350-601 Network Practice Test 14 — 15 Questions

Question 1

An engineer is configuring a VXLAN EVPN fabric. Which address family must be enabled under BGP to exchange MAC/VTEP reachability information?

Accepted Answer

address-family l2vpn evpn. In a VXLAN EVPN fabric, BGP is used as the control plane to exchange MAC and VTEP reachability information. The correct address family for this is 'l2vpn evpn' (address-family l2vpn evpn), which carries EVPN NLRI (Network Layer Reachability Information) as defined in RFC 7432. This enables the distribution of MAC addresses, IP-to-MAC bindings, and VTEP endpoints across the overlay network.

Answer

address-family ipv4 unicast

Answer

address-family l2vpn vpls

Answer

address-family vpnv4

Question 2

In ACI, which construct defines the set of endpoints that can communicate based on contracts?

Accepted Answer

EPG. In Cisco ACI, an Endpoint Group (EPG) is the logical grouping of endpoints (such as servers, VMs, or storage) that share the same policy requirements. Contracts define the rules for communication between EPGs, specifying which EPGs can talk to each other and what services (e.g., HTTP, SSH) are allowed. Thus, the EPG construct directly defines the set of endpoints that can communicate based on contracts.

Answer

VRF

Answer

Bridge Domain

Answer

Tenant

Question 3

Which NX-OS command displays the VPC status, including peer-link and consistency parameters?

Accepted Answer

show vpc. The 'show vpc' command (without any keyword) displays the overall Virtual Port Channel (vPC) status, including peer-link status, consistency parameters, and per-VLAN/vPC operational state. This is the most comprehensive single command for verifying vPC health and configuration consistency between peer switches.

Answer

show vpc brief

Answer

show vpc peer-link

Answer

show vpc consistency

Question 4

In a VXLAN EVPN fabric with MP-BGP, which route type is used to advertise MAC addresses and associated VNI?

Accepted Answer

Type 2: MAC/IP Advertisement. Type 2 (MAC/IP Advertisement) routes are used in VXLAN EVPN fabrics with MP-BGP to advertise MAC addresses, their associated VNI, and optionally IP addresses. This route type enables the control plane to distribute host reachability information, allowing VTEPs to build and update their forwarding tables dynamically.

Answer

Type 3: Inclusive Multicast Ethernet Tag

Answer

Type 1: Ethernet Auto-Discovery

Answer

Type 5: IP Prefix

Question 5

Which of the following is a requirement for VPC peer keepalive to function correctly?

Accepted Answer

Must be a Layer 3 interface with unique VRF. VPC peer keepalive requires a Layer 3 interface with a unique VRF to ensure that keepalive messages are sent over a dedicated, isolated path that is independent of the peer-link. This prevents the keepalive from being disrupted by issues on the peer-link and allows the VPC peers to detect failures even when the peer-link is down. The keepalive uses UDP port 3200 and must be routed through a separate VRF to avoid conflicts with the management or default routing tables.

Answer

Must use the same IP subnet as peer-link

Answer

Must be a direct Layer 2 connection

Answer

Must be in the same VLAN as peer-link

Question 6

In ACI, when integrating with VMware vSphere, which component is used to automatically push port group configurations to virtual switches?

Accepted Answer

VMM domain. The VMM (Virtual Machine Manager) domain in ACI is the integration point with VMware vSphere. It automatically pushes port group configurations to virtual switches by leveraging the VMware vCenter API, ensuring that ACI network policies are consistently applied to the hypervisor's virtual switches without manual intervention.

Answer

APIC

Answer

Tenant

Answer

L3Out

Question 7

Which MST configuration parameter must match across all switches in the same MST region?

Accepted Answer

Region name, revision, and VLAN mapping. In MST (Multiple Spanning Tree) protocol, switches in the same MST region must share the same region name, revision number, and VLAN-to-instance mapping. These parameters define the region boundary; if any differ, switches will treat each other as being in different regions, breaking MST interoperability and causing them to run separate spanning trees (e.g., PVST+).

Answer

Port cost

Answer

Root bridge

Answer

Bridge priority

Question 8

In VXLAN, what is the role of the VNI in the overlay network?

Accepted Answer

Identifies the overlay network segment. The VNI (VXLAN Network Identifier) is a 24-bit field in the VXLAN header that uniquely identifies a Layer 2 overlay network segment, analogous to a VLAN ID in traditional networking. It allows multiple tenants or broadcast domains to coexist over a shared underlay network by isolating traffic at the overlay level.

Answer

Identifies the VTEP

Answer

Encapsulation type

Answer

Specifies the underlay VRF

Question 9

Which command is used to verify the OSPF neighbor state in NX-OS?

Accepted Answer

show ip ospf neighbors. In NX-OS, the correct command to verify OSPF neighbor state is 'show ip ospf neighbors'. This command displays the OSPF neighbor table, including neighbor ID, priority, state (e.g., FULL, 2WAY), and dead timer. The 'ip' keyword is mandatory in NX-OS to specify the IPv4 address family, distinguishing it from other protocols like OSPFv3 for IPv6.

Answer

show ospf neighbors

Answer

show running-config ospf

Answer

show ip route ospf

Question 10

In ACI, what is the purpose of a contract?

Accepted Answer

Allow or deny traffic between EPGs. In Cisco ACI, a contract is a policy construct that defines how communication is allowed or denied between Endpoint Groups (EPGs). Contracts specify the subjects, filters, and actions (permit or deny) that govern traffic flows, enabling granular security and segmentation within the fabric. Without a contract, EPGs in different bridge domains or VRFs cannot communicate by default.

Answer

Isolate tenants

Answer

Define routing between VRF

Answer

Provide external connectivity

Question 11

Which VXLAN EVPN route type is used for discovering VTEPs and building the BUM forwarding tree?

Accepted Answer

Type 3. B is correct because VXLAN EVPN Route Type 3 (Inclusive Multicast Ethernet Tag Route) is specifically used to advertise the VXLAN tunnel endpoint (VTEP) IP addresses and the VNI (VXLAN Network Identifier) for BUM (Broadcast, Unknown unicast, Multicast) traffic. This route type enables the discovery of remote VTEPs and builds the multicast forwarding tree (either via ingress replication or PIM-based multicast) necessary for BUM traffic delivery in a VXLAN EVPN fabric.

Answer

Type 1

Answer

Type 2

Answer

Type 5

Question 12

What does the oversubscription ratio in a spine-leaf fabric represent?

Accepted Answer

Ratio of server bandwidth to leaf uplink bandwidth. In a spine-leaf fabric, the oversubscription ratio specifically compares the total bandwidth available from the servers (leaf southbound ports) to the total uplink bandwidth from the leaf to the spine (leaf northbound ports). This ratio determines how much potential congestion exists when multiple servers contend for uplink capacity, directly impacting performance in a non-blocking or oversubscribed design.

Answer

Ratio of spine to leaf bandwidth

Answer

Ratio of total fabric bandwidth to total server bandwidth

Answer

Number of spine switches per leaf

Question 13

Which TWO statements are true about VPC consistency checks? (Choose two.)

Accepted Answer

The 'show vpc consistency-parameters' command displays the status.. The 'show vpc consistency-parameters' command is the primary tool used to verify that the VPC peer switches have matching configurations for critical parameters. This command displays the status of each consistency check parameter, allowing an administrator to identify mismatches that could disrupt VPC operation.

Answer

All configuration parameters must match exactly on both peers.

Answer

Consistency check is optional and disabled by default.

Answer

Consistency check is performed only when the peer-link comes up.

Question 14

Which THREE are valid methods for handling BUM traffic in VXLAN? (Choose three.)

Accepted Answer

Ingress replication. Ingress replication is a valid method for handling BUM traffic in VXLAN where the ingress VTEP replicates broadcast, unknown unicast, and multicast frames to all remote VTEPs in the VXLAN segment. This approach does not require a multicast routing infrastructure in the underlay, making it simpler to deploy in networks that lack multicast support. It is defined in RFC 7348 and is commonly used in VXLAN EVPN fabrics.

Answer

Egress replication

Answer

Flood and learn

Question 15

Which TWO are benefits of using a spine-leaf architecture? (Choose two.)

Accepted Answer

Predictable and low latency. In a spine-leaf architecture, every leaf switch connects to every spine switch, creating a full-mesh topology. This ensures that traffic between any two leaf switches traverses exactly one spine switch, resulting in predictable, low-latency forwarding because the number of hops is fixed and deterministic.

Answer

Eliminates need for VLANs

Answer

Simplified spanning-tree design

Answer

Reduced number of switch ports required