Free 350-401 Practice Test Questions 2026

What does the statement print(format(0.8, \0%')) display?

A. 80%

B. 8.8%

C. .08%

D. 8%

What is the function of an intermediate node in a Cisco SD-Access fabric?

A. to route packets within the fabric based on the Layer 3 information in the header

B. to provide an entry and exit point between the fabric and external resources

C. to encapsulate and de-encapsulate packets with a VXLAN header

D. to provide reachability between fabric clients and nonfabric clients on the same subnet

Where is radio resource management performed in a Cisco SD-Access wireless solution?

A. DNA Center

B. wireless controller

C. Cisco CMX

D. control plane node

Which Cisco Catalyst SD-WAN component is responsible for distributing data plane traffic policies?

A. vBond

B. vManage

C. vSmart

D. WAN edge

What is contained in the VXLAN header?

A. original Layer 2 VLAN ID

B. Endpoint ID

C. VXLAN network identifier

D. source and destination RLOC ID

A system must validate access rights to all its resources and must not rely on a cached permission matrix. If the access level to a given resource is revoked but is not reflected in the permission matrix, the security is violates Which term refers to this REST security design principle?

A. economy of mechanism

B. complete mediation

C. separation of privilege

D. least common mechanism

Which antenna type should be used for a site-to-site wireless connection?

A. omnidirectional

B. patch

C. dipole

D. Yagi

Which JSON syntax is valid?

A. Option A

B. Option B

C. Option C

D. Option D

What is one characteristic of Cisco Catalyst Center (formerly DNA Center) and vManage northbound APIs?

A. They implement the NETCONF protocol.

B. They push configuration changes down to devices.

C. They exchange XML-formatted content.

D. They implement the RESTCONF protocol.

What is the data policy in a Cisco SD-WAN deployment?

A. list of ordered statements that define node configurations and authentication used within the SD-WAN overlay

B. set of statements that defines how data is forwarded based on IP pocket information and specific VPNs

C. detailed database mapping several kinds of addresses with their corresponding location

D. group of services tested to guarantee devices and links liveliness within the SD-WAN overlay

Drag and drop the code snippets from the bottom onto the blanks in the code to construct a request that configures a deny rule on an access list?

A customer wants to use a single SSID to authenticate loT devices using different passwords. Which Layer 2 security type must be configured in conjunction with Cisco ISE to achieve this requirement?

A. Identity PSK

B. Fast Transition

C. Central Web Authentication

D. Cisco Centralized Key Management