350-601 Practice Test 38 — 15 Questions

Question 1

A large enterprise data center uses Cisco UCS Manager to manage hundreds of blade servers. The automation team has been using Python SDK scripts to provision service profiles. Recently, after a UCS Manager firmware upgrade, several scripts that previously worked are now failing with 'AttributeError: 'ServiceProfile' object has no attribute 'set_vnic_order''. The team confirms that the UCS Manager version changed from 4.0 to 4.2. Which course of action should the engineer take to resolve the issue?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

Update the Python SDK to the version that supports UCS Manager 4.2 and modify scripts accordingly. The Python SDK for UCS Manager is version-specific; upgrading UCS Manager from 4.0 to 4.2 introduces API changes that can deprecate or remove methods like `set_vnic_order`. Updating the SDK to a version compatible with UCS Manager 4.2 ensures the Python scripts use the correct API calls, and modifying the scripts to align with any new method signatures or attributes resolves the AttributeError.

Answer

Use the UCS Manager XML API directly without the SDK

Answer

Downgrade UCS Manager back to version 4.0 to restore compatibility

Answer

Replace Python scripts with Ansible modules that use the UCS API

Question 2

Which THREE of the following must be enabled to implement 802.1X authentication with MAB fallback on a Cisco Nexus switch for a mixed environment of 802.1X-capable and non-802.1X endpoints? (Choose three.)

Accepted Answer

AAA authentication with a RADIUS server. 802.1X authentication requires AAA to communicate with a RADIUS server. The RADIUS server validates the credentials (EAP over RADIUS) and returns an Accept or Reject, which the switch uses to authorize the port. Without AAA and a RADIUS server, the switch has no external authentication authority to process 802.1X requests or MAB fallback.

Answer

MACsec encryption on the port

Answer

A VLAN ACL to redirect traffic

Question 3

In a vPC setup, what is the purpose of the vPC peer-keepalive link?

Accepted Answer

To detect the failure of a vPC peer. The vPC peer-keepalive link is a dedicated Layer 3 link used exclusively to monitor the health of the vPC peer. Its primary purpose is to detect a peer failure (e.g., a supervisor crash or complete switch failure) so that the remaining peer can take appropriate actions, such as disabling its own vPC member ports to prevent loops. This is distinct from the vPC peer-link, which carries control and data traffic between peers.

Answer

To exchange routing protocol updates

Answer

To synchronize MAC address tables

Answer

To forward data traffic between vPC peers

Question 4

A company is deploying a new storage network using Cisco MDS 9700 switches. They have multiple host servers and storage arrays. The security policy requires that each host can only access its own LUNs. The solution must be efficient and not require reconfiguration when new hosts are added. Which approach best meets these requirements?

Accepted Answer

Smart Zoning. Smart Zoning is correct because it automatically creates LUN-specific access controls based on the host initiator and target storage port, ensuring each host can only see its own LUNs without manual reconfiguration when new hosts are added. This approach reduces the number of zone objects and simplifies management by using LUN-level granularity within a single zone, unlike traditional zoning which requires per-LUN zones.

Answer

Traditional zone-based zoning with pWWNs

Answer

VSAN zoning

Answer

FSPF metric tuning

Question 5

A data center team is implementing configuration automation for a fleet of Nexus 9000 switches. They need a solution that supports idempotent configuration, works well with version control, and does not require an agent on the switches. Which two tools should they consider?

Accepted Answer

Ansible. C is correct because Ansible is an agentless automation tool that uses SSH to push declarative configurations to Nexus 9000 switches. It supports idempotent playbooks, meaning the same playbook can be run multiple times without changing the state if the desired configuration is already in place, and its YAML-based playbooks integrate seamlessly with version control systems like Git.

Answer

Puppet

Answer

Chef

Answer

Python with Paramiko

Question 6

A multicast application requires that all receivers join the same group using PIM sparse mode. Which router is responsible for forwarding traffic from the source to the RP?

Accepted Answer

First-hop router. In PIM sparse mode, the first-hop router (the router directly connected to the multicast source) is responsible for encapsulating the source's multicast traffic in unicast PIM register messages and forwarding them to the rendezvous point (RP). This process establishes the initial path and triggers the RP to join the source-specific tree (SPT) toward the source.

Answer

Rendezvous point (RP)

Answer

Last-hop router

Answer

Source-specific router

Question 7

An engineer is designing a Cisco ACI multi-site solution. Which two considerations are critical for inter-site connectivity? (Choose two.)

Accepted Answer

Deploy a L3Out at each site for external connectivity.. In Cisco ACI Multi-Site, each site operates with its own APIC cluster and independent fabric. A L3Out at each site is critical because it provides external connectivity for that site's endpoints, allowing traffic to exit locally rather than being hair-pinned across the inter-site network. This design optimizes traffic flow and aligns with the Multi-Site architecture where sites are managed separately but interconnected via the Inter-Site Network (ISN).

Answer

Configure a stretch VLAN across sites.

Answer

Use a separate OSPF process per site.

Answer

Use a single APIC cluster for both sites.

Question 8

Which Cisco DCNM feature allows centralized management and monitoring of multiple NX-OS fabrics?

Accepted Answer

DCNM. Cisco DCNM (Data Center Network Manager) is the correct answer because it is the centralized management platform specifically designed to manage, monitor, and provision multiple NX-OS fabrics, including LAN and SAN, from a single pane of glass. It supports fabric discovery, configuration compliance, and health monitoring across multiple switches and fabrics, which aligns directly with the question's requirement.

Answer

vCenter

Answer

NX-API

Answer

APIC controller

Question 9

A company recently deployed Cisco UCS B-Series blades with a single Fabric Interconnect. During a maintenance window, the Fabric Interconnect must be upgraded. Which action ensures minimal disruption to running workloads?

Accepted Answer

Shut down all blades gracefully, upgrade the Fabric Interconnect, then power on blades.. In a single Fabric Interconnect domain, there is no redundancy. Disassociating service profiles while blades are running causes loss of management connectivity and potential network disruption. The only way to perform the upgrade without risking data corruption is to schedule a maintenance window: gracefully shut down all blades, upgrade the Fabric Interconnect, then power on the blades. This ensures workloads are safely stopped and restarted after the upgrade.

Answer

Disassociate service profiles from blades, upgrade the Fabric Interconnect, then re-associate the service profiles.

Answer

Use the UCS Manager GUI to migrate all service profiles to a second Fabric Interconnect.

Answer

Change the boot order of blades to boot from NFS image, then upgrade FI.

Question 10

In a Cisco ACI fabric, which component acts as the centralized policy and management controller?

Accepted Answer

APIC. The APIC (Application Policy Infrastructure Controller) is the centralized policy and management controller in a Cisco ACI fabric. It serves as the single point of configuration, policy definition, and monitoring for the entire fabric, managing all leaf and spine switches through a declarative model. The APIC does not handle data-plane forwarding but orchestrates the application of policies via the OpFlex protocol and the ACI object model.

Answer

Spine switch

Answer

DCNM

Answer

Leaf switch

Question 11

An organization is deploying Cisco UCS and needs to ensure that server personality is maintained even after a new server is added to the chassis. Which policy should be configured to achieve this?

Accepted Answer

Server Pool Policy. The Server Pool Policy is correct because it defines a logical grouping of servers that can be dynamically assigned to service profiles. When a new server is added to the chassis and matches the pool criteria, the policy ensures that the server automatically inherits the correct personality (e.g., UUID, WWN, MAC addresses) from the associated service profile template, maintaining consistency without manual intervention.

Answer

UUID Suffix Pool

Answer

Maintenance Policy

Answer

Boot Policy

Question 12

Which NX-OS command displays the current VLAN configuration on a Nexus switch?

Accepted Answer

show vlan. The 'show vlan' command on NX-OS displays the current VLAN configuration, including VLAN IDs, names, status, and ports assigned to each VLAN. This command is the standard way to view VLAN information in Cisco NX-OS, similar to IOS, and it shows both default and user-created VLANs.

Answer

show running-config vlan

Answer

show vlan brief

Answer

show interface vlan

Question 13

A data center engineer is implementing model-driven telemetry using Cisco NX-OS. Which three components are required in the telemetry configuration? (Choose three.)

Accepted Answer

A sensor path to specify the data to stream. A sensor path defines the specific YANG data model paths or operational data that the device will stream to the collector. In model-driven telemetry on Cisco NX-OS, the sensor path is the fundamental component that tells the device exactly which data to monitor and stream, such as 'Cisco-NX-OS-device:System/clock-items' or interface statistics paths.

Answer

A HTTPS certificate for authentication

Answer

An SNMP community string

Question 14

A team is using Cisco DCNM for fabric management. They need to integrate with an external CI/CD pipeline. Which API should they use to trigger a network configuration change?

Accepted Answer

DCNM REST API. The DCNM REST API is the correct choice because it provides a programmatic, northbound interface specifically designed for integrating Cisco DCNM with external CI/CD pipelines. This API allows you to trigger network configuration changes at the fabric level, abstracting the complexity of individual switches and ensuring consistency across the entire fabric, which is essential for automated, version-controlled deployments.

Answer

SNMP SET

Answer

NX-API on each switch

Answer

CLI via SSH

Question 15

Which TWO are required for FCoE communication on a Nexus switch configured as an FCF? (Choose two.)

Accepted Answer

A dedicated FCoE VLAN. In an FCoE FCF (Fabric Connect) configuration on a Nexus switch, a dedicated FCoE VLAN is required to carry FCoE traffic. This VLAN must be separate from standard Ethernet VLANs to prevent FCoE frames from being processed as regular Ethernet frames. Additionally, DCBX (Data Center Bridging Exchange) must be used to negotiate and enable Priority Flow Control (PFC) on the link, ensuring lossless behavior for FCoE traffic.

Answer

Jumbo frame support on the VLAN

Answer

VSAN configuration for the FCoE VLAN

Answer

NPV enabled on the switch