What is the purpose of feature groups in Cisco NX-OS RBAC?

They control which protocols are used for AAA.

They group users into logical sets for easier management.

They define which features are enabled on the device.

They allow administrators to assign permissions to a set of related features at once.

In DHCP snooping, which ports are considered trusted and allowed to send DHCP server messages?

Ports connected to DHCP servers

Ports connected to other switches

What is the purpose of keychain authentication in routing protocols?

To authenticate routing peers and provide rolling key updates.

An engineer is configuring a keychain on NX-OS for BGP authentication. The keychain must have a key that is valid for sending from January 1, 2024, to December 31, 2024, and a second key that is valid for accepting from January 1, 2024, to December 31, 2025. What is the purpose of this configuration?

To ensure that key 2 is used for both sending and accepting during 2025

To ensure that key 1 is used for both sending and accepting during 2024

To allow the first key to be used for sending while the second key is used for accepting during the overlap period

To allow both keys to be used for sending and accepting simultaneously

In a TACACS+ RBAC integration, how does the TACACS+ server typically inform the NX-OS device which local role should be applied to a user?

By returning a custom attribute (e.g., 'role=network-admin') in the authorization response.

By configuring the role directly in the device's TACACS+ server configuration.

By using the user's group membership in LDAP.

By sending the role name in the authentication response.

CiscoCertified Network Professional Data Center

Domain 5Objective 1

5.1 Apply Network Security 350-601 Practice Questions (Page 4)

Part of the Security domain, which accounts for 15% of the 350-601 exam. Cisco does not publish an official question count, but from its 120-minute exam (~50–80 total, ~8–12 in this domain), expect 3–4 from this objective — we provide 38 practice questions to prepare you well beyond it. (estimate)

38questions here

8free pages

15concepts

15%of the exam

Questions 16–20

16foundation · easy
What is the purpose of feature groups in Cisco NX-OS RBAC?
Select an answer first
17foundation · easy
In DHCP snooping, which ports are considered trusted and allowed to send DHCP server messages?
Select an answer first
18foundation · easy
What is the purpose of keychain authentication in routing protocols?
Select an answer first
19application · medium
An engineer is configuring a keychain on NX-OS for BGP authentication. The keychain must have a key that is valid for sending from January 1, 2024, to December 31, 2024, and a second key that is valid for accepting from January 1, 2024, to December 31, 2025. What is the purpose of this configuration?
Select an answer first
20foundation · easy
In a TACACS+ RBAC integration, how does the TACACS+ server typically inform the NX-OS device which local role should be applied to a user?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to 350-601

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Cisco. “350-601” is a trademark of its owner, used for identification only.