350-601 Practice Test 12 — 15 Questions

Question 1

Which feature allows a single Fibre Channel port to log in with multiple N-port IDs, enabling a host to connect to multiple targets through one port?

Accepted Answer

NPIV. NPIV (N_Port ID Virtualization) allows a single Fibre Channel N_Port to register multiple N_Port IDs (FCIDs) with the fabric. This enables a host with one physical port to appear as multiple virtual initiators, each connecting to different targets, which is essential for virtualized environments like VMware ESXi with multiple VMs requiring separate FC connections.

Answer

FCoE

Answer

VSAN

Answer

NPV

Question 2

Which feature on Nexus switches prevents ARP spoofing attacks by validating ARP packets?

Accepted Answer

Dynamic ARP Inspection. Dynamic ARP Inspection (DAI) intercepts ARP packets and validates them against the DHCP snooping binding database.

Answer

DHCP Snooping

Answer

Port Security

Answer

IP Source Guard

Question 3

A data center uses self-encrypting drives (SEDs) in UCS servers. Which type of protection does SED provide?

Accepted Answer

At-rest encryption on the drive. SEDs provide at-rest encryption, protecting data when the drive is powered off or removed.

Answer

In-flight encryption for Fibre Channel

Answer

Encryption of SAN traffic

Answer

Network-level encryption

Question 4

What does the oversubscription ratio in a spine-leaf fabric represent?

Accepted Answer

Ratio of server bandwidth to leaf uplink bandwidth. In a spine-leaf fabric, the oversubscription ratio specifically compares the total bandwidth available from the servers (leaf southbound ports) to the total uplink bandwidth from the leaf to the spine (leaf northbound ports). This ratio determines how much potential congestion exists when multiple servers contend for uplink capacity, directly impacting performance in a non-blocking or oversubscribed design.

Answer

Ratio of spine to leaf bandwidth

Answer

Ratio of total fabric bandwidth to total server bandwidth

Answer

Number of spine switches per leaf

Question 5

In a VXLAN overlay network, what is the primary purpose of ingress replication for BUM traffic?

Accepted Answer

To forward broadcast, unknown unicast, and multicast traffic without requiring multicast in the underlay. Ingress replication is a technique used in VXLAN overlay networks to handle BUM (Broadcast, Unknown unicast, Multicast) traffic without requiring a multicast-enabled underlay. The ingress VTEP (VXLAN Tunnel End Point) replicates the BUM packet and sends a separate unicast copy to each remote VTEP in the same VXLAN Network Identifier (VNI) segment, ensuring all relevant endpoints receive the traffic while relying solely on unicast routing in the underlay.

Answer

To reduce the need for ARP suppression

Answer

To enable multipathing of BUM traffic across multiple paths

Answer

To assign VXLAN Network Identifiers (VNIs) to tenant traffic

Question 6

Which VXLAN component is responsible for encapsulating and decapsulating Ethernet frames into UDP packets for transport over the IP network?

Accepted Answer

VTEP. The VXLAN Tunnel Endpoint (VTEP) is the component responsible for performing encapsulation and decapsulation of Ethernet frames into UDP packets for transport over the IP network. It sits at the edge of the VXLAN overlay and maps tenant traffic to VXLAN segments by adding a VXLAN header (including the VNI) and an outer UDP/IP header. This process allows Layer 2 frames to traverse a Layer 3 underlay network.

Answer

VXLAN Gateway

Answer

VXLAN Tunnel

Answer

VNI

Question 7

A storage administrator needs to ensure that a Fibre Channel zone configuration is operationally effective without disrupting the current active zone set. Which approach should be used?

Accepted Answer

Create the new zone configuration in the defined configuration, then activate it as a new zone set.. In Cisco MDS Fibre Channel SANs, zone configurations are created in the defined configuration and then activated as a new zone set. This approach ensures that the current active zone set remains operational and unaffected during the configuration process, preventing any disruption to existing traffic. Only when the new zone set is explicitly activated does it replace the active set, allowing for a controlled cutover.

Answer

Delete the active zone set and create a new one.

Answer

Edit the active zone set directly.

Answer

Use the 'commit' command to update the zone set.

Question 8

Order the steps for troubleshooting a Fibre Channel link that is not coming up.

Accepted Answer

Check physical connections and optics, then verify interface status, then check VSAN and zoning, then perform FLOGI verification, then review logs. Troubleshooting FC link starts with physical, then interface, VSAN/zoning, FLOGI, and logs.

Answer

Review logs first, then check physical connections, then verify interface status, then check VSAN and zoning, then perform FLOGI verification

Answer

Check VSAN and zoning first, then verify interface status, then check physical connections, then perform FLOGI verification, then review logs

Answer

Perform FLOGI verification first, then check physical connections, then verify interface status, then check VSAN and zoning, then review logs

Question 9

A network engineer needs to create a consistent QoS policy for all servers in a UCS service profile template. Which policy must be attached to the template to ensure uniform traffic management?

Accepted Answer

QoS Policy. A QoS Policy is the correct attachment because it defines traffic classification, marking, and queuing behavior at the interface level within a UCS service profile template. By applying a QoS Policy, the engineer ensures uniform traffic management across all servers by controlling bandwidth allocation, priority, and drop preferences consistently. This policy directly maps to the system class definitions in UCS Manager, enabling per-interface QoS settings that are inherited by all service profiles using the template.

Answer

Network Control Policy

Answer

LAN Connectivity Policy

Answer

Flow Control Policy

Question 10

A HyperFlex cluster uses RF2 and consists of 5 nodes. One node fails. Data is re-replicated to the remaining nodes. After re-replication, what is the largest number of additional node failures that can occur without data loss?

Accepted Answer

1. With RF2 (Replication Factor 2), each block of data is stored on exactly two nodes. When one of the 5 nodes fails, the cluster re-replicates the affected data so that every block again has two copies on the remaining 4 nodes. After re-replication completes, every block has 2 replicas, so losing one more node still leaves one copy of each block intact. Losing two more nodes simultaneously could destroy both replicas of some blocks, causing data loss.

Answer

0

Answer

2

Answer

3

Question 11

A network engineer is troubleshooting CoPP drops on a Cisco Nexus 9000 switch. The 'show control-plane' output indicates that packets are being dropped due to 'CoPP' on the 'default' control-plane class. Which action is most likely to resolve the issue without affecting routing protocol stability?

Accepted Answer

Increase the policer rate for the 'default' class in the CoPP policy.. The 'default' class in a CoPP policy catches all control-plane traffic not explicitly matched by higher-priority classes. Drops in this class indicate that the aggregate policer rate for unmatched traffic is too low. Increasing the policer rate for the 'default' class allows more legitimate control-plane packets (e.g., ARP, BFD, or management traffic) to pass without impacting the dedicated policers for critical protocols like OSPF or BGP, thus preserving routing stability.

Answer

Disable CoPP globally to allow all control-plane traffic.

Answer

Modify the class-map to reclassify the dropped packets to a higher priority class.

Answer

Increase the ingress buffer size on the control-plane interface.

Question 12

A data center network uses Cisco Nexus switches with VXLAN EVPN. Which two components are essential for VXLAN EVPN operation? (Choose two.)

Accepted Answer

VXLAN VTEPs on leaf switches.. VXLAN VTEPs (VXLAN Tunnel Endpoints) on leaf switches are essential because they perform the encapsulation and decapsulation of VXLAN frames, enabling Layer 2 overlay networks over a Layer 3 underlay. Without VTEPs, there is no mechanism to create the VXLAN tunnels that carry traffic between endpoints across the IP fabric.

Answer

OSPF as underlay routing protocol.

Answer

VPC for host-facing links.

Answer

PIM-SM for multicast replication.

Question 13

Which VXLAN EVPN route type is used for discovering VTEPs and building the BUM forwarding tree?

Accepted Answer

Type 3. B is correct because VXLAN EVPN Route Type 3 (Inclusive Multicast Ethernet Tag Route) is specifically used to advertise the VXLAN tunnel endpoint (VTEP) IP addresses and the VNI (VXLAN Network Identifier) for BUM (Broadcast, Unknown unicast, Multicast) traffic. This route type enables the discovery of remote VTEPs and builds the multicast forwarding tree (either via ingress replication or PIM-based multicast) necessary for BUM traffic delivery in a VXLAN EVPN fabric.

Answer

Type 1

Answer

Type 2

Answer

Type 5

Question 14

Which two statements about the Cisco NX-API REST interface are true? (Choose two.)

Accepted Answer

It can be used to send CLI commands.. Option B is correct because the Cisco NX-API REST interface allows you to send CLI commands to the switch by including them in the request body, typically using the `ins_api` or `cli` input, so existing CLI knowledge can be reused programmatically. Option D is correct because NX-API REST supports both XML and JSON as message formats for requests and responses, selectable via the `Content-Type` and `Accept` headers or the `output_format` parameter. Option A is incorrect because NX-API REST supports multiple HTTP methods, including GET, POST, PUT, and DELETE, not only GET. Option C is incorrect because YANG models are not required; NX-API REST can accept CLI-style commands and does not mandate model-driven operations. Option E is incorrect because NX-API REST uses HTTP or HTTPS (typically TCP 80/443) for transport, not SSH.

Answer

It only supports GET operations.

Answer

It requires the use of YANG models.

Answer

It uses SSH for transport.

Question 15

In a Cisco UCS Central environment, which feature enables global consistency of boot order and firmware policies across multiple UCS domains?

Accepted Answer

Global Service Profile Templates. Global Service Profile Templates in Cisco UCS Central allow administrators to define service profiles once and deploy them across multiple UCS domains, ensuring consistent boot order, firmware policies, and other configuration settings globally. This is the feature designed for cross-domain consistency. Cisco IMC Supervisor, Fabric Interconnect Interconnectivity, and UCS Manager Backup and Restore do not provide global policy consistency across domains.

Answer

Cisco IMC Supervisor

Answer

Fabric Interconnect Interconnectivity

Answer

UCS Manager Backup and Restore