CiscoCertified Network Professional Enterprise
Domain 2Objective 2
2.2 Configure and Verify Data Path Virtualization Technologies 350-401 Practice Questions (Page 5)
Part of the 2.0 Virtualization domain, which accounts for 10% of the 350-401 exam. Cisco does not publish an official question count, but from its 120-minute exam (~50–80 total, ~5–8 in this domain), expect 2–3 from this objective — we provide 34 practice questions to prepare you well beyond it. (estimate)
34questions here
7free pages
8concepts
10%of the exam
Questions 21–25
- 21
A service provider wants to offer separate routing tables to multiple customers on a single PE router. Which technology should be used?
Select an answer first - 22
A company is setting up a site-to-site VPN between two branch offices. The security policy requires encryption of all traffic and authentication of both peers. The engineer plans to use IPsec with IKEv2. Which configuration components are essential?
Select an answer first - 23
A network engineer is designing a secure site-to-site connection that must carry multicast traffic and routing protocol updates. The engineer plans to use GRE over IPsec. Which statement about the design is correct?
Select an answer first - 24
An engineer is configuring a GRE tunnel between two routers. The tunnel source is set to GigabitEthernet0/1 and the tunnel destination is 203.0.113.2. The tunnel interface is assigned IP address 10.0.0.1/30. After configuration, the tunnel shows up/up but pings across the tunnel fail. What is the most likely cause?
Select an answer first - 25
A company needs to connect two remote sites over an IP-only WAN. The sites use different routing protocols (OSPF and EIGRP) and also need to carry non-IP traffic such as IPX between specific devices. The WAN provider only supports IP encapsulation. Which tunneling technology should be used?
Select an answer first
Finished these 5 questions?
Review the revealed explanations, or continue through the curriculum.
Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Cisco. “350-401” is a trademark of its owner, used for identification only.