350-601 Practice Test 8 — 10 Questions

Question 1

An engineer notices that a UCS server with a service profile using a QoS policy for FC traffic experiences excessive latency during heavy workloads. The Fibre Channel fabric is configured for lossless operation. Which design issue is most likely causing the latency?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

The QoS policy for FC traffic does not allocate enough buffer for the no-drop class.. The excessive latency during heavy workloads in a lossless Fibre Channel fabric is most likely due to insufficient buffer allocation for the no-drop class in the QoS policy. In UCS, the no-drop class (typically class-fcoe) must have adequate buffer space to prevent frame drops that trigger retransmissions and latency. Without enough buffer, the switch cannot absorb bursts, leading to congestion and increased latency even though the fabric is lossless.

Answer

The MTU on the Ethernet uplink from the FI is set to 1500 bytes.

Answer

Fibre Channel buffer-to-buffer credit recovery is disabled on the upstream switch.

Answer

The vHBA is configured for 16 Gbps but the upstream switch port is 8 Gbps.

Question 2

An engineer is troubleshooting a SAN performance issue. The show interface counters command shows high output discard counts on a particular Fibre Channel interface. What is the most likely cause?

Accepted Answer

Insufficient buffer credits on the transmitting port.. High output discard counts on a Fibre Channel interface indicate that the transmitting port is attempting to send frames faster than the receiving port can accept them. This is most commonly caused by insufficient buffer credits on the transmitting port, which limits the number of frames that can be in flight before an acknowledgment is required. When buffer credits are exhausted, frames are discarded at the transmit side, leading to output discards.

Answer

High CRC errors on the link.

Answer

Insufficient bandwidth due to latency.

Answer

Mismatched zone configurations.

Question 3

Refer to the exhibit. A UCS domain shows a 'Major' NVRAM backup failure alarm in Intersight. What is the best immediate action?

Accepted Answer

Attempt a manual NVRAM configuration backup from the primary Fabric Interconnect to the secondary.. A 'Major' NVRAM backup failure alarm in Intersight indicates that the automatic periodic backup of the UCS domain's configuration from the primary Fabric Interconnect (FI) to the secondary FI has failed. The best immediate action is to attempt a manual NVRAM configuration backup from the primary FI to the secondary, as this directly addresses the backup failure without disrupting domain operations or requiring re-registration.

Answer

Perform a factory reset on both Fabric Interconnects.

Answer

Reboot the primary Fabric Interconnect.

Answer

Reclaim the UCS domain from Intersight and register again.

Question 4

An engineer is troubleshooting a DHCP issue in a data center VLAN. Clients are unable to obtain IP addresses from the DHCP server. The switch has DHCP snooping enabled on the VLAN, and the DHCP server is connected to a trusted port. The clients are on untrusted ports. Which additional security feature is most likely causing the problem if the DHCP server is on a different subnet and the switch is not configured as a DHCP relay?

Accepted Answer

DHCP snooping with no IP helper address configured. When the DHCP server resides on a different subnet and the switch lacks an IP helper address (ip helper-address) configuration, DHCP snooping will not forward the DHCP broadcast from the client to the server. DHCP snooping relies on the switch to relay DHCP packets across subnets; without the helper address, the broadcast is dropped at the VLAN interface, preventing clients from obtaining IP addresses.

Answer

Dynamic ARP Inspection (DAI)

Answer

Control Plane Policing (CoPP) dropping DHCP packets

Answer

Port security with maximum MAC limit

Question 5

A UCS domain is configured with multiple service profile templates. An engineer wants to ensure that when a template is updated, all associated service profiles are automatically updated. Which property must be enabled in the template?

Accepted Answer

'Update on deployment'. The 'Update on deployment' property, when enabled in a service profile template, ensures that any changes made to the template are automatically applied to all associated service profiles during the next deployment or re-deployment. This is the correct mechanism in Cisco UCS Manager to propagate template updates to existing service profiles without manual intervention.

Answer

'Auto update'

Answer

'Enforce consistency'

Answer

'Synchronize to templates'

Question 6

A network engineer is configuring an ACI contract between an EPG and an external EPG. Which construct is used to permit traffic from the external EPG to the internal EPG?

Accepted Answer

The external EPG is the provider and the internal EPG is the consumer.. In Cisco ACI, the provider EPG exposes a contract, and the consumer EPG consumes it. To permit traffic from an external EPG to an internal EPG, the internal EPG must be the consumer (initiating the communication) and the external EPG must be the provider (offering the contract). This aligns with the default directionality of contracts, where the provider's filter rules allow inbound traffic from the consumer.

Answer

The internal EPG is the provider and the external EPG is the consumer.

Answer

Both EPGs are providers.

Answer

Both EPGs are consumers.

Question 7

A data center automation script uses Python's requests library to call the NX-API for a Nexus 9000 switch. The script works but returns HTTP 400. Which is a likely cause?

Accepted Answer

The request payload is malformed. HTTP 400 indicates a bad request, which in the context of NX-API typically means the JSON or XML payload sent to the switch does not conform to the expected schema. Common issues include missing required fields (e.g., 'ins_api' version, 'type', 'chunk', 'sid', 'input', 'outputformat'), incorrect JSON syntax, or invalid values for parameters like 'version' or 'type'. The requests library successfully delivered the HTTP request, but the NX-API rejected it due to malformed content.

Answer

The switch has no management IP

Answer

The script uses HTTP instead of HTTPS

Answer

The API is not enabled

Question 8

A server team reports that after connecting a new server to a switchport, the server can receive traffic but cannot send traffic. The port is configured with port security. What is the most likely cause?

Accepted Answer

The port security violation mode is set to protect. When port security violation mode is set to 'protect', the switch drops traffic from unauthorized MAC addresses without generating a syslog message or incrementing the violation counter. In this scenario, the server can receive traffic because the switch still forwards broadcast and unknown unicast frames to the port, but the server's transmitted frames are silently dropped because the switch does not learn the server's MAC address or forward its frames. This matches the symptom of one-way communication where the server can receive but not send.

Answer

The port is in errdisable state

Answer

The port security maximum is set to 1 and another device is connected

Answer

The server MAC address is not in the allowed list

Question 9

A storage administrator needs to isolate traffic between two departments on the same Fibre Channel SAN infrastructure. Each department has its own storage array and hosts. Which technology should be used to create separate logical fabrics without additional hardware?

Accepted Answer

VSANs. VSANs (Virtual SANs) allow partitioning of a single physical Fibre Channel fabric into multiple isolated logical fabrics, similar to VLANs in Ethernet.

Answer

NPV

Answer

Zoning

Answer

PortChannels

Question 10

An organization is deploying UCS B-series blades in a 5108 chassis connected to Fabric Interconnects A and B. Each blade has two vNICs. How should the vNICs be connected to the fabric to ensure maximum redundancy and bandwidth?

Accepted Answer

vNIC0 to FI A, vNIC1 to FI B, both active-active. For redundancy, vNICs should be connected to separate fabric interconnects (A and B) and active-active failover is recommended.

Answer

vNIC0 to FI A, vNIC1 to FI A via different ports

Answer

vNIC0 to FI A, vNIC1 to FI B with active-standby

Answer

Both vNICs connected to Fabric Interconnect A with active-standby failover