Practice 350-401 Exam Online

Question 1

Why would an engineer use YANG?

A : transport data between a controller and a network device

B : access data using SNMP

C : model data for NETCONF

D : translate JSON into an equivalent XML syntax

Answer: C

Question 2

Which threat defence mechanism, when deployed at the network perimeter, protects against zero-day attacks?

A : trusion prevention

B : ateful inspection

C : ndbox

D : L decryption

Answer: C

Question 3

Refer to the exhibit. Which command is required on router R1 to start receiving RESTCONF requests?

A : R1(config)# ip http accounting commands 12 default

B : R1(config)# ip http server

C : R1(config)# restconf

D : R1(config)# ip http access-class 12

Answer: C

Question 4

Reter to the exhibit.

An administrator troubleshoots intermittent connectivity from internal hosts to an external public server. Some internal hosts can connect to the server while others receive an ICMP Host Unreachable message and these hosts change over time. What is the cause of this issue?

A : translator does not use aOdress overloading

B : NAT ACL does not match alt internal hosts

C : NAT ACL and NAT pool share the same name

D : NAT pool netmask rs excessively wide

Answer: B

Question 5

Refer to the exhibit. An engineer must permit traffic from these networks and block all other traffic. An informational log message should be triggered when traffic enters from these prefixes. Which access list must be used?

A : access-list acl_subnets permit ip 10.0.32.0 0.0.7.255 access-list acl_subnets deny ip any log

B : access-list acl_subnets permit ip 10.0.32.0 255.255.248.0 log

C : access-list acl_subnets permit ip 10.0.32.0 0.0.7.255 log

D : access-list acl_subnets permit ip 10.0.32.0 0.0.0.255 log

Answer: C

Name:	Implementing Cisco Enterprise Network Core Technologies
Exam Code:	350-401
Certification:	CCNP Enterprise
Vendor:	Cisco
Total Questions:	557
Last Updated:	Nov 06, 2025

Cisco 350-401 Answers