350-601 Practice Test 5 — 10 Questions

Question 1

Refer to the exhibit. A network engineer notices that the NVE1 interface is up but VXLAN traffic is not being encapsulated. What is the most likely cause?

Accepted Answer

The BGP EVPN address-family is not activated.. VXLAN traffic encapsulation on the NVE1 interface requires the BGP EVPN address-family to be activated under the BGP configuration to exchange VNI-to-VTEP mappings. Without this address-family, the NVE interface cannot learn remote VTEPs, so VXLAN packets are never encapsulated with the outer UDP/IP header.

Answer

The VNI 10000 is not mapped to a VLAN.

Answer

The ingress replication protocol must be static.

Answer

The loopback0 interface is not configured.

Question 2

In a VXLAN BGP EVPN fabric, which component is responsible for handling BUM traffic using ingress replication, and how does the VTEP learn the list of remote VTEPs to replicate to?

Accepted Answer

The ingress VTEP learns remote VTEPs via MP-BGP EVPN Type 3 routes.. In a VXLAN BGP EVPN fabric, ingress replication is the default method for handling BUM traffic, where the ingress VTEP replicates packets and sends unicast copies to each remote VTEP. The ingress VTEP learns the list of remote VTEPs from MP-BGP EVPN Type 3 routes (Inclusive Multicast routes), which advertise the VNI and the originating VTEP's IP address, allowing the ingress VTEP to build its replication list.

Answer

The ingress VTEP learns remote VTEPs via IGMP snooping.

Answer

The egress VTEP sends unicast copies to all other VTEPs.

Answer

The spine switch performs replication to all leaf VTEPs.

Question 3

An engineer is configuring Cisco ACI to secure inter-tenant traffic. Tenants 'TenantA' and 'TenantB' need to communicate via a shared service, such as a DNS server in TenantA. How should the contract be configured?

Accepted Answer

Create a contract in TenantA. Set the DNS EPG as provider. In TenantB, create a consumer EPG and provide the contract from TenantA.. In Cisco ACI, inter-tenant communication via a shared service requires the contract to be created in the tenant that owns the shared service (provider). The provider EPG (DNS server in TenantA) is set as the provider, and the consumer EPG (in TenantB) consumes the contract from TenantA. This allows TenantB to access the DNS service without exposing its own EPGs, maintaining security isolation while enabling necessary traffic.

Answer

Create a contract in TenantA and apply it to the VRF shared between tenants.

Answer

Create a contract in TenantB. Set the DNS EPG as consumer. In TenantA, create a provider EPG and provide the contract from TenantB.

Answer

Create a contract in TenantA. Set both DNS EPG and TenantB EPG as providers.

Question 4

Which three EVPN route types are essential for VXLAN EVPN operation in a typical data center fabric? (Choose three.)

Accepted Answer

Type-3 (Inclusive Multicast Ethernet Tag). Type-3 (Inclusive Multicast Ethernet Tag) routes are essential for VXLAN EVPN because they enable BUM traffic replication across the underlay network by advertising the VNI and multicast group mapping, allowing VTEPs to join the correct multicast tree for flooding unknown unicast, broadcast, and multicast frames.

Answer

Type-4 (Ethernet Segment)

Answer

Type-1 (Ethernet Auto-Discovery)

Question 5

A company is planning to deploy Cisco Intersight to manage a hybrid environment including on-premises UCS domains and AWS EC2 instances. Which THREE of the following are required components for integrating AWS with Intersight?

Accepted Answer

An Intersight account with appropriate licenses. A valid Intersight account with the appropriate licenses (e.g., Intersight Essentials or Premier) is required to enable the AWS integration feature. Without the proper license tier, the Intersight account cannot access the cloud orchestration or management capabilities needed to connect and manage external cloud providers like AWS.

Answer

An Intersight Virtual Appliance deployed in AWS

Answer

A VPN tunnel between the on-premises network and AWS

Question 6

A network engineer is configuring Cisco Nexus VXLAN with BGP EVPN. The VTEPs are using loopback0 as the NVE source. The physical interfaces are up, but the NVE interface remains down. What is the most likely cause?

Accepted Answer

The loopback0 interface is not reachable via the underlay network.. The NVE interface requires the specified source interface (loopback0) to have IP reachability via the underlay network to establish VXLAN tunnels. If loopback0 is not reachable (e.g., due to missing OSPF/IS-IS routes or incorrect underlay configuration), the NVE interface will remain in a down state even if the physical interfaces are up. This is because the NVE interface depends on the underlay routing to encapsulate and forward VXLAN traffic.

Answer

The NVE interface is not configured with source-interface.

Answer

The VLAN 1 is not associated with the NVE interface.

Answer

The loopback0 interface is not created.

Question 7

Which THREE of the following are required to configure FCoE NPV on a Cisco Nexus switch?

Accepted Answer

Enable FIP snooping.. FIP snooping is required on the NPV switch to inspect and validate FCoE Initialization Protocol (FIP) frames, preventing unauthorized FCoE devices from joining the fabric. Without FIP snooping, the NPV switch cannot properly forward FCoE traffic between the ENode and the upstream FCF, making it a mandatory configuration step for FCoE NPV.

Answer

Configure a storage VLAN.

Answer

Configure a VSAN for FCoE.

Question 8

Which TWO commands are used to verify zoning configuration on a Cisco MDS switch? (Choose two.)

Accepted Answer

show zone. The 'show zone' command displays the configured zone database, including zone members and their aliases, which is essential for verifying zoning configuration. The 'show zoneset active' command shows the currently active zoneset that is enforced by the switch, confirming which zones are actually applied to traffic. Both commands directly verify zoning configuration on a Cisco MDS switch.

Answer

show fcns database

Answer

show flogi database

Answer

show vsan membership

Question 9

A storage administrator needs to configure zoning while minimizing administrative overhead and allowing multiple initiators to access multiple targets without having to change zones when new members are added. Which zoning approach is best?

Accepted Answer

Zoning by naming using a zone alias for initiators and another for targets. Zoning by name using zone aliases decouples the zone configuration from the physical port or WWN, allowing administrators to group initiators and targets into separate aliases. When new members are added to an alias, the zone automatically includes them without manual zone reconfiguration, minimizing administrative overhead while supporting multiple initiators and multiple targets.

Answer

Multiple initiator-multiple target zoning (all devices in one zone)

Answer

Single initiator-single target zoning

Answer

Single initiator-multiple target zoning (initiator-based)

Question 10

Which feature allows a Fibre Channel switch to use multiple links between two switches as a single logical link?

Accepted Answer

SAN port channel. SAN port channel (C) is correct because it allows multiple physical Fibre Channel links between two switches to be aggregated into a single logical link, providing load balancing and redundancy. This is achieved by bundling up to 16 physical ISLs into one logical interface, using a proprietary hashing algorithm to distribute frames across the member links while maintaining in-order delivery.

Answer

NPIV

Answer

NPV

Answer

SPAN

Answer

FCIP