Loading demo links...
Showing 1–20 of 20 questions
DRAG DROP
Drag and drop the characteristics from the left onto the correct routing protocol types on the right.
Select and Place:
Answer is in the explanation below.
Drag and drop the snippets onto the blanks within the code to construct a script that configures BGP according to the topology. Not all options are used, and some options may be used twice.
Answer is in the explanation below.
Simulation 05
Answer is in the explanation below.
A network engineer configures BGP between R1 and R2. Both routers use BGP peer group CORP and are set up to use MD5 authentication. This message is logged to the console of router R1:
“May 5 39:85:55.469: %TCP-6-BADAUTH” Invalid MD5 digest from 10.10.10.1 (29832) to 10.120.10.1 (179) tebleid -0
Which two configurations allow a peering session to form between R1 and R2? (Choose two.)
Select all that apply, then click Submit answer.
R1(config-router)#neighbor 10.10.10.1 peer-group CORP R1(config-router)#neighbor CORP password Cisco
R2(config-router)#neighbor 10.120.10.1 peer-group CORP R2(config-router)#neighbor CORP password Cisco
R2(config-router)#neighbor 10.10.10.1 peer-group CORP R2(config-router)#neighbor PEER password Cisco
R1(config-router)#neighbor 10.120.10.1 peer-group CORP R1(config-router)#neighbor CORP password Cisco
R2(config-router)#neighbor 10.10.10.1 peer-group CORP R2(config-router)#neighbor CORP password Cisco
In which two ways does the routing protocol OSPF differ from EIGRP? (Choose two.)
Select all that apply, then click Submit answer.
OSPF supports an unlimited number of hops. EIGRP supports a maximum of 255 hops.
OSPF provides shorter convergence time than EIGRP.
OSPF is distance vector protocol. EIGRP is a link-state protocol.
OSPF supports only equal-cost load balancing. EIGRP supports unequal-cost load balancing.
OSPF supports unequal-cost load balancing. EIGRP supports only equal-cost load balancing.
Which two features does the Cisco SD-Access architecture add to a traditional campus network? (Choose two.)
Select all that apply, then click Submit answer.
private VLANs
SD-WAN
modular QoS
identity services
Refer to the exhibit.
All switches are configured with the default port priority value. Which two commands ensure that traffic from PC1 is forwarded over Gi1/3 trunk port between DWS1 and DSW2? (Choose two)
Select all that apply, then click Submit answer.
DSW2(config)#interface gi1/3
DSW1(config-if)#spanning-tree port-priority 0
DSW1(config) #interface gi1/3
DSW2(config-if)#spanning-tree port-priority 128
Which two features does the Cisco SD-Access architecture add to a traditional campus network? (Choose two.)
Select all that apply, then click Submit answer.
modular QoS
software-defined segmentation
identity services
private VLANs
SD-WAN
Which two characteristics apply to the endpoint security aspect of the Cisco Threat Defense architecture? (Choose two.)
Select all that apply, then click Submit answer.
detect and black ransomware in email attachments
outbound URL analysis and data transfer controls
user context analysis
blocking of fileless malware in real time
cloud-based analysis of threats
Refer to the exhibit. An engineer must protect the CPU of the router from high rates of NTP, SNMP, and SSH traffic. Which two configurations must be applied to drop these types of traffic when it continuously exceeds 320 kbps? (Choose two)
Select all that apply, then click Submit answer.
Option B
Option C
Option D
Option E
Which two entities are Type 1 hypervisors? (Choose two.)
Select all that apply, then click Submit answer.
Oracle VM VirtualBox
Microsoft Hyper-V
VMware server
VMware ESXi
Microsoft Virtual PC
What is a benefit of using segmentation with TrustSec?
Select an option, then click Submit answer.
Packets sent between endpoints on a LAN are encrypted using symmetric key cryptography.
Firewall rules are streamlined by using business-level profiles.
Integrity checks prevent data from being modified in transit.
Security group tags enable network segmentation.
What is one main REST security design principle?
Select an option, then click Submit answer.
password hashing
confidential algorithms
OAuth
What is one benefit of adopting a data modeling language?
Select an option, then click Submit answer.
augmenting management process using vendor centric actions around models
refactoring vendor and platform specific configurations with widely compatible configurations
augmenting the use of management protocols like SNMP for status subscriptions
deploying machine-friendly codes to manage a high number of devices
What does the LAP send when multiple WLCs respond to the CISCO_CAPWAP-CONTROLLER.localdomain hostname during the CAPWAP discovery and join process?
Select an option, then click Submit answer.
broadcast discover request
join request to all the WLCs
unicast discovery request to each WLC
Unicast discovery request to the first WLS that resolves the domain name
Which OSPF network types are compatible and allow communication through the two peering devices?
Select an option, then click Submit answer.
point-to-multipoint to nonbroadcast
broadcast to nonbroadcast
point-to-multipoint to broadcast
broadcast to point-to-point
Refer to the exhibit. An engineer attempts to configure a router on a stick to route packets between Clients, Servers, and Printers; however, initial tests show that this configuration is not working. Which command set resolves this issue?
A)
B)
C)
D)
Select an option, then click Submit answer.
Option A
Option B
Option C
Option D
A network monitoring system uses SNMP polling to record the statistics of router interfaces The SNMP queries work as expected until an engineer installs a new interface and reloads the router After this action, all SNMP queries for the router fail What is the cause of this issue?
Select an option, then click Submit answer.
The SNMP interface index changed after reboot.
The SNMP server traps are disabled for the interface index
The SNMP server traps are disabled for the link state.
How does NETCONF YANG represent data structures?
Select an option, then click Submit answer.
as strict data structures denned by RFC 6020
in an XML tree format
in an HTML format
as modules within a tree
Refer to the exhibit. Which command when applied to the Atlanta router reduces type 3 LSA flooding into the backbone area and summarizes the inter-area routes on the Dallas router?
Select an option, then click Submit answer.
Atlanta(config-router)#area 0 range 192.168.0.0 255.255.252.0
Atlanta(config-router)#area 1 range 192.168.0.0 255.255.248.0
Atlanta(config-router)#area 0 range 192.168.0.0 255.255.248.0
Atlanta(config-router)#area 1 range 192.168.0.0 255.255.252.0
This free practice test covers the Implementing Cisco Enterprise Network Core Technologies (350-401 ENCOR) (350-401) exam from Cisco. The 20 questions come free from the full 1026-question Study4Pass practice set — a quick, honest check of where you stand. The free sample includes 9 single-answer, 8 multiple-answer, 2 drag-and-drop and 1 hands-on lab questions — the same mix of formats you will meet in the full set. The set follows the real exam’s spread of topics: Designing and Implementing Cisco Enterprise Network Core Technologies, Designing and Implementing Cisco Enterprise Network Security, Designing and Implementing Cisco Enterprise Network Management and Designing and Implementing Cisco Enterprise Network Automation. The Cisco 350-401 ENCOR (Implementing and Operating Cisco Enterprise Network Core Technologies) exam is a 120-minute exam associated with the CCNP Enterprise and Cisco Certified Specialist - Enterprise Core certifications.
The target audience for the Cisco 350-401 exam includes network engineers, system administrators, and network architects who specialize in the implementation, operation and troubleshooting of enterprise networks. The prerequisite for the Cisco 350-401 Exam is to have an in-depth understanding of the technologies and topics covered in the exam, including security principles and architectures, network virtualization and…
Work through the questions one at a time and read every explanation, even for the ones you get right — the reasoning behind an answer is what the real exam tests. If one area keeps costing you marks, you have found exactly what to revise before exam day.
Think of the result as a map, not a verdict. The questions you miss point straight at the topics that need work, and the explanations tell you why the correct option wins. Candidates who loop through that cycle — practise, review the reasoning, re-test — walk into the real exam having already seen their weak spots and fixed them.
Inside the full 350-401 practice set:
There is no clock and no account needed. Answer each question, check the result, and read the explanation before moving on. For anything that still feels unclear, Ask AI is built into this AI-Enabled practice test — it explains the concept behind the question so the next one like it gets easier. Ready for more? The full 1026-question set adds a timed Exam Simulation mode, topic training for your weak areas, and a flagged-question review, so you can practise the way the real exam feels.
Yes — the 20 questions on this page are completely free, with no signup and no payment details needed.
1026 questions. The 20 free questions above are a sample of that full set, in the same style and topic balance.
Yes — every question shows the correct answer with an explanation, and Ask AI can explain the concept behind a question in plain words if you want to go deeper.
No. This is a practice test: the questions are written to mirror the real 350-401 exam’s topics and difficulty, not copied from it.
