350-601 Network Practice Test 10 — 15 Questions

Question 1

In a Cisco ACI fabric, which object represents a collection of endpoints that share the same forwarding behavior and security policies?

Accepted Answer

Endpoint Group (EPG). In Cisco ACI, an Endpoint Group (EPG) is a logical object that groups endpoints (e.g., servers, VMs) with identical forwarding behavior and security policies. EPGs are the fundamental unit for applying contracts (security policies) and defining communication rules within the fabric, ensuring consistent traffic handling across all members.

Answer

VRF

Answer

Tenant

Answer

Bridge Domain (BD)

Question 2

A network engineer is designing a spine-leaf fabric with oversubscription ratio of 3:1. Each leaf switch uses 40 Gbps uplinks to the spine and has 48 x 10 Gbps server ports. How many spine links are needed per leaf to achieve the target oversubscription?

Accepted Answer

4. The oversubscription ratio is the ratio of server-facing bandwidth to spine-facing bandwidth. Each leaf has 48 x 10 Gbps = 480 Gbps of server-facing capacity. To achieve a 3:1 oversubscription ratio, the spine-facing bandwidth must be 480 Gbps / 3 = 160 Gbps. Since each uplink is 40 Gbps, you need 160 / 40 = 4 spine links per leaf.

Answer

3

Answer

2

Answer

5

Question 3

Which statement about RSTP (802.1w) is true?

Accepted Answer

RSTP reduces convergence time by using a proposal/agreement handshake. RSTP (802.1w) significantly reduces convergence time compared to legacy STP by using a proactive proposal/agreement handshake mechanism. Instead of relying on timers (like STP's 30-50 second convergence), RSTP switches immediately negotiate port roles and transition to forwarding by exchanging proposal and agreement BPDUs, enabling sub-second convergence in a properly designed network.

Answer

RSTP uses a timer-based convergence similar to STP

Answer

RSTP requires explicit configuration of edge ports to prevent loops

Answer

RSTP elects the root bridge based on the highest MAC address

Question 4

In a VXLAN environment, what is the function of a VTEP?

Accepted Answer

It encapsulates and decapsulates VXLAN packets. A VTEP (VXLAN Tunnel Endpoint) is the device that performs VXLAN encapsulation and decapsulation. It takes an original Layer 2 frame, adds a VXLAN header (with a VNI to identify the tenant segment), a UDP header (port 4789), and an outer IP/Ethernet header, then sends the packet over the underlay network. On the receiving side, the VTEP strips these headers and forwards the original frame to the destination host. This encapsulation/decapsulation function is the core purpose of a VTEP in a VXLAN environment.

Answer

It manages the VXLAN multicast groups

Answer

It acts as a DHCP server for tenant VMs

Answer

It provides Layer 3 routing between VXLAN segments

Question 5

In Cisco ACI, when integrating with VMware vSphere via VMM domain, what is the purpose of the 'vCenter Domain' policy?

Accepted Answer

To automatically configure virtual switch port groups and EPGs based on VM attributes. The 'vCenter Domain' policy in Cisco ACI integrates with VMware vSphere by automatically creating and mapping virtual switch port groups to EPGs based on VM attributes such as VM name, operating system, or custom tags. This eliminates manual port group configuration and ensures consistent policy enforcement as VMs are deployed or moved within the VMM domain.

Answer

To replace the need for VXLAN overlay in the fabric

Answer

To manage storage connectivity for VMware clusters

Answer

To enable virtual machine mobility (vMotion) across data centers

Question 6

Which BGP variant is commonly used in data center EVPN fabrics to carry Layer 2 and Layer 3 network information?

Accepted Answer

MP-BGP. MP-BGP (Multiprotocol BGP) is the correct variant because it carries both Layer 2 (MAC/VXLAN) and Layer 3 (IP/VRF) network information in EVPN fabrics via BGP EVPN address families (L2VPN EVPN and IP VPN). It extends BGP with multiprotocol extensions (RFC 4760) to support Network Layer Reachability Information (NLRI) for Ethernet segments, MAC addresses, and IP prefixes, which is essential for VXLAN-based data center fabrics.

Answer

eBGP

Answer

iBGP

Answer

OSPF

Question 7

In a vPC setup, what is the purpose of the vPC peer-keepalive link?

Accepted Answer

To detect the failure of a vPC peer. The vPC peer-keepalive link is a dedicated Layer 3 link used exclusively to monitor the health of the vPC peer. Its primary purpose is to detect a peer failure (e.g., a supervisor crash or complete switch failure) so that the remaining peer can take appropriate actions, such as disabling its own vPC member ports to prevent loops. This is distinct from the vPC peer-link, which carries control and data traffic between peers.

Answer

To exchange routing protocol updates

Answer

To synchronize MAC address tables

Answer

To forward data traffic between vPC peers

Question 8

A network administrator is configuring a Cisco Nexus switch to use NX-API for automation. Which statement about NX-API is true?

Accepted Answer

NX-API supports JSON-RPC and RESTful API calls. NX-API is a feature on Cisco Nexus switches that provides both a RESTful API using HTTP/HTTPS and a JSON-RPC interface for programmatic access to the switch's CLI commands. This dual support allows automation tools to interact with the switch using standard web protocols and data formats, making option A correct.

Answer

NX-API requires the use of Python scripts exclusively

Answer

NX-API only supports XML data format

Answer

NX-API requires a separate license and is not included in NX-OS

Question 9

In a spine-leaf architecture, what is the primary advantage of using a full mesh between spines and leaves?

Accepted Answer

It provides uniform low-latency paths between any two leaves. In a spine-leaf architecture, a full mesh between spines and leaves ensures that every leaf switch is connected to every spine switch. This design provides multiple equal-cost paths between any two leaf switches, allowing for uniform low-latency forwarding because traffic can traverse a single spine hop without congestion or path asymmetry. The full mesh eliminates the need for complex path selection and guarantees predictable, consistent latency across the fabric.

Answer

It reduces the total number of ports required

Answer

It removes the requirement for Spanning Tree Protocol

Answer

It eliminates the need for VLANs in the data center

Question 10

Which Cisco DCNM feature allows centralized management and monitoring of multiple NX-OS fabrics?

Accepted Answer

DCNM. Cisco DCNM (Data Center Network Manager) is the correct answer because it is the centralized management platform specifically designed to manage, monitor, and provision multiple NX-OS fabrics, including LAN and SAN, from a single pane of glass. It supports fabric discovery, configuration compliance, and health monitoring across multiple switches and fabrics, which aligns directly with the question's requirement.

Answer

vCenter

Answer

NX-API

Answer

APIC controller

Question 11

A network engineer is planning a VXLAN EVPN fabric. Which two statements about VXLAN Network Identifiers (VNIs) are correct? (Choose two.)

Accepted Answer

VXLAN encapsulates Layer 2 frames in UDP packets. VXLAN encapsulates Layer 2 Ethernet frames inside UDP packets (typically UDP destination port 4789). This allows Layer 2 segments to be extended over a Layer 3 IP network, which is the fundamental purpose of VXLAN in a data center fabric.

Answer

VNI values range from 1 to 4096

Answer

VXLAN uses TCP for encapsulation

Answer

VNI is used only for Layer 3 routing

Question 12

In Cisco ACI, when creating a contract, which three components are part of the contract definition? (Choose three.)

Accepted Answer

Subject. In Cisco ACI, a contract defines the rules for communication between endpoint groups (EPGs). The contract definition consists of three mandatory components: Subject, Filter, and Provider/Consumer. The Subject specifies the direction and type of traffic allowed, the Filter defines the specific protocols and ports (e.g., TCP/UDP, ICMP), and the Provider/Consumer labels establish which EPG offers the service and which consumes it. Without these three, the contract cannot enforce policy-based connectivity.

Answer

VRF

Answer

Endpoint IP address

Question 13

In a vPC environment, which two conditions must be identical on both vPC peer switches to ensure proper consistency? (Choose two.)

Accepted Answer

VLAN configuration on the member ports. In a vPC environment, the VLAN configuration on member ports must be identical on both peer switches to ensure that traffic is forwarded consistently across the vPC. If VLANs are pruned or allowed differently on the member ports, the vPC can become inconsistent, leading to traffic drops or loops. This is a key consistency check enforced by Cisco NX-OS to maintain a stable vPC domain.

Answer

System priority

Answer

Port channel mode (active/passive)

Answer

Peer-keepalive IP address

Question 14

In a Cisco ACI fabric, which component acts as the centralized policy and management controller?

Accepted Answer

APIC. The APIC (Application Policy Infrastructure Controller) is the centralized policy and management controller in a Cisco ACI fabric. It serves as the single point of configuration, policy definition, and monitoring for the entire fabric, managing all leaf and spine switches through a declarative model. The APIC does not handle data-plane forwarding but orchestrates the application of policies via the OpFlex protocol and the ACI object model.

Answer

Spine switch

Answer

DCNM

Answer

Leaf switch

Question 15

An engineer is configuring OSPF on a Nexus 9000 switch in a data center spine-leaf topology. Which OSPF network type is most appropriate on the point-to-point links between leaf and spine switches to ensure fast convergence?

Accepted Answer

point-to-point. In a spine-leaf topology, the links between leaf and spine switches are typically point-to-point, even if they are Ethernet interfaces. Configuring the OSPF network type as point-to-point on these links eliminates the need for a Designated Router (DR) and Backup Designated Router (BDR) election, which reduces OSPF adjacency formation time and ensures faster convergence. This network type also allows OSPF to use multicast hello packets (224.0.0.5) without the overhead of a DR/BDR election, making it the most appropriate choice for fast convergence.

Answer

broadcast

Answer

point-to-multipoint

Answer

non-broadcast