350-601 Practice Test 6 — 10 Questions

Question 1

Arrange the steps to create a service profile template in Cisco UCS Manager.

Accepted Answer

Create UUID Suffix Pool, then Create vNIC Template, then Create Service Profile Template (referencing the pool and vNIC template), then Associate with a Server Pool. Service profile template requires UUID pool, vNIC template, profile creation, server pool association, and assignment.

Answer

Create vNIC Template, then Create UUID Suffix Pool, then Create Service Profile Template, then Associate with a Server Pool

Answer

Create Service Profile Template, then Create UUID Suffix Pool, then Create vNIC Template, then Associate with a Server Pool

Answer

Associate with a Server Pool, then Create UUID Suffix Pool, then Create vNIC Template, then Create Service Profile Template

Question 2

A DevOps team is implementing CI/CD for network configuration changes on Nexus switches. Which tool is most suitable for version control of network configuration files?

Accepted Answer

Git. Git is a distributed version control system widely used for managing infrastructure as code, including network configurations. Ansible is for automation, Jenkins for CI/CD pipelines, and Docker for containers.

Answer

Jenkins

Answer

Ansible

Answer

Docker

Question 3

Which Nexus feature dynamically validates ARP packets to prevent man-in-the-middle attacks?

Accepted Answer

Dynamic ARP Inspection. Dynamic ARP Inspection (DAI) intercepts ARP packets and validates them against DHCP snooping bindings.

Answer

DHCP snooping

Answer

IP Source Guard

Answer

Port security

Question 4

An engineer needs to protect the control plane of a Nexus 9000 switch from CPU-targeted attacks. Which feature should be configured?

Accepted Answer

CoPP. Control Plane Policing (CoPP) applies QoS policies to control plane traffic to prevent DoS attacks.

Answer

DHCP snooping

Answer

Port security

Answer

IP Source Guard

Question 5

Which statement is true about the VLANs carried on a VPC peer-link?

Accepted Answer

The peer-link carries all VLANs that are allowed on the trunk interface.. In a vPC domain, the peer-link is a special trunk that carries all VLANs allowed on the trunk interface, including those not present on any member port. This ensures that orphaned traffic (traffic arriving on the peer-link destined for a device connected to the other vPC peer) can be forwarded correctly. The peer-link must carry all VLANs to maintain Layer 2 connectivity and loop-free behavior without relying on spanning tree.

Answer

The peer-link carries only the VLANs allowed on the member interfaces.

Answer

The peer-link requires spanning-tree port type edge trunk configuration.

Answer

The peer-link must be configured as a layer 3 interface.

Question 6

A storage network using Cisco MDS 9700 switches has two VSANs (100 and 200). The engineer wants to share a physical ISL between both VSANs while maintaining traffic isolation. Which feature should be used?

Accepted Answer

VSAN trunking. VSAN trunking allows a single physical ISL to carry traffic for multiple VSANs by adding a VSAN tag to each frame, ensuring traffic isolation between VSANs 100 and 200. This is the native Cisco MDS feature designed for sharing inter-switch links across VSANs without merging their control planes or forwarding tables.

Answer

PortChannel with trunk mode on

Answer

Inter-VSAN Routing (IVR)

Answer

FSPF metric manipulation

Question 7

An organization uses VXLAN EVPN for network segmentation. Which component provides per-tenant isolation of control plane traffic?

Accepted Answer

VRF. In VXLAN EVPN, per-tenant isolation of control plane traffic is achieved through the use of VRFs (Virtual Routing and Forwarding instances). Each tenant is assigned a unique VRF, which maintains its own separate routing table and forwarding decisions, ensuring that control plane information (such as MAC/IP routes advertised via MP-BGP EVPN) is isolated between tenants. This is distinct from data plane isolation, which is provided by VXLAN Network Identifiers (VNIs).

Answer

VLAN

Answer

VNI

Answer

VXLAN tunnel

Question 8

Which RAID level provides striping with parity and can tolerate a single disk failure while offering higher storage efficiency than RAID 1?

Accepted Answer

RAID 5. RAID 5 uses block-level striping with distributed parity, tolerating a single disk failure while using the capacity of only one disk for parity. This gives higher storage efficiency than RAID 1, which mirrors data and effectively loses 50% of capacity. RAID 5 is the classic answer for 'striping with parity, single-disk fault tolerance, better efficiency than mirroring.'

Answer

RAID 0

Answer

RAID 6

Answer

RAID 1

Question 9

A Cisco MDS switch is being configured to support multiple isolated Fibre Channel fabrics over a single physical infrastructure. Which feature should be used to achieve this isolation?

Accepted Answer

VSANs. VSANs (Virtual SANs) are used to create multiple isolated Fibre Channel fabrics over a single physical infrastructure. Each VSAN operates as an independent fabric with its own fabric services, zoning, and domain ID. This provides isolation and allows multiple fabrics to share the same physical switches and links.

Answer

VLANs

Answer

PortChannels

Answer

Zoning

Question 10

A network administrator is configuring a Cisco Nexus switch to use NX-API for automation. Which statement about NX-API is true?

Accepted Answer

NX-API supports JSON-RPC and RESTful API calls. NX-API is a feature on Cisco Nexus switches that provides both a RESTful API using HTTP/HTTPS and a JSON-RPC interface for programmatic access to the switch's CLI commands. This dual support allows automation tools to interact with the switch using standard web protocols and data formats, making option A correct.

Answer

NX-API requires the use of Python scripts exclusively

Answer

NX-API only supports XML data format

Answer

NX-API requires a separate license and is not included in NX-OS