350-601 Practice Test 26 — 15 Questions

Question 1

A data center engineer is configuring 802.1X authentication on Cisco Nexus switches for wired endpoints. The requirement is to allow traffic on the port even if no EAPOL packet is received from the endpoint (e.g., a printer). Which authentication method should be used?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

MAC Authentication Bypass (MAB). MAC Authentication Bypass (MAB) is the correct method because it allows a port to authenticate endpoints that do not send EAPOL frames, such as printers or other legacy devices. When no EAPOL is received within a configurable timeout, the switch falls back to using the source MAC address of the first frame as the authentication credential, sending it to the RADIUS server for verification. This satisfies the requirement to permit traffic even without 802.1X supplicant capability.

Answer

802.1X using RADIUS server

Answer

Port security with sticky MAC addresses

Answer

Local authentication with a predefined list of users

Question 2

Which feature allows a Fibre Channel switch to use multiple links between two switches as a single logical link?

Accepted Answer

SAN port channel. SAN port channel (C) is correct because it allows multiple physical Fibre Channel links between two switches to be aggregated into a single logical link, providing load balancing and redundancy. This is achieved by bundling up to 16 physical ISLs into one logical interface, using a proprietary hashing algorithm to distribute frames across the member links while maintaining in-order delivery.

Answer

NPIV

Answer

NPV

Answer

SPAN

Answer

FCIP

Question 3

Refer to the exhibit. What is the most likely cause of the NVE interface being down?

Accepted Answer

The source interface is not configured.. The NVE (Network Virtualization Edge) interface requires a valid source interface (typically a loopback) to establish VXLAN tunnels. If the source interface is not configured under the NVE interface, the interface remains in a down state because it cannot form VXLAN overlay adjacencies. This is the most common cause of an NVE interface being down in Cisco NX-OS.

Answer

The VXLAN destination UDP port is incorrect.

Answer

The overlay VLAN is not configured.

Answer

The VNI list is empty.

Question 4

An engineer is configuring FCoE on a Cisco MDS switch and needs to ensure that the switch can communicate with FCoE-enabled servers. Which FCoE port type should be used on the switch to connect to a server's CNA?

Accepted Answer

VF_port. A VF_port (Virtual Fabric port) on an FCoE switch connects to a VN_port on a server's CNA. The VF_port is analogous to an F_port in traditional Fibre Channel, providing fabric services to the attached N_port. Therefore, to connect to a server's CNA, the switch port must be configured as a VF_port.

Answer

VE_port

Answer

NP_port

Answer

VN_port

Question 5

Which THREE factors should be considered when determining the number of upstream Ethernet uplinks from a UCS Fabric Interconnect to the core network? (Choose THREE.)

Accepted Answer

The number of vNICs per service profile and their bandwidth limits.. Option C is correct because the aggregate bandwidth demand of the uplinks is driven by how many vNICs each service profile presents and the bandwidth limits (QoS/bandwidth caps) applied to those vNICs, which together determine the worst-case traffic that can be pushed northbound. Option D is correct because the total expected traffic from the server blades — the actual workload throughput that must reach the core — is the primary capacity input for sizing uplink count and speed. Option E is correct because redundancy and high-availability requirements dictate additional uplinks and their distribution across the two Fabric Interconnects (and across separate upstream switches) so that a single link or switch failure does not cause an outage. Option A is not a sizing factor: the number of VLANs is a logical segmentation concern and does not by itself change required uplink bandwidth. Option B is not relevant here: CPU oversubscription ratio concerns compute/blade resources, not the Ethernet uplink bandwidth from the Fabric Interconnect to the core.

Answer

Number of VLANs defined on the Fabric Interconnect.

Answer

Server CPU oversubscription ratio.

Question 6

During FCoE initialization, which protocol is used by a CNA to discover FCoE-capable switches and establish a virtual link?

Accepted Answer

FIP. FIP (FCoE Initialization Protocol) is used by a CNA to discover FCoE-capable switches and establish a virtual link. FIP handles VLAN discovery, FCF discovery, and virtual link establishment. It is the control protocol for FCoE initialization.

Answer

LLDP

Answer

DCBX

Answer

ARP

Question 7

A storage administrator is configuring a new Fibre Channel fabric using Cisco MDS switches. The edge switches must connect to the core without participating in the full routing domain to conserve domain IDs. Which Fibre Channel feature should be configured on the edge switches?

Accepted Answer

NPV mode. NPV (N_Port Virtualization) mode allows an edge switch to connect to the core without consuming a domain ID, because the edge switch does not participate in the fabric's routing domain — it acts as a host to the core. This conserves domain IDs and simplifies edge switch configuration, which is exactly the requirement stated.

Answer

PortChannels

Answer

VSANs

Answer

EISL trunking

Question 8

A Nexus switch is configured with port security. Which violation action will cause the switch to shut down the interface when a security violation occurs?

Accepted Answer

shutdown. The violation action 'shutdown' will cause the switch to shut down the interface when a port security violation occurs. In Cisco Nexus switches, port security violation actions include protect, restrict, and shutdown. The shutdown action places the interface in an err-disabled state, requiring manual intervention to re-enable it. This is the most severe action and is used when maximum security is required.

Answer

restrict

Answer

log

Answer

protect

Question 9

A storage administrator wants to provide a volume that appears larger than its actual physical capacity, allocating storage blocks only as data is written. Which storage provisioning method is being described?

Accepted Answer

Thin provisioning. Thin provisioning allocates storage capacity on demand, presenting a logical volume larger than the physical capacity and only consuming physical blocks when data is written. This allows over-subscription of storage, improving utilization. The description matches thin provisioning exactly.

Answer

Snapshot

Answer

Thick provisioning

Answer

RAID-5

Question 10

A company is deploying UCS C-Series rack servers and wants to integrate them into UCS Manager for centralized management. The servers are currently managed individually via CIMC. Which integration mode must be configured on the C-Series servers to allow UCS Manager to discover and manage them?

Accepted Answer

UCS Managed mode. To integrate standalone C-series rack servers into UCS Manager for centralized management, the servers must be configured in UCS Managed mode (also called UCSM integration mode). In this mode, the CIMC is repurposed so UCS Manager can discover, inventory, and manage the server through the Fabric Interconnects.

Answer

IMC Supervisor mode

Answer

Direct connect mode

Answer

Standalone mode

Question 11

Which statement describes how firmware management works for UCS B-Series blade servers?

Accepted Answer

Firmware is managed through host firmware packages in service profiles. In Cisco UCS Manager, firmware for B-Series blade servers is managed through host firmware packages that are included in service profiles. These packages define the exact firmware versions for components like the BIOS, adapter, storage controller, and CIMC, and are automatically applied to the blade when the service profile is associated. This ensures consistent firmware levels across blades without manual intervention on each server.

Answer

Firmware must be manually upgraded on each blade individually

Answer

Firmware is automatically updated via Cisco TAC

Answer

Firmware is stored on the fabric interconnect and loaded directly to the server

Question 12

In a HyperFlex cluster configured with replication factor 2 (RF2), a storage node fails. What is the impact on data availability?

Accepted Answer

Data remains available, but the cluster is degraded and cannot tolerate another node failure until repaired.. With replication factor 2, each data block has two replicas on separate nodes. When one node fails, the surviving replica keeps data available, but the cluster is in a degraded state and cannot survive a second simultaneous node failure until the failed node is repaired or replaced and data is re-replicated.

Answer

Data is lost because only one copy remains.

Answer

The cluster stops serving data until the failed node is replaced.

Answer

The cluster automatically switches to RF3 to maintain redundancy.

Question 13

In a Cisco UCS environment, which component provides the Fibre Channel connectivity to the SAN switches when using FCoE?

Accepted Answer

UCS Fabric Interconnect. In a Cisco UCS environment, the Fabric Interconnect (FI) is the component that provides Fibre Channel connectivity to SAN switches when using FCoE. The FI integrates both Ethernet and Fibre Channel traffic, performing FCoE encapsulation and forwarding the Fibre Channel frames to the SAN via its native Fibre Channel uplink ports. This allows the UCS domain to connect directly to Fibre Channel SAN fabrics without requiring external FCoE-capable switches.

Answer

IOM (I/O Module)

Answer

Cisco VIC adapter

Answer

UCS Manager

Question 14

In Cisco TrustSec, what is used to tag traffic based on identity or group membership?

Accepted Answer

Security Group Tag. Cisco TrustSec uses Security Group Tags (SGTs) to tag traffic based on identity or group membership. SGTs are assigned to users or devices and are carried in the packet header (via Cisco Metadata or inline tagging). Network devices enforce policies based on these tags, enabling scalable segmentation without relying on IP addresses or VLANs.

Answer

VLAN ID

Answer

MAC address

Answer

IP address

Question 15

An administrator wants to use the APIC REST API to create a new Tenant in ACI. Which object in the Management Information Tree (MIT) should be the target of the POST request?

Accepted Answer

fvTenant. The Tenant object is at the top of the MIT hierarchy under root. The API endpoint for tenants is typically /api/mo/uni/tn-[name].json. EPG, BD, and AP are child objects.

Answer

fvEp

Answer

fvAp

Answer

fvBD