Drag and drop the snippets onto the blanks within the code to construct a script that blocks a MAC address.
Correct Answer:
Explanation:
350-401 Exam Question 142
Refer to the exhibit. A network engineer checks connectivity between two routers. The engineer can ping the remote endpoint but cannot see an ARP entry. Why is there no ARP entry?
Correct Answer: A
The correct answer is A. Interface FastEthernet0/0 is configured in VRF CUST-A, so the ARP entry is also in that VRF. In Cisco VRF implementations, ARP entries are maintained separately per VRF, not in the global routing table. Cisco documentation states that with Multi-VRF CE, ARP entries are learned in separate VRFs, and the user can display them for a specific VRF. Cisco also documents the command show ip arp vrf < vrf-name > to display the ARP table for a specified VRF. That means if the interface belongs to VRF CUST-A, a normal global show ip arp 192.168.12.2 may not display the entry, even though ping vrf CUST-A 192.168.12.2 succeeds. The ARP entry exists, but it is stored under the CUST-A VRF ARP table, not the global ARP table. * B. When VRFs are used, ARP protocol is disabled in the global routing table. This is incorrect. ARP is not disabled; it is simply VRF-aware and tracked separately per VRF. * C. When VRFs are used, ARP protocol must be enabled in each VRF. This is incorrect. There is no separate requirement to manually enable ARP in each VRF for normal operation in this context. * D. The ping command must be executed in the global routing table. This is incorrect because Cisco supports pinging within a specific VRF, and the exhibit already shows the use of ping vrf CUST-A . ENCOR exam point: With VRF-aware services, always remember: * Routing table = per VRF * ARP table = per VRF * Verification commands often require the VRF keyword
350-401 Exam Question 143
Drag and drop the configuration management tools from the left onto the configuration styles they use on the right
Correct Answer:
Explanation: PROCEDURAL - CHEF DECALRATIVE - PUPPET SALTSTACK
350-401 Exam Question 144
A customer requires their wireless data traffic to egress at the switch port of the access point. Which access point mode supports this?
Correct Answer: A
350-401 Exam Question 145
What is a characteristic of the overlay network in the Cisco SD-Access architecture?
Correct Answer: D
The correct answer is D. It provides isolation among the virtual networks and independence from the physical network. Cisco SD-Access is based on two main layers: * Underlay network # Physical infrastructure (routers, switches, IP connectivity) * Overlay network # Virtualized logical network built on top of the underlay According to Cisco ENCOR architecture principles, the overlay network: * Uses technologies like LISP (control plane) and VXLAN (data plane) * Creates virtual networks (VNs) for segmentation * Provides end-to-end logical separation (macro-segmentation) * Is independent of the physical topology * Enables scalable and flexible network design Thus, the overlay abstracts the complexity of the underlay and ensures isolation between different user groups, departments, or tenants. * Directly describes virtual network segmentation * Matches Cisco's definition of overlay abstraction and independence * Core principle of SD-Access fabric design * A. Multicast and Layer 2 flooding relate more to underlay or legacy designs, not overlay behavior. * B. Describes the underlay network (physical devices), not overlay. * C. Refers to traditional network design, which SD-Access replaces. * Underlay = Physical IP network (reachability) * Overlay = Virtual segmentation & policy (VXLAN + LISP) Overlay = Abstraction + Segmentation + Independence
