Cisco 350-501 Practice Exam Questions

Cisco 350-501 Sample Question Answers

Question # 1

When implementing a REST API, how does an engineer mitigate security risks? 

A. by configuring the system to authenticate the client's identity and avoid broken authentication 
B. by configuring object properties to protect data 
C. by configuring separate authorization schemes to securely compartmentalize different areas of the business 
D. by configuring rate limiting to reduce the risk of DOS and DDOS attacks against the system 

Show Answer

Question # 2

Which technology enables the addition of new wavelengths in a fiber-optic network? 

A. IPoDWDM 
B. CWDM 
C. DWDM 
D. ROADM 

Show Answer

Question # 3

Which set of facts must the network architect consider when deciding whether to implement SaltStack or Chef? 

A. Chef is an agent-based on Ruby, and SaltStack is a module tool based on Python. 
B. Chef refers to its automation instructions as manifests, and SaltStack refers to its instructions as a playbook.
 C. Chef is written in Python, and SaltStack is written in Ruby. 
D. Chef uses a message-based system, and SaltStack uses an agent to deliver messages 

Show Answer

Question # 4

How do PE routers operate with the MDT in a multicast VPN?

A. When the sending PE router recognizes that multicast data has exceeded the bandwidth threshold, it creates a data MDT and sends a UDP message to all routers using the default MDT. 
B. After the default MDT and BGP VPNv4 neighbor is configured, a different PE neighbor in the IPv6 MDT address family is configured automatically for migrating to MDT SAFI. 
C. When the source PE router establishes adjacency using PIM SM mode in the default MDT, the receiving PE requests information about the source PE for BGP advertisement. 
D. The default MDT uses PIM sparse mode and PIM establishes adjacency over the shortest path tree toward the destination PE router. 

Show Answer

Question # 5

What is the primary purpose of Terraform in the network?

A. to manage the Cisco network infrastructure as code to ensure consistent configuration and scalability 
B. to facilitate the integration of Cisco networking solutions with cloud platforms to improve scalability 
C. to schedule and manage maintenance tasks on Cisco network devices to minimize errors and downtime 
D. to enable the seamless migration of Cisco network configurations between diverse network environments 

Show Answer

Question # 6

A network engineer is implementing NetFlow to observe traffic patterns on the network. The engineer is planning to review the patterns to help plan future strategies for monitoring and preventing congestion as the network grows. If the captures must include BGP nexthop flows, which configuration must the engineer apply to the router?

A. ip cef ip flow-export version 5 bgp-nexthop ip flow-export destination 192.168.1.1 9995 interface gigabitethernet 1/0/1 ip flow egress 
B. ip cef ip flow-export version 9 bgp-nexthop ip flow-export destination 192.168.1.1 9996 interface gigabitethernet 1/0/1 ip flow ingress 
C. ip cef ip flow-export version 5 ip flow-export destination 192.168.1.1 9995 interface gigabitethernet 1/0/1 ip flow ingress cdp enable 
D. no ip cef ip flow-export version 9 ip flow-export destination 192.168.1.1 9996 interface gigabitethernet 1/0/1 ip flow ingress ip flow egress 

Show Answer

Question # 7

A network architect plans to implement MPLS OAM to provide additional troubleshooting functionality for the NOC team. After analyzing the configuration on the MPLS P/PE nodes, the architect decides to revise the CoPP policies. Which two actions ensure that the new solution is secure? (Choose two.)

A. Allow port 3505 in the outbound direction only. 
B. Allow the ICMP protocol only. 
C. Allow the TCP and UDP protocols. 
D. Allow the UDP protocol only. 
E. Allow port 3503 in the inbound direction only. 

Show Answer

Question # 8

FRR is configured on a network. What occurs when the headend router on the path is alerted to a link failure over IGP?

A. LSP attempts fast switching on the backup path until the primary path returns to the active state.   
B. The headend router uses a presignaled LSP to bypass the failure point.   
C. A new backup tunnel is established past the PLR to pass through the protected nodes   
D. Backup tunnel is established and intersects with the primary tunnel at the headend.   

Show Answer

Question # 9

The service provider is serving hosts with two different multicast streams from source X and source Y. SourceX is multicast group 224.0.0.0/8, and source Y is multicast group 226.0.0.0/8. Multicast source X should sendits stream through bidirectional RP address 10.20.1.1, and multicast source Y should send its stream through RP address 10.20.2.1. Which configuration meets these requirements?

A. Enable ip pim ssm default on RA and RB.   
B. Add ip pim bidir-enable in global mode on RB.   
C. Permit the source X and source Y IP addresses in the access list on RB.   
D. Set PIM sparse mode with a static RP address of 10.20.2.1 on RA and RC.   

Show Answer

Question # 10

What Is one of the differences between Ansible and Chef? 

A. Ansible uses YAML and Chef uses Ruby.   
B. Chef requires the use of Windows in the environment and Ansible requires Linux.   
C. Chef is highly scalable and Ansible is highly secure.   
D. Ansible uses Ruby and Chef uses Python.   

Show Answer