Step2Study

Implementing and Operating Cisco Enterprise Network Core Technologies (ENCOR) v1.2 practice questions

237 free questions with answers and explanations.

Practice test
  1. 101.A network architect is evaluating different virtualization technologies for expanding a data center. The goal is to isolate applications and services from each other at the network layer, allowing them to run independently on shared physical infrastructure. This isolation should extend beyond simple VLANs to provide complete separation of routing tables and forwarding instances. Which network virtualization technology is best suited for this requirement?Architecture
  2. 102.A network engineer wants to automate a remediation task on a Cisco IOS XE device. Specifically, if a particular interface goes down, a script should automatically attempt to shut down and then no shut down the interface to try and bring it back up. This automation needs to run directly on the device, triggered by a system event. Which Cisco IOS XE feature is best suited for this scenario?Automation
  3. 103.A large manufacturing company is deploying a new IoT solution that requires connecting thousands of sensors in a harsh industrial environment. These sensors generate small amounts of data infrequently but demand high reliability and low power consumption. The network design must ensure secure communication and efficient data backhaul to a central data lake. Which edge computing model is most appropriate for this scenario?Architecture
  4. 104.A network engineer is tasked with automating the configuration of several Cisco IOS XE routers. The engineer wants to retrieve the current running configuration in a structured, machine-readable format. Which REST API URI path should the engineer use to accomplish this using RESTCONF?Automation
  5. 105.A network administrator needs to automate the process of collecting operational data from multiple Cisco devices at regular intervals and sending it to a central monitoring system. This data includes interface statistics, CPU utilization, and routing table changes. The administrator wants to use a push-based mechanism for efficiency. Which technology is best suited for this requirement?Automation
  6. 106.A network administrator is designing a new campus network. The design must accommodate a high density of wireless clients, provide consistent quality of service for voice and video applications, and support rapid deployment of new services. Which network design principle primarily addresses the need for consistent QoS and rapid service deployment?Architecture
  7. 107.A network engineer is configuring a Cisco IOS XE router to use YANG data models for programmatic configuration. They want to expose a specific subset of the device's configuration and operational data through a NETCONF interface. Which of the following statements accurately describes the role of YANG in this scenario?Automation
  8. 108.An engineer is deploying a new application that requires dynamic network segmentation and policy enforcement based on user groups and device types within a campus network. Which Cisco enterprise architecture component would provide the foundational capabilities for this advanced segmentation and policy control?Automation
  9. 109.A developer is creating a Python script to manage a Cisco device. The script needs to parse a JSON response that contains a list of interfaces, each with its name, status, and IP address. Which Python module is the most appropriate for handling this JSON data?Automation
  10. 110.A network operations team is implementing Cisco SD-WAN and wants to integrate it with an existing ITSM system. The ITSM system needs to receive real-time notifications when a vEdge router's tunnel status changes. Which component of the Cisco SD-WAN architecture is primarily responsible for providing these real-time telemetry updates?Automation
  11. 111.A network automation engineer is designing a system to programmatically configure VLANs on a large number of access switches. The solution must ensure that configuration changes are applied transactionally, meaning either all changes succeed or all changes are rolled back. Which configuration protocol inherently supports this transactional behavior?Automation
  12. 112.A network engineer is developing a Python script to interact with a Cisco device. The script needs to send a series of configuration commands to the device and receive the output. The engineer wants to use a standard library that offers a simple way to establish an SSH connection, send commands, and retrieve responses without needing to parse complex XML or JSON structures directly for basic command-line interactions. Which Python library is most suitable for this task?Automation
  13. 113.A network engineer is writing a Python script to interact with a Cisco device using a REST API. The API endpoint requires the use of HTTP Basic Authentication. Which of the following code snippets correctly demonstrates how to implement HTTP Basic Authentication using the Python 'requests' library?Automation
  14. 114.A network engineer is using a Python script to interact with a network device. The device's API returns data in JSON format. The engineer needs to parse this JSON data into Python objects so that the script can easily access and manipulate specific values like interface status or IP addresses. Which Python standard library module should be used for this purpose?Automation
  15. 115.A network operations team is tasked with ensuring high availability for critical business applications hosted in an on-premises data center. The design incorporates redundant physical paths, redundant devices, and fast convergence protocols. Which specific network assurance capability would be most effective for continuously validating that these redundancy mechanisms are operational and performing as expected, rather than just reacting to failures?Architecture
  16. 116.A large enterprise is migrating its network infrastructure to a software-defined architecture. They need to define network services and device capabilities in a programmatic, vendor-neutral manner. Which data modeling language is specifically designed for this purpose, enabling machine-to-machine communication for network configuration and monitoring?Automation
  17. 117.A network architect is designing a new campus network using Cisco SD-Access. They need a mechanism to integrate the SD-Access fabric with external services, such as identity management systems or custom automation scripts, to dynamically provision user access policies. Which component provides the northbound API for such integrations in a Cisco SD-Access deployment?Automation
  18. 118.A network team is implementing a new network automation solution. They require a data modeling language that can define both configuration and state data for network devices, support remote procedure calls (RPCs), and be easily convertible to various data serialization formats like XML and JSON. Which data modeling language best fits these requirements?Automation
  19. 119.A network administrator is developing a Python script to automate the configuration of VLANs on a Cisco IOS XE device. The script needs to send configuration commands to the device and receive the output. Which Python library is specifically designed to interact with network devices using SSH for command execution and output retrieval, without requiring a NETCONF/RESTCONF API?Automation
  20. 120.A network operations team is integrating Cisco DNA Center into their existing network. They need to retrieve real-time network health metrics, inventory data, and provision new network devices programmatically. Which type of API should the team primarily interact with in Cisco DNA Center to accomplish these tasks?Automation
  21. 121.A network automation engineer is designing a highly available and scalable solution for managing network devices across multiple vendors. The solution requires an orchestration tool that can interact with devices using various protocols (SSH, NETCONF, RESTCONF), maintain a desired state, and support custom modules for new device types. Which orchestration tool is best suited for these requirements?Automation
  22. 122.A network operations team is implementing a new network automation solution that requires a declarative approach to configuration management. They need a tool that can define the desired state of network devices, automatically detect deviations, and remediate them without requiring explicit procedural steps for every action. Which automation tool is best suited for this declarative paradigm?Automation
  23. 123.A network automation engineer is building a system to provision network services using an orchestration tool. The tool needs to interact with various network devices and cloud services, each exposing different APIs (REST, NETCONF, SOAP). To ensure consistent data representation and simplified integration, the engineer decides to use a standardized, human-readable data serialization format that is widely supported across web services and modern APIs. Which data format should the engineer choose?Automation
  24. 124.A network engineer is developing a Python script to interact with a Cisco device using NETCONF. The script needs to retrieve the current operational status of all interfaces. Which operation should the engineer use in the NETCONF RPC request?Automation
  25. 125.A network team is evaluating different orchestration tools for provisioning new branch office routers. The requirements include agentless operation, strong community support, and a declarative language for configuration. Which tool best fits these criteria?Automation
  26. 126.A global enterprise is expanding its network to include new international branch offices. The network team needs to connect these branches securely and efficiently to the corporate data centers and existing cloud resources, while optimizing traffic for latency-sensitive applications. The solution must provide flexible deployment options and centralized management across diverse WAN links. Which SD-WAN deployment model best fits these requirements?Architecture
  27. 127.A large enterprise is migrating its applications to a hybrid cloud model. The network team needs to ensure seamless connectivity and consistent security policies between on-premises data centers and multiple public cloud providers. Which architectural component is crucial for achieving this goal while minimizing latency and optimizing traffic flow?Architecture
  28. 128.A network engineer is designing a highly available and scalable network for a new campus building. The design specifies a collapsed core architecture that must support both wired and wireless clients, provide consistent policy enforcement, and minimize latency. Which combination of network design principles and technologies would be most appropriate for the core and distribution layers in this scenario?Architecture
  29. 129.A network automation script is encountering an issue where it fails to connect to a Cisco IOS XE device using NETCONF over SSH. The error message indicates 'authentication failed'. The script uses username/password authentication. Which of the following is the MOST likely cause of this issue, assuming the username and password are correct?Automation
  30. 130.A network administrator is configuring a new switch for a small branch office. The switch needs to provide network access to both trusted corporate devices and untrusted guest devices, with strict isolation between the two groups. Furthermore, the switch must prevent unauthorized devices from connecting to either network. Which combination of network segmentation and access control technologies should be implemented at the access layer?Architecture
  31. 131.A network administrator needs to automate a repetitive task on a Cisco device where a specific CLI command must be executed every time an interface goes down. Which automation tool is best suited for this event-driven, on-device automation scenario?Automation
  32. 132.A network engineer is using a Python script to interact with a network device. The device's API returns data in XML format. The engineer needs to extract the value of the 'name' attribute from an XML element like `<interface name="GigabitEthernet1">`. Which Python library and method would be most suitable for this task?Automation
  33. 133.A network engineer is implementing SD-WAN in an enterprise with multiple branch offices and two data centers. The design requires dynamic path selection based on application performance, centralized policy enforcement, and secure overlay tunnels over diverse WAN transports, including MPLS and broadband internet. Which component is responsible for orchestrating these functions and providing a single pane of glass for management?Architecture
  34. 134.A network engineer is troubleshooting a performance issue in a campus network where users are experiencing intermittent slowness and dropped connections, particularly when streaming video. The network assurance tools indicate high CPU utilization on some access switches and unexpected traffic patterns during peak hours. Which network assurance technique would provide the most granular, real-time visibility into the packet-level behavior and sequence of events leading to these issues?Architecture
  35. 135.A network engineer is integrating a new custom application with the existing network infrastructure. The application requires real-time, event-driven notifications from network devices whenever a specific interface's operational status changes. Which network automation tool or technology is best suited for this requirement?Automation
  36. 136.A network architect is designing a new campus network and wants to implement a solution that provides centralized management, automated policy enforcement, and network-wide segmentation across wired and wireless infrastructure. The solution must integrate with existing identity management systems and offer a single pane of glass for operation. Which Cisco solution is best suited for these requirements?Automation
  37. 137.A development team is working on a new application that requires high-performance, bidirectional streaming communication with network devices. The application needs to interact with devices using a modern RPC (Remote Procedure Call) framework that is language-agnostic and uses efficient serialization mechanisms. Which protocol is most suitable for this requirement?Automation
  38. 138.A network architect is designing a greenfield campus network using Cisco SD-Access. The goal is to automate the provisioning of user and device access across different departments with varying security policies. Which SD-Access component is responsible for defining and enforcing these group-based access policies?Automation
  39. 139.A network engineer wants to retrieve configuration data from a Cisco device in a structured, programmatic way. The engineer needs to ensure that the retrieved data adheres to a predefined data model, allowing for easy parsing and validation by automation scripts. Which protocol supports this requirement by providing a clear separation between configuration data and operational state, and typically uses XML for data encoding?Automation
  40. 140.A network engineer wants to automate the configuration of a new VLAN on multiple Cisco IOS XE switches using a programmatic interface. The engineer prefers to use HTTP/HTTPS for communication and wants to interact with the device's native configuration rather than a formal data model. Which API protocol is most suitable for this task?Automation
  41. 141.A company is using Cisco Firepower Threat Defense (FTD) deployed in transparent mode. A network engineer needs to configure a security policy that allows specific internal servers to initiate connections to external web servers on port 443, but blocks all other internal-to-external traffic. Additionally, the policy must inspect the encrypted HTTPS traffic for malware. Which Firepower feature enables deep inspection of encrypted traffic for threats?Security
  42. 142.A network administrator is configuring network access control using 802.1X on a Cisco switch. The administrator wants to ensure that if the RADIUS server is unavailable, clients can still gain limited network access to a specific VLAN for remediation purposes (e.g., patching, anti-virus updates). Which 802.1X feature should be configured to achieve this fallback behavior?Security
  43. 143.A financial institution is deploying a new application that processes highly sensitive customer data. The application will be hosted in a public cloud, but certain data processing functions must remain within the on-premises data center due to regulatory compliance. What type of cloud deployment model is being utilized in this scenario?Architecture
  44. 144.A network security engineer is designing a secure remote access solution for a global organization. The solution needs to support a wide range of client devices (Windows, macOS, Linux, mobile) and provide full network access to corporate resources without requiring a dedicated client application on every device. The solution must also be easily deployable and managed. Which VPN technology is best suited for these requirements?Security
  45. 145.A network engineer is troubleshooting intermittent connectivity issues for users connecting remotely to the corporate network via a VPN. Users report slow application response times and occasional disconnections, particularly when transferring large files. The engineer needs to identify potential bottlenecks and packet loss across the VPN tunnel and the underlying internet path. Which network assurance tool or technique would provide the MOST relevant insights?Architecture
  46. 146.A multinational corporation is expanding its network infrastructure into several new regions, requiring segregated network environments for different business units while reusing the same IP address space in each region to simplify design and conserve addresses. The network team needs a solution that provides full routing table isolation between these environments without deploying separate physical routers or VLANs for each. Which network virtualization technology is best suited for this requirement?Architecture
  47. 147.A company is implementing a new wireless network and requires strong authentication for all users connecting to the Wi-Fi. The solution must integrate with the existing corporate Active Directory for user credentials and provide dynamic VLAN assignment based on user groups. Which IEEE 802.1X component is responsible for authenticating the client device against the authentication server?Security
  48. 148.A network security team is implementing a solution to prevent lateral movement of threats within its campus network. The goal is to isolate different user groups and critical servers from each other, even if they reside on the same subnet, without requiring extensive VLAN reconfigurations or physical network changes. Which technology is most effective for achieving this granular level of isolation?Architecture
  49. 149.A network engineer is troubleshooting a site-to-site IPsec VPN tunnel between two Cisco routers. Users at the remote site are unable to access resources at the main site, but the phase 1 IKEv2 security association (SA) is established. Upon checking the crypto isakmp sa command output, the engineer notices that the phase 2 IPsec SAs are not being established. Which component is most likely misconfigured, preventing the phase 2 SA establishment?Security
  50. 150.A network engineer is configuring a Cisco Catalyst switch to implement MACsec (802.1AE) between two switches to provide hop-by-hop encryption and integrity for all traffic on the link. After configuring the necessary MKA (MACsec Key Agreement) and enabling MACsec on the interfaces, the engineer notices that the MACsec secure channel is not establishing. Which of the following is a common reason for MACsec failure between two switches?Security