5.6 Describe Secure ZTP 350-501 Practice Questions (Page 1)

Questions 1–5

1. 1application · medium

   A network engineer is troubleshooting a ZTP failure. The router obtains an IP address via DHCP, but the config download fails. The engineer checks the DHCP server and confirms option 150 is set to the correct provisioning server IP. What should the engineer check NEXT?

   • AReboot the router and try again, as ZTP failures are often transient.
   • BVerify that the router's clock is synchronized with NTP.
   • CVerify that the provisioning server is reachable from the router and that the config file exists at the specified path.
   • DCheck the router's secure boot logs to see if the image was rejected.
   Reveal Solution Discussion Select an answer first
2. 2foundation · easy

   What is the first step a ZTP-enabled device typically performs after booting up with no configuration?

   • AIt loads a default configuration from its flash memory
   • BIt sends a DHCP request to obtain an IP address and boot information
   • CIt prompts the user for the configuration file location
   • DIt immediately downloads a configuration from a pre-configured TFTP server
   Reveal Solution Discussion Select an answer first
4. 3foundation · easy

   Which security mechanism is used in Secure ZTP to verify the integrity of the configuration file?

   • APassword hashing
   • BFirewall rules
   • CAccess control lists (ACLs)
   • DDigital signatures or checksums
   Reveal Solution Discussion Select an answer first
5. 4application · medium

   A new router is being deployed at a branch office. The router boots, obtains an IP address via DHCP, but then fails to download its configuration. The engineer checks the DHCP server logs and sees that the router received a lease. Which step should the engineer perform NEXT to isolate the issue?

   • ACheck the router's routing table to ensure it has a default route to the provisioning server.
   • BReboot the router and capture traffic on the provisioning server to see if the download request arrives.
   • CVerify that the router's secure boot feature is disabled, as it may block the config download.
   • DVerify that the DHCP server is offering the correct option 150 or 67 with the provisioning server address and filename.
   Reveal Solution Discussion Select an answer first
6. 5foundation · easy

   How does image verification contribute to the security of ZTP?

   • AIt compresses the image to reduce download time
   • BIt checks the image for viruses
   • CIt ensures the image is compatible with the device hardware
   • DIt verifies the digital signature of the software image before it is loaded
   Reveal Solution Discussion Select an answer first