Free 350-401 Exam Braindumps
Implementing Cisco Enterprise Network Core Technologies (ENCOR) Questions 291–295 (page: 60)

Updated On: 10-Feb-2026

Refer to the exhibit.


Security policy requires all idle exec sessions to be terminated in 600 seconds.
Which configuration achieves this goal?

  1. line vty 0 15 absolute-timeout 600
  2. line vty 0 15 no exec-timeout
  3. line vty 0 15 exec-timeout 10 0
  4. line vty 0 4 exec-timeout 600

Answer(s): C



Refer to the exhibit.



An engineer must block all traffic from a router to its directly connected subnet 209.165.200.0/24. The engineer applies access control list EGRESS in the outbound direction on the GigabitEthernet0/0 interface of the router. However, the router can still ping hosts on the 209.165.200.0/24 subnet.
What explains this behavior?

  1. Access control lists that are applied outbound to a router interface do not affect traffic that is sourced from the router.
  2. After an access control list is applied to an interface, that interface must be shut and no shut for the access control list to take effect.
  3. Only standard access control lists can block traffic from a source IP address.
  4. The access control list must contain an explicit deny to block traffic from the router.

Answer(s): A



What is a characteristic of a next-generation firewall?

  1. only required at the network perimeter
  2. required in each layer of the network
  3. filters traffic using Layer 3 and Layer 4 information only
  4. provides intrusion prevention

Answer(s): D



Refer to the exhibit.


An engineer is investigating why guest users are able to access other guest user devices when the users are connected to the customer guest
WLAN. What action resolves this issue?

  1. implement P2P blocking
  2. implement MFP client protection
  3. implement Wi-Fi direct policy
  4. implement split tunneling

Answer(s): A



Refer to the exhibit.


An engineer has configured Cisco ISE to assign VLANs to clients based on their method of authentication, but this is not working as expected.
Which action will resolve this issue?

  1. enable AAA override
  2. set a NAC state
  3. utilize RADIUS profiling
  4. require a DHCP address assignment

Answer(s): C

Explanation:

Strongly suggest Enable AAA Override: https://www.cisco.com/c/en/us/support/docs/wireless-mobility/wlan-security/217043-configure-dynamic-vlan-assignment-with-c.html#anc16

From the Advance tab, enable the Allow AAA Override check box to override the WLC configuration when the RADIUS server returns the attributes needed to place the client on the proper VLAN as shown in the image



Viewing page 60 of 193
Viewing questions 296 - 300 out of 1067 questions


Post your Comments and Discuss Cisco 350-401 exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!