350-601 Practice Test 14 — 15 Questions

Question 1

An engineer is troubleshooting a UCS B-Series server that fails to boot from SAN. The SAN boot LUN is correctly zoned and presented. The service profile has WWPNs configured. What is a likely cause?

Accepted Answer

Incorrect boot policy order. The SAN boot LUN is correctly zoned and presented, and the WWPNs are configured in the service profile, so the connectivity and identity are set. However, if the boot policy order is incorrect (e.g., the SAN boot target is listed after a local disk or another boot device), the server will attempt to boot from the wrong device first and fail to boot from the SAN. The boot policy defines the sequence of boot devices, and a misconfigured order is a common cause of boot failures in UCS B-Series.

Answer

Server firmware mismatch

Answer

Missing vNIC template

Answer

VLAN mismatch

Question 2

Which TWO UCS components are part of the unified fabric architecture?

Accepted Answer

Fabric Interconnect. The Fabric Interconnect (A) is correct because it is the core of Cisco UCS unified fabric, providing the single point of management and carrying both LAN and SAN traffic (FCoE) between the fabric and the servers. The I/O Module (C) is correct because it sits in the blade chassis and aggregates the blade server's adapter traffic, connecting it to the Fabric Interconnects as part of the unified fabric data path. The Storage Array (B) is not a UCS component of the unified fabric; it is external storage that connects to the fabric but is not itself part of the architecture. The Control Plane (D) is a functional concept, not a physical UCS component of the unified fabric. The Blade Server (E) is a compute node managed by UCS but is not itself a fabric component; it connects through the IOM and Fabric Interconnect.

Answer

Storage Array

Answer

Control Plane

Answer

Blade Server

Question 3

Which TWO are features of the Embedded Event Manager (EEM) with Python applets on Cisco NX-OS? (Choose two.)

Accepted Answer

EEM Python applets can execute CLI commands on the Nexus switch.. Option B is correct because EEM Python applets on Cisco NX-OS run locally on the switch and can invoke NX-OS CLI commands through the CLI library (for example, cli() from the Cisco NX-OS Python API), allowing the script to gather state or take corrective action. Option E is correct because EEM event statements can match syslog messages (for example, an event syslog pattern statement) and trigger the registered Python applet when a matching log is generated. Option A is incorrect because EEM Python applets execute locally on the NX-OS device and do not require an external Python server. Option C is incorrect because Python applets can import supported external libraries available on the NX-OS Python environment. Option D is incorrect because applets are not restricted to running only as root; they run under the privileges of the user or context that registered/executed them.

Answer

EEM Python applets require an external Python server.

Answer

EEM Python applets cannot use external libraries.

Answer

EEM Python applets can only run as root.

Question 4

An engineer is designing a Cisco ACI multi-site solution. Which two considerations are critical for inter-site connectivity? (Choose two.)

Accepted Answer

Deploy a L3Out at each site for external connectivity.. In Cisco ACI Multi-Site, each site operates with its own APIC cluster and independent fabric. A L3Out at each site is critical because it provides external connectivity for that site's endpoints, allowing traffic to exit locally rather than being hair-pinned across the inter-site network. This design optimizes traffic flow and aligns with the Multi-Site architecture where sites are managed separately but interconnected via the Inter-Site Network (ISN).

Answer

Configure a stretch VLAN across sites.

Answer

Use a separate OSPF process per site.

Answer

Use a single APIC cluster for both sites.

Question 5

An engineer is troubleshooting a UCS B-Series blade that fails to boot from SAN. Which TWO actions should be verified first? (Choose TWO.)

Accepted Answer

Verify that the vHBA WWPN is correctly zoned on the SAN switches.. Option A is correct because SAN boot depends on the vHBA's WWPN being included in the correct zone on the SAN fabric; if the WWPN is not zoned to the storage array's target ports, the blade cannot see the boot LUN. Option B is correct because the UCS boot policy must explicitly reference the SAN boot target (the array's WWPN and LUN), and without that entry the blade has no boot target to attempt. Option C is not relevant because a MAC address belongs to the vNIC/Ethernet path and does not affect Fibre Channel SAN boot. Option D is not relevant because QoS policy settings for FC traffic do not determine whether the boot LUN is reachable. Option E is incorrect because listing local disk first would actually prevent or delay SAN boot, not fix it.

Answer

Check the MAC address assigned to the vNIC.

Answer

Ensure the QoS policy for FC traffic is set to Platinum.

Answer

Verify the server's boot order lists local disk first.

Question 6

In a Cisco HyperFlex cluster, the management plane uses vCenter, but the data plane uses which protocol to replicate data across nodes?

Accepted Answer

HX Data Platform. In a Cisco HyperFlex cluster, the data plane replication across nodes is handled by the HX Data Platform, which is a distributed, log-structured file system that synchronously replicates data at the hypervisor level. This platform manages all I/O operations and ensures data consistency across the cluster without relying on external storage protocols like Fibre Channel or iSCSI.

Answer

Fibre Channel

Answer

NFS

Answer

iSCSI

Question 7

An administrator needs to replace a faulty UCS B200 M5 blade with a new blade of the same model. The original blade had a service profile associated. What is the minimum required action to allow the new blade to take over the workload with the same configuration?

Accepted Answer

Disassociate the service profile from the faulty blade and associate it with the new blade.. The minimum required action is to disassociate the service profile from the faulty blade and associate it with the new blade. UCS service profiles are logical configurations that can be moved between physical blades. Once associated, the new blade inherits the same configuration, including network, storage, and boot policies, allowing it to take over the workload.

Answer

Clone the service profile and then associate the clone with the new blade.

Answer

Manually reconfigure the new blade via the KVM console.

Answer

Update the firmware on the new blade to match the service profile requirements.

Question 8

Which protocol is used by NETCONF for transport?

Accepted Answer

SSH. NETCONF (RFC 6241) uses SSH as its transport protocol.

Answer

Telnet

Answer

HTTP

Answer

HTTPS

Question 9

For consistent multi-data-center automation, which tool is best suited to orchestrate both NX-OS and ACI across sites?

Accepted Answer

Cisco NSO. Cisco NSO (Network Services Orchestrator) is the correct tool because it provides multi-domain, multi-vendor orchestration with native support for both NX-OS and ACI through its Network Element Drivers (NEDs). NSO uses a model-driven approach with YANG data models and NETCONF/RESTCONF protocols to manage configuration consistency across distributed data centers, enabling service-level abstraction and closed-loop automation that other tools lack.

Answer

Puppet

Answer

Ansible

Answer

Chef

Question 10

Which of the following is a YANG data model developed by the OpenConfig working group to provide vendor-neutral configuration for network interfaces?

Accepted Answer

openconfig-interfaces. openconfig-interfaces is the correct answer because it is a YANG data model developed by the OpenConfig working group, which is an operator-led consortium focused on vendor-neutral network management. The openconfig-interfaces model provides a standardized, vendor-agnostic way to configure and monitor network interfaces across different vendors' equipment. This aligns with the question's requirement for a vendor-neutral model from the OpenConfig working group.

Answer

ietf-interfaces

Answer

nacm

Answer

Cisco-NX-OS-device

Question 11

A server administrator reports that a newly provisioned application server cannot access its LUN on the storage array. The SAN zoning uses WWPNs. The administrator verifies that the server's HBA WWPN is correctly zoned with the storage port's WWPN. Which additional check should the engineer perform to isolate the issue?

Accepted Answer

Verify that the zone set is activated and that the zones are in the active zone set. Even if the WWPNs are correctly configured in the zone, the zone set must be activated for the zoning to take effect. Without activation, the zone configuration remains in the pending or offline zone set, and the Fibre Channel fabric will not enforce the access controls. The engineer should verify that the zone set is activated and that the zones appear in the active zone set using commands like 'show zoneset active' on the MDS switch.

Answer

Confirm that VSAN interop is enabled on the MDS switch

Answer

Ensure that the switch port is configured in F mode and local switching is enabled

Answer

Check whether FCIP is configured on the storage array

Question 12

An ACI fabric has multiple tenants and the requirement to allow only HTTP traffic from the web EPG to the app EPG. The contract must restrict traffic to TCP port 80. Which ACI object defines that specific port?

Accepted Answer

Filter. In Cisco ACI, a Filter is the object that defines specific Layer 4 parameters such as TCP port 80. It is referenced by a Subject within a Contract. The Filter contains entries that specify protocols, ports, and other match criteria.

Answer

EPG

Answer

Subject

Answer

Contract

Question 13

In a Cisco NX-OS environment, which command is used to verify the operational state of a virtual Port Channel (vPC) peer link?

Accepted Answer

show vpc brief. The 'show vpc brief' command displays the operational state of the vPC peer link, including whether the peer link is up, the role of the switch (primary/secondary), and the status of the vPC domain. This command is specifically designed to verify the health and operational status of the vPC peer link and member ports in a Cisco NX-OS environment.

Answer

show port-channel summary

Answer

show running-config vpc

Answer

show vpc consistency-parameters

Question 14

Which TWO methods are supported by Cisco NX-API for automating Nexus switches? (Choose two.)

Accepted Answer

NX-API CLI. NX-API CLI (option A) is correct because it allows automation clients to send NX-OS CLI commands over HTTP/HTTPS to the Nexus switch's NX-API engine, which parses and executes them and returns structured output such as JSON or XML. NX-API REST (option B) is also correct because it exposes a RESTful interface using HTTP methods (GET, POST, PUT, DELETE) against NX-OS data models and managed objects, returning JSON or XML responses. SNMP (option C) is not an NX-API method; it is a separate legacy management protocol used for monitoring and limited configuration. RESTCONF (option D) and NETCONF (option E) are model-driven programmatic interfaces based on YANG, but they are distinct from Cisco's NX-API framework and are not the two methods NX-API itself supports.

Answer

SNMP

Answer

RESTCONF

Answer

NETCONF

Question 15

A data center engineer is configuring vPC on a pair of Cisco Nexus switches. The vPC peer-link is established but the vPC member ports remain suspended. After checking the configuration, the engineer notices that the vPC peer-keepalive link is not functioning. What is the most likely cause of the suspended member ports?

Accepted Answer

Peer-keepalive link failure causing dual-active detection issues. When the vPC peer-keepalive link fails, each vPC peer switch cannot detect whether the other peer is operational. This triggers the dual-active detection mechanism, causing the secondary switch to suspend its vPC member ports to prevent a split-brain scenario where both switches forward traffic for the same vPC VLAN. The suspended state is a protective measure until the peer-keepalive link is restored or the vPC role is resolved.

Answer

MTU mismatch on the peer-link

Answer

Mismatched vPC domain ID

Answer

Incorrect VLAN configuration on member ports