350-601 Practice Exam 58 — 20 Questions

Question 1

Which NX-OS command displays the vPC consistency parameters and status on a Cisco Nexus switch?

Accepted Answer

show vpc consistency-parameters. The 'show vpc consistency-parameters' command is the correct choice because it directly displays the vPC consistency parameters and their status, which are critical for ensuring that both vPC peer switches have identical configurations for type-1 parameters (e.g., STP, VLANs, MTU). If these parameters mismatch, the vPC will be suspended to prevent traffic loops or forwarding issues. This command is the dedicated tool for verifying consistency before and after vPC configuration changes.

Answer

show vpc peerlink

Answer

show vpc brief

Answer

show running-config vpc

Question 2

Which Cisco UCS component is responsible for aggregating traffic from multiple blade servers in a 5108 chassis to the Fabric Interconnect?

Accepted Answer

Cisco UCS 5108 Chassis I/O Module (IOM). The I/O Module (IOM) in the 5108 chassis connects to the midplane and uplinks to the Fabric Interconnect via server ports.

Answer

Cisco UCS 2200 Series Fabric Extender

Answer

Cisco UCS 6300 Series Fabric Interconnect

Answer

Cisco UCS 2100 Series Fabric Extender

Question 3

What is the primary benefit of using UCS service profiles for server deployment?

Accepted Answer

Hardware abstraction and stateless computing. Service profiles abstract hardware configuration, allowing rapid provisioning and stateless computing. A server can be replaced without reconfiguration by simply associating the same service profile.

Answer

Increased network bandwidth

Answer

Reduced power consumption

Answer

Simplified storage zoning

Question 4

An NFS client is unable to write to a mounted export. The client can read files. What is the most likely cause?

Accepted Answer

Export permissions are read-only for the client. The NFS export permissions are configured on the NFS server using the /etc/exports file. If the export is set to 'ro' (read-only) for the client's IP or subnet, the client can read files but any write attempt will be denied at the server level, regardless of the client's mount options. This is the most direct cause of a client being able to read but not write.

Answer

Network latency causing timeouts

Answer

Incorrect mount options (e.g., ro instead of rw)

Answer

NFS version mismatch

Question 5

A Cisco ACI fabric has contracts configured to allow traffic between two EPGs. After deployment, traffic between endpoints in these EPGs is being dropped, but contract statistics show no packets have been permitted. The administrator checks the contract configuration and it looks correct. What is the most likely cause?

Accepted Answer

The contract is configured only on the provider EPG, but the consumer EPG is not consuming the contract.. The most likely cause is that the contract is configured on the provider EPG but the consumer EPG is not configured to consume it. In Cisco ACI, a contract must be explicitly provided by one EPG and consumed by another for traffic to be permitted. If the consumer EPG does not have the contract applied, the contract will not be enforced, and traffic will be dropped even if the contract configuration appears correct. The contract statistics showing no permitted packets confirm that the contract is not being applied to the traffic flow.

Answer

The contract is applied to the wrong VRF.

Answer

The filter direction is set to both, but the contract is using an incorrect filter.

Answer

The endpoints are in different VMM domains.

Question 6

Which component connects a UCS 5108 blade chassis to the Fabric Interconnects?

Accepted Answer

IOM (Input/Output Module). IOMs (Input/Output Modules) in the chassis provide connectivity to the FIs.

Answer

CIMC

Answer

Midplane

Answer

FEX (Fabric Extender)

Question 7

In a spine-leaf architecture, what is the primary advantage of using a full mesh between spines and leaves?

Accepted Answer

It provides uniform low-latency paths between any two leaves. In a spine-leaf architecture, a full mesh between spines and leaves ensures that every leaf switch is connected to every spine switch. This design provides multiple equal-cost paths between any two leaf switches, allowing for uniform low-latency forwarding because traffic can traverse a single spine hop without congestion or path asymmetry. The full mesh eliminates the need for complex path selection and guarantees predictable, consistent latency across the fabric.

Answer

It reduces the total number of ports required

Answer

It removes the requirement for Spanning Tree Protocol

Answer

It eliminates the need for VLANs in the data center

Question 8

Which two statements are true about Cisco TrustSec? (Choose two.)

Accepted Answer

It requires a Cisco ISE policy server. Cisco TrustSec relies on a Cisco ISE policy server to define and enforce security policies based on Security Group Tags (SGTs). ISE acts as the centralized policy decision point, dynamically assigning SGTs to authenticated endpoints and distributing the SGT-to-IP bindings to network devices via SXP or inline tagging.

Answer

It requires 802.1X authentication

Answer

It provides encryption at Layer 2

Answer

It uses VLANs for segmentation

Question 9

Which FCoE component is responsible for encapsulating Fibre Channel frames into Ethernet frames?

Accepted Answer

FCoE module on the switch or adapter. The FCoE module on the switch or adapter is the component that performs the encapsulation of native Fibre Channel frames into Ethernet frames. This module handles the conversion by adding an Ethernet header, including the EtherType 0x8906 for FCoE, and managing the mapping of Fibre Channel constructs (e.g., VSANs) to VLANs. Without this module, Fibre Channel traffic cannot traverse an Ethernet network.

Answer

FCoE Forwarder (FCF)

Answer

Virtual Fibre Channel interface (VFC)

Answer

VN interface

Question 10

Which TWO methods are supported for authenticating to the APIC REST API?

Accepted Answer

Certificate-based authentication. The APIC REST API supports certificate-based authentication (option B) and local AAA user authentication with a username and password (option C). Certificate-based authentication uses X.509 certificates for secure, non-interactive API access, while local AAA authentication relies on credentials stored directly on the APIC. Both methods are explicitly documented as valid for REST API calls.

Answer

SAML authentication

Answer

RADIUS/TACACS+ authentication

Answer

LDAP authentication

Question 11

In a VXLAN EVPN fabric using BGP as the control plane, which BGP address family is used to exchange MAC/VTEP reachability information between VTEPs?

Accepted Answer

L2VPN EVPN. In a VXLAN EVPN fabric, the L2VPN EVPN address family (AFI 25, SAFI 70) is used to exchange MAC/VTEP reachability information between VTEPs. This address family carries BGP EVPN routes (type-2 for MAC/IP advertisements) that include the MAC address, VNI, and VTEP IP, enabling the control plane to distribute host reachability without flooding.

Answer

IPv4 unicast

Answer

IPv6 unicast

Answer

VPNv4 unicast

Question 12

You manage a UCS domain with two fabric interconnects (FI-A and FI-B) in an cluster. The domain contains 8 blade servers. After a power failure, both FIs come back online, but the cluster experiences a split-brain situation where both FIs claim to be primary. The subordinate FI (FI-B) shows all blades as 'Discovery' state. You suspect configuration mismatch. You have console access to both FIs. Which recovery procedure should be performed to restore a stable cluster?

Accepted Answer

On the subordinate FI (FI-B), enter the recovery mode and force a re-initialization, then reset the cluster. In a UCS split-brain scenario where the subordinate FI (FI-B) shows blades in 'Discovery' state due to a configuration mismatch, the proper recovery is to boot FI-B into recovery mode (using the 'recovery' boot option or pressing Ctrl+R at the appropriate prompt) and force a re-initialization, which resets its configuration to match the primary FI (FI-A). After re-initialization, resetting the cluster (via the 'cluster reset' command or equivalent) re-establishes the primary-subordinate relationship and synchronizes the configuration, restoring stable operation without affecting the primary FI's data or requiring a full factory reset.

Answer

Reset both FIs to factory defaults and reconfigure from backup

Answer

Boot the FIs into the EFI shell and clear the flash

Answer

Perform a stateful switchover (SSO) on both FIs

Question 13

A storage array supports both synchronous and asynchronous replication. The application requires zero data loss in case of a site failure. Which replication type should be chosen?

Accepted Answer

Synchronous replication. Synchronous replication writes data to the primary and secondary storage before acknowledging the write, ensuring zero data loss (RPO=0). Asynchronous replication may have some lag.

Answer

Asynchronous replication

Answer

Thin provisioning

Answer

Snapshot-based replication

Question 14

A Fibre Channel switch port is experiencing a high number of CRC errors. Which action should be taken to resolve this issue?

Accepted Answer

Replace the fiber optic cable between the switch and the storage device.. CRC errors in Fibre Channel typically indicate physical-layer issues such as damaged or dirty fiber optic cables, faulty connectors, or signal degradation. Replacing the cable directly addresses the most common root cause of CRC errors, which is physical-layer corruption of frames. Other options like reducing speed or adjusting buffer credits do not fix the underlying physical integrity problem.

Answer

Reduce the port speed to 2 Gbps.

Answer

Reconfigure the zone to include only the affected device.

Answer

Increase the buffer credits on the port.

Question 15

In Cisco ACI, which component is responsible for translating EPG communication policies into concrete configuration on leaf switches?

Accepted Answer

APIC controller. The APIC controller is the centralized policy engine in Cisco ACI. It translates high-level EPG communication policies (contracts, filters, subjects) into the concrete switch configuration (e.g., OpFlex policy elements, VXLAN tunnel mappings, and hardware table entries) and pushes them to leaf switches via the OpFlex protocol. Without the APIC, leaf switches cannot autonomously interpret or apply these policies.

Answer

Leaf switch

Answer

Spine switch

Answer

VMM domain

Question 16

In a spine-leaf data center architecture, what is the primary purpose of using equal-cost multipath (ECMP) routing?

Accepted Answer

To provide load balancing across multiple paths between leaf and spine switches. In a spine-leaf architecture, ECMP is used to distribute traffic across multiple equal-cost paths between leaf and spine switches. This provides load balancing by hashing flows across available uplinks, maximizing bandwidth utilization and ensuring no single link is overwhelmed. ECMP is a Layer 3 routing feature that operates with protocols like OSPF or BGP, not a Layer 2 or encapsulation mechanism.

Answer

To enable VXLAN encapsulation between VTEPs

Answer

To ensure loop-free Layer 2 topology

Answer

To reduce the number of VLANs required in the fabric

Question 17

A data center engineer is using Cisco Intersight to manage a hybrid infrastructure that includes UCS servers and HyperFlex clusters. The engineer needs to deploy a new server profile to a UCS domain that is claimed in Intersight. The profile includes a firmware policy that specifies version 4.1(3c) for the motherboard and 5.0(3a) for the storage controller. The target server is a C-Series rack mount server currently running firmware version 4.0(2a) on the motherboard. After deploying the profile, the server goes into a 'Pending' state and does not become 'Selectable'. The engineer checks the UCS Manager and sees that the server is in 'Discovery Failed' state. The engineer has verified that network connectivity is fine and the CIMC is accessible. What should the engineer do to resolve this?

Accepted Answer

Update the firmware manually on the server using UCS Manager before deploying the profile.. When a firmware policy in Intersight specifies a version that is not compatible with the current firmware on the server, the server may enter a 'Discovery Failed' state. In this scenario, the motherboard firmware must be updated to a version that supports the storage controller firmware 5.0(3a) before the profile can be applied. Manually updating the firmware via UCS Manager ensures the server meets the prerequisite firmware baseline, allowing Intersight to complete the deployment.

Answer

Ensure that the firmware policy in Intersight is consistent with the current firmware on the server.

Answer

Remove the server from Intersight inventory and re-claim it.

Answer

Reset the server's CIMC to factory defaults and re-discover it.

Question 18

Which TWO components are required in a HyperFlex cluster to provide both compute and storage functionality?

Accepted Answer

Storage Controller VM (SCVM). HyperFlex converged nodes provide both compute and storage. The controller VM (SCVM) manages storage, and the hypervisor (e.g., ESXi) runs workloads.

Answer

UCS Manager

Answer

CIMC

Answer

Witness VM

Question 19

An engineer is deploying a new VXLAN fabric and must ensure that the control plane can handle MAC advertisement without flooding. Which TWO protocols can be used for control plane learning in VXLAN? (Select two.)

Accepted Answer

OpenFlow. MP-BGP EVPN (Option D) is the primary control plane protocol for VXLAN, defined in RFC 7432, enabling MAC address advertisement without flooding. OpenFlow (Option B) is used in SDN controllers to manage forwarding tables, and in some VXLAN implementations (e.g., VMware NSX), it can serve as the control plane for MAC learning. IGMP Snooping (A) handles multicast group management, not MAC advertisement. VXLAN data plane learning (C) is the flood-and-learn method, which the question explicitly wants to avoid. OSPF (E) is a routing protocol, not a VXLAN control plane.

Answer

IGMP Snooping

Answer

VXLAN data plane learning

Answer

OSPF

Question 20

A data center architect is designing an ACI fabric with VMM integration to VMware vSphere. The goal is to allow dynamic policy assignment to virtual machines. What is the correct configuration hierarchy to enable this?

Accepted Answer

Create a VMM domain under the tenant, integrate with vCenter, and map EPGs to port groups.. VMM integration in ACI requires creating a VMM domain under a tenant (or common tenant), integrating it with vCenter, and then mapping EPGs to vSphere port groups. This allows dynamic policy assignment to VMs based on their port group membership, enabling micro-segmentation and automated policy enforcement as VMs move across hosts.

Answer

Create a VMM domain under the infra tenant and associate it with the physical domain.

Answer

Use a Layer 4-Layer 7 service graph to connect VMs directly.

Answer

Configure VXLAN directly on the vSphere distributed switch.