350-601 Practice Test 17 — 15 Questions

Question 1

Which feature on Nexus switches provides a Linux shell environment to run Python scripts and tools directly on the switch?

Accepted Answer

Guest Shell. The Guest Shell provides a secure Linux container environment for running custom scripts and tools on Nexus switches.

Answer

NX-API

Answer

EEM

Answer

OnEX

Question 2

Which TWO of the following are valid methods to enforce security on a Cisco Nexus switch? (Choose two.)

Accepted Answer

Control Plane Policing (CoPP). Control Plane Policing (CoPP) is a valid security enforcement method on Cisco Nexus switches because it protects the control plane from excessive or malicious traffic by applying QoS policies that rate-limit packets destined for the supervisor module. By filtering traffic such as routing protocols, SSH, or ICMP, CoPP prevents CPU overload and DoS attacks, directly enforcing security at the control plane level.

Answer

SSHv2

Answer

NetFlow

Answer

FabricPath

Question 3

In a Cisco ACI fabric, which component is responsible for policy enforcement and management of the entire infrastructure?

Accepted Answer

APIC controller. The APIC (Application Policy Infrastructure Controller) is the central policy and management entity in Cisco ACI. It enforces the application-centric policy model, manages the fabric's operational state, and provides the single point of configuration and monitoring for the entire ACI fabric. Without the APIC, the leaf and spine switches operate as standalone devices with no centralized policy enforcement.

Answer

Leaf switch

Answer

DCNM

Answer

Spine switch

Question 4

An organization is migrating from traditional SNMP monitoring to model-driven telemetry on their Nexus 9000 switches. They have configured a telemetry destination using gRPC and have defined sensor paths for interface statistics. After several hours, the collector (a Linux server running Telegraf) reports no data received. The engineer verifies that the switch can reach the collector via ICMP. On the switch, 'show telemetry data collector details' indicates the destination is 'connected', but the 'last data sent' timestamp is several hours old. Which action should the engineer take next?

Accepted Answer

Verify that the sensor paths are correct and that the data is being generated. The 'show telemetry data collector details' output shows the destination is 'connected' and the switch can reach the collector, ruling out network or connectivity issues. The stale 'last data sent' timestamp indicates the telemetry process is running but no data is being published, which typically means the configured sensor paths are not producing data—either because the paths are incorrect, the MIB objects are not supported, or the interfaces are not generating the expected statistics. Option C is correct because verifying the sensor paths and ensuring data generation addresses the root cause without unnecessary changes or reboots.

Answer

Change the transport protocol from gRPC to HTTP

Answer

Reboot the switch to reset the telemetry process

Answer

Increase the telemetry sampling interval to reduce load

Question 5

A data center engineer is implementing FCoE and must ensure lossless behavior for Fibre Channel traffic over Ethernet. Which Data Center Bridging (DCB) mechanism prevents frame loss by pausing traffic on a per-priority basis?

Accepted Answer

Priority Flow Control (PFC). Priority Flow Control (PFC) is a DCB mechanism that provides per-priority pause to prevent frame loss, ensuring lossless delivery for FCoE traffic.

Answer

Data Center Bridging Exchange (DCBX)

Answer

FCoE Initialization Protocol (FIP)

Answer

Enhanced Transmission Selection (ETS)

Question 6

An engineer is configuring zoning on a Cisco MDS switch. The requirement is to ensure that only the storage array ports with specific WWPNs can access the host initiators. Which zoning approach should be used to enforce this policy regardless of physical port changes?

Accepted Answer

Hard zoning by WWPN. Hard zoning based on WWPN ensures that membership is tied to the device's World Wide Port Name, so changes in physical connectivity do not affect the zone membership.

Answer

Soft zoning by WWPN

Answer

Soft zoning by port ID

Answer

Hard zoning by domain/port

Question 7

A storage administrator is implementing synchronous replication between two storage arrays over a Fibre Channel link. Which three characteristics are true of synchronous replication? (Choose three.)

Accepted Answer

It requires a high-bandwidth, low-latency link between the arrays.. Synchronous replication writes data to both arrays before acknowledging the write, ensuring zero data loss but adding latency and requiring high bandwidth.

Answer

It is suitable for long-distance replication over hundreds of kilometers.

Answer

It uses less bandwidth than asynchronous replication.

Question 8

A storage administrator is configuring zoning on a Cisco MDS switch. They need to ensure that only the specified WWPNs can communicate, even if a device is moved to a different physical port. Which zoning method should be used?

Accepted Answer

Hard zoning by WWPN. Hard zoning based on WWPN is persistent across port changes, while soft zoning based on port ID is less secure and changes if the device moves.

Answer

Broadcast zoning

Answer

LUN zoning

Answer

Soft zoning by port ID

Question 9

An engineer wants to prevent unauthorized devices from connecting to access ports. Which port security violation mode will disable the port and generate a syslog message?

Accepted Answer

shutdown. The 'shutdown' violation mode is the only port security mode that both disables the port (placing it in an err-disabled state) and generates a syslog message when a violation occurs. This mode immediately shuts down the interface upon detecting an unauthorized MAC address, providing both a clear security alert and a physical disconnection of the offending device.

Answer

protect

Answer

restrict

Answer

shutdown vlan

Question 10

A Cisco MDS switch is configured with an ISL trunk between two switches. The administrator wants to enable multiple VSANs over the same physical link. Which two actions must be taken? (Choose two.)

Accepted Answer

Enable VSAN trunking on the port.. EISL (Enhanced ISL) allows multiple VSANs to share an ISL. To use EISL, the ISL must be configured in trunk mode, and VSANs must be allowed on the trunk. The switch port must be set to 'E' port mode (or auto) to support trunking.

Answer

Create a PortChannel for the ISL.

Answer

Configure the ISL port as an F-port.

Answer

Configure the port in NPV mode.

Question 11

Which two advantages does thin provisioning provide in a storage array? (Choose two.)

Accepted Answer

Allows over-provisioning of storage capacity.. Thin provisioning allows over-allocation of storage capacity, presenting more space to applications than physically available, improving utilization. It also reduces power and cooling costs by using fewer physical disks initially.

Answer

Increases write performance by using faster disks.

Answer

Reduces the need for snapshots.

Answer

Eliminates the need for RAID protection.

Question 12

Which Fibre Channel port type is used to connect two Cisco MDS switches together to form an inter-switch link (ISL)?

Accepted Answer

E-port. An E-port (Expansion port) is used for links between Fibre Channel switches to form the fabric.

Answer

N-port

Answer

NP-port

Answer

F-port

Question 13

An iSCSI storage array is configured to support multipath I/O (MPIO) for high availability. The administrator needs to configure the initiator to use multiple network paths. What must be ensured for MPIO to work correctly?

Accepted Answer

The initiator must have multiple network interfaces and the storage must support multiple connections to the same LUN.. For MPIO to function, the initiator must have multiple network interfaces and the storage array must present the same LUNs via multiple target portal groups, each accessible via different IP addresses.

Answer

CHAP authentication must be disabled for MPIO.

Answer

All paths must use the same IP address on the initiator.

Answer

The storage array must present each LUN with a different LUN ID on each path.

Question 14

A company uses hard zoning based on World Wide Names (WWNs) to control access between servers and storage arrays. An administrator needs to add a new server with WWPN 50:00:00:00:00:00:01:23 to the zone. What is an advantage of hard zoning over soft zoning?

Accepted Answer

Hard zoning is enforced by the switch hardware and provides better security.. Hard zoning uses the FC address (or WWN) and is enforced by the switch ASIC, providing security even if a device spoofs its WWN? Actually, hard zoning by WWN uses the WWN to assign FC addresses and enforces zoning at the hardware level, while soft zoning relies on name server queries and can be bypassed. Hard zoning provides better security.

Answer

Hard zoning requires less configuration effort.

Answer

Hard zoning allows devices to communicate across VSANs.

Answer

Hard zoning prevents unauthorized devices from accessing the fabric even if they spoof a WWN.

Question 15

An engineer is configuring FCoE on a Cisco Nexus switch. Which two components are required for FCoE initialization? (Choose two.)

Accepted Answer

VN-port (Virtual N-port). FIP is used to discover and initialize FCoE devices, and VN-ports are the virtual FC ports on the switch that connect to VN-ports on the host.

Answer

Fibre Channel Security Protocol (FC-SP)

Answer

Enhanced Transmission Selection (ETS)

Answer

VF-port (Virtual F-port)