350-601 Network — All Questions With Answers

A data center engineer is troubleshooting intermittent connectivity between two servers in different VLANs. The servers are connected to different leaf switches in a VXLAN EVPN fabric. When checking the fabric, the engineer notices that the NVE interface on one leaf is up/up but the VNI for the server VLAN is not listed in 'show nve vni'. What is the most likely cause?

Question 2hardmultiple choice

An organization is deploying a new ACI fabric. The design requires that traffic between EPGs in the same bridge domain be allowed by default, but traffic between EPGs in different bridge domains must be denied unless explicitly permitted. Which contract scope configuration meets this requirement?

Question 3easymultiple choice

A network engineer is configuring OSPF on a Cisco Nexus switch for a data center network. The requirement is to ensure that the switch does not become the Designated Router (DR) on a multi-access segment. Which OSPF configuration achieves this?

Question 4hardmultiple choice

During a maintenance window, a network engineer plans to upgrade the NX-OS software on a pair of Nexus 9000 switches configured as vPC peers. The engineer wants to minimize traffic disruption. Which upgrade sequence is recommended?

Question 5mediummultiple choice

A data center uses Cisco ACI with multiple tenants. The security policy requires that all traffic between EPGs must be explicitly allowed via contracts. However, the operations team reports that communication between two EPGs in the same bridge domain is working even though no contract is applied. What is the most likely reason?

Question 6mediummulti select

Which TWO statements about VXLAN BGP EVPN control plane are true? (Choose two.)

Question 7hardmulti select

Which THREE conditions must be met for a Cisco Nexus switch to form a vPC? (Choose three.)

Question 8easymultiple choice

Refer to the exhibit. An engineer is configuring a server-facing interface on a Nexus switch. The server is running VMware ESXi with multiple virtual machines in VLANs 10, 20, and 30. After applying the configuration, the ESXi host reports that it cannot communicate on VLAN 30. Which configuration change should be made?

Exhibit

show running-config interface ethernet 1/1
!
interface Ethernet1/1
  switchport mode trunk
  switchport trunk allowed vlan 10,20,30
  spanning-tree port type edge trunk
  no shutdown

Question 9mediummultiple choice

Refer to the exhibit. A VXLAN VNI (10030) is operationally down. What is the most likely cause?

Exhibit

show interface nve 1
nve1 is up
  Interface-Address: 10.1.1.1/24
  NVE Mode: L3VPN
  Source Interface: loopback0
  Number of VNIs: 3
  VNI 10010: UP
  VNI 10020: UP
  VNI 10030: DOWN
  
show nve vni 10030
VNI 10030 (L3VPN)
  Associated VLAN: none
  Operational State: DOWN
  mcast group: 239.1.1.1

Question 10mediummultiple choice

An engineer is troubleshooting connectivity between two Nexus 9000 switches configured with vPC. The vPC peer link is up, but the vPC peer-keepalive link is failing. Which action should be taken to ensure vPC convergence in the event of a peer-link failure?

Question 11hardmultiple choice

Study the full QoS explanation →

A data center design requires Layer 2 extension between two sites using OTV. The network engineer notices that MAC addresses from Site A are not learned at Site B. OTV adjacency is up, and both sites have the same overlay interface configured. Which configuration issue is most likely the cause?

Question 12easymultiple choice

A network engineer is implementing QoS on a Nexus 9000 switch. The requirement is to prioritize storage traffic (iSCSI) and ensure lossless behavior. Which queuing strategy should be applied to the egress interface?

Question 13mediummultiple choice

An organization is deploying a new leaf-spine fabric with Cisco ACI. The requirement is to allow inter-tenant communication between two EPGs in different tenants. Which configuration object is necessary to enable this communication?

Question 14hardmulti select

Which TWO configuration steps are necessary to enable VXLAN EVPN on a Cisco Nexus 9000 switch using the centralized anycast gateway model?

Question 15mediummultiple choice

A server connected to Ethernet1/1 is unable to communicate on VLAN 1. The server is configured to send untagged frames. Based on the exhibit, what is the most likely cause?

Exhibit

Refer to the exhibit.

! Nexus 9000 switch
interface Ethernet1/1
  switchport mode trunk
  switchport trunk allowed vlan 10,20,30
  spanning-tree port type edge trunk
  no shutdown

! Switchport statistics
Ethernet1/1 is up, line protocol is up
  Hardware: 1000/10000 Ethernet, address: xxxx.xxxx.xxxx
  Description: Server connection
  MTU 1500 bytes
  Port mode is trunk
  Trunk encapsulation is 802.1Q
  Trunk allowed vlans: 10,20,30
  Trunk native vlan: 1
  Vlans allowed on trunk: 10,20,30
  Vlans active and untagged: 1
  Vlans active and tagged: 10,20,30

interface port-channel1
  switchport mode trunk
  switchport trunk allowed vlan 10,20,30
  spanning-tree port type edge trunk
  no shutdown

Question 16hardmultiple choice

You are a network engineer at a financial institution. The company has two data centers: DC1 and DC2, connected via a dark fiber link. Each data center has a pair of Nexus 7000 switches in a vPC configuration. The dark fiber link connects to a port on each Nexus 7000 pair using a Layer 2 port-channel. The requirement is to extend VLAN 100 between the two data centers for a critical application that requires a stretched Layer 2 domain. The current configuration has the port-channel on both sides set to mode 'active' with LACP. VLAN 100 is allowed on the trunk. The application servers report intermittent connectivity issues, with some packets being dropped. Upon inspection, you notice that the MAC address table on the Nexus 7000 in DC1 shows the MAC address of the server in DC2 on the dark fiber port-channel interface, but also on a local access port connected to a different server in the same VLAN. What is the most likely cause of the intermittent connectivity?

Question 17mediumdrag order

Arrange the steps to configure a vPC domain on a pair of Cisco Nexus switches.

Drag steps to the numbered slots on the right, or tap a step then tap a slot.

Steps

Order

1Step 1

2Step 2

3Step 3

4Step 4

5Step 5

Question 18mediumdrag order

Arrange the steps to create a service profile template in Cisco UCS Manager.

Drag steps to the numbered slots on the right, or tap a step then tap a slot.

Steps

Order

1Step 1

2Step 2

3Step 3

4Step 4

5Step 5

Question 19mediummatching

Match each Cisco data center technology to its primary purpose.

Drag a concept onto its matching description — or click a concept then click the description.

Concepts

Matches

Converged network for Fibre Channel and Ethernet

Network virtualization overlay for scaling Layer 2 networks

Layer 2 extension across Layer 3 boundaries

Location/identifier separation for routing scalability

Label switching for traffic engineering and VPNs

Question 20mediummatching

Match each Cisco UCS Manager CLI command to its function.

Drag a concept onto its matching description — or click a concept then click the description.

Concepts

Matches

Displays hardware details of servers

Enters organization configuration mode

Creates a logical server definition

Configures virtual network interface card

Applies pending configuration changes

Question 21easymultiple choice

A network engineer is configuring a VPC peer-link on a Nexus switch. Which interface configuration is required for the peer-link port-channel?

Question 22easymultiple choice

In a VXLAN EVPN fabric, which protocol is used to exchange MAC and IP address reachability information among VTEPs?

Question 23mediummultiple choice

A network engineer is troubleshooting an OSPF adjacency issue between two Nexus switches. The neighbors are stuck in the EXSTART state. What is the most likely cause?

Question 24mediummultiple choice

Which statement is true about the VLANs carried on a VPC peer-link?

Question 25mediummultiple choice

Read the full NAT/PAT explanation →

In a centralized anycast gateway VXLAN EVPN design, which is a requirement?

Question 26hardmultiple choice

A network engineer notices that when a host sends a packet to a destination on a different VTEP, the packet is flooded to all VTEPs even though the destination MAC is known. What is the most likely cause?

Question 27hardmultiple choice

After adding a new spine switch to a VXLAN EVPN fabric with OSPF underlay, some leaf switches experience routing instability. Which action could resolve the instability?

Question 28easymultiple choice

Which command displays the VLANs allowed on a trunk interface?

Question 29hardmultiple choice

In a VXLAN EVPN multi-tier design, which feature ensures traffic between leaf switches takes the optimal path without hair-pinning through a spine?

Question 30easymulti select

A network engineer is verifying VPC configuration on a pair of Nexus switches. Which two commands should be used to check VPC status and consistency? (Choose two.)

Question 31mediummulti select

Which three EVPN route types are essential for VXLAN EVPN operation in a typical data center fabric? (Choose three.)

Question 32hardmulti select

When configuring BGP EVPN on spine switches functioning as route reflectors, which two address families must be configured? (Choose two.)

Question 33easymultiple choice

Refer to the exhibit. What is the current state of the VPC domain?

Exhibit

vPC domain id : 1
Peer status : peer adjacency formed ok
vPC keep-alive status : peer is alive
Configuration consistency : success
vPC role : primary
Number of vPCs configured : 5

Question 34mediummultiple choice

Refer to the exhibit. Which VLANs are allowed on the VPC peer-link?

Exhibit

interface port-channel1
 description VPC Peer-Link
 switchport mode trunk
 switchport trunk allowed vlan 1-100
 vpc peer-link

Question 35hardmultiple choice

Refer to the exhibit. What is the most likely cause of the NVE interface being down?

Exhibit

switch# show interface nve 1
Interface: nve1, state: Down
Description: VXLAN Overlay
Encapsulation: VXLAN
Source Interface: not configured
VRF: default

Question 36easymultiple choice

A network engineer is troubleshooting VXLAN connectivity between two VTEPs. The source VTEP is configured with `nve1` and member VNI 10000. The `show nve peers` command shows the remote VTEP IP but the status is 'Init'. What is a likely cause?

Question 37mediummultiple choice

An engineer is designing a Layer 3 network for a data center using OSPF. The core switches are connected to aggregation switches. To optimize convergence, which OSPF network type should be used on the links between core and aggregation?

Question 38hardmultiple choice

In an EVPN-VXLAN fabric, a network engineer notices that MAC addresses learned from an external router are not being advertised as EVPN type-2 routes. The external router is connected to a leaf switch via a Layer 3 port. Which additional configuration is needed on the leaf switch?

Question 39easymultiple choice

A data center switch has multiple access ports configured with spanning-tree portfast. A new server is connected to one of these ports and immediately causes a network loop. What is the most likely cause?

Question 40mediummultiple choice

A network engineer is configuring a Fabric Extender (FEX) to connect to a parent switch. Which best practice should be followed for FEX host interfaces?

Question 41hardmultiple choice

Study the full multicast explanation →

In a vPC domain, a consistency check failure is observed for the vPC keepalive link. What is the impact on the vPC domain operation?

Question 42easymultiple choice

A multicast application requires that all receivers join the same group using PIM sparse mode. Which router is responsible for forwarding traffic from the source to the RP?

Question 43mediummultiple choice

Review the full routing breakdown →

An engineer is configuring VXLAN bridging and routing on a Cisco Nexus 9000 switch. Which configuration is required to enable inter-VNI routing?

Question 44hardmultiple choice

In a BGP EVPN deployment, route type 2 (MAC/IP advertisement) is used to advertise MAC addresses. What additional information is carried in route type 2 for IP routing?

Question 45easymulti select

Which two VXLAN control plane options are supported on Cisco Nexus 9000 switches? (Choose two.)

Question 46mediummulti select

An OSPF router in a broadcast network has not formed a neighbor relationship. What are three possible causes? (Choose three.)

Question 47hardmulti select

Which two benefits does EVPN provide compared to traditional VPLS? (Choose two.)

Question 48mediummultiple choice

Refer to the exhibit. A network engineer notices that traffic for VNI 10000 is not being encapsulated. What is the most likely reason?

Exhibit

interface nve1
 no shutdown
 source-interface loopback0
 member vni 20000 associate-vrf red
 member vni 30000 associate-vrf blue

Question 49hardmultiple choice

Refer to the exhibit. What is the most likely cause of neighbor 10.1.1.3 being stuck in EXSTART?

Exhibit

show ip ospf neighbor

Neighbor ID     Pri   State           Dead Time   Address         Interface
10.1.1.1         1   FULL/DR         00:00:38    192.168.1.2     Ethernet1/1
10.1.1.2         1   2WAY/DROTHER    00:00:34    192.168.1.3     Ethernet1/1
10.1.1.3         1   EXSTART/DR      00:00:32    192.168.1.4     Ethernet1/1

Question 50easymultiple choice

Refer to the exhibit. A network engineer has configured a port-channel for OSPF adjacency. What additional configuration is required for the port-channel to operate correctly?

Exhibit

interface Port-channel10
 no switchport
 ip address 10.1.1.1/30
 ip ospf network point-to-point

Question 51easymultiple choice

A network engineer is troubleshooting high CPU utilization on a Nexus 9000 switch. Which command is most useful to identify the process consuming the most CPU?

Question 52easymultiple choice

A data center uses VPC between two Nexus switches. Which statement is true about the VPC peer-link?

Question 53easymultiple choice

Which protocol is used by Cisco ACI fabric to distribute endpoint information among spines?

Question 54mediummultiple choice

A network engineer is troubleshooting a VXLAN EVPN problem where some endpoints are not reachable. The output of 'show bgp l2vpn evpn' shows Type-3 routes but no Type-2 routes for a specific VNI. What should the engineer check?

Question 55mediummultiple choice

A Nexus 9000 switch is configured with VPC. The VPC keepalive link fails. What is the effect on the VPC domain?

Question 56mediummultiple choice

In a Cisco ACI fabric, a new EPG is created and associated with a bridge domain that has 'Unicast Routing' enabled. However, endpoints in that EPG cannot communicate with endpoints in other EPGs in the same VRF. What is missing?

Question 57hardmultiple choice

An engineer is troubleshooting BGP EVPN control plane. They issue 'show bgp l2vpn evpn' and see Type-3 routes but no Type-2 routes for any VNI. Which condition is most likely?

Question 58hardmultiple choice

A network engineer is configuring Cisco Nexus VXLAN with BGP EVPN. The VTEPs are using loopback0 as the NVE source. The physical interfaces are up, but the NVE interface remains down. What is the most likely cause?

Question 59hardmultiple choice

In a Cisco ACI fabric, a tenant has multiple bridge domains in the same VRF all with 'Unicast Routing' enabled and hardware proxy mode. However, endpoints in different BDs within the same VRF cannot communicate even with a contract. What is a possible reason?

Question 60easymulti select

Which TWO characteristics are true about Cisco VPC? (Choose two)

Question 61mediummulti select

Which THREE components are part of an EVPN VXLAN fabric? (Choose three)

Question 62hardmulti select

Which TWO statements are true about Cisco ACI contracts? (Choose two)

Question 63easymultiple choice

Refer to the exhibit. A network engineer notices that the NVE1 interface is up but VXLAN traffic is not being encapsulated. What is the most likely cause?

Exhibit

interface nve1
 no shutdown
 source-interface loopback0
 member vni 10000 associate-vrf TenantA

Question 64mediummultiple choice

Refer to the exhibit. A network engineer notices that the VPC peer status is down, and the peer-keepalive is not reachable. Based on the configuration, what is the likely issue?

Exhibit

vlan 100
  name Web

interface port-channel10
  switchport mode trunk
  switchport trunk allowed vlan 100-110

vpc domain 1
  role priority 1000
  peer-keepalive destination 192.168.1.2 source 192.168.1.1
  peer-link port-channel10

Question 65hardmultiple choice

Refer to the exhibit. A network administrator configured VXLAN EVPN as above. The VTEP can communicate with neighbors on VNI 5001, but cannot reach the default gateway for VNI 5002. What is the problem?

Exhibit

vrf context TenantA
  ip route 0.0.0.0/0 10.1.1.1

evn
  vni 5001 l2
  vni 5002 l2
  rd 1.1.1.1:1
  route-target import 65000:5001
  route-target export 65000:5001
!

interface nve1
  source-interface loopback0
  member vni 5001 associate-vrf
  member vni 5002 associate-vrf

Question 66easymultiple choice

A network engineer is configuring OSPF on a pair of Nexus 9000 switches acting as spine switches in a VXLAN fabric. The engineer needs to ensure that the spine switches do not become the DR for any VLAN. Which configuration should be applied?

Question 67mediummultiple choice

An engineer is troubleshooting high CPU utilization on a Nexus 7700 switch. The output of 'show process cpu' shows high usage from the 'netstack' process. Which action should the engineer take to identify the cause?

Question 68hardmultiple choice

In a Cisco ACI fabric, the administrator notices that traffic between two endpoints in different EPGs but on the same leaf switch is being dropped when a contract is applied. The endpoints are in the same VRF but different bridge domains. What is the likely cause?

Question 69easymultiple choice

A data center network uses VXLAN EVPN for network virtualization. Which component is responsible for advertising MAC addresses and host routes across the fabric?

Question 70mediummultiple choice

Study the full multicast explanation →

During a network upgrade, an engineer applies a new OSPF configuration on a Nexus 9000 spine. After the change, several leaf switches lose connectivity to each other. The engineer examines the logs and sees OSPF adjacency flapping. What is the most likely cause?

Question 71hardmultiple choice

An administrator is deploying a new application in a Cisco ACI fabric. The application requires multicast traffic between end hosts. Which configuration is necessary for multicast in ACI?

Question 72easymultiple choice

A network engineer is configuring a VPC on a pair of Nexus 9000 switches. Which command is required to synchronize the configuration between the VPC peers?

Question 73mediummultiple choice

An engineer is troubleshooting a BGP EVPN session between a leaf and a spine. The 'show bgp l2vpn evpn summary' output shows the peer state as 'Active'. What does this indicate?

Question 74easymulti select

A data center network uses Cisco Nexus switches with VXLAN EVPN. Which two components are essential for VXLAN EVPN operation? (Choose two.)

Question 75mediummulti select

When troubleshooting a VXLAN EVPN fabric with Cisco Nexus 9000 switches, which three commands provide information about the EVPN operation? (Choose three.)

Question 76hardmulti select

An engineer is designing a Cisco ACI multi-site solution. Which two considerations are critical for inter-site connectivity? (Choose two.)

Question 77hardmultiple choice

A large enterprise data center is deploying a new application using Cisco ACI with a multi-pod design. The application requires low-latency communication between servers in different pods. The network team has configured the ACI fabric with two pods, each connected via inter-pod network (IPN) switches. After deployment, the application experiences intermittent latency spikes and packet loss. The APIC health scores remain high but the latency issue persists. The team has verified the underlay IP connectivity and MTU settings. What is the most likely cause of the latency issues?

Question 78mediummultiple choice

A financial services company is migrating its core banking application to a new data center built on Cisco Nexus 9000 switches with VXLAN EVPN. The application requires active-active multihoming for its servers, which are dual-homed to two leaf switches. The network team has configured vPC on the leaf switches for the server connections. After the migration, the application team reports that some packets are being dropped during failover events when one of the vPC member links goes down. The network team confirms that vPC is properly configured and the peer-keepalive is functioning. What is the most likely cause of packet drops during failure?

Question 79easymultiple choice

A mid-size organization is upgrading its data center network to support server virtualization. They have deployed two Nexus 9300 switches as access switches for their server racks. The servers are configured with VLAN tagging and connect to the switches using trunks. The network administrator needs to ensure that the switches can provide default gateway services to the servers to reduce latency. They have configured interface VLAN interfaces and HSRP for redundancy. After implementation, the servers can communicate within the same VLAN but fail to reach the default gateway. The network administrator checks the switch configuration and finds that "ip routing" is not enabled globally. What is the most likely impact of this missing configuration?

Question 80hardmultiple choice

A large cloud provider is building a new data center using Cisco ACI with multiple leaf and spine switches. They plan to host thousands of tenants with overlapping IP addresses in different VRFs. The network team has deployed the fabric with a common security policy. During testing, they discover that traffic from Tenant A to Tenant B is being allowed even though a contract should deny it. The APIC policy shows the contract is applied to the EPGs and the deny rule is present. What is the most likely cause of the policy not being enforced?

Question 81mediummulti select

A network engineer is troubleshooting an OSPF adjacency that fails to reach FULL state between two Nexus 9000 switches. Which TWO are common causes for this issue?

Question 82easymultiple choice

A data center runs OSPF as the underlay for an EVPN-VXLAN fabric. The fabric includes two spine switches and eight leaf switches. After adding a new leaf switch, the network team notices that some EVPN routes are missing from the other leaves. The new leaf has established BGP EVPN sessions to both spines and the BGP sessions are up. The spines report receiving all routes from the new leaf, but the other leaves do not receive certain prefixes. The engineer checks the BGP configuration on the new leaf and sees the address-family l2vpn evpn is configured under router bgp. Which action should the engineer take to resolve the issue?

Question 83hardmultiple choice

A large enterprise uses Cisco Nexus 9000 switches in a VXLAN EVPN fabric. The underlay is OSPF. Each leaf switch has a loopback0 interface as the source interface for VXLAN tunnel endpoints. After a maintenance window, an engineer modifies the IP address of loopback0 on leaf-5 from 10.1.1.5/32 to 10.1.1.105/32. Subsequently, all VXLAN tunnels to leaf-5 go down. OSPF adjacencies between leaf-5 and the spines are still FULL. The engineer checks the NVE interface on leaf-5 and sees the source-interface is loopback0 but the interface status is up/up. However, pings from other leaves to 10.1.1.105 fail. What is the most likely cause?

Question 84easymulti select

An engineer is troubleshooting a VXLAN network where traffic between two VTEPs in the same VNI is not being forwarded. The underlay network is operational and IP connectivity exists between the VTEPs. Which two actions should the engineer take to verify the VXLAN configuration?

Question 85mediummultiple choice

Refer to the exhibit. An engineer configured a VXLAN tunnel endpoint (VTEP) but the VXLAN tunnel is not operational. The underlay OSPF adjacency is established. What is the missing configuration?

Exhibit

interface nve1
 source-interface loopback0
 member vni 10000 mcast-group 239.1.1.1
!
interface loopback0
 ip address 10.10.10.1 255.255.255.255
!
interface Ethernet1/1
 no switchport
 ip address 192.168.1.1 255.255.255.0
 ip router ospf 1 area 0

Question 86hardmultiple choice