• 4.9/5.0
  • 351 Questions
  • Updated on: 25-May-2026
  • Implementing Cisco Enterprise Network Core Technologies (350-401 ENCOR)
  • 23515 Prepared

Free Cisco 350-401 Practice Questions 2026 | Implementing Cisco Enterprise Network Core Technologies (350-401 ENCOR)


Topic 1: Exam Pool A

What is required for a VXLAN tunnel endpoint to operate?

A. a VXLAN tunnel endpoint identifier

B. at least one Layer 2 interface and one Layer 3 interlace

C. at least one IP for the transit network and one IP for endpoint connectivity

D. a VXLAN network identifier

D.   a VXLAN network identifier

Refer to the exhibit. An engineer must adjust the configuration so that Router A becomes the active router. Which commands should be applied to router A? (Choose two)

A. vrrp 1 priority 90

B. vrrp 1 timers advertise 1

C. vrrp lip 10.1.0.11

D. ip address 10.1.0.11 255.0.0.0

E. vrrp 1 priority 120

C.   vrrp lip 10.1.0.11
E.   vrrp 1 priority 120

Which nodes require VXLAN encapsulation support In a Cisco SD-Access deployment?

A. core nodes

B. distribution nodes

C. border nodes

D. aggregation nodes

C.   border nodes

What is two characteristic of Cisco DNA Center and vManage northbound APIs?

A. They exchange XML-formatted content

B. They exchange JSON-kxmatted content.

C. They implement the RESTCONF protocol.

D. They implement the NETCONF protocol.

E. They exchange protobuf-formatted content.

B.   They exchange JSON-kxmatted content.
C.   They implement the RESTCONF protocol.

Refer to the exhibit.

A. Option A

B. Option B

C. Option C

D. Option D

C.   Option C

When should the MAC authentication bypass feature be used on a switch port?

A. when authentication is required, but the attached host does not support 802.1X

B. when the attached host supports 802.1X and must authenticate itself based on its MAC address instead of user credentials

C. when authentication should be bypassed for select hosts based on their MAC address

D. when the attached host supports limited 802.1X

A.   when authentication is required, but the attached host does not support 802.1X

Which consideration must be made when using BFD in a network design?

A. BFD requires a FHRP in order to provide sub second host failover.

B. BFD can be deployed without any IP routing protocols being configured.

C. NSF and graceful restart must be enabled on all participating routers.

D. Cisco Express forwarding and IP routing must be enabled on all participating routers.

D.   Cisco Express forwarding and IP routing must be enabled on all participating routers.

What is a characteristics of Wi-Fi channels?

A. The 2 4-GHz balWMS§24 non-overlapping channels

B. Devices that connect to the same Wi-Fi channel reside in the same collision domain.

C. Wi-Fi channels are spaced 30 MHz apart.

D. The 5-GHz band offers 11 different channels for Wi-Fi clients

B.   Devices that connect to the same Wi-Fi channel reside in the same collision domain.

Drag and drop the configuration management tools from the left onto the configuration styles they use on the right


What is one method for achieving REST API security?

A. using a MD5 hash to verify the integrity

B. using built-in protocols known as Web Services Security

C. using HTTPS and TLS encryption

D. using a combination of XML encryption and XML signatures

C.   using HTTPS and TLS encryption

Page 16 out of 36 Pages