350-601 Practice Test 36 — 15 Questions

Question 1

A network engineer is planning a VXLAN EVPN fabric. Which two statements about VXLAN Network Identifiers (VNIs) are correct? (Choose two.)

Accepted Answer

VXLAN encapsulates Layer 2 frames in UDP packets. Option A is correct because VXLAN is a MAC-in-UDP encapsulation that carries original Layer 2 Ethernet frames inside UDP datagrams, typically destined to UDP port 4789. Option C is correct because the VXLAN header contains a 24-bit VNI field, which allows up to 16,777,216 unique segments, far exceeding traditional VLAN limits. Option B is incorrect because VNI values range from 1 to 16,777,215, not 1 to 4096; 4096 is the VLAN range limit. Option D is incorrect because VXLAN uses UDP, not TCP, for encapsulation. Option E is incorrect because a VNI identifies a Layer 2 segment (or an EVPN bridge domain) and is not used only for Layer 3 routing.

Answer

VNI values range from 1 to 4096

Answer

VXLAN uses TCP for encapsulation

Answer

VNI is used only for Layer 3 routing

Question 2

A developer wants to run a Python script directly on a Nexus switch to automate local operations. Which feature allows executing a Python script in a Linux environment on the switch?

Accepted Answer

Guest Shell. Guest Shell provides a secure Linux environment on Nexus switches where Python scripts can run. EEM with Python applets runs scripts triggered by events. OnEX is not a standard feature. NX-API is for remote API access.

Answer

NX-API

Answer

EEM with Python applet

Answer

OnEX

Question 3

A Cisco MDS switch is configured with a VSAN and the administrator needs to assign a Fibre Channel port to this VSAN. Which command should be used in interface configuration mode to assign the port to VSAN 10?

Accepted Answer

switchport vsan 10. On Cisco MDS switches, to assign a Fibre Channel interface to a VSAN, you enter interface configuration mode and use the command 'switchport vsan <vsan-id>'. This command sets the VSAN membership for that port. The 'vsan database' command is used in global configuration mode to create VSANs and assign interfaces, but the question specifies interface configuration mode.

Answer

vsan database vsan 10

Answer

switchport mode vsan 10

Answer

vsan 10

Question 4

An engineer is troubleshooting high CPU utilization on a Nexus 7700 switch. The output of 'show process cpu' shows high usage from the 'netstack' process. Which action should the engineer take to identify the cause?

Accepted Answer

Use 'show system internal netstack stats'.. The 'netstack' process handles network stack operations, including packet processing and forwarding. The 'show system internal netstack stats' command provides detailed internal statistics about the netstack process, such as packet drops, buffer usage, and error counters, which help pinpoint the root cause of high CPU utilization.

Answer

Enable 'feature netstack' to get more details.

Answer

Reboot the switch to clear the process.

Answer

Check for broadcast storms using 'show interface'.

Question 5

A data center switch is experiencing high CPU due to excessive BGP updates. Which action can mitigate this without affecting legitimate BGP traffic?

Accepted Answer

Apply a CoPP policy that rate-limits BGP traffic. Control Plane Policing (CoPP) protects the control plane by rate-limiting specific traffic classes. Applying a CoPP policy that rate-limits BGP traffic (option A) reduces CPU load from excessive BGP updates while still allowing legitimate BGP sessions to function, as the rate-limit only drops packets exceeding a configured threshold. This preserves BGP neighbor reachability and route exchange, unlike dropping all BGP traffic.

Answer

Apply a CoPP policy that drops all BGP traffic

Answer

Disable BGP route filtering

Answer

Increase BGP timers globally

Question 6

What is the primary purpose of Cisco UCS service profiles?

Accepted Answer

To enable hardware abstraction and stateless computing. Service profiles enable hardware abstraction, allowing blade or rack server replacement without reconfiguration by defining compute, network, and storage identities in software.

Answer

To manage interconnections between Fabric Interconnects

Answer

To monitor environmental sensors in the chassis

Answer

To provide firmware management for all chassis components

Question 7

A UCS Central administrator is creating a global service profile policy that applies to multiple UCS domains. The policy must include boot order settings. What is the recommended approach to ensure consistency across domains?

Accepted Answer

Use UCS Central to create a global boot policy and assign it to service profiles. UCS Central allows creation of global policies that are applied to service profiles in multiple domains, ensuring consistency.

Answer

Rely on default boot policy

Answer

Define the boot order directly in the service profile template

Answer

Create a local boot policy in each UCS domain

Question 8

During a UCS service profile configuration, an engineer needs to specify that the server should boot from a SAN LUN. Which boot policy type should be configured?

Accepted Answer

SAN boot policy. A SAN boot policy specifies the WWPN of the target and LUN ID to boot from a SAN LUN.

Answer

Local disk boot policy

Answer

PXE boot policy

Answer

Virtual media boot policy

Question 9

A storage administrator wants to isolate two Fibre Channel fabrics on the same physical switch infrastructure. Which technology should be used to achieve this isolation similar to VLANs in Ethernet?

Accepted Answer

VSANs. VSANs (Virtual SANs) partition a physical Fibre Channel fabric into logically isolated fabrics, analogous to VLANs in Ethernet. Each VSAN has its own fabric services, zoning, and domain IDs, providing true isolation on shared hardware. Zoning, PortChannels, and NPV do not create separate fabrics.

Answer

PortChannels

Answer

Zoning

Answer

NPV

Question 10

During a SAN migration, an engineer connects new storage to an existing MDS switch. The new storage array is configured with WWPNs that were previously used by decommissioned servers. After zoning is updated, some servers fail to see the correct LUNs. What is the most likely cause?

Accepted Answer

Duplicate WWPNs exist in the fabric, causing device login conflicts.. The new storage array is configured with WWPNs that were previously used by decommissioned servers. When these WWPNs are introduced into the fabric, the switch detects duplicate WWPNs because the fabric name server still holds the old entries (or the devices are still logged in). This causes login conflicts, preventing the servers from correctly discovering the LUNs. The correct answer is B.

Answer

The NPV feature is enabled on the switch causing proxy login issues.

Answer

The new storage is not in the same VSAN as the servers.

Answer

The switch is running an older firmware that does not support the new storage.

Question 11

An engineer is designing an ACI fabric and needs to provide connectivity to an external Layer 3 network. Which construct must be configured to achieve this?

Accepted Answer

L3Out. To connect an ACI fabric to an external Layer 3 network, you must configure an L3Out. An L3Out defines the external routed connectivity by associating a VRF with external interfaces, routing protocols (e.g., OSPF, BGP, EIGRP), and subnets that are advertised into or from the fabric. This construct allows ACI to exchange routes with the external Layer 3 domain.

Answer

VMM domain

Answer

EPG

Answer

VXLAN tunnel

Question 12

What is the purpose of FIP (FCoE Initialization Protocol) in an FCoE network?

Accepted Answer

To discover FCoE-capable devices and establish virtual links. FIP is used to discover and initialize FCoE devices and establish virtual links before FCoE data frames can be sent.

Answer

To provide flow control for FCoE traffic

Answer

To negotiate DCB parameters

Answer

To encapsulate FC frames into Ethernet frames

Question 13

A network engineer is troubleshooting a VXLAN EVPN problem where some endpoints are not reachable. The output of 'show bgp l2vpn evpn' shows Type-3 routes but no Type-2 routes for a specific VNI. What should the engineer check?

Accepted Answer

The VLAN corresponding to the VNI has no active ports.. Type-3 routes (IMET routes) are used for BUM traffic forwarding and are advertised when the VNI is configured under the NVE interface, even if no endpoints are active. Type-2 routes (MAC/IP advertisement routes) are only generated when the switch learns a MAC address on a VLAN associated with that VNI. If Type-3 routes exist but Type-2 routes are missing, the VNI is correctly configured for the overlay, but no active ports in the corresponding VLAN are learning MAC addresses, preventing Type-2 route generation.

Answer

The route-target import/export is misconfigured.

Answer

BGP session is not established.

Answer

The VNI is not configured under the NVE interface.

Question 14

Which two statements are true about Cisco TrustSec? (Choose two.)

Accepted Answer

It requires a Cisco ISE policy server. Cisco TrustSec relies on a Cisco ISE policy server to define and enforce security policies based on Security Group Tags (SGTs). ISE acts as the centralized policy decision point, dynamically assigning SGTs to authenticated endpoints and distributing the SGT-to-IP bindings to network devices via SXP or inline tagging.

Answer

It requires 802.1X authentication

Answer

It provides encryption at Layer 2

Answer

It uses VLANs for segmentation

Question 15

Which best practice should be followed when creating a UCS service profile template for stateless computing?

Accepted Answer

Assign MAC and WWN addresses from pools. Stateless computing in UCS requires that all server identity information, such as MAC addresses and WWNs, be abstracted away from the hardware and assigned dynamically from pools. This allows the service profile to be applied to any compatible blade or rack server without manual reconfiguration, enabling rapid provisioning and seamless hardware replacement. Defining these addresses directly in the profile or using static assignments would break the stateless model by tying the profile to specific hardware.

Answer

Use local storage on each server for boot images

Answer

Configure Windows Server NIC teaming for all vNICs

Answer

Define MAC addresses directly in the service profile