Cisco 350-401 Practice Exams
Last updated on Oct 22,2026- Exam Code: 350-401
- Exam Name: Implementing and Operating Cisco Enterprise Network Core Technologies (ENCOR)
- Certification Provider: Cisco
- Latest update: Oct 22,2026
Which command set configures RSPAN to capture outgoing traffic from VLAN 3 on interface GigabitEthernet 0/3 while ignoring other VLAN traffic on the same interface?
- A . monitor session 2 source interface gigabitethernet0/3 tx
monitor session 2 filter vlan 3 - B . monitor session 2 source interface gigabitethernet0/3 tx
monitor session 2 filter vlan 1- 2, 4 – 4094 - C . monitor session 2 source interface gigabitethernet0/3 rx
monitor session 2 filter vlan 3 - D . monitor session 2 source interface gigabitethernet0/3 rx
monitor session 2 filter vlan 1 – 2, 4 – 4094
Refer the exhibit.
Which router is the designated router on the segment 192.168.0.0/24?
- A . This segment has no designated router because it is a nonbroadcast network type.
- B . This segment has no designated router because it is a p2p network type.
- C . Router Chicago because it has a lower router ID
- D . Router NewYork because it has a higher router ID
Refer to the Exhibit.
Which single security feature is recommended to provide Network Access Control in the enterprise?
- A . MAB
- B . 802.1X
- C . WebAuth
- D . port security sticky MAC
A customer requests a network design that supports these requirements:
Which protocol does the design include?
- A . HSRP version 2
- B . VRRP version 2
- C . GLBP
- D . VRRP version 3
Which outbound access list, applied to the WAN interface of a router, permits all traffic except for http traffic sourced from the workstation with IP address 10.10.10.1?
- A . ip access-list extended 100
deny tcp host 10.10.10.1 any eq 80
permit ip any any - B . ip access-list extended 200
deny tcp host 10.10.10.1 eq 80 any
permit ip any any - C . ip access-list extended NO_HTTP
deny tcp host 10.10.10.1 any eq 80 - D . ip access-list extended 10
deny tcp host 10.10.10.1 any eq 80
permit ip any any
DRAG DROP
Drag and drop the characteristics from the left onto the orchestration tools they describe on the right.
Refer to the exhibit.
An engineer must modify the access control list EGRESS to allow all IP traffic from subnet 10.1.10.0/24 to 10.1.2.0/24. The access control list is applied in the outbound direction on router interface GigabitEthemet 0/1.
Which configuration commands can the engineer use to allow this traffic without disrupting existing traffic flows?
A)
B)
C)
D)
- A . Option A
- B . Option B
- C . Option C
- D . Option D
DRAG DROP
Drag and drop the characteristics from the left onto the routing protocols they describe on the right.
Wireless users report frequent disconnections from the wireless network. While troubleshooting a network engineer finds that after the user a disconnect, the connection re-establishes automatically without any input required.
The engineer also notices these message logs.
Which action reduces the user impact?
- A . increase the AP heartbeat timeout
- B . increase BandSelect
- C . enable coverage hole detection
- D . increase the dynamic channel assignment interval
Refer to the exhibit.
Assuming the WLC’s interfaces are not in the same subnet as the RADIUS server, which interface would the WLC use as the source for all RADIUS-related traffic?
- A . the interface specified on the WLAN configuration
- B . any interface configured on the WLC
- C . the controller management interface
- D . the controller virtual interface