Easy 350-401 practice questions
Direct recall — confirm you know the core facts and definitions. 8 easy questions available — no sign-up, always free.
A network architect is designing the security framework for a new enterprise campus. Management wants to ensure that if a perimeter firewall is compromised, additional controls still protect internal resources. The architect proposes stacking multiple independent security controls at the perimeter, distribution, and access layers so that no single failure exposes critical assets. Which network security design principle does this approach represent?
A network engineer writes the following Python snippet to print the hostname of each device returned by a Catalyst Center inventory query: devices = [ {"hostname": "core-sw1", "role": "CORE"}, {"hostname": "acc-sw2", "role": "ACCESS"}, {"hostname": "acc-sw3", "role": "ACCESS"} ] for d in devices: print(d["hostname"]) What output does this script produce?
A network engineer is testing a RESTCONF interface on a Cisco IOS XE router. They issue a GET request to https://198.51.100.5/restconf/data/ietf-interfaces:interfaces to read the current interface configuration. The device returns the requested data. Which HTTP response status code should the engineer expect to receive for this successful read operation?
A network engineer is deploying a Cisco SD-Access fabric for a campus site. Users in the fabric must reach applications hosted in the traditional data center that is outside the fabric, as well as the public internet. The engineer needs to select the fabric device role responsible for connecting the fabric overlay to these external, non-fabric networks and handling the translation between fabric and non-fabric domains. Which fabric role fulfills this requirement?
A network architect is documenting the Cisco Catalyst SD-WAN fabric for a new deployment. She needs to identify which component sits in the branch and data center sites, establishes IPsec data plane tunnels to other sites, and forwards actual user traffic through the overlay. Which SD-WAN component performs this role?
A network engineer is deploying a Cisco Catalyst SD-WAN fabric for a retail company with 200 branch sites. The operations team needs a single interface to build device configuration templates, apply centralized policies, monitor device health, and perform software upgrades across the entire fabric. Which controller component provides this functionality?
A network automation team is moving away from screen-scraping CLI output with brittle regular expressions. They want to programmatically configure and validate device state using a standardized, vendor-neutral schema that defines allowed data types, constraints, and hierarchy. Which statement best describes the primary benefit YANG provides in this workflow?
A network automation engineer is reviewing a YANG module used to model interface configuration on a Catalyst switch. The engineer needs to identify the node type that holds a single value of a specific type (such as a string or integer) and cannot contain any child nodes. Which YANG statement defines this kind of node?