5.1 Apply Network Security 350-601 Practice Questions (Page 1)

Questions 1–5

1. 1foundation · easy

   Which statement correctly differentiates RADIUS from TACACS+?

   • ARADIUS separates authentication, authorization, and accounting into separate protocols, while TACACS+ combines them.
   • BRADIUS uses TCP port 49, while TACACS+ uses UDP ports 1812 and 1813.
   • CRADIUS encrypts only the password, while TACACS+ encrypts the entire packet payload.
   • DRADIUS is a Cisco proprietary protocol, while TACACS+ is an open standard.
   Reveal Solution Discussion Select an answer first
2. 2foundation · easy

   Which first-hop security feature uses the DHCP snooping binding table to restrict IP traffic on a port to only the IP addresses learned via DHCP?

   • ADHCP Snooping
   • BIP Source Guard
   • CMACsec
   • DDynamic ARP Inspection
   Reveal Solution Discussion Select an answer first
4. 3foundation · easy

   On Cisco NX-OS, which command is used to enter keychain configuration mode?

   • Aip keychain
   • Bkeychain name
   • Ccrypto keychain
   • Dauthentication keychain
   Reveal Solution Discussion Select an answer first
5. 4foundation · easy

   Which attribute can be used to define a uSeg EPG in ACI?

   • ABridge domain
   • BVRF name
   • CVLAN ID
   • DIP address
   Reveal Solution Discussion Select an answer first
6. 5foundation · easy

   What is the purpose of a uSeg EPG in Cisco ACI?

   • ATo enable encryption between EPGs.
   • BTo provide a separate routing table for each tenant.
   • CTo group endpoints based on network attributes like IP address, MAC address, or VM name.
   • DTo allow EPGs to communicate without contracts.
   Reveal Solution Discussion Select an answer first