20+ practice questions focused on Network — one of the most tested topics on the Cisco DCCOR / CCNP Data Center Core 350-601 exam. Each question includes a detailed explanation so you learn why the right answer is correct.
Start Network PracticeA network engineer is configuring a VPC on a pair of Nexus 9000 switches. Which command is required to synchronize the configuration between the VPC peers?
Explanation: The `vpc domain <id>` command creates the VPC domain, which enables VPC functionality and allows configuration synchronization between peers via Cisco Fabric Services (CFS) over the peer-link. Without defining the VPC domain, there is no VPC context, and synchronization cannot occur. The peer-keepalive (B) is for liveness detection, not synchronization. The other options are related but not directly responsible for synchronizing configurations.
Which three components are part of the Cisco ACI policy model for defining a tenant's network? (Choose three.)
Explanation: In the Cisco ACI policy model, a tenant's network is defined by a hierarchical construct that includes the Tenant itself as the top-level container, the VRF (also called a Private Network) which provides Layer 3 isolation and routing context, and the Bridge Domain which represents a Layer 2 forwarding domain with a unique MAC address table and optional subnet(s). These three components work together to create a complete network segment within a tenant, while EPGs and Contracts are used for policy and connectivity rather than defining the network itself.
An engineer is configuring MST (Multiple Spanning Tree) on a Nexus switch. Which three statements about MST are correct? (Choose three.)
Explanation: The 'instance' command under MST configuration mode (e.g., 'instance 1 vlan 10-20') explicitly maps VLANs to a specific MST instance. Option B is correct: The Internal Spanning Tree (IST), which is instance 0, carries all VLANs that are not explicitly mapped to any other MST instance. Option D is correct: MST BPDUs use the standard spanning-tree destination MAC address 01-80-C2-00-00-00, not the PVST+ MAC. Option C is false because MST supports multiple spanning-tree instances. Option E is false because it only mentions revision number and name; forming an MST region also requires a consistent VLAN-to-instance mapping across all switches.
A data center engineer is troubleshooting intermittent connectivity between two servers in different VLANs. The servers are connected to different leaf switches in a VXLAN EVPN fabric. When checking the fabric, the engineer notices that the NVE interface on one leaf is up/up but the VNI for the server VLAN is not listed in 'show nve vni'. What is the most likely cause?
Explanation: The NVE interface being up/up indicates the overlay tunnel is operational, but the absence of the VNI in 'show nve vni' means the VNI is not instantiated on the NVE. This typically occurs when the VLAN-to-VNI mapping is missing under the VLAN configuration (e.g., 'vlan 100' then 'vn-segment 10100'), which prevents the VNI from being associated with the NVE interface and advertised via BGP EVPN.
An organization is deploying a new ACI fabric. The design requires that traffic between EPGs in the same bridge domain be allowed by default, but traffic between EPGs in different bridge domains must be denied unless explicitly permitted. Which contract scope configuration meets this requirement?
Explanation: The VRF (private L3 context) is the correct scope because contract scope determines the boundary within which a contract is effective. By setting the contract scope to VRF, the contract applies only to EPGs within the same VRF. Since EPGs in different bridge domains are typically in the same VRF, you must explicitly configure contracts to permit inter-EPG traffic; otherwise, it is denied by default. This matches the requirement that traffic between EPGs in the same bridge domain is allowed by default (via the default intra-EPG and intra-bridge domain forwarding), while traffic between EPGs in different bridge domains requires an explicit contract.
+15 more Network questions available
Practice all Network questions1. Baseline your knowledge
Start with 10 questions to gauge your current understanding of Network. This tells you whether you need a concept refresher or just practice.
2. Review every explanation
For each question — right or wrong — read the full explanation. Understanding why an answer is correct is more valuable than knowing the answer itself.
3. Focus on exam traps
Network questions on the 350-601 frequently use trap wording. Look for subtle differences in answers that test your precision, not just general knowledge.
4. Reach 80% consistently
Do repeated sessions until you score 80%+ three times in a row. Then move to mixed-mode practice to test cross-topic recall under realistic conditions.
The exact number varies per candidate. Network is tested as part of the Cisco DCCOR / CCNP Data Center Core 350-601 blueprint. Practicing with targeted Network questions ensures you can handle any format or difficulty that appears.
Yes. Courseiva provides free 350-601 practice questions across all exam topics and domains. The platform includes topic-based practice, mock exams, missed-question review, bookmarked questions, and readiness tracking — no account required.
Difficulty is subjective, but Network is a high-priority exam concept tested in multiple ways — direct recall, scenario analysis, and command-output interpretation. Consistent practice is the best way to build confidence.
Launch a full Network practice session with instant scoring and detailed explanations.
Start Network Practice →