5.6 Describe Secure ZTP 350-501 Practice Questions (Page 5)

Questions 21–25

1. 21foundation · easy

   Which of the following protocols can be used to deliver the configuration file to a device during ZTP?

   • AICMP, ARP, or NTP
   • BHTTP, HTTPS, or TFTP
   • CTelnet, SSH, or RDP
   • DSNMP, FTP, or SMTP
   Reveal Solution Discussion Select an answer first
2. 22application · medium

   A router fails ZTP. The engineer observes that the router obtains an IP address via DHCP but never attempts to contact the provisioning server. The DHCP server is configured with option 150. What is the most likely cause?

   • AThe router's secure boot feature is blocking the ZTP process.
   • BThe provisioning server is down, so the router cannot reach it.
   • CThe router does not have a default route to reach the provisioning server.
   • DThe router's DHCP client is not requesting option 150 in its DHCP request.
   Reveal Solution Discussion Select an answer first
4. 23foundation · easy

   In a PKI used for Secure ZTP, what is the role of the Certificate Authority (CA)?

   • AIt provides the IP address to the device during ZTP
   • BIt issues and digitally signs certificates for devices and servers
   • CIt encrypts all traffic between the device and the provisioning server
   • DIt stores the configuration files for all devices
   Reveal Solution Discussion Select an answer first
5. 24application · medium

   A network engineer is setting up Secure ZTP for a new router model. The router has a factory-installed certificate from the vendor. The provisioning server presents a certificate signed by the vendor's CA. When the router attempts to download its config over HTTPS, the connection fails with a certificate verification error. What is the most likely cause?

   • AThe router's clock is set to the wrong date, causing the server certificate to appear expired or not yet valid.
   • BThe DHCP server did not provide the correct option 150, so the router is contacting the wrong server.
   • CThe router's factory certificate has expired because it has been in storage too long.
   • DThe provisioning server is using HTTP instead of HTTPS, so the router refuses to connect.
   Reveal Solution Discussion Select an answer first
6. 25foundation · easy

   Which of the following is a key benefit of using Zero Touch Provisioning (ZTP) in a service provider network?

   • AIt guarantees zero downtime for all network services
   • BIt eliminates the need for any network security measures
   • CIt reduces the time and effort required to deploy new devices
   • DIt automatically optimizes routing protocols for maximum performance
   Reveal Solution Discussion Select an answer first