350-601 Network Practice Test 6 — 15 Questions

Question 1

A network engineer is configuring 802.1Q trunking between a Nexus switch and a server. Which TWO statements are true regarding 802.1Q trunking?

Accepted Answer

The VLAN ID is 12 bits long. Option B is correct because the 802.1Q VLAN identifier field is 12 bits long, which allows for 4096 VLAN IDs (0–4095, with 0 and 4095 reserved), making it the standard VLAN tag size on Nexus trunks. Option E is correct because when a switch inserts the 4-byte 802.1Q tag into an Ethernet frame, the frame length changes, so the frame check sequence (FCS/CRC) must be recalculated to reflect the new frame contents. Option A is incorrect because the native VLAN is untagged by default on an 802.1Q trunk; only non-native VLANs are tagged. Option C is incorrect because the 802.1Q tag is 4 bytes total, but the statement as written is not one of the marked correct answers and the tag insertion is already covered by the FCS recalculation point. Option D is incorrect because an 802.1Q trunk can carry multiple VLANs, not just one.

Answer

The native VLAN is tagged by default

Answer

A 4-byte tag is inserted into the Ethernet frame

Answer

Trunks can only carry one VLAN

Question 2

In an ACI fabric, which THREE components are required to define a policy that allows communication between two EPGs?

Accepted Answer

Contract. In Cisco ACI, allowing communication between two EPGs requires a Contract (option A), which defines the traffic rules (subjects, filters, and actions) that permit the communication. The two endpoints of that contract must also be identified: the Consumer EPG (option B) that initiates/consumes the contract, and the Provider EPG (option E) that offers the service and to which the contract is applied. Together, the contract plus the consumer and provider EPG bindings form the complete policy that permits inter-EPG traffic. An L3Out (option C) is only needed for external Layer 3 connectivity outside the fabric, not for intra-fabric EPG-to-EPG communication, and a Tenant (option D) is merely the logical container in which these objects reside, not a required element of the communication policy itself.

Answer

L3Out

Answer

Tenant

Question 3

Which protocol is used to carry VXLAN encapsulation and facilitates the exchange of MAC reachability information between VTEPs in a VXLAN EVPN fabric?

Accepted Answer

MP-BGP. In a VXLAN EVPN fabric, MP-BGP (Multiprotocol BGP) is the control plane protocol used to advertise MAC reachability information between VTEPs. It carries VXLAN encapsulation information via the BGP EVPN address family (AFI L2VPN / SAFI EVPN), enabling VTEPs to learn remote MAC addresses and VNI mappings without relying on data-plane flooding.

Answer

eBGP

Answer

OSPF

Answer

PIM

Question 4

In ACI, which object defines the logical separation of traffic within a tenant, analogous to a VLAN in traditional networking, and is associated with a VRF?

Accepted Answer

Bridge Domain. In Cisco ACI, a Bridge Domain (BD) defines the Layer 2 boundary and provides logical separation of traffic within a tenant, analogous to a VLAN in traditional networking. Each BD is associated with a VRF (Layer 3 context) to enable IP forwarding, and it encapsulates traffic using VXLAN (VNID) rather than 802.1Q VLAN tags.

Answer

VRF

Answer

Application Profile

Answer

EPG

Question 5

An engineer needs to enable equal-cost multipath (ECMP) routing in a spine-leaf fabric using OSPF. Which OSPF feature allows load balancing across multiple equal-cost paths?

Accepted Answer

maximum-paths command. The maximum-paths command is the OSPF feature that directly controls the number of equal-cost routes installed in the routing table, enabling ECMP load balancing across multiple equal-cost paths. By default, OSPF installs only one best path, but increasing the maximum-paths value allows the router to use up to that many equal-cost routes simultaneously.

Answer

OSPF network type

Answer

OSPF area type

Answer

OSPF cost metric

Question 6

An engineer is deploying an ACI fabric with VMM integration for VMware vSphere. Which THREE components must be configured to enable dynamic EPG assignment based on VM attributes? (Choose three.)

Accepted Answer

VMM domain. Option B (VMM domain) is required because the VMM domain is the APIC object that represents the integration with VMware vSphere and binds the fabric to vCenter, enabling the APIC to learn VM attributes for dynamic EPG assignment. Option C (vCenter credentials) is required because the VMM domain must authenticate to vCenter via a controller credential policy so APIC can query vCenter for VM inventory and attributes. Option D (Port group mapping to EPG) is required because dynamic EPG assignment relies on mapping vSphere port groups (DVPortGroups) to ACI EPGs, which lets the APIC place VMs into the correct EPG based on their attributes. Option A (APIC cluster IP) is not a component configured for dynamic EPG assignment; it is the management address of the APIC cluster and is not used to drive VM attribute-based EPG placement. Option E (L3Out configuration) is not required for dynamic EPG assignment; L3Out provides external Layer 3 connectivity and is unrelated to resolving VM attributes into EPG membership.

Answer

APIC cluster IP

Answer

L3Out configuration

Question 7

In a spine-leaf architecture using eBGP, which of the following is the recommended BGP configuration for the spine switches?

Accepted Answer

Unique ASN for each spine switch. In eBGP-based spine-leaf architectures, each spine switch should use a unique ASN to enable BGP’s loop prevention mechanism (the AS_PATH attribute). This ensures that leaf switches can detect and discard routes received from two different spines that originated from the same leaf, preventing routing loops and allowing load balancing across multiple spines. A unique ASN per spine is the recommended design per Cisco’s best practices for data center fabrics.

Answer

No BGP; use OSPF instead

Answer

Single ASN for all spines

Answer

Same ASN as leaves

Question 8

In VXLAN, which method of handling BUM traffic replicates packets to remote VTEPs only when there is a known receiver behind that VTEP?

Accepted Answer

Ingress replication. Ingress replication is the correct method because in VXLAN, the ingress VTEP replicates BUM (Broadcast, Unknown unicast, Multicast) traffic and sends a copy to each remote VTEP only if that VTEP has at least one receiver (i.e., a host or VM) that has joined the relevant multicast group or is reachable via the VNI. This avoids unnecessary replication to VTEPs with no interested receivers, optimizing bandwidth and reducing load on the underlay network.

Answer

Egress replication

Answer

Multicast-based replication

Answer

Head-end replication

Question 9

Which NX-OS command displays the VPC status, including peer-link and consistency parameters?

Accepted Answer

show vpc. The 'show vpc' command (without any keyword) displays the overall Virtual Port Channel (vPC) status, including peer-link status, consistency parameters, and per-VLAN/vPC operational state. This is the most comprehensive single command for verifying vPC health and configuration consistency between peer switches.

Answer

show vpc brief

Answer

show vpc peer-link

Answer

show vpc consistency

Question 10

In a VXLAN EVPN fabric with MP-BGP, which route type is used to advertise MAC addresses and associated VNI?

Accepted Answer

Type 2: MAC/IP Advertisement. Type 2 (MAC/IP Advertisement) routes are used in VXLAN EVPN fabrics with MP-BGP to advertise MAC addresses, their associated VNI, and optionally IP addresses. This route type enables the control plane to distribute host reachability information, allowing VTEPs to build and update their forwarding tables dynamically.

Answer

Type 3: Inclusive Multicast Ethernet Tag

Answer

Type 1: Ethernet Auto-Discovery

Answer

Type 5: IP Prefix

Question 11

Which command is used to verify the OSPF neighbor state in NX-OS?

Accepted Answer

show ip ospf neighbors. In NX-OS, the correct command to verify OSPF neighbor state is 'show ip ospf neighbors'. This command displays the OSPF neighbor table, including neighbor ID, priority, state (e.g., FULL, 2WAY), and dead timer. The 'ip' keyword is mandatory in NX-OS to specify the IPv4 address family, distinguishing it from other protocols like OSPFv3 for IPv6.

Answer

show ospf neighbors

Answer

show running-config ospf

Answer

show ip route ospf

Question 12

Which THREE are valid methods for handling BUM traffic in VXLAN? (Choose three.)

Accepted Answer

Ingress replication. Ingress replication (A) is a valid VXLAN BUM handling method where the ingress VTEP replicates the broadcast, unknown unicast, and multicast frame to each remote VTEP in the flood list, typically using a static or controller-provided list of remote VTEP IPs. ARP suppression (C) is valid because the leaf VTEPs maintain a local ARP cache (populated via BGP EVPN or another control plane) and answer ARP requests on behalf of remote hosts, reducing the BUM traffic that would otherwise be flooded across the VXLAN fabric. Multicast-based replication (D) is valid because the underlay can use a multicast group (e.g., PIM-SM with a shared or source-specific tree) as the transport for BUM traffic, with all VTEPs in the same VNI joining the group so a single encapsulated packet reaches all of them. Egress replication (B) is not a standard VXLAN BUM handling method; replication occurs at the ingress VTEP, not at the egress VTEP. Flood and learn (E) describes the data-plane learning behavior of a VXLAN VTEP for MAC addresses, not a method for handling BUM traffic itself.

Answer

Egress replication

Answer

Flood and learn

Question 13

Which TWO are benefits of using a spine-leaf architecture? (Choose two.)

Accepted Answer

Predictable and low latency. Option A is correct because in a spine-leaf fabric every leaf is exactly one hop from every spine, and traffic between any two hosts traverses a fixed, equal number of hops (leaf-spine-leaf), which yields predictable, consistent, and low latency without the variable hop counts of a traditional three-tier core/aggregation/access design. Option B is correct because spine-leaf is a Clos-based fabric in which each leaf connects to every spine using equal-cost multipathing (ECMP); adding a new leaf only requires cabling it to the existing spines and configuring that leaf, with no changes to the other leaf switches, so the fabric scales horizontally. Option C is not a benefit of spine-leaf — VLANs are still used for Layer 2 segmentation and broadcast-domain separation, and VXLAN is typically overlaid on top of them. Option D is incorrect because spine-leaf actually reduces reliance on spanning tree by using Layer 3 routing and ECMP between leaves and spines, rather than simplifying an STP topology. Option E is incorrect because spine-leaf generally increases the number of switch ports and links required, since every leaf must uplink to every spine to achieve full bisection bandwidth.

Answer

Eliminates need for VLANs

Answer

Simplified spanning-tree design

Answer

Reduced number of switch ports required

Question 14

A data center architect is designing a spine-leaf fabric with OSPF as the underlay routing protocol. Which two statements about OSPF in this design are correct? (Choose two.)

Accepted Answer

OSPF neighbors are formed between leaf and spine switches over the fabric links.. Option A is correct because in a spine-leaf OSPF underlay, each leaf switch establishes OSPF adjacencies with every spine switch it connects to, forming neighbors over the point-to-point fabric links and flooding link-state information across the topology. Option B is correct because OSPF inherently supports equal-cost multipath (ECMP) when multiple paths have the same cost, which is essential in a spine-leaf fabric to load-balance traffic across all equal-cost uplinks to the spines. Option C is not required as a general statement—while passive interfaces are often configured on server-facing ports to suppress OSPF hellos, this is a design choice, not a defining correctness statement about OSPF in the fabric. Option D is incorrect because OSPF can serve as a valid underlay for VXLAN EVPN; BGP is commonly used for the overlay, but OSPF is not mandated to be replaced. Option E is incorrect because OSPF areas do not need to differ between leaf and spine switches; a single area (typically area 0) is commonly used, and differing areas would not prevent loops—OSPF's SPF and area design handle that.

Answer

Passive interfaces are configured on the server-facing ports of leaf switches.

Answer

OSPF must be replaced by BGP in a VXLAN EVPN fabric.

Answer

OSPF areas must be different for leaf and spine switches to prevent routing loops.

Question 15

In an ACI fabric, a tenant is configured with multiple bridge domains (BDs) and EPGs. Which three statements correctly describe the ACI model? (Choose three.)

Accepted Answer

Contracts are applied between EPGs to allow communication.. Option A is correct because in the ACI policy model, communication between EPGs is not implicit; it is explicitly permitted by contracts (provider/consumer relationships) that define which protocols and ports are allowed. Option B is correct because a VRF (Virtual Routing and Forwarding) instance in ACI defines a Layer 3 routing domain within a tenant, providing isolated routing and address space for the bridge domains mapped to it. Option D is correct because an EPG is associated with exactly one bridge domain, which defines its Layer 2 broadcast domain and subnet; an EPG cannot span multiple BDs. Option C is incorrect because, by default, EPGs in different BDs cannot communicate without a contract, reflecting ACI's whitelist model. Option E is incorrect because an L3Out connects the ACI fabric to external Layer 3 networks (via routing protocols such as OSPF, BGP, or static routes), not Layer 2 networks.

Answer

EPGs can communicate with each other without any contract.

Answer

L3Out is used to connect the ACI fabric to external Layer 2 networks.