A service provider is evaluating ZTP for a new deployment. The operations team wants to reduce the time to deploy new routers and ensure that each router receives a unique configuration. Which benefit of ZTP directly addresses this requirement?

ZTP automatically configures the router's routing protocols without any user intervention.

ZTP provides a secure channel for all future management traffic.

ZTP automates the initial configuration, allowing each router to fetch its specific config from a central server.

ZTP eliminates the need for DHCP in the network.

A service provider is implementing Secure ZTP. The engineer wants to ensure that the config file is not tampered with during delivery and that the provisioning server is authenticated. Which mechanism should be used?

Use TFTP with a shared secret embedded in the config filename.

Use HTTP with a checksum appended to the config file.

Use HTTPS with certificate validation, which provides encryption, integrity, and server authentication.

Use FTP with a username and password.

A service provider is deploying hundreds of routers across multiple sites. The operations team wants to minimize on-site technician time and ensure consistent configuration. They also want to ensure that the configuration is authentic and has not been altered. Which approach best meets these requirements?

Use ZTP with HTTP to deliver the config automatically.

Use ZTP with TFTP to deliver the config automatically.

Pre-configure each router at the central warehouse and ship them to the sites.

Use ZTP with HTTPS and certificate validation to deliver the config automatically.

A router fails Secure ZTP. The engineer verifies that the router has the vendor's CA certificate, the server's certificate is valid, and the clock is correct. The router is using the server's IP address in the URL. What is the MOST likely cause of the certificate verification failure?

The DHCP server is providing the wrong DNS server address.

The server's certificate does not include the IP address in its Subject Alternative Name (SAN).

The provisioning server is using a different protocol than HTTPS.

The router's secure boot feature is blocking the HTTPS connection.

What is the primary purpose of Zero Touch Provisioning (ZTP) in a service provider network?

To replace the need for network engineers in day-to-day operations

To automate the initial configuration of network devices without manual intervention

To provide real-time monitoring and alerting for network devices

To secure the network by encrypting all data traffic between devices

CiscoCertified Network Professional Service Provider

Domain 5Objective 6

5.6 Describe Secure ZTP 350-501 Practice Questions (Page 3)

Part of the Automation and Assurance domain, which accounts for 15% of the 350-501 exam. Cisco does not publish an official question count, but from its 120-minute exam (~50–80 total, ~8–12 in this domain), expect 1–1 from this objective — we provide 25 practice questions to prepare you well beyond it. (estimate)

25questions here

5free pages

8concepts

15%of the exam

Questions 11–15

11application · medium
A service provider is evaluating ZTP for a new deployment. The operations team wants to reduce the time to deploy new routers and ensure that each router receives a unique configuration. Which benefit of ZTP directly addresses this requirement?
Select an answer first
12application · medium
A service provider is implementing Secure ZTP. The engineer wants to ensure that the config file is not tampered with during delivery and that the provisioning server is authenticated. Which mechanism should be used?
Select an answer first
13application · medium
A service provider is deploying hundreds of routers across multiple sites. The operations team wants to minimize on-site technician time and ensure consistent configuration. They also want to ensure that the configuration is authentic and has not been altered. Which approach best meets these requirements?
Select an answer first
14expert · hard
A router fails Secure ZTP. The engineer verifies that the router has the vendor's CA certificate, the server's certificate is valid, and the clock is correct. The router is using the server's IP address in the URL. What is the MOST likely cause of the certificate verification failure?
Select an answer first
15foundation · easy
What is the primary purpose of Zero Touch Provisioning (ZTP) in a service provider network?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to 350-501

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Cisco. “350-501” is a trademark of its owner, used for identification only.