CiscoCertified Network Professional Service Provider
Domain 5Objective 7
5.7 Configure Dial-In/out, TCP, TLS and mTLS Certificates Using gRPC and gNMI 350-501 Practice Questions (Page 5)
Part of the Automation and Assurance domain, which accounts for 15% of the 350-501 exam. Cisco does not publish an official question count, but from its 120-minute exam (~50–80 total, ~8–12 in this domain), expect 1–1 from this objective — we provide 24 practice questions to prepare you well beyond it. (estimate)
24questions here
5free pages
6concepts
15%of the exam
Questions 21–24
- 21
A network operator is configuring mTLS for gNMI dial-in on a router. The operator has installed the router's server certificate and key, and the management station's client certificate and key. The router's trust store contains the CA that signed the management station's certificate. What else must be configured on the router to complete the mTLS setup?
Select an answer first - 22
A network engineer is configuring TLS for gNMI dial-in on a router. The router will present a server certificate to connecting management stations. The certificate was issued by an intermediate CA, and the intermediate CA certificate is not installed on the management stations. What must the engineer do to ensure the management stations can validate the router's certificate?
Select an answer first - 23
A network team is designing a secure telemetry solution. The routers will initiate gNMI sessions to a collector, and the collector must authenticate each router. The team also wants to encrypt the telemetry data. Which combination of gNMI mode and security mechanism should be used?
Select an answer first - 24
What is the primary purpose of subscription parameters in a gNMI dial-out configuration?
Select an answer first
Finished these 4 questions?
Review the revealed explanations, or continue through the curriculum.
No more pagesBack to 350-501
Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Cisco. “350-501” is a trademark of its owner, used for identification only.