350-601 Practice Exam 53 — 20 Questions

Question 1

An engineer is configuring a Fibre Channel SAN with a Cisco MDS switch. To ensure high availability and load balancing, the engineer plans to use PortChannels. Which two statements about Fibre Channel PortChannels are true? (Choose two.)

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

PortChannels provide redundancy by automatically failing over to another link.. Fibre Channel PortChannels on Cisco MDS switches provide link redundancy by automatically redistributing traffic if a member link fails. All member ports must belong to the same VSAN for the PortChannel to operate correctly. PortChannels can aggregate up to 16 physical links, not 4. LACP is not used in Fibre Channel; it is an Ethernet protocol. PortChannels are supported on both E-ports (inter-switch links) and F-ports (N-port connections).

Answer

PortChannels require the use of the LACP protocol.

Answer

PortChannels are supported only between F-ports.

Answer

PortChannels can aggregate up to 4 physical links.

Question 2

An engineer is configuring MST on a pair of Cisco Nexus switches that will be part of a vPC domain. The vPC peer-link will carry multiple MST instances. Which MST parameter must be identical on both vPC peers to ensure proper operation?

Accepted Answer

MST region configuration (name, revision, mapping). In a vPC domain with MST, both peers must share an identical MST region configuration (name, revision number, and VLAN-to-instance mapping) to ensure they agree on which VLANs belong to which MST instance. Without matching region configurations, the switches would treat each other as being in different MST regions, breaking the common spanning tree topology required for the vPC peer-link to properly carry multiple MST instances.

Answer

PortFast and BPDUguard settings

Answer

STP root bridge priority

Answer

STP path cost for instance 0

Question 3

An engineer needs to deploy a stateless UCS B-series blade with a boot from SAN configuration. Which components must be defined in the service profile to achieve this?

Accepted Answer

vHBA and WWPN. For a stateless UCS B-series blade with boot from SAN, the service profile must define a vHBA (virtual Host Bus Adapter) with a WWPN (World Wide Port Name). The WWPN is used by the SAN fabric to identify the server and present the correct LUN for booting, enabling stateless boot without local storage. iSCSI and MAC addresses are irrelevant for Fibre Channel SAN boot, and local disk configuration is not used in a stateless boot-from-SAN design.

Answer

iSCSI vNIC and IQN

Answer

vNIC and MAC address

Answer

Local disk configuration

Question 4

Which TWO of the following are valid methods to configure zoning in a Cisco MDS 9000 series switch?

Accepted Answer

Domain/port (DID) zoning. C is correct because Domain/Port (DID) zoning uses the Fibre Channel domain ID and port number to identify members, which is a standard zoning method on Cisco MDS switches. DID zoning is configured using the `zone` command with the `domain-id,port-number` syntax, providing a hardware-based zoning approach that does not rely on WWNs.

Answer

IP address zoning

Answer

MAC address zoning

Answer

Interface (fc-port) zoning

Question 5

An MDS switch is configured with VSANs 100 and 200. The engineer wants to isolate traffic between two storage arrays on the same physical fabric. Which best practice should be applied?

Accepted Answer

Place each array in a different VSAN.. VSANs provide complete isolation of traffic at Layer 2, creating separate fabric topologies within the same physical infrastructure. Placing each storage array in a different VSAN ensures that Fibre Channel frames from one array never reach the other, even though they share the same MDS switch hardware. This is the recommended best practice for separating storage traffic that must not interact.

Answer

Use zones within the same VSAN to separate arrays.

Answer

Enable QoS to prioritize storage traffic.

Answer

Configure a port channel between the switches.

Question 6

Which two of the following are benefits of using YANG data models for network automation? (Choose two.)

Accepted Answer

They enable network automation and multi-vendor interoperability. YANG models provide structured, standardized data models, enabling automation and vendor interoperability. They reduce manual CLI commands and allow validation. YANG is not tied to a specific transport.

Answer

They are only supported by Cisco devices

Answer

They eliminate the need for any CLI commands

Answer

They require the use of NETCONF exclusively

Question 7

Which TWO statements are true about VPC consistency checks? (Choose two.)

Accepted Answer

The 'show vpc consistency-parameters' command displays the status.. The 'show vpc consistency-parameters' command is the primary tool used to verify that the VPC peer switches have matching configurations for critical parameters. This command displays the status of each consistency check parameter, allowing an administrator to identify mismatches that could disrupt VPC operation.

Answer

All configuration parameters must match exactly on both peers.

Answer

Consistency check is optional and disabled by default.

Answer

Consistency check is performed only when the peer-link comes up.

Question 8

A company is deploying a Cisco UCS Mini in a remote office. They need to support both VMware vSphere and Microsoft Hyper-V on the same UCS domain. What is the best practice for deploying compute resources for both hypervisors?

Accepted Answer

Create separate service profile templates for each hypervisor. Separate service profile templates are required because VMware vSphere and Microsoft Hyper-V have different boot and storage configuration requirements. Each hypervisor needs its own boot policy (e.g., SAN boot vs. local disk), firmware settings, and potentially different vNIC/vHBA configurations. Using distinct templates ensures that each hypervisor's compute resources are correctly provisioned without conflicts.

Answer

Use a single service profile but assign different VLANs for management traffic

Answer

Place each hypervisor in a separate UCS Organization within the same service profile template

Answer

Create a single service profile template and use different identity pools for each hypervisor

Question 9

An engineer wants to automate the creation of VLANs on a Nexus 9000 switch using Python scripts. Which on-box solution allows running Python scripts directly on the switch without an external server?

Accepted Answer

Guest shell. Guest shell provides a secure Linux environment on Nexus switches to run Python scripts and tools.

Answer

Terraform provider

Answer

APIC REST API

Answer

Ansible control node

Question 10

In an FCoE environment, which protocol is responsible for discovering and initializing FCoE-capable endpoints, including the exchange of MAC addresses and establishing virtual links?

Accepted Answer

FIP. The FCoE Initialization Protocol (FIP) is used to discover FCoE devices and establish virtual links before FCoE data frames are sent.

Answer

ARP

Answer

DCBX

Answer

FCoE

Question 11

A DevOps engineer is building a CI/CD pipeline for network changes. After a configuration change is pushed to a Nexus switch, which step should be included to verify that the change did not cause any operational issues?

Accepted Answer

Automated validation using show commands or telemetry. Automated validation using show commands or YANG-based telemetry can confirm operational state. Manual verification defeats automation. Rolling back without validation may be premature. Logging is passive.

Answer

Manual verification by an engineer

Answer

Immediate rollback to previous configuration

Answer

Logging the change without verification

Question 12

Which NX-OS feature ensures that vPC member ports on both peers are configured identically to prevent inconsistencies that could lead to traffic black-holing?

Accepted Answer

vPC consistency check. The vPC consistency check ensures that critical parameters (e.g., VLAN configuration, STP settings, interface properties) are identical on both vPC peer switches. If a mismatch is detected, the vPC member port is suspended to prevent traffic black-holing caused by asymmetric forwarding. This mechanism is enforced by the Cisco NX-OS vPC Type-1 and Type-2 consistency checks.

Answer

vPC peer-link

Answer

vPC peer-keepalive

Answer

vPC auto-recovery

Question 13

Which TWO of the following are required components for a Cisco ACI contract to allow communication between EPGs?

Accepted Answer

A filter that specifies the traffic parameters.. A filter in Cisco ACI defines the specific traffic parameters—such as IP protocol, source/destination ports, and EtherType—that are permitted or denied between EPGs. Without a filter, the contract has no criteria to match traffic, so communication cannot be allowed. Option B is correct because a subject binds one or more filters to a contract and specifies the direction (consumer-to-provider or bidirectional) in which the filter is applied, making it an essential component for the contract to function.

Answer

A tenant.

Answer

A QoS class.

Answer

A VRF.

Question 14

In a Cisco UCS Central environment, which feature enables global consistency of boot order and firmware policies across multiple UCS domains?

Accepted Answer

Global Service Profile Templates. UCS Central allows defining global service profile policies that can be applied to multiple UCS domains, ensuring consistency. Policies such as boot order, firmware, and BIOS can be created centrally and pushed to domains.

Answer

Cisco IMC Supervisor

Answer

Fabric Interconnect Interconnectivity

Answer

UCS Manager Backup and Restore

Question 15

In a HyperFlex cluster with replication factor 3 (RF3), a node fails completely. The cluster has five nodes. What is the minimum number of nodes that must be operational for the cluster to continue serving data without interruption?

Accepted Answer

3 nodes. With RF3, data is replicated on three nodes. If one node fails, the cluster can continue serving data as long as at least three nodes (including the failed node's replicas on other nodes) are available. Since the cluster has five nodes, even with one failure, four nodes remain, which is sufficient.

Answer

4 nodes

Answer

5 nodes

Answer

2 nodes

Question 16

In an ACI fabric, an automation engineer needs to deploy tenant policies in an idempotent manner. Which approach is most aligned with best practices?

Accepted Answer

Use Ansible with state: present in the cisco.aci collections. Ansible's `state: present` in the `cisco.aci` collection inherently provides idempotency: it checks the current state of the ACI object and only applies changes if the desired state differs, ensuring no duplicate or conflicting configurations. This aligns with best practices for automation, as it avoids manual error handling and guarantees consistent policy deployment without side effects.

Answer

Use the REST API with POST method for each creation

Answer

Write CLI scripts using expect or pexpect

Answer

Use Python SDK with a check-and-create loop

Question 17

A Cisco MDS switch is connected to a Fibre Channel storage array and a host. The host cannot see the storage LUNs. The 'show flogi database' command on the MDS shows the host's WWPN, but the 'show fcns database' does not show the storage target. What is the most likely cause?

Accepted Answer

The storage target is not logged into the fabric.. The 'show flogi database' command displays all devices that have completed the Fabric Login (FLOGI) process, which the host has done. However, the 'show fcns database' command lists only devices that have registered with the Fabric Name Server (via FDISC or FLOGI with PLOGI). Since the storage target is not in the name server database, it means the target has not logged into the fabric (or has not registered its FC-4 type/SCSI features), preventing the host from discovering its LUNs. This is the most likely cause because the host can see its own WWPN in the FLOGI database but cannot see the target in the FCNS database.

Answer

The zone configuration is incorrect.

Answer

The host and target are in different VSANs.

Answer

The host is not in the name server database.

Question 18

Which feature on a Nexus switch uses DHCP snooping binding information to filter IP traffic on a per-port basis?

Accepted Answer

IP Source Guard. IP Source Guard uses DHCP snooping bindings to filter IP traffic, allowing only traffic from valid IP-MAC pairs.

Answer

Port Security

Answer

Dynamic ARP Inspection

Answer

CoPP

Question 19

Which TWO of the following are best practices when interconnecting two Cisco MDS 9700 directors via Fibre Channel ISLs?

Accepted Answer

Configure the ISL ports as trunking E_ports. Trunking E_ports (TE_ports) are the standard configuration for inter-switch links (ISLs) in Cisco MDS fabrics. TE_ports enable the exchange of fabric services, VSAN trunking, and support for multiple VSANs over a single ISL, which is essential for scalable and efficient Fibre Channel SAN designs.

Answer

Enable NPIV on the ISL ports to allow multiple FCIDs

Answer

Use Fibre Channel port channels to bundle multiple ISLs

Answer

Configure the ISL ports as F_ports to increase scalability

Question 20

An engineer is configuring a UCS server for VMware ESXi. The service profile must support NPIV for virtual machine SAN connectivity. Which two conditions must be met? (Choose two.)

Accepted Answer

The WWPN must be unique per virtual machine. NPIV (N_Port ID Virtualization) requires each virtual machine to have a unique World Wide Port Name (WWPN) so that the SAN fabric can distinguish and manage each VM's storage traffic independently. This allows multiple virtual machines to share a single physical HBA while each appears as a separate initiator to the SAN.

Answer

The vHBA must be set to 'Fabric: A' only

Answer

The vHBA must be set to 'Fabric: dual' mode

Answer

The vHBA must be created with a fabric failover policy