Practice 350-601 Network questions with full explanations on every answer.
Start practicing
Network — choose a session length
Free · No account required
Click any question to see the full explanation and answer options, or start a focused practice session above.
A data center engineer is troubleshooting intermittent connectivity between two servers in different VLANs. The servers are connected to different leaf switches in a VXLAN EVPN fabric. When checking the fabric, the engineer notices that the NVE interface on one leaf is up/up but the VNI for the server VLAN is not listed in 'show nve vni'. What is the most likely cause?
2An organization is deploying a new ACI fabric. The design requires that traffic between EPGs in the same bridge domain be allowed by default, but traffic between EPGs in different bridge domains must be denied unless explicitly permitted. Which contract scope configuration meets this requirement?
3A network engineer is configuring OSPF on a Cisco Nexus switch for a data center network. The requirement is to ensure that the switch does not become the Designated Router (DR) on a multi-access segment. Which OSPF configuration achieves this?
4During a maintenance window, a network engineer plans to upgrade the NX-OS software on a pair of Nexus 9000 switches configured as vPC peers. The engineer wants to minimize traffic disruption. Which upgrade sequence is recommended?
5A data center uses Cisco ACI with multiple tenants. The security policy requires that all traffic between EPGs must be explicitly allowed via contracts. However, the operations team reports that communication between two EPGs in the same bridge domain is working even though no contract is applied. What is the most likely reason?
6Which TWO statements about VXLAN BGP EVPN control plane are true? (Choose two.)
7Which THREE conditions must be met for a Cisco Nexus switch to form a vPC? (Choose three.)
8Refer to the exhibit. An engineer is configuring a server-facing interface on a Nexus switch. The server is running VMware ESXi with multiple virtual machines in VLANs 10, 20, and 30. After applying the configuration, the ESXi host reports that it cannot communicate on VLAN 30. Which configuration change should be made?
9Refer to the exhibit. A VXLAN VNI (10030) is operationally down. What is the most likely cause?
10An engineer is troubleshooting connectivity between two Nexus 9000 switches configured with vPC. The vPC peer link is up, but the vPC peer-keepalive link is failing. Which action should be taken to ensure vPC convergence in the event of a peer-link failure?
11A data center design requires Layer 2 extension between two sites using OTV. The network engineer notices that MAC addresses from Site A are not learned at Site B. OTV adjacency is up, and both sites have the same overlay interface configured. Which configuration issue is most likely the cause?
12A network engineer is implementing QoS on a Nexus 9000 switch. The requirement is to prioritize storage traffic (iSCSI) and ensure lossless behavior. Which queuing strategy should be applied to the egress interface?
13An organization is deploying a new leaf-spine fabric with Cisco ACI. The requirement is to allow inter-tenant communication between two EPGs in different tenants. Which configuration object is necessary to enable this communication?
14Which TWO configuration steps are necessary to enable VXLAN EVPN on a Cisco Nexus 9000 switch using the centralized anycast gateway model?
15A server connected to Ethernet1/1 is unable to communicate on VLAN 1. The server is configured to send untagged frames. Based on the exhibit, what is the most likely cause?
16You are a network engineer at a financial institution. The company has two data centers: DC1 and DC2, connected via a dark fiber link. Each data center has a pair of Nexus 7000 switches in a vPC configuration. The dark fiber link connects to a port on each Nexus 7000 pair using a Layer 2 port-channel. The requirement is to extend VLAN 100 between the two data centers for a critical application that requires a stretched Layer 2 domain. The current configuration has the port-channel on both sides set to mode 'active' with LACP. VLAN 100 is allowed on the trunk. The application servers report intermittent connectivity issues, with some packets being dropped. Upon inspection, you notice that the MAC address table on the Nexus 7000 in DC1 shows the MAC address of the server in DC2 on the dark fiber port-channel interface, but also on a local access port connected to a different server in the same VLAN. What is the most likely cause of the intermittent connectivity?
17Arrange the steps to configure a vPC domain on a pair of Cisco Nexus switches.
18Arrange the steps to create a service profile template in Cisco UCS Manager.
19Match each Cisco data center technology to its primary purpose.
20Match each Cisco UCS Manager CLI command to its function.
21A network engineer is configuring a VPC peer-link on a Nexus switch. Which interface configuration is required for the peer-link port-channel?
22In a VXLAN EVPN fabric, which protocol is used to exchange MAC and IP address reachability information among VTEPs?
23A network engineer is troubleshooting an OSPF adjacency issue between two Nexus switches. The neighbors are stuck in the EXSTART state. What is the most likely cause?
24Which statement is true about the VLANs carried on a VPC peer-link?
25In a centralized anycast gateway VXLAN EVPN design, which is a requirement?
26A network engineer notices that when a host sends a packet to a destination on a different VTEP, the packet is flooded to all VTEPs even though the destination MAC is known. What is the most likely cause?
27After adding a new spine switch to a VXLAN EVPN fabric with OSPF underlay, some leaf switches experience routing instability. Which action could resolve the instability?
28Which command displays the VLANs allowed on a trunk interface?
29In a VXLAN EVPN multi-tier design, which feature ensures traffic between leaf switches takes the optimal path without hair-pinning through a spine?
30A network engineer is verifying VPC configuration on a pair of Nexus switches. Which two commands should be used to check VPC status and consistency? (Choose two.)
31Which three EVPN route types are essential for VXLAN EVPN operation in a typical data center fabric? (Choose three.)
32When configuring BGP EVPN on spine switches functioning as route reflectors, which two address families must be configured? (Choose two.)
33Refer to the exhibit. What is the current state of the VPC domain?
34Refer to the exhibit. Which VLANs are allowed on the VPC peer-link?
35Refer to the exhibit. What is the most likely cause of the NVE interface being down?
36A network engineer is troubleshooting VXLAN connectivity between two VTEPs. The source VTEP is configured with `nve1` and member VNI 10000. The `show nve peers` command shows the remote VTEP IP but the status is 'Init'. What is a likely cause?
37An engineer is designing a Layer 3 network for a data center using OSPF. The core switches are connected to aggregation switches. To optimize convergence, which OSPF network type should be used on the links between core and aggregation?
38In an EVPN-VXLAN fabric, a network engineer notices that MAC addresses learned from an external router are not being advertised as EVPN type-2 routes. The external router is connected to a leaf switch via a Layer 3 port. Which additional configuration is needed on the leaf switch?
39A data center switch has multiple access ports configured with spanning-tree portfast. A new server is connected to one of these ports and immediately causes a network loop. What is the most likely cause?
40A network engineer is configuring a Fabric Extender (FEX) to connect to a parent switch. Which best practice should be followed for FEX host interfaces?
41In a vPC domain, a consistency check failure is observed for the vPC keepalive link. What is the impact on the vPC domain operation?
42A multicast application requires that all receivers join the same group using PIM sparse mode. Which router is responsible for forwarding traffic from the source to the RP?
43An engineer is configuring VXLAN bridging and routing on a Cisco Nexus 9000 switch. Which configuration is required to enable inter-VNI routing?
44In a BGP EVPN deployment, route type 2 (MAC/IP advertisement) is used to advertise MAC addresses. What additional information is carried in route type 2 for IP routing?
45Which two VXLAN control plane options are supported on Cisco Nexus 9000 switches? (Choose two.)
46An OSPF router in a broadcast network has not formed a neighbor relationship. What are three possible causes? (Choose three.)
47Which two benefits does EVPN provide compared to traditional VPLS? (Choose two.)
48Refer to the exhibit. A network engineer notices that traffic for VNI 10000 is not being encapsulated. What is the most likely reason?
49Refer to the exhibit. What is the most likely cause of neighbor 10.1.1.3 being stuck in EXSTART?
50Refer to the exhibit. A network engineer has configured a port-channel for OSPF adjacency. What additional configuration is required for the port-channel to operate correctly?
51A network engineer is troubleshooting high CPU utilization on a Nexus 9000 switch. Which command is most useful to identify the process consuming the most CPU?
52A data center uses VPC between two Nexus switches. Which statement is true about the VPC peer-link?
53Which protocol is used by Cisco ACI fabric to distribute endpoint information among spines?
54A network engineer is troubleshooting a VXLAN EVPN problem where some endpoints are not reachable. The output of 'show bgp l2vpn evpn' shows Type-3 routes but no Type-2 routes for a specific VNI. What should the engineer check?
55A Nexus 9000 switch is configured with VPC. The VPC keepalive link fails. What is the effect on the VPC domain?
56In a Cisco ACI fabric, a new EPG is created and associated with a bridge domain that has 'Unicast Routing' enabled. However, endpoints in that EPG cannot communicate with endpoints in other EPGs in the same VRF. What is missing?
57An engineer is troubleshooting BGP EVPN control plane. They issue 'show bgp l2vpn evpn' and see Type-3 routes but no Type-2 routes for any VNI. Which condition is most likely?
58A network engineer is configuring Cisco Nexus VXLAN with BGP EVPN. The VTEPs are using loopback0 as the NVE source. The physical interfaces are up, but the NVE interface remains down. What is the most likely cause?
59In a Cisco ACI fabric, a tenant has multiple bridge domains in the same VRF all with 'Unicast Routing' enabled and hardware proxy mode. However, endpoints in different BDs within the same VRF cannot communicate even with a contract. What is a possible reason?
60Which TWO characteristics are true about Cisco VPC? (Choose two)
61Which THREE components are part of an EVPN VXLAN fabric? (Choose three)
62Which TWO statements are true about Cisco ACI contracts? (Choose two)
63Refer to the exhibit. A network engineer notices that the NVE1 interface is up but VXLAN traffic is not being encapsulated. What is the most likely cause?
64Refer to the exhibit. A network engineer notices that the VPC peer status is down, and the peer-keepalive is not reachable. Based on the configuration, what is the likely issue?
65Refer to the exhibit. A network administrator configured VXLAN EVPN as above. The VTEP can communicate with neighbors on VNI 5001, but cannot reach the default gateway for VNI 5002. What is the problem?
66A network engineer is configuring OSPF on a pair of Nexus 9000 switches acting as spine switches in a VXLAN fabric. The engineer needs to ensure that the spine switches do not become the DR for any VLAN. Which configuration should be applied?
67An engineer is troubleshooting high CPU utilization on a Nexus 7700 switch. The output of 'show process cpu' shows high usage from the 'netstack' process. Which action should the engineer take to identify the cause?
68In a Cisco ACI fabric, the administrator notices that traffic between two endpoints in different EPGs but on the same leaf switch is being dropped when a contract is applied. The endpoints are in the same VRF but different bridge domains. What is the likely cause?
69A data center network uses VXLAN EVPN for network virtualization. Which component is responsible for advertising MAC addresses and host routes across the fabric?
70During a network upgrade, an engineer applies a new OSPF configuration on a Nexus 9000 spine. After the change, several leaf switches lose connectivity to each other. The engineer examines the logs and sees OSPF adjacency flapping. What is the most likely cause?
71An administrator is deploying a new application in a Cisco ACI fabric. The application requires multicast traffic between end hosts. Which configuration is necessary for multicast in ACI?
72An engineer is troubleshooting a BGP EVPN session between a leaf and a spine. The 'show bgp l2vpn evpn summary' output shows the peer state as 'Active'. What does this indicate?
73A data center network uses Cisco Nexus switches with VXLAN EVPN. Which two components are essential for VXLAN EVPN operation? (Choose two.)
74When troubleshooting a VXLAN EVPN fabric with Cisco Nexus 9000 switches, which three commands provide information about the EVPN operation? (Choose three.)
75An engineer is designing a Cisco ACI multi-site solution. Which two considerations are critical for inter-site connectivity? (Choose two.)
76A large enterprise data center is deploying a new application using Cisco ACI with a multi-pod design. The application requires low-latency communication between servers in different pods. The network team has configured the ACI fabric with two pods, each connected via inter-pod network (IPN) switches. After deployment, the application experiences intermittent latency spikes and packet loss. The APIC health scores remain high but the latency issue persists. The team has verified the underlay IP connectivity and MTU settings. What is the most likely cause of the latency issues?
77A financial services company is migrating its core banking application to a new data center built on Cisco Nexus 9000 switches with VXLAN EVPN. The application requires active-active multihoming for its servers, which are dual-homed to two leaf switches. The network team has configured vPC on the leaf switches for the server connections. After the migration, the application team reports that some packets are being dropped during failover events when one of the vPC member links goes down. The network team confirms that vPC is properly configured and the peer-keepalive is functioning. What is the most likely cause of packet drops during failure?
78A mid-size organization is upgrading its data center network to support server virtualization. They have deployed two Nexus 9300 switches as access switches for their server racks. The servers are configured with VLAN tagging and connect to the switches using trunks. The network administrator needs to ensure that the switches can provide default gateway services to the servers to reduce latency. They have configured interface VLAN interfaces and HSRP for redundancy. After implementation, the servers can communicate within the same VLAN but fail to reach the default gateway. The network administrator checks the switch configuration and finds that "ip routing" is not enabled globally. What is the most likely impact of this missing configuration?
79A large cloud provider is building a new data center using Cisco ACI with multiple leaf and spine switches. They plan to host thousands of tenants with overlapping IP addresses in different VRFs. The network team has deployed the fabric with a common security policy. During testing, they discover that traffic from Tenant A to Tenant B is being allowed even though a contract should deny it. The APIC policy shows the contract is applied to the EPGs and the deny rule is present. What is the most likely cause of the policy not being enforced?
80A network engineer is troubleshooting an OSPF adjacency that fails to reach FULL state between two Nexus 9000 switches. Which TWO are common causes for this issue?
81A data center runs OSPF as the underlay for an EVPN-VXLAN fabric. The fabric includes two spine switches and eight leaf switches. After adding a new leaf switch, the network team notices that some EVPN routes are missing from the other leaves. The new leaf has established BGP EVPN sessions to both spines and the BGP sessions are up. The spines report receiving all routes from the new leaf, but the other leaves do not receive certain prefixes. The engineer checks the BGP configuration on the new leaf and sees the address-family l2vpn evpn is configured under router bgp. Which action should the engineer take to resolve the issue?
82A large enterprise uses Cisco Nexus 9000 switches in a VXLAN EVPN fabric. The underlay is OSPF. Each leaf switch has a loopback0 interface as the source interface for VXLAN tunnel endpoints. After a maintenance window, an engineer modifies the IP address of loopback0 on leaf-5 from 10.1.1.5/32 to 10.1.1.105/32. Subsequently, all VXLAN tunnels to leaf-5 go down. OSPF adjacencies between leaf-5 and the spines are still FULL. The engineer checks the NVE interface on leaf-5 and sees the source-interface is loopback0 but the interface status is up/up. However, pings from other leaves to 10.1.1.105 fail. What is the most likely cause?
83An engineer is troubleshooting a VXLAN network where traffic between two VTEPs in the same VNI is not being forwarded. The underlay network is operational and IP connectivity exists between the VTEPs. Which two actions should the engineer take to verify the VXLAN configuration?
84Refer to the exhibit. An engineer configured a VXLAN tunnel endpoint (VTEP) but the VXLAN tunnel is not operational. The underlay OSPF adjacency is established. What is the missing configuration?
85An organization has deployed a pair of Nexus 93180YC-EX switches as vPC peers in a data center. The switches are connected to a server with two 10GbE interfaces configured as an LACP port-channel. The vPC configuration has been verified and was working correctly for months. After a scheduled maintenance window that included upgrading the NX-OS software from version 7.0(3)I7(1) to 7.0(3)I7(5), the server begins experiencing frequent link flaps on the port-channel. The server administrator reports that every 5-10 minutes, the link goes down for about 2 seconds and then recovers. The network team checks the logs on the Nexus switches and sees repeated messages: 'LACP-3-MISCONFIG: Port-channel <channel> is misconfigured: partner not on same aggregator.' The 'show vpc brief' output shows all vPCs in the 'up' state. The 'show port-channel summary' shows the port-channel is up with both member ports in the bundle. What is the most likely root cause?
86An engineer is configuring a pair of Nexus 9000 switches as vPC peers. The vPC peer keepalive link is established. Which statement about the vPC peer keepalive is true?
87In a VXLAN overlay network, which component is responsible for encapsulating and decapsulating packets and resides at the edge of the underlay network?
88An engineer is designing a spine-leaf fabric using eBGP for the underlay. The spine switches are in AS 65000 and each leaf switch uses a different private AS from 65001 to 65010. For optimal convergence and to avoid BGP path hunting, which BGP feature should be configured on the spines?
89In Cisco ACI, which component is responsible for translating EPG communication policies into concrete configuration on leaf switches?
90A data center network uses MST with multiple instances. Different VLANs are mapped to different MST instances to utilize multiple spanning tree paths. Which MST parameter must be identical on all switches in the same region to ensure proper operation?
91Which NX-OS command displays the vPC consistency parameters and status on a Cisco Nexus switch?
92In a VXLAN EVPN fabric, BUM traffic can be handled by ingress replication or multicast. Which statement about ingress replication is accurate?
93An engineer is configuring OSPF in a data center fabric with multiple Nexus 9000 switches. To ensure fast convergence after a link failure, which OSPF feature should be enabled?
94In a spine-leaf architecture with 40 leaf switches and 4 spine switches, each leaf has four 40G uplinks to the spines. What is the oversubscription ratio if each leaf has 48 ports of 10G for servers?
95Which Cisco Data Center Network Manager component is used for centralized fabric management and automation of Nexus switches?
96In an ACI fabric, an EPG is configured with a contract that provides a service to another EPG. The contract has a filter for TCP port 80. Which component defines the directionality of the communication between the provider and consumer EPG?
97An engineer needs to extend a Layer 2 VLAN across a VXLAN EVPN fabric. Which construct maps the VLAN to the overlay network?
98An engineer is designing a VXLAN EVPN fabric with multicast-based BUM replication. Which two components are required to support this? (Choose two.)
99Which three checks are part of the vPC type-1 consistency check? (Choose three.)
100An engineer is deploying a new application in an ACI fabric. Which two objects must be created to define a network policy? (Choose two.)
101An engineer is deploying a VXLAN overlay network in a data center using Cisco Nexus 9000 series switches. The network must handle BUM traffic efficiently across the fabric. Which method for BUM traffic handling requires the VTEP to maintain a list of all remote VTEPs and replicate packets individually?
102In a Cisco ACI fabric, which component is responsible for policy enforcement and management of the entire infrastructure?
103A data center engineer is configuring vPC on a pair of Cisco Nexus switches. The vPC peer-link is established but the vPC member ports remain suspended. After checking the configuration, the engineer notices that the vPC peer-keepalive link is not functioning. What is the most likely cause of the suspended member ports?
104In a spine-leaf architecture using eBGP as the routing protocol, what is the primary purpose of using eBGP rather than iBGP between spine and leaf switches?
105An engineer is configuring MST on a pair of Cisco Nexus switches that will be part of a vPC domain. The vPC peer-link will carry multiple MST instances. Which MST parameter must be identical on both vPC peers to ensure proper operation?
106Which VXLAN component is responsible for encapsulating and decapsulating Ethernet frames into UDP packets?
107In a Cisco ACI fabric, a tenant has multiple bridge domains with different subnets. The administrator wants to allow traffic between two EPGs in the same tenant but different bridge domains. Which ACI construct is required to enable communication?
108A data center architect is designing a spine-leaf network with 40 leaf switches and 8 spine switches. Each leaf has 40x25G downlinks to servers and 8x100G uplinks to spines. The oversubscription ratio from server to spine is calculated as (total downlink bandwidth) / (total uplink bandwidth). What is the oversubscription ratio for each leaf?
109Which Cisco NX-OS feature allows automation and programmatic access to device configuration and monitoring using REST APIs?
110An engineer is configuring OSPF on a Cisco Nexus switch in a data center. The network consists of multiple point-to-point links. To improve convergence, the engineer wants to reduce the dead interval to 10 seconds. Which command sets the dead interval correctly?
111In a VXLAN EVPN fabric, a new server is connected to a leaf switch and requires Layer 2 connectivity to an existing VM on a different leaf. The engineer notes that the VTEP on the new leaf does not have a Type-2 route for the VM's MAC address. Which EVPN route type is used to advertise MAC addresses?
112A network administrator is troubleshooting a vPC pair and needs to verify the operational status of the vPC peer-link. Which NX-OS command displays vPC status including peer-link and member port states?
113In a Cisco ACI fabric, which component is responsible for managing the policy repository, fault monitoring, and API endpoints?
114Which VLAN trunking protocol is used by default on Cisco Nexus switches to carry multiple VLANs over a single link?
115An engineer is implementing VXLAN in a data center. The network must handle BUM traffic without relying on IP multicast in the underlay. Which BUM handling method should be chosen?
116In a spine-leaf architecture, the oversubscription ratio between leaf switches and spine switches is 3:1. Each leaf has 48 x 10G server ports and 4 x 40G uplinks to the spine. What is the oversubscription ratio at the leaf level?
117Which NX-OS command is used to display the consistency status of Virtual Port Channel (vPC) parameters across both vPC peers?
118A network engineer is configuring OSPF on a Nexus switch. To ensure fast convergence in case of a link failure, which OSPF feature should be enabled?
119In a VXLAN EVPN fabric, which component is responsible for encapsulating and decapsulating VXLAN packets?
120An engineer is configuring BGP EVPN for VXLAN in a spine-leaf fabric. The leaf switches must advertise host IP-to-MAC mappings to the control plane. Which BGP address family should be enabled on the leaf switches?
121An ACI fabric has multiple tenants and the requirement to allow only HTTP traffic from the web EPG to the app EPG. The contract must restrict traffic to TCP port 80. Which ACI object defines that specific port?
122What is the purpose of the vPC peer keepalive link in a vPC domain?
123Which STP variant provides per-VLAN load balancing and is commonly used in data center networks with Cisco Nexus switches?
124A data center architect is designing an ACI fabric with VMM integration to VMware vSphere. The goal is to allow dynamic policy assignment to virtual machines. What is the correct configuration hierarchy to enable this?
125Which command is used on a Cisco Nexus switch to display the VXLAN network identifier (VNI) associated with a specific VLAN?
126An engineer is troubleshooting a BGP EVPN issue where leaf switches are not learning remote MAC addresses. The underlay is reachable and BGP sessions are established. What is a likely cause?
127Which ECMP load-balancing method is recommended for data center spine-leaf fabrics to ensure optimal traffic distribution?
128An engineer is deploying a new VXLAN fabric and must ensure that the control plane can handle MAC advertisement without flooding. Which TWO protocols can be used for control plane learning in VXLAN? (Select two.)
129An ACI administrator is configuring external connectivity using L3Out. Which THREE components must be defined for a successful L3Out deployment? (Select three.)
130A network team is troubleshooting a vPC issue where one of the member ports is not coming up. Which TWO conditions can cause a vPC member port to fail consistency checks? (Select two.)
131In a Cisco NX-OS environment, which command is used to verify the operational state of a virtual Port Channel (vPC) peer link?
132In a VXLAN overlay network, what is the primary purpose of ingress replication for BUM traffic?
133In a Cisco ACI fabric, which object represents a collection of endpoints that share the same forwarding behavior and security policies?
134A network engineer is designing a spine-leaf fabric with oversubscription ratio of 3:1. Each leaf switch uses 40 Gbps uplinks to the spine and has 48 x 10 Gbps server ports. How many spine links are needed per leaf to achieve the target oversubscription?
135Which statement about RSTP (802.1w) is true?
136In a VXLAN environment, what is the function of a VTEP?
137In Cisco ACI, when integrating with VMware vSphere via VMM domain, what is the purpose of the 'vCenter Domain' policy?
138Which BGP variant is commonly used in data center EVPN fabrics to carry Layer 2 and Layer 3 network information?
139In a vPC setup, what is the purpose of the vPC peer-keepalive link?
140A network administrator is configuring a Cisco Nexus switch to use NX-API for automation. Which statement about NX-API is true?
141In a spine-leaf architecture, what is the primary advantage of using a full mesh between spines and leaves?
142Which Cisco DCNM feature allows centralized management and monitoring of multiple NX-OS fabrics?
143A network engineer is planning a VXLAN EVPN fabric. Which two statements about VXLAN Network Identifiers (VNIs) are correct? (Choose two.)
144In Cisco ACI, when creating a contract, which three components are part of the contract definition? (Choose three.)
145In a vPC environment, which two conditions must be identical on both vPC peer switches to ensure proper consistency? (Choose two.)
146In a Cisco ACI fabric, which component acts as the centralized policy and management controller?
147An engineer is configuring OSPF on a Nexus 9000 switch in a data center spine-leaf topology. Which OSPF network type is most appropriate on the point-to-point links between leaf and spine switches to ensure fast convergence?
148In a VXLAN EVPN fabric using BGP as the control plane, which BGP address family is used to exchange MAC/VTEP reachability information between VTEPs?
149A data center architect is designing a spine-leaf network with 40 leaf switches and 4 spine switches. Each leaf has 48 x 25G server-facing ports and 8 x 100G uplinks to the spines. What is the oversubscription ratio from server to spine?
150Which NX-OS command displays the current VLAN configuration on a Nexus switch?
151In a Cisco ACI fabric, an external L3Out is configured to advertise a subnet to the outside. Which object must be created in the tenant to define the Layer 3 outside network connection?
152An engineer notices that a vPC peer link is flapping. Which vPC component must be operational for the vPC to function correctly?
153Which VLAN range is reserved by default on Cisco Nexus switches?
154In a VXLAN overlay, which encapsulation is used to transport Ethernet frames over the IP network?
155A network engineer is configuring an ACI contract between an EPG and an external EPG. Which construct is used to permit traffic from the external EPG to the internal EPG?
156Which feature in NX-OS allows for direct API calls to the switch for automation purposes?
157In a spine-leaf architecture, what is the primary advantage of having multiple spine switches?
158Which two statements correctly describe VXLAN BUM traffic handling? (Choose two.)
159Which two BGP features are commonly used in a Cisco Data Center spine-leaf fabric to achieve optimal ECMP load balancing? (Choose two.)
160In a spine-leaf data center architecture, what is the primary purpose of using equal-cost multipath (ECMP) routing?
161An engineer is configuring vPC on a pair of Nexus switches. Which statement correctly describes the vPC peer-keepalive link?
162In VXLAN overlay networks, which mechanism is used to forward broadcast, unknown unicast, and multicast (BUM) traffic when multicast is not enabled in the underlay?
163An engineer is designing an ACI fabric and needs to provide connectivity to an external Layer 3 network. Which construct must be configured to achieve this?
164Which BGP variant is commonly used in spine-leaf fabrics to advertise EVPN routes for VXLAN?
165In a data center running MST, which region configuration parameter must match on all switches for them to be part of the same region?
166An engineer is troubleshooting a vPC consistency check failure. Which parameter must be identical on both vPC peer switches to avoid a consistency check violation for a vPC member port?
167In a VXLAN overlay, what is the role of the VXLAN Network Identifier (VNI)?
168Which NX-OS command is used to display the current OSPF neighbor states?
169In ACI, a contract is defined between two EPGs. Which component specifies the type of traffic allowed?
170A data center designer is evaluating oversubscription ratios in a spine-leaf topology with 40 leaf switches and 4 spine switches. Each leaf has 4x100G uplinks to spines, and each spine has 40x100G downlinks. The leaf switches have 48x25G server ports. What is the oversubscription ratio from the server ports to the spine uplinks?
171An engineer needs to automate a repetitive configuration task on a Nexus switch. Which method is most suitable for programmatic access?
172A network engineer is configuring 802.1Q trunking between a Nexus switch and a server. Which TWO statements are true regarding 802.1Q trunking?
173In an ACI fabric, which THREE components are required to define a policy that allows communication between two EPGs?
174An engineer is implementing VXLAN with a centralized routing gateway. Which TWO statements are correct about BUM traffic handling?
175Which protocol is used to carry VXLAN encapsulation and facilitates the exchange of MAC reachability information between VTEPs in a VXLAN EVPN fabric?
176An engineer configures vPC on a pair of Nexus switches. The vPC peer-keepalive link fails, but the vPC peer-link remains operational. What is the expected behavior?
177In a VXLAN BGP EVPN fabric, which component is responsible for handling BUM traffic using ingress replication, and how does the VTEP learn the list of remote VTEPs to replicate to?
178In ACI, which object defines the logical separation of traffic within a tenant, analogous to a VLAN in traditional networking, and is associated with a VRF?
179A network engineer is designing a spine-leaf fabric with oversubscription ratio 3:1. Each leaf switch has 48x10G host-facing ports and 4x40G uplinks to spines. What is the oversubscription ratio per leaf?
180Which NX-OS feature ensures that vPC member ports on both peers are configured identically to prevent inconsistencies that could lead to traffic black-holing?
181In an ACI fabric, a contract between two EPGs uses a filter that permits TCP port 443. The provider EPG is configured with a VMM domain integration. Which statement about the contract's effect is true?
182An engineer needs to enable equal-cost multipath (ECMP) routing in a spine-leaf fabric using OSPF. Which OSPF feature allows load balancing across multiple equal-cost paths?
183Which VXLAN component is responsible for encapsulating and decapsulating Ethernet frames into UDP packets for transport over the IP network?
184In the context of ACI L3Out, which object is used to advertise external networks into the ACI fabric and is associated with a VRF?
185A data center network uses MST to interoperate with a legacy switch that supports only RSTP. Which MST configuration parameter must match between the MST region and the legacy switch?
186An engineer is configuring a new VLAN on a Nexus switch that is part of a vPC pair. Which step is mandatory to ensure the VLAN is created on both vPC peers?
187Which TWO statements are true regarding VXLAN BUM traffic handling? (Choose two.)
188An engineer is deploying an ACI fabric with VMM integration for VMware vSphere. Which THREE components must be configured to enable dynamic EPG assignment based on VM attributes? (Choose three.)
189Which TWO commands are used on NX-OS to verify vPC status and consistency? (Choose two.)
190In a spine-leaf architecture using eBGP, which of the following is the recommended BGP configuration for the spine switches?
191Which VPC component is used to send Layer 2 control plane traffic between peer switches?
192In VXLAN, which method of handling BUM traffic replicates packets to remote VTEPs only when there is a known receiver behind that VTEP?
193An engineer is configuring a VXLAN EVPN fabric. Which address family must be enabled under BGP to exchange MAC/VTEP reachability information?
194In ACI, which construct defines the set of endpoints that can communicate based on contracts?
195Which NX-OS command displays the VPC status, including peer-link and consistency parameters?
196In a VXLAN EVPN fabric with MP-BGP, which route type is used to advertise MAC addresses and associated VNI?
197Which of the following is a requirement for VPC peer keepalive to function correctly?
198In ACI, when integrating with VMware vSphere, which component is used to automatically push port group configurations to virtual switches?
199Which MST configuration parameter must match across all switches in the same MST region?
200In VXLAN, what is the role of the VNI in the overlay network?
201Which command is used to verify the OSPF neighbor state in NX-OS?
202In ACI, what is the purpose of a contract?
203Which VXLAN EVPN route type is used for discovering VTEPs and building the BUM forwarding tree?
204What does the oversubscription ratio in a spine-leaf fabric represent?
205Which TWO statements are true about VPC consistency checks? (Choose two.)
206Which THREE are valid methods for handling BUM traffic in VXLAN? (Choose three.)
207Which TWO are benefits of using a spine-leaf architecture? (Choose two.)
208A data center spine-leaf architecture is designed to ensure low latency and high bandwidth. Which of the following best describes the role of the leaf switches in this topology?
209A network engineer is planning to implement VPC in a Cisco Nexus data center. Which two statements about VPC components are true? (Choose two.)
210Which three components are part of the VXLAN overlay architecture? (Choose three.)
211A data center architect is designing a spine-leaf fabric with OSPF as the underlay routing protocol. Which two statements about OSPF in this design are correct? (Choose two.)
212In an ACI fabric, a tenant is configured with multiple bridge domains (BDs) and EPGs. Which three statements correctly describe the ACI model? (Choose three.)
213Which two commands are used to verify Spanning Tree Protocol (STP) status on a Cisco Nexus switch? (Choose two.)
Deep-dive questions
The most-searched questions in this domain — detailed explanations, worked examples, full answer breakdowns.
The Network domain covers the key concepts tested in this area of the 350-601 exam blueprint published by Cisco. Courseiva provides free domain-focused practice, mock exams, missed-question review, and readiness tracking across all 350-601 domains — no account required.
The Courseiva 350-601 question bank contains 213 questions in the Network domain, covering the 25% of the exam attributed to this domain in the official Cisco blueprint. Click any question to see the full explanation and answer breakdown.
Start with a 10-question focused session to identify your baseline accuracy in this domain. Read every explanation — even for questions you answer correctly — to understand the reasoning. Once you score consistently above 80%, move to a 20–30 question session to confirm depth before moving to the next domain.
Yes — the session launcher on this page draws questions exclusively from the Network domain. Choose 10, 20, 30, or 50 questions for a focused session, or click individual questions to review them one by one.
Save your results, see per-domain analytics, and get readiness scores — free, for every certification.
Sign Up FreeFree forever · Every certification included