350-601 Practice Test 35 — 15 Questions

Question 1

An engineer needs to connect a new server to an existing FC SAN. The server is located 50 km away from the data center. Which technology should be used to extend the FC SAN over this distance?

Accepted Answer

FCIP. FCIP (Fibre Channel over IP) is the correct choice because it encapsulates Fibre Channel frames inside TCP/IP packets, enabling the extension of FC SANs over long distances (beyond the 10 km limit of standard optics) by leveraging existing IP WAN infrastructure. This allows the 50 km connection while preserving native Fibre Channel semantics and fabric services.

Answer

iSCSI

Answer

FCoE

Answer

Direct FC connection with 10km optics

Question 2

A UCS administrator needs to deploy 20 identical servers with the same firmware, BIOS, and boot order. Which approach is the most efficient?

Accepted Answer

Create a service profile template and then generate service profiles from it.. Creating a service profile template and then generating service profiles from it is the most efficient approach because it allows you to define the firmware, BIOS, and boot order once in a reusable template, then automatically create multiple service profiles with unique identities (e.g., UUID, MAC, WWN) for each of the 20 identical servers. This leverages Cisco UCS Manager's built-in template-to-instance workflow, ensuring consistency and reducing manual effort.

Answer

Use a UUID suffix pool to auto-generate identities.

Answer

Use a Cisco UCS Central 'Gold' template to deploy the servers.

Answer

Create a service profile for each server manually.

Question 3

An engineer notices that a Fibre Channel link between two Cisco MDS 9000 series switches is flapping every few minutes. The interface counters show a high number of CRC errors. What is the most likely cause of this issue?

Accepted Answer

Faulty SFP or optical cable. CRC errors on a Fibre Channel link indicate physical-layer corruption of frames, typically caused by faulty optics, dirty or damaged fiber cables, or marginal signal integrity. Flapping occurs because the link repeatedly fails to maintain proper synchronization due to excessive bit errors, triggering port reset or re-initialization. A faulty SFP or optical cable directly introduces noise or attenuation that corrupts the data stream, leading to CRC errors and link instability.

Answer

NPV mode enabled on the switch

Answer

Incorrect zoning configuration

Answer

VSAN mismatch between switches

Question 4

Which three actions can be taken when a port security violation occurs? (Choose three.)

Accepted Answer

Shutdown. When a port security violation occurs, the switch can be configured to take one of three actions: shutdown, restrict, or protect. The shutdown action (A) immediately disables the port and places it in an errdisable state, which is the default behavior. This is correct because it provides the most secure response by completely blocking traffic from the violating MAC address.

Answer

Errdisable recovery

Answer

Log

Question 5

An engineer needs to deploy a new UCS C-Series standalone server in a remote branch without local IT staff. Which technology allows remote firmware upgrade and hardware monitoring without requiring a dedicated management IP?

Accepted Answer

Cisco Intersight. Cisco Intersight is a cloud-based management platform that provides out-of-band management for UCS C-Series standalone servers without requiring a dedicated management IP address. It uses a device connector embedded in the CIMC to establish a secure connection to the Intersight cloud, enabling remote firmware upgrades, hardware monitoring, and lifecycle management over the internet. This eliminates the need for a separate management network or local IT staff at the remote branch.

Answer

Cisco Integrated Management Controller (CIMC) GUI

Answer

UCS Manager

Answer

Data Center Network Manager (DCNM)

Question 6

Which THREE components are required to successfully use NETCONF for configuration automation on a Nexus 9000 switch?

Accepted Answer

SSH connectivity must be established to the switch. B is correct because NETCONF operates over SSH as its transport protocol (RFC 6242), so SSH connectivity to the switch is mandatory for establishing the NETCONF session. Without SSH, the NETCONF client cannot connect to the NETCONF server running on the Nexus 9000.

Answer

The NX-API must be enabled as a fallback

Answer

The switch must be running the NX-OS Essentials license

Question 7

A data center switch has DHCP snooping enabled globally. Which of the following is a best practice to ensure DHCP server legitimacy?

Accepted Answer

Configure the port connected to the DHCP server as trusted. Configuring the port connected to the DHCP server as trusted is a best practice because DHCP snooping treats all ports as untrusted by default. Only trusted ports are allowed to forward DHCP server messages (OFFER, ACK, NAK), preventing rogue DHCP server attacks. This ensures that only the legitimate DHCP server can assign IP addresses, maintaining network integrity.

Answer

Disable DHCP snooping on the DHCP server VLAN

Answer

Set the DHCP server IP address in the binding database

Answer

Enable DHCP snooping on all VLANs

Question 8

Your company integrates UCS B-Series blades with VMware vSphere using UCS Manager and vCenter. You have configured a UCS service profile with a boot policy that boots from SAN. The virtual infrastructure administrator reports that a new ESXi host (blade 6) fails to meet host profile compliance for the 'Boot Device' policy. The host profile requires the boot LUN to be set to 'VMware LUN' but the UCS boot policy uses a generic 'SAN Target' setting. The ESXi host boots and runs, but compliance checks fail. You cannot modify the host profile because it is managed by a separate team. Which action should you take to resolve the compliance failure while maintaining boot functionality?

Accepted Answer

Change the UCS boot policy to use the 'VMware LUN' target type and ensure the LUN is presented correctly. The host profile compliance failure is caused by the UCS boot policy using a generic 'SAN Target' type instead of the 'VMware LUN' target type. By changing the boot policy to 'VMware LUN' and ensuring the correct LUN is presented, the ESXi host will boot from the same LUN but now the boot device name will match what the host profile expects, resolving the compliance check without affecting boot functionality.

Answer

Create a new vCenter cluster with a different host profile

Answer

Use a local disk boot policy and install ESXi locally

Answer

Request the host profile to be updated to accept generic SAN targets

Question 9

An organization is deploying Cisco ACI in a brownfield data center. They have existing VLANs that need to be mapped to ACI EPGs. The network team notices that some VLANs are used across multiple tenants. How should the engineer design the VLAN pool to support overlapping VLANs?

Accepted Answer

Create separate VLAN pools per tenant, each containing the required VLANs.. In Cisco ACI, VLAN pools are scoped to a physical domain, and overlapping VLANs across tenants require separate VLAN pools per tenant. Each tenant's EPG is statically bound to its own VLAN pool, ensuring isolation and preventing VLAN conflicts. This design aligns with ACI's multi-tenant architecture where VLAN IDs must be unique within a domain but can be reused across different domains.

Answer

Configure the VLANs as part of the EPG static binding without a pool.

Answer

Create one VLAN pool per physical domain and assign tenants to that domain.

Answer

Create a global VLAN pool with all VLANs and assign it to all tenants.

Question 10

During a UCS firmware upgrade, the upgrade fails on a few servers in a chassis. The administrators notice that the management plane is still responsive, but the data plane is disrupted. What is the most likely cause?

Accepted Answer

The secondary Fabric Interconnect did not synchronize the firmware image before the upgrade.. The most likely cause is that the secondary Fabric Interconnect did not synchronize the firmware image before the upgrade. In a UCS domain, firmware upgrades are typically performed in a hitless manner by first upgrading the secondary Fabric Interconnect, which requires the firmware image to be synchronized from the primary. If synchronization fails, the secondary may boot with an incompatible or missing firmware, causing data plane disruption while the management plane remains responsive because the primary still handles management traffic.

Answer

The boot policy was changed during maintenance.

Answer

The server memory is exhausted due to high traffic.

Answer

The service profiles were not updated after the upgrade.

Question 11

A medium-sized enterprise has a Cisco UCS environment with two Fabric Interconnects (FIs) in a cluster. There are 10 blade servers, each with a VIC 1340 adapter. The SAN consists of two MDS 9148S switches in a VSAN for storage. Each server is configured with two vHBAs (primary and secondary) connecting to the SAN via the FIs. Recently, after a firmware upgrade on the MDS switches, several servers are unable to boot from SAN. The storage administrator confirms that the storage array LUNs are accessible from the MDS switches. The UCS administrator reports that the vHBAs show a 'link down' status on the FI. Which action should be taken to resolve the issue?

Accepted Answer

Verify the active zone set on the MDS switches and re-activate it if necessary.. The 'link down' status on the vHBAs indicates that the Fibre Channel fabric is not properly delivering the FLOGI (Fabric Login) response to the initiators. Since the storage LUNs are accessible from the MDS switches, the issue is likely that the active zone set was deactivated or not saved after the firmware upgrade, preventing the vHBAs from logging into the fabric. Re-activating the zone set on the MDS switches will re-establish the FC zones and allow the vHBAs to complete FLOGI and resume boot from SAN.

Answer

Reconfigure the vHBAs on the UCS Manager with new WWPNs.

Answer

Check the storage array LUN masking and re-apply LUN access.

Answer

Downgrade the MDS firmware to the previous version.

Question 12

A data center engineer is deploying a new application on Cisco UCS Manager. The application requires consistent low-latency access to storage. The engineer decides to use SAN boot from a Fibre Channel SAN. Which configuration change is necessary on the UCS service profile to enable SAN boot?

Accepted Answer

Assign a persistent WWPN to the vHBA. To enable SAN boot from a Fibre Channel SAN, the UCS service profile must assign a persistent WWPN to the vHBA. The WWPN is used by the Fibre Channel fabric to identify the initiator and to zone the storage LUNs; a persistent WWPN ensures that after a server reboot or vHBA reconfiguration, the same WWPN is presented to the SAN, allowing the boot LUN to remain accessible. Without a persistent WWPN, the vHBA would use a dynamically generated WWPN, which would break the SAN zoning and boot path.

Answer

Enable VIF (Virtual Interface) on the vHBA

Answer

Configure a QoS policy for the vHBA

Answer

Set the vNIC to use dynamic MAC address

Question 13

A large enterprise is using Cisco UCS Manager to manage a chassis with 8 B-Series blades. The environment uses a combination of Ethernet and Fibre Channel traffic. The UCS fabric interconnect (FI) is configured in end-host mode with two uplinks to the core network. Recently, the engineering team deployed a new service profile for a high-performance computing workload that requires 40Gbps Ethernet per vNIC and 16Gbps Fibre Channel per vHBA. The server has two vNICs and two vHBAs. After deployment, the server's OS shows only 10Gbps connectivity on each vNIC. The engineer checks UCS Manager and sees that the vNIC templates are set to '10 Gbps' and the vHBA templates are set to '16 Gbps' but the actual link speed for vNICs is only 10Gbps. The fabric interconnect ports are configured as 40Gbps uplinks. The engineer has verified that the server adapter supports 40Gbps. What is the most likely cause of the speed mismatch?

Accepted Answer

The vNIC template used in the service profile specifies a requested speed of '10 Gbps' instead of '40 Gbps'.. The vNIC template in the service profile defines the requested speed for the virtual NIC. If the template is set to '10 Gbps', the UCS Manager will allocate only 10 Gbps of bandwidth per vNIC, regardless of the physical adapter's capability or the uplink speed. Since the engineer verified the adapter supports 40 Gbps and the uplinks are 40 Gbps, the mismatch is directly caused by the template configuration.

Answer

The fabric interconnect uplinks are configured as 40Gbps, but the port channel is not configured correctly, causing speed negotiation to fail.

Answer

The server's adapter policy is set to 'Windows' mode, which limits Ethernet speeds to 10Gbps.

Answer

The QoS policy applied to the vNIC limits the bandwidth to 10Gbps.

Question 14

A network engineer is troubleshooting CoPP drops on a Cisco Nexus 9000 switch. The 'show control-plane' output indicates that packets are being dropped due to 'CoPP' on the 'default' control-plane class. Which action is most likely to resolve the issue without affecting routing protocol stability?

Accepted Answer

Increase the policer rate for the 'default' class in the CoPP policy.. The 'default' class in a CoPP policy catches all control-plane traffic not explicitly matched by higher-priority classes. Drops in this class indicate that the aggregate policer rate for unmatched traffic is too low. Increasing the policer rate for the 'default' class allows more legitimate control-plane packets (e.g., ARP, BFD, or management traffic) to pass without impacting the dedicated policers for critical protocols like OSPF or BGP, thus preserving routing stability.

Answer

Disable CoPP globally to allow all control-plane traffic.

Answer

Modify the class-map to reclassify the dropped packets to a higher priority class.

Answer

Increase the ingress buffer size on the control-plane interface.

Question 15

A new storage administrator is configuring LUN masking on a Cisco MDS switch. The storage array presents two LUNs to the fabric with the same LUN ID (0) but to different target ports. The administrator wants to ensure that a specific host can access both LUNs. The host is connected to a single HBA port. The host will see both target ports in the same zone. After zoning, the host discovers both target ports but only sees the first LUN. The show flogi database shows the host's pWWN with two FC IDs assigned. What is the most likely issue?

Accepted Answer

The target LUNs are not masked to the host's pWWN. The host discovers both target ports via FLOGI but only sees the first LUN because the storage array has not been configured to mask the LUNs to the host's pWWN. LUN masking is an array-side access control that determines which initiator WWNs can see which LUNs; without it, the array defaults to presenting only the first LUN (LUN 0) to any initiator. The zone is correctly configured (both target ports are in the same zone and the host sees them), and the LUN ID conflict is irrelevant because the LUNs are on different target ports, so they can share the same LUN ID without conflict.

Answer

The zone is misconfigured

Answer

The host is not configured for multipathing

Answer

There is a LUN ID conflict