CiscoCertified Network Professional Data Center
Domain 5Objective 1
5.1 Apply Network Security 350-601 Practice Questions (Page 6)
Part of the Security domain, which accounts for 15% of the 350-601 exam. Cisco does not publish an official question count, but from its 120-minute exam (~50–80 total, ~8–12 in this domain), expect 3–4 from this objective — we provide 38 practice questions to prepare you well beyond it. (estimate)
38questions here
8free pages
15concepts
15%of the exam
Questions 26–30
- 26
In an ACI fabric, a security team wants to ensure that a specific VM (identified by its MAC address) in the 'Web' EPG cannot communicate with any other EPG, but it must still communicate with the 'DB' EPG. The team also wants to ensure that other VMs in the 'Web' EPG can communicate with the 'App' EPG. What is the most efficient way to achieve this?
Select an answer first - 27
A security team wants to isolate a specific VM within an EPG that is running a legacy application. The VM must not communicate with other VMs in the same EPG, but it must still communicate with the database EPG. Which ACI feature should be used?
Select an answer first - 28
Which AAA component is responsible for determining what actions a user is permitted to perform after authentication succeeds?
Select an answer first - 29
A network engineer is configuring OSPF authentication between two data center switches. The security policy requires that the authentication key be changed periodically without causing an adjacency flap. Which feature should the engineer use?
Select an answer first - 30
Which component of an ACI contract determines the action (permit or deny) for traffic that matches a filter?
Select an answer first
Finished these 5 questions?
Review the revealed explanations, or continue through the curriculum.
Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Cisco. “350-601” is a trademark of its owner, used for identification only.