A user reports that they can authenticate to the compute system but cannot perform an action they were able to perform yesterday. Which of the following is the most likely cause?

The user's password was changed

The user's role was modified or removed

The accounting server is offline

A large enterprise has multiple Cisco UCS domains, each managed by a separate team. The security policy requires that a senior administrator in one domain must be able to view configurations in another domain but not modify them. The senior administrator is already a member of the 'admin' role in their own domain. What is the most efficient way to grant this cross-domain read-only access?

Change the senior administrator's role to 'read-only' globally.

Use a locale to grant the senior administrator access to the other domain.

Add the senior administrator to the 'read-only' role in the other domain.

Create a new user account for the senior administrator in the other domain with the 'read-only' role.

A Cisco Nexus switch is configured to use both RADIUS and TACACS+ for authentication. The RADIUS server is the primary method, and TACACS+ is the fallback. Users can authenticate via RADIUS, but when the RADIUS server is down, they cannot authenticate via TACACS+. The TACACS+ server is reachable and the shared secret is correct. What is the most likely cause of this issue?

The switch is not configured to fall back to TACACS+ when RADIUS is unavailable.

The TACACS+ server is configured with a different shared secret.

The user's password is different on the TACACS+ server.

The TACACS+ server is not configured with the user's account.

A storage administrator needs to grant a junior team member access to a Cisco UCS domain. The junior admin should only be able to view server profiles and their associated policies, but must not be able to modify any configuration. The organization uses a centralized RBAC model. Which role should be assigned to this user?

The 'operations' role with modify privileges.

The 'read-only' role with view privileges.

The 'server-tech' role with compute privileges.

The 'admin' role with read-only privileges.

CiscoCertified Network Professional Data Center

Domain 5Objective 2

5.2 Apply Compute Security 350-601 Practice Questions (Page 1)

Part of the Security domain, which accounts for 15% of the 350-601 exam. Cisco does not publish an official question count, but from its 120-minute exam (~50–80 total, ~8–12 in this domain), expect 3–4 from this objective — we provide 31 practice questions to prepare you well beyond it. (estimate)

31questions here

7free pages

8concepts

15%of the exam

Questions 1–5

1foundation · easy
A compute environment needs to authenticate users against an existing corporate directory that stores user objects and group memberships. Which authentication method is most appropriate for this integration?
Select an answer first
2foundation · easy
A user reports that they can authenticate to the compute system but cannot perform an action they were able to perform yesterday. Which of the following is the most likely cause?
Select an answer first
3expert · hard
A large enterprise has multiple Cisco UCS domains, each managed by a separate team. The security policy requires that a senior administrator in one domain must be able to view configurations in another domain but not modify them. The senior administrator is already a member of the 'admin' role in their own domain. What is the most efficient way to grant this cross-domain read-only access?
Select an answer first
4expert · hard
A Cisco Nexus switch is configured to use both RADIUS and TACACS+ for authentication. The RADIUS server is the primary method, and TACACS+ is the fallback. Users can authenticate via RADIUS, but when the RADIUS server is down, they cannot authenticate via TACACS+. The TACACS+ server is reachable and the shared secret is correct. What is the most likely cause of this issue?
Select an answer first
5application · easy
A storage administrator needs to grant a junior team member access to a Cisco UCS domain. The junior admin should only be able to view server profiles and their associated policies, but must not be able to modify any configuration. The organization uses a centralized RBAC model. Which role should be assigned to this user?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to 350-601

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Cisco. “350-601” is a trademark of its owner, used for identification only.

5.2 Apply Compute Security 350-601 Practice Questions (Page 1)

Questions 1–5

A compute environment needs to authenticate users against an existing corporate directory that stores user objects and group memberships. Which authentication method is most appropriate for this integration?

A user reports that they can authenticate to the compute system but cannot perform an action they were able to perform yesterday. Which of the following is the most likely cause?

Keep studying — Security