350-601 Practice Test 39 — 15 Questions

Question 1

A company recently deployed Cisco UCS B-Series blades with a single Fabric Interconnect. During a maintenance window, the Fabric Interconnect must be upgraded. Which action ensures minimal disruption to running workloads?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

Shut down all blades gracefully, upgrade the Fabric Interconnect, then power on blades.. In a single Fabric Interconnect domain, there is no redundancy. Disassociating service profiles while blades are running causes loss of management connectivity and potential network disruption. The only way to perform the upgrade without risking data corruption is to schedule a maintenance window: gracefully shut down all blades, upgrade the Fabric Interconnect, then power on the blades. This ensures workloads are safely stopped and restarted after the upgrade.

Answer

Disassociate service profiles from blades, upgrade the Fabric Interconnect, then re-associate the service profiles.

Answer

Use the UCS Manager GUI to migrate all service profiles to a second Fabric Interconnect.

Answer

Change the boot order of blades to boot from NFS image, then upgrade FI.

Question 2

What is a key advantage of using structured data (e.g., JSON or XML) from Cisco NX-API responses compared to traditional CLI scraping (e.g., using regular expressions)?

Accepted Answer

It provides machine-readable output that is less prone to parsing errors due to display changes.. Cisco NX-API returns structured data formats like JSON or XML, which are inherently machine-readable and consistent regardless of CLI display changes or software version updates. This eliminates the fragility of traditional CLI scraping with regular expressions, where output formatting changes (e.g., column widths, spacing, or label text) can break parsing logic. Structured data ensures reliable, predictable automation workflows.

Answer

It automatically commits changes to running-config.

Answer

It requires no software libraries to parse.

Answer

It eliminates the need for any authentication.

Question 3

A network engineer is planning to implement VPC in a Cisco Nexus data center. Which two statements about VPC components are true? (Choose two.)

Accepted Answer

VPC consistency checks ensure that both peers have identical configurations for VPC member ports.. Option B is correct because vPC consistency checks (Type 1 and Type 2) verify that both vPC peers have matching configurations for vPC member ports, such as VLANs, allowed VLAN lists, MTU, and STP settings, preventing forwarding inconsistencies. Option C is correct because the vPC peer-keepalive link is a dedicated Layer 3 path (typically over a management or out-of-band network) used to monitor peer liveness and detect peer failure, allowing the surviving peer to take over if the peer-link fails. Option A is incorrect because vPC member ports must be configured on both vPC peers, not just one, to form the port channel. Option D is incorrect because vPC does not require an IGP between peers to exchange MAC addresses; MAC address synchronization occurs over the vPC peer-link via CFS. Option E is incorrect because the vPC peer-link carries both control-plane traffic and data-plane traffic for orphan ports and for traffic that must traverse the peer link when a member link fails.

Answer

VPC member ports can be configured on only one of the VPC peers to avoid loops.

Answer

VPC requires an IGP routing protocol between the peers to exchange MAC addresses.

Answer

The VPC peer-link carries only control-plane traffic between the VPC peers.

Question 4

A VACL is configured to capture traffic between hosts in the same VLAN. The capture port is configured and the VACL is applied to the VLAN. However, no traffic is being captured. What is a likely reason?

Accepted Answer

The VACL does not have a capture action. A VACL (VLAN Access Control List) must explicitly include a capture action to forward matched traffic to a capture port. Without the capture action, the VACL only permits or denies traffic within the VLAN but does not trigger packet replication to the configured capture port. The capture action is configured using the `capture` keyword in the VACL configuration, and its absence is the most common reason for no traffic being captured.

Answer

The VACL is applied in the wrong direction

Answer

The capture port is a SPAN destination port

Answer

The capture port is not in the same VLAN

Question 5

An engineer needs to deny all traffic between two EPGs in ACI while allowing other EPG communications. Which construct should be used?

Accepted Answer

Taboo contract. Taboo contracts are used to explicitly deny traffic between EPGs.

Answer

Filter with action deny

Answer

QoS policy

Answer

VRF with route leaking

Question 6

Which NX-OS feature ensures that vPC member ports on both peers are configured identically to prevent inconsistencies that could lead to traffic black-holing?

Accepted Answer

vPC consistency check. The vPC consistency check ensures that critical parameters (e.g., VLAN configuration, STP settings, interface properties) are identical on both vPC peer switches. If a mismatch is detected, the vPC member port is suspended to prevent traffic black-holing caused by asymmetric forwarding. This mechanism is enforced by the Cisco NX-OS vPC Type-1 and Type-2 consistency checks.

Answer

vPC peer-link

Answer

vPC peer-keepalive

Answer

vPC auto-recovery

Question 7

Which TWO of the following are required components for a Cisco ACI contract to allow communication between EPGs?

Accepted Answer

A filter that specifies the traffic parameters.. In Cisco ACI, a contract is composed of one or more subjects, and each subject must reference at least one filter, so option B (a subject that defines the filter) and option A (a filter that specifies the traffic parameters) are the two required building blocks for permitting traffic between EPGs. The subject is the container that binds filters together and is what gets associated with the EPG as a provider or consumer, while the filter contains the actual traffic-matching criteria (such as EtherType, IP protocol, TCP/UDP ports, and ARP) via its entries. Without a subject there is nothing to apply, and without a filter the subject has no traffic parameters to permit, so both are mandatory. A tenant (option C) is the logical container in which contracts live but is not itself a component of the contract, a QoS class (option D) is an optional attribute for marking/prioritizing traffic rather than a required contract element, and a VRF (option E) is a separate network-context construct that is not part of the contract definition.

Answer

A tenant.

Answer

A QoS class.

Answer

A VRF.

Question 8

A network engineer is configuring a Cisco UCS service profile for a blade server that must boot from a LUN on a SAN. Which boot policy type should be selected in the service profile?

Accepted Answer

SAN Boot Policy. A SAN Boot Policy in Cisco UCS is specifically designed to allow a blade server to boot from a LUN on a Fibre Channel (FC) or Fibre Channel over Ethernet (FCoE) SAN. It references a vHBA (virtual Host Bus Adapter) and a boot target LUN, enabling the server to load its operating system from the SAN. This is the correct choice when the requirement is to boot from a SAN LUN, as stated in the scenario.

Answer

iSCSI Boot Policy

Answer

LAN Boot Policy

Answer

Local Disk Boot Policy

Question 9

An engineer needs to connect a Cisco MDS switch to a core Fibre Channel fabric using NPV mode. What port type will the edge switch's uplink ports assume in this scenario?

Accepted Answer

NP-port. In NPV (N_Port Virtualization) mode, the edge switch's uplink ports to the core fabric operate as NP-ports. An NP-port acts as both an N-port (to the core switch) and a proxy for the hosts connected to the edge switch, allowing the edge switch to appear as a single N-port to the core. This enables the edge switch to connect to the core without consuming multiple domain IDs.

Answer

N-port

Answer

E-port

Answer

F-port

Question 10

A storage administrator needs to isolate traffic between two departments on the same Fibre Channel SAN infrastructure. Each department has its own storage array and hosts. Which technology should be used to create separate logical fabrics without additional hardware?

Accepted Answer

VSANs. VSANs (Virtual SANs) allow partitioning of a single physical Fibre Channel fabric into multiple isolated logical fabrics, similar to VLANs in Ethernet.

Answer

NPV

Answer

Zoning

Answer

PortChannels

Question 11

Which HyperFlex replication factor ensures that data is stored on at least three nodes, providing higher data protection?

Accepted Answer

RF3. Replication Factor 3 (RF3) stores three copies of data across the cluster, offering protection against two concurrent node failures.

Answer

RF1

Answer

RF2

Answer

RF4

Question 12

Which BGP variant is commonly used in data center EVPN fabrics to carry Layer 2 and Layer 3 network information?

Accepted Answer

MP-BGP. MP-BGP (Multiprotocol BGP) is the correct variant because it carries both Layer 2 (MAC/VXLAN) and Layer 3 (IP/VRF) network information in EVPN fabrics via BGP EVPN address families (L2VPN EVPN and IP VPN). It extends BGP with multiprotocol extensions (RFC 4760) to support Network Layer Reachability Information (NLRI) for Ethernet segments, MAC addresses, and IP prefixes, which is essential for VXLAN-based data center fabrics.

Answer

eBGP

Answer

iBGP

Answer

OSPF

Question 13

Refer to the exhibit. An automation script is used to configure a new VLAN 40 on Eth1/2 trunk. The script sends the following NX-API command: 'switchport trunk allowed vlan add 40'. After execution, the engineer runs 'show running-config interface eth1/2' and sees that the trunk allowed VLAN list shows '10,20,30'. The automation script logs indicate success for adding VLAN 40, but the running config does not show the change. What is the most likely issue?

Accepted Answer

The engineer is viewing a different switch or the configuration was reverted by another process.. The running config output shows that VLAN 40 is not included in the allowed list (10,20,30), indicating the command did not take effect on this device. The script logs showing success suggest the command was executed successfully on some device, but likely not the one the engineer is viewing. This could be due to a configuration rollback or the engineer viewing a different switch. Therefore, option B is correct.

Answer

The command syntax is incorrect; 'add' is not a valid keyword.

Answer

The script actually removed the existing VLANs and replaced them with only VLAN 40.

Answer

The NX-API command was sent to the wrong interface.

Question 14

An administrator configures 'aaa authentication login default group tacacs+ local'. What happens if the TACACS+ server is unreachable?

Accepted Answer

Local username database is used. The command 'aaa authentication login default group tacacs+ local' configures a method list where the first method is TACACS+ and the second is local. If the TACACS+ server is unreachable (not responding, not rejecting), the switch falls back to the next method in the list, which is local authentication using the local username database. This fallback behavior is defined by Cisco IOS/IOS-XE authentication method lists, where 'local' acts as a backup when the primary method is unavailable.

Answer

The switch uses no authentication

Answer

Authentication fails

Answer

The switch tries the next method in the group

Question 15

Which ECMP load-balancing method is recommended for data center spine-leaf fabrics to ensure optimal traffic distribution?

Accepted Answer

Per-flow load balancing based on src-dst IP. Per-flow load balancing based on src-dst IP ensures that all packets belonging to the same flow (identified by source and destination IP addresses) follow the same path, preventing packet reordering while still distributing different flows across multiple equal-cost paths. In spine-leaf fabrics, this method provides optimal traffic distribution because it leverages the IP header information that is consistently available across Layer 3 boundaries, aligning with the fabric's routing-based forwarding model.

Answer

Per-packet load balancing

Answer

Weighted load balancing

Answer

Per-flow load balancing based on src-dst MAC