CiscoCertified Network Professional Data Center
Domain 5Objective 1
5.1 Apply Network Security 350-601 Practice Questions (Page 3)
Part of the Security domain, which accounts for 15% of the 350-601 exam. Cisco does not publish an official question count, but from its 120-minute exam (~50–80 total, ~8–12 in this domain), expect 3–4 from this objective — we provide 38 practice questions to prepare you well beyond it. (estimate)
38questions here
8free pages
15concepts
15%of the exam
Questions 11–15
- 11
Which first-hop security feature validates ARP packets to prevent ARP spoofing?
Select an answer first - 12
In ACI, which object is used to group endpoints (e.g., virtual machines) that require the same policy?
Select an answer first - 13
On Cisco NX-OS, which command is used to create a custom role that can be assigned to users to restrict their access to specific commands?
Select an answer first - 14
A security policy requires that clients on an access VLAN can only use the IP address they received from DHCP. The engineer wants to prevent IP spoofing on the access ports. Which feature should be enabled on the access ports?
Select an answer first - 15
In a keychain configuration, what does the 'key-string' command specify?
Select an answer first
Finished these 5 questions?
Review the revealed explanations, or continue through the curriculum.
Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Cisco. “350-601” is a trademark of its owner, used for identification only.