New 2020 CCIE/CCNP 350-401 ENCOR exam questions from PassLeader 350-401 dumps! Welcome to download the newest PassLeader 350-401 VCE and PDF dumps: https://www.passleader.com/350-401.html (1239 Q&As) [Lab Simulations Available]
P.S. Free 2020 CCIE/CCNP 350-401 ENCOR dumps are available on Google Drive shared by PassLeader: https://drive.google.com/open?id=1nv6C6Az-yuR5kOXg8FV3gytDer_usQBX
NEW QUESTION 1216
Which security feature does stateless authentication and authorization use for REST API calls?
A. OAuth 2 tokens.
B. API keys.
C. SSL/TLS certificate encryption.
D. cookie-based session authentication.
Answer: A
NEW QUESTION 1217
Which port is required to allow APs to join a WLC when directed broadcasts are used on a Cisco IOS switch?
A. UDP 5246
B. TCP 5246
C. TCP 5247
D. UDP 5247
Answer: A
Explanation:
To discover a WLC, an AP sends a unicast CAPWAP Discovery Request to a controller’s IP address over UDP port 5246 or a broadcast to the local subnet.
NEW QUESTION 1218
An engineer must configure AAA on a Cisco 9800 WLC for central web authentication. Which two commands are needed to accomplish this task? (Choose two.)
A. Device(config)# aaa server radius dynamic-author
B. (Cisco Controller) > config wlan aaa-override disable < wlan-id >
C. (Cisco Controller) > config radius acct add 10.10.10.12 1812 SECRET
D. Device(config-locsvr-da-radius)# client 10.10.10.12 server-key 0 SECRET
E. (Cisco Controller) > config wlan aaa-override enable < wlan-id >
Answer: AD
Explanation:
https://www.cisco.com/c/en/us/td/docs/wireless/controller/9800/config-guide/b_wl_16_10_cg/central-web-authentication.html
NEW QUESTION 1219
How does a Type 2 hypervisor function?
A. It runs on a virtual server and includes its own operating system.
B. It runs directly on a physical server and includes its own operating system.
C. It is installed as an application on an already installed operating system.
D. It enables other operating systems to run on it.
Answer: C
NEW QUESTION 1220
Which element is unique to a Type 2 hypervisor?
A. host hardware
B. memory
C. host OS
D. VM OS
Answer: C
NEW QUESTION 1221
How do OSPF and EIGRP compare?
A. Both OSPF and EIGRP use the concept of areas.
B. OSPF and EIGRP use the same administrative distance.
C. EIGRP shows successor and feasible successor routes, and OSPF shows all known routes.
D. EIGRP shows all known routes, and OSPF shows successor and feasible successor routes.
Answer: C
NEW QUESTION 1222
What do Chef and Ansible have in common?
A. They use YAML as their primary configuration syntax.
B. They rely on a procedural approach.
C. They rely on a declarative approach.
D. They are clientless architectures.
Answer: B
NEW QUESTION 1223
A script contains the statement “while loop != 999:” Which value terminates the loop?
A. A value not equal to 999.
B. A value less than or equal to 999.
C. A value equal to 999.
D. A value greater than or equal to 999.
Answer: C
Explanation:
A while continues as far the condition is true. The true condition is “Loop” variable to be different from 999. When the “Loop” variable is equal to 999 the condition is false then the while finish.
NEW QUESTION 1224
Which method ensures the confidentiality of data exchanged over a REST API?
A. Use the POST method instead of URL-encoded GET to pass parameters.
B. Use TLS to secure the underlying HTTP session.
C. Deploy digest-based authentication to protect the access to the API.
D. Encode sensitive data using Base64 encoding.
Answer: B
NEW QUESTION 1225
Which two advanced security features are available in next-generation firewalls but were not provided by standard firewalls? (Choose two.)
A. stateful traffic inspection
B. remote access VPN
C. network telemetry
D. intrusion prevention
E. application control
Answer: DE
NEW QUESTION 1226
Which wireless deployment mode uses a Flex architecture and allows Layer 2 roaming between APs without a physical wireless controller?
A. autonomous mode
B. fabric
C. unified
D. Cisco Mobility Express
Answer: D
NEW QUESTION 1227
When should the MAC authentication bypass feature be used on a switch port?
A. when the attached host supports 802.1X and must authenticate itself based on its MAC address instead of user credentials
B. when the attached host supports limited 802.1X
C. when authentication is required, but the attached host does not support 802.1X
D. when authentication should be bypassed for select hosts based on their MAC address
Answer: C
Explanation:
MAC Authentication Bypass (MAB) is an access control technique that enables port-based access control using the MAC address of an endpoint, and it is typically used as a fallback mechanism to 802.1X.
NEW QUESTION 1228
Which resource must the hypervisor make available to the virtual machines?
A. bandwidth
B. IP address
C. processor
D. secure access
Answer: C
NEW QUESTION 1229
Which two items are found in YANG data models? (Choose two.)
A. HTTP return codes
B. rpc statements
C. JSON schema
D. container statements
E. XML schema
Answer: BD
NEW QUESTION 1230
Drag and Drop
Drag and drop the snippets onto the blanks within the code to construct a script that blocks a MAC address.
Answer:
NEW QUESTION 1231
……
New 2020 CCIE/CCNP 350-401 ENCOR exam questions from PassLeader 350-401 dumps! Welcome to download the newest PassLeader 350-401 VCE and PDF dumps: https://www.passleader.com/350-401.html (1239 Q&As) [Lab Simulations Available]
P.S. Free 2020 CCIE/CCNP 350-401 ENCOR dumps are available on Google Drive shared by PassLeader: https://drive.google.com/open?id=1nv6C6Az-yuR5kOXg8FV3gytDer_usQBX
