What is the role of DHCP in the ZTP process?

It authenticates the device to the provisioning server

It provides the device with an IP address and boot information such as the configuration file location

It encrypts the configuration file before transmission

It stores the configuration file locally on the device

Why is HTTPS preferred over TFTP for delivering configuration files in Secure ZTP?

HTTPS is the only protocol supported by all network devices

HTTPS is faster than TFTP for large files

HTTPS provides encryption and integrity verification, ensuring the configuration is not tampered with

HTTPS does not require any server configuration

During Secure ZTP, the device reports a certificate error when connecting to the provisioning server. What is a likely cause?

The configuration file is too large

The device does not trust the certificate authority that signed the server's certificate

The device's IP address is incorrect

The DHCP server is not configured

A device fails to obtain a configuration during ZTP. What is a common first step to troubleshoot this issue?

Check the device's routing table

Reboot the device multiple times

Verify that the device received an IP address from DHCP

A network engineer is configuring ZTP for a batch of routers. The routers are in a secure lab with no internet access, but they can reach an internal provisioning server. The engineer needs to deliver the config files securely. The internal server does not have a certificate from a public CA. What should the engineer do to enable HTTPS-based ZTP?

Use TFTP to deliver the config, since it is simpler and the lab is isolated.

Configure the routers to skip certificate validation for the provisioning server.

Use HTTP instead of HTTPS, since the lab is isolated and the risk is low.

Install the internal CA's certificate on each router as a trusted anchor before deployment.

CiscoCertified Network Professional Service Provider

Domain 5Objective 6

5.6 Describe Secure ZTP 350-501 Practice Questions (Page 4)

Part of the Automation and Assurance domain, which accounts for 15% of the 350-501 exam. Cisco does not publish an official question count, but from its 120-minute exam (~50–80 total, ~8–12 in this domain), expect 1–1 from this objective — we provide 25 practice questions to prepare you well beyond it. (estimate)

25questions here

5free pages

8concepts

15%of the exam

Questions 16–20

16foundation · easy
What is the role of DHCP in the ZTP process?
Select an answer first
17foundation · easy
Why is HTTPS preferred over TFTP for delivering configuration files in Secure ZTP?
Select an answer first
18foundation · easy
During Secure ZTP, the device reports a certificate error when connecting to the provisioning server. What is a likely cause?
Select an answer first
19foundation · easy
A device fails to obtain a configuration during ZTP. What is a common first step to troubleshoot this issue?
Select an answer first
20application · medium
A network engineer is configuring ZTP for a batch of routers. The routers are in a secure lab with no internet access, but they can reach an internal provisioning server. The engineer needs to deliver the config files securely. The internal server does not have a certificate from a public CA. What should the engineer do to enable HTTPS-based ZTP?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to 350-501

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Cisco. “350-501” is a trademark of its owner, used for identification only.