350-601 Practice Test 47 — 15 Questions

Question 1

An iSCSI storage array is being deployed with two network interfaces for redundancy. The hosts also have two iSCSI initiators. To ensure load balancing and failover, which feature should be configured?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

MPIO. Multipath I/O (MPIO) allows multiple paths between initiator and target for redundancy and load balancing.

Answer

Jumbo frames

Answer

VLAN tagging

Answer

CHAP authentication

Question 2

A data center is implementing iSCSI with MPIO. Which three components are required for MPIO to function? (Choose three.)

Accepted Answer

Multiple network interfaces on the initiator. MPIO requires multiple network paths between initiator and target, multiple network interfaces (or HBAs) on the initiator, and multiple target portals (IP addresses) on the storage array. A single session cannot leverage MPIO.

Answer

CHAP authentication

Answer

Jumbo frames enabled

Question 3

During an iSCSI deployment, an administrator configures CHAP authentication between the initiator and target. Which statement about CHAP in iSCSI is correct?

Accepted Answer

In one-way CHAP, only the initiator is authenticated to the target.. One-way CHAP uses a secret configured on both sides, but two-way CHAP (mutual authentication) uses separate secrets in each direction.

Answer

CHAP authentication is performed after the iSCSI login phase is complete.

Answer

The CHAP secret is sent in cleartext over the network.

Answer

CHAP uses a one-way hash to authenticate the target to the initiator only.

Question 4

An engineer is implementing VXLAN with a centralized routing gateway. Which TWO statements are correct about BUM traffic handling?

Accepted Answer

Ingress replication sends a copy of the BUM packet to each remote VTEP via unicast. In a VXLAN centralized routing gateway deployment, ingress replication is a valid method for handling BUM traffic where the ingress VTEP sends a unicast copy of the BUM packet to each remote VTEP. This is correct because it eliminates the need for multicast in the underlay, making option B accurate. Ingress replication consumes more bandwidth on the source VTEP uplinks than multicast because it generates multiple unicast copies, whereas multicast sends a single stream that is replicated by the network, making option C correct.

Answer

Multicast in the underlay is always required for BUM traffic

Answer

Only the ingress VTEP handles BUM traffic

Answer

BUM traffic is never flooded to all VTEPs

Question 5

An organization adopts Infrastructure as Code (IaC) for network automation. Which tool is commonly used to manage ACI fabric configuration declaratively?

Accepted Answer

Terraform. Terraform with the terraform-provider-aci allows declarative management of ACI objects.

Answer

Python acitoolkit

Answer

NX-API CLI

Answer

Ansible

Question 6

A network engineer needs to automate the configuration of BGP on a Nexus switch using Ansible. Which Ansible module from the cisco.nxos collection is appropriate for managing BGP configuration?

Accepted Answer

nxos_bgp. The nxos_bgp module is specifically designed to manage BGP settings on NX-OS devices.

Answer

nxos_vlan

Answer

nxos_config

Answer

nxos_interface

Question 7

In ACI, the management information tree (MIT) organizes managed objects hierarchically. Which object is the parent of an Application Profile (AP)?

Accepted Answer

Tenant. In the MIT, a Tenant contains Application Profiles.

Answer

fvBD

Answer

EPG

Answer

Infra

Question 8

Which TWO statements about NPV configuration on a Cisco MDS switch are true? (Choose two.)

Accepted Answer

NPV mode is enabled globally with the 'npv enable' command.. NPV (N-Port Virtualization) mode is enabled globally on a Cisco MDS switch using the 'npv enable' command. This command places the entire switch into NPV mode, allowing it to function as an NPV proxy that forwards FLOGI requests from downstream F ports to the core Fibre Channel switch. NPV mode is not a per-VSAN configuration; it is a global switch-level setting.

Answer

The core switch must have NPV enabled as well.

Answer

All downstream interfaces must be F ports.

Answer

NPV mode is configured per VSAN.

Question 9

An engineer uses the APIC REST API to create a new EPG. The API endpoint for creating an EPG under a specific tenant and application profile uses which object class?

Accepted Answer

fvAEPg. The EPG object class in the ACI MIT is 'fvAEPg' (Application Endpoint Group).

Answer

fvBD

Answer

fvTenant

Answer

fvAp

Question 10

A large data center uses a Cisco Nexus 9000 switch with FCoE NPV feature. The switch is connected to an MDS 9700 upstream. The network team recently replaced the MDS 9700 with a new one. After the replacement, the FCoE hosts are unable to log in to the storage fabric. The Nexus switch shows that the FCoE NPV uplinks are up but no FLOGIs are being forwarded. The show npv flogi-table on the Nexus is empty. The upstream MDS shows that the uplinks are in VSAN 100, and the zoning is correct. The Nexus switch configuration includes 'feature npv' and 'npv enable' on the relevant interfaces. The FCoE VLAN 100 is mapped to VSAN 100. What is the most likely cause?

Accepted Answer

The upstream MDS is not configured to accept NPV connections. The most likely cause is that the upstream MDS is not configured to accept NPV connections. For NPV to work, the upstream switch (MDS) must have NPIV enabled on the uplink interfaces. Without NPIV, the MDS will reject FLOGI requests from the Nexus. Other options: FKA-adv-period affects keep-alives, not login; FIP snooping is on the Nexus but would not cause empty flogi-table if uplinks are up; VLAN mapping is correct.

Answer

The FIP snooping policy is blocking the FLOGI traffic

Answer

The Nexus switch is missing the 'fcoe fka-adv-period' configuration

Answer

The FCoE hosts are not in the same VLAN as the FCoE NPV uplinks

Question 11

A data center team is automating network changes and wants to ensure that only validated configurations are deployed to production. Which CI/CD practice specifically addresses this?

Accepted Answer

Automated testing. Automated testing (e.g., unit tests, integration tests) in the CI/CD pipeline validates changes before deployment.

Answer

Infrastructure as Code

Answer

Continuous deployment

Answer

Version control

Question 12

A network engineer needs to retrieve the operational state of interfaces from a Nexus switch using a YANG-based protocol. Which protocol should be used to get structured data via REST?

Accepted Answer

RESTCONF. RESTCONF uses RESTful operations and can return data in JSON or XML over HTTP/HTTPS. NETCONF uses SSH. NX-API CLI returns text. SNMP is not YANG-based.

Answer

NETCONF

Answer

NX-API CLI

Answer

SNMP

Question 13

Which feature allows a single Fibre Channel port to log in with multiple N-port IDs, enabling a host to connect to multiple targets through one port?

Accepted Answer

NPIV. NPIV (N_Port ID Virtualization) allows a single Fibre Channel N_Port to register multiple N_Port IDs (FCIDs) with the fabric. This enables a host with one physical port to appear as multiple virtual initiators, each connecting to different targets, which is essential for virtualized environments like VMware ESXi with multiple VMs requiring separate FC connections.

Answer

FCoE

Answer

VSAN

Answer

NPV

Question 14

A storage team is implementing zoning in a Fibre Channel fabric. They want a method where zone members are identified by their World Wide Port Name (WWPN) and the fabric enforces access based on that, without relying on switch port information. Which type is this?

Accepted Answer

Soft zoning using WWPN. Soft zoning using WWPN is correct because it identifies zone members by their World Wide Port Name (WWPN) and enforces access through name server queries rather than switch port information. In soft zoning, the fabric does not actively block traffic; instead, it relies on the initiator to query the name server and only communicate with allowed WWPNs, making it a software-enforced access control method.

Answer

Soft zoning using domain/port

Answer

Hard zoning using WWPN

Answer

Hard zoning using port WWN

Question 15

Which TWO methods are supported by Cisco NX-API for automating Nexus switches? (Choose two.)

Accepted Answer

NX-API CLI. NX-API supports both REST (JSON/XML over HTTP/HTTPS) and CLI (sending NX-OS commands via API). NETCONF and RESTCONF are separate protocols, not part of NX-API. SNMP is not a NX-API method.

Answer

SNMP

Answer

RESTCONF

Answer

NETCONF