350-601 Practice Test 46 — 15 Questions

Question 1

A network administrator is configuring a Cisco Nexus 9000 switch in a data center. The administrator needs to enable a feature that allows the switch to participate in a VXLAN EVPN fabric. Which command must be run first to enable the necessary feature on the switch?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

feature nv overlay. On Cisco Nexus 9000 switches, VXLAN is configured under the NVE interface, which requires the NVO feature. The command 'feature nv overlay' enables this capability. After enabling NVO, you can create an NVE interface, specify the source loopback, and map VNIs to VLANs. Other features like BGP and interface-VLAN may be needed for a full EVPN deployment, but NVO is the foundational feature for VXLAN.

Answer

feature interface-vlan

Answer

feature vxlan

Answer

feature bgp

Question 2

An engineer is troubleshooting a VXLAN EVPN fabric where a leaf switch is not learning remote MAC addresses for a specific VLAN. The underlay is OSPF, and the overlay is iBGP EVPN. The engineer verifies that the BGP EVPN session is established and that Type-2 routes are being received from the spines. However, the MAC addresses are not programmed in the hardware. Which action should the engineer take to resolve this issue?

Accepted Answer

Verify that the VLAN is mapped to the correct VNI using the 'vlan configuration' or 'vn-segment' command under the VLAN, and that the VNI is included in the NVE interface's VNI list.. In a VXLAN EVPN fabric, receiving EVPN Type-2 routes is not sufficient for remote MAC addresses to be programmed in hardware. The leaf must have a local VLAN-to-VNI mapping and that VNI must be configured under the NVE interface. Without this mapping, the switch cannot associate the remote MAC addresses with the correct VXLAN network identifier, and they will not be installed in the MAC address table. This is a frequent oversight when adding new VLANs to an existing VXLAN EVPN fabric.

Answer

Verify that the BGP EVPN session is using the correct source interface by checking the 'update-source' configuration under the BGP neighbor.

Answer

Verify that the 'feature interface-vlan' and 'feature vn-segment-vlan-based' commands are enabled globally on the leaf switch.

Answer

Verify that the OSPF cost on the leaf's uplinks is lower than the cost on other leaf switches to ensure it becomes the designated forwarder.

Question 3

A network engineer is troubleshooting a Cisco Nexus 9000 vPC domain where the peer link is up but the vPC member ports on one switch are suspended. The engineer suspects a configuration mismatch between the two vPC peer switches. Which command should the engineer use to verify that the vPC configuration parameters match on both peers?

Accepted Answer

show vpc consistency-parameters vpc <id>. vPC member ports suspend when type-1 consistency parameters such as MTU, STP mode, or VLAN configuration differ between peers. The consistency-parameters command enumerates each parameter and flags mismatches per vPC, making it the direct tool for identifying the discrepancy. Summary and role commands describe state but not parameter-level differences.

Answer

show vpc role

Answer

show vpc brief

Answer

show vpc peer-keepalive

Question 4

An engineer is deploying a new Cisco Nexus 9000 switch in a data center. The switch will be used as a leaf in a VXLAN EVPN fabric. The engineer needs to configure the underlay routing protocol to support the fabric. Which routing protocol is recommended for the underlay in a VXLAN EVPN fabric?

Accepted Answer

eBGP with spine-leaf peering. eBGP is the recommended underlay routing protocol for VXLAN EVPN fabrics on Cisco Nexus 9000 switches. It offers scalability, fast convergence, and tight integration with the EVPN overlay, which also uses BGP. This combination simplifies operations and is widely adopted in data center designs.

Answer

OSPFv2 with point-to-point links

Answer

EIGRP with named mode

Answer

IS-IS with multi-level hierarchy

Question 5

A Cisco Nexus 9000 switch is deployed in a vPC domain with two peer switches. The vPC peer-link is operational, but the vPC peer-keepalive link is down. The engineer notices that the secondary vPC peer switch has suspended all vPC member ports. Which action will restore vPC member port operation on the secondary switch while maintaining loop prevention?

Accepted Answer

Restore connectivity on the peer-keepalive link so the secondary peer can determine primary peer health and bring vPC member ports out of suspension.. The vPC peer-keepalive link is a heartbeat that confirms peer liveness. If it fails while the peer-link remains up, the secondary peer suspends its vPC member ports to avoid forwarding loops and dual-active behavior. Restoring the peer-keepalive link re-establishes heartbeat communication, allowing the secondary to verify the primary is healthy and safely bring its vPC member ports back into service.

Answer

Remove the vPC configuration from the secondary switch and reconfigure the member ports as standalone access ports.

Answer

Shut down the vPC peer-link on the primary switch, which forces the secondary to become primary and re-enable its vPC member ports.

Answer

Configure the secondary switch with a higher vPC role priority so it becomes the operational primary and activates its vPC member ports.

Question 6

An engineer is deploying a Cisco Nexus 9000 Series switch pair as a vPC domain using the default vPC peer link configuration. The peer link is a port channel of two 40-Gbps interfaces. During a maintenance window, both peer link member interfaces are shut down simultaneously. Which behavior should the engineer expect?

Accepted Answer

The vPC secondary peer device suspends all vPC member ports, and the primary peer device continues forwarding traffic for all vPC VLANs.. When the vPC peer link fails but the peer keepalive link remains up, the vPC primary device keeps its vPC member ports operational and forwards traffic, while the vPC secondary device suspends its vPC member ports to prevent duplicate forwarding. This behavior avoids a split-brain scenario and maintains connectivity through the primary device. The peer keepalive link is used to detect peer liveness and does not trigger a re-election.

Answer

The vPC domain enters a dual-active state, and both peer devices elect a new primary using the peer keepalive link.

Answer

Both peer devices suspend all vPC member ports until the peer link is restored, causing a complete outage for vPC VLANs.

Answer

Both peer devices keep their vPC member ports up, and traffic is load-balanced across both devices as during normal operation.

Question 7

A network engineer is configuring a Cisco Nexus 9000 switch to support VXLAN EVPN. The underlay is OSPF, and the overlay is iBGP EVPN. The engineer needs to ensure that the switch can forward traffic for a new VLAN that will be extended across the fabric. Which two steps are required to map the VLAN to the VXLAN overlay? (Choose two.)

Accepted Answer

Configure the VLAN and assign it a VNI using the 'vn-segment' command under the VLAN configuration.. To map a VLAN to the VXLAN overlay in a Cisco Nexus EVPN fabric, the engineer must assign a VNI to the VLAN using the 'vn-segment' command and add that VNI as a member of the NVE interface. These two steps establish the association between the Layer 2 VLAN and the VXLAN network identifier, and enable the NVE interface to encapsulate and decapsulate traffic for that VNI. Without both, the VLAN cannot be extended across the fabric.

Answer

Configure a static VXLAN tunnel to each spine switch using the 'nve peer' command.

Answer

Configure the VNI as a Layer 3 VNI under the VRF configuration.

Answer

Enable the 'feature vn-segment-vlan-based' command globally on the switch.

Question 8

A network engineer is configuring a Cisco MDS 9000 switch for Fibre Channel zoning. The engineer wants to create a zone that allows a specific host (pWWN 20:00:00:25:B5:00:00:01) to access a specific storage port (pWWN 20:00:00:25:B5:00:00:02). Which zoning method should be used to ensure that only these two devices can communicate?

Accepted Answer

Create a zone with the two pWWNs and add it to a zoneset, then activate the zoneset.. Zoning by pWWN is the most precise and flexible method to allow communication between specific devices. It is independent of physical port and FC ID changes. Activating the zoneset enforces the zone configuration.

Answer

Create a zone using the domain ID and port number of the host and storage ports, then activate the zoneset.

Answer

Create a zone with the interface names of the host and storage ports, then activate the zoneset.

Answer

Create a zone using the FC ID of the host and storage ports, then activate the zoneset.

Question 9

A storage administrator is designing a Fibre Channel SAN for a virtualized server environment. The environment requires that a single physical HBA port on a server can present multiple distinct Fibre Channel identities to the fabric, each with its own WWPN and fabric-assigned FC ID. Which technology should be used to meet this requirement?

Accepted Answer

N_Port ID Virtualization (NPIV). NPIV is the correct technology because it enables a single physical N_Port to register multiple virtual N_Port identities with the fabric, each with its own WWPN and FC ID. This is essential in virtualized environments where each virtual machine needs its own Fibre Channel identity for zoning and fabric services. NPV, PortChannel, and VSAN trunking do not provide multiple identities on a single HBA port.

Answer

VSAN trunking on the host port

Answer

PortChannel with multiple physical links

Answer

N_Port Virtualization (NPV)

Question 10

A network engineer is deploying a Cisco Nexus 9000 leaf switch that must forward VXLAN-encapsulated traffic between VXLAN Tunnel Endpoints. The engineer needs to identify which interface type terminates the VXLAN tunnel and performs the encapsulation/decapsulation of frames. Which interface should the engineer configure to serve this role?

Accepted Answer

A Network Virtualization Endpoint (NVE) interface configured with the source-interface command. VXLAN encapsulation and decapsulation on a Cisco Nexus 9000 switch are performed by the logical NVE interface, which is bound to a loopback address through the source-interface command. This interface owns the VTEP IP and the VNI membership, allowing the switch to map VLANs into VNIs and to terminate encapsulated frames from peer VTEPs. Physical uplinks, peer-links, and SVIs support transport or gateway functions but do not perform the tunnel endpoint role.

Answer

A port-channel interface configured with vPC peer-link and trunk allowed VLANs

Answer

A switched virtual interface (SVI) configured for the tenant VLAN with an anycast gateway address

Answer

A Layer 3 routed uplink port configured with an IP address and joined to the underlay routing protocol

Question 11

An engineer is deploying a VXLAN EVPN fabric with Cisco Nexus 9000 switches. The fabric uses eBGP as the underlay routing protocol and iBGP EVPN as the overlay. The engineer notices that some leaf switches are not receiving EVPN routes from other leaf switches. The underlay eBGP peering is established, and loopback0 interfaces are reachable. Which action should the engineer take to ensure EVPN routes are exchanged?

Accepted Answer

Configure route reflectors on the spine switches for the iBGP EVPN overlay.. In an iBGP EVPN overlay, route reflectors are used to avoid the need for a full mesh of iBGP peering. Configuring the spine switches as route reflectors allows leaf switches to peer with the spines and receive EVPN routes from other leaf switches. This is a scalable and recommended design for VXLAN EVPN fabrics. Without route reflectors or a full mesh, EVPN routes are not exchanged, leading to isolated leaf switches.

Answer

Redistribute the loopback0 interfaces into eBGP to advertise them in the underlay.

Answer

Configure a full mesh of iBGP EVPN peering between all leaf switches.

Answer

Enable OSPF as the underlay routing protocol to provide redundancy.

Question 12

An engineer is configuring a VXLAN EVPN fabric with Cisco Nexus 9000 switches. The engineer needs to ensure that BUM (Broadcast, Unknown unicast, Multicast) traffic is efficiently replicated across the fabric. Which two statements about the VXLAN BUM traffic replication mechanisms are correct? (Choose two.)

Accepted Answer

Multicast replication uses a multicast group in the underlay to deliver BUM traffic to all VTEPs in the VXLAN segment.. Ingress replication involves the ingress VTEP sending a copy of the BUM packet to each remote VTEP in the VXLAN segment. Multicast replication uses an underlay multicast group to deliver BUM traffic to all VTEPs. These are the two primary mechanisms for BUM traffic replication in VXLAN EVPN fabrics. Ingress replication is simpler but less efficient; multicast replication is more efficient but requires a multicast-enabled underlay.

Answer

Both ingress replication and multicast replication require the underlay to support multicast routing.

Answer

Multicast replication requires the ingress VTEP to know the IP address of every remote VTEP in the VXLAN segment.

Answer

Ingress replication requires PIM-SM to be configured in the underlay to forward BUM traffic.

Question 13

A data center engineer is designing a Fibre Channel SAN with Cisco MDS switches. The engineer needs to ensure that the fabric supports Inter-VSAN Routing (IVR) for communication between devices in different VSANs. Which two statements about IVR are true? (Choose two.)

Accepted Answer

IVR allows devices in different VSANs to communicate without merging the VSANs.. IVR enables communication between devices in different VSANs without merging them, preserving isolation. It uses a transit VSAN to route traffic between edge VSANs. These two statements are true: IVR allows cross-VSAN communication without merging, and it employs a transit VSAN for routing. The other options are false because IVR does not require a special IVR-enabled VSAN, does not require all switches to be IVR-enabled, and does not merge VSANs.

Answer

IVR requires a special IVR-enabled VSAN to route traffic between VSANs.

Answer

IVR requires all switches in the fabric to be IVR-enabled.

Answer

IVR automatically merges VSANs to simplify management.

Question 14

A network engineer is configuring a Cisco MDS 9000 Series switch. They need to verify the current zoning configuration, including the active zone set and its members. Which command should they use?

Accepted Answer

show zoneset active. To verify the active zone set and its members on a Cisco MDS 9000 Series switch, the correct command is 'show zoneset active'. This command displays the active zone set name, the zones it contains, and the members of each zone. Other commands like 'show zone status' provide zoning parameters but not the active zone set details, while 'show flogi database' and 'show fcns database' show logged-in devices and name server entries, respectively.

Answer

show flogi database

Answer

show zone status

Answer

show fcns database

Question 15

A storage administrator is configuring a Cisco MDS 9700 switch for a new SAN. The fabric uses VSAN 10 for production and VSAN 20 for backup. The administrator wants to ensure that FSPF routing and fabric services are isolated per VSAN. Which statement correctly describes how VSANs provide this isolation on the MDS 9700?

Accepted Answer

Each VSAN runs an independent instance of FSPF and fabric services, and a port can belong to only one VSAN at a time.. VSANs on Cisco MDS switches create independent fabric instances, each with its own FSPF, zone server, and other services. Ports are assigned to a single VSAN, ensuring traffic separation. This design provides complete logical isolation without requiring separate physical switches.

Answer

VSANs provide isolation only for zoning, while routing and other fabric services remain global across all VSANs.

Answer

A port can be a member of multiple VSANs simultaneously, allowing a single host to access both production and backup storage.

Answer

VSANs share a single FSPF instance but use separate zone databases to isolate traffic.