350-601 Practice Test 24 — 15 Questions

Question 1

A DevOps team wants to apply Infrastructure as Code principles to manage their data center network. Which tool is best suited for declaratively managing ACI configurations using Terraform?

Accepted Answer

Terraform with terraform-provider-aci. Terraform uses the terraform-provider-aci to declaratively manage ACI objects like tenants, APs, EPGs, etc.

Answer

Cobra SDK

Answer

Python acitoolkit

Answer

Ansible with cisco.nxos collection

Question 2

An engineer is writing an Ansible playbook to configure BGP on a Nexus 9000 switch. Which module from the cisco.nxos collection should be used to manage BGP configuration?

Accepted Answer

nxos_bgp. The cisco.nxos.nxos_bgp module is specifically designed for BGP configuration on NX-OS devices. nxos_vlan manages VLANs, nxos_interface manages interfaces, and nxos_config applies raw CLI commands.

Answer

nxos_vlan

Answer

nxos_config

Answer

nxos_interface

Question 3

An engineer wants to automate VLAN configuration on a Cisco Nexus 9000 switch using a Python script running in the guest shell. Which library should the engineer use to send NX-OS commands via the NX-API?

Accepted Answer

cisco_nxapi. The cisco_nxapi library is specifically designed for Python scripts to interact with Nexus switches via NX-API. The OnEX library is not a standard library; guest shell leverages Python on-box, but the library for NX-API calls is cisco_nxapi.

Answer

OnEX

Answer

acitoolkit

Answer

Cobra SDK

Question 4

Which protocol is used by NETCONF for transport?

Accepted Answer

SSH. NETCONF (RFC 6241) uses SSH as its transport protocol.

Answer

Telnet

Answer

HTTP

Answer

HTTPS

Question 5

Which two statements about the NX-API REST interface on Nexus switches are true? (Choose two.)

Accepted Answer

It supports JSON and XML encoding.. NX-API REST supports JSON and XML and uses HTTPS for secure communication.

Answer

It uses YANG models exclusively.

Answer

It only supports read-only operations.

Answer

It uses SSH for transport.

Question 6

In ACI automation, the APIC REST API interacts with the Management Information Tree (MIT). Which of the following represents a typical hierarchical object path in the MIT?

Accepted Answer

/api/mo/uni/tn-{tenant}/ap-{app}/epg-{epg}.json. The MIT follows a hierarchy: Tenant > Application Profile (AP) > Endpoint Group (EPG).

Answer

/api/node/class/topSystem.json

Answer

/api/mo/sys/intf.json

Answer

/api/mo/uni/fabric/protpol.json

Question 7

A Cisco HyperFlex cluster is experiencing performance issues during peak hours. The cluster uses a 4-node all-flash configuration. The engineer notices that the vSphere DRS cluster is heavily imbalanced. Which HyperFlex feature should be used to improve performance by balancing the storage load across nodes?

Accepted Answer

Enable the IOPS-based workload rebalancing feature. The IOPS-based workload rebalancing feature in Cisco HyperFlex automatically redistributes storage I/O load across cluster nodes based on real-time IOPS metrics. This directly addresses the performance issue during peak hours by ensuring no single node becomes a storage bottleneck, which is the root cause of the vSphere DRS imbalance in a HyperFlex environment.

Answer

Enable Storage DRS on the HyperFlex datastore

Answer

VM vMotion to move VMs to less busy nodes

Answer

Adjust the deduplication and compression settings to reduce write amplification

Question 8

Refer to the exhibit. A client connected to Ethernet1/2 cannot obtain an IP address via DHCP. What is the most likely cause?

Accepted Answer

The DHCP snooping trust configuration is missing on the server port. The client cannot obtain an IP address via DHCP because the DHCP server port (Ethernet1/1) is not configured as a DHCP snooping trusted port. By default, all ports are untrusted, and DHCP snooping drops all DHCP server responses (OFFER, ACK) received on untrusted ports. Configuring the port connecting to the DHCP server as trusted is required to allow these messages to reach the client.

Answer

The DHCP snooping information option is disabled

Answer

The DHCP server is on a different VLAN

Answer

IP source guard is enabled on the client port

Question 9

In the context of Ansible automation for Cisco Nexus switches, which module can be used to manage VLAN configurations?

Accepted Answer

nxos_vlan. The cisco.nxos collection includes the nxos_vlan module specifically for managing VLANs on NX-OS devices.

Answer

nxos_interface

Answer

nxos_bgp

Answer

nxos_config

Question 10

A DevOps team is implementing CI/CD for network configuration changes on Nexus switches. Which tool is most suitable for version control of network configuration files?

Accepted Answer

Git. Git is a distributed version control system widely used for managing infrastructure as code, including network configurations. Ansible is for automation, Jenkins for CI/CD pipelines, and Docker for containers.

Answer

Jenkins

Answer

Ansible

Answer

Docker

Question 11

An organization wants to adopt Infrastructure as Code (IaC) principles for their data center network. Which practice best aligns with IaC for network configuration?

Accepted Answer

Storing configuration files in Git and applying them with automation tools. IaC involves managing and provisioning network infrastructure through machine-readable definition files, rather than manual processes. Storing configurations in version control (like Git) and using automated tools is key.

Answer

Using spreadsheets to track changes

Answer

Manually configuring devices via CLI

Answer

Using a web GUI for each device

Question 12

Which TWO of the following are characteristics of the NETCONF protocol? (Choose two.)

Accepted Answer

Operates over SSH or TLS.. NETCONF uses XML for data encoding and provides operations like get, edit-config, etc., based on YANG models.

Answer

Supports JSON encoding as well as XML.

Answer

Uws a single RPC for all operations.

Answer

Uses RESTful HTTP methods.

Question 13

In an ACI environment, an automation script uses the acitoolkit Python library to create a new EPG. The script connects to the APIC using login credentials. After creating the EPG, what must be called to commit the changes?

Accepted Answer

session.push_to_apic(). acitoolkit uses a Session object; after making changes, the session's push_to_apic method must be called to commit.

Answer

session.save()

Answer

session.commit()

Answer

session.apply()

Question 14

Which Python library is part of the ACI SDK and provides a high-level object-oriented interface for interacting with the APIC?

Accepted Answer

Cobra SDK. The Cobra SDK provides an object-oriented Python interface for ACI automation, wrapping the APIC REST API.

Answer

pyats

Answer

cisco_nxapi

Answer

acitoolkit

Question 15

An engineer wants to automate the configuration of BGP on a Nexus switch using Ansible. Which module from the cisco.nxos collection is appropriate?

Accepted Answer

nxos_bgp. The nxos_bgp module is designed to manage BGP configuration on NX-OS devices.

Answer

nxos_interface

Answer

nxos_config

Answer

nxos_vlan