350-601 Network Practice Test 14 — 15 Questions

Question 1

Which BGP variant is commonly used in data center EVPN fabrics to carry Layer 2 and Layer 3 network information?

Accepted Answer

MP-BGP. MP-BGP (Multiprotocol BGP) is the correct variant because it carries both Layer 2 (MAC/VXLAN) and Layer 3 (IP/VRF) network information in EVPN fabrics via BGP EVPN address families (L2VPN EVPN and IP VPN). It extends BGP with multiprotocol extensions (RFC 4760) to support Network Layer Reachability Information (NLRI) for Ethernet segments, MAC addresses, and IP prefixes, which is essential for VXLAN-based data center fabrics.

Answer

eBGP

Answer

iBGP

Answer

OSPF

Question 2

In a vPC setup, what is the purpose of the vPC peer-keepalive link?

Accepted Answer

To detect the failure of a vPC peer. The vPC peer-keepalive link is a dedicated Layer 3 link used exclusively to monitor the health of the vPC peer. Its primary purpose is to detect a peer failure (e.g., a supervisor crash or complete switch failure) so that the remaining peer can take appropriate actions, such as disabling its own vPC member ports to prevent loops. This is distinct from the vPC peer-link, which carries control and data traffic between peers.

Answer

To exchange routing protocol updates

Answer

To synchronize MAC address tables

Answer

To forward data traffic between vPC peers

Question 3

A network administrator is configuring a Cisco Nexus switch to use NX-API for automation. Which statement about NX-API is true?

Accepted Answer

NX-API supports JSON-RPC and RESTful API calls. NX-API is a feature on Cisco Nexus switches that provides both a RESTful API using HTTP/HTTPS and a JSON-RPC interface for programmatic access to the switch's CLI commands. This dual support allows automation tools to interact with the switch using standard web protocols and data formats, making option A correct.

Answer

NX-API requires the use of Python scripts exclusively

Answer

NX-API only supports XML data format

Answer

NX-API requires a separate license and is not included in NX-OS

Question 4

In a spine-leaf architecture, what is the primary advantage of using a full mesh between spines and leaves?

Accepted Answer

It provides uniform low-latency paths between any two leaves. In a spine-leaf architecture, a full mesh between spines and leaves ensures that every leaf switch is connected to every spine switch. This design provides multiple equal-cost paths between any two leaf switches, allowing for uniform low-latency forwarding because traffic can traverse a single spine hop without congestion or path asymmetry. The full mesh eliminates the need for complex path selection and guarantees predictable, consistent latency across the fabric.

Answer

It reduces the total number of ports required

Answer

It removes the requirement for Spanning Tree Protocol

Answer

It eliminates the need for VLANs in the data center

Question 5

Which Cisco DCNM feature allows centralized management and monitoring of multiple NX-OS fabrics?

Accepted Answer

DCNM. Cisco DCNM (Data Center Network Manager) is the correct answer because it is the centralized management platform specifically designed to manage, monitor, and provision multiple NX-OS fabrics, including LAN and SAN, from a single pane of glass. It supports fabric discovery, configuration compliance, and health monitoring across multiple switches and fabrics, which aligns directly with the question's requirement.

Answer

vCenter

Answer

NX-API

Answer

APIC controller

Question 6

A network engineer is planning a VXLAN EVPN fabric. Which two statements about VXLAN Network Identifiers (VNIs) are correct? (Choose two.)

Accepted Answer

VXLAN encapsulates Layer 2 frames in UDP packets. Option A is correct because VXLAN is a MAC-in-UDP encapsulation that carries original Layer 2 Ethernet frames inside UDP datagrams, typically destined to UDP port 4789. Option C is correct because the VXLAN header contains a 24-bit VNI field, which allows up to 16,777,216 unique segments, far exceeding traditional VLAN limits. Option B is incorrect because VNI values range from 1 to 16,777,215, not 1 to 4096; 4096 is the VLAN range limit. Option D is incorrect because VXLAN uses UDP, not TCP, for encapsulation. Option E is incorrect because a VNI identifies a Layer 2 segment (or an EVPN bridge domain) and is not used only for Layer 3 routing.

Answer

VNI values range from 1 to 4096

Answer

VXLAN uses TCP for encapsulation

Answer

VNI is used only for Layer 3 routing

Question 7

In a Cisco ACI fabric, which component acts as the centralized policy and management controller?

Accepted Answer

APIC. The APIC (Application Policy Infrastructure Controller) is the centralized policy and management controller in a Cisco ACI fabric. It serves as the single point of configuration, policy definition, and monitoring for the entire fabric, managing all leaf and spine switches through a declarative model. The APIC does not handle data-plane forwarding but orchestrates the application of policies via the OpFlex protocol and the ACI object model.

Answer

Spine switch

Answer

DCNM

Answer

Leaf switch

Question 8

In a VXLAN EVPN fabric using BGP as the control plane, which BGP address family is used to exchange MAC/VTEP reachability information between VTEPs?

Accepted Answer

L2VPN EVPN. In a VXLAN EVPN fabric, the L2VPN EVPN address family (AFI 25, SAFI 70) is used to exchange MAC/VTEP reachability information between VTEPs. This address family carries BGP EVPN routes (type-2 for MAC/IP advertisements) that include the MAC address, VNI, and VTEP IP, enabling the control plane to distribute host reachability without flooding.

Answer

IPv4 unicast

Answer

IPv6 unicast

Answer

VPNv4 unicast

Question 9

In a Cisco ACI fabric, an external L3Out is configured to advertise a subnet to the outside. Which object must be created in the tenant to define the Layer 3 outside network connection?

Accepted Answer

L3Out. In Cisco ACI, an L3Out is the object that defines the Layer 3 outside network connection for a tenant. It is created within the tenant to specify the routing protocol (e.g., OSPF, BGP, EIGRP) and the external subnet that will be advertised to the outside world. Without an L3Out, the fabric cannot establish external connectivity or advertise routes.

Answer

External EPG

Answer

Contract

Answer

Bridge Domain

Question 10

An engineer notices that a vPC peer link is flapping. Which vPC component must be operational for the vPC to function correctly?

Accepted Answer

vPC peer link. The vPC peer link is the critical component that must be operational for the vPC to function correctly. It carries control-plane traffic (e.g., Cisco Fabric Services over Ethernet, or CFSoE) and data-plane traffic between the two vPC peer switches. If the peer link flaps, the vPC domain cannot synchronize the necessary state information, causing the vPC to fail or become unstable.

Answer

vPC member port

Answer

vPC consistency check

Answer

vPC peer keepalive link

Question 11

In a VXLAN overlay, which encapsulation is used to transport Ethernet frames over the IP network?

Accepted Answer

UDP. VXLAN uses UDP encapsulation (destination port 4789 by default) to transport Layer 2 Ethernet frames over a Layer 3 IP network. This allows the overlay to leverage existing IP routing infrastructure while preserving the original MAC addresses and VLAN information, enabling network virtualization and scalability beyond traditional VLAN limits.

Answer

IPsec

Answer

TCP

Answer

GRE

Question 12

Which feature in NX-OS allows for direct API calls to the switch for automation purposes?

Accepted Answer

NX-API. NX-API (option A) is the correct answer because it is the native NX-OS feature that exposes a RESTful API interface, allowing direct HTTP/HTTPS calls (e.g., GET, POST, PUT, DELETE) to the switch for automation and programmability. This enables tools like Ansible, Postman, or custom scripts to send structured data (JSON/XML) to configure, monitor, and manage the switch without requiring CLI parsing or SSH sessions.

Answer

Python scripting

Answer

Bash shell

Answer

SNMP

Question 13

In a spine-leaf architecture, what is the primary advantage of having multiple spine switches?

Accepted Answer

Redundancy and load balancing. In a spine-leaf architecture, multiple spine switches provide redundancy by ensuring that if one spine fails, traffic can still flow through other spines. They also enable load balancing because leaf switches can use equal-cost multipath (ECMP) routing to distribute traffic across all available spine uplinks, maximizing bandwidth utilization and preventing congestion on any single path.

Answer

Lower latency

Answer

Simplified management

Answer

Increased oversubscription

Question 14

Which two statements correctly describe VXLAN BUM traffic handling? (Choose two.)

Accepted Answer

Ingress replication sends unicast copies of the BUM traffic to each remote VTEP.. Option A is correct because with ingress replication the ingress VTEP itself replicates the BUM (broadcast, unknown unicast, multicast) frame and sends a separate unicast copy to each remote VTEP that has interested members, using the remote VTEP's IP as the outer destination. Option C is correct because the multicast-based method maps the VXLAN VNI to an underlay multicast group, and the ingress VTEP sends a single multicast-encapsulated frame that is delivered by the underlay to all VTEPs that have joined that group and need the traffic. Option B is wrong because BUM traffic is not dropped by default; it must be delivered to all relevant VTEPs via either ingress replication or multicast. Option D is wrong because ingress replication uses unicast copies, not a single multicast packet. Option E is wrong because multicast is only one of the two supported BUM distribution methods; ingress replication is an alternative and does not require multicast in the underlay.

Answer

BUM traffic is dropped by default.

Answer

Ingress replication sends a single multicast packet to all VTEPs.

Answer

Multicast is required for VXLAN BUM handling.

Question 15

Which three components are part of the Cisco ACI policy model for defining a tenant's network? (Choose three.)

Accepted Answer

Bridge Domain. In the Cisco ACI policy model, a Tenant (E) is the top-level logical container that isolates a customer's or business unit's policies, so it is a required component for defining a tenant's network. Within that tenant, a VRF (D) provides the Layer 3 routing and address-space isolation context, which is essential for defining the tenant's network. A Bridge Domain (B) is also a core tenant network construct, providing the Layer 2 forwarding domain that ties together EPGs and subnets. EPG (A) is a valid ACI object, but it is an endpoint grouping construct rather than one of the three tenant network components asked for here, and Contract (C) is a policy object that governs communication between EPGs rather than defining the tenant's network itself.

Answer

EPG

Answer

Contract