support@Free-Braindumps.com
Register Login
Cisco
CompTIA
ISC
EC-Council
EXIN
Fortinet
ITIL
Juniper
Microsoft
VMware
Avaya
SAP
Google
NVIDIA
Salesforce
Amazon
Palo Alto Networks
ISC2
CrowdStrike
Anthropic
All Vendors
  1. Home
  2. Exams
  3. Cisco
  4. 350-401

Free 350-401 Exam Braindumps
Implementing Cisco Enterprise Network Core Technologies (ENCOR) Questions 266–270 (page: 55)

Updated On: 10-Feb-2026
Page 55 of 193
PDF with 1067 Questions

Which access control list allows only TCP traffic with a destination port range of 22-443, excluding port 80?

  1. deny tcp any any eq 80 permit tcp any any gt 21 lt 444
  2. permit tcp any any range 22 443 deny tcp any any eq 80
  3. permit tcp any any eq 80
  4. deny tcp any any eq 80 permit tcp any any range 22 443

Answer(s): D



A network administrator applies the following configuration to an IOS device: aaa new-model aaa authentication login default local group tacacs+
What is the process of password checks when a login attempt is made to the device?

  1. A TACACS+ server is checked first. If that check fails, a local database is checked.
  2. A TACACS+ server is checked first. If that check fails, a RADIUS server is checked. If that check fails, a local database is checked.
  3. A local database is checked first. If that check fails, a TACACS+ server is checked. If that check fails, a RADIUS server is checked.
  4. A local database is checked first. If that check fails, a TACACS+ server is checked.

Answer(s): D


Reference:

https://www.cisco.com/c/en/us/support/docs/security-vpn/terminal-access-controller-access-control-system-tacacs-/200606-aaa-authentication-login- default-local.html



Refer to the exhibit.


Assuming the WLC's interfaces are not in the same subnet as the RADIUS server, which interface would the WLC use as the source for all RADIUS-related traffic?

  1. the controller management interface
  2. the controller virtual interface
  3. the interface specified on the WLAN configuration
  4. any interface configured on the WLC

Answer(s): C



Which component of the Cisco Cyber Threat Defense solution provides user and flow context analysis?

  1. Cisco Firepower and FireSIGHT
  2. Cisco Stealthwatch system
  3. Advanced Malware Protection
  4. Cisco Web Security Appliance

Answer(s): B



An engineer must protect their company against ransomware attacks.
Which solution allows the engineer to block the execution stage and prevent file encryption?

  1. Use Cisco Firepower and block traffic to TOR networks.
  2. Use Cisco AMP deployment with the Malicious Activity Protection engine enabled.
  3. Use Cisco Firepower with Intrusion Policy and snort rules blocking SMB exploitation.
  4. Use Cisco AMP deployment with the Exploit Prevention engine enabled.

Answer(s): B



  PDF
Viewing page 55 of 193
Viewing questions 271 - 275 out of 1067 questions


Post your Comments and Discuss Cisco 350-401 exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!