A network engineer is configuring a site-to-site IPsec VPN on a Cisco IOS XE router. The engineer has defined an IKE policy, a transform set, and a crypto ACL. What is the next required step to apply the VPN to the outside interface?

Create a crypto map and apply it to the outside interface.

Define an IPsec profile and apply it to the interface.

Enable IPsec on the interface using the 'crypto ipsec' command.

Configure a tunnel interface and route traffic into it.

A company uses GRE over IPsec to connect two sites. The GRE tunnel is up, but the IPsec tunnel is not encrypting traffic. Which configuration issue is the most likely cause?

The GRE tunnel is configured with a different tunnel mode.

The GRE tunnel is not assigned to a VRF.

The crypto map is applied to the physical interface, but the GRE tunnel source/destination are not matched by the crypto ACL.

The IPsec transform set uses AH instead of ESP.

A service provider must keep two customers' routing information isolated on the same PE router while both use overlapping private IP subnets. The router runs IOS XE. Which configuration approach satisfies the requirement?

Create a VRF for each customer, assign each customer-facing interface to its VRF, and configure the overlapping subnets in the respective VRF routing tables.

Configure a single global routing table and use route maps to filter customer routes based on the source interface.

Enable policy-based routing on the PE router to direct customer traffic to different next hops based on source IP.

Use a single VRF for both customers and rely on access lists to prevent cross-customer traffic.

CiscoCertified Network Professional Enterprise

Domain 2Objective 2

2.2 Configure and Verify Data Path Virtualization Technologies 350-401 Practice Questions (Page 7)

Part of the 2.0 Virtualization domain, which accounts for 10% of the 350-401 exam. Cisco does not publish an official question count, but from its 120-minute exam (~50–80 total, ~5–8 in this domain), expect 2–3 from this objective — we provide 34 practice questions to prepare you well beyond it. (estimate)

34questions here

7free pages

8concepts

10%of the exam

Questions 31–34

31application · medium
A company needs to connect two sites using a tunnel that can carry both IPv4 and IPv6 traffic. The tunnel will be used for routing protocol updates. Which technology is the most appropriate?
Select an answer first
32application · medium
A network engineer is configuring a site-to-site IPsec VPN on a Cisco IOS XE router. The engineer has defined an IKE policy, a transform set, and a crypto ACL. What is the next required step to apply the VPN to the outside interface?
Select an answer first
33expert · hard
A company uses GRE over IPsec to connect two sites. The GRE tunnel is up, but the IPsec tunnel is not encrypting traffic. Which configuration issue is the most likely cause?
Select an answer first
34application · medium
A service provider must keep two customers' routing information isolated on the same PE router while both use overlapping private IP subnets. The router runs IOS XE. Which configuration approach satisfies the requirement?
Select an answer first

Finished these 4 questions?

Review the revealed explanations, or continue through the curriculum.

No more pagesBack to 350-401

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Cisco. “350-401” is a trademark of its owner, used for identification only.

2.2 Configure and Verify Data Path Virtualization Technologies 350-401 Practice Questions (Page 7)

Questions 31–34

A company needs to connect two sites using a tunnel that can carry both IPv4 and IPv6 traffic. The tunnel will be used for routing protocol updates. Which technology is the most appropriate?

A network engineer is configuring a site-to-site IPsec VPN on a Cisco IOS XE router. The engineer has defined an IKE policy, a transform set, and a crypto ACL. What is the next required step to apply the VPN to the outside interface?

A company uses GRE over IPsec to connect two sites. The GRE tunnel is up, but the IPsec tunnel is not encrypting traffic. Which configuration issue is the most likely cause?

A service provider must keep two customers' routing information isolated on the same PE router while both use overlapping private IP subnets. The router runs IOS XE. Which configuration approach satisfies the requirement?

Keep studying — 2.0 Virtualization