350-601 Network Practice Test 2 — 15 Questions

Question 1

An organization is deploying a new leaf-spine fabric with Cisco ACI. The requirement is to allow inter-tenant communication between two EPGs in different tenants. Which configuration object is necessary to enable this communication?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

A shared contract between the two EPGs.. In Cisco ACI, inter-tenant communication between EPGs in different tenants requires a shared contract. A contract defines the rules (filters) that permit traffic between EPGs, and when it is marked as 'shared,' it can be consumed by EPGs across tenant boundaries. This allows the provider EPG in one tenant to expose services to a consumer EPG in another tenant without merging the tenants' VRFs or bridge domains.

Answer

A common VRF that spans both tenants.

Answer

A filter that permits the required traffic.

Answer

A bridge domain that connects both EPGs.

Question 2

Which TWO configuration steps are necessary to enable VXLAN EVPN on a Cisco Nexus 9000 switch using the centralized anycast gateway model?

Accepted Answer

Enable the address-family l2vpn evpn under the BGP configuration.. In VXLAN EVPN, BGP is used as the control plane to exchange MAC and IP reachability information. Enabling the address-family l2vpn evpn under BGP configuration is mandatory to advertise EVPN routes (type-2 and type-3) between VTEPs, which is the foundation of the centralized anycast gateway model.

Answer

Enable IGMP snooping on all VLANs extended over VXLAN.

Answer

Set the VXLAN destination UDP port to 8472.

Answer

Create an NVE interface with a loopback interface as the source.

Question 3

A server connected to Ethernet1/1 is unable to communicate on VLAN 1. The server is configured to send untagged frames. Based on the exhibit, what is the most likely cause?

Accepted Answer

VLAN 1 is not allowed on the trunk, so untagged frames are dropped.. The server sends untagged frames, which are placed into the native VLAN of the trunk port. By default, the native VLAN is VLAN 1. However, if VLAN 1 is explicitly removed from the allowed VLAN list on the trunk (e.g., with 'switchport trunk allowed vlan remove 1'), the switch will drop all frames belonging to that VLAN, including untagged frames that would otherwise be classified into VLAN 1. This matches the exhibit where the port is configured as a trunk but VLAN 1 is not allowed, causing the server's traffic to be dropped.

Answer

The spanning-tree port type edge trunk is causing BPDU guard to block the port.

Answer

The port is in err-disabled state due to a loop.

Answer

The port is administratively down.

Question 4

You are a network engineer at a financial institution. The company has two data centers: DC1 and DC2, connected via a dark fiber link. Each data center has a pair of Nexus 7000 switches in a vPC configuration. The dark fiber link connects to a port on each Nexus 7000 pair using a Layer 2 port-channel. The requirement is to extend VLAN 100 between the two data centers for a critical application that requires a stretched Layer 2 domain. The current configuration has the port-channel on both sides set to mode 'active' with LACP. VLAN 100 is allowed on the trunk. The application servers report intermittent connectivity issues, with some packets being dropped. Upon inspection, you notice that the MAC address table on the Nexus 7000 in DC1 shows the MAC address of the server in DC2 on the dark fiber port-channel interface, but also on a local access port connected to a different server in the same VLAN. What is the most likely cause of the intermittent connectivity?

Accepted Answer

Spanning Tree Protocol is not blocking one of the redundant paths, creating a loop.. The MAC address table showing the same MAC address on both the dark fiber port-channel and a local access port indicates a Layer 2 loop. In a vPC environment with a Layer 2 extension between data centers, Spanning Tree Protocol (STP) should block one of the redundant paths to prevent loops. If STP fails to block the appropriate port, frames loop, causing MAC address flapping and intermittent packet drops.

Answer

The dark fiber link is experiencing high latency, causing MAC address timeouts.

Answer

LACP is misconfigured on one side, causing the port-channel to operate as individual links.

Answer

There is an asymmetric routing issue between the data centers.

Question 5

Arrange the steps to configure a vPC domain on a pair of Cisco Nexus switches.

Accepted Answer

Step 1: Enable feature vPC, Step 2: Create vPC domain, Step 3: Configure keepalive link, Step 4: Configure peer-link, Step 5: Add member ports. vPC requires feature vPC, then domain creation, keepalive link, peer-link, and member ports.

Answer

Step 1: Enable feature vPC, Step 2: Create vPC domain, Step 3: Configure peer-link, Step 4: Configure keepalive link, Step 5: Add member ports

Answer

Step 1: Create vPC domain, Step 2: Enable feature vPC, Step 3: Configure keepalive link, Step 4: Configure peer-link, Step 5: Add member ports

Answer

Step 1: Enable feature vPC, Step 2: Configure keepalive link, Step 3: Create vPC domain, Step 4: Configure peer-link, Step 5: Add member ports

Question 6

Arrange the steps to create a service profile template in Cisco UCS Manager.

Accepted Answer

Create UUID Suffix Pool, then Create vNIC Template, then Create Service Profile Template (referencing the pool and vNIC template), then Associate with a Server Pool. Service profile template requires UUID pool, vNIC template, profile creation, server pool association, and assignment.

Answer

Create vNIC Template, then Create UUID Suffix Pool, then Create Service Profile Template, then Associate with a Server Pool

Answer

Create Service Profile Template, then Create UUID Suffix Pool, then Create vNIC Template, then Associate with a Server Pool

Answer

Associate with a Server Pool, then Create UUID Suffix Pool, then Create vNIC Template, then Create Service Profile Template

Question 7

Match each Cisco data center technology to its primary purpose.

Accepted Answer

VDC: Enables partitioning a single physical switch into multiple logical switches.. VDC partitions switches; VPC provides redundant LAG; FEX extends fabric ports; OTV extends Layer 2 over Layer 3.

Answer

VPC: Enables partitioning a single physical switch into multiple logical switches.

Answer

FEX: Allows a link aggregation group to terminate on two upstream switches for redundancy.

Question 8

Match each Cisco UCS Manager CLI command to its function.

Accepted Answer

scope server: Enters server management mode. In UCS Manager CLI, 'scope server' enters server management mode, 'scope chassis' enters chassis management mode, and 'show environment' displays environmental status. Other commands like 'scope fabric-interconnect' or 'show server' have different functions.

Answer

scope server: Enters chassis management mode

Answer

scope chassis: Enters server management mode

Answer

show environment: Displays server inventory

Question 9

A network engineer is configuring a VPC peer-link on a Nexus switch. Which interface configuration is required for the peer-link port-channel?

Accepted Answer

switchport mode trunk. A VPC peer-link is a special port-channel that carries control traffic (e.g., Cisco Fabric Services over Ethernet) and data traffic between VPC peer switches. It must be configured as a trunk (switchport mode trunk) to allow multiple VLANs, including the VPC VLAN and the peer-keepalive link VLAN, to traverse the link. Without trunk mode, the peer-link cannot properly forward the necessary VLAN traffic for VPC operation.

Answer

spanning-tree port type edge trunk

Answer

switchport mode access

Answer

no switchport

Question 10

In a VXLAN EVPN fabric, which protocol is used to exchange MAC and IP address reachability information among VTEPs?

Accepted Answer

BGP. In a VXLAN EVPN fabric, BGP (Border Gateway Protocol) is used as the control plane protocol to exchange MAC and IP address reachability information among VTEPs. Specifically, MP-BGP (Multiprotocol BGP) with EVPN address family (AFI L2VPN / SAFI EVPN) carries Type-2 routes (MAC/IP advertisement) to distribute host reachability across the overlay network, enabling efficient MAC learning and ARP suppression.

Answer

IS-IS

Answer

EIGRP

Answer

OSPF

Question 11

A network engineer is troubleshooting an OSPF adjacency issue between two Nexus switches. The neighbors are stuck in the EXSTART state. What is the most likely cause?

Accepted Answer

MTU mismatch. When OSPF neighbors are stuck in the EXSTART state, the most common cause is an MTU mismatch. In EXSTART, the routers exchange Database Description (DBD) packets, which must be no larger than the interface MTU. If one interface has a smaller MTU, the DBD packet is dropped, preventing the adjacency from progressing to the Exchange state. Cisco Nexus switches default to an MTU of 1500 bytes, but any mismatch will cause this issue.

Answer

Hold timer mismatch

Answer

Incorrect area ID

Answer

Duplicate router ID

Question 12

Which statement is true about the VLANs carried on a VPC peer-link?

Accepted Answer

The peer-link carries all VLANs that are allowed on the trunk interface.. In a vPC domain, the peer-link is a special trunk that carries all VLANs allowed on the trunk interface, including those not present on any member port. This ensures that orphaned traffic (traffic arriving on the peer-link destined for a device connected to the other vPC peer) can be forwarded correctly. The peer-link must carry all VLANs to maintain Layer 2 connectivity and loop-free behavior without relying on spanning tree.

Answer

The peer-link carries only the VLANs allowed on the member interfaces.

Answer

The peer-link requires spanning-tree port type edge trunk configuration.

Answer

The peer-link must be configured as a layer 3 interface.

Question 13

In a centralized anycast gateway VXLAN EVPN design, which is a requirement?

Accepted Answer

All VTEPs share a common anycast IP address for the default gateway.. In a centralized anycast gateway VXLAN EVPN design, all VTEPs share a common anycast IP address and MAC address for the default gateway. This allows any VTEP to serve as the first-hop router for hosts, enabling optimal east-west traffic forwarding without requiring a separate gateway device. The anycast IP is configured on each VTEP's VLAN interface, and the same IP/MAC is advertised via EVPN Type-2 routes.

Answer

Each VTEP has a unique anycast IP address.

Answer

The anycast gateway is configured on the spine switches.

Answer

The route reflector is an external BGP speaker.

Question 14

A network engineer notices that when a host sends a packet to a destination on a different VTEP, the packet is flooded to all VTEPs even though the destination MAC is known. What is the most likely cause?

Accepted Answer

The BGP EVPN route table is missing the MAC/IP route for the destination.. In a BGP EVPN VXLAN fabric, when a host sends a packet to a known destination MAC on a different VTEP, the ingress VTEP should perform MAC/IP route lookup in the BGP EVPN route table to determine the correct remote VTEP. If the MAC/IP route for the destination is missing (e.g., not advertised or withdrawn), the ingress VTEP has no mapping to a remote VTEP and must flood the packet to all VTEPs in the VNI, causing unnecessary broadcast traffic. This is the most likely cause of the described behavior.

Answer

The VNI is misconfigured.

Answer

The MTU exceeds 1500 bytes.

Answer

ARP suppression is disabled.

Question 15

After adding a new spine switch to a VXLAN EVPN fabric with OSPF underlay, some leaf switches experience routing instability. Which action could resolve the instability?

Accepted Answer

Increase the OSPF cost on the leaf-to-spine links.. When a new spine switch is added to a VXLAN EVPN fabric with an OSPF underlay, the leaf switches may experience routing instability because the new spine advertises routes with a lower cost, causing traffic to shift abruptly. Increasing the OSPF cost on the leaf-to-spine links makes those paths less preferred, stabilizing the routing table by preventing flapping and ensuring a more gradual convergence.

Answer

Configure OSPF neighbor authentication.

Answer

Decrease the OSPF hello timer.

Answer

Enable OSPF route summarization on the leaves.