350-601 Practice Test 5 — 10 Questions

Question 1

Which Fibre Channel address component uniquely identifies a port within a fabric and is assigned during fabric login (FLOGI)?

Accepted Answer

FCID. The FCID (Fibre Channel Identifier) is a 24-bit address assigned to a port during fabric login (FLOGI). It uniquely identifies the port within the fabric and is used for routing frames between N-ports. It is composed of Domain ID (8 bits), Area ID (8 bits), and Port ID (8 bits).

Answer

WWNN

Answer

Domain ID

Answer

WWPN

Question 2

A UCS administrator is creating a boot policy for a service profile that will be used for B-series blades. The requirement is to boot from a LUN on a SAN-attached storage array. Which boot order should be configured in the service profile boot policy?

Accepted Answer

SAN only with vHBA. For a B-series blade booting from a SAN LUN, the boot policy must specify a SAN boot target with a vHBA (virtual Host Bus Adapter) as the boot device, and it should be the only entry in the boot order so the blade does not attempt local disk or PXE first. This ensures the service profile consistently boots from the intended LUN on the SAN array.

Answer

Local disk and SAN with equal priority

Answer

PXE first, then SAN

Answer

Local disk first, then SAN

Question 3

A UCS administrator is planning to deploy stateless computing using service profiles. Which three components are abstracted from the physical hardware and defined in the service profile? (Choose three.)

Accepted Answer

Boot order. In Cisco UCS stateless computing, the service profile holds all identity and configuration data that can follow a server across hardware. Option A (Boot order) is correct because the boot policy, including boot order, is defined in the service profile and applied to the server. Option B (MAC addresses for vNICs) is correct because MAC addresses are pool-derived identities assigned to vNICs in the service profile, enabling consistent network identity. Option D (Server UUID) is correct because the server UUID is a logical identity defined in the service profile and presented to the OS. Option C (Physical disk serial numbers) is not abstracted; disk serial numbers are physical hardware identifiers tied to the actual drives. Option E (CPU model) is not abstracted; the CPU model is a physical hardware attribute of the server and cannot be defined in a service profile.

Answer

Physical disk serial numbers

Answer

CPU model

Question 4

A DevOps team wants to version control network device configurations. Which tool is best suited for tracking changes and collaborating on configuration files?

Accepted Answer

Git. Git is the industry standard for version control, enabling history, branching, and collaboration.

Answer

Python virtual environment

Answer

Ansible Tower

Answer

Cisco Prime Infrastructure

Question 5

A network engineer wants to use Ansible to automate the configuration of Nexus switches. Which two statements about the cisco.nxos Ansible collection are correct? (Choose two.)

Accepted Answer

It includes the nxos_config module for applying CLI commands.. The collection includes modules like nxos_config and nxos_vlan, and it is supported on NX-OS platforms.

Answer

It is part of the Ansible Core collection.

Answer

It can only manage VLANs.

Answer

It is used exclusively for ACI automation.

Question 6

An engineer is writing an Ansible playbook to configure BGP on a Nexus 9000 switch. Which module from the cisco.nxos collection should be used to manage BGP configuration?

Accepted Answer

nxos_bgp. The cisco.nxos.nxos_bgp module is specifically designed for BGP configuration on NX-OS devices. nxos_vlan manages VLANs, nxos_interface manages interfaces, and nxos_config applies raw CLI commands.

Answer

nxos_vlan

Answer

nxos_config

Answer

nxos_interface

Question 7

Which two statements about the NX-API REST interface on Nexus switches are true? (Choose two.)

Accepted Answer

It supports JSON and XML encoding.. NX-API REST supports JSON and XML and uses HTTPS for secure communication.

Answer

It uses YANG models exclusively.

Answer

It only supports read-only operations.

Answer

It uses SSH for transport.

Question 8

An organization is deploying Cisco ISE for 802.1X authentication on Cisco Nexus switches. Some endpoints fail authentication and fall back to the MAB. The security policy requires that endpoints failing both 802.1X and MAB be placed in a restricted VLAN. Which configuration is needed on the switch port?

Accepted Answer

authentication failed action authorize vlan 999. The 'authentication failed action authorize vlan 999' command configures the switch port to place endpoints that fail both 802.1X and MAB into a restricted VLAN (VLAN 999). This directly meets the security policy requirement for endpoints that cannot authenticate via either method.

Answer

authentication order dot1x mab

Answer

dot1x timeout tx-period 30

Answer

authentication event server dead action authorize vlan 999

Question 9

An administrator needs to limit the number of MAC addresses learned on a Nexus access port to prevent MAC flooding attacks. Which feature should be configured?

Accepted Answer

Port Security. Port security limits MAC addresses per port.

Answer

DHCP Snooping

Answer

Dynamic ARP Inspection

Answer

IP Source Guard

Question 10

An engineer wants to enforce security policies in a data center based on user identity rather than IP addresses. Which Cisco technology enables identity-based tagging and policy enforcement?

Accepted Answer

Cisco TrustSec. Cisco TrustSec uses SGTs to tag traffic based on user/device identity, and SGACLs enforce policies.

Answer

VLAN ACLs

Answer

ACI micro-segmentation

Answer

Nexus port security