A data center has a mix of Nexus 9000 and Nexus 3000 switches. The team needs to ensure that all switches comply with a security baseline. The team uses Ansible for automation. Which approach should be used to validate compliance across the heterogeneous environment?

Use a single Ansible playbook with the same commands for all switches.

Use the 'archive' feature to compare configurations to a baseline.

Manually check each switch using 'show running-config'.

Create separate Ansible playbooks for each switch model, as the configuration commands may differ, and run them against the respective groups.

A network administrator needs to maintain a history of configuration changes for a Nexus switch to support rollback and compliance audits. The administrator wants to store multiple versions of the configuration on the switch itself. Which feature should be used?

The 'copy running-config startup-config' command executed manually after each change.

The 'configuration replace' command with a TFTP server.

The 'archive' feature with the 'path' and 'maximum' parameters.

The 'show running-config' command redirected to a file on the bootflash.

A large data center has a compliance requirement that all Nexus switches must have a specific set of security features enabled. The network team uses Ansible for automation. They need to continuously monitor for compliance violations and alert the security team when a violation occurs. Which approach should be used?

Use the 'archive' feature to store configurations and periodically compare them to a baseline.

Configure the switches to send syslog messages to a SIEM, and have the SIEM alert on any configuration change.

Run an Ansible playbook on a schedule that gathers the running config from each switch, checks for the required features, and sends an alert via email if any switch is non-compliant.

Use the 'show running-config' command on each switch manually each week to check compliance.

Why is monitoring configuration changes important in a data center?

To automatically optimize routing protocols

To detect unauthorized or unintended modifications that could lead to security breaches or outages

To reduce the number of devices in the network

To increase the bandwidth of the network

A change management policy requires that all configuration changes to data center switches be documented and approved. The network team uses a ticketing system. What should the team implement to enforce this policy?

Disable the 'configure' terminal command to prevent changes.

Require engineers to include the ticket number in the description of every configuration change and use the 'archive log config' feature to record changes.

Use the 'reload' command after every change to ensure the configuration is saved.

Use the 'copy running-config startup-config' command after every change to save the configuration.

CiscoCertified Network Professional Data Center

Domain 1Objective 8

1.8 Implement Network Configuration Management 350-601 Practice Questions (Page 4)

Part of the Network domain, which accounts for 25% of the 350-601 exam. Cisco does not publish an official question count, but from its 120-minute exam (~50–80 total, ~13–20 in this domain), expect 1–2 from this objective — we provide 36 practice questions to prepare you well beyond it. (estimate)

36questions here

8free pages

8concepts

25%of the exam

Questions 16–20

16expert · hard
A data center has a mix of Nexus 9000 and Nexus 3000 switches. The team needs to ensure that all switches comply with a security baseline. The team uses Ansible for automation. Which approach should be used to validate compliance across the heterogeneous environment?
Select an answer first
17application · medium
A network administrator needs to maintain a history of configuration changes for a Nexus switch to support rollback and compliance audits. The administrator wants to store multiple versions of the configuration on the switch itself. Which feature should be used?
Select an answer first
18expert · hard
A large data center has a compliance requirement that all Nexus switches must have a specific set of security features enabled. The network team uses Ansible for automation. They need to continuously monitor for compliance violations and alert the security team when a violation occurs. Which approach should be used?
Select an answer first
19foundation · easy
Why is monitoring configuration changes important in a data center?
Select an answer first
20application · medium
A change management policy requires that all configuration changes to data center switches be documented and approved. The network team uses a ticketing system. What should the team implement to enforce this policy?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to 350-601

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Cisco. “350-601” is a trademark of its owner, used for identification only.