Cisco 350-501 Practice Test 61
Question 600
For an original SPCOR service-provider engineering scenario, consider: A service provider publishes network configuration in ad hoc JSON with an interface speed as arbitrary text and no machine-readable validity rules. Select THREE compatible elements: a proper correction, a targeted diagnostic and an acceptance result.
- Result: Model-compliant requests accept correct data and reject wrong leaf paths or types without unintended configuration changes.
- Check: Inspect capabilities, URL module prefix, requested HTTP method, Content-Type and returned status with a nonproduction test interface.
- Change: Use the platform's published YANG module and typed hierarchical schema to construct data operations with validated paths and leaf types.
- Result: Approved collectors can query counters securely and unauthorized requests fail while essential traps remain observable.
- Check: Inspect module revision, namespace, leaf types and schema paths and test one valid and one invalid payload in a lab.
- Change: Align exporter and collector template handling, source interface, sampling and timeout settings, then validate interpreted flow fields.
Explanation
Correct Answer
A:YANG defines containers lists keys and typed leaves, allowing supported protocol clients to validate configuration independently of arbitrary CLI text layouts. Applied case: A service provider publishes network configuration in ad hoc JSON with an interface speed as arbitrary text and no machine-readable validity rules.
C:Acceptance: Model-compliant requests accept correct data and reject wrong leaf paths or types without unintended configuration changes. Applied case: A service provider publishes network configuration in ad hoc JSON with an interface speed as arbitrary text and no machine-readable validity rules.
E:Acceptance: Model-compliant requests accept correct data and reject wrong leaf paths or types without unintended configuration changes. YANG defines containers lists keys and typed leaves, allowing supported protocol clients to validate configuration independently of arbitrary CLI text layouts.
Incorrect Answers
B:Check: Inspect capabilities, URL module prefix, requested HTTP method, Content-Type and returned status with a nonproduction test interface. YANG defines containers lists keys and typed leaves, allowing supported protocol clients to validate configuration independently of arbitrary CLI text layouts.
D:Result: Approved collectors can query counters securely and unauthorized requests fail while essential traps remain observable. YANG defines containers lists keys and typed leaves, allowing supported protocol clients to validate configuration independently of arbitrary CLI text layouts.
F:Change: Align exporter and collector template handling, source interface, sampling and timeout settings, then validate interpreted flow fields. YANG defines containers lists keys and typed leaves, allowing supported protocol clients to validate configuration independently of arbitrary CLI text layouts.
Question 601
A service provider network engineer is reviewing this backbone or customer-service scenario: A new router software version changes one YANG module prefix, and a client keeps using an obsolete leaf path despite receiving model validation failures. A proposed shortcut is: Guess interface leaf names from screenshots and treat every numeric YANG value as an unvalidated free-form string. What should the service provider engineer recommend as the narrowly scoped correction? Select ONE best answer.
- Use the platform's published YANG module and typed hierarchical schema to construct data operations with validated paths and leaf types.
- Anchor ZTP to verified enrollment and software artifacts with authenticated provisioning endpoints and per-device credential lifecycle.
- Guess interface leaf names from screenshots and treat every numeric YANG value as an unvalidated free-form string.
- Use documented SNMP access restrictions and authenticated encrypted SNMPv3 where supported and verify polling and notifications separately.
Explanation
Correct Answer
A:This targeted action addresses the observed service-provider control or forwarding gap without discarding necessary controls. Applied case: A new router software version changes one YANG module prefix, and a client keeps using an obsolete leaf path despite receiving model validation failures.
Incorrect Answers
B:Anchor ZTP to verified enrollment and software artifacts with authenticated provisioning endpoints and per-device credential lifecycle. YANG defines containers lists keys and typed leaves, allowing supported protocol clients to validate configuration independently of arbitrary CLI text layouts.
C:YANG defines containers lists keys and typed leaves, allowing supported protocol clients to validate configuration independently of arbitrary CLI text layouts. Applied case: A new router software version changes one YANG module prefix, and a client keeps using an obsolete leaf path despite receiving model validation failures.
D:Use documented SNMP access restrictions and authenticated encrypted SNMPv3 where supported and verify polling and notifications separately. YANG defines containers lists keys and typed leaves, allowing supported protocol clients to validate configuration independently of arbitrary CLI text layouts.
Question 602
A Cisco service provider design review finds: A new router software version changes one YANG module prefix, and a client keeps using an obsolete leaf path despite receiving model validation failures. The team proposes: Use the platform's published YANG module and typed hierarchical schema to construct data operations with validated paths and leaf types. Which engineering principle most strongly supports the recommended response? Select ONE best answer.
- NetFlow and IPFIX export summarized flow records whose field templates and sampling rules determine what collectors can reconstruct.
- gRPC carries typed RPC streams, while gNMI supports model-based telemetry and configuration; TLS and mTLS protect and authenticate session peers.
- Automation assurance depends on current trusted data sources and consistent time or interface identities; a collected metric without context can produce a misleading incident.
- YANG defines containers lists keys and typed leaves, allowing supported protocol clients to validate configuration independently of arbitrary CLI text layouts.
Explanation
Correct Answer
D:Demonstrable success requires: Model-compliant requests accept correct data and reject wrong leaf paths or types without unintended configuration changes. Applied case: A new router software version changes one YANG module prefix, and a client keeps using an obsolete leaf path despite receiving model validation failures.
Incorrect Answers
A:NetFlow and IPFIX export summarized flow records whose field templates and sampling rules determine what collectors can reconstruct. YANG defines containers lists keys and typed leaves, allowing supported protocol clients to validate configuration independently of arbitrary CLI text layouts.
B:GRPC carries typed RPC streams, while gNMI supports model-based telemetry and configuration; TLS and mTLS protect and authenticate session peers. YANG defines containers lists keys and typed leaves, allowing supported protocol clients to validate configuration independently of arbitrary CLI text layouts.
C:Automation assurance depends on current trusted data sources and consistent time or interface identities; a collected metric without context can produce a misleading incident. YANG defines containers lists keys and typed leaves, allowing supported protocol clients to validate configuration independently of arbitrary CLI text layouts.
Question 603
The service provider operations team has not yet approved a change. Current evidence indicates: A new router software version changes one YANG module prefix, and a client keeps using an obsolete leaf path despite receiving model validation failures. Which evidence best tests the technical diagnosis before approving a disruptive change? Select ONE best answer.
- Run check mode or an isolated deployment twice, comparing targeted hosts, command diff, failed hosts and change counts.
- Verify service certificates, trust chains, SAN validation, gNMI subscription paths and telemetry timestamps over a controlled authorized and unauthorized test.
- Inspect module revision, namespace, leaf types and schema paths and test one valid and one invalid payload in a lab.
- Inspect capabilities, URL module prefix, requested HTTP method, Content-Type and returned status with a nonproduction test interface.
Explanation
Correct Answer
C:Confirm afterward that: Model-compliant requests accept correct data and reject wrong leaf paths or types without unintended configuration changes. Applied case: A new router software version changes one YANG module prefix, and a client keeps using an obsolete leaf path despite receiving model validation failures.
Incorrect Answers
A:Run check mode or an isolated deployment twice, comparing targeted hosts, command diff, failed hosts and change counts. YANG defines containers lists keys and typed leaves, allowing supported protocol clients to validate configuration independently of arbitrary CLI text layouts.
B:Verify service certificates, trust chains, SAN validation, gNMI subscription paths and telemetry timestamps over a controlled authorized and unauthorized test. YANG defines containers lists keys and typed leaves, allowing supported protocol clients to validate configuration independently of arbitrary CLI text layouts.
D:Inspect capabilities, URL module prefix, requested HTTP method, Content-Type and returned status with a nonproduction test interface. YANG defines containers lists keys and typed leaves, allowing supported protocol clients to validate configuration independently of arbitrary CLI text layouts.
Question 604
A candidate correction has been tested and the platform team requires a post-change acceptance check. Original problem: A new router software version changes one YANG module prefix, and a client keeps using an obsolete leaf path despite receiving model validation failures. The carrier operations owner needs positive and negative tests showing existing customer services remain available. Which acceptance result demonstrates correct service provider forwarding and control behavior without disrupting authorized workflows? Select ONE best answer.
- Model-compliant requests accept correct data and reject wrong leaf paths or types without unintended configuration changes.
- Only valid transactions enter the intended configuration datastore and any commit failure is clearly reported and rolled back where supported.
- Reviewed plans converge expected resources without conflicting state writes or unapproved destructive network actions.
- Approved collectors can query counters securely and unauthorized requests fail while essential traps remain observable.
Explanation
Correct Answer
A:YANG defines containers lists keys and typed leaves, allowing supported protocol clients to validate configuration independently of arbitrary CLI text layouts. The approved implementation step was: Use the platform's published YANG module and typed hierarchical schema to construct data operations with validated paths and leaf types.
Incorrect Answers
B:Only valid transactions enter the intended configuration datastore and any commit failure is clearly reported and rolled back where supported. YANG defines containers lists keys and typed leaves, allowing supported protocol clients to validate configuration independently of arbitrary CLI text layouts.
C:Reviewed plans converge expected resources without conflicting state writes or unapproved destructive network actions. YANG defines containers lists keys and typed leaves, allowing supported protocol clients to validate configuration independently of arbitrary CLI text layouts.
D:Approved collectors can query counters securely and unauthorized requests fail while essential traps remain observable. YANG defines containers lists keys and typed leaves, allowing supported protocol clients to validate configuration independently of arbitrary CLI text layouts.
Question 605
An implementation sign-off request identifies the following problem: A new router software version changes one YANG module prefix, and a client keeps using an obsolete leaf path despite receiving model validation failures. Which paired technical change and validation should close the implementation review? Select ONE best answer.
- Change: Use the platform's published YANG module and typed hierarchical schema to construct data operations with validated paths and leaf types. Verify: Inspect module revision, namespace, leaf types and schema paths and test one valid and one invalid payload in a lab.
- Change: Align exporter and collector template handling, source interface, sampling and timeout settings, then validate interpreted flow fields. Verify: Compare exported templates, sequence counters, sampling rate, collector parsing and independently measured test-flow traffic.
- Change: Execute NETCONF operations against the intended supported datastore and verify RPC outcomes, commit state and operational configuration. Verify: Compare NETCONF hello capabilities, target datastore, rpc-reply ok or rpc-error and device running configuration after a staged edit.
- Change: Use documented SNMP access restrictions and authenticated encrypted SNMPv3 where supported and verify polling and notifications separately. Verify: Inspect security level, user and engine parameters, permitted managers, packet captures and a representative interface counter query and notification.
Explanation
Correct Answer
A:The change is successful only when: Model-compliant requests accept correct data and reject wrong leaf paths or types without unintended configuration changes.
Incorrect Answers
B:Change: Align exporter and collector template handling, source interface, sampling and timeout settings, then validate interpreted flow fields. YANG defines containers lists keys and typed leaves, allowing supported protocol clients to validate configuration independently of arbitrary CLI text layouts.
C:Change: Execute NETCONF operations against the intended supported datastore and verify RPC outcomes, commit state and operational configuration.
D:Change: Use documented SNMP access restrictions and authenticated encrypted SNMPv3 where supported and verify polling and notifications separately.
Question 606
A service provider network engineer is reviewing this backbone or customer-service scenario: A service provider controller sends NETCONF edit-config to a candidate datastore then declares the rollout complete without committing the candidate change. A proposed shortcut is: Mark any received NETCONF response as a successful committed change and ignore rpc-error content and datastore semantics. What should the service provider engineer recommend as the narrowly scoped correction? Select ONE best answer.
- Anchor ZTP to verified enrollment and software artifacts with authenticated provisioning endpoints and per-device credential lifecycle.
- Execute NETCONF operations against the intended supported datastore and verify RPC outcomes, commit state and operational configuration.
- Mark any received NETCONF response as a successful committed change and ignore rpc-error content and datastore semantics.
- Keep state in an access-controlled locked backend and review plans and drift against provider-supported network resources before apply.
Explanation
Correct Answer
B:This targeted action addresses the observed service-provider control or forwarding gap without discarding necessary controls. Applied case: A service provider controller sends NETCONF edit-config to a candidate datastore then declares the rollout complete without committing the candidate change.
Incorrect Answers
A:Anchor ZTP to verified enrollment and software artifacts with authenticated provisioning endpoints and per-device credential lifecycle. NETCONF uses modeled XML RPC messages and datastore operations; an active SSH transport or accepted candidate does not necessarily mean a committed change.
C:NETCONF uses modeled XML RPC messages and datastore operations; an active SSH transport or accepted candidate does not necessarily mean a committed change. For this best change assessment, the shortcut changes or bypasses the necessary routing, service or operational boundary rather than correcting it.
D:Keep state in an access-controlled locked backend and review plans and drift against provider-supported network resources before apply. NETCONF uses modeled XML RPC messages and datastore operations; an active SSH transport or accepted candidate does not necessarily mean a committed change.
Question 607
A Cisco service provider design review finds: A service provider controller sends NETCONF edit-config to a candidate datastore then declares the rollout complete without committing the candidate change. The team proposes: Execute NETCONF operations against the intended supported datastore and verify RPC outcomes, commit state and operational configuration. Which engineering principle most strongly supports the recommended response? Select ONE best answer.
- Secure ZTP reduces manual first-boot work while requiring device identity, image integrity and confidentiality for configuration and enrollment secrets.
- NSO can map a service model to multi-device configuration with controlled transactions, enabling auditable service-level creation, modification and deletion.
- Automation assurance depends on current trusted data sources and consistent time or interface identities; a collected metric without context can produce a misleading incident.
- NETCONF uses modeled XML RPC messages and datastore operations; an active SSH transport or accepted candidate does not necessarily mean a committed change.
Explanation
Correct Answer
D:Demonstrable success requires: Only valid transactions enter the intended configuration datastore and any commit failure is clearly reported and rolled back where supported. Applied case: A service provider controller sends NETCONF edit-config to a candidate datastore then declares the rollout complete without committing the candidate change.
Incorrect Answers
A:Secure ZTP reduces manual first-boot work while requiring device identity, image integrity and confidentiality for configuration and enrollment secrets. NETCONF uses modeled XML RPC messages and datastore operations; an active SSH transport or accepted candidate does not necessarily mean a committed change.
B:NSO can map a service model to multi-device configuration with controlled transactions, enabling auditable service-level creation, modification and deletion. NETCONF uses modeled XML RPC messages and datastore operations; an active SSH transport or accepted candidate does not necessarily mean a committed change.
C:This option addresses a different service provider engineering topic (Telemetry assurance correlation and data quality) rather than the documented NETCONF edit-config candidate commit and error handling decision.
Question 608
The service provider operations team has not yet approved a change. Current evidence indicates: A service provider controller sends NETCONF edit-config to a candidate datastore then declares the rollout complete without committing the candidate change. Which evidence best tests the technical diagnosis before approving a disruptive change? Select ONE best answer.
- Compare exported templates, sequence counters, sampling rate, collector parsing and independently measured test-flow traffic.
- Check bootstrap trust, certificate or signed-image verification, credential issuance, endpoint authorization and failure handling in a spare router lab.
- Compare NETCONF hello capabilities, target datastore, rpc-reply ok or rpc-error and device running configuration after a staged edit.
- Inspect capabilities, URL module prefix, requested HTTP method, Content-Type and returned status with a nonproduction test interface.
Explanation
Correct Answer
C:NETCONF uses modeled XML RPC messages and datastore operations; an active SSH transport or accepted candidate does not necessarily mean a committed change. Applied case: A service provider controller sends NETCONF edit-config to a candidate datastore then declares the rollout complete without committing the candidate change.
Incorrect Answers
A:Compare exported templates, sequence counters, sampling rate, collector parsing and independently measured test-flow traffic. NETCONF uses modeled XML RPC messages and datastore operations; an active SSH transport or accepted candidate does not necessarily mean a committed change.
B:Check bootstrap trust, certificate or signed-image verification, credential issuance, endpoint authorization and failure handling in a spare router lab. NETCONF uses modeled XML RPC messages and datastore operations; an active SSH transport or accepted candidate does not necessarily mean a committed change.
D:Inspect capabilities, URL module prefix, requested HTTP method, Content-Type and returned status with a nonproduction test interface. NETCONF uses modeled XML RPC messages and datastore operations; an active SSH transport or accepted candidate does not necessarily mean a committed change.
Question 609
A candidate correction has been tested and the platform team requires a post-change acceptance check. Original problem: A service provider controller sends NETCONF edit-config to a candidate datastore then declares the rollout complete without committing the candidate change. The carrier operations owner needs positive and negative tests showing existing customer services remain available. Which acceptance result demonstrates correct service provider forwarding and control behavior without disrupting authorized workflows? Select ONE best answer.
- Only authorized PEs are targeted, repeated runs become stable and skipped or unreachable devices are explicitly reported.
- Only valid transactions enter the intended configuration datastore and any commit failure is clearly reported and rolled back where supported.
- Approved collectors can query counters securely and unauthorized requests fail while essential traps remain observable.
- Reviewed plans converge expected resources without conflicting state writes or unapproved destructive network actions.
Explanation
Correct Answer
B:NETCONF uses modeled XML RPC messages and datastore operations; an active SSH transport or accepted candidate does not necessarily mean a committed change. The result must be validated using the documented device, service or access context.
Incorrect Answers
A:Only authorized PEs are targeted, repeated runs become stable and skipped or unreachable devices are explicitly reported. NETCONF uses modeled XML RPC messages and datastore operations; an active SSH transport or accepted candidate does not necessarily mean a committed change.
C:Approved collectors can query counters securely and unauthorized requests fail while essential traps remain observable. A service provider controller sends NETCONF edit-config to a candidate datastore then declares the rollout complete without committing the candidate change.
D:Reviewed plans converge expected resources without conflicting state writes or unapproved destructive network actions. NETCONF uses modeled XML RPC messages and datastore operations; an active SSH transport or accepted candidate does not necessarily mean a committed change.
Question 610
For an original SPCOR service-provider engineering scenario, consider: A service provider controller sends NETCONF edit-config to a candidate datastore then declares the rollout complete without committing the candidate change. Select TWO complementary steps: the targeted correction and its strongest prechange validation.
- Mark any received NETCONF response as a successful committed change and ignore rpc-error content and datastore semantics.
- Check: Inspect capabilities, URL module prefix, requested HTTP method, Content-Type and returned status with a nonproduction test interface.
- Check: Compare NETCONF hello capabilities, target datastore, rpc-reply ok or rpc-error and device running configuration after a staged edit.
- Change: Execute NETCONF operations against the intended supported datastore and verify RPC outcomes, commit state and operational configuration.
- Change: Align exporter and collector template handling, source interface, sampling and timeout settings, then validate interpreted flow fields.
Explanation
Correct Answer
C:NETCONF uses modeled XML RPC messages and datastore operations; an active SSH transport or accepted candidate does not necessarily mean a committed change. Acceptance: Only valid transactions enter the intended configuration datastore and any commit failure is clearly reported and rolled back where supported.
D:NETCONF uses modeled XML RPC messages and datastore operations; an active SSH transport or accepted candidate does not necessarily mean a committed change. Evidence: Compare NETCONF hello capabilities, target datastore, rpc-reply ok or rpc-error and device running configuration after a staged edit.
Incorrect Answers
A:For this select two assessment, the shortcut changes or bypasses the necessary routing, service or operational boundary rather than correcting it. NETCONF uses modeled XML RPC messages and datastore operations; an active SSH transport or accepted candidate does not necessarily mean a committed change.
B:Check: Inspect capabilities, URL module prefix, requested HTTP method, Content-Type and returned status with a nonproduction test interface. NETCONF uses modeled XML RPC messages and datastore operations; an active SSH transport or accepted candidate does not necessarily mean a committed change.
E:Change: Align exporter and collector template handling, source interface, sampling and timeout settings, then validate interpreted flow fields. NETCONF uses modeled XML RPC messages and datastore operations; an active SSH transport or accepted candidate does not necessarily mean a committed change.
