Network Assurance: Free ENCOR 350-401 Practice Questions

Question 1

What default port number does RESTCONF use for communication with network devices?

Port 443 using HTTP and TLS combined Port 8080 using HTTP transport Port 830 using SSH transport Port 443 using HTTPS

Correct Answer: Port 443 using HTTPS

RESTCONF uses port 443 with HTTPS as its default transport, leveraging the standard secure web protocol to provide a RESTful interface for managing network device configurations based on YANG data models.

Port 830 over SSH is the default transport for NETCONF, not RESTCONF. Port 8080 is sometimes used as an alternative HTTP port but is not the RESTCONF default. The option describing HTTP and TLS combined is essentially describing HTTPS but uses misleading terminology, as RESTCONF specifically relies on HTTPS rather than a separate combination of HTTP and TLS.

The key concept tested is understanding RESTCONF transport protocols and default port assignments compared to other network management protocols like NETCONF.

Question 2

A network engineer logs into Cisco Catalyst Center and wants to check the overall status of all managed switches and routers in the network. The engineer needs a single view that shows device reachability, CPU utilization, and memory status across the entire infrastructure. Which Catalyst Center feature should the engineer navigate to for this consolidated health overview?

The Inventory page, which provides health scores and real-time performance metrics for all network devices The Provision dashboard, which aggregates device reachability and resource utilization into a unified health view The Topology map, which provides device health scores along with CPU and memory utilization details The Assurance dashboard, which provides health scores and metrics for all managed devices in one place

Correct Answer: The Assurance dashboard, which provides health scores and metrics for all managed devices in one place

The Assurance dashboard in Cisco Catalyst Center (formerly DNA Center) is specifically designed to provide a consolidated health overview of all managed network devices, displaying health scores, reachability status, CPU utilization, memory usage, and other key metrics in a single unified view.

The Inventory page lists discovered and managed devices with details like hostname, IP address, and software version, but it does not provide health scores or real-time performance metrics. The Topology map shows physical and logical connectivity between devices but does not aggregate health scores or resource utilization data. The Provision dashboard is used for deploying configurations and policies to devices, not for monitoring device health.

Key concept tested: understanding Catalyst Center Assurance functionality for network health monitoring.

Question 3

A network engineer wants to schedule regular backups of device configurations managed by Cisco Catalyst Center. The engineer needs to compare current running configurations against a known baseline to detect unauthorized changes. Which feature should the engineer use to accomplish this task?

Configuration Compliance under the Inventory section to compare running configs against baseline templates Software Image Management to audit device configurations and track any changes from golden profiles Command Runner under the Tools section to pull running configs and manually compare them with stored versions Assurance Health Dashboard to monitor configuration drift events and generate compliance alerts for devices

Correct Answer: Configuration Compliance under the Inventory section to compare running configs against baseline templates

Configuration Compliance in Cisco Catalyst Center (formerly DNA Center) allows engineers to compare the running configurations of managed devices against baseline templates, automatically detecting unauthorized or unintended configuration changes and flagging non-compliant devices.

Command Runner is a manual tool for executing CLI commands on devices but does not provide automated comparison or compliance checking. Software Image Management (SWIM) focuses on managing and deploying software images, not auditing configurations. The Assurance Health Dashboard monitors network health metrics and application performance but is not designed for configuration compliance checking against templates.

The key concept tested is Catalyst Center Configuration Compliance for detecting configuration drift against defined baselines.

Network Assurance

ENCOR 350-401 - Network Assurance Example Questions

Question 1

Question 2

Question 3

Advance to CCNP Enterprise