Updated Apr-2026 Exam Engine for 350-401 Exam Free Demo & 365 Day Updates
Exam Passing Guarantee 350-401 Exam with Accurate Quastions!
NEW QUESTION # 55 
Refer to the exhibit. An engineer is investigating why guest users are able to access other guest user devices when the users are connected to the customer guest WLAN. What action resolves this issue?
- A. implement MFP client protection
- B. implement Wi-Fi direct policy
- C. implement split tunneling
- D. implement P2P blocking
Answer: C
Explanation:
Explanation
https://www.cisco.com/c/en/us/td/docs/wireless/controller/8-1/configurationguide
NEW QUESTION # 56 
Refer to the exhibit. A POST /discovery request spawns an asynchronous task. After querying for more information about the task, the Cisco DNA Center platform returns the REST API response. What is the status of the discovery task?
- A. successful
- B. failed
- C. restarted
- D. stopped
Answer: A
NEW QUESTION # 57
Refer to the exhibit.
Which type of antenna do the radiation patterns present?
- A. Dipole
- B. Yagi
- C. Patch
- D. Omnidirectional
Answer: C
NEW QUESTION # 58
Drag and drop the descriptions from the left onto the QoS components they describe on the right.
Answer:
Explanation:
NEW QUESTION # 59
Relet lo Ibe exhibit.
An ertgineer must modify the existing configuration so that R2 can take over as the primary router when serial interface 0/0.1 on R1 goes down. Whtch command must the engineer apply''
- A. R2# standby 100 priority 100
- B. R2W standby 100 track 26 decrement 10
- C. R2# track 26 interface SerialWO.1 line-protocol
- D. R2# standby 100 preempt
Answer: B
NEW QUESTION # 60
Drag and drop the snippets onto the blanks within the code to construct a script that shows all logging that occurred on the appliance from Sunday until 9:00 p.m Thursday Not all options are used.
Answer:
Explanation:
NEW QUESTION # 61
Which two results occur if Cisco DNA center loses connectivity to devices in the SD-ACCESS fabric?
(Choose two)
- A. All devices reload after detecting loss of connection to Cisco DNA Center
- B. User connectivity is unaffected
- C. Cisco DNA Center is unable to collect monitoring data in Assurance
- D. Users lose connectivity
- E. Already connected users are unaffected, but new users cannot connect
Answer: B,E
Explanation:
When Cisco DNA Center loses connectivity to devices in the SD-ACCESS fabric, already connected users remain unaffected, ensuring continuous user connectivity (B). However, new users cannot connect due to the loss of communication with Cisco DNA Center . The devices do not reload simply because of the lost connection (A), and while Cisco DNA Center cannot collect monitoring data in Assurance (D), this does not directly affect user connectivity. Users also do not lose connectivity (E) as the fabric continues to function for existing connections.
NEW QUESTION # 62
A response code of 404 is received while using the REST API on Cisco UNA Center to POST to this URI.
/dna/intent/api/v1 /template-programmer/project
What does the code mean?
- A. The request accepted for processing, but the processing was not completed.
- B. The client made a request a resource that does not exist.
- C. The POST/PUT request was fulfilled and a new resource was created, Information about the resource is in the response body.
- D. The server has not implemented the functionality that is needed to fulfill the request.
Answer: B
Explanation:
The 404 (Not Found) error status code indicates that the REST API can't map the client's URI to a
resource but may be available in the future. Subsequent requests by the client are permissible.
NEW QUESTION # 63
Which protocol is implemented to establish secure control plane adjacencies between Cisco SD-WAN nodes?
- A. IKF
- B. ESP
- C. TLS
- D. IPsec
Answer: C
Explanation:
The protocol used to establish secure control plane adjacencies between Cisco SD-WAN nodes is TLS (Transport Layer Security). In the Cisco SD-WAN architecture, TLS provides a secure channel for control plane traffic between the various SD-WAN components, ensuring both privacy and data integrity. This is critical for maintaining a secure network environment, especially when transmitting sensitive information across the control plane.
NEW QUESTION # 64
Which protocol does REST API rely on to secure the communication channel?
- A. SSH
- B. TCP
- C. HTTP
- D. HTTPS
Answer: D
Explanation:
The REST API accepts and returns HTTP (not enabled by default) or HTTPS messages that contain JavaScript Object Notation (JSON) or Extensible Markup Language (XML) documents. You can use any programming language to generate the messages and the JSON or XML documents that contain the API methods or Managed Object (MO) descriptions.
Reference: https://www.cisco.com/c/en/us/td/docs/switches/datacenter/aci/apic/sw/2- x/rest_cfg/2_1_x/b_Cisco_APIC_REST_API_Configuration_Guide/b_Cisco_APIC_REST_API_Config uration_Guide_chapter_01.html
NEW QUESTION # 65
An engineer must configure HSRP for VLAN 1200 on SW1. The second switch is configured by using the last usable IP address in the network as the virtual IP. Which command set accomplishes this task?
- A. SW1(config)# interface vlan 1200
SW1(config-if)# ip address 172.12.0.1 255.255.255.0
SW1(config-if)# standby 1200 ip 172.12.0.254
SW1(config-if)# standby 1200 timers 5 15
SW1(conflg-it)# standby 1200 preempt - B. SW1(config)# interface vlan 1200
SW1(config-if)# ip address 172.12.0.2 255.255.255.0
SW1(config-if)# standby 1200 ip 172.12.0.254
SW1(config-if)# standby 1200 timers 5 15
SW1(conflg-it)# standby 1200 preempt - C. SW1(config)# interface vlan 1200
SW1(config-if)# ip address 172.12.0.254 255.255.255.0
SW1(config-if)# standby version 2
SW1(config-if)# standby 1200 ip 172.12.0.2
SW1(conflg-it)# standby 1200 preempt - D. SW1(config)# interface vlan 1200
SW1(config-if)# ip address 172.12.0.2 255.255.255.0
SW1(config-if)# standby version 2
SW1(config-if)# standby 1200 ip 172.12.0.254
SW1(conflg-it)# standby 1200 preempt
Answer: D
NEW QUESTION # 66
An engineer must configure HSRP group 300 on a Cisco IOS router. When the router is functional, it must be the must be the active HSRP router. The peer router has been configured using the default priority value.
Which command set is required?
- A.
- B.
- C.
- D.
Answer: B
NEW QUESTION # 67
Which technology is used to provide Layer 2 and Layer 3 logical networks in the Cisco SD-Access architecture?
- A. underlay network
- B. VPN routing/forwarding
- C. overlay network
- D. easy virtual network
Answer: C
Explanation:
NEW QUESTION # 68
Wireless users report frequent disconnections from the wireless network. While troubleshooting a network engineer finds that after the user a disconnect, the connection re-establishes automatically without any input required. The engineer also notices these message logs .
Which action reduces the user impact?
- A. increase BandSelect
- B. increase the dynamic channel assignment interval
- C. increase the AP heartbeat timeout
- D. enable coverage hole detection
Answer: B
NEW QUESTION # 69
Refer to the exhibit.
Which action results from executing the Python script?
- A. display the output of a command that is entered on that device
- B. display the output of a command that is entered on that device in a single line
- C. SSH to the IP address that is manually entered on that device
- D. display the unformatted output of a command that is entered on that device
Answer: B
NEW QUESTION # 70
Which configuration allows administrators to configure the device through the console port and use a network authentication server?
- A.
- B.
- C.
- D.
Answer: B
NEW QUESTION # 71
Refer io me exhibit.
An engineer configures the trunk and proceeds to configure an ESPAN session to monitor VLANs10. 20. and
30. Which command must be added to complete this configuration?
- A. Devic(config.mon.erspan.src-dst)# no vrf 1
- B. Devic(config.mon.erspan.src-dst)# erspan id 6
- C. Device(config.mon.erspan.stc)# no filter vlan 30
- D. Device(config.mon-erspan.Src-dst)# mtu 1460
Answer: C
NEW QUESTION # 72 
Answer:
Explanation:
See the solution below in Explanation:
Explanation:
Solution:
R22
config t
int tunn0
vrf forwarding FINANCE
ip add 10.11.22.2 255.255.255.0
tunn so e0/0
tunn dest 209.165.200.230
no shut
int et0/1
vrf forward FINANCE
ip add 10.22.22.1 255.255.255.252
no shut
ip route vrf FINANCE 10.10.111.0 255.255.255.0 tunn0
wr
NEW QUESTION # 73
In a Cisco SD-Access network architecture, which access layer cabling design is optimal for the underlay network?
- A. Switches are connected to each upstream distribution device.
- B. Switches are connected to each upstream distribution and core device.
- C. Switches are cross-linked at the same layer and have a single connection to each upstream distribution device.
- D. Switches are cross-linked to devices at the same layer and at the upstream and downstream devices.
Answer: C
Explanation:
In a Cisco SD-Access network architecture, the optimal cabling design for the underlay network is to have switches cross-linked at the same layer with a single connection to each upstream distribution device. This design supports redundancy and efficient traffic flow1.
References: Cisco SD-Access Solution Design Guide1.
NEW QUESTION # 74
In a traditional 3 tier topology, an engineer must explicitly configure a switch as the root bridge and exclude it from any further election process for the spanning-tree domain. Which action accomplishes this task?
- A. Configure root guard and portfast on all access switch ports.
- B. Configure the spanning-tree priority to 32768
- C. Configure the spanning-tree priority equal to 0.
- D. Configure BPDU guard in all switch-to-switch connections.
Answer: A
Explanation:
Explanation
NEW QUESTION # 75
A GRE tunnel is down with the error message %TUN-5-RECUR DOWN:
Which two options describe possible causes of the error? (Choose two)
- A. The tunnel destination is being routed out of the tunnel interface
- B. The tunnel mode and tunnel IP address are misconfigured
- C. Incorrect destination IP addresses are configured on the tunnel
- D. There is link flapping on the tunnel
- E. There is instability in the network due to route flapping
Answer: A,E
Explanation:
Explanation
The %TUN-5-RECURDOWN: Tunnel0 temporarily disabled due to recursive routing error message means that the generic routing encapsulation (GRE) tunnel router has discovered a recursive routing problem. This condition is usually due to one of these causes:
+ A misconfiguration that causes the router to try to route to the tunnel destination address using the tunnel interface itself (recursive routing)
+ A temporary instability caused by route flapping elsewhere in the network
NEW QUESTION # 76
Which JSON script is properly formatted?
- A. Option A
- B. Option C
- C. Option D
- D. Option B
Answer: C
NEW QUESTION # 77
A company plans to implement intent-based networking in its campus infrastructure. Which design facilities a migrate from a traditional campus design to a programmer fabric designer?
- A. routed access
- B. three-tier
- C. two-tier
- D. Layer 2 access
Answer: C
Explanation:
Explanation
Intent-based Networking (IBN) transforms a hardware-centric, manual network into a controller-led network that captures business intent and translates it into policies that can be automated and applied consistently across the network. The goal is for the network to continuously monitor and adjust network performance to help assure desired business outcomes. IBN builds on software-defined networking (SDN). SDN usually uses spine-leaf architecture, which is typically deployed as two layers: spines (such as an aggregation layer), and leaves (such as an access layer).
NEW QUESTION # 78
Refer to the exhibit.
Assuming that R is a CE router, which VRF is assigned to Gi0/0 on R1?
- A. Management VRF
- B. VRF VPN_B
- C. VRF VPN_A
- D. Default VRF
Answer: D
NEW QUESTION # 79
......
Exam Questions for 350-401 Updated Versions With Test Engine: https://exam-labs.exam4tests.com/350-401-pdf-braindumps.html