Courseiva

Cisco DCCOR / CCNP Data Center Core 350-601 (350-601) — Questions 451525

984 questions total · 14pages · All types, answers revealed

Page 6

Page 7 of 14

Page 8
451
MCQmedium

A data center uses a Cisco MDS 9710 director with multiple line cards. The storage network includes several host servers connected to the director via 16 Gbps FC connections. Recently, the engineering team deployed a new storage array that supports 32 Gbps FC. To take advantage of the higher speed, they upgraded the host HBAs to 32 Gbps. However, after the upgrade, some hosts are experiencing intermittent connection drops. The team notices that when a host disconnects, it takes approximately 30 seconds to reconnect. The link lights on the host and switch ports are green. The switch logs show 'VSAN 100: Port fc1/1 is down (link failure)' messages. No other errors are reported. The MDS line cards support 32 Gbps, and the ports are configured with the 'speed 32000' command. What is the most likely cause of the intermittent drops?

A.Insufficient buffer credits on the host ports
B.Incompatible SFP+ modules
C.Inconsistent zoning configuration
D.Mismatched port speed configuration between host and switch
AnswerD

A mismatch (e.g., host at 16 Gbps, switch at 32 Gbps) can cause intermittent link drops.

Why this answer

The most likely cause is a speed mismatch between the host HBA and the switch port. Although the switch port is set to 32 Gbps, the HBA might be set to auto-negotiate or default to 16 Gbps, causing instability. The 30-second reconnect time is typical of speed negotiation failures.

Incompatible SFPs would cause persistent link failure, buffer credits cause throughput drops but not disconnects, and zoning would block connectivity.

452
Multi-Selecteasy

An administrator is configuring zoning on a Cisco MDS switch to ensure that two servers can only communicate with their assigned storage arrays. Which three statements about Fibre Channel zoning are correct? (Choose three.)

Select 3 answers
A.Zoning is configured within a VSAN.
B.Only active zone sets can be modified.
C.Hard zoning based on WWN provides security by permitting only specific WWNs to communicate.
D.Soft zoning based on port numbers is more secure than hard zoning.
E.A zone can contain both initiators and targets.
AnswersA, C, E

Zoning is always configured within a VSAN context.

Why this answer

Zoning in Fibre Channel is configured within a VSAN, providing logical isolation. Hard zoning based on WWN enforces security by permitting only specific WWNs to communicate, offering strong access control. A zone can contain multiple devices, including both initiators and targets, allowing flexibility.

Soft zoning based on port numbers is less secure than hard zoning, and active zone sets can be modified only when activated, but zone sets can be created or modified without activation. Therefore, statements A, C, and E are correct.

453
MCQeasy

What is the primary purpose of Cisco UCS service profiles?

A.To manage interconnections between Fabric Interconnects
B.To monitor environmental sensors in the chassis
C.To provide firmware management for all chassis components
D.To enable hardware abstraction and stateless computing
AnswerD

Service profiles capture identity and configuration, making servers stateless.

Why this answer

Service profiles enable hardware abstraction, allowing blade or rack server replacement without reconfiguration by defining compute, network, and storage identities in software.

454
MCQmedium

An engineer is troubleshooting a SAN performance issue. The show interface counters command shows high output discard counts on a particular Fibre Channel interface. What is the most likely cause?

A.High CRC errors on the link.
B.Insufficient buffer credits on the transmitting port.
C.Insufficient bandwidth due to latency.
D.Mismatched zone configurations.
AnswerB

Output discards happen when the port runs out of buffer credits.

Why this answer

High output discard counts on a Fibre Channel interface indicate that the transmitting port is attempting to send frames faster than the receiving port can accept them. This is most commonly caused by insufficient buffer credits on the transmitting port, which limits the number of frames that can be in flight before an acknowledgment is required. When buffer credits are exhausted, frames are discarded at the transmit side, leading to output discards.

Exam trap

Cisco often tests the distinction between output discards (flow-control/buffer credit issue) and input errors (physical-layer issues like CRC), leading candidates to mistakenly attribute output discards to CRC errors or bandwidth limitations.

How to eliminate wrong answers

Option A is wrong because high CRC errors indicate physical-layer issues such as faulty cables or optics, not output discards; CRC errors are counted on the receiving side. Option C is wrong because insufficient bandwidth due to latency is not a direct cause of output discards; latency affects throughput but does not inherently cause frame discards at the transmit queue. Option D is wrong because mismatched zone configurations prevent communication between devices or cause login issues, but they do not result in output discard counters on a specific interface.

455
MCQeasy

A company is deploying a new storage array with dual controllers. Each controller has two 16 Gbps Fibre Channel ports. The engineer wants to connect each controller to two separate MDS switches for redundancy. What is the recommended port type configuration on the MDS switches for the storage-facing ports?

A.F port
B.Configure the port as auto to allow negotiation
C.NP port
D.E port
AnswerA

F ports connect N ports of end devices.

Why this answer

A is correct because an F port (Fabric port) is the standard port type on an MDS switch for connecting to an N_port (Node port) on a storage array's Fibre Channel controller. Since each controller has two 16 Gbps FC ports and each connects to a separate MDS switch for redundancy, the switch-facing ports must operate as F ports to establish a point-to-point link with the array's N_ports, enabling fabric services and proper zoning.

Exam trap

Cisco often tests the distinction between port types (F, E, NP, and auto) in storage networking, and the trap here is that candidates confuse 'auto' (a speed negotiation setting) with a port type, or mistakenly think NP ports are used for direct storage connections instead of NPV environments.

How to eliminate wrong answers

Option B is wrong because configuring the port as 'auto' is not a valid port type in Fibre Channel; it refers to speed negotiation, not port type, and the question asks for the recommended port type configuration. Option C is wrong because an NP port (Proxy N port) is used in NPV (N_Port Virtualization) mode on switches that connect to a core switch, not for direct storage array connections. Option D is wrong because an E port (Expansion port) is used for inter-switch links (ISL) between MDS switches, not for connecting storage devices.

456
MCQhard

A data center engineer is designing a storage network for a virtualized environment with 100 hosts and 50 storage arrays. Each host requires 4 Gbps of bandwidth to storage, and each storage array provides 8 Gbps. All devices use 16 Gbps FC links. What is the minimum number of 16 Gbps FC links required to support the total bandwidth demand without oversubscription?

A.50
B.200
C.100
D.25
AnswerD

25 links provide 400 Gbps of bandwidth (16 Gbps each) to meet total demand.

Why this answer

The total bandwidth demand from hosts is 100 hosts × 4 Gbps = 400 Gbps. Each storage array provides 8 Gbps, so total storage bandwidth is 50 arrays × 8 Gbps = 400 Gbps. Since all links are 16 Gbps FC, the minimum number of links required to carry 400 Gbps without oversubscription is 400 / 16 = 25 links.

This assumes full-duplex links and no oversubscription in the fabric.

Exam trap

Cisco often tests the concept of aggregate bandwidth versus per-device bandwidth, leading candidates to incorrectly multiply host count by link speed or storage array count by link speed instead of summing the total bandwidth demand and dividing by link speed.

How to eliminate wrong answers

Option A (50) is wrong because it incorrectly assumes each storage array needs a dedicated 16 Gbps link, ignoring that the total bandwidth demand is 400 Gbps and 50 links would provide 800 Gbps, which is overkill and not minimal. Option B (200) is wrong because it mistakenly multiplies the number of hosts (100) by the per-host bandwidth (4 Gbps) and then divides by 8 Gbps (storage array bandwidth) or confuses link count with host count, leading to a gross overestimate. Option C (100) is wrong because it assumes each host requires a dedicated 16 Gbps link, ignoring that the aggregate demand is 400 Gbps and 100 links would provide 1600 Gbps, far exceeding the need.

457
Multi-Selectmedium

Which TWO statements about Cisco NX-API are correct? (Choose two.)

Select 2 answers
A.NX-API uses SSH for transport.
B.NX-API only supports GET requests.
C.NX-API uses HTTP/HTTPS as the transport protocol.
D.NX-API is only available on Nexus 3000 series switches.
E.NX-API can output data in XML and JSON formats.
AnswersC, E

NX-API is a RESTful API over HTTP/HTTPS.

Why this answer

Cisco NX-API is a programmatic interface that uses HTTP/HTTPS as the transport protocol, allowing RESTful API calls to configure and monitor Nexus switches. It supports both XML and JSON output formats, enabling flexible data parsing in automation scripts. This makes options C and E correct.

Exam trap

Cisco often tests the misconception that NX-API uses SSH (like NETCONF) or is limited to specific hardware, when in fact it uses HTTP/HTTPS and is widely supported across Nexus platforms.

458
Multi-Selectmedium

An engineer is designing a VXLAN EVPN fabric with multicast-based BUM replication. Which two components are required to support this? (Choose two.)

Select 2 answers
A.A multicast group address per VNI
B.NVE interface with multicast group
C.BGP EVPN address family
D.PIM enabled on the underlay
E.Ingress replication configured
AnswersA, D

Multicast group maps to VNI for BUM traffic.

Why this answer

In a VXLAN EVPN fabric using multicast-based BUM replication, each VNI must be mapped to a unique multicast group address in the underlay. This allows the underlay multicast tree to efficiently deliver broadcast, unknown unicast, and multicast traffic to all VTEPs that are members of that VNI, without requiring the ingress VTEP to replicate packets individually.

Exam trap

Cisco often tests the distinction between the control plane (BGP EVPN) and the data plane (multicast or ingress replication) for BUM traffic, and the trap here is that candidates mistakenly think BGP EVPN is required for multicast-based replication, when in fact BGP EVPN is for route exchange and the underlay multicast handles the actual packet replication.

459
Multi-Selecthard

Which THREE of the following are best practices for Fibre Channel zoning on Cisco MDS switches?

Select 3 answers
A.Make zones as specific as possible, avoiding device inclusion across multiple zones unnecessarily
B.Use WWPN-based zoning instead of port-based zoning
C.Always activate the zone set using the 'zone activate' command in configuration mode
D.Use hard zoning (access control list enforcement)
E.Use soft zoning with name server response filtering
AnswersA, B, D

Making zones as specific as possible minimizes unnecessary device exposure and reduces the risk of unauthorized access or fabric disruption. Including devices across multiple zones unnecessarily can lead to complex troubleshooting and potential security gaps.

Why this answer

Options A, B, and D are best practices for Fibre Channel zoning on Cisco MDS switches. A: Making zones as specific as possible reduces unnecessary exposure and simplifies management. B: WWPN-based zoning is preferred over port-based zoning because it allows device mobility without reconfiguration.

D: Hard zoning provides hardware-level enforcement via access control lists, offering stronger security than soft zoning. Option C is incorrect because while activating the zone set is necessary, the correct command is 'activate zoneset' not 'zone activate', and it is a procedural step rather than a best practice.

Exam trap

Cisco often tests the distinction between hard zoning and soft zoning, where candidates may incorrectly assume that soft zoning is a best practice due to its simplicity, but the exam emphasizes that hard zoning is the recommended method for security.

460
MCQmedium

A DevOps team wants to apply Infrastructure as Code principles to manage their data center network. Which tool is best suited for declaratively managing ACI configurations using Terraform?

A.Cobra SDK
B.Terraform with terraform-provider-aci
C.Python acitoolkit
D.Ansible with cisco.nxos collection
AnswerB

Correct: Terraform's ACI provider enables declarative management.

Why this answer

Terraform uses the terraform-provider-aci to declaratively manage ACI objects like tenants, APs, EPGs, etc.

461
MCQmedium

A data center administrator is troubleshooting slow storage performance on a UCS B-Series blade server. The server is connected to a Cisco UCS 6300 Series Fabric Interconnect and uses local SAS drives. The administrator checks the UCS Manager and sees that the storage adapter has a driver version that is not recommended. What is the most likely impact of using a non-recommended driver version?

A.Degraded storage performance or instability
B.Loss of redundancy on the fabric interconnect
C.Inability to boot the server
D.Increased security vulnerabilities
AnswerA

Non-recommended drivers are not validated and can cause performance issues or system instability.

Why this answer

Using a non-recommended driver version for the storage adapter in a UCS B-Series blade server can lead to degraded storage performance or system instability. Cisco validates specific driver versions for compatibility with the UCS 6300 Series Fabric Interconnect and local SAS drives; deviations may cause suboptimal I/O handling, increased latency, or unexpected errors. This is a common issue in compute environments where driver- firmware mismatches affect storage throughput.

Exam trap

Cisco often tests the distinction between a 'non-recommended' driver (which causes performance or stability issues) versus a 'non-supported' driver (which could cause boot failure or complete non-functionality), tempting candidates to overestimate the impact.

How to eliminate wrong answers

Option B is wrong because loss of redundancy on the fabric interconnect is typically caused by misconfigured port channels, link failures, or fabric-level issues, not by a storage adapter driver version. Option C is wrong because while a severely incompatible driver could prevent boot, the question specifies a 'non-recommended' driver, which usually causes performance issues rather than complete boot failure; UCS servers can still boot with non-optimal drivers. Option D is wrong because driver versions primarily affect functionality and performance, not security posture; security vulnerabilities are addressed through firmware and software patches, not driver version recommendations.

462
MCQmedium

An engineer is configuring a UCS service profile for a blade server that will boot from local disk. However, the engineer wants to ensure that if the local disk fails, the server will attempt to boot from the SAN. Which boot policy setting should be used?

A.Set the boot order to SAN first, then local disk
B.Configure local disk as the only boot device
C.Set local disk as primary and SAN as secondary
D.Use PXE boot as the primary
AnswerC

This provides the desired fallback order.

Why this answer

UCS boot policies allow setting the boot order. To attempt local disk first and then SAN if local fails, the policy should have local disk as the primary and SAN as the secondary boot device.

463
MCQhard

An engineer is writing an Ansible playbook to configure BGP on a Nexus 9000 switch. Which module from the cisco.nxos collection should be used to manage BGP configuration?

A.nxos_vlan
B.nxos_config
C.nxos_interface
D.nxos_bgp
AnswerD

nxos_bgp manages BGP configuration on NX-OS.

Why this answer

The cisco.nxos.nxos_bgp module is specifically designed for BGP configuration on NX-OS devices. nxos_vlan manages VLANs, nxos_interface manages interfaces, and nxos_config applies raw CLI commands.

464
Multi-Selecteasy

Which two features are provided by Cisco IMC on UCS C-series rack servers? (Choose two.)

Select 2 answers
A.Fabric Interconnect management
B.Virtual media mounting
C.Service profile creation
D.Remote KVM console access
E.HyperFlex cluster management
AnswersB, D

Correct. Virtual media allows mounting ISO images remotely.

Why this answer

CIMC provides out-of-band management including KVM console and virtual media for remote OS installation.

465
MCQmedium

A data center architect is designing a spine-leaf network with 40 leaf switches and 4 spine switches. Each leaf has 48 x 25G server-facing ports and 8 x 100G uplinks to the spines. What is the oversubscription ratio from server to spine?

A.2:1
B.3:1
C.1.5:1
D.4:1
AnswerC

Correct calculation.

Why this answer

The oversubscription ratio is calculated by comparing the total server-facing bandwidth to the total uplink bandwidth. Each leaf switch has 48 x 25G server ports = 1200 Gbps of server-facing capacity, and 8 x 100G uplinks = 800 Gbps of spine-facing capacity. The ratio is 1200:800, which simplifies to 1.5:1, meaning the server-facing side has 1.5 times the bandwidth of the uplinks.

Exam trap

Cisco often tests the oversubscription ratio by providing port counts and speeds, and the trap here is that candidates mistakenly use the number of uplinks (8) as the total uplink bandwidth in Gbps, or incorrectly assume the server ports are 50G or 100G, leading to ratios like 2:1 or 3:1.

How to eliminate wrong answers

Option A (2:1) is wrong because it incorrectly assumes the server ports are 50G each or that the uplinks provide only 400 Gbps total, rather than calculating the actual 1200 Gbps down to 800 Gbps up. Option B (3:1) is wrong because it might result from miscalculating the server bandwidth as 48 x 50G = 2400 Gbps or misreading the uplink count as 4 x 100G = 400 Gbps, leading to 2400:800 or 1200:400. Option D (4:1) is wrong because it typically arises from confusing the number of uplinks (8) with their aggregate bandwidth, or from incorrectly assuming each server port is 100G, yielding 4800:800 or 4800:1200.

466
MCQeasy

Which protocol is recommended for streaming model-driven telemetry from NX-OS to a collector?

A.FTP
B.SNMP
C.HTTP
D.gRPC
AnswerD

gRPC with protobuf is the recommended transport for MDT.

Why this answer

gRPC (Google Remote Procedure Call) is the recommended protocol for streaming model-driven telemetry from NX-OS to a collector because it provides efficient, bidirectional streaming over HTTP/2, supports structured data encoding (e.g., Protobuf or JSON), and is natively supported in NX-OS for high-frequency, push-based telemetry. Unlike polling-based protocols, gRPC enables the device to continuously stream operational data to the collector with low latency and minimal overhead.

Exam trap

Cisco often tests the misconception that HTTP or SNMP can handle streaming telemetry, but the trap is that SNMP is pull-based and HTTP lacks the persistent, bidirectional streaming capabilities of gRPC, which is the only option that natively supports the push-based, subscription-driven model required for NX-OS telemetry.

How to eliminate wrong answers

Option A (FTP) is wrong because FTP is a file transfer protocol designed for bulk file uploads/downloads, not for real-time streaming of telemetry data, and it lacks the bidirectional streaming and structured data capabilities required for model-driven telemetry. Option B (SNMP) is wrong because SNMP is a traditional polling-based protocol that uses a pull model (manager requests data from agents), which is inefficient for high-frequency telemetry and does not support the push-based, subscription-driven streaming model that NX-OS telemetry requires. Option C (HTTP) is wrong because while HTTP can be used for telemetry (e.g., via RESTCONF), it is not optimized for streaming; gRPC, which uses HTTP/2 as a transport, provides persistent connections, multiplexing, and server push, making it the superior choice for streaming telemetry in NX-OS.

467
MCQhard

A large financial institution operates a dual-fabric Fibre Channel SAN with two separate MDS 9710 directors. Each fabric has multiple storage arrays and hundreds of hosts. The SAN is configured with VSANs to isolate different environments (production, development, backup). Recently, the backup VSAN has been experiencing slow performance during backup windows. Analysis shows that the ISLs between the directors in the backup VSAN are heavily utilized (near 100%) while other ISLs have spare capacity. The backup traffic consists of large sequential reads and writes. The SAN administrator has confirmed that there are no CRC errors or link issues. The backup VSAN uses a single 16 Gbps ISL. Which of the following is the best solution to improve backup performance?

A.Add an additional 16 Gbps ISL and configure a port channel for the backup VSAN.
B.Reduce the buffer credit count on the backup VSAN ISLs to reduce latency.
C.Enable QoS to prioritize backup traffic over other traffic.
D.Implement IVR to route backup traffic through the other fabric.
AnswerA

Increases bandwidth and load balancing.

Why this answer

Adding an additional 16 Gbps ISL and configuring a port channel for the backup VSAN increases the available bandwidth for backup traffic, which consists of large sequential reads and writes that can fully utilize the link. Port channels provide load balancing across member links based on source/destination IDs, effectively distributing the backup traffic and reducing congestion on the single ISL. This directly addresses the near-100% utilization without introducing complexity or relying on other fabrics.

Exam trap

Cisco often tests the misconception that QoS or buffer tuning can solve bandwidth saturation issues, but the core problem here is insufficient aggregate bandwidth, which only adding physical links (via port channels) can resolve.

How to eliminate wrong answers

Option B is wrong because reducing buffer credits on the ISL would actually increase latency and potentially cause frame drops, worsening performance, especially for long-distance links; buffer credits are used to absorb link latency, not to reduce it. Option C is wrong because QoS prioritization does not increase available bandwidth; it only reorders traffic, and since backup traffic is already the only traffic on that VSAN, prioritizing it would have no effect on the high utilization. Option D is wrong because IVR (Inter-VSAN Routing) would route backup traffic through the other fabric, but that fabric's ISLs are also shared with other VSANs and may not have spare capacity; moreover, IVR introduces additional complexity and potential security risks without guaranteeing improved performance, and the problem is bandwidth scarcity within the backup VSAN itself.

468
MCQeasy

An enterprise requires that all virtual machines using a specific service profile must have the same MAC address pool. Which policy should be configured on the service profile template?

A.MAC Pool Policy
B.UUID Pool Policy
C.Server Pool Policy
D.WWPN Pool Policy
AnswerA

MAC pool defines the range and is attached to the vNIC in the profile.

Why this answer

A MAC Pool Policy is correct because it defines a range of MAC addresses that are dynamically assigned to virtual network adapters in a service profile. When multiple VMs use the same service profile template, configuring a MAC Pool Policy ensures all VMs derive their MAC addresses from the same pool, guaranteeing consistency and avoiding address conflicts across the cluster.

Exam trap

The trap here is that candidates confuse MAC Pool Policy with UUID Pool Policy, assuming both handle identity assignment, but only MAC Pool Policy controls the Ethernet address pool for virtual NICs.

How to eliminate wrong answers

Option B is wrong because a UUID Pool Policy assigns unique identifiers to virtual machines, not MAC addresses, and does not control network interface addressing. Option C is wrong because a Server Pool Policy manages physical server selection for service profile association, not MAC address assignment. Option D is wrong because a WWPN Pool Policy assigns World Wide Port Names for Fibre Channel adapters, not Ethernet MAC addresses.

469
MCQhard

Which of the following is a requirement for VPC peer keepalive to function correctly?

A.Must use the same IP subnet as peer-link
B.Must be a Layer 3 interface with unique VRF
C.Must be a direct Layer 2 connection
D.Must be in the same VLAN as peer-link
AnswerB

Recommended to use a dedicated VRF for keepalive.

Why this answer

VPC peer keepalive requires a Layer 3 interface with a unique VRF to ensure that keepalive messages are sent over a dedicated, isolated path that is independent of the peer-link. This prevents the keepalive from being disrupted by issues on the peer-link and allows the VPC peers to detect failures even when the peer-link is down. The keepalive uses UDP port 3200 and must be routed through a separate VRF to avoid conflicts with the management or default routing tables.

Exam trap

Cisco often tests the misconception that VPC peer keepalive must be a direct Layer 2 connection or share the same subnet as the peer-link, when in fact it requires a Layer 3 interface with a unique VRF to ensure fault isolation.

How to eliminate wrong answers

Option A is wrong because VPC peer keepalive must use a different IP subnet than the peer-link; using the same subnet would cause routing conflicts and prevent proper isolation. Option C is wrong because VPC peer keepalive requires a Layer 3 routed interface, not a direct Layer 2 connection, as it relies on IP routing to traverse the keepalive path. Option D is wrong because the keepalive interface must be in a different VLAN (or no VLAN at all) than the peer-link; being in the same VLAN would create a Layer 2 loop and defeat the purpose of a separate keepalive path.

470
Multi-Selecthard

Which THREE conditions can cause Fibre Channel buffer credit starvation? (Choose three.)

Select 3 answers
A.Frequent CRC errors causing retransmissions
B.Long-distance links with insufficient credits allocated
C.High oversubscription ratio on the ISL
D.Multiple VSANs configured on the same trunk
E.Inadequate number of credits allocated to the port
AnswersA, B, E

Correct: Retransmissions consume credits without releasing them.

Why this answer

Frequent CRC errors indicate corrupted frames, which require retransmission. Each retransmission consumes an additional buffer credit, effectively starving the port of available credits for new transmissions. This leads to reduced throughput and potential credit starvation.

Exam trap

Cisco often tests the distinction between congestion (oversubscription) and buffer credit starvation, where candidates mistakenly associate high oversubscription with credit exhaustion, but credits are a per-port, per-link resource unrelated to oversubscription ratios.

471
MCQeasy

An engineer is configuring micro-segmentation in an ACI fabric. Which object defines the whitelist model for communication between EPGs?

A.Taboo contract
B.Filter
C.VRF
D.Contract
AnswerD

Contracts are the policy construct that permits traffic between EPGs.

Why this answer

ACI contracts define a whitelist model where communication between EPGs is explicitly allowed by the contract's subject and filters.

472
MCQmedium

A storage administrator wants to isolate two Fibre Channel fabrics on the same physical switch infrastructure. Which technology should be used to achieve this isolation similar to VLANs in Ethernet?

A.PortChannels
B.Zoning
C.NPV
D.VSANs
AnswerD

VSANs partition the FC fabric into isolated logical SANs.

Why this answer

VSANs provide isolation in Fibre Channel networks analogous to VLANs.

473
MCQhard

Refer to the exhibit. A UCS manager profile is configured with two vNICs on separate fabrics. The server is failing to communicate with the default gateway on VLAN 100. Both vNICs are up. What is the most likely issue?

A.The MAC pool is exhausted
B.The VLAN 100 is not defined on the fabric interconnects
C.The boot policy is missing
D.The server is using active-standby NIC teaming and the active vNIC is on a fabric that does not have the VLAN
AnswerB

If VLAN 100 is absent on the FIs, traffic cannot be forwarded to the gateway.

Why this answer

The most likely issue is that VLAN 100 is not defined on the fabric interconnects. In UCS Manager, even if the vNICs are up and the MAC pool is available, the server cannot communicate with the default gateway if the VLAN is not present on the fabric interconnect's VLAN database. The fabric interconnect must have VLAN 100 created and assigned to the appropriate uplink ports or port-channels for traffic to be forwarded.

Exam trap

Cisco often tests the misconception that a vNIC being 'up' implies full Layer 2 connectivity, when in fact the VLAN must be defined on the fabric interconnect for traffic to be switched.

How to eliminate wrong answers

Option A is wrong because a MAC pool exhaustion would prevent vNICs from being assigned a MAC address, but both vNICs are up, indicating MAC addresses are already assigned. Option C is wrong because the boot policy determines the boot order and storage connectivity, not Layer 2/3 network communication to a default gateway. Option D is wrong because active-standby NIC teaming (e.g., using MAC pinning or vPC) would still allow communication if the active vNIC is on the fabric with VLAN 100; the issue is that VLAN 100 is missing on both fabrics, not a teaming misconfiguration.

474
MCQmedium

In a VXLAN overlay, what is the role of the VXLAN Network Identifier (VNI)?

A.It identifies the VXLAN tunnel source and destination IP
B.It identifies the overlay Layer 2 network segment
C.It is the multicast group address for BUM traffic
D.It is used for ECMP load balancing
AnswerB

VNI uniquely identifies a Layer 2 segment across the overlay.

Why this answer

The VXLAN Network Identifier (VNI) is a 24-bit field in the VXLAN header that uniquely identifies an overlay Layer 2 network segment, allowing multiple isolated Layer 2 domains to coexist over a shared Layer 3 underlay. It is analogous to a VLAN ID in traditional networking but provides up to 16 million segments, enabling scalable network virtualization.

Exam trap

The trap here is that candidates confuse the VNI with the multicast group address used for BUM traffic, but the VNI is a segment identifier, not a multicast address; Cisco often tests this by listing 'multicast group' as a distractor to see if you understand the separation of overlay identification from underlay forwarding.

How to eliminate wrong answers

Option A is wrong because the VXLAN tunnel source and destination IP addresses are defined by the VTEP (VXLAN Tunnel Endpoint) configuration, not by the VNI; the VNI identifies the Layer 2 segment, not the tunnel endpoints. Option C is wrong because the multicast group address for BUM (Broadcast, Unknown Unicast, Multicast) traffic is configured separately in the underlay network (e.g., using PIM or head-end replication), while the VNI is used to map the overlay segment to the appropriate multicast group or replication list. Option D is wrong because ECMP (Equal-Cost Multi-Path) load balancing in VXLAN is typically based on the outer UDP source port (derived from the inner packet hash) or the outer IP header, not the VNI; the VNI is a static identifier and does not influence load-balancing decisions.

475
Multi-Selecthard

An engineer is configuring a UCS service profile for a blade server that will be used for a critical application. The application requires high availability for both network and storage connectivity. Which three policies should be configured in the service profile to meet these requirements? (Choose three.)

Select 3 answers
A.IPMI policy
B.SAN connectivity policy
C.Boot policy
D.VLAN policy
E.Power policy
AnswersB, C, D

Defines vHBAs and WWPNs for storage connectivity.

Why this answer

For HA, the service profile should use a VLAN policy for network connectivity, a SAN connectivity policy for storage, and a boot policy that defines multiple paths. Additionally, a vNIC/vHBA placement policy can enable failover, but the core three are VLAN, SAN, and boot policies.

476
Multi-Selectmedium

An administrator is configuring a Cisco MDS switch for FCoE. Which two DCB features must be enabled to support FCoE traffic? (Choose two.)

Select 2 answers
A.Jumbo frames
B.Link Aggregation Control Protocol (LACP)
C.Data Center Bridging Exchange (DCBX)
D.Priority Flow Control (PFC)
E.Enhanced Transmission Selection (ETS)
AnswersC, D

DCBX is used to discover and configure DCB capabilities, including PFC.

Why this answer

FCoE requires lossless Ethernet. PFC provides no-drop priority for FCoE traffic, and DCBX is used to negotiate PFC and other parameters between peers.

477
MCQeasy

Which type of zoning uses the World Wide Port Name (WWPN) to define zone members, providing better security because WWPNs are globally unique?

A.Soft zoning by port
B.VSAN-based zoning
C.Hard zoning by WWPN
D.LUN masking
AnswerC

WWPN-based zoning is hard zoning and more secure.

Why this answer

Hard zoning by WWPN uses WWPNs to define members, and is considered more secure than soft zoning by port.

478
Multi-Selectmedium

A Cisco MDS switch is being configured for FCoE. Which three DCB components are required for lossless Ethernet operation? (Choose three.)

Select 3 answers
A.DCBX (Data Center Bridging Exchange)
B.PFC (Priority Flow Control)
C.FIP (FCoE Initialization Protocol)
D.ETS (Enhanced Transmission Selection)
E.iSCSI
AnswersA, B, D

DCBX discovers and configures DCB parameters.

Why this answer

PFC, DCBX, and ETS are the three core DCB features required for FCoE.

479
MCQhard

During a SAN migration, an engineer connects new storage to an existing MDS switch. The new storage array is configured with WWPNs that were previously used by decommissioned servers. After zoning is updated, some servers fail to see the correct LUNs. What is the most likely cause?

A.The NPV feature is enabled on the switch causing proxy login issues.
B.Duplicate WWPNs exist in the fabric, causing device login conflicts.
C.The new storage is not in the same VSAN as the servers.
D.The switch is running an older firmware that does not support the new storage.
AnswerB

Reusing WWPNs without clearing the old entries leads to duplicate registrations.

Why this answer

The new storage array is configured with WWPNs that were previously used by decommissioned servers. When these WWPNs are introduced into the fabric, the switch detects duplicate WWPNs because the fabric name server still holds the old entries (or the devices are still logged in). This causes login conflicts, preventing the servers from correctly discovering the LUNs.

The correct answer is B.

Exam trap

Cisco often tests the concept of duplicate WWPNs in the fabric as a subtle cause of device login failures, and the trap here is that candidates might overlook the reuse of WWPNs and instead blame VSAN misconfiguration or firmware issues.

How to eliminate wrong answers

Option A is wrong because NPV (N_Port Virtualization) is used to aggregate multiple N-Ports into a single F-Port, and it does not cause proxy login issues related to duplicate WWPNs; it is unrelated to the scenario. Option C is wrong because the question states zoning is updated, implying the servers and storage are in the same VSAN; if they were not, zoning would not be effective, but the symptom is specific to LUN visibility, not VSAN mismatch. Option D is wrong because older firmware might cause feature incompatibility, but the specific symptom of servers failing to see correct LUNs after reusing WWPNs points directly to duplicate WWPN conflicts, not a generic firmware version issue.

480
MCQmedium

In a Cisco ACI fabric, a tenant has multiple bridge domains with different subnets. The administrator wants to allow traffic between two EPGs in the same tenant but different bridge domains. Which ACI construct is required to enable communication?

A.Contracts with filters and subjects
B.Shared L3Out
C.VRF route leaking
D.VMM domain integration
AnswerA

Contracts specify allowed traffic between EPGs.

Why this answer

In Cisco ACI, EPGs in different bridge domains are isolated by default. To enable communication between them, a contract must be applied that defines the allowed traffic. Contracts use filters and subjects to specify permitted protocols and ports, and are the only native ACI mechanism for inter-EPG communication across bridge domains within the same tenant.

Exam trap

Cisco often tests the misconception that EPGs in the same tenant can communicate without a contract, but in ACI, all inter-EPG traffic (even within the same tenant) requires a contract unless the EPGs are in the same bridge domain and have unicast routing enabled.

How to eliminate wrong answers

Option B is wrong because a Shared L3Out is used to provide external connectivity (e.g., to a WAN or internet), not to enable communication between EPGs within the same tenant. Option C is wrong because VRF route leaking is a feature for inter-VRF routing in traditional networking, but ACI uses contracts for policy-based forwarding and does not rely on route leaking for intra-tenant EPG communication. Option D is wrong because VMM domain integration integrates ACI with hypervisor managers (e.g., VMware vCenter) for automated EPG deployment, but it does not itself enable traffic between EPGs in different bridge domains.

481
MCQeasy

An engineer wants to automate the creation of VLANs on a Nexus 9000 switch using Python scripts. Which on-box solution allows running Python scripts directly on the switch without an external server?

A.Guest shell
B.Terraform provider
C.APIC REST API
D.Ansible control node
AnswerA

Guest shell is a Linux container on Nexus for running Python scripts.

Why this answer

Guest shell provides a secure Linux environment on Nexus switches to run Python scripts and tools.

482
MCQmedium

In a UCS domain, fabric interconnects are deployed in an end-host mode. What is a characteristic of this mode?

A.The FI must be configured with Spanning Tree Protocol
B.The FI uses N-Port Virtualization (NPV) to reduce the number of uplinks needed
C.The FI supports only Fibre Channel traffic
D.The FI operates as a standard Layer 2 switch
AnswerB

NPV allows the FI to multiplex multiple server connections over fewer uplink ports.

Why this answer

End-host mode (also called N-Port Virtualization) allows the FI to act as a switch that presents server vNICs as if they were directly connected to the upstream network, simplifying VLAN/VXLAN configurations.

483
MCQmedium

A network engineer is troubleshooting a VXLAN EVPN problem where some endpoints are not reachable. The output of 'show bgp l2vpn evpn' shows Type-3 routes but no Type-2 routes for a specific VNI. What should the engineer check?

A.The route-target import/export is misconfigured.
B.BGP session is not established.
C.The VNI is not configured under the NVE interface.
D.The VLAN corresponding to the VNI has no active ports.
AnswerD

Type-2 routes carry MAC/IP information. Without active ports in the VLAN, no MACs are learned, so no Type-2 routes are advertised.

Why this answer

Type-3 routes (IMET routes) are used for BUM traffic forwarding and are advertised when the VNI is configured under the NVE interface, even if no endpoints are active. Type-2 routes (MAC/IP advertisement routes) are only generated when the switch learns a MAC address on a VLAN associated with that VNI. If Type-3 routes exist but Type-2 routes are missing, the VNI is correctly configured for the overlay, but no active ports in the corresponding VLAN are learning MAC addresses, preventing Type-2 route generation.

Exam trap

Cisco often tests the distinction between control-plane (BGP route types) and data-plane (VNI/NVE configuration) readiness, trapping candidates who assume Type-3 routes imply full VNI functionality without checking for active MAC learning on the access side.

How to eliminate wrong answers

Option A is wrong because a route-target import/export misconfiguration would prevent the reception or advertisement of all EVPN route types (including Type-3), not selectively block Type-2 routes while allowing Type-3. Option B is wrong because if the BGP session were not established, no EVPN routes (neither Type-2 nor Type-3) would appear in the 'show bgp l2vpn evpn' output. Option C is wrong because if the VNI were not configured under the NVE interface, the switch would not generate any EVPN routes for that VNI, including Type-3 routes.

484
MCQhard

An engineer is configuring FCoE on a Cisco MDS switch and needs to ensure that the switch can communicate with FCoE-enabled servers. Which FCoE port type should be used on the switch to connect to a server's CNA?

A.VE_port
B.VF_port
C.NP_port
D.VN_port
AnswerB

VF_port is the switch port that connects to a VN_port on a CNA.

Why this answer

In FCoE, a VF_port (Virtual F_port) on the switch connects to a VN_port (Virtual N_port) on the server's CNA. This is analogous to an F_port connecting to an N_port in native FC.

485
MCQeasy

In a spine-leaf architecture using eBGP, which of the following is the recommended BGP configuration for the spine switches?

A.No BGP; use OSPF instead
B.Single ASN for all spines
C.Unique ASN for each spine switch
D.Same ASN as leaves
AnswerC

Each spine gets a unique ASN so that leaves see multiple AS paths, enabling ECMP.

Why this answer

In eBGP-based spine-leaf architectures, each spine switch should use a unique ASN to enable BGP’s loop prevention mechanism (the AS_PATH attribute). This ensures that leaf switches can detect and discard routes received from two different spines that originated from the same leaf, preventing routing loops and allowing load balancing across multiple spines. A unique ASN per spine is the recommended design per Cisco’s best practices for data center fabrics.

Exam trap

Cisco often tests the misconception that all spine switches should share a single ASN for simplicity, but the trap here is that this breaks eBGP’s loop prevention and prevents ECMP load balancing across spines.

How to eliminate wrong answers

Option A is wrong because OSPF is not recommended in spine-leaf fabrics due to its lack of scalability, slow convergence, and inability to support multipathing as efficiently as eBGP; eBGP is the preferred underlay routing protocol for modern data center designs. Option B is wrong because using a single ASN for all spines would cause BGP to treat routes from different spines as having the same AS_PATH, potentially leading to loop prevention issues and preventing the leaf from load-balancing across multiple spines. Option D is wrong because using the same ASN as leaves violates eBGP’s requirement for different ASNs between peers; if spines and leaves share an ASN, BGP will not form an eBGP session (it becomes iBGP) and the design loses the loop-prevention and path-selection benefits of eBGP.

486
MCQmedium

A data center uses FCoE to consolidate storage and LAN traffic. Which IEEE standard ensures that FCoE frames are not dropped due to congestion by providing lossless Ethernet?

A.ETS (Enhanced Transmission Selection)
B.FIP (FCoE Initialization Protocol)
C.PFC (Priority Flow Control)
D.DCBX (Data Center Bridging Exchange)
AnswerC

PFC provides lossless Ethernet by pausing traffic per priority.

Why this answer

Priority Flow Control (PFC, IEEE 802.1Qbb) creates lossless lanes by pausing traffic on specific priorities to prevent drops. ETS allocates bandwidth, and DCBX exchanges capabilities.

487
Multi-Selectmedium

A UCS administrator needs to implement boot-from-SAN for a B-series blade. Which two components must be properly configured in the service profile? (Choose two.)

Select 2 answers
A.vHBA
B.IPMI policy
C.Boot policy
D.SCSI policy
E.vNIC
AnswersA, C

Correct. vHBA provides Fibre Channel connectivity to SAN storage.

Why this answer

Boot from SAN requires a vHBA for SAN connectivity and a boot policy that specifies the SAN target.

488
MCQeasy

A NETCONF session to an NX-OS switch fails with 'Connection refused'. What is the most likely cause?

A.All of the above
B.Wrong SSH port (default 830)
C.The switch is unreachable
D.NETCONF is not enabled on the switch
AnswerD

Without 'feature netconf', the NETCONF server does not start.

Why this answer

NETCONF uses SSH port 830 by default, but the 'Connection refused' error specifically indicates that the TCP connection was actively rejected by the switch, not that it timed out or was unreachable. This occurs when the NETCONF subsystem is not available because the 'netconf' feature has not been enabled on the NX-OS device, which is required to start the NETCONF server process.

Exam trap

Cisco often tests the distinction between 'Connection refused' (service not running) and 'Connection timed out' (host unreachable or firewall blocking), leading candidates to incorrectly select 'wrong port' or 'unreachable' when the real issue is that the NETCONF feature is not enabled.

How to eliminate wrong answers

Option A is wrong because 'All of the above' cannot be correct since only one option is the most likely cause. Option B is wrong because while the default NETCONF SSH port is 830, a wrong port would result in a timeout or 'Connection timed out', not an active 'Connection refused' — the switch would not reject the connection on a different port unless that port is closed. Option C is wrong because if the switch were unreachable, the error would be 'No route to host' or 'Connection timed out', not 'Connection refused', which requires the switch to be reachable and actively rejecting the connection.

489
MCQmedium

An organization uses VXLAN EVPN for network segmentation. Which component provides per-tenant isolation of control plane traffic?

A.VLAN
B.VNI
C.VXLAN tunnel
D.VRF
AnswerD

VRF creates separate routing instances for each tenant, isolating control plane traffic.

Why this answer

In VXLAN EVPN, per-tenant isolation of control plane traffic is achieved through the use of VRFs (Virtual Routing and Forwarding instances). Each tenant is assigned a unique VRF, which maintains its own separate routing table and forwarding decisions, ensuring that control plane information (such as MAC/IP routes advertised via MP-BGP EVPN) is isolated between tenants. This is distinct from data plane isolation, which is provided by VXLAN Network Identifiers (VNIs).

Exam trap

Cisco often tests the distinction between data plane isolation (VNI) and control plane isolation (VRF), leading candidates to mistakenly choose VNI because it is the most visible segmentation identifier in VXLAN.

How to eliminate wrong answers

Option A is wrong because VLANs operate at Layer 2 and provide broadcast domain isolation within a physical network, but they do not isolate control plane traffic in a VXLAN EVPN overlay; VLANs are mapped to VNIs for data plane segmentation. Option B is wrong because a VNI (VXLAN Network Identifier) is used to identify and isolate data plane traffic (VXLAN segments) at Layer 2, not the control plane; control plane isolation requires separate routing contexts. Option C is wrong because a VXLAN tunnel is simply the encapsulation mechanism that carries VXLAN packets between VTEPs; it does not provide any per-tenant isolation of control plane signaling or routing information.

490
MCQeasy

Refer to the exhibit. The blade server is unassociated. Which action is required to assign a service profile to this server?

A.Configure the server's BIOS settings
B.Create a service profile and associate it with the server
C.Create a boot policy
D.Create a vNIC template
AnswerB

Directly associates the server with a profile, enabling configuration.

Why this answer

A service profile defines the server identity, firmware, policies, and connectivity settings for a UCS blade server. When a server is unassociated, you must create a service profile and then associate it with the server to apply those configurations and bring the server into operation.

Exam trap

Cisco often tests the distinction between creating a component policy (like boot policy or vNIC template) versus creating and associating the service profile itself, leading candidates to mistake a sub-component for the primary action.

How to eliminate wrong answers

Option A is wrong because BIOS settings are configured within the service profile or BIOS policy, not as a standalone prerequisite for association. Option C is wrong because a boot policy is a component that can be included in a service profile, but creating one alone does not assign a service profile to the server. Option D is wrong because a vNIC template is used to define network interface properties within a service profile, but it is not the action required to associate a service profile with the server.

491
MCQmedium

Which FCoE port type is analogous to an N-port in traditional Fibre Channel and connects to a VF-port on an FCoE switch?

A.VF-port
B.VE-port
C.NP-port
D.VN-port
AnswerD

VN-port is the host-side port, analogous to N-port.

Why this answer

In FCoE, VN-port is the virtual equivalent of an N-port, and VF-port is the equivalent of an F-port. A VN-port connects to a VF-port.

492
MCQmedium

An engineer is troubleshooting a UCS B-Series server that fails to boot from SAN. The SAN boot LUN is correctly zoned and presented. The service profile has WWPNs configured. What is a likely cause?

A.Server firmware mismatch
B.Missing vNIC template
C.VLAN mismatch
D.Incorrect boot policy order
AnswerD

The server will attempt boot devices in the order defined; if SAN is not first, it may fail.

Why this answer

The SAN boot LUN is correctly zoned and presented, and the WWPNs are configured in the service profile, so the connectivity and identity are set. However, if the boot policy order is incorrect (e.g., the SAN boot target is listed after a local disk or another boot device), the server will attempt to boot from the wrong device first and fail to boot from the SAN. The boot policy defines the sequence of boot devices, and a misconfigured order is a common cause of boot failures in UCS B-Series.

Exam trap

Cisco often tests the misconception that SAN boot failures are always due to zoning or WWPN misconfiguration, when in fact the boot policy order is a separate, critical setting that must be correctly configured in the service profile.

How to eliminate wrong answers

Option A is wrong because a server firmware mismatch would typically cause compatibility issues or boot failures at a lower level, but the question states the LUN is correctly zoned and presented, and the issue is specifically about boot order, not firmware version mismatch. Option B is wrong because a missing vNIC template would prevent the vNIC from being created in the service profile, but the service profile already has WWPNs configured, implying the vNIC is present. Option C is wrong because a VLAN mismatch would affect network connectivity after boot, not the ability to boot from SAN, which uses Fibre Channel (FC) zoning, not VLANs.

493
MCQmedium

A storage administrator configures a new Cisco MDS switch and enables NPV mode. However, the upstream switch shows the NPV switch as an end device instead of a switch. What is the most likely reason?

A.The upstream switch port is configured as an E port.
B.NPIV is not enabled on the upstream switch.
C.The NPV switch has a domain ID that conflicts with the upstream switch.
D.The NPV switch is configured with N port mode.
AnswerB

Without NPIV, the upstream switch treats the NPV device as a regular end device.

Why this answer

When NPV mode is enabled on a Cisco MDS switch, it operates as an N-port proxy, requiring the upstream Fibre Channel switch to support NPIV (N_Port ID Virtualization). NPIV allows multiple FC IDs to be assigned to a single N port, which is essential for the NPV switch to present multiple end devices behind a single physical link. Without NPIV enabled on the upstream switch, the NPV switch is treated as a single end device (like a server HBA) rather than as a switch fabric element.

Exam trap

The trap here is that candidates often confuse NPV with NPIV or assume that enabling NPV on the downstream switch automatically configures the upstream switch, when in fact NPIV must be explicitly enabled on the upstream switch to support the NPV proxy behavior.

How to eliminate wrong answers

Option A is wrong because configuring the upstream switch port as an E port would create an ISL between two switches, but NPV mode requires the upstream port to be an F port (fabric-facing) to accept NPIV-enabled N-port connections; an E port would not allow NPV to function at all. Option C is wrong because domain ID conflicts are irrelevant in NPV mode—NPV switches do not participate in fabric domain ID assignment; they are transparent and do not have their own domain ID. Option D is wrong because the NPV switch is explicitly configured with N port mode (not F port mode) on its upstream-facing interfaces, which is correct behavior; the issue is that the upstream switch lacks NPIV support, not that the NPV switch is in N port mode.

494
MCQeasy

An engineer wants to automate VLAN configuration on a Cisco Nexus 9000 switch using a Python script running in the guest shell. Which library should the engineer use to send NX-OS commands via the NX-API?

A.OnEX
B.acitoolkit
C.Cobra SDK
D.cisco_nxapi
AnswerD

Correct. cisco_nxapi is the Python library for NX-API.

Why this answer

The cisco_nxapi library is specifically designed for Python scripts to interact with Nexus switches via NX-API. The OnEX library is not a standard library; guest shell leverages Python on-box, but the library for NX-API calls is cisco_nxapi.

495
MCQhard

An organization uses UCS Central to manage multiple UCS domains. A global service profile policy is created in UCS Central to enforce a common boot policy across all domains. However, one UCS domain needs a different boot order for a specific set of blades. How should the administrator implement this deviation while maintaining centralized manageability?

A.Create a local boot policy in the specific UCS Manager and assign it to the service profiles that need the change.
B.Exclude the specific UCS domain from the global policy and create a separate global policy for that domain.
C.Delete the global boot policy and use only local policies.
D.Modify the global boot policy in UCS Central to include all variations.
AnswerA

Local policies override global policies for the assigned service profiles.

Why this answer

UCS Central allows global policies, but local policies in each UCS Manager can override them for specific service profiles. The administrator should create a local boot policy in the specific UCS domain and assign it to the service profiles that require the different boot order.

496
MCQhard

A storage network using Cisco MDS 9700 switches has two VSANs (100 and 200). The engineer wants to share a physical ISL between both VSANs while maintaining traffic isolation. Which feature should be used?

A.VSAN trunking
B.PortChannel with trunk mode on
C.Inter-VSAN Routing (IVR)
D.FSPF metric manipulation
AnswerA

VSAN trunking allows multiple VSANs over a single link with isolation.

Why this answer

VSAN trunking allows a single physical ISL to carry traffic for multiple VSANs by adding a VSAN tag to each frame, ensuring traffic isolation between VSANs 100 and 200. This is the native Cisco MDS feature designed for sharing inter-switch links across VSANs without merging their control planes or forwarding tables.

Exam trap

Cisco often tests the distinction between VSAN trunking and Inter-VSAN Routing (IVR), where candidates mistakenly choose IVR because they think 'sharing' implies routing between VSANs, but the question specifically requires traffic isolation, not inter-VSAN communication.

How to eliminate wrong answers

Option B is wrong because PortChannel with trunk mode on bundles multiple physical links into a single logical link but does not inherently enable multiple VSANs over a single ISL; VSAN trunking must be explicitly configured on the PortChannel. Option C is wrong because Inter-VSAN Routing (IVR) is used to route traffic between different VSANs, not to share an ISL while maintaining isolation; it actually breaks isolation by allowing communication across VSANs. Option D is wrong because FSPF metric manipulation affects path selection within a single VSAN's fabric and has no role in enabling multiple VSANs over a shared link.

497
Multi-Selecthard

A Cisco MDS switch is configured for NPV mode. An upstream NPIV-enabled switch is connected. The administrator notices that the NPV switch is not logging in to the NPIV switch. The NPV switch shows the following: 'show npv status' indicates NPV is enabled but no traffic. Which three conditions could cause this issue?

Select 3 answers
A.FSPF is not enabled on the NPV switch.
B.The uplink interface on the NPV switch is not configured as an NP port.
C.The upstream switch is not configured for NPIV mode.
D.The NPV switch does not have the proper license for NPV mode.
E.The VSAN on the NPV uplink does not match the VSAN on the core switch.
AnswersB, C, E

NPV uplinks must be configured as NP ports to connect to the core NPIV switch.

Why this answer

In NPV mode, the uplink interface on the NPV switch must be explicitly configured as an NP port (np). If the interface is left as a default F port or another port type, it cannot establish a connection to the upstream NPIV-enabled switch. The 'show npv status' output showing NPV enabled but no traffic indicates that the NPV switch is operational but the uplink is not properly configured to initiate the FLOGIN process.

Exam trap

Cisco often tests the misconception that NPV requires a license or that FSPF must be enabled, when in fact NPV is license-free and does not use FSPF; the real issue is typically an incorrect port mode or VSAN mismatch.

498
MCQeasy

Which Fibre Channel port type is used to connect a host bus adapter (HBA) to a Fibre Channel switch in a point-to-point topology?

A.E-port
B.F-port
C.N-port
D.NP-port
AnswerC

N-port is the host port in a point-to-point connection to a fabric.

Why this answer

An N-port (Node port) is used on the host side, and an F-port (Fabric port) is used on the switch side. The question asks for the host side port type.

499
MCQmedium

A Cisco MDS switch is being configured to support multiple isolated Fibre Channel fabrics over a single physical infrastructure. Which feature should be used to achieve this isolation?

A.VLANs
B.PortChannels
C.VSANs
D.Zoning
AnswerC

VSANs create isolated Fibre Channel fabrics.

Why this answer

Virtual SANs (VSANs) provide fabric isolation by creating separate logical fabrics within a single physical switch infrastructure, similar to VLANs in Ethernet.

500
Multi-Selectmedium

Which two are benefits of using Cisco UCS Central for multi-domain management? (Choose two.)

Select 2 answers
A.Eliminates the need for Fabric Interconnects.
B.Replaces the need for UCS Manager in each domain.
C.Allows creation of global service profile templates.
D.Provides a single pane of glass for managing multiple UCS domains.
E.Enables direct CIMC management of all servers.
AnswersC, D

Correct. Templates can be applied across domains.

Why this answer

UCS Central provides centralized management of multiple UCS domains, enabling global policies and service profile templates. It also offers visibility and consistency across domains.

501
MCQmedium

A team is using Cisco DCNM for fabric management. They need to integrate with an external CI/CD pipeline. Which API should they use to trigger a network configuration change?

A.SNMP SET
B.DCNM REST API
C.NX-API on each switch
D.CLI via SSH
AnswerB

Centralized northbound API, ideal for CI/CD.

Why this answer

The DCNM REST API is the correct choice because it provides a programmatic, northbound interface specifically designed for integrating Cisco DCNM with external CI/CD pipelines. This API allows you to trigger network configuration changes at the fabric level, abstracting the complexity of individual switches and ensuring consistency across the entire fabric, which is essential for automated, version-controlled deployments.

Exam trap

Cisco often tests the distinction between device-level APIs (like NX-API) and fabric-level management APIs (like DCNM REST API), leading candidates to choose NX-API because they assume it is the most direct way to configure switches, but they miss that the question specifically requires integration with a CI/CD pipeline for fabric management, which demands a centralized, orchestrated approach.

How to eliminate wrong answers

Option A is wrong because SNMP SET is a legacy, device-level protocol that is not designed for fabric-wide orchestration or CI/CD integration; it is slow, lacks transactional guarantees, and does not support the declarative model needed for automated pipelines. Option C is wrong because NX-API on each switch operates at the individual device level, requiring the pipeline to manage each switch separately, which defeats the purpose of fabric-level management and introduces risk of configuration drift. Option D is wrong because CLI via SSH is a manual, non-scalable method that cannot be reliably integrated into an automated CI/CD pipeline; it lacks idempotency, audit trails, and the ability to roll back changes atomically.

502
Matchingmedium

Match each Cisco UCS Manager CLI command to its function.

Drag a concept onto its matching description — or click a concept then click the description.

Concepts
Matches

Displays hardware details of servers

Enters organization configuration mode

Creates a logical server definition

Configures virtual network interface card

Applies pending configuration changes

Why these pairings

In UCS Manager CLI, 'scope server' enters server management mode, 'scope chassis' enters chassis management mode, and 'show environment' displays environmental status. Other commands like 'scope fabric-interconnect' or 'show server' have different functions.

503
MCQeasy

An engineer needs to automate configuration backups on NX-OS switches using Python. Which Python library is specifically designed for this purpose?

A.requests
B.paramiko
C.cli
D.nxapi
AnswerD

nxapi is the official Python library for NX-OS NX-API.

Why this answer

The `nxapi` library is specifically designed for automating configuration backups and other management tasks on Cisco NX-OS switches. It provides a Pythonic interface to the NX-API, which uses HTTP/HTTPS-based REST or XML/JSON-RPC calls to execute CLI commands and retrieve structured output, making it the correct choice for this purpose.

Exam trap

Cisco often tests the distinction between generic libraries (like `requests` or `paramiko`) and platform-specific libraries (like `nxapi`), trapping candidates who overlook that `nxapi` provides built-in NX-OS command formatting and authentication, whereas `requests` would require manual construction of NX-API payloads.

How to eliminate wrong answers

Option A is wrong because the `requests` library is a generic HTTP client library for Python; it can be used to send HTTP requests to NX-API but lacks the NX-OS-specific abstractions, authentication handling, and command formatting that `nxapi` provides. Option B is wrong because `paramiko` is an SSHv2 implementation for Python; while it can be used to automate CLI commands over SSH, it is not purpose-built for NX-OS and requires manual handling of SSH sessions, command parsing, and error handling. Option C is wrong because `cli` is not a standard Python library; it is a module within Cisco's NX-OS Python environment (e.g., `from cli import cli`) that runs CLI commands locally on the switch, but it is not a library for external automation of configuration backups.

504
MCQhard

A large enterprise runs a Cisco HyperFlex cluster with three nodes, managed through Intersight. After a planned maintenance window, the administrator notices that one of the nodes is in a 'Degraded' state and the cluster is running in 'Read-Only' mode. The administrator checks the Intersight dashboard and sees that the node's disk status shows 'Missing' for one of the SSDs. The administrator also notices that the node's IP address is reachable and the ESXi host is still operational. The administrator reviews the cluster health and sees no other alerts. What is the most likely root cause and the recommended action to restore full cluster health?

A.The SSD failed due to a hardware fault; the administrator should replace the SSD and then use Intersight to rebuild the node's disk group.
B.The node lost connectivity to the cluster's internal network; the administrator should check the network switches and restore the VLAN configuration.
C.The node's controller VM (stCVM) is not running; the administrator should reboot the node and wait for the CVM to start.
D.The cluster has split-brain due to a partition; the administrator should force a cluster consensus by shutting down the other nodes.
AnswerA

A failed SSD is a common cause of a missing disk. Replacing the SSD and rebuilding the disk group restores redundancy and cluster health.

Why this answer

A is correct because a missing SSD in a HyperFlex node triggers a 'Degraded' state and forces the cluster into 'Read-Only' mode to prevent data corruption. Since the node's IP is reachable and ESXi is operational, the issue is a hardware fault, not a network or CVM problem. Replacing the SSD and using Intersight to rebuild the disk group restores the node's storage capacity and cluster health.

Exam trap

The trap here is that candidates may assume a 'Degraded' state with reachable ESXi implies a network or CVM issue, but the specific 'Missing' disk status points directly to a hardware fault, not a software or connectivity problem.

How to eliminate wrong answers

Option B is wrong because the node's IP is reachable and ESXi is operational, indicating no network connectivity loss; a VLAN misconfiguration would cause unreachability, not a missing SSD status. Option C is wrong because if the stCVM were not running, the node would likely be unreachable or show a different alert, and the disk status would not specifically show 'Missing' for an SSD. Option D is wrong because split-brain occurs when nodes lose quorum, typically due to network partition, not a single missing SSD; forcing consensus by shutting down other nodes would cause data loss and is not a recommended recovery step.

505
MCQeasy

A storage administrator has deployed a Fibre Channel fabric with two MDS switches. Each host has a single HBA. Which port type is used to connect the HBA to the switch?

A.N-port
B.F-port
C.E-port
D.NP-port
AnswerA

N-port is the host (node) port, connected to an F-port on the switch.

Why this answer

An N-port is a host (node) port that connects to an F-port on the switch. The HBA operates in N-port mode by default.

506
Multi-Selecteasy

Which three components are required to boot a UCS blade server from SAN? (Choose three.)

Select 3 answers
A.SAN boot target LUN
B.vHBA
C.Boot policy
D.iSCSI adapter
E.vNIC
AnswersA, B, C

The actual storage unit from which to boot.

Why this answer

A SAN boot target LUN is required because the UCS blade server needs a specific logical unit number (LUN) on the storage array from which to boot the operating system. Without a designated boot LUN, the server has no target storage device to load the OS from over the Fibre Channel (FC) or FCoE SAN fabric.

Exam trap

Cisco often tests the distinction between vNIC (LAN) and vHBA (SAN), so candidates mistakenly select vNIC for SAN boot, not realizing that storage traffic requires a dedicated HBA abstraction.

507
MCQmedium

In ACI, the management information tree (MIT) organizes managed objects hierarchically. Which object is the parent of an Application Profile (AP)?

A.fvBD
B.Tenant
C.EPG
D.Infra
AnswerB

Tenant is the top-level container; AP is under tenant.

Why this answer

In the MIT, a Tenant contains Application Profiles.

508
Multi-Selectmedium

Which THREE methods can be used to propagate Cisco TrustSec Security Group Tags (SGTs) across a network? (Choose three.)

Select 3 answers
A.VXLAN with group-based policy
B.SXP (SGT Exchange Protocol)
C.802.1Q tag (inline tagging)
D.CDP (Cisco Discovery Protocol)
E.LLDP
AnswersA, B, C

VXLAN can carry SGTs in the Group Policy ID (GPI) field.

Why this answer

VXLAN with group-based policy (GBP) is a valid method for propagating SGTs because it embeds the SGT into the VXLAN Group Policy ID (GPID) field within the VXLAN header. This allows the SGT to be carried across an overlay network, enabling scalable, policy-based segmentation in a fabric environment without requiring inline tagging or SXP.

Exam trap

Cisco often tests the distinction between discovery protocols (CDP/LLDP) and actual SGT propagation mechanisms; the trap here is assuming that any Cisco proprietary protocol can carry SGTs, when in fact only SXP, inline tagging, and VXLAN GBP are valid.

509
MCQmedium

In a VXLAN EVPN fabric, which component is responsible for encapsulating and decapsulating VXLAN packets?

A.NVE
B.VNI
C.VXLAN gateway
D.VTEP
AnswerD

VTEP is the tunnel endpoint that handles encapsulation.

Why this answer

The VTEP (VXLAN Tunnel Endpoint) is the component responsible for encapsulating Ethernet frames in VXLAN packets and decapsulating them at the destination. It performs the UDP encapsulation with a VXLAN header, using the VNI to identify the Layer 2 segment, and forwards traffic over the underlay network. In an EVPN fabric, the VTEP also participates in the control plane to learn remote MAC and IP addresses via MP-BGP.

Exam trap

Cisco often tests the distinction between the VTEP as the functional endpoint and the NVE as the logical interface, leading candidates to mistakenly select NVE when the question asks for the component responsible for encapsulation.

How to eliminate wrong answers

Option A is wrong because NVE (Network Virtualization Edge) is a logical interface on the VTEP that enables VXLAN encapsulation and decapsulation, but it is not the physical or logical component that performs the encapsulation itself; the VTEP is the overall endpoint. Option B is wrong because VNI (VXLAN Network Identifier) is a 24-bit segment ID used to identify a specific Layer 2 overlay network, not a component that encapsulates or decapsulates packets. Option C is wrong because a VXLAN gateway is a device that bridges VXLAN and non-VXLAN networks (e.g., VLAN-to-VXLAN or VXLAN-to-VXLAN), but the encapsulation and decapsulation function is still performed by the VTEP component within that gateway.

510
Multi-Selecthard

Which TWO statements are true about Cisco ACI contracts? (Choose two)

Select 2 answers
A.Contracts can be reused across multiple EPGs.
B.Contracts are unidirectional from consumer to provider.
C.A contract can include multiple subjects.
D.Subjects within a contract specify only the destination ports.
E.Contracts are always bidirectional.
AnswersA, C

A contract can be applied to many EPG pairs, allowing reuse and simplified policy management.

Why this answer

Cisco ACI contracts are designed as reusable policy constructs. Once a contract is defined, it can be applied to multiple EPGs (Endpoint Groups) without redefining the rules, promoting consistency and reducing administrative overhead. This reusability is a core principle of ACI's policy-based networking model.

Exam trap

A common misconception is that ACI contracts are bidirectional by default. In reality, contracts are unidirectional from provider to consumer by default. To allow traffic in both directions, you must explicitly add a filter that permits the reverse direction.

The exam often tests this distinction.

511
MCQmedium

A UCS C-series rack server is being integrated into UCS Manager using direct connect mode. Which statement about management connectivity is true?

A.The server's management traffic passes through the Fabric Interconnects
B.The server must be configured with IMC Supervisor
C.The server must use CIMC for management and cannot be managed by UCS Manager
D.The server is managed by UCS Manager through a dedicated management uplink
AnswerD

Direct connect mode uses a management interface to UCS Manager.

Why this answer

In direct connect mode, the C-series server is managed through UCS Manager via a dedicated management connection.

512
Multi-Selectmedium

A network administrator is configuring iSCSI multipath I/O (MPIO) for a storage array. Which two conditions are required for MPIO to operate correctly? (Choose two.)

Select 2 answers
A.The storage array must be configured with multiple target portals (IP addresses).
B.The target must present a single IP address for all paths.
C.The initiator must have multiple network interfaces connected to different subnets.
D.The initiator and target must use CHAP authentication.
E.Jumbo frames must be enabled on all switches.
AnswersA, C

Multiple target portals allow connection to different paths.

Why this answer

MPIO requires multiple network paths between the initiator and target. The target must present multiple IP addresses (one per path) and the initiator must have multiple network interfaces.

513
MCQhard

A network engineer is designing a spine-leaf fabric with oversubscription ratio of 3:1. Each leaf switch uses 40 Gbps uplinks to the spine and has 48 x 10 Gbps server ports. How many spine links are needed per leaf to achieve the target oversubscription?

A.3
B.4
C.2
D.5
AnswerB

4 uplinks give 160 Gbps, oversubscription = 480/160 = 3:1.

Why this answer

The oversubscription ratio is the ratio of server-facing bandwidth to spine-facing bandwidth. Each leaf has 48 x 10 Gbps = 480 Gbps of server-facing capacity. To achieve a 3:1 oversubscription ratio, the spine-facing bandwidth must be 480 Gbps / 3 = 160 Gbps.

Since each uplink is 40 Gbps, you need 160 / 40 = 4 spine links per leaf.

Exam trap

Cisco often tests the ability to correctly compute oversubscription by dividing server bandwidth by uplink bandwidth, not the other way around, and candidates may mistakenly multiply or invert the ratio.

How to eliminate wrong answers

Option A (3) is wrong because 3 x 40 Gbps = 120 Gbps, which gives an oversubscription ratio of 480/120 = 4:1, not 3:1. Option C (2) is wrong because 2 x 40 Gbps = 80 Gbps, resulting in a 6:1 oversubscription ratio. Option D (5) is wrong because 5 x 40 Gbps = 200 Gbps, which yields a 2.4:1 oversubscription ratio, under-subscribing the fabric and wasting uplink ports.

514
MCQeasy

An engineer is configuring a new Fibre Channel switch in a Cisco MDS environment. The switch will connect to end devices such as servers and storage arrays. Which two port types will be used on the switch to connect to these end devices?

A.F_port and FL_port
B.NP_port and VF_port
C.E_port and TE_port
D.N_port and NL_port
AnswerA

F_ports connect to N_ports on end devices; FL_ports connect to NL_ports in loop topologies.

Why this answer

On a Fibre Channel switch, F_ports connect to N_ports on hosts and storage. N_ports are on end devices, not on the switch. E_ports are for ISLs between switches.

NP_ports are used in NPV mode.

515
MCQmedium

Refer to the exhibit. An administrator updates template-B but its associated profile SP2 shows 'unassigned'. The administrator wants SP2 to reflect the changes. What should be done first?

A.Disable and re-enable template-B
B.Wait for the automatic association to occur
C.Associate SP2 with template-B using the 'bind' operation
D.Rebind all profiles to template-B
AnswerC

Binding creates the link between profile and template.

Why this answer

In Cisco UCS Manager, a service profile (SP2) must be explicitly bound to a template (template-B) to inherit updates. The 'bind' operation associates the profile with the template, allowing changes made to the template to propagate to the profile. Simply disabling and re-enabling the template or waiting for automatic association does not establish this binding; the profile remains 'unassigned' until it is bound.

Exam trap

Cisco often tests the distinction between 'updating templates' and 'initial templates', where candidates mistakenly assume that simply enabling or refreshing a template will automatically update associated profiles, overlooking the explicit bind requirement.

How to eliminate wrong answers

Option A is wrong because disabling and re-enabling a template does not change the association state of a service profile; it only toggles the template's operational status without affecting the binding. Option B is wrong because Cisco UCS Manager does not automatically associate a service profile with a template; the administrator must manually perform a bind operation to link the profile to the template. Option D is wrong because rebinding all profiles to template-B is unnecessary and could disrupt other profiles; only SP2 needs to be bound to template-B to reflect the changes.

516
MCQhard

Refer to the exhibit. An engineer notices that traffic is not load-balanced across all four links. What is the most likely cause?

A.The minimum links set to 2 prevents load balancing.
B.LACP is not supported on Fibre Channel.
C.The load-balancing algorithm is based on source-dest-id, which may not evenly distribute traffic.
D.The port channel is in admin down state.
E.The links are not in the same VSAN.
AnswerC

Source-dest-id can lead to polarization if many flows share the same pair; other algorithms like source-dest-ox-id provide better distribution.

Why this answer

The load-balancing algorithm for Fibre Channel port channels uses source-dest-id (SID and DID) by default. If the traffic flows are between a small number of source-destination pairs, the hash results will map most flows to the same link, preventing even distribution across all four links. This is a common cause of perceived load imbalance even when all links are operational.

Exam trap

Cisco often tests the misconception that load imbalance is always due to a configuration error or link failure, when in fact the default hash algorithm's behavior with limited source-destination pairs is the root cause.

How to eliminate wrong answers

Option A is wrong because the minimum-links setting (e.g., 2) only prevents the port channel from coming up if fewer than that number of links are active; it does not affect load balancing once the channel is up. Option B is wrong because LACP (IEEE 802.3ad) is not used on Fibre Channel; Fibre Channel port channels use the Fibre Channel standard (FC-BB-5/6) or Cisco's proprietary PAgP for FCoE, but LACP is irrelevant here. Option D is wrong because if the port channel were in admin down state, no traffic would pass at all, not just uneven load balancing.

Option E is wrong because all links in a Fibre Channel port channel must be in the same VSAN; if they were not, the port channel would not form or would have errors, but the exhibit shows the channel is up.

517
MCQhard

A data center architect needs to enforce role-based access control for UCS Manager. What is the correct approach?

A.Create user roles with specific privileges in UCS Manager
B.Enable CoPP for management access
C.Use TACACS+ to assign roles
D.Use RADIUS for authentication only
AnswerA

UCS Manager native RBAC allows granular control.

Why this answer

UCS Manager provides RBAC by allowing administrators to create custom roles with specific privileges and assign them to users.

518
MCQhard

A data center administrator is configuring a Cisco UCS C-series rack server in standalone mode using CIMC. Which interface must be used to mount an ISO image for OS installation over the network?

A.Cisco IMC Supervisor
B.UCS Manager GUI
C.UCS Central
D.CIMC web interface (KVM or Virtual Media)
AnswerD

CIMC provides KVM and virtual media for remote ISO mounting.

Why this answer

CIMC provides virtual media capabilities, allowing remote mounting of ISO images via KVM or virtual media session.

519
MCQmedium

An engineer is configuring VXLAN bridging and routing on a Cisco Nexus 9000 switch. Which configuration is required to enable inter-VNI routing?

A.Configure a VLAN interface under the bridge domain.
B.Enable ip routing under VRF.
C.Configure anycast gateway MAC.
D.Configure a VRF and associate the VLAN interface to it.
AnswerC

Provides a common gateway MAC across all leaf switches, enabling seamless routing between VNIs.

Why this answer

Inter-VNI routing requires a shared anycast gateway MAC address across all VTEPs in the same VXLAN fabric. This allows the switch to respond to ARP requests for the gateway IP and forward traffic between different VNIs without relying on a traditional routed interface. The anycast gateway MAC is configured under the VLAN interface (SVI) using the 'fabric forwarding anycast-gateway-mac' command.

Exam trap

Cisco often tests the misconception that simply enabling IP routing or associating an SVI to a VRF is sufficient for inter-VNI routing, when in fact the anycast gateway MAC is the mandatory configuration that enables the distributed gateway functionality.

How to eliminate wrong answers

Option A is wrong because configuring a VLAN interface under the bridge domain is part of VXLAN bridging, not routing; inter-VNI routing requires an SVI with anycast gateway, not just a VLAN interface in the bridge domain. Option B is wrong because enabling 'ip routing' under VRF is a prerequisite for any L3 forwarding but does not specifically enable inter-VNI routing; the critical missing piece is the anycast gateway MAC. Option D is wrong because associating a VLAN interface to a VRF is necessary for VRF-based routing but alone does not enable inter-VNI routing; the anycast gateway MAC must be configured on the SVI to allow the switch to act as a distributed gateway.

520
Multi-Selecthard

In an ACI fabric, which THREE components are required to define a policy that allows communication between two EPGs?

Select 3 answers
A.Contract
B.Consumer EPG
C.L3Out
D.Tenant
E.Provider EPG
AnswersA, B, E

Contract defines the allowed communication.

Why this answer

A contract is required because it defines the rules (filters, subjects, and actions) that govern traffic between EPGs. Without a contract, no communication is allowed between EPGs, even within the same tenant. The consumer EPG initiates the communication and the provider EPG hosts the service, so both are mandatory endpoints of the contract relationship.

Exam trap

Cisco often tests the misconception that a tenant or L3Out is part of the inter-EPG policy definition, but the trap here is that only the contract, consumer EPG, and provider EPG are the three mandatory components to enable communication between two EPGs.

521
MCQmedium

An engineer is configuring intelligent zoning and wants to use device aliases to simplify zone membership. What is a characteristic of device aliases compared to zone aliases?

A.Device aliases require a specific DNS entry.
B.Device aliases are restricted to a single VSAN.
C.Device aliases are automatically assigned to the default zone.
D.Device aliases can be used in multiple zones across different VSANs.
AnswerD

Device aliases are global and can be reused across VSANs.

Why this answer

Device aliases are globally unique across all VSANs in a Cisco MDS fabric, allowing the same alias to be used in multiple zones and across different VSANs without conflict. This simplifies zone configuration because a single device alias can represent an N-port (e.g., a host HBA) and be referenced in zone memberships for different VSANs, reducing administrative overhead. In contrast, zone aliases are local to a single VSAN and cannot be shared across VSANs.

Exam trap

Cisco often tests the distinction between device aliases (global, VSAN-independent) and zone aliases (local, VSAN-specific), and the trap here is that candidates confuse the scope of these two alias types, assuming device aliases are also VSAN-restricted.

How to eliminate wrong answers

Option A is wrong because device aliases do not require any DNS entry; they are locally defined in the Cisco MDS switch configuration using the 'device-alias' command and are distributed via CFS (Cisco Fabric Services). Option B is wrong because device aliases are not restricted to a single VSAN; they are global to the entire switch fabric and can be used across multiple VSANs, unlike zone aliases which are VSAN-specific. Option C is wrong because device aliases are not automatically assigned to any zone; they must be explicitly added to a zone using the 'member device-alias' command, and the default zone behavior is independent of device aliases.

522
Multi-Selectmedium

A network engineer is configuring FCoE on a Cisco Nexus switch. Which two DCB features must be enabled to support lossless Ethernet for FCoE traffic? (Choose two.)

Select 2 answers
A.PFC (Priority Flow Control)
B.IGMP snooping
C.STP (Spanning Tree Protocol)
D.ETS (Enhanced Transmission Selection)
E.LACP (Link Aggregation Control Protocol)
AnswersA, D

PFC ensures no-loss for FCoE traffic.

Why this answer

PFC (Priority Flow Control) provides per-priority pause to prevent frame loss, and ETS (Enhanced Transmission Selection) allocates bandwidth among traffic classes.

523
MCQmedium

A UCS B-Series chassis has four IOM modules installed. The chassis is connected to two Fabric Interconnects. How many uplink connections are typically used from each IOM to the Fabric Interconnects to ensure full bandwidth redundancy?

A.One uplink from the chassis to each FI
B.Four uplinks per IOM to a single FI
C.One uplink per IOM to each FI
D.Two uplinks per IOM to each FI
AnswerD

Each IOM has four ports, typically two are connected to FI-A and two to FI-B, ensuring full bandwidth and redundancy.

Why this answer

Each IOM has four uplink ports (two per fabric). To achieve full bandwidth and redundancy, typically all four uplinks are used (two to FI-A and two to FI-B).

524
MCQeasy

An engineer notices that the CPU utilization on a Cisco Nexus 5548UP switch is consistently above 80%. The switch is used for FCoE storage traffic. Which action is most likely to reduce CPU utilization?

A.Configure DCBx will-say mode
B.Enable FCoE NPV mode
C.Disable FIP snooping
D.Reduce the number of FCoE VLANs
AnswerD

Fewer VLANs means less FIP snooping processing, reducing CPU load.

Why this answer

High CPU utilization on a Cisco Nexus switch handling FCoE storage traffic is often caused by excessive FCoE Initialization Protocol (FIP) keepalive processing. Reducing the number of FCoE VLANs directly decreases the number of FIP sessions and associated control-plane overhead, lowering CPU load. This is the most effective action because each FCoE VLAN requires separate FIP keepalive handling, and consolidating storage traffic into fewer VLANs reduces the control-plane burden.

Exam trap

Cisco often tests the misconception that disabling FIP snooping or changing DCBx modes will reduce CPU load, but the actual root cause is the number of FCoE VLANs generating excessive FIP keepalive processing.

How to eliminate wrong answers

Option A is wrong because configuring DCBx will-say mode (willing to accept configuration from a peer) does not reduce CPU utilization; it only affects DCB parameter negotiation and may increase control-plane processing. Option B is wrong because enabling FCoE NPV mode offloads FCoE login processing to the upstream FCF, but it does not reduce the number of FCoE VLANs or FIP keepalive messages on the local switch; it may even add overhead for NPV-specific operations. Option C is wrong because disabling FIP snooping would break FCoE functionality by preventing the switch from learning FCoE MAC addresses and enforcing VLAN membership, leading to traffic loss, not CPU reduction.

525
MCQeasy

A storage administrator reports that a new host cannot log into the SAN. The host is connected to a Cisco MDS switch. The switch interface shows up/up but the host is not in the active zone. What is the most likely cause?

A.The zone set is not activated.
B.The switch port is in an isolated state.
C.The FC cable is faulty.
D.The host's WWPN is not in the zone configuration.
E.The host's driver is not installed.
AnswerA

If the zone set is not activated, even if the WWPN is in the zone, it won't be effective. The host is not in the active zone because the active zone set may not include the zone.

Why this answer

The host cannot log into the SAN despite the interface showing up/up because the zone set is not activated. In Cisco MDS Fibre Channel SANs, zone configurations are stored in the zone database but only take effect when the zone set is activated (using the 'zone activate' command). Without an active zone set, no zoning is enforced, and the host's WWPN is effectively invisible to other devices, preventing login even though the physical link is operational.

Exam trap

Cisco often tests the distinction between configuring a zone (adding WWPNs) and activating the zone set; candidates mistakenly assume that simply adding a WWPN to a zone is sufficient, overlooking the mandatory activation step that enforces the zoning policy.

How to eliminate wrong answers

Option B is wrong because an isolated state occurs in PortChannel configurations when ports are incompatible (e.g., speed or mode mismatch), not due to zoning issues, and the interface shows up/up, ruling out isolation. Option C is wrong because a faulty FC cable would cause the interface to be down/down or flap, not up/up. Option D is wrong because the host's WWPN not being in the zone configuration would still allow the host to log into the fabric (FLOGI) and appear in the active zone database; the issue is that no zone set is active, so even if the WWPN were configured, it would not be enforced.

Option E is wrong because the host's driver not being installed would prevent the host from initiating a fabric login (FLOGI), but the switch interface shows up/up, indicating physical and link-level connectivity is present.

Page 6

Page 7 of 14

Page 8

Practice 350-601 by domain

Target a specific domain to shore up weak areas.

See all domains with question counts →