350-601 Practice Test 14 — 15 Questions

Question 1

A Cisco Intersight managed UCS domain has a policy that requires all firmware updates to be applied within 30 days of release. An engineer needs to check compliance for a specific server. Which Intersight feature should be used?

Accepted Answer

Compliance and drift management. Compliance and drift management in Intersight continuously monitors the firmware versions of managed UCS servers against the defined baseline policies. When a policy requires updates within 30 days of release, this feature automatically detects servers that are out of compliance and reports the drift, allowing the engineer to verify compliance for a specific server without manual checks.

Answer

Software repository

Answer

Actions tab with pending updates

Answer

Firmware update policy

Question 2

A UCS administrator needs to update the firmware on a UCS 5108 chassis that contains eight B-Series blades. The firmware update must be performed with minimal downtime. Which update method should be used?

Accepted Answer

User Acknowledged update with a maintenance policy that reboots blades sequentially. Option C is correct because the User Acknowledged update method, combined with a maintenance policy that reboots blades sequentially, allows the firmware update to proceed blade by blade with minimal downtime. This approach ensures that only one blade is offline at a time, while the remaining blades continue to serve traffic, making it ideal for a chassis with eight B-Series blades where service continuity is critical.

Answer

Fast-Impact update

Answer

Non-Impactful update with a forced reboot

Answer

System-Impactful update with a single reboot

Question 3

Which statement describes how firmware management works for UCS B-Series blade servers?

Accepted Answer

Firmware is managed through host firmware packages in service profiles. In Cisco UCS Manager, firmware for B-Series blade servers is managed through host firmware packages that are included in service profiles. These packages define the exact firmware versions for components like the BIOS, adapter, storage controller, and CIMC, and are automatically applied to the blade when the service profile is associated. This ensures consistent firmware levels across blades without manual intervention on each server.

Answer

Firmware must be manually upgraded on each blade individually

Answer

Firmware is automatically updated via Cisco TAC

Answer

Firmware is stored on the fabric interconnect and loaded directly to the server

Question 4

An organization deploys compute resources using both UCS B-Series blades and C-Series rack servers. The network uses Cisco ACI. Which approach ensures consistent connectivity policies across both compute types?

Accepted Answer

Use a single EPG with appropriate encapsulation for both. Option A is correct because Cisco ACI allows a single Endpoint Group (EPG) to span both UCS B-Series blades and C-Series rack servers by using the appropriate encapsulation (e.g., VLAN or VXLAN) and associating the EPG with both a physical domain (for blades connected via Fabric Interconnects) and a VMM domain (for rack servers managed by VMware vCenter). This ensures consistent connectivity policies, such as contracts and QoS, are applied uniformly across all compute types without requiring separate EPGs.

Answer

Create separate EPGs for blade and rack servers

Answer

It is not possible to have consistent policies between blade and rack

Answer

Use a physical domain for blades and a VMM domain for rack servers

Question 5

A UCS B-Series blade server shows high CPU latency when processing network I/O. The engineer suspects a bottleneck in the I/O subsystem. Which metric in UCS Manager should be examined first?

Accepted Answer

Fabric port error counts. Fabric port error counts directly reflect physical-layer issues (e.g., CRC errors, alignment errors, link flaps) that cause retransmissions and backpressure, leading to high CPU latency on the blade server. In UCS Manager, these counters are the first place to check when suspecting an I/O subsystem bottleneck because they pinpoint problems in the fabric interconnect or cabling before examining higher-layer metrics.

Answer

vNIC utilization percentage

Answer

Memory usage statistics

Answer

Power consumption per server

Question 6

A UCS administrator is configuring a service profile for a VMware ESXi host. Which TWO of the following configuration items must be included to enable Fibre Channel SAN boot?

Accepted Answer

WWPN pool for vHBA. For Fibre Channel SAN boot on a UCS-managed VMware ESXi host, the service profile must include a WWPN pool for the vHBA (Option B) to assign unique World Wide Port Names, and a SAN boot policy specifying the target WWPN (Option E) to define the storage target from which the host boots. These two elements are essential because the vHBA requires a WWPN for fabric login, and the boot policy directs the host to the correct LUN on the SAN.

Answer

QoS policy for vHBA

Answer

vNIC with MAC pool

Answer

FCoE VLAN configuration

Question 7

Which TWO troubleshooting steps should be taken when a UCS blade server fails to discover during the initial discovery process?

Accepted Answer

Verify the physical cabling between the IOM and fabric interconnect. Option A is correct because the initial discovery process relies on the IOM (Fabric Interconnect) establishing a link to the blade server through the chassis midplane. If the physical cabling between the IOM and the fabric interconnect is faulty, loose, or using incorrect transceivers, the discovery will fail. Verifying this cabling is a fundamental first step in troubleshooting discovery failures.

Answer

Immediately replace the blade server

Answer

Power cycle the chassis

Answer

Reset the fabric interconnect to factory defaults

Question 8

An engineer is configuring a Cisco UCS Manager deployment. The goal is to enforce the organization's security policy by limiting administrative access based on job roles. Which two actions should the engineer take? (Select two.)

Accepted Answer

Implement role-based access control using LDAP groups mapped to roles.. C is correct because integrating LDAP groups with RBAC allows the organization to enforce security policies by mapping directory groups to UCS roles, centralizing authentication and authorization. This approach ensures that administrative access is limited based on job roles without managing local users, aligning with the goal of role-based access control.

Answer

Disable the default password policy for all local users.

Answer

Use the default maintenance policy for all service profiles.

Answer

Create a local user with the admin role and assign it to all service profiles.

Question 9

A network engineer is troubleshooting an OSPF adjacency issue between two Nexus switches. The neighbors are stuck in the EXSTART state. What is the most likely cause?

Accepted Answer

MTU mismatch. An MTU mismatch prevents the exchange of Database Description packets, causing neighbors to remain in EXSTART. Other options cause different adjacency states.

Answer

Hold timer mismatch

Answer

Incorrect area ID

Answer

Duplicate router ID

Question 10

A network engineer is verifying VPC configuration on a pair of Nexus switches. Which two commands should be used to check VPC status and consistency? (Choose two.)

Accepted Answer

show vpc consistency-parameters. Option D (show vpc) is correct because it displays the overall VPC status, including the local and peer VPC system MAC, role, and the operational state of each VPC member port. Option B (show vpc consistency-parameters) is correct because it verifies that critical parameters (e.g., STP mode, VLAN interfaces, MTU) are consistent between the two VPC peers, which is essential for VPC to function correctly and avoid traffic black-holing.

Answer

show vpc role

Answer

show vpc peer-keepalive

Answer

show vpc statistics

Question 11

A network engineer is troubleshooting VXLAN connectivity between two VTEPs. The source VTEP is configured with `nve1` and member VNI 10000. The `show nve peers` command shows the remote VTEP IP but the status is 'Init'. What is a likely cause?

Accepted Answer

The multicast group is not reachable.. The 'Init' status in the output of 'show nve peers' indicates that the VXLAN tunnel endpoint (VTEP) has learned the remote VTEP IP address (likely via BGP EVPN or static configuration) but is unable to complete the tunnel establishment. In VXLAN multicast mode, the underlay multicast group is used for BUM traffic and for VTEP discovery. If the multicast group is not reachable (e.g., due to missing PIM configuration, incorrect RP, or firewall filtering), the source VTEP cannot receive the multicast join or data from the remote VTEP, leaving the peer stuck in 'Init' state.

Answer

The remote VTEP is not configured with the same VNI.

Answer

The MTU is too low.

Answer

The VRF is mismatched between the VTEPs.

Question 12

A network engineer is configuring a Fabric Extender (FEX) to connect to a parent switch. Which best practice should be followed for FEX host interfaces?

Accepted Answer

Enable Virtual Port Channel (vPC) on the parent switch.. Enabling Virtual Port Channel (vPC) on the parent switch is a best practice for FEX host interfaces because it allows the FEX to be dual-homed to two separate parent switches, providing link-level redundancy and active-active forwarding. Without vPC, the FEX would rely on a single parent switch, creating a single point of failure and potentially causing traffic black-holing during a parent switch failure.

Answer

Configure all host interfaces as trunk ports.

Answer

Use the same FEX ID for redundancy.

Answer

Use LACP for the FEX uplinks.

Answer

Disable spanning-tree on FEX host interfaces.

Question 13

An administrator is deploying a new application in a Cisco ACI fabric. The application requires multicast traffic between end hosts. Which configuration is necessary for multicast in ACI?

Accepted Answer

Create a multicast policy in the bridge domain.. In Cisco ACI, multicast forwarding is enabled at the bridge domain level using a multicast policy. This policy configures the necessary IGMP snooping and multicast group membership for the fabric, allowing end hosts to receive multicast traffic without requiring PIM on the leaf switches. Option C is correct because the bridge domain multicast policy is the required configuration for multicast in ACI.

Answer

Enable PIM on the leaf switches.

Answer

Configure a multicast group in the EPG.

Answer

Use IGMP snooping only.

Question 14

A data center uses VPC between two Nexus switches. Which statement is true about the VPC peer-link?

Accepted Answer

It carries both data and control traffic.. The VPC peer-link is a critical component in a vPC domain, carrying both data traffic (e.g., traffic from orphan ports or traffic that must traverse the peer-link for forwarding) and control traffic (e.g., vPC keepalive messages and Cisco Fabric Services (CFS) synchronization). This dual role ensures that the two Nexus switches operate as a single logical entity for the downstream devices, providing loop-free Layer 2 multipathing.

Answer

It must be a single link.

Answer

It carries only control traffic.

Answer

It is used only for orphan ports.

Question 15

A network engineer is configuring a VPC on a pair of Nexus 9000 switches. Which command is required to synchronize the configuration between the VPC peers?

Accepted Answer

peer-keepalive destination .. Option B is correct because the `peer-keepalive destination ` command configures a Layer 3 keepalive link between VPC peers, which is essential for monitoring peer liveness and synchronizing configuration states. Without this keepalive, the VPC peers cannot detect failures or maintain consistent forwarding, making it a mandatory component for VPC configuration on Nexus 9000 switches.

Answer

auto-recovery.

Answer

vpc domain <id>.

Answer

role preempt.