CCNP/CCIE(350-401)ENCOR 题库（2020.03.14）
Number: 350-401
Passing Score: 825
Time Limit: 140 min
File Version: 1.0
CCNP/CCIE(350-401)ENCOR 题库（2020.03.14）
Implementing Cisco Enterprise Network Core Technologies
CCNP题库战报QQ交流群：138131305
CCNP最新题库战报地址：http://bbs.hh010.com/forum-263-1.htm
下载官方正版题库、看最新考试战报，请随时关注 鸿鹄论坛 http://bbs.hh010.com
思科华为考试报名全国优惠，报名请联系鸿鹄全国区客服
QQ 613523101
QQ 613523103
QQ 613523105
QQ 613523107
QQ 613523108
QQ 613523109
鸿鹄论坛官方淘宝店铺：http://hh010.taobao.com/
鸿鹄论坛官方微信公众号：
更多资源请访问鸿鹄论坛：http://bbs.hh010.com/
Exam A
QUESTION 1 Which function does a fabric edge node perform in an SD-Access
deployment?
A. Connects endpoints to the fabric and forwards their traffic.
B. Encapsulates end-user data traffic into LISP.
C. Connects the SD-Access fabric to another fabric or external Layer 3 networks.
D. Provides reachability between border nodes in the fabric underlay.
Correct Answer: A
Section: (none)
Explanation
Explanation/Reference:
QUESTION 2
Refer to the exhibit.
Which privilege level is assigned to VTY users?
A. 1
B. 7
更多资源请访问鸿鹄论坛：http://bbs.hh010.com/
C. 13
D. 15
Correct Answer: A
Section: (none)
Explanation
Explanation/Reference:
QUESTION 3
What is the difference between a RIB and a FIB?
A. The FIB is populated based on RIB content.
B. The RIB maintains a minor image of the FIB.
C. The RIB is used to make IP source prefix-based switching decisions.
D. The FIB is where all IP routing information is stored.
Correct Answer: A
Section: (none)
Explanation
Explanation/Reference:
QUESTION 4 Which requirement for an Ansible-
managed node is true?
A. It must have an SSH server running.
B. It must be a Linux server or a Cisco device.
C. It must support ad hoc commands.
D. It must have an Ansible Tower installed.
Correct Answer: A
Section: (none)
Explanation
Explanation/Reference:
QUESTION 5 A client device fails to see the enterprise SSID, but other client devices are
connected to it.
What is the cause of this issue?
A. The client has incorrect credentials stored for the configured broadcast SSID.
B. The hidden SSID was not manually configured on the client.
C. The broadcast SSID was not manually configured on the client.
D. The client has incorrect credentials stored for the configured hidden SSID.
Correct Answer: B
Section: (none)
Explanation
Explanation/Reference:
QUESTION 6 Which two descriptions of FlexConnect mode for Cisco APs are true?
(Choose two.)
更多资源请访问鸿鹄论坛：http://bbs.hh010.com/
A. APs that operate in FlexConnect mode cannot detect rogue APs.
B. When connected to the controller, FlexConnect APs can tunnel traffic back to the controller. C. FlexConnect mode is used when the APs are set up in a mesh environment and used to bridge between each other.
C. FlexConnect mode is a feature that is designed to allow specified CAPWAP-enabled APs to exclude themselves from managing data traffic between dents and infrastructure.
D. FlexConnect mode is a wireless solution for branch office and remote office deployments.
Correct Answer: B
Section: (none)
Explanation
Explanation/Reference:
Reference: https://www.cisco.com/c/en/us/td/docs/wireless/controller/7-2/configuration/guide/cg/cg_flexconnect.html
QUESTION 7 Which OSPF network types are compatible and allow communication through the two
peering devices?
A. point-to-multipoint to nonbroadcast
B. broadcast to nonbroadcast
C. point-to-multipoint to broadcast
D. broadcast to point-to-point
Correct Answer: B
Section: (none)
Explanation
Explanation/Reference:
Reference: https://www.freeccnaworkbook.com/workbooks/ccna/configuring-ospf-network-types
QUESTION 8 Which NGFW mode blocks flows
crossing the firewall?
A. tap
B. inline
C. passive
D. inline tap
Correct Answer: B
Section: (none)
Explanation
Explanation/Reference:
Reference: https://www.cisco.com/c/en/us/support/docs/security/firepower-ngfw/200924-configuring-firepower-threat-defense-int.html
QUESTION 9 Which statement about route targets is true when
using VRF-Lite?
A. Route targets control the import and export of routes into a customer routing table.
B. When BGP is configured, route targets are transmitted as BGP standard communities.
C. Route targets allow customers to be assigned overlapping addresses.
D. Route targets uniquely identify the customer routing table.
Correct Answer: A
Section: (none)
Explanation
Explanation/Reference:
QUESTION 10 How does Cisco TrustSec enable more flexible access controls for dynamic networking environments
and data centers?
更多资源请访问鸿鹄论坛：http://bbs.hh010.com/
A. uses flexible NetFlow
B. assigns a VLAN to the endpoint
C. classifies traffic based on advanced application recognition
D. classifies traffic based on the contextual identity of the endpoint rather than its IP address
Correct Answer: D
Section: (none)
Explanation
Explanation/Reference:
Reference: https://www.cisco.com/c/dam/en/us/products/collateral/security/identity-services-engine/at_a_glance_c45-726831.pdf
QUESTION 11
Refer to the exhibit.
Which statement about the OPSF debug output is true?
A. The output displays OSPF hello messages which router R1 has sent or received on interface Fa0/1.
B. The output displays OSPF messages which router R1 has sent or received on all interfaces.
C. The output displays OSPF messages which router R1 has sent or received on interface Fa0/1.
D. The output displays OSPF hello and LSACK messages which router R1 has sent or received.
Correct Answer: A
Section: (none)
Explanation
Explanation/Reference:
QUESTION 12
Which LISP infrastructure device provides connectivity between non-LISP sites and LISP sites by receiving non-LISP traffic with a LISP site destination?
A. PITR
B. map resolver
C. map server
D. PETR
Correct Answer: A
Section: (none)
Explanation
Explanation/Reference:
Reference: https://www.cisco.com/c/en/us/td/docs/solutions/Enterprise/Data_Center/DCI/5-0/LISPmobility/DCI_LISP_Host_Mobility/LISPmobile_2.html
QUESTION 13
Which two protocols are used with YANG data models? (Choose two.)
A. TLS
B. RESTCONF
C. SSH
D. NETCONF
E. HTTPS
更多资源请访问鸿鹄论坛：http://bbs.hh010.com/
- 1
- 2
前往页