Objective 400.010% of exam

Network Assurance

350-401 Practice Questions

Network Assurance is 10% of ENCOR 350-401 and covers the tools Cisco expects you to use to verify a live network rather than configure it. Expect questions on syslog severity levels, SNMPv2c versus SNMPv3, NetFlow and Flexible NetFlow exports, SPAN and RSPAN sessions, IP SLA probes, and DNA Center assurance and device health dashboards.

Full Practice Test →All Objectives

What this objective tests

350-401 Network Assurance — Key Topics

Configure and verify Cisco IOS tools like SNMPv3, NetFlow, SPAN/RSPAN, and IP SLA probes to monitor live traffic. The critical skill is reading syslog severity levels and IP SLA tracking output correctly.

Configuring syslog logging levels, hosts, and interpreting severity 0-7 messages
Comparing SNMPv2c community strings with SNMPv3 authPriv users and views
Building Flexible NetFlow records, exporters, and monitors for traffic analysis
Configuring local SPAN, RSPAN, and ERSPAN source/destination sessions on switches

Common exam traps

Where candidates lose marks on Network Assurance

⚠Confusing syslog severity numbers: lower numbers are more severe, so level 0 is emergencies and level 7 is debugging.
⚠Assuming SNMPv3 encryption is mandatory; authNoPriv provides authentication but no privacy, unlike authPriv.
⚠Forgetting that a SPAN destination port stops normal switching and cannot source traffic while monitoring.

350-401 Network Assurance — Practice Questions

30 questions from this objective · 10% of your 350-401 exam

Question 2mediummultiple choice

Open the full VLAN trunking answer →

A network engineer notices intermittent connectivity issues between two switches connected via a trunk link. The trunk is configured with DTP in dynamic desirable mode on one side and trunk mode on the other. Which action should the engineer take to resolve the issue?

Question 3hardmultiple choice

Review the full OSPF breakdown →

A company has a core network running OSPF in a single area (area 0). The network consists of four routers: R1, R2, R3, and R4. R1 is connected to R2 and R3. R2 is also connected to R4. R3 is also connected to R4. All links are GigabitEthernet with OSPF cost based on bandwidth (reference bandwidth 100 Gbps). The network engineer notices that traffic from R1 to a subnet behind R4 is taking a suboptimal path: R1 -> R2 -> R4, instead of R1 -> R3 -> R4 which has lower cost. Upon checking OSPF neighbor states, all adjacencies are full. The engineer verifies that the cost on the R1-R3 link is 10 and the cost on the R3-R4 link is 10, while the R1-R2 link cost is 20 and the R2-R4 link cost is 20. The total cost via R2 is 40, via R3 is 20. However, the routing table on R1 shows the next-hop as R2 for the subnet behind R4. What is the most likely cause?

Question 4hardmultiple choice

Study the full EIGRP explanation →

Refer to the exhibit. A network engineer is troubleshooting a routing issue. The route for 10.0.0.0/8 is learned via EIGRP with metric 2560512. Which change would most likely cause the metric to increase?

Exhibit

Refer to the exhibit.
```
router# show ip route 10.0.0.0
Routing entry for 10.0.0.0/8
  Known via "eigrp 100", distance 170, metric 2560512, type internal
  Redistributing via eigrp 100
  Last update from 192.168.1.1 on GigabitEthernet0/0, 00:00:05 ago
  Routing Descriptor Blocks:
  * 192.168.1.1, from 192.168.1.1, 00:00:05 ago, via GigabitEthernet0/0
      Route metric is 2560512, traffic share count is 1
      Total delay is 2000 microseconds, minimum bandwidth is 10000 Kbit
      Reliability 255/255, minimum MTU 1500 bytes
      Loading 1/255, Hops 3
```

Question 5mediummatching

Read the full wireless explanation →

Match each wireless standard to its frequency band and maximum data rate.

Drag a concept onto its matching description — or click a concept then click the description.

Concepts

Matches

5 GHz, up to 6.9 Gbps

2.4/5 GHz, up to 9.6 Gbps

2.4/5 GHz, up to 600 Mbps

2.4 GHz, up to 54 Mbps

5 GHz, up to 54 Mbps

Question 6mediummultiple choice

Network Assurance

350-401 Network Assurance — Key Topics

Where candidates lose marks on Network Assurance

350-401 Network Assurance — Practice Questions

A network engineer notices intermittent connectivity issues between two switches connected via a trunk link. The trunk is configured with DTP in dynamic desirable mode on one side and trunk mode on the other. Which action should the engineer take to resolve the issue?

Refer to the exhibit. A network engineer is troubleshooting a routing issue. The route for 10.0.0.0/8 is learned via EIGRP with metric 2560512. Which change would most likely cause the metric to increase?

Exhibit

Match each wireless standard to its frequency band and maximum data rate.

A network engineer is using Cisco DNA Center Assurance to troubleshoot a user's poor voice quality. The engineer suspects that the issue is related to network latency and jitter. Which TWO Cisco DNA Center Assurance features can provide the necessary data to analyze this issue? (Choose two.)

A network engineer is configuring a Cisco IOS router to monitor the reachability of a remote server using IP SLA. The engineer wants the router to generate a syslog message when the operation times out. Which configuration is required to achieve this?

A network engineer is configuring a Cisco IOS router to send SNMP traps to a management server. The engineer wants to ensure that traps are sent for all severity levels. Which command is required to enable SNMP traps for all severities?

A network administrator is using Cisco DNA Center Assurance to monitor the health of a wireless network. The administrator notices that some clients are experiencing poor performance. Which two actions can be taken within DNA Center Assurance to troubleshoot and resolve the issue? (Choose two.)

A network engineer is configuring a Cisco IOS router to monitor the reachability of a critical server at 10.1.1.100 using IP SLA. The engineer wants to receive a syslog message when the server becomes unreachable. Which configuration is required to achieve this?

A network administrator is using Cisco DNA Center Assurance to monitor the health of network devices. The administrator wants to receive alerts when a specific interface on a switch goes down. Which feature should be used to configure this?

A network engineer is troubleshooting a Cisco SD-WAN deployment. The engineer notices that some vEdge routers are not forming control connections to the vSmart controllers. Which two actions should be taken to verify the control connection status and troubleshoot the issue? (Choose two.)

A network engineer is troubleshooting an OSPF adjacency between two routers that stays in EXSTART state. The engineer suspects an MTU mismatch on the interface. Which command should be used to verify the IP MTU on a Cisco IOS XE router?

A network engineer is analyzing output from the 'show ip sla statistics' command on a Cisco router. The output shows that the latest RTT for an ICMP echo operation is 45 ms, but the operation's status is 'Timeout'. What is the most likely cause of this discrepancy?

A network engineer is using Cisco DNA Center Assurance to monitor a campus fabric. The engineer needs to quickly identify which network device is experiencing the highest number of client onboarding failures over the past 24 hours. Which Assurance dashboard or tool should the engineer use?

A network engineer is using the Cisco DNA Center Assurance API to retrieve health scores for all network devices. The engineer needs to authenticate to the API and obtain a token. Which authentication method is used by the Cisco DNA Center API?

A network engineer is troubleshooting a connectivity issue between two hosts on the same VLAN. The engineer suspects a duplicate IP address. Which command should be used on a Cisco switch to verify the MAC address associated with the IP address in question?

A network administrator is investigating why a Catalyst 9300 switch reports high CPU utilization. The output of 'show processes cpu sorted' shows the ARP Input process consuming 45% CPU. Which action should be taken first to mitigate this issue?

All 350-401 Objectives

Network Assurance

350-401 Network Assurance — Key Topics

Where candidates lose marks on Network Assurance

350-401 Network Assurance — Practice Questions

A network engineer notices intermittent connectivity issues between two switches connected via a trunk link. The trunk is configured with DTP in dynamic desirable mode on one side and trunk mode on the other. Which action should the engineer take to resolve the issue?

Refer to the exhibit. A network engineer is troubleshooting a routing issue. The route for 10.0.0.0/8 is learned via EIGRP with metric 2560512. Which change would most likely cause the metric to increase?

Exhibit

Match each wireless standard to its frequency band and maximum data rate.

A network engineer is using Cisco DNA Center Assurance to troubleshoot a user's poor voice quality. The engineer suspects that the issue is related to network latency and jitter. Which TWO Cisco DNA Center Assurance features can provide the necessary data to analyze this issue? (Choose two.)

A network engineer is configuring a Cisco IOS router to monitor the reachability of a remote server using IP SLA. The engineer wants the router to generate a syslog message when the operation times out. Which configuration is required to achieve this?

A network engineer is configuring a Cisco IOS router to send SNMP traps to a management server. The engineer wants to ensure that traps are sent for all severity levels. Which command is required to enable SNMP traps for all severities?

A network administrator is using Cisco DNA Center Assurance to monitor the health of a wireless network. The administrator notices that some clients are experiencing poor performance. Which two actions can be taken within DNA Center Assurance to troubleshoot and resolve the issue? (Choose two.)

A network engineer is configuring a Cisco IOS router to monitor the reachability of a critical server at 10.1.1.100 using IP SLA. The engineer wants to receive a syslog message when the server becomes unreachable. Which configuration is required to achieve this?

A network administrator is using Cisco DNA Center Assurance to monitor the health of network devices. The administrator wants to receive alerts when a specific interface on a switch goes down. Which feature should be used to configure this?

A network engineer is troubleshooting a Cisco SD-WAN deployment. The engineer notices that some vEdge routers are not forming control connections to the vSmart controllers. Which two actions should be taken to verify the control connection status and troubleshoot the issue? (Choose two.)

A network engineer is troubleshooting an OSPF adjacency between two routers that stays in EXSTART state. The engineer suspects an MTU mismatch on the interface. Which command should be used to verify the IP MTU on a Cisco IOS XE router?

A network engineer is analyzing output from the 'show ip sla statistics' command on a Cisco router. The output shows that the latest RTT for an ICMP echo operation is 45 ms, but the operation's status is 'Timeout'. What is the most likely cause of this discrepancy?

A network engineer is using Cisco DNA Center Assurance to monitor a campus fabric. The engineer needs to quickly identify which network device is experiencing the highest number of client onboarding failures over the past 24 hours. Which Assurance dashboard or tool should the engineer use?

A network engineer is using the Cisco DNA Center Assurance API to retrieve health scores for all network devices. The engineer needs to authenticate to the API and obtain a token. Which authentication method is used by the Cisco DNA Center API?

A network engineer is troubleshooting a connectivity issue between two hosts on the same VLAN. The engineer suspects a duplicate IP address. Which command should be used on a Cisco switch to verify the MAC address associated with the IP address in question?

A network administrator is investigating why a Catalyst 9300 switch reports high CPU utilization. The output of 'show processes cpu sorted' shows the ARP Input process consuming 45% CPU. Which action should be taken first to mitigate this issue?

All 350-401 Objectives