Free 350-401 Exam Braindumps
Implementing Cisco Enterprise Network Core Technologies (ENCOR) Questions 286–290 (page: 59)

Updated On: 10-Feb-2026

A client with IP address 209.165.201.25 must access a web server on port 80 at 209.165.200.225. To allow this traffic, an engineer must add a statement to an access control list that is applied in the inbound direction on the port connecting to the web server.
Which statement allows this traffic?

  1. permit tcp host 209.165.200.225 lt 80 host 209.165.201.25
  2. permit tcp host 209.165.201.25 host 209.165.200.225 eq 80
  3. permit tcp host 209.165.200.225 eq 80 host 209.165.201.25
  4. permit tcp host 209.165.200.225 host 209.165.201.25 eq 80

Answer(s): D



Which standard access control entry permits traffic from odd-numbered hosts in the 10.0.0.0/24 subnet?

  1. permit 10.0.0.0 0.0.0.1
  2. permit 10.0.0.1 0.0.0.254
  3. permit 10.0.0.1 0.0.0.0
  4. permit 10.0.0.0 255.255.255.254

Answer(s): B



Refer to the exhibit.



An engineer must modify the access control list EGRESS to allow all IP traffic from subnet 10.1.10.0/24 to 10.1.2.0/24. The access control list is applied in the outbound direction on router interface GigabitEthernet 0/1.
Which configuration command set will allow this traffic without disrupting existing traffic flows?





Answer(s): D

Explanation:

you need to specify a prefix number or the newly added parameter gets put below the DENY:
permit ip 10.1.10.0 0.0.0.255 10.1.2.0 0.0.0.255
!
R1(config-ext-nacl)#do sh run | b access-list
ip access-list extended EGRESS
permit ip 10.1.100.0 0.0.0.255 10.1.2.0 0.0.0.255
deny ip any any
permit ip 10.1.10.0 0.0.0.255 10.1.2.0 0.0.0.255 <----



Which configuration restricts the amount of SSH traffic that a router accepts to 100 kbps?





Answer(s): C



Refer to the exhibit.



What step resolves the authentication issue?

  1. use basic authentication
  2. change the port to 12446
  3. target 192.168.100.82 in the URI
  4. restart the vsmart host

Answer(s): C

Explanation:

the #show control connections output demonstrated the connection to the vManage isn't up, not that vManage is not running, hence why rebooting won't help, certainly because the only reboot answer refers to vSmart so another component again. Postman needs to point to the vManage IP to establish a connection, therefore answer C is the correct answer.



Viewing page 59 of 193
Viewing questions 291 - 295 out of 1067 questions


Post your Comments and Discuss Cisco 350-401 exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!