350-601 Practice Test 9 — 10 Questions

Question 1

A network administrator implements the ACL shown. After verifying the ACL statistics, all counters show 0 matches. What is the most likely cause?

Accepted Answer

The ACL is applied to the wrong interface.. If the ACL is applied to the wrong interface, traffic never traverses that interface, so the ACL counters remain at 0. ACLs must be applied to the interface where traffic enters (inbound) or exits (outbound) the device; applying to an interface that does not carry the relevant traffic results in no matches.

Answer

The ACL entries are in the wrong order.

Answer

The 'permit ip any any' entry causes all traffic to be permitted before inspection.

Answer

The ACL is applied outbound instead of inbound.

Question 2

An automation engineer is using the cisco_nxapi Python library to configure a Nexus switch. Which step is required before using the library?

Accepted Answer

Enable NX-API on the Nexus switch with 'feature nxapi'.. The cisco_nxapi library uses NX-API, which must be enabled on the Nexus switch via 'feature nxapi'.

Answer

Configure a NETCONF session.

Answer

Generate an SSH key pair for authentication.

Answer

Install the library on the Nexus switch using pip.

Question 3

An engineer is configuring FCoE on a Cisco Nexus 5000 switch. The switch connects to a Fibre Channel storage array. The FCoE Initialization Protocol (FIP) snooping must be enabled. What is the effect of enabling FIP snooping?

Accepted Answer

It constructs a database of ENode MAC addresses and FC-MAPs.. FIP snooping on a Cisco Nexus 5000 switch constructs a database of ENode MAC addresses and FC-MAPs by inspecting FIP discovery, advertisement, and login frames. This database is used to enforce FCoE traffic only between authorized ENodes and FCFs, preventing rogue devices from injecting FCoE traffic. It does not terminate FCoE VLANs, act as an FCoE forwarder, or enforce zone-based policies directly.

Answer

It enables the switch to terminate FCoE VLANs.

Answer

It provides FC-BB_6 compliant FCoE traffic forwarding.

Answer

It enables the switch to act as an FCoE forwarder.

Answer

It allows the switch to enforce zone-based policy for FCoE traffic.

Question 4

Which VLAN trunking protocol is used by default on Cisco Nexus switches to carry multiple VLANs over a single link?

Accepted Answer

802.1Q. 802.1Q is the IEEE standard trunking protocol used by default on Cisco Nexus switches to carry multiple VLANs over a single link. Unlike older Cisco switches that defaulted to ISL, Nexus switches exclusively support 802.1Q encapsulation for VLAN trunking, as ISL is not supported on the NX-OS platform.

Answer

VTP

Answer

DTP

Answer

ISL

Question 5

In ACI, which model is used for micro-segmentation to allow traffic between EPGs?

Accepted Answer

Whitelist model using contracts. ACI uses a whitelist (default-deny) security model where no traffic flows between EPGs unless a contract explicitly permits it. Contracts define the protocols and ports allowed between a provider EPG and a consumer EPG, and the contract must be applied to both sides for traffic to pass. This is the foundational micro-segmentation mechanism in ACI.

Answer

Blacklist model using taboo contracts

Answer

IP-based ACLs on leaf switches

Answer

VRF leaking

Question 6

Which protocol is recommended by Cisco for network device administration AAA due to its separation of authentication, authorization, and accounting?

Accepted Answer

TACACS+. TACACS+ encrypts the entire packet and separates AAA functions.

Answer

LDAP

Answer

RADIUS

Answer

Kerberos

Question 7

A storage administrator notices that a Fiber Channel link between a server and a Cisco MDS switch is flapping every few minutes. The server's HBA and the switch port are both configured for 16 Gbps. Which action is most likely to resolve the issue?

Accepted Answer

Replace the SFP module on the switch port with a compatible Cisco SFP. The most likely cause of link flapping on a 16 Gbps Fiber Channel link is an incompatible or faulty SFP module. Cisco MDS switches require Cisco-qualified SFPs to ensure proper signal integrity and protocol negotiation; using a third-party or mismatched SFP can cause intermittent link drops. Replacing the SFP with a compatible Cisco SFP directly addresses the hardware compatibility issue that leads to flapping.

Answer

Increase the link timeout interval on the switch port

Answer

Configure the switch port speed to auto-negotiate

Answer

Change the admin state of the interface to shut and no shut

Question 8

A network engineer is designing a spine-leaf fabric with oversubscription ratio of 3:1. Each leaf switch uses 40 Gbps uplinks to the spine and has 48 x 10 Gbps server ports. How many spine links are needed per leaf to achieve the target oversubscription?

Accepted Answer

4. The oversubscription ratio is the ratio of server-facing bandwidth to spine-facing bandwidth. Each leaf has 48 x 10 Gbps = 480 Gbps of server-facing capacity. To achieve a 3:1 oversubscription ratio, the spine-facing bandwidth must be 480 Gbps / 3 = 160 Gbps. Since each uplink is 40 Gbps, you need 160 / 40 = 4 spine links per leaf.

Answer

3

Answer

2

Answer

5

Question 9

A data center architect needs to enforce role-based access control for UCS Manager. What is the correct approach?

Accepted Answer

Create user roles with specific privileges in UCS Manager. UCS Manager provides RBAC by allowing administrators to create custom roles with specific privileges and assign them to users.

Answer

Enable CoPP for management access

Answer

Use TACACS+ to assign roles

Answer

Use RADIUS for authentication only

Question 10

What is the primary purpose of NX-API on Cisco Nexus switches in a data center automation context?

Accepted Answer

To provide a RESTful API that allows programmatic access to CLI commands and structured data output.. NX-API provides a RESTful API interface on Cisco Nexus switches, enabling programmatic access to CLI commands and returning structured data in formats like JSON or XML. This is essential for data center automation because it allows external tools (e.g., Ansible, Python scripts) to configure and retrieve state from the switch without requiring interactive CLI sessions, directly supporting infrastructure-as-code workflows.

Answer

To replace SNMP for monitoring and alerting.

Answer

To enable direct configuration from a web browser without CLI.

Answer

To create a web-based GUI for manual switch configuration.