350-601 Practice Test 39 — 15 Questions

Question 1

Which of the following is a YANG data model developed by the OpenConfig working group to provide vendor-neutral configuration for network interfaces?

Accepted Answer

openconfig-interfaces. OpenConfig defines standard YANG models for various network functions, including interfaces.

Answer

ietf-interfaces

Answer

nacm

Answer

Cisco-NX-OS-device

Question 2

A network engineer is implementing automated configuration management using Cisco NSO (Network Services Orchestrator). The team wants to ensure that any configuration changes made directly on the devices (out-of-band) are detected and reconciled. Which NSO feature should be used?

Accepted Answer

Fast-map synchronization. Fast-map synchronization is the correct NSO feature because it is specifically designed to detect and reconcile configuration changes made directly on managed devices (out-of-band changes). It compares the device's running configuration against NSO's CDB and generates the necessary NETCONF or CLI operations to bring the device back into sync with NSO's desired state, ensuring consistency without manual intervention.

Answer

Configuration Database (CDB) snapshots

Answer

Service model templates

Answer

Rollback and recovery mechanism

Question 3

An engineer is designing an automation solution for a large data center with multiple Cisco UCS Manager domains. Which approach best ensures idempotent configuration operations?

Accepted Answer

Using a declarative automation tool like Ansible with idempotent modules. Ansible's declarative modules for Cisco UCS Manager (e.g., `ucs_*` modules) are designed to be idempotent: they compare the current state of the configuration against the desired state defined in the playbook and only apply changes when necessary. This ensures that running the same playbook multiple times yields the same result without unintended side effects, which is critical for large-scale automation across multiple UCS domains.

Answer

Writing imperative Python scripts that execute CLI commands

Answer

Directly calling UCS Manager XML API using POST requests

Answer

Using SNMP to set configuration parameters

Question 4

Which TWO methods are used to secure management plane access on Cisco Nexus 9000 series switches?

Accepted Answer

SSH. SSH (Secure Shell) is correct because it provides encrypted remote access to the management plane, preventing eavesdropping and session hijacking. AAA (Authentication, Authorization, and Accounting) is correct because it centralizes user authentication and authorization for management access, enforcing role-based access control (RBAC) via RADIUS or TACACS+ servers.

Answer

SNMPv3

Answer

CoPP

Answer

VRF

Question 5

An iSCSI SAN is experiencing performance issues. The storage array and initiators are connected via a dedicated VLAN. The network team notices high jitter. What is the most effective mitigation?

Accepted Answer

Implement QoS to give iSCSI traffic higher priority. High jitter indicates variable latency in the network, which is detrimental to iSCSI performance because iSCSI relies on TCP and is sensitive to delay variation. Implementing QoS to prioritize iSCSI traffic ensures consistent low-latency delivery by marking iSCSI frames (e.g., with DSCP CS4 or AF41) and queuing them ahead of other traffic, directly mitigating jitter. This is the most effective mitigation because it addresses the root cause—uncontrolled network congestion—rather than increasing parallelism or frame size.

Answer

Use multiple iSCSI sessions per initiator

Answer

Configure link aggregation between switches

Answer

Enable jumbo frames on all switches

Question 6

An engineer is configuring a UCS server profile for a database application that requires low latency. The server will use a Cisco UCS VIC 1340 adapter. Which vNIC placement policy should be selected to minimize latency?

Accepted Answer

Assigned. The Assigned vNIC placement policy binds each vNIC to a specific physical port on the Cisco UCS VIC 1340 adapter, ensuring deterministic traffic flow and predictable latency. For low-latency database applications, this eliminates the variability introduced by dynamic placement, allowing the engineer to align vNICs with the most direct PCIe path to the CPU or memory.

Answer

Any

Answer

Default

Answer

Round-Robin

Question 7

Which protocol is used to carry VXLAN encapsulation and facilitates the exchange of MAC reachability information between VTEPs in a VXLAN EVPN fabric?

Accepted Answer

MP-BGP. In a VXLAN EVPN fabric, MP-BGP (Multiprotocol BGP) is the control plane protocol used to advertise MAC reachability information between VTEPs. It carries VXLAN encapsulation information via the BGP EVPN address family (AFI L2VPN / SAFI EVPN), enabling VTEPs to learn remote MAC addresses and VNI mappings without relying on data-plane flooding.

Answer

eBGP

Answer

OSPF

Answer

PIM

Question 8

Which THREE methods can be used to propagate Cisco TrustSec Security Group Tags (SGTs) across a network? (Choose three.)

Accepted Answer

VXLAN with group-based policy. VXLAN with group-based policy (GBP) is a valid method for propagating SGTs because it embeds the SGT into the VXLAN Group Policy ID (GPID) field within the VXLAN header. This allows the SGT to be carried across an overlay network, enabling scalable, policy-based segmentation in a fabric environment without requiring inline tagging or SXP.

Answer

CDP (Cisco Discovery Protocol)

Answer

LLDP

Question 9

A data center engineer is configuring vPC on a pair of Cisco Nexus switches. The vPC peer-link is established but the vPC member ports remain suspended. After checking the configuration, the engineer notices that the vPC peer-keepalive link is not functioning. What is the most likely cause of the suspended member ports?

Accepted Answer

Peer-keepalive link failure causing dual-active detection issues. When the vPC peer-keepalive link fails, each vPC peer switch cannot detect whether the other peer is operational. This triggers the dual-active detection mechanism, causing the secondary switch to suspend its vPC member ports to prevent a split-brain scenario where both switches forward traffic for the same vPC VLAN. The suspended state is a protective measure until the peer-keepalive link is restored or the vPC role is resolved.

Answer

MTU mismatch on the peer-link

Answer

Mismatched vPC domain ID

Answer

Incorrect VLAN configuration on member ports

Question 10

Which VLAN trunking protocol is used by default on Cisco Nexus switches to carry multiple VLANs over a single link?

Accepted Answer

802.1Q. 802.1Q is the IEEE standard trunking protocol used by default on Cisco Nexus switches to carry multiple VLANs over a single link. Unlike older Cisco switches that defaulted to ISL, Nexus switches exclusively support 802.1Q encapsulation for VLAN trunking, as ISL is not supported on the NX-OS platform.

Answer

VTP

Answer

DTP

Answer

ISL

Question 11

An engineer is troubleshooting BGP EVPN control plane. They issue 'show bgp l2vpn evpn' and see Type-3 routes but no Type-2 routes for any VNI. Which condition is most likely?

Accepted Answer

The VTEP has not learned any MAC addresses. Type-3 routes (Inclusive Multicast Ethernet Tag routes) are generated automatically when an EVPN VNI is configured, regardless of MAC learning. Type-2 routes (MAC/IP Advertisement routes) are only generated after the VTEP learns MAC addresses from data-plane traffic or from local endpoints. The absence of Type-2 routes with Type-3 present indicates the VTEP has not yet learned any MAC addresses for that VNI.

Answer

The overlay VNI is not mapped to a VLAN

Answer

The BGP neighbor is not from the same AS

Answer

The EVPN address-family is not enabled

Question 12

In a VXLAN EVPN fabric, which component is responsible for encapsulating and decapsulating VXLAN packets?

Accepted Answer

VTEP. The VTEP (VXLAN Tunnel Endpoint) is the component responsible for encapsulating Ethernet frames in VXLAN packets and decapsulating them at the destination. It performs the UDP encapsulation with a VXLAN header, using the VNI to identify the Layer 2 segment, and forwards traffic over the underlay network. In an EVPN fabric, the VTEP also participates in the control plane to learn remote MAC and IP addresses via MP-BGP.

Answer

NVE

Answer

VNI

Answer

VXLAN gateway

Question 13

In a spine-leaf architecture, what is the primary advantage of having multiple spine switches?

Accepted Answer

Redundancy and load balancing. In a spine-leaf architecture, multiple spine switches provide redundancy by ensuring that if one spine fails, traffic can still flow through other spines. They also enable load balancing because leaf switches can use equal-cost multipath (ECMP) routing to distribute traffic across all available spine uplinks, maximizing bandwidth utilization and preventing congestion on any single path.

Answer

Lower latency

Answer

Simplified management

Answer

Increased oversubscription

Question 14

A Cisco UCS C-Series rack server requires remote management with KVM and virtual media. Which feature must be enabled?

Accepted Answer

CIMC. The Cisco Integrated Management Controller (CIMC) is the dedicated management interface on UCS C-Series rack servers that provides out-of-band remote management capabilities, including KVM console access and virtual media (vMedia) for mounting ISO images. Without CIMC enabled, these remote management features are unavailable, as they rely on its embedded web GUI, CLI, or API.

Answer

vMedia

Answer

BIOS

Answer

SOL

Question 15

An organization deploys compute resources using both UCS B-Series blades and C-Series rack servers. The network uses Cisco ACI. Which approach ensures consistent connectivity policies across both compute types?

Accepted Answer

Use a single EPG with appropriate encapsulation for both. Cisco ACI allows a single Endpoint Group (EPG) to span both UCS B-Series blades and C-Series rack servers by using the appropriate encapsulation (e.g., VLAN or VXLAN) and associating the EPG with both a physical domain (for blades connected via Fabric Interconnects) and a VMM domain (for rack servers managed by VMware vCenter). This ensures consistent connectivity policies, such as contracts and QoS, are applied uniformly across all compute types without requiring separate EPGs.

Answer

Create separate EPGs for blade and rack servers

Answer

It is not possible to have consistent policies between blade and rack

Answer

Use a physical domain for blades and a VMM domain for rack servers