CiscoCertified Network Professional Data Center
Domain 5Objective 1
5.1 Apply Network Security 350-601 Practice Questions (Page 5)
Part of the Security domain, which accounts for 15% of the 350-601 exam. Cisco does not publish an official question count, but from its 120-minute exam (~50–80 total, ~8–12 in this domain), expect 3–4 from this objective — we provide 38 practice questions to prepare you well beyond it. (estimate)
38questions here
8free pages
15concepts
15%of the exam
Questions 21–25
- 21
A data center requires encryption of traffic between two top-of-rack switches that carry sensitive traffic. The traffic must be encrypted at the link layer, and the solution must use a pre-shared key. Which technology should the engineer implement?
Select an answer first - 22
IP Source Guard uses which database to determine which IP addresses are allowed on a port?
Select an answer first - 23
What is a key benefit of using keychains for routing protocol authentication?
Select an answer first - 24
A data center engineer is configuring centralized authentication for network devices. The security team requires that all administrative commands be logged with the exact command string, and that per-command authorization be enforced for each user. The solution must encrypt the entire session between the device and the authentication server. Which protocol should the engineer choose?
Select an answer first - 25
Which command is used to verify MACsec operation on a Cisco switch?
Select an answer first
Finished these 5 questions?
Review the revealed explanations, or continue through the curriculum.
Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Cisco. “350-601” is a trademark of its owner, used for identification only.