350-601 Practice Test 25 — 15 Questions

Question 1

Which THREE of the following are components of an Ansible playbook for automating Cisco Nexus configuration? (Choose three.)

Accepted Answer

hosts. An Ansible playbook consists of hosts (target devices), tasks (what to do), and modules (the actual operations). Variables can be used but are not mandatory components.

Answer

roles

Answer

variables

Question 2

A DevOps team is implementing CI/CD for network configuration using Git. They want to ensure that any changes to the YANG-based configuration are automatically validated before merging. Which tool is used for network automation with YANG models and supports NETCONF/RESTCONF?

Accepted Answer

Terraform with netconf-client provider. Terraform can use RESTCONF/NETCONF providers, but Ansible with cisco.nxos collection also supports YANG; however, Terraform is declarative and fits CI/CD pipelines well.

Answer

Terraform with terraform-provider-aci

Answer

Python with cisco_nxapi library

Answer

Ansible with cisco.nxos collection

Question 3

Which two features allow running Python scripts directly on a Cisco Nexus switch? (Choose two.)

Accepted Answer

EEM with Python applets. Guest shell provides a Linux environment; EEM can trigger Python applets on events.

Answer

NX-API REST

Answer

Ansible

Answer

Terraform

Question 4

An organization has four Cisco MDS 9700 directors connected in a full-mesh topology. They use VSANs to separate production, backup, and management traffic. The backup VSAN is experiencing high latency and occasional timeouts. The engineer runs the 'show fcspf routes' command and notices that the path from the backup host to the backup target has an uneven hop count across different paths. The links are all 16 Gbps. The engineer also notes that the backup target is connected to a different director than the backup host. Which action is most likely to improve performance?

Accepted Answer

Decrease the FSPF cost on the direct links. Decreasing the FSPF cost on the direct links encourages traffic to take shorter paths, reducing hop count and latency. Increasing cost would push traffic away, making it worse. IVR is for inter-VSAN routing, not intra-VSAN. Load balancing via PortChannels increases bandwidth but does not directly reduce latency from long paths.

Answer

Configure IVR to route backup traffic over a dedicated path

Answer

Increase the FSPF cost on the direct links

Answer

Implement load balancing using multiple PortChannels

Question 5

An engineer is writing an Ansible playbook to configure a Nexus switch. The playbook uses the cisco.nxos.nxos_config module. Which Ansible concept is used to ensure the playbook is idempotent?

Accepted Answer

The 'check_mode: yes' flag ensures the playbook only shows changes without applying them.. The 'check_mode' (or '--check') flag in Ansible allows dry-run to verify idempotency.

Answer

Idempotency is achieved by using the 'force' parameter.

Answer

Using 'gather_facts: no' makes the playbook idempotent.

Answer

Idempotency is guaranteed by default in Ansible.

Question 6

Which two of the following are valid methods to automate Nexus switch configuration using Python? (Choose two.)

Accepted Answer

Using the cisco_nxapi Python library. cisco_nxapi is a Python library for Nexus API. Guest Shell allows running Python scripts on-box. EEM uses Tcl, not Python natively. NETCONF uses Python via ncclient, but not natively on Nexus. Ansible is not Python library.

Answer

Using NETCONF with Python

Answer

Using Ansible with Python modules

Answer

Writing Python scripts for EEM applets

Question 7

A network engineer wants to use Terraform to automate the creation of an Application Profile in ACI. Which provider should be used?

Accepted Answer

terraform-provider-aci. The terraform-provider-aci is the official Terraform provider for Cisco ACI. terraform-provider-nxos is for Nexus switches. The other options are not valid.

Answer

terraform-provider-apic

Answer

terraform-provider-nxos

Answer

terraform-provider-nexus

Question 8

An engineer wants to run a Python script on a Nexus switch without copying it to the bootflash. The script interacts with the switch's CLI and file system. Which feature allows this?

Accepted Answer

Guest shell. Guest shell provides a Linux environment on Nexus where Python scripts can run directly.

Answer

OnEX

Answer

NX-API REST

Answer

EEM with Python applets

Question 9

Which TWO are features of the Embedded Event Manager (EEM) with Python applets on Cisco NX-OS? (Choose two.)

Accepted Answer

EEM Python applets can execute CLI commands on the Nexus switch.. EEM with Python applets allows event-driven automation on-box. Python applets can run without external scripting, and they can react to events like syslog messages. EEM applets do not require an external server; they run on the switch. Python applets support libraries like cisco_nxapi, but EEM itself does not require a separate Python environment.

Answer

EEM Python applets require an external Python server.

Answer

EEM Python applets cannot use external libraries.

Answer

EEM Python applets can only run as root.

Question 10

Which two benefits does EVPN provide compared to traditional VPLS? (Choose two.)

Accepted Answer

Load balancing of traffic across multiple active paths. EVPN uses BGP to advertise MAC addresses and IP prefixes, enabling per-flow load balancing across multiple equal-cost paths via its all-active multi-homing capability. In contrast, traditional VPLS relies on a single active forwarder per site (using Spanning Tree Protocol or VPLS Multihoming), which prevents active-active load balancing and wastes bandwidth.

Answer

Simpler BGP configuration

Answer

Reduced MAC address learning

Answer

No need for MPLS

Question 11

Which THREE are valid characteristics of using Terraform for ACI automation? (Choose three.)

Accepted Answer

Terraform configuration files are written in HashiCorp Configuration Language (HCL).. Terraform uses a declarative approach, defining desired state. It manages the full lifecycle of infrastructure. It uses HCL for configuration, not JSON. Terraform state is used to track real-world resources. Terraform is not agent-based; it uses APIs.

Answer

Terraform follows an imperative approach where you specify steps to achieve configuration.

Answer

Terraform requires an agent to be installed on the APIC controller.

Question 12

Which THREE are correct about using Ansible with Cisco NX-OS? (Choose three.)

Accepted Answer

The cisco.nxos collection includes the nxos_vlan module.. The cisco.nxos collection includes modules like nxos_vlan, nxos_interface, nxos_bgp, and nxos_config. Playbooks are written in YAML. Ansible uses SSH (or NX-API) to connect, not a dedicated agent. 'nxos_facts' is a module for gathering facts.

Answer

Ansible requires an agent installed on the Nexus switch.

Answer

Ansible uses a proprietary protocol to communicate with Nexus switches.

Question 13

Which THREE statements are true regarding YANG models in the context of data center automation? (Choose three.)

Accepted Answer

YANG is a data modeling language used to define configuration and state data.. YANG models define data structures for network configuration and state. NETCONF uses XML-based encoding, while RESTCONF uses JSON or XML. OpenConfig provides vendor-neutral YANG models. YANG is a data modeling language, not a protocol.

Answer

YANG is a communication protocol like NETCONF.

Answer

OpenConfig YANG models are Cisco-proprietary.

Question 14

Which of the following is a requirement for VPC peer keepalive to function correctly?

Accepted Answer

Must be a Layer 3 interface with unique VRF. VPC peer keepalive requires a Layer 3 interface with a unique VRF to ensure that keepalive messages are sent over a dedicated, isolated path that is independent of the peer-link. This prevents the keepalive from being disrupted by issues on the peer-link and allows the VPC peers to detect failures even when the peer-link is down. The keepalive uses UDP port 3200 and must be routed through a separate VRF to avoid conflicts with the management or default routing tables.

Answer

Must use the same IP subnet as peer-link

Answer

Must be a direct Layer 2 connection

Answer

Must be in the same VLAN as peer-link

Question 15

Which technology provides at-rest encryption for disk drives in UCS servers?

Accepted Answer

SED. Self-encrypting drives (SED) provide at-rest encryption.

Answer

IPsec

Answer

FC-SP-2

Answer

SSL