350-601 Practice Test 10 — 10 Questions

Question 1

An engineer is writing a Python script to automate ACI fabric discovery using the APIC SDK. The script needs to wait until the fabric formation is complete before proceeding. Which approach is most reliable?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

Periodically poll the fabric membership state via REST API. The most reliable method to wait for ACI fabric formation to complete is to periodically poll the fabric membership state via the REST API. The APIC SDK provides access to the fabric membership endpoint (e.g., /api/node/class/fabricNode.json), which returns the current state of each node. By polling this endpoint until all expected nodes report an 'active' or 'in-pod' status, the script can accurately determine when the fabric is fully formed, avoiding race conditions or incomplete discovery.

Answer

Implement asynchronous callbacks using the SDK

Answer

Use the configExportP object to monitor discovery

Answer

Use time.sleep() for a fixed duration

Question 2

Which Fibre Channel addressing component uniquely identifies a port on a storage array and is used for zoning and target identification?

Accepted Answer

WWPN. A WWPN (World Wide Port Name) is a globally unique 64-bit identifier assigned to each Fibre Channel port. It is used for zoning and target identification.

Answer

FCID

Answer

WWN

Answer

WWNN

Question 3

A startup company is deploying a new web application on UCS B-Series blades. They want to use PXE boot for rapid provisioning. The network team has configured a DHCP server and a PXE server on the same VLAN as the UCS service profiles. The system administrator creates a service profile for a blade and sets the boot policy to 'PXE' as the first boot device, and local disk as second. However, when the blade powers on, it boots from the local disk instead of PXE. The PXE server logs show no request from the blade's MAC address. The DHCP server logs show no activity. The fabric interconnect is configured with a default VLAN. What is the most likely cause?

Accepted Answer

The vNIC on the service profile is not configured with the correct native VLAN. PXE boot requires the vNIC to have an untagged native VLAN that matches the PXE/DHCP subnet. If the native VLAN on the vNIC is different, DHCP requests are not forwarded. Option B wrong because PXE boot order is usually correct. Option C wrong because it would cause different symptoms. Option D wrong because service profile association is fine.

Answer

The boot policy order lists local disk before PXE

Answer

The service profile is not properly associated with the blade

Answer

The fabric interconnect uplinks are not in trunk mode

Question 4

An engineer observes that ARP packets are being dropped. Based on the exhibit, what is the drop rate percentage for ARP packets?

Accepted Answer

50%. The exhibit shows that out of 1000 total ARP packets, 500 were dropped. The drop rate percentage is calculated as (dropped packets / total packets) * 100, which is (500/1000)*100 = 50%. Therefore, option C is correct.

Answer

75%

Answer

25%

Answer

100%

Question 5

A data center engineer is troubleshooting connectivity issues between two EPGs in the same tenant on a Cisco ACI fabric. The first EPG 'web_epg' is in VLAN 100 and the second EPG 'db_epg' is in VLAN 200. The contract 'web_to_db' allows TCP port 3306 from web_epg to db_epg. The EPGs are in the same VRF. The engineer has verified that the physical connectivity is correct and the endpoints are learning their IP addresses. However, traffic from web_epg to db_epg is not reaching the destination. The engineer checks the contract and sees that the subject 'mysql_access' has filter 'mysql' with direction 'both'. The provider is db_epg and consumer is web_epg. The engineer also notices that the default action in the contract is 'deny'. What is the most likely cause of the issue?

Accepted Answer

The contract direction is reversed: the provider should be the destination of the traffic. Since web_epg initiates to db_epg, web_epg should be the provider.. In Cisco ACI, the provider EPG is the one that offers a service (the destination of the traffic), and the consumer EPG is the one that initiates the connection. Since web_epg initiates TCP traffic to db_epg, db_epg should be the provider and web_epg the consumer. The contract is reversed, so the default deny action blocks the traffic because the consumer (web_epg) is not allowed to initiate toward the provider (db_epg) under the reversed roles.

Answer

The VRF is not correctly associated with the EPGs.

Answer

A Layer 3 Outside (L3Out) is required for communication between EPGs in the same VRF.

Answer

The filter 'mysql' does not match TCP port 3306.

Question 6

In an ACI fabric, a tenant is configured with multiple bridge domains (BDs) and EPGs. Which three statements correctly describe the ACI model? (Choose three.)

Accepted Answer

Contracts are applied between EPGs to allow communication.. In ACI, contracts are the mechanism used to enable communication between EPGs. By default, all traffic is denied, and a contract must be explicitly applied to allow traffic flow between EPGs, enforcing a zero-trust model.

Answer

EPGs can communicate with each other without any contract.

Answer

L3Out is used to connect the ACI fabric to external Layer 2 networks.

Question 7

Which NX-OS command displays the VPC status, including peer-link and consistency parameters?

Accepted Answer

show vpc. The 'show vpc' command (without any keyword) displays the overall Virtual Port Channel (vPC) status, including peer-link status, consistency parameters, and per-VLAN/vPC operational state. This is the most comprehensive single command for verifying vPC health and configuration consistency between peer switches.

Answer

show vpc brief

Answer

show vpc peer-link

Answer

show vpc consistency

Question 8

A network engineer is configuring a Cisco UCS service profile for a blade server that must boot from a LUN on a SAN. Which boot policy type should be selected in the service profile?

Accepted Answer

SAN Boot Policy. Boot from SAN requires a SAN boot policy that specifies the WWPN of the target storage and the LUN to boot from, typically using a vHBA.

Answer

iSCSI Boot Policy

Answer

LAN Boot Policy

Answer

Local Disk Boot Policy

Question 9

An engineer configures vPC on a pair of Nexus switches. The vPC peer-keepalive link fails, but the vPC peer-link remains operational. What is the expected behavior?

Accepted Answer

The vPC domain remains operational with both switches forwarding traffic.. When the vPC peer-keepalive link fails but the peer-link remains up, the vPC domain continues to operate normally because the peer-link is used for control-plane synchronization and data-plane forwarding. The peer-keepalive is only a secondary heartbeat to detect a dual-active scenario when the peer-link is down. Since the peer-link is still functional, both switches can exchange vPC consistency parameters and forward traffic without risk of loops.

Answer

Both switches suspend all vPC member ports to avoid loops.

Answer

The primary switch reloads to prevent a split-brain scenario.

Answer

The secondary switch suspends its vPC member ports.

Question 10

Which VPC component is used to send Layer 2 control plane traffic between peer switches?

Accepted Answer

VPC peer-link. The VPC peer-link is the special port channel that carries Layer 2 control plane traffic (such as BPDUs, HSRP hellos, and IGMP queries) between the two VPC peer switches. It ensures that both peers have a consistent view of the Layer 2 topology and can synchronize state for protocols like STP and vPC. Without the peer-link, control plane traffic would not be exchanged, breaking the VPC domain's ability to operate as a single logical switch.

Answer

VPC consistency check

Answer

VPC peer keepalive

Answer

VPC member port