mediumMultiple Select
350-401 Practice Question: Which two statements about Cisco DNA Center…
Which two statements about Cisco DNA Center software image management (SWIM) are true? (Choose two.)
⚠ Common exam trap
350-401 often tests the difference between traditional manual image management (TFTP, console access) and DNA Center's automated SWIM, causing candidates to assume legacy requirements like local TFTP servers.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Cisco DNA Center allows administrators to define a golden image for each device family and automatically enforce compliance.
Option A is correct because Cisco DNA Center SWIM lets administrators designate a golden (approved) image per device family and then run compliance checks that flag and remediate devices whose running image deviates from that golden image. Option B is correct because SWIM performs remote image distribution and activation over the management network, so devices can be upgraded without an engineer physically visiting them. Option C is wrong because SWIM uses DNA Center's own image repository and file transfer mechanisms (for example, HTTPS/SCP-style transfer to devices), not a locally configured TFTP server on each device. Option D is wrong because SWIM does include image compliance status, version tracking, and audit/history reporting. Option E is wrong because SWIM supports a broad range of Cisco platforms (including many Catalyst switching and routing families), not only Catalyst 9000 series devices.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Cisco DNA Center allows administrators to define a golden image for each device family and automatically enforce compliance.
Why this is correct
SWIM maintains a golden image per device family and continuously compares running images against it, flagging or remediating non-compliant devices. This satisfies the stem by showing DNA Center's automated compliance enforcement, not merely image storage or manual upload.
- ✓
Cisco DNA Center can upgrade device images remotely without requiring physical access to the devices.
Why this is correct
SWIM pushes images to devices over the management network, so administrators upgrade remotely without console or physical access. This satisfies the stem by confirming centralised, out-of-band image distribution across the fabric rather than requiring on-site intervention per device.
- ✗
Cisco DNA Center SWIM requires all devices to have a TFTP server configured locally to receive new images.
Why it's wrong here
SWIM transfers images using its own repository and file transfer mechanisms, including SFTP and HTTP, without requiring a local TFTP server on each device. It is tempting because TFTP is a classic method for manually copying IOS images, and it is the correct choice for ad hoc offline upgrades outside DNA Center.
- ✗
Cisco DNA Center SWIM does not provide any compliance reporting or audit trails for image versions.
Why it's wrong here
SWIM maintains image compliance status per device against golden images and logs upgrade history, so claiming no reporting or audit trail is false. It is tempting because SWIM's headline function is image distribution and activation, and reporting sits in the compliance dashboard rather than the upgrade workflow itself.
- ✗
Cisco DNA Center SWIM only supports Cisco Catalyst 9000 series switches and cannot manage older platforms.
Why it's wrong here
SWIM supports a broad device compatibility matrix spanning Catalyst, Nexus and ISR platforms, so restricting it to Catalyst 9000 is false. It is tempting because DNA Center's assurance and automation features are richest on Catalyst 9000, which is where SD-Access deployments typically begin.
Go deeper
Related to this question
About these practice questions
This 350-401 question is part of Courseiva's 1,923-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed September 2026 · checked against the official Cisco exam blueprint
This 350-401 practice question is part of Courseiva's free Cisco certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 350-401 exam.