350-601 Practice Test 13 — 15 Questions

Question 1

A UCS administrator needs to deploy 20 identical servers with the same firmware, BIOS, and boot order. Which approach is the most efficient?

Accepted Answer

Create a service profile template and then generate service profiles from it.. Creating a service profile template and then generating service profiles from it is the most efficient approach because it allows you to define the firmware, BIOS, and boot order once in a reusable template, then automatically create multiple service profiles with unique identities (e.g., UUID, MAC, WWN) for each of the 20 identical servers. This leverages Cisco UCS Manager's built-in template-to-instance workflow, ensuring consistency and reducing manual effort.

Answer

Use a UUID suffix pool to auto-generate identities.

Answer

Use a Cisco UCS Central 'Gold' template to deploy the servers.

Answer

Create a service profile for each server manually.

Question 2

Which three actions can be taken when a port security violation occurs? (Choose three.)

Accepted Answer

Shutdown. When a port security violation occurs, the switch can be configured to take one of three actions: shutdown, restrict, or protect. The shutdown action (A) immediately disables the port and places it in an errdisable state, which is the default behavior. This is correct because it provides the most secure response by completely blocking traffic from the violating MAC address.

Answer

Errdisable recovery

Answer

Log

Question 3

What is the purpose of NPIV (N_Port ID Virtualization) in a Fibre Channel SAN?

Accepted Answer

Allow a single physical port to register multiple N_port IDs.. NPIV allows a single physical Fibre Channel N_Port to register multiple unique N_Port IDs (FCIDs) with the fabric. This is essential for virtualizing Fibre Channel connectivity, enabling multiple virtual machines or logical partitions to share one physical HBA port while each appearing as a distinct initiator to the SAN.

Answer

Provide encryption on Fibre Channel links.

Answer

Enable multiple paths between initiator and target.

Answer

Allow a switch to act as an NPV device.

Question 4

A Python script using the pyATS framework to parse 'show interface' output on a Nexus 9000 switch fails with a parsing error, even though the CLI command runs successfully. What is the most likely missing component?

Accepted Answer

The Genie parser for the specific NX-OS version is not installed or imported.. The pyATS framework relies on Genie parsers to convert raw CLI output into structured data. If the Genie parser for the specific NX-OS version is missing or not imported, the script cannot parse the 'show interface' output, resulting in a parsing error even though the CLI command itself runs successfully. This is the most likely missing component because pyATS/Genie parsers are version-specific and must be installed for the exact platform and OS version.

Answer

The script does not include the correct authentication method.

Answer

The script uses the wrong device type (e.g., iosxe instead of nxos).

Answer

The switch is not configured with NETCONF.

Question 5

Sequence the steps to configure a VXLAN with BGP EVPN on a Cisco Nexus switch.

Accepted Answer

1. Enable overlay features (feature nv overlay, feature vni, feature bgp).
2. Configure VTEP loopback and NVE source interface.
3. Configure VLAN and VNI mapping (vn-segment).
4. Configure BGP EVPN address-family and neighbors.. VXLAN EVPN requires overlay feature, VNI mapping, VTEP loopback, BGP peering, and verification.

Answer

1. Configure VTEP loopback and NVE source interface.
2. Enable overlay features.
3. Configure VLAN and VNI mapping.
4. Configure BGP EVPN address-family and neighbors.

Answer

1. Enable overlay features.
2. Configure VLAN and VNI mapping.
3. Configure VTEP loopback and NVE source interface.
4. Configure BGP EVPN address-family and neighbors.

Answer

1. Enable overlay features.
2. Configure VTEP loopback and NVE source interface.
3. Configure BGP EVPN address-family and neighbors.
4. Configure VLAN and VNI mapping.

Question 6

A data center switch port is configured for 802.1X with MAB as fallback. A device that does not support 802.1X is connected. Which method will allow the device to authenticate?

Accepted Answer

MAC authentication bypass. When a device that does not support 802.1X is connected to a port configured for 802.1X with MAB as fallback, the switch detects that no EAPOL frames are received from the device. It then initiates MAC authentication bypass (MAB), which uses the device's MAC address as the identity for authentication against the RADIUS server. If the MAC address is allowed, the port is authorized, providing a seamless fallback authentication method for non-802.1X-capable devices.

Answer

EAP-TLS

Answer

Web authentication

Answer

Local authentication using a pre-shared key

Question 7

A network engineer wants to automate the deployment of VLANs across 50 Nexus switches in a data center. Which approach provides the most consistent and repeatable results with minimal manual effort?

Accepted Answer

Ansible playbook with nxos_vlan module. Ansible playbook with the nxos_vlan module is the correct choice because it provides idempotent, declarative automation that ensures consistent VLAN configuration across all 50 Nexus switches with minimal manual effort. Ansible handles SSH connectivity and state management natively, eliminating the need for custom scripting and reducing the risk of human error.

Answer

Python script using netmiko

Answer

Manual CLI on each switch

Answer

Bash script with SSH

Question 8

Which VXLAN component is responsible for encapsulating and decapsulating Ethernet frames into UDP packets?

Accepted Answer

VTEP. The VTEP (VXLAN Tunnel Endpoint) is the device that performs encapsulation and decapsulation of Ethernet frames into UDP packets. It is the edge component in a VXLAN network that maps tenant traffic to VXLAN segments and handles the actual tunneling by adding the VXLAN header (including VNI) and outer UDP/IP headers.

Answer

VNI

Answer

VXLAN tunnel

Answer

VXLAN gateway

Question 9

In an ACI fabric, a contract between two EPGs uses a filter that permits TCP port 443. The provider EPG is configured with a VMM domain integration. Which statement about the contract's effect is true?

Accepted Answer

Traffic from the consumer EPG to the provider EPG on TCP 443 is allowed.. In Cisco ACI, contracts define unidirectional communication from the consumer EPG to the provider EPG. The filter permitting TCP port 443 allows traffic from the consumer to the provider. The VMM domain integration does not alter this contract behavior; it only manages virtual machine connectivity. Therefore, only traffic from the consumer EPG to the provider EPG on TCP 443 is permitted.

Answer

Both directions are allowed for TCP 443.

Answer

Traffic from the provider EPG to the consumer EPG on TCP 443 is allowed.

Answer

The VMM domain overrides the contract and permits all traffic.

Question 10

Which two features are provided by Cisco IMC on UCS C-series rack servers? (Choose two.)

Accepted Answer

Virtual media mounting. Cisco IMC (Integrated Management Controller) on UCS C-series rack servers provides out-of-band management capabilities, including virtual media mounting (Option B), which allows an administrator to map a remote ISO or image as a virtual DVD/USB drive for OS installation and troubleshooting. It also provides remote KVM console access (Option D), enabling full keyboard, video, and mouse redirection to the server over the network for remote administration. Fabric Interconnect management (Option A) is handled by UCS Manager on B-series blade systems, not by IMC on C-series. Service profile creation (Option C) is a UCS Manager function for stateless computing on B-series and some C-series integrated with UCS Manager, not a native IMC feature. HyperFlex cluster management (Option E) is performed through HyperFlex Connect or UCS Manager/Intersight, not by the standalone IMC.

Answer

Fabric Interconnect management

Answer

Service profile creation

Answer

HyperFlex cluster management

Question 11

A network engineer is configuring a UCS service profile for a new blade server. The requirement is that if the blade fails, it can be replaced with any blade of the same model without reconfiguration. Which UCS feature enables this capability?

Accepted Answer

Stateless computing. Stateless computing in Cisco UCS decouples the server identity (UUID, MAC addresses, WWNN/WWPN, firmware, BIOS settings) from the physical blade by storing it in a service profile. When a blade fails, the service profile can be associated with any same-model blade, and all identity and configuration are reapplied automatically without manual reconfiguration.

Answer

VLAN configuration

Answer

RAID configuration

Answer

Firmware management policies

Question 12

An engineer is configuring micro-segmentation in an ACI fabric. Which object defines the whitelist model for communication between EPGs?

Accepted Answer

Contract. ACI contracts define a whitelist model where communication between EPGs is explicitly allowed by the contract's subject and filters.

Answer

Taboo contract

Answer

Filter

Answer

VRF

Question 13

Which API uses RESTful principles and supports both XML and JSON encoding for network configuration, as defined in RFC 8040?

Accepted Answer

RESTCONF. RESTCONF (RFC 8040) is a REST-based protocol using HTTP methods and supports XML/JSON.

Answer

OpenConfig

Answer

NETCONF

Answer

NX-API CLI

Question 14

In Cisco ACI, which component is responsible for translating EPG communication policies into concrete configuration on leaf switches?

Accepted Answer

APIC controller. The APIC controller is the centralized policy engine in Cisco ACI. It translates high-level EPG communication policies (contracts, filters, subjects) into the concrete switch configuration (e.g., OpFlex policy elements, VXLAN tunnel mappings, and hardware table entries) and pushes them to leaf switches via the OpFlex protocol. Without the APIC, leaf switches cannot autonomously interpret or apply these policies.

Answer

Leaf switch

Answer

Spine switch

Answer

VMM domain

Question 15

An organization uses UCS Central to manage multiple UCS domains. A global service profile policy is created in UCS Central to enforce a common boot policy across all domains. However, one UCS domain needs a different boot order for a specific set of blades. How should the administrator implement this deviation while maintaining centralized manageability?

Accepted Answer

Create a local boot policy in the specific UCS Manager and assign it to the service profiles that need the change.. UCS Central allows global policies, but local policies in each UCS Manager can override them for specific service profiles. The administrator should create a local boot policy in the specific UCS domain and assign it to the service profiles that require the different boot order.

Answer

Exclude the specific UCS domain from the global policy and create a separate global policy for that domain.

Answer

Delete the global boot policy and use only local policies.

Answer

Modify the global boot policy in UCS Central to include all variations.