350-601 Practice Test 22 — 15 Questions

Question 1

An engineer is configuring iSCSI CHAP authentication between an initiator and a target. The initiator has a CHAP username and secret configured. What must be configured on the target?

Accepted Answer

The same username and secret as the initiator.. For iSCSI CHAP authentication to succeed, the target must be configured with the same CHAP username and secret that the initiator uses (or, in mutual CHAP, matching credentials in both directions). The target validates the initiator's CHAP response using the shared secret, so the credentials must match.

Answer

A different username and secret.

Answer

No CHAP configuration is needed on the target.

Answer

Only the secret, no username.

Question 2

A data center engineer notices that a UCS B-Series blade server is failing to boot from a SAN LUN that is correctly mapped to the server's WWPN. The SAN switch shows that the LUN is accessible and the zone is configured correctly. The UCS Manager shows the server's vNIC is associated with a vHBA that has the correct WWPN, but the server's BIOS does not list the Fibre Channel boot target. Which configuration is most likely missing?

Accepted Answer

The boot policy is not defined or not attached to the service profile.. The boot policy defines the boot order and parameters (such as the SAN LUN target WWPN and LUN ID) for the server. If the boot policy is not defined or not attached to the service profile, the UCS Manager will not program the BIOS with the Fibre Channel boot target information, even though the SAN zoning and vHBA WWPN are correct. Without this policy, the server's BIOS has no instruction to attempt a SAN boot, resulting in the failure described.

Answer

The SAN connectivity policy is missing the Fibre Channel uplink pinning.

Answer

The vNIC/vHBA placement policy is incorrectly set to 'Express' mode.

Answer

A QoS policy is not applied to the vHBA.

Question 3

A storage network engineer is planning an FC SAN upgrade. Which two benefits does Fibre Channel PortChannel provide over a single ISL? (Choose two.)

Accepted Answer

Increased aggregate bandwidth. Option C (Increased aggregate bandwidth) is correct because a Fibre Channel PortChannel bundles multiple physical ISLs between two switches into one logical link, so the total throughput is the sum of the member links' speeds (for example, four 16 Gbps ISLs yield 64 Gbps of aggregate bandwidth), which a single ISL cannot provide. Option E (Redundancy and load balancing) is correct because if one member link in the PortChannel fails, traffic is redistributed across the remaining links, preserving connectivity while distributing flows across all members for more efficient utilization. Option A is not a benefit specific to PortChannel, since bundling links does not inherently reduce per-frame latency compared with a single ISL. Option B is incorrect because zoning is configured independently of link aggregation and is not simplified by a PortChannel. Option D is incorrect because all ports in a Fibre Channel PortChannel must be of the same port type (for example, all E_Ports or all F_Ports); mixing port types in one channel is not supported.

Answer

Lower latency

Answer

Simplified zoning configuration

Answer

Support for different port types in the same channel

Question 4

During a maintenance window, a network engineer plans to upgrade the NX-OS software on a pair of Nexus 9000 switches configured as vPC peers. The engineer wants to minimize traffic disruption. Which upgrade sequence is recommended?

Accepted Answer

Upgrade the secondary vPC peer first, then the primary. In a vPC pair, the secondary peer is upgraded first to preserve the primary's role as the forwarding anchor. Upgrading the secondary peer allows it to reboot and rejoin the vPC domain without disrupting the data plane because the primary peer continues to forward traffic. Once the secondary is stable, the primary is upgraded, ensuring minimal traffic loss.

Answer

Upgrade both switches simultaneously using ISSU

Answer

Reload both switches to a previous version, then upgrade

Answer

Upgrade the primary vPC peer first, then the secondary

Question 5

Which protocol is used by NETCONF to transport YANG-defined configuration data between a controller and a network device?

Accepted Answer

XML over SSH. NETCONF (RFC 6241) uses SSH as its mandatory transport, specifically operating over SSH on port 830. It encodes configuration and state data in XML, and YANG models define the structure of that XML. Therefore, the correct transport is XML over SSH, making option D correct.

Answer

XML over HTTP

Answer

CLI over Telnet

Answer

JSON over HTTPS

Question 6

A company is planning to deploy Cisco Intersight to manage a hybrid environment including on-premises UCS domains and AWS EC2 instances. Which THREE of the following are required components for integrating AWS with Intersight?

Accepted Answer

An Intersight account with appropriate licenses. Option A is correct because integrating AWS with Intersight requires an active Intersight account with the appropriate licenses (e.g., Intersight Essentials or higher) to enable the cloud management features and target registration. Option D is correct because Intersight uses a cross-account AWS IAM role with read-write permissions to EC2 and CloudFormation so it can discover, inventory, and provision AWS resources on the customer's behalf. Option E is correct because Intersight is a SaaS platform that communicates with AWS over the public internet, so outbound network connectivity from Intersight to AWS public endpoints (such as ec2.amazonaws.com and cloudformation.amazonaws.com) is required. Option B is not required because the Intersight Virtual Appliance is an optional on-premises deployment for connecting UCS domains, not a component that must be deployed inside AWS for cloud integration. Option C is not required because Intersight reaches AWS through public endpoints rather than needing a dedicated VPN tunnel between the on-premises network and AWS.

Answer

An Intersight Virtual Appliance deployed in AWS

Answer

A VPN tunnel between the on-premises network and AWS

Question 7

In a VXLAN overlay, which encapsulation is used to transport Ethernet frames over the IP network?

Accepted Answer

UDP. VXLAN uses UDP encapsulation (destination port 4789 by default) to transport Layer 2 Ethernet frames over a Layer 3 IP network. This allows the overlay to leverage existing IP routing infrastructure while preserving the original MAC addresses and VLAN information, enabling network virtualization and scalability beyond traditional VLAN limits.

Answer

IPsec

Answer

TCP

Answer

GRE

Question 8

A network automation engineer is writing an Ansible playbook to configure Nexus switches. Which three modules are available to manage NX-OS configuration? (Choose three.)

Accepted Answer

nxos_config. The nxos_config module (B) is the core Ansible module for managing NX-OS device configuration, allowing lines and sections to be pushed, merged, or replaced on Nexus switches. The nxos_interface module (C) is a platform-specific module that manages Layer 2 and Layer 3 interface parameters such as description, MTU, mode, and IP addressing on NX-OS devices. The nxos_vlan module (D) manages VLAN creation, naming, and VLAN ID ranges specifically on NX-OS, making it valid for Nexus configuration tasks. The eos_config module (A) targets Arista EOS devices, not Cisco NX-OS, and ios_config (E) targets Cisco IOS/IOS-XE devices, so neither applies to Nexus switches.

Answer

eos_config

Answer

ios_config

Question 9

A data center engineer is designing a Fibre Channel SAN for high availability. The design includes two MDS 9710 directors connected to multiple storage arrays. Which best practice should be followed when configuring NPV mode on the switches connecting the hosts?

Accepted Answer

Dual-home each NPV switch to two separate core switches for redundancy. Dual-homing each NPV switch to two separate core switches ensures that if one core switch fails, the NPV switch can still forward traffic through the other core switch. In NPV mode, the switch acts as a passthrough, and connecting to two separate core directors provides path redundancy without requiring the NPV switch to perform full Fibre Channel routing. This design aligns with high-availability best practices for Fibre Channel SANs.

Answer

Enable VSAN interop on the NPV switch to support multiple storage arrays

Answer

Connect each NPV switch to a single core switch for simplicity

Answer

Use FC trunking between NPV and core switches to increase bandwidth

Question 10

A company is deploying a new SAN with two MDS 9148S switches in a single VSAN. They want to ensure that a failure of one switch does not affect storage traffic. Which technology should be implemented?

Accepted Answer

Create a redundant fabric by connecting both switches to each storage array and host via multiple paths.. Implementing a redundant fabric by connecting both switches to each storage array and host via multiple paths ensures that if one switch fails, the other switch continues to carry storage traffic. This is achieved through multipathing software (e.g., Fibre Channel multipathing) and redundant physical connections, which provide active-active or active-passive failover without disrupting the SAN.

Answer

Implement FCoE to Ethernet storage.

Answer

Enable NPIV on all ports.

Answer

Configure a port channel between the switches.

Question 11

A Cisco UCS Manager administrator notices that a newly provisioned service profile is showing 'Config Error' for the vNIC. The vNIC is configured to use a dynamic MAC address from a pool that has no free addresses. What is the correct remediation?

Accepted Answer

Add more MAC addresses to the MAC pool used by the vNIC. The 'Config Error' for the vNIC indicates that the dynamic MAC address assignment failed because the MAC pool is exhausted. Adding more MAC addresses to the pool resolves the issue by providing available addresses for the vNIC to consume, allowing the service profile to deploy successfully.

Answer

Upgrade the firmware on the Fabric Interconnect

Answer

Change the vNIC to use a static MAC address

Answer

Reassociate the service profile to a different blade

Question 12

Refer to the exhibit. An administrator connects a new server to Ethernet1/1 and the port immediately goes into errdisable state. The previous device was connected to that port. What is the most likely cause?

Accepted Answer

The new server has a different MAC address than the sticky MAC. The port immediately entering errdisable state upon connecting a new server indicates a port security violation. When port security is enabled with sticky MAC addresses, the switch dynamically learns and 'sticks' the MAC address of the first connected device to the running configuration. Connecting a device with a different MAC address triggers a security violation, and if the violation mode is 'shutdown' (the default), the port is placed into errdisable state. This matches the scenario where the previous device's MAC was learned as sticky, and the new server's MAC differs.

Answer

The port security violation mode is set to protect

Answer

The port security maximum MAC addresses is set too high

Answer

The port is configured as a trunk

Question 13

A UCS service profile includes a vHBA that is bound to a WWPN. The blade server fails and is replaced with a new blade of the same model. What happens to the WWPN configuration after the replacement?

Accepted Answer

The WWPN is automatically applied from the service profile to the new blade. In Cisco UCS, the vHBA's WWPN is defined in the service profile (either manually assigned or from a WWPN pool) and is bound to the service profile, not to the physical blade. When the blade is replaced, the same service profile is associated with the new blade, and UCS Manager automatically applies the WWPN to the new blade's vHBA. This preserves SAN zoning and storage presentation without reconfiguration.

Answer

The WWPN must be re-imported from the SAN fabric

Answer

The WWPN is generated by the CIMC of the new blade

Answer

The WWPN is lost and must be reconfigured manually on the new blade

Question 14

Which three of the following are characteristics of the ACI Management Information Tree (MIT)? (Choose three.)

Accepted Answer

It is a hierarchical tree structure. Option A is correct because the ACI Management Information Tree (MIT) is fundamentally a hierarchical tree structure, with the root at the top and managed objects organized into parent-child relationships, similar to a directory tree. Option B is correct because the APIC REST API uses HTTP/HTTPS to exchange data with the MIT in JSON or XML format, allowing programmatic configuration and retrieval of managed objects. Option E is correct because every managed object in the MIT is uniquely identified by a distinguished name (DN), which encodes its full path from the root through its ancestors, such as uni/tn-Tenant1/ap-App1/epg-EPG1. Option C is not correct because the MIT is not accessed via SNMP; ACI management and monitoring use the REST API, CLI, and other interfaces rather than SNMP for MIT object access. Option D is not correct because the MIT is explicitly hierarchical, not a flat database without hierarchy.

Answer

It can be accessed via SNMP

Answer

It is a flat database without hierarchy

Question 15

Which two advantages does thin provisioning provide in a storage array? (Choose two.)

Accepted Answer

Allows over-provisioning of storage capacity.. Option A is correct because thin provisioning lets the array present logical capacity that exceeds the physical capacity actually installed, i.e., over-provisioning, since space is not reserved up front. Option B is correct because thin provisioning allocates physical blocks on demand as data is written, so unused logical space consumes no physical capacity and overall storage utilization improves. Options C, D, and E are incorrect: thin provisioning does not change disk tiering or write performance, does not replace snapshots, and does not remove the need for RAID redundancy.

Answer

Increases write performance by using faster disks.

Answer

Reduces the need for snapshots.

Answer

Eliminates the need for RAID protection.