2026 Actual Cisco 350-901 Dumps, Updated Exam Questions for Guaranteed Pass

350-901 free sample questions and answers

Cisco 350-901 practice quiz with correct answers for search indexing.

1. Question 1

   Refer to the exhibit.

   

   The cURL POST request creates an OAuth access token for authentication with FDM API requests. What is the purpose of the file ''@token_data'' that cURL is handling?

   AThis file is a container to log possible error responses in the request.
   

   BThis file is given as input to store the access token received from FDM.
   

   CThis file is used to send authentication related headers.
   

   DThis file contains raw data that is needed for token authentication.
   

   Correct answer: D

   In the cURL POST request for OAuth token creation, the file '@token_data' serves as the request body containing JSON-formatted data required for the token request.

   The '@' symbol in cURL indicates that the following argument is a file path, and cURL will read the file contents and send it as the request body.

   The token_data file typically contains:

   • Client credentials (client_id, client_secret)
   • Grant type (usually 'client_credentials')
   • Scope (requested permissions)
   • Other authentication parameters in JSON format

   Example token_data content:

   {\n  'grant_type': 'client_credentials',\n  'client_id': 'your_client_id',\n  'client_secret': 'your_client_secret',\n  'scope': 'fdn:api'\n}

   This approach keeps sensitive credentials separate from the command line and follows security best practices for handling credentials in scripts.

2. Question 2

   What is the task for generating a certificate signing request in the process to obtain and deploy CA-signed TLS certificates?

   Aestablishing unencrypted communication endpoints
   

   Bpreparing a file with encoded identification data and a public key
   

   Cdisabling automatic renewal of secure communications
   

   Dadding signature chains during encryption processes
   

   Correct answer: B

   
   

3. Question 3

   A user is receiving a 429 Too Many Requests error. Which scheme is the server employing that causes this error?

   Arate limiting
   

   Btime outs
   

   Ccaching
   

   Dredirection
   

   Correct answer: A

   
   

4. Question 4

   A local data center deployment using Cisco NX-OS switches is scaling and requires automatic configuration at scale Configuration management must be set up for a Cisco NX-OS switch by using Ansible. The Ansible control server is currently located on a different subnet than the switch The solution has these requirements

   * The transport protocol used must be encrypted

   * The connections must originate from a server m the same local network

   * Enable mode must be supported

   Which connectivity method must be used?

   ASSH through a bastion host and ansible_become method for privilege escalation.
   

   BHTTPS through a repository and ansible_become method for privilege escalation
   

   CXML-RPC through a web proxy.
   

   DHTTP through a web proxy.
   

   Correct answer: A

   For secure Ansible connectivity to NX-OS switches across subnets with the specified requirements, use:

   • SSH (Secure Shell): Encrypted transport protocol
   • Enable mode support: Use authorize/auth_pass or enable_mode

   The connectivity method must be: SSH with local user authentication. Configure:

   • SSH on the NX-OS switch for encrypted communications
   • User credentials configured on both the switch and Ansible host
   • Enable mode configured in the Ansible playbook
   • Connection type: network_cli with transport: ssh

   This meets encryption, originates from the control server, and supports enable mode for privilege escalation.

5. Question 5

   Which Puppet manifest needs to be used to configure an interface GigabitEthernet 0/1 on a Cisco IOS switch?

   

   

   AOption A
   

   BOption B
   

   COption C
   

   DOption D
   

   Correct answer: D

   https://github.com/puppetlabs/cisco_ios/blob/main/examples/network_interface.pp