350-601 Practice Test 25 — 15 Questions

Question 1

A Cisco MDS switch has two VSANs (VSAN 10 and VSAN 20). The engineer wants to connect two switches using a single ISL that carries both VSANs. Which configuration is required on the ISL interface?

Accepted Answer

Configure the port as a trunk port (EISL).. An EISL (Enhanced ISL) trunk port is required to carry multiple VSANs over a single physical ISL between two MDS switches. Configuring the interface as a trunk port enables 802.1Q-like tagging of Fibre Channel frames with VSAN identifiers, allowing VSAN 10 and VSAN 20 to traverse the same link. This is the standard method for interconnecting MDS switches while preserving VSAN isolation.

Answer

Use two separate ISLs, one for each VSAN.

Answer

Create a PortChannel and add the ISL.

Answer

Configure the port as a regular E-port.

Question 2

A Python script using NX-API returns HTTP 401. What is the most likely cause?

Accepted Answer

Invalid credentials. HTTP 401 Unauthorized indicates that the server understood the request but authentication is required and has failed or has not been provided. In the context of NX-API, this error is most directly caused by providing invalid or missing credentials (Option D). If NX-API is not enabled on the switch, the endpoint is unavailable and typically results in an HTTP 404 Not Found or a connection error, not a 401.

Answer

Wrong NX-API version in URL

Answer

Firewall blocking port 443

Answer

NX-API not enabled on the switch

Question 3

A large enterprise is using Cisco UCS Manager to manage a chassis with 8 B-Series blades. The environment uses a combination of Ethernet and Fibre Channel traffic. The UCS fabric interconnect (FI) is configured in end-host mode with two uplinks to the core network. Recently, the engineering team deployed a new service profile for a high-performance computing workload that requires 40Gbps Ethernet per vNIC and 16Gbps Fibre Channel per vHBA. The server has two vNICs and two vHBAs. After deployment, the server's OS shows only 10Gbps connectivity on each vNIC. The engineer checks UCS Manager and sees that the vNIC templates are set to '10 Gbps' and the vHBA templates are set to '16 Gbps' but the actual link speed for vNICs is only 10Gbps. The fabric interconnect ports are configured as 40Gbps uplinks. The engineer has verified that the server adapter supports 40Gbps. What is the most likely cause of the speed mismatch?

Accepted Answer

The vNIC template used in the service profile specifies a requested speed of '10 Gbps' instead of '40 Gbps'.. The vNIC template in the service profile defines the requested speed for the virtual NIC. If the template is set to '10 Gbps', the UCS Manager will allocate only 10 Gbps of bandwidth per vNIC, regardless of the physical adapter's capability or the uplink speed. Since the engineer verified the adapter supports 40 Gbps and the uplinks are 40 Gbps, the mismatch is directly caused by the template configuration.

Answer

The fabric interconnect uplinks are configured as 40Gbps, but the port channel is not configured correctly, causing speed negotiation to fail.

Answer

The server's adapter policy is set to 'Windows' mode, which limits Ethernet speeds to 10Gbps.

Answer

The QoS policy applied to the vNIC limits the bandwidth to 10Gbps.

Question 4

A data center administrator needs to deploy a new blade server in a Cisco UCS chassis. The server must automatically inherit the correct service profile based on its slot location. Which feature should be configured?

Accepted Answer

Qualifier-based service profile association. Qualifier-based service profile association allows a service profile to be automatically applied to a blade server based on its slot location within the UCS chassis. This is achieved by configuring a qualifier that matches the chassis ID and slot number, enabling automatic inheritance without manual intervention.

Answer

Static service profile association

Answer

Service profile template with pool

Answer

Default service profile

Question 5

Which command displays the VLANs allowed on a trunk interface?

Accepted Answer

show interface trunk. The 'show interface trunk' command displays trunk parameters, including the VLANs allowed on the trunk interface. This command shows the trunking mode, encapsulation (e.g., 802.1Q), and the allowed VLAN list for each trunk port. It is the direct command to verify which VLANs are permitted on a specific trunk link.

Answer

show running-config interface

Answer

show vlan

Answer

show interface switchport

Question 6

A data center engineer is configuring Cisco ACI security policies. They need to allow HTTP traffic from an EPG named 'Web' to an EPG named 'App'. The engineer has created a contract named 'WebToApp' with a subject that includes a filter for TCP port 80. However, traffic is still being dropped. What is the most likely reason?

Accepted Answer

The contract is not applied as a provider or consumer on the EPGs.. For a contract to take effect, it must be provided by one EPG and consumed by another. The contract defines the allowed traffic, but without the provider/consumer relationship, the ACI fabric will not permit the traffic. The engineer must assign the contract as a provider on the 'App' EPG and as a consumer on the 'Web' EPG (or the reverse, depending on the direction of initiation).

Answer

The filter is configured with the wrong EtherType.

Answer

The contract subject is missing a filter for the return traffic.

Answer

The VRF is not configured with the correct bridge domain.

Question 7

Which component in a UCS 5108 blade chassis provides the connectivity between the blade servers and the Fabric Interconnects?

Accepted Answer

I/O Module (IOM). In a UCS 5108 chassis, the I/O Modules (IOMs) sit in the back of the chassis and provide the data path between the blade servers' mezzanine adapters and the Fabric Interconnects. Each IOM maps to a fabric (A or B) and forwards traffic from the blades to the FIs, making it the connectivity component in question.

Answer

Chassis management controller (CMC)

Answer

Midplane

Answer

Fabric Extender (FEX)

Question 8

In a VXLAN EVPN fabric, BUM traffic can be handled by ingress replication or multicast. Which statement about ingress replication is accurate?

Accepted Answer

The ingress VTEP replicates the BUM packet and sends unicast copies to each remote VTEP.. In ingress replication, the ingress VTEP (VXLAN Tunnel Endpoint) receives a BUM (Broadcast, Unknown unicast, Multicast) packet and creates multiple unicast-encapsulated copies, sending one copy to each remote VTEP in the same VXLAN network identifier (VNI) segment. This method does not rely on any multicast protocol in the underlay; instead, it leverages the VTEP's knowledge of all remote VTEPs (typically learned via the EVPN control plane, such as Type 3 Inclusive Multicast Ethernet Tag routes) to replicate traffic. Option B correctly describes this behavior.

Answer

It requires PIM in the underlay to replicate packets.

Answer

It reduces replication overhead on the ingress VTEP compared to multicast.

Answer

It uses IGMP snooping to optimize replication.

Question 9

A data center automation script uses Python's requests library to call the NX-API for a Nexus 9000 switch. The script works but returns HTTP 400. Which is a likely cause?

Accepted Answer

The request payload is malformed. HTTP 400 indicates a bad request, which in the context of NX-API typically means the JSON or XML payload sent to the switch does not conform to the expected schema. Common issues include missing required fields (e.g., 'ins_api' version, 'type', 'chunk', 'sid', 'input', 'outputformat'), incorrect JSON syntax, or invalid values for parameters like 'version' or 'type'. The requests library successfully delivered the HTTP request, but the NX-API rejected it due to malformed content.

Answer

The switch has no management IP

Answer

The script uses HTTP instead of HTTPS

Answer

The API is not enabled

Question 10

A network engineer notices that when a host sends a packet to a destination on a different VTEP, the packet is flooded to all VTEPs even though the destination MAC is known. What is the most likely cause?

Accepted Answer

The BGP EVPN route table is missing the MAC/IP route for the destination.. In a BGP EVPN VXLAN fabric, when a host sends a packet to a known destination MAC on a different VTEP, the ingress VTEP should perform MAC/IP route lookup in the BGP EVPN route table to determine the correct remote VTEP. If the MAC/IP route for the destination is missing (e.g., not advertised or withdrawn), the ingress VTEP has no mapping to a remote VTEP and must flood the packet to all VTEPs in the VNI, causing unnecessary broadcast traffic. This is the most likely cause of the described behavior.

Answer

The VNI is misconfigured.

Answer

The MTU exceeds 1500 bytes.

Answer

ARP suppression is disabled.

Question 11

An engineer is implementing VXLAN with a centralized routing gateway. Which TWO statements are correct about BUM traffic handling?

Accepted Answer

Ingress replication sends a copy of the BUM packet to each remote VTEP via unicast. Option B is correct because ingress replication (head-end replication) requires the ingress VTEP to replicate each BUM frame and send a separate unicast copy to every remote VTEP that has interested members, rather than relying on underlay multicast. Option C is correct because this per-VTEP unicast replication multiplies the traffic on the source VTEP's uplinks, consuming more bandwidth than a single multicast stream that the underlay replicates only where needed. Option A is wrong because multicast in the underlay is one valid transport for BUM traffic, but it is not always required since ingress replication is an alternative. Option D is wrong because BUM traffic is flooded to all relevant remote VTEPs, not handled solely by the ingress VTEP. Option E is wrong because BUM traffic is by definition flooded to all VTEPs that participate in the VNI, except the one it arrived from.

Answer

Multicast in the underlay is always required for BUM traffic

Answer

Only the ingress VTEP handles BUM traffic

Answer

BUM traffic is never flooded to all VTEPs

Question 12

An engineer is deploying FCoE in a data center and must ensure lossless transport for Fibre Channel traffic over Ethernet. The engineer configures Priority Flow Control (PFC) on the DCB-enabled switches. However, FCoE initialization fails. Which additional DCB feature is required to enable FCoE devices to discover and negotiate PFC settings with the switch?

Accepted Answer

DCBX (Data Center Bridging Exchange). DCBX (Data Center Bridging Exchange) is a protocol that enables DCB devices to exchange configuration information, including PFC settings, and to negotiate parameters. Without DCBX, FCoE initiators cannot discover the switch's PFC configuration, leading to initialization failure. DCBX is built on LLDP and is essential for automatic configuration of PFC, ETS, and other DCB features.

Answer

CN (Congestion Notification)

Answer

ETS (Enhanced Transmission Selection)

Answer

QoS (Quality of Service)

Question 13

Refer to the exhibit. An engineer is creating a service profile template in Cisco UCSM. What is the effect of setting the vnet to 'VM_Network' for vNIC_A?

Accepted Answer

The VM_Network VLAN must be previously defined in the global VLAN database.. In Cisco UCS Manager, when you assign a VLAN to a vNIC in a service profile template, that VLAN must already exist in the global VLAN database. The VM_Network VLAN is not automatically created; it must be pre-defined under the LAN > VLANs section. Option D correctly states this requirement.

Answer

The VM_Network VLAN is a pre-defined FCoE VLAN for storage traffic.

Answer

The vNIC_A will be placed in VLAN 1 (default) if VM_Network does not exist.

Answer

The VM_Network VLAN will be created automatically as a standard VLAN.

Question 14

Which Fibre Channel address component identifies a specific port on a node?

Accepted Answer

WWPN. The World Wide Port Name (WWPN) is a 64-bit identifier assigned to each Fibre Channel port on a node, uniquely identifying that specific port in the fabric. The WWNN identifies the node itself, while the WWPN identifies the individual port, making WWPN the correct answer for 'a specific port on a node.'

Answer

WWNN

Answer

FCID

Answer

WWN

Question 15

Which feature on Nexus switches provides a Linux shell environment to run Python scripts and tools directly on the switch?

Accepted Answer

Guest Shell. Guest Shell on Nexus switches provides a Linux-based container environment (using the Linux Container architecture) that runs directly on the switch. It allows network engineers to execute Python scripts, use Linux tools, and interact with the underlying system without leaving the device. This is distinct from NX-API, which is a RESTful API for programmatic access, and EEM, which is an event manager for automating actions based on triggers. Guest Shell is the only option that offers a full Linux shell environment.

Answer

NX-API

Answer

EEM

Answer

OnEX