350-601 Practice Test 48 — 15 Questions

Question 1

An engineer is automating the configuration of a Cisco Nexus 9000 switch using Python. They need to send CLI commands over SSH and parse the output. Which Python library is specifically designed for this purpose?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

Netmiko. Netmiko is specifically designed for network device CLI automation over SSH, supporting Cisco Nexus among many vendors. It handles SSH connections, prompt detection, and command output parsing, making it the right tool for sending CLI commands and processing responses. Other libraries either serve different purposes or are vendor-specific.

Answer

Paramiko

Answer

Requests

Answer

Pyeapi

Question 2

A storage administrator is configuring a new Cisco MDS 9000 switch. The fabric will use FLOGI and FCNS to manage device logins and name services. The administrator needs to ensure that the switch can properly handle the login process for a new host. Which database on the MDS switch stores the mapping between the Fibre Channel ID (FCID) and the port world wide name (pWWN) after a successful FLOGI?

Accepted Answer

Name server database. After a host performs FLOGI, the switch assigns an FCID and registers the host's pWWN in the name server database. This database is essential for device discovery and is queried by other devices using FCNS. The zoning database is separate and controls access, while the FLOGI process itself does not persist mappings. Therefore, the name server database is the correct location for the FCID-to-pWWN mapping.

Answer

Zoning database

Answer

FLOGI database

Answer

Fabric login database

Question 3

A network automation engineer is using Ansible to manage Cisco ACI. They need to ensure that a tenant is created only if it does not already exist, and that the playbook can be run repeatedly without causing errors. Which Ansible module should they use?

Accepted Answer

aci_tenant. The aci_tenant module is part of the Cisco ACI Ansible collection and provides idempotent management of tenants. It uses the APIC REST API to check for existing tenants and only creates them when necessary, ensuring that repeated playbook runs do not cause errors. Other modules target different platforms and cannot manage ACI tenants.

Answer

ios_config

Answer

nxos_config

Answer

ucsm_managed_object

Question 4

An engineer is using Cisco UCS Manager to automate the configuration of server profiles. They need to create a new service profile template that can be used to deploy multiple servers. Which UCS Manager object should they use to define the template?

Accepted Answer

Service Profile Template. In Cisco UCS Manager, a Service Profile Template is the correct object for creating a reusable configuration that can be used to deploy multiple servers. It allows you to define all the settings, such as network, storage, and BIOS policies, and then create service profiles from it. This ensures consistency and simplifies automation.

Answer

Server Pool Policy Qualification

Answer

Service Profile

Answer

LAN Connectivity Policy

Question 5

A storage engineer is implementing VSANs on a Cisco MDS 9000 switch to isolate traffic between different departments. The engineer needs to ensure that devices in different VSANs cannot communicate with each other, and that each VSAN has its own fabric services. Which two statements about VSANs are true? (Choose two.)

Accepted Answer

VSANs provide logical isolation similar to VLANs in Ethernet networks.. VSANs logically isolate Fibre Channel traffic, similar to VLANs. Each VSAN operates as an independent fabric with its own fabric services, including zoning and name server. A single physical switch can support multiple VSANs, each with its own domain ID. Devices in different VSANs cannot communicate without inter-VSAN routing. These characteristics make VSANs suitable for isolating departmental traffic on a shared physical infrastructure.

Answer

Devices in different VSANs can communicate if they are connected to the same physical switch.

Answer

VSANs require a separate physical switch for each VSAN.

Answer

Fabric services such as zoning and name server are shared across all VSANs on a switch.

Question 6

A data center team is deploying a new Cisco ACI fabric with two APIC controllers and one spine switch. They need to automate the initial fabric discovery using Python scripts. Which method should they use to authenticate and send configuration requests to the APIC?

Accepted Answer

Use the APIC REST API with a session cookie obtained via a POST to /api/aaaLogin.json, then include the cookie in subsequent requests.. The APIC REST API is the primary interface for automating Cisco ACI. Authentication is typically done by posting credentials to /api/aaaLogin.json, which returns a session cookie. Subsequent requests must include this cookie. This approach is secure, supported, and widely used in Python scripts for tasks like fabric discovery and tenant creation.

Answer

Use NETCONF over SSH with the <get-config> RPC to retrieve and modify the fabric inventory.

Answer

Use SNMP SET requests to push configuration objects to the APIC's MIB.

Answer

Use SSH to connect to the APIC CLI and execute a Python script that calls the REST API locally.

Question 7

A network automation team is deploying a Python script that uses the Cisco ACI REST API to create a new tenant. The script must authenticate using a token-based method and then send a POST request to create the tenant. Which two actions must the script perform to successfully authenticate and send the request? (Choose two.)

Accepted Answer

Send a POST request to /api/aaaLogin.json with a JSON body containing the username and password.. To authenticate with the ACI REST API using token-based authentication, the script must first send a POST request to /api/aaaLogin.json with credentials in the body. The response includes a cookie named APIC-cookie that contains the token. Subsequent requests must include this cookie in the Cookie header to be authenticated. This two-step process ensures secure session management.

Answer

Send a GET request to /api/class/aaaUser.json to retrieve a session token.

Answer

Use HTTP Basic Authentication with the username and password in the Authorization header.

Answer

Include the token in the URL as a query parameter, such as ?token=<token>.

Question 8

A DevOps engineer is using Terraform to manage Cisco ACI configuration. The engineer wants to ensure that the Terraform state accurately reflects the ACI fabric and that changes are applied only when necessary. Which Terraform command should be used to preview the changes that Terraform will make to the ACI fabric before actually applying them?

Accepted Answer

terraform plan. The terraform plan command generates an execution plan that shows what Terraform will do to reach the desired state defined in the configuration. It compares the current state with the desired state and lists any actions (create, update, delete) without executing them. This is the standard way to preview changes before applying them, ensuring that only intended modifications are made.

Answer

terraform refresh

Answer

terraform validate

Answer

terraform apply

Question 9

A data center engineer is automating the configuration of a Cisco Nexus 9000 switch using the cisco.nxos Ansible collection. The playbook must retrieve the current running configuration and save it to a file on the control node for backup purposes. Which Ansible module should be used to accomplish this?

Accepted Answer

nxos_config with backup: yes. The nxos_config module includes a backup parameter that, when set to yes, automatically saves the current running configuration to a timestamped file on the Ansible control node. This is the most efficient and intended method for configuration backup in an Ansible playbook. Other options either require additional steps or do not directly produce a file on the control node.

Answer

nxos_command with show running-config

Answer

nxos_facts with gather_subset: config

Answer

nxos_file_copy to pull the running-config file

Question 10

A data center team is implementing a CI/CD pipeline for their Cisco ACI fabric. They want to use a tool that allows them to define the desired state of the fabric in code and automatically apply it. Which tool is specifically designed for infrastructure as code and supports ACI through modules?

Accepted Answer

Terraform. Terraform is the tool specifically designed for infrastructure as code, allowing declarative definition of ACI resources. It supports ACI through a provider and is well-suited for CI/CD pipelines. The other tools can manage ACI but are not as focused on declarative infrastructure provisioning.

Answer

Chef

Answer

Puppet

Answer

Ansible

Question 11

A data center team manages a Cisco ACI fabric running firmware version 4.2(7w). The engineers are building an automated compliance-checking tool that must retrieve the current configuration of a specific tenant from the APIC. They intend to use the APIC REST API with authenticated requests. Which authentication method should the tool use to obtain a session token for subsequent API calls?

Accepted Answer

Send a POST request to /api/aaaLogin.json with a JSON body containing the username and password.. The APIC REST API uses a session-based authentication model. To obtain a token, a client must POST credentials to /api/aaaLogin.json. The returned token is then used in the APIC-Cookie header for subsequent requests. This is the only supported method for authenticating REST API calls without embedding credentials in every request.

Answer

Use HTTP Basic authentication by embedding the username and password in the Authorization header of each GET request.

Answer

Configure a local user with a pre-shared key and sign each request with HMAC-SHA256.

Answer

Enable OAuth 2.0 on the APIC and request an access token from the /api/oauth/token endpoint.

Question 12

A network engineer is writing a Python script to automate configuration of a Cisco Nexus 9000 switch. The script uses the NX-API REST interface. Which HTTP method should be used to create a new VLAN object on the switch?

Accepted Answer

POST. To create a new VLAN using NX-API REST, the script must send a POST request with a JSON payload describing the VLAN. The POST method is the standard HTTP verb for creating resources in RESTful APIs. The switch will process the request and add the VLAN to its configuration if the request is valid and authorized.

Answer

PUT

Answer

DELETE

Answer

GET

Question 13

A data center automation team uses Cisco UCS Manager and wants to automate the creation of service profiles for new blade servers. They decide to use the UCS Manager Python SDK. Which method should they use to create a service profile from a template?

Accepted Answer

Use the 'LsServer' class and set the 'srcTemplName' property to the template name.. To create a service profile from a template using the UCS Manager Python SDK, you instantiate the 'LsServer' class, set its 'srcTemplName' attribute to the template name, and then commit the configuration. This approach leverages the SDK's object-oriented model to programmatically manage UCS resources.

Answer

Use the 'InstantiateServiceProfile' method with the template DN as an argument.

Answer

Use the 'CreateProfile' method with the template name and server DN.

Answer

Use the 'CreateServiceProfile' method with the template DN.

Question 14

An automation engineer is using the Cisco UCS Manager Python SDK (ucsmsdk) to manage blade servers. The engineer needs to retrieve a list of all service profiles in the UCS domain. Which method should be used to query the UCS Manager for service profiles?

Accepted Answer

query_classid(class_id='lsServer'). The UCS Manager Python SDK provides the query_classid method to retrieve all objects of a given class. For service profiles, the class ID is lsServer. This method queries the UCS Manager and returns a list of all service profile objects, allowing the engineer to programmatically access and manage them. Other methods either target specific DNs or do not exist.

Answer

query_children(in_dn='org-root')

Answer

query_dn(dn='org-root/ls-')

Answer

config_resolve_class(class_id='lsServer')

Question 15

An engineer is writing a Python script to automate configuration on a Cisco Nexus 9000 switch using the NX-API. The engineer wants to use a Python library that simplifies sending HTTP requests and handling JSON responses. Which library is most appropriate?

Accepted Answer

Requests. The Requests library is designed for making HTTP requests in Python, which aligns perfectly with NX-API's RESTful interface. It handles JSON serialization and deserialization, making it straightforward to send commands and parse responses. Other options are either SSH-based or not libraries for HTTP communication.

Answer

YAML

Answer

Netmiko

Answer

Paramiko