350-601 Practice Test 8 — 10 Questions

Question 1

A network engineer is deploying a Cisco HyperFlex cluster with four HX220c M5 nodes. The engineer wants to ensure that the cluster can tolerate a single node failure without data loss while maximizing usable capacity. Which replication factor should the engineer configure?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

Replication Factor 2 (RF2). Replication Factor 2 (RF2) ensures two copies of data, allowing the cluster to survive one node failure. It is the standard configuration for clusters requiring single-failure tolerance and offers better capacity utilization than RF3. RF1 offers no redundancy, and erasure coding is not a replication factor.

Answer

Erasure Coding

Answer

Replication Factor 1 (RF1)

Answer

Replication Factor 3 (RF3)

Question 2

In a Cisco ACI fabric, a new EPG is created and associated with a bridge domain that has 'Unicast Routing' enabled. However, endpoints in that EPG cannot communicate with endpoints in other EPGs in the same VRF. What is missing?

Accepted Answer

A contract between the EPGs. In Cisco ACI, communication between EPGs within the same VRF is not allowed by default; it requires a contract. A contract defines the policies (allow/deny) and filters for traffic between EPGs. Without a contract, all traffic is dropped, even if the bridge domain has unicast routing enabled. Option C is correct because the missing element is the contract that explicitly permits inter-EPG communication.

Answer

The EPG must be attached to a Layer 3 outside

Answer

The bridge domain must have 'L3 Unknown Multicast Flooding' set

Answer

A route leak between bridge domains

Question 3

Refer to the exhibit. What is the current state of the VPC domain?

Accepted Answer

Operational. The exhibit shows the output of 'show vpc' with the vPC domain ID set to 100, the peer-keepalive link status as 'Active', and the peer-link status as 'up'. The vPC role is 'primary' and the operational status is listed as 'operational', which indicates that the vPC domain is fully functional and all consistency checks have passed. Therefore, the current state is operational.

Answer

VPC domain not configured

Answer

Peer-link down

Answer

Consistency check failed

Question 4

Which AAA protocol is recommended by Cisco for network device administration, as it separates authentication, authorization, and accounting?

Accepted Answer

TACACS+. TACACS+ encrypts the entire packet and separates AAA functions, making it preferred over RADIUS for admin access.

Answer

RADIUS

Answer

LDAP

Answer

802.1X

Question 5

A data center architect is designing a SAN with two MDS switches using VSANs. Which method ensures traffic isolation between departments while allowing sharing of a tape library?

Accepted Answer

Create separate VSANs for each department and a shared VSAN for the tape library with inter-VSAN routing (IVR).. It uses separate VSANs to isolate each department's traffic at Layer 2, while inter-VSAN routing (IVR) selectively allows the tape library to be shared across VSANs without merging them. IVR enables controlled communication between specific initiators and targets in different VSANs, preserving isolation for all other traffic.

Answer

Use FCIP tunnels for each department.

Answer

Create separate VSANs and merge them for the tape library.

Answer

Use one VSAN for all departments and one zone for each department.

Question 6

A Cisco MDS switch is configured with fabric binding to restrict which switches can join the fabric. A new switch is added, but it fails to establish an E-port connection. What is the most likely cause?

Accepted Answer

The new switch's WWN is not included in the fabric binding configuration. Fabric binding on a Cisco MDS switch uses the fabric-binding database to enforce a whitelist of allowed switch WWNs. When a new switch attempts to bring up an E-port, the principal switch checks the new switch's WWN against this database. If the WWN is not present, the E-port is automatically isolated, preventing the switch from joining the fabric. This is the most direct cause of the failure described.

Answer

Incompatible SFP modules between the switches

Answer

Incorrect zoning configuration on the existing switch

Answer

The new switch has a higher priority than the principal switch

Question 7

A Cisco ACI fabric has contracts configured to allow traffic between two EPGs. After deployment, traffic between endpoints in these EPGs is being dropped, but contract statistics show no packets have been permitted. The administrator checks the contract configuration and it looks correct. What is the most likely cause?

Accepted Answer

The contract is configured only on the provider EPG, but the consumer EPG is not consuming the contract.. The most likely cause is that the contract is configured on the provider EPG but the consumer EPG is not configured to consume it. In Cisco ACI, a contract must be explicitly provided by one EPG and consumed by another for traffic to be permitted. If the consumer EPG does not have the contract applied, the contract will not be enforced, and traffic will be dropped even if the contract configuration appears correct. The contract statistics showing no permitted packets confirm that the contract is not being applied to the traffic flow.

Answer

The contract is applied to the wrong VRF.

Answer

The filter direction is set to both, but the contract is using an incorrect filter.

Answer

The endpoints are in different VMM domains.

Question 8

A network engineer is troubleshooting an OSPF adjacency issue between two Nexus switches. The neighbors are stuck in the EXSTART state. What is the most likely cause?

Accepted Answer

MTU mismatch. When OSPF neighbors are stuck in the EXSTART state, the most common cause is an MTU mismatch. In EXSTART, the routers exchange Database Description (DBD) packets, which must be no larger than the interface MTU. If one interface has a smaller MTU, the DBD packet is dropped, preventing the adjacency from progressing to the Exchange state. Cisco Nexus switches default to an MTU of 1500 bytes, but any mismatch will cause this issue.

Answer

Hold timer mismatch

Answer

Incorrect area ID

Answer

Duplicate router ID

Question 9

An engineer is designing a UCS environment for a virtualized workload that requires high availability. Two Fabric Interconnects are deployed in an active-active configuration. Which statement about the role of the Fabric Interconnects is accurate?

Accepted Answer

Both FIs are active and can forward traffic, but only one manages the chassis at a time.. In a Cisco UCS environment with two Fabric Interconnects in an active-active cluster, both FIs are operational and can forward data traffic, but only one FI acts as the primary manager for the chassis at any given time. This provides high availability: if one FI fails, the other takes over management and continues forwarding traffic. Option B accurately describes this behavior.

Answer

The FIs are used only for management traffic and not for data traffic.

Answer

One FI acts as primary and the other as secondary, forwarding traffic only if the primary fails.

Answer

The FIs operate in a standalone mode and must be configured independently.

Question 10

An organization uses Cisco TrustSec to tag traffic. An endpoint is assigned SGT 5 (Developers) and another SGT 10 (Testers). The SGACL on the leaf switch permits traffic from SGT 5 to SGT 10 for HTTP but denies other. Which action is taken by the leaf switch?

Accepted Answer

It uses the SGACL to permit HTTP and deny other traffic. SGACLs enforce policy based on SGTs, not IP addresses.

Answer

It forwards the traffic to the Cisco ISE for policy decision

Answer

It applies an IP ACL based on the SGT

Answer

It drops all traffic between different SGTs unless a contract exists