350-601 Practice Test 10 — 10 Questions

Question 1

An engineer configures an ISL between two MDS switches using E_ports. To utilize all available bandwidth, the engineer wants to bundle four physical links into a single logical link. Which technology should be used?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

Fibre Channel PortChannel. Fibre Channel PortChannel (also called SAN port channel) bundles multiple physical ISLs between E_ports into one logical link, providing increased aggregate bandwidth, load balancing, and link redundancy. It is the standard Cisco MDS mechanism for combining parallel ISLs while preserving in-order frame delivery over Fibre Channel.

Answer

NPV mode

Answer

FCoE trunking

Answer

EISL trunking

Question 2

An engineer needs to extend a Layer 2 VLAN across a VXLAN EVPN fabric. Which construct maps the VLAN to the overlay network?

Accepted Answer

VNI. In a VXLAN EVPN fabric, the VNI (VXLAN Network Identifier) is the construct that maps a Layer 2 VLAN to the overlay network. The VNI uniquely identifies a Layer 2 segment across the underlay, allowing VLAN traffic to be encapsulated and transported over the IP fabric. This mapping is configured on the VTEP (VXLAN Tunnel Endpoint) using commands like 'vlan 100' mapped to 'vn-segment 10100' under the VLAN configuration.

Answer

VLAN ID

Answer

VTEP IP

Answer

VPC

Question 3

An engineer is configuring zoning on a Cisco MDS switch. The requirement is to ensure that only the storage array ports with specific WWPNs can access the host initiators. Which zoning approach should be used to enforce this policy regardless of physical port changes?

Accepted Answer

Hard zoning by WWPN. Hard zoning by WWPN enforces access control at the hardware/ASIC level in the MDS switch, so only the specific WWPNs listed in the zone can communicate — this is enforced regardless of which physical port the device is plugged into. Because WWPNs are burned into the HBA and storage array ports, the policy follows the device even if it is moved to a different port.

Answer

Soft zoning by WWPN

Answer

Soft zoning by port ID

Answer

Hard zoning by domain/port

Question 4

A company is deploying a new Cisco UCS Mini with a single Fabric Interconnect 6324. They need to connect to an existing Fibre Channel SAN. Which action is required to enable Fibre Channel connectivity?

Accepted Answer

Configure the uplink Ethernet ports as unified ports to support Fibre Channel.. The Cisco UCS 6324 Fabric Interconnect has built-in unified ports that can be configured as 2/4/8-Gbps Fibre Channel uplinks. To connect to an existing Fibre Channel SAN, you configure these unified ports as FC uplinks (option D); no external MDS switch is required. Adding an MDS is unnecessary and not a required action.

Answer

Enable NPV mode on the Fabric Interconnect to connect to the SAN.

Answer

Install a Fibre Channel module in the Fabric Interconnect.

Answer

Add a Cisco MDS 9148S Fibre Channel switch and connect it to the Fabric Interconnect via FC uplinks.

Question 5

A storage administrator is troubleshooting FCoE performance issues between a Cisco UCS FI and a storage array. The fabric is configured with FIP snooping and DCB. The administrator checks the FCoE interface counters and sees many dropped frames due to 'no buffer space'. What is the most likely root cause?

Accepted Answer

Priority flow control settings are mismatched between the upstream switch and the storage array. The 'no buffer space' drops on FCoE interfaces indicate that the receive buffers are being exhausted, which is a classic symptom of Priority Flow Control (PFC) being misconfigured or mismatched between the upstream switch and the storage array. PFC (IEEE 802.1Qbb) is essential for lossless FCoE transport; if one side sends pause frames that the other does not honor, or if the PFC priorities are not aligned, buffers overflow and frames are dropped. This directly explains the observed counter behavior.

Answer

Jumbo frames are disabled on the switch ports

Answer

The FCoE VLAN is not trunked to the storage array

Answer

FIP snooping is not enabled on the FCoE VLAN

Question 6

A network engineer is implementing automated configuration management using Cisco NSO (Network Services Orchestrator). The team wants to ensure that any configuration changes made directly on the devices (out-of-band) are detected and reconciled. Which NSO feature should be used?

Accepted Answer

Fast-map synchronization. Fast-map synchronization is the correct NSO feature because it is specifically designed to detect and reconcile configuration changes made directly on managed devices (out-of-band changes). It compares the device's running configuration against NSO's CDB and generates the necessary NETCONF or CLI operations to bring the device back into sync with NSO's desired state, ensuring consistency without manual intervention.

Answer

Configuration Database (CDB) snapshots

Answer

Service model templates

Answer

Rollback and recovery mechanism

Question 7

An engineer is designing an automation solution for a large data center with multiple Cisco UCS Manager domains. Which approach best ensures idempotent configuration operations?

Accepted Answer

Using a declarative automation tool like Ansible with idempotent modules. Ansible's declarative modules for Cisco UCS Manager (e.g., `ucs_*` modules) are designed to be idempotent: they compare the current state of the configuration against the desired state defined in the playbook and only apply changes when necessary. This ensures that running the same playbook multiple times yields the same result without unintended side effects, which is critical for large-scale automation across multiple UCS domains.

Answer

Writing imperative Python scripts that execute CLI commands

Answer

Directly calling UCS Manager XML API using POST requests

Answer

Using SNMP to set configuration parameters

Question 8

Refer to the exhibit. After applying this configuration, the engineer activates the zoneset with 'zoneset activate name ZONESET1 vsan 10'. The host with pwwn 10:00:00:00:c9:aa:bb:01 can communicate with the target with pwwn 10:00:00:00:c9:aa:bb:02. However, the host reports that it cannot see a third target with pwwn 10:00:00:00:c9:aa:bb:03. What is the most likely reason?

Accepted Answer

The third target is not a member of ZONE1.. The host can communicate with the target in ZONE1 (pwwn 10:00:00:00:c9:aa:bb:02) but not with the third target (pwwn 10:00:00:00:c9:aa:bb:03). This indicates that the zoneset activation was successful and the host is in the correct VSAN. The most likely reason is that the third target is not a member of ZONE1; in Fibre Channel zoning, only members of the same zone can communicate, and a device not in the zone will be invisible to other zone members.

Answer

The third target is in a different VSAN.

Answer

The zone name is case-sensitive and does not match.

Answer

The zoneset was not activated successfully.

Question 9

An engineer receives an error 'XML namespace mismatch' when using NETCONF to configure a Nexus switch. The YANG model used is from the Cisco NX-OS openconfig model. What is the most likely cause?

Accepted Answer

The namespace in the XML payload does not match the YANG model. The 'XML namespace mismatch' error occurs when the namespace URI declared in the XML payload does not match the namespace defined in the YANG module. NETCONF uses the namespace to identify the correct YANG model for parsing the configuration data. If the namespace in the XML does not exactly match the one in the Cisco NX-OS openconfig YANG model, the switch rejects the operation with this specific error.

Answer

The switch is running in VM mode

Answer

The YANG model is not supported on this switch version

Answer

The NETCONF session is not authenticated

Question 10

During an iSCSI deployment, an administrator configures CHAP authentication between the initiator and target. Which statement about CHAP in iSCSI is correct?

Accepted Answer

In one-way CHAP, only the initiator is authenticated to the target.. In one-way CHAP, the target challenges the initiator, and only the initiator proves its identity to the target. This is the default and most common iSCSI CHAP mode, used to prevent unauthorized initiators from accessing LUNs. Mutual (two-way) CHAP is required if the initiator must also authenticate the target.

Answer

CHAP authentication is performed after the iSCSI login phase is complete.

Answer

The CHAP secret is sent in cleartext over the network.

Answer

CHAP uses a one-way hash to authenticate the target to the initiator only.