350-601 Practice Test 38 — 15 Questions

Question 1

A storage array supports both synchronous and asynchronous replication. The application requires zero data loss in case of a site failure. Which replication type should be chosen?

Accepted Answer

Synchronous replication. Synchronous replication writes data to the primary and secondary storage before acknowledging the write, ensuring zero data loss (RPO=0). Asynchronous replication may have some lag.

Answer

Asynchronous replication

Answer

Thin provisioning

Answer

Snapshot-based replication

Question 2

A Nexus switch is experiencing high CPU utilization due to control plane traffic. Which feature should be configured to protect the CPU?

Accepted Answer

Control Plane Policing. Control Plane Policing (CoPP) is a Cisco IOS/NX-OS feature that rate-limits traffic destined to the switch's CPU (control plane) by classifying traffic into classes and applying policers. It protects the supervisor/route processor from DoS attacks and excessive protocol traffic (e.g., ARP, routing updates, SSH) that would otherwise drive CPU utilization to 100%. On Nexus, CoPP is configured via a policy-map applied with the 'control-plane' service-policy, allowing granular per-class policing of punted traffic.

Answer

IP Source Guard

Answer

Dynamic ARP Inspection

Answer

DHCP snooping

Question 3

An engineer is connecting a Cisco UCS C-Series rack server to the network. The server must be managed by UCS Manager alongside existing B-Series blades. Which mode should the C-Series server be configured in?

Accepted Answer

UCS Manager mode. To have a C-Series rack server managed by UCS Manager alongside B-Series blades, the server must be configured in UCS Manager mode (also called UCSM-managed mode). In this mode, the C-Series server is integrated into the UCS domain and its fabric interconnects, allowing it to be discovered, inventoried, and managed through the same UCS Manager GUI/CLI as the blades. This requires the server to be cabled to the fabric interconnects and the appropriate firmware/feature to be enabled.

Answer

Direct Connect mode

Answer

Standalone mode

Answer

Cisco IMC Supervisor mode

Question 4

A customer is deploying Cisco ACI with a requirement to isolate tenant traffic in a multi-tenant environment. They want to ensure that a tenant admin can only manage their own tenant's objects. Which RBAC configuration should be implemented?

Accepted Answer

Create a security domain for each tenant and assign the 'tenant-admin' role to the user within that domain.. Cisco ACI uses security domains to enforce Role-Based Access Control (RBAC) boundaries. By creating a security domain for each tenant and assigning the 'tenant-admin' role to a user within that domain, the tenant admin is restricted to managing only the objects (e.g., EPGs, contracts, policies) that belong to that specific tenant. This ensures isolation of tenant traffic management in a multi-tenant environment without granting global or cross-tenant privileges.

Answer

Assign the 'read-only' role to the user within the tenant.

Answer

Create a separate VRF for each tenant and assign admin to that VRF.

Answer

Assign the 'tenant-admin' role to the user globally.

Question 5

A network engineer is configuring Cisco Nexus VXLAN with BGP EVPN. The VTEPs are using loopback0 as the NVE source. The physical interfaces are up, but the NVE interface remains down. What is the most likely cause?

Accepted Answer

The loopback0 interface is not reachable via the underlay network.. The NVE interface requires the specified source interface (loopback0) to have IP reachability via the underlay network to establish VXLAN tunnels. If loopback0 is not reachable (e.g., due to missing OSPF/IS-IS routes or incorrect underlay configuration), the NVE interface will remain in a down state even if the physical interfaces are up. This is because the NVE interface depends on the underlay routing to encapsulate and forward VXLAN traffic.

Answer

The NVE interface is not configured with source-interface.

Answer

The VLAN 1 is not associated with the NVE interface.

Answer

The loopback0 interface is not created.

Question 6

An organization wants to adopt Infrastructure as Code (IaC) principles for their data center network. Which practice best aligns with IaC for network configuration?

Accepted Answer

Storing configuration files in Git and applying them with automation tools. IaC involves managing and provisioning network infrastructure through machine-readable definition files, rather than manual processes. Storing configurations in version control (like Git) and using automated tools is key.

Answer

Using spreadsheets to track changes

Answer

Manually configuring devices via CLI

Answer

Using a web GUI for each device

Question 7

Which TWO of the following are characteristics of the NETCONF protocol? (Choose two.)

Accepted Answer

Operates over SSH or TLS.. Option A is correct because NETCONF runs over a secure transport layer, typically SSH (port 830) as mandated by RFC 6242, and TLS is also supported as a transport per RFC 7589. Option C is correct because NETCONF uses XML-based data encoding for both configuration data and protocol messages, as defined in RFC 6241, with operations and data modeled in XML. Option B is incorrect because NETCONF's standard encoding is XML; JSON encoding is associated with RESTCONF, not NETCONF. Option D is incorrect because NETCONF defines multiple RPC operations (such as , , , , and ), not a single RPC for all operations. Option E is incorrect because RESTful HTTP methods (GET, POST, PUT, DELETE) are characteristic of RESTCONF, whereas NETCONF uses an RPC-based model over SSH/TLS.

Answer

Supports JSON encoding as well as XML.

Answer

Uws a single RPC for all operations.

Answer

Uses RESTful HTTP methods.

Question 8

Refer to the exhibit. A Python script using the Cisco ACI Cobra SDK fails with 'AuthenticationError'. Which of the following is the most likely cause?

Accepted Answer

The username or password is incorrect. The 'AuthenticationError' in the Cisco ACI Cobra SDK indicates that the APIC rejected the login credentials. This error is raised specifically when the username or password provided in the script's login method (e.g., 'Login('apic_url', 'username', 'password')') does not match a valid APIC local or AAA-authenticated user. The SDK performs an HTTP POST to the APIC's '/api/aaaLogin.json' endpoint, and a non-200 response with an authentication failure triggers this exception.

Answer

The APIC URL is incorrect

Answer

The user does not have API access

Answer

The script is missing required imports

Question 9

Which protocol is recommended for streaming model-driven telemetry from NX-OS to a collector?

Accepted Answer

gRPC. gRPC (Google Remote Procedure Call) is the recommended protocol for streaming model-driven telemetry from NX-OS to a collector because it provides efficient, bidirectional streaming over HTTP/2, supports structured data encoding (e.g., Protobuf or JSON), and is natively supported in NX-OS for high-frequency, push-based telemetry. Unlike polling-based protocols, gRPC enables the device to continuously stream operational data to the collector with low latency and minimal overhead.

Answer

FTP

Answer

SNMP

Answer

HTTP

Question 10

A company wants to automate backup of running-configurations for 200 Nexus switches. Which solution provides the best combination of reliability and version history?

Accepted Answer

Ansible playbook with the nxos_config backup option. An Ansible playbook with the nxos_config backup option is the best solution because it provides idempotent, version-controlled backups of running-configurations across 200 Nexus switches. The nxos_config module automatically creates a timestamped backup file on the Ansible control node, ensuring both reliability through automated, consistent execution and a built-in version history via the backup files. This approach scales efficiently without requiring manual intervention or fragile scripting.

Answer

Manual backup via CLI

Answer

Custom Python script using TFTP

Answer

A cron job that SCPs config to a server

Question 11

A data center administrator is troubleshooting slow storage performance on a UCS B-Series blade server. The server is connected to a Cisco UCS 6300 Series Fabric Interconnect and uses local SAS drives. The administrator checks the UCS Manager and sees that the storage adapter has a driver version that is not recommended. What is the most likely impact of using a non-recommended driver version?

Accepted Answer

Degraded storage performance or instability. Using a non-recommended driver version for the storage adapter in a UCS B-Series blade server can lead to degraded storage performance or system instability. Cisco validates specific driver versions for compatibility with the UCS 6300 Series Fabric Interconnect and local SAS drives; deviations may cause suboptimal I/O handling, increased latency, or unexpected errors. This is a common issue in compute environments where driver- firmware mismatches affect storage throughput.

Answer

Loss of redundancy on the fabric interconnect

Answer

Inability to boot the server

Answer

Increased security vulnerabilities

Question 12

A team is using Cisco DCNM for fabric management. They need to integrate with an external CI/CD pipeline. Which API should they use to trigger a network configuration change?

Accepted Answer

DCNM REST API. The DCNM REST API is the correct choice because it provides a programmatic, northbound interface specifically designed for integrating Cisco DCNM with external CI/CD pipelines. This API allows you to trigger network configuration changes at the fabric level, abstracting the complexity of individual switches and ensuring consistency across the entire fabric, which is essential for automated, version-controlled deployments.

Answer

SNMP SET

Answer

NX-API on each switch

Answer

CLI via SSH

Question 13

Refer to the exhibit. The blade server is unassociated. Which action is required to assign a service profile to this server?

Accepted Answer

Create a service profile and associate it with the server. A service profile defines the server identity, firmware, policies, and connectivity settings for a UCS blade server. When a server is unassociated, you must create a service profile and then associate it with the server to apply those configurations and bring the server into operation.

Answer

Configure the server's BIOS settings

Answer

Create a boot policy

Answer

Create a vNIC template

Question 14

Refer to the exhibit. An administrator notices the blade firmware is outdated. What is the recommended first step to update the blade firmware?

Accepted Answer

Create a firmware management policy to stage the update. Cisco UCS Manager uses firmware management policies to stage firmware updates across blades in a controlled, non-disruptive manner. Staging the update allows the administrator to schedule the activation during a maintenance window, ensuring all blades receive the same firmware version consistently without immediate impact on production traffic.

Answer

Upgrade the fabric interconnects first

Answer

Update each blade individually using the CIMC

Answer

Reboot all blades immediately

Question 15

Refer to the exhibit. A UCS domain shows a 'Major' NVRAM backup failure alarm in Intersight. What is the best immediate action?

Accepted Answer

Attempt a manual NVRAM configuration backup from the primary Fabric Interconnect to the secondary.. A 'Major' NVRAM backup failure alarm in Intersight indicates that the automatic periodic backup of the UCS domain's configuration from the primary Fabric Interconnect (FI) to the secondary FI has failed. The best immediate action is to attempt a manual NVRAM configuration backup from the primary FI to the secondary, as this directly addresses the backup failure without disrupting domain operations or requiring re-registration.

Answer

Perform a factory reset on both Fabric Interconnects.

Answer

Reboot the primary Fabric Interconnect.

Answer

Reclaim the UCS domain from Intersight and register again.