350-601 Practice Test 2 — 25 Questions

Question 1

A data center engineer is deploying a new application on Cisco UCS Manager. The application requires consistent low-latency access to storage. The engineer decides to use SAN boot from a Fibre Channel SAN. Which configuration change is necessary on the UCS service profile to enable SAN boot?

Accepted Answer

Assign a persistent WWPN to the vHBA. To enable SAN boot from a Fibre Channel SAN, the UCS service profile must assign a persistent WWPN to the vHBA. The WWPN is used by the Fibre Channel fabric to identify the initiator and to zone the storage LUNs; a persistent WWPN ensures that after a server reboot or vHBA reconfiguration, the same WWPN is presented to the SAN, allowing the boot LUN to remain accessible. Without a persistent WWPN, the vHBA would use a dynamically generated WWPN, which would break the SAN zoning and boot path.

Answer

Enable VIF (Virtual Interface) on the vHBA

Answer

Configure a QoS policy for the vHBA

Answer

Set the vNIC to use dynamic MAC address

Question 2

Which TWO are valid methods to configure a Cisco UCS service profile for stateless computing? (Choose two.)

Accepted Answer

Create a service profile from a template. Option A is correct because creating a service profile from a template is a core method for stateless computing in Cisco UCS. Stateless computing abstracts hardware identity (e.g., WWPNs, MAC addresses, UUIDs) from physical blades, allowing a service profile to be applied to any compatible blade without reconfiguration. Templates enable rapid, consistent deployment of these stateless profiles across multiple servers.

Answer

Use boot from SAN to store OS images

Answer

Assign persistent WWPNs to vHBAs

Answer

Configure local storage on the blade

Question 3

A data center engineer notices that a UCS B-Series blade server is failing to boot from a SAN LUN that is correctly mapped to the server's WWPN. The SAN switch shows that the LUN is accessible and the zone is configured correctly. The UCS Manager shows the server's vNIC is associated with a vHBA that has the correct WWPN, but the server's BIOS does not list the Fibre Channel boot target. Which configuration is most likely missing?

Accepted Answer

The boot policy is not defined or not attached to the service profile.. The boot policy defines the boot order and parameters (such as the SAN LUN target WWPN and LUN ID) for the server. If the boot policy is not defined or not attached to the service profile, the UCS Manager will not program the BIOS with the Fibre Channel boot target information, even though the SAN zoning and vHBA WWPN are correct. Without this policy, the server's BIOS has no instruction to attempt a SAN boot, resulting in the failure described.

Answer

The SAN connectivity policy is missing the Fibre Channel uplink pinning.

Answer

The vNIC/vHBA placement policy is incorrectly set to 'Express' mode.

Answer

A QoS policy is not applied to the vHBA.

Question 4

Refer to the exhibit. An administrator updates template-B but its associated profile SP2 shows 'unassigned'. The administrator wants SP2 to reflect the changes. What should be done first?

Accepted Answer

Associate SP2 with template-B using the 'bind' operation. In Cisco UCS Manager, a service profile (SP2) must be explicitly bound to a template (template-B) to inherit updates. The 'bind' operation associates the profile with the template, allowing changes made to the template to propagate to the profile. Simply disabling and re-enabling the template or waiting for automatic association does not establish this binding; the profile remains 'unassigned' until it is bound.

Answer

Disable and re-enable template-B

Answer

Wait for the automatic association to occur

Answer

Rebind all profiles to template-B

Question 5

Refer to the exhibit. An engineer applies this QoS policy to a Cisco Nexus 9000 switch in a data center. After applying the policy, storage traffic (iSCSI) is experiencing high latency and occasional drops. The engineer verifies that the iSCSI traffic is not matching the 'BulkData' class. What is the most likely cause of the issue?

Accepted Answer

The policy-map does not specify a priority queue for latency-sensitive traffic.. The correct answer is A because iSCSI is a latency-sensitive storage protocol that requires a strict priority queue to ensure low latency and minimal jitter. Without a priority queue configured in the policy-map, iSCSI traffic competes with other traffic classes on a best-effort basis, leading to high latency and drops even if it is not matching the 'BulkData' class.

Answer

The policy-map is applied at the system level, but iSCSI traffic is not classified under any class-map.

Answer

The bandwidth percent for class-default is too low, causing iSCSI to be starved.

Answer

The class-map 'BulkData' does not match the correct traffic because the match statement uses qos-group instead of dscp.

Question 6

A network engineer is troubleshooting a VXLAN EVPN problem where some endpoints are not reachable. The output of 'show bgp l2vpn evpn' shows Type-3 routes but no Type-2 routes for a specific VNI. What should the engineer check?

Accepted Answer

The VLAN corresponding to the VNI has no active ports.. Type-3 routes (IMET routes) are used for BUM traffic forwarding and are advertised when the VNI is configured under the NVE interface, even if no endpoints are active. Type-2 routes (MAC/IP advertisement routes) are only generated when the switch learns a MAC address on a VLAN associated with that VNI. If Type-3 routes exist but Type-2 routes are missing, the VNI is correctly configured for the overlay, but no active ports in the corresponding VLAN are learning MAC addresses, preventing Type-2 route generation.

Answer

The route-target import/export is misconfigured.

Answer

BGP session is not established.

Answer

The VNI is not configured under the NVE interface.

Question 7

A financial services firm has deployed Cisco UCS C-Series rack servers running VMware vSphere 7.0. They use Cisco Intersight for management. Recently, a critical application server (Server-A) became unresponsive. The Intersight dashboard shows the server's health status as 'Warning' with a firmware compliance alert: the server's Cisco Integrated Management Controller (CIMC) firmware version is 4.0(1a), while the Intersight firmware baseline is 4.2(1c). The server is running ESXi 7.0u2 on a local datastore. The storage is provided by a Cisco MDS switch via Fibre Channel. The server has two 10GbE uplinks to the fabric interconnect. The engineer notices that the vCenter Server cannot communicate with Server-A, and all VMs on that host are isolated. The engineer suspects the issue is related to the firmware mismatch. What is the most appropriate first step to resolve this issue while minimizing downtime?

Accepted Answer

Upgrade the CIMC firmware on Server-A from 4.0(1a) to 4.2(1c) using Intersight's firmware update capability.. The CIMC firmware mismatch (4.0(1a) vs. baseline 4.2(1c)) is a known cause of management-plane instability in Cisco UCS C-Series servers managed by Intersight. Upgrading the CIMC firmware to match the Intersight baseline using Intersight's built-in firmware update capability directly addresses the root cause, restoring proper communication between the server, Intersight, and vCenter, while minimizing downtime by avoiding disruptive OS-level changes.

Answer

Check vCenter logs to determine why communication failed.

Answer

Reinstall ESXi on Server-A to ensure a clean operating system.

Answer

Change the Intersight firmware baseline to match the current CIMC version (4.0(1a)).

Question 8

A large enterprise is using Cisco UCS Manager to manage a chassis with 8 B-Series blades. The environment uses a combination of Ethernet and Fibre Channel traffic. The UCS fabric interconnect (FI) is configured in end-host mode with two uplinks to the core network. Recently, the engineering team deployed a new service profile for a high-performance computing workload that requires 40Gbps Ethernet per vNIC and 16Gbps Fibre Channel per vHBA. The server has two vNICs and two vHBAs. After deployment, the server's OS shows only 10Gbps connectivity on each vNIC. The engineer checks UCS Manager and sees that the vNIC templates are set to '10 Gbps' and the vHBA templates are set to '16 Gbps' but the actual link speed for vNICs is only 10Gbps. The fabric interconnect ports are configured as 40Gbps uplinks. The engineer has verified that the server adapter supports 40Gbps. What is the most likely cause of the speed mismatch?

Accepted Answer

The vNIC template used in the service profile specifies a requested speed of '10 Gbps' instead of '40 Gbps'.. The vNIC template in the service profile defines the requested speed for the virtual NIC. If the template is set to '10 Gbps', the UCS Manager will allocate only 10 Gbps of bandwidth per vNIC, regardless of the physical adapter's capability or the uplink speed. Since the engineer verified the adapter supports 40 Gbps and the uplinks are 40 Gbps, the mismatch is directly caused by the template configuration.

Answer

The fabric interconnect uplinks are configured as 40Gbps, but the port channel is not configured correctly, causing speed negotiation to fail.

Answer

The server's adapter policy is set to 'Windows' mode, which limits Ethernet speeds to 10Gbps.

Answer

The QoS policy applied to the vNIC limits the bandwidth to 10Gbps.

Question 9

A company is deploying FCoE in their data center. The design includes a Cisco Nexus 9000 switch with FEX modules. The storage team insists on using dedicated FCoE VLANs. Which best practice should be followed to ensure lossless behavior for FCoE traffic?

Accepted Answer

Enable PFC on the switch for the FCoE VLAN. Option D is correct because FCoE requires lossless transport to prevent frame drops that could corrupt Fibre Channel frames. Priority Flow Control (PFC), defined in IEEE 802.1Qbb, enables pause frames on a per-priority basis, allowing the FCoE VLAN to be configured with a dedicated priority class that receives no-drop treatment. On Cisco Nexus 9000 switches, this is achieved by enabling PFC on the specific VLAN used for FCoE traffic, ensuring lossless behavior without affecting other traffic classes.

Answer

Configure traffic shaping on FCoE interfaces

Answer

Use the same VLAN for FCoE and IP traffic to reduce VLAN count

Answer

Disable flow control on all interfaces

Question 10

Which THREE statements about Cisco UCS Manager automation using XML API are correct? (Choose three.)

Accepted Answer

Operations can be made idempotent by using the 'dn' (distinguished name) to specify the exact object.. Option A is correct because the Cisco UCS Manager XML API allows operations to be idempotent by using the 'dn' (distinguished name) attribute to target a specific managed object. When you include the 'dn' in an XML request, the operation applies only to that exact object, so repeating the same request produces the same result without side effects. This is a key design principle of the management information model (MIT) that ensures predictable and safe automation.

Answer

The API uses SNMP for configuration changes.

Answer

The UCS Manager XML API uses RESTful JSON format.

Question 11

A company has two Cisco MDS 9700 switches in a dual-fabric SAN. Each fabric has its own set of storage arrays and hosts. The company wants to enable selective communication between specific devices in Fabric A and Fabric B without merging the fabrics. Which Cisco technology should be used?

Accepted Answer

IVR. Cisco IVR (Inter-VSAN Routing) allows selective communication between devices in different VSANs without merging the fabrics. In this dual-fabric SAN scenario, IVR enables specific hosts in Fabric A to communicate with specific storage arrays in Fabric B while keeping the VSANs and fabrics logically isolated, preserving fault domains and administrative boundaries.

Answer

FCIP

Answer

NPV

Answer

Port channels

Question 12

In an ACI fabric, an EPG is configured with a contract that provides a service to another EPG. The contract has a filter for TCP port 80. Which component defines the directionality of the communication between the provider and consumer EPG?

Accepted Answer

The provider and consumer labels in the contract. In Cisco ACI, the provider and consumer labels in the contract define the directionality of communication. The provider EPG offers a service, and the consumer EPG initiates the request; the contract's provider/consumer relationship determines which EPG can start the conversation and in which direction the filter (e.g., TCP port 80) applies. This is fundamental to ACI's policy model, where the contract is unidirectional from consumer to provider by default.

Answer

The filter direction specified in the contract

Answer

The BD subnets

Answer

The subject of the contract

Question 13

Which VXLAN component is responsible for encapsulating and decapsulating Ethernet frames into UDP packets?

Accepted Answer

VTEP. The VTEP (VXLAN Tunnel Endpoint) is the device that performs encapsulation and decapsulation of Ethernet frames into UDP packets. It is the edge component in a VXLAN network that maps tenant traffic to VXLAN segments and handles the actual tunneling by adding the VXLAN header (including VNI) and outer UDP/IP headers.

Answer

VNI

Answer

VXLAN tunnel

Answer

VXLAN gateway

Question 14

Which statement about RSTP (802.1w) is true?

Accepted Answer

RSTP reduces convergence time by using a proposal/agreement handshake. RSTP (802.1w) significantly reduces convergence time compared to legacy STP by using a proactive proposal/agreement handshake mechanism. Instead of relying on timers (like STP's 30-50 second convergence), RSTP switches immediately negotiate port roles and transition to forwarding by exchanging proposal and agreement BPDUs, enabling sub-second convergence in a properly designed network.

Answer

RSTP uses a timer-based convergence similar to STP

Answer

RSTP requires explicit configuration of edge ports to prevent loops

Answer

RSTP elects the root bridge based on the highest MAC address

Question 15

Which NX-OS command is used to display the consistency status of Virtual Port Channel (vPC) parameters across both vPC peers?

Accepted Answer

show vpc consistency-parameters. Option D is correct because the 'show vpc consistency-parameters' command is specifically designed to verify that all required VPC configuration parameters (such as allowed VLANs, STP settings, and port-channel modes) are identical on both VPC peers. Inconsistent parameters can cause VPC traffic disruption or failover issues, and this command provides a detailed per-interface or global consistency check.

Answer

show vpc peer-keepalive

Answer

show vpc brief

Answer

show running-config vpc

Question 16

Which NX-OS command is used to display the current OSPF neighbor states?

Accepted Answer

show ip ospf neighbors. The 'show ip ospf neighbors' command is the correct NX-OS command to display the current OSPF neighbor states, including the neighbor ID, interface, state (e.g., FULL, 2WAY, DOWN), and adjacency details. This command directly queries the OSPF process for the neighbor state machine, which is essential for verifying OSPF adjacency formation and troubleshooting Layer 3 connectivity.

Answer

show ip route ospf

Answer

show ospf database

Answer

show ip ospf interface

Question 17

Which VXLAN component is responsible for encapsulating and decapsulating Ethernet frames into UDP packets for transport over the IP network?

Accepted Answer

VTEP. The VXLAN Tunnel Endpoint (VTEP) is the component responsible for performing encapsulation and decapsulation of Ethernet frames into UDP packets for transport over the IP network. It sits at the edge of the VXLAN overlay and maps tenant traffic to VXLAN segments by adding a VXLAN header (including the VNI) and an outer UDP/IP header. This process allows Layer 2 frames to traverse a Layer 3 underlay network.

Answer

VXLAN Gateway

Answer

VXLAN Tunnel

Answer

VNI

Question 18

In a spine-leaf architecture using eBGP, which of the following is the recommended BGP configuration for the spine switches?

Accepted Answer

Unique ASN for each spine switch. In eBGP-based spine-leaf architectures, each spine switch should use a unique ASN to enable BGP’s loop prevention mechanism (the AS_PATH attribute). This ensures that leaf switches can detect and discard routes received from two different spines that originated from the same leaf, preventing routing loops and allowing load balancing across multiple spines. A unique ASN per spine is the recommended design per Cisco’s best practices for data center fabrics.

Answer

No BGP; use OSPF instead

Answer

Single ASN for all spines

Answer

Same ASN as leaves

Question 19

Which MST configuration parameter must match across all switches in the same MST region?

Accepted Answer

Region name, revision, and VLAN mapping. In MST (Multiple Spanning Tree) protocol, switches in the same MST region must share the same region name, revision number, and VLAN-to-instance mapping. These parameters define the region boundary; if any differ, switches will treat each other as being in different regions, breaking MST interoperability and causing them to run separate spanning trees (e.g., PVST+).

Answer

Port cost

Answer

Root bridge

Answer

Bridge priority

Question 20

A network engineer is configuring OSPF on a Nexus switch. To ensure fast convergence in case of a link failure, which OSPF feature should be enabled?

Accepted Answer

OSPF Fast Hello. OSPF Fast Hello (B) is the correct feature to enable for fast convergence on a Nexus switch because it reduces the dead interval to less than one second by sending Hello packets at sub-second intervals (e.g., every 333 ms for a 1-second dead interval). This allows OSPF neighbors to detect a link failure much faster than the default 40-second dead interval on broadcast networks, triggering quicker SPF recalculation and route convergence.

Answer

OSPF authentication

Answer

OSPF stub area

Answer

OSPF route summarization