Free Practice Questions for Cisco 350-401 Exam

The correct answer is A. interface between the controller and the network devices.

In Cisco controller-based architectures such as Cisco DNA Center / Cisco Catalyst Center, APIs are generally described in two directions:

Northbound APIs → used by external applications, users, or orchestration systems to communicate with the controller

Southbound APIs → used by the controller to communicate with the network devices

A southbound API provides the communication path between the controller and the infrastructure devices such as switches, routers, and wireless devices. This is how the controller pushes configuration, collects operational data, and manages the network.

B. interface between the controller and the consumer This describes a northbound API, not a southbound API.

C. NETCONF API interface for orchestrator communication Orchestrator communication is generally associated with northbound integration, not the fundamental definition of Cisco DNA southbound APIs.

D. RESTful API interface for orchestrator communication This also describes northbound API behavior, where external systems communicate with the controller.

Remember this controller model clearly:

Northbound API = controller ↔ applications / orchestration / users

Southbound API = controller ↔ network devices

Southbound = toward the infrastructure

The correct configuration is option D because Cisco AAA method lists are processed from left to right. The existing configuration uses the default login and exec authorization method lists with only the TACACS+ group. That means if the TACACS+ server is unreachable, authentication and authorization fail unless another method is explicitly listed after the TACACS+ group. Adding local after group tacacs+ creates a fallback sequence: try TACACS+ first; if no TACACS+ response is available, use the local user database. Option C is wrong because it replaces TACACS+ with local authentication only, removing centralized AAA as the preferred method. Option B creates a named method list called FALLBACK, but it does not apply to the default login or exec process shown in the running configuration. Option A is not valid Cisco IOS AAA syntax for this requirement. This is a device-management security question focused on resilient AAA design. References/topics: ENCOR Infrastructure Security, AAA, TACACS+, local fallback, device administration, authorization method lists.

Solution:

Copy run start

Verification:

OR