLOC

encapsulation and decapsulation of packets

None

What CEF table is the source of Layer 2 forwarding information?

adjacency table

RIB table

ARP table

FIB table

TCAM table

None

What is the equivalent of a JSON object?

Python dictionary

Python list

XML array

YAML array

None

10.

What correctly describes virtual switching within a virtualized environment?

broadcast radiation only occurs between virtual machines

virtual machines do not support multicasts

virtual switches do not require a hypervisor

each virtual switch is a broadcast domain

None

11.

What is the purpose of a route distinguisher?

unique identifier for VRF route

assign a unique name to VRF

prevent overlapping addresses between VRFs

unique identifier of a VRF routing table

enable route leaking within the same VRF

None

12.

What is the only BGP attribute that can be advertised to a different BGP autonomous system?

origin code

local preference

MED

weight

None

13.

How is authentication managed between SD-WAN nodes?

DTLS

certificate

token

None

14.

What is the difference between Root Guard and BPDU Guard?

BPDU Guard transitions the switch port to blocking when BPDUs are received

BPDU guard is only supported on trunk interfaces between non-root bridges

BPDU Guard will shutdown the switch port when BPDUs are received

BPDU Guard puts the switch port in root-inconsistent state

None

15.

What is the data plane overlay within SD-Access fabric architecture?

MPLS

VXLAN

LISP

OSPF

BGP

None

1 out of 15