350-601 Practice Questions 2 — 50 Questions

Question 1

Arrange the steps to create a service profile template in Cisco UCS Manager.

Accepted Answer

Create UUID Suffix Pool, then Create vNIC Template, then Create Service Profile Template (referencing the pool and vNIC template), then Associate with a Server Pool. Service profile template requires UUID pool, vNIC template, profile creation, server pool association, and assignment.

Answer

Create vNIC Template, then Create UUID Suffix Pool, then Create Service Profile Template, then Associate with a Server Pool

Answer

Create Service Profile Template, then Create UUID Suffix Pool, then Create vNIC Template, then Associate with a Server Pool

Answer

Associate with a Server Pool, then Create UUID Suffix Pool, then Create vNIC Template, then Create Service Profile Template

Question 2

A DevOps team is implementing CI/CD for network configuration changes on Nexus switches. Which tool is most suitable for version control of network configuration files?

Accepted Answer

Git. Git is a distributed version control system widely used for managing infrastructure as code, including network configurations. Ansible is for automation, Jenkins for CI/CD pipelines, and Docker for containers.

Answer

Jenkins

Answer

Ansible

Answer

Docker

Question 3

Which Nexus feature dynamically validates ARP packets to prevent man-in-the-middle attacks?

Accepted Answer

Dynamic ARP Inspection. Dynamic ARP Inspection (DAI) intercepts ARP packets and validates them against DHCP snooping bindings.

Answer

DHCP snooping

Answer

IP Source Guard

Answer

Port security

Question 4

An engineer needs to protect the control plane of a Nexus 9000 switch from CPU-targeted attacks. Which feature should be configured?

Accepted Answer

CoPP. Control Plane Policing (CoPP) applies QoS policies to control plane traffic to prevent DoS attacks.

Answer

DHCP snooping

Answer

Port security

Answer

IP Source Guard

Question 5

Which statement is true about the VLANs carried on a VPC peer-link?

Accepted Answer

The peer-link carries all VLANs that are allowed on the trunk interface.. In a vPC domain, the peer-link is a special trunk that carries all VLANs allowed on the trunk interface, including those not present on any member port. This ensures that orphaned traffic (traffic arriving on the peer-link destined for a device connected to the other vPC peer) can be forwarded correctly. The peer-link must carry all VLANs to maintain Layer 2 connectivity and loop-free behavior without relying on spanning tree.

Answer

The peer-link carries only the VLANs allowed on the member interfaces.

Answer

The peer-link requires spanning-tree port type edge trunk configuration.

Answer

The peer-link must be configured as a layer 3 interface.

Question 6

A storage network using Cisco MDS 9700 switches has two VSANs (100 and 200). The engineer wants to share a physical ISL between both VSANs while maintaining traffic isolation. Which feature should be used?

Accepted Answer

VSAN trunking. VSAN trunking allows a single physical ISL to carry traffic for multiple VSANs by adding a VSAN tag to each frame, ensuring traffic isolation between VSANs 100 and 200. This is the native Cisco MDS feature designed for sharing inter-switch links across VSANs without merging their control planes or forwarding tables.

Answer

PortChannel with trunk mode on

Answer

Inter-VSAN Routing (IVR)

Answer

FSPF metric manipulation

Question 7

An organization uses VXLAN EVPN for network segmentation. Which component provides per-tenant isolation of control plane traffic?

Accepted Answer

VRF. In VXLAN EVPN, per-tenant isolation of control plane traffic is achieved through the use of VRFs (Virtual Routing and Forwarding instances). Each tenant is assigned a unique VRF, which maintains its own separate routing table and forwarding decisions, ensuring that control plane information (such as MAC/IP routes advertised via MP-BGP EVPN) is isolated between tenants. This is distinct from data plane isolation, which is provided by VXLAN Network Identifiers (VNIs).

Answer

VLAN

Answer

VNI

Answer

VXLAN tunnel

Question 8

Which RAID level provides striping with parity and can tolerate a single disk failure while offering higher storage efficiency than RAID 1?

Accepted Answer

RAID 5. RAID 5 uses block-level striping with distributed parity, tolerating a single disk failure while using the capacity of only one disk for parity. This gives higher storage efficiency than RAID 1, which mirrors data and effectively loses 50% of capacity. RAID 5 is the classic answer for 'striping with parity, single-disk fault tolerance, better efficiency than mirroring.'

Answer

RAID 0

Answer

RAID 6

Answer

RAID 1

Question 9

A Cisco MDS switch is being configured to support multiple isolated Fibre Channel fabrics over a single physical infrastructure. Which feature should be used to achieve this isolation?

Accepted Answer

VSANs. VSANs (Virtual SANs) are used to create multiple isolated Fibre Channel fabrics over a single physical infrastructure. Each VSAN operates as an independent fabric with its own fabric services, zoning, and domain ID. This provides isolation and allows multiple fabrics to share the same physical switches and links.

Answer

VLANs

Answer

PortChannels

Answer

Zoning

Question 10

A network administrator is configuring a Cisco Nexus switch to use NX-API for automation. Which statement about NX-API is true?

Accepted Answer

NX-API supports JSON-RPC and RESTful API calls. NX-API is a feature on Cisco Nexus switches that provides both a RESTful API using HTTP/HTTPS and a JSON-RPC interface for programmatic access to the switch's CLI commands. This dual support allows automation tools to interact with the switch using standard web protocols and data formats, making option A correct.

Answer

NX-API requires the use of Python scripts exclusively

Answer

NX-API only supports XML data format

Answer

NX-API requires a separate license and is not included in NX-OS

Question 11

In a spine-leaf architecture, what is the primary advantage of using a full mesh between spines and leaves?

Accepted Answer

It provides uniform low-latency paths between any two leaves. In a spine-leaf architecture, a full mesh between spines and leaves ensures that every leaf switch is connected to every spine switch. This design provides multiple equal-cost paths between any two leaf switches, allowing for uniform low-latency forwarding because traffic can traverse a single spine hop without congestion or path asymmetry. The full mesh eliminates the need for complex path selection and guarantees predictable, consistent latency across the fabric.

Answer

It reduces the total number of ports required

Answer

It removes the requirement for Spanning Tree Protocol

Answer

It eliminates the need for VLANs in the data center

Question 12

A network engineer is configuring OSPF on a Nexus switch. To ensure fast convergence in case of a link failure, which OSPF feature should be enabled?

Accepted Answer

OSPF Fast Hello. OSPF Fast Hello (B) is the correct feature to enable for fast convergence on a Nexus switch because it reduces the dead interval to less than one second by sending Hello packets at sub-second intervals (e.g., every 333 ms for a 1-second dead interval). This allows OSPF neighbors to detect a link failure much faster than the default 40-second dead interval on broadcast networks, triggering quicker SPF recalculation and route convergence.

Answer

OSPF authentication

Answer

OSPF stub area

Answer

OSPF route summarization

Question 13

Which statement about RSTP (802.1w) is true?

Accepted Answer

RSTP reduces convergence time by using a proposal/agreement handshake. RSTP (802.1w) significantly reduces convergence time compared to legacy STP by using a proactive proposal/agreement handshake mechanism. Instead of relying on timers (like STP's 30-50 second convergence), RSTP switches immediately negotiate port roles and transition to forwarding by exchanging proposal and agreement BPDUs, enabling sub-second convergence in a properly designed network.

Answer

RSTP uses a timer-based convergence similar to STP

Answer

RSTP requires explicit configuration of edge ports to prevent loops

Answer

RSTP elects the root bridge based on the highest MAC address

Question 14

A network engineer needs to replace a failed UCS B-Series blade server with a new blade of the same model. The original blade had a custom service profile with specific vNIC and vHBA settings. What is the most efficient method to apply the same configuration to the new blade without manual reconfiguration?

Accepted Answer

Disassociate the existing service profile from the failed blade and associate it with the new blade.. Cisco UCS service profiles are logical constructs that encapsulate server identity and configuration (vNICs, vHBAs, boot order, UUID, etc.) and are associated with physical blades. Disassociating the profile from the failed blade and associating it with the new blade of the same model applies the entire configuration instantly, with no manual reconfiguration. This is the core benefit of UCS stateless computing.

Answer

Create a new service profile from scratch for the new blade.

Answer

Use Cisco IMC Supervisor to import the configuration from the failed blade.

Answer

Manually configure the new blade using UCS Manager GUI with the same settings as the original blade.

Question 15

Which BGP variant is commonly used in spine-leaf fabrics to advertise EVPN routes for VXLAN?

Accepted Answer

MP-BGP with EVPN address family. MP-BGP with the EVPN address family (AFI 25 / SAFI 70) is the control-plane protocol used in VXLAN spine-leaf fabrics to advertise MAC/VTEP reachability, host routes, and integrated routing and bridging (IRB) information. This allows the spine to act as a route reflector, distributing EVPN type-2 (MAC/IP) and type-3 (IMET) routes to all leaf nodes, enabling efficient, loop-free overlay forwarding.

Answer

OSPF with opaque LSA

Answer

eBGP with standard IPv4 unicast

Answer

iBGP with standard IPv4 unicast

Question 16

An engineer is configuring a new VLAN on a Nexus switch that is part of a vPC pair. Which step is mandatory to ensure the VLAN is created on both vPC peers?

Accepted Answer

Create the VLAN on both peers manually.. In a vPC domain, VLANs are not automatically synchronized between peers. The engineer must manually create the VLAN on both vPC peers to ensure it is present in the local VLAN database on each switch. This is because vPC relies on consistent local configuration on both devices for proper operation, and there is no built-in mechanism to propagate VLAN definitions from one peer to the other.

Answer

Use vPC peer-gateway to propagate VLANs.

Answer

Create the VLAN on the secondary peer only; the primary will learn via STP.

Answer

Create the VLAN on the primary peer only; it will sync automatically.

Question 17

In the context of ACI L3Out, which object is used to advertise external networks into the ACI fabric and is associated with a VRF?

Accepted Answer

L3Out. In ACI, an L3Out is the logical construct that provides connectivity from the ACI fabric to external Layer 3 networks. It is associated with a VRF to define the routing context, and it is the object under which external networks are advertised into the fabric via route redistribution or static routes. The L3Out contains the external EPGs and the protocol profiles (e.g., OSPF, BGP, EIGRP) that control the advertisement.

Answer

Bridge Domain

Answer

Contract

Answer

External EPG

Question 18

A company is consolidating its storage network into a single fabric using a Cisco MDS 9509. They want to use VSANs to isolate different departments. The VSANs will be 10, 20, and 30. They have a single ISL between two MDS switches. The engineers want to carry all three VSANs over the ISL. They configure both ends of the ISL as E ports and enable trunking. After configuration, they notice that only VSAN 10 traffic passes over the ISL. The other VSANs appear isolated. The show vsan membership shows all three VSANs are present on both switches. The show interface trunk on the ISL shows that the trunk is up but only VSAN 10 is allowed. What is the most likely cause?

Accepted Answer

The allowed VSAN list on the trunk port is limited to only VSAN 10. On Cisco MDS switches, an ISL configured as an E port with trunking enabled will only carry the VSANs that are explicitly permitted in the trunk's allowed VSAN list. The 'show interface trunk' output confirms the trunk is up but only VSAN 10 is allowed, meaning the allowed VSAN list on the trunk port was restricted to VSAN 10. To carry VSANs 20 and 30, the allowed VSAN list must be modified to include them (e.g., using the 'switchport trunk allowed vsan' command).

Answer

The other VSANs are not configured on the trunk interface

Answer

The trunk mode is set to 'on' instead of 'desirable'/'auto'

Answer

The ISL is in an error-disabled state for VSAN 20 and 30

Question 19

A storage administrator needs to isolate Fibre Channel traffic between two departments in a data center using a single MDS switch. The administrator decides to create separate VSANs. Which statement about VSANs is true?

Accepted Answer

VSANs provide isolation similar to VLANs in Ethernet networks.. VSANs provide isolation similar to VLANs in Ethernet: each VSAN is a separate logical fabric with its own fabric services, zoning, and domain IDs. This allows two departments to share a single MDS switch while remaining isolated.

Answer

VSANs share the same fabric services across all VSANs.

Answer

VSANs require separate physical interfaces for each VSAN.

Answer

VSANs cannot be used with FCoE.

Question 20

What is the purpose of a witness VM in a HyperFlex cluster?

Accepted Answer

To break ties in cluster quorum decisions. In a HyperFlex cluster, the witness VM provides a tie-breaking vote for cluster quorum decisions when the cluster experiences a network partition or node failure. It ensures that the surviving side can maintain a majority and continue operating, preventing split-brain scenarios where both sides would independently write data.

Answer

To act as a management node for the cluster

Answer

To provide additional storage capacity

Answer

To replicate data across sites