Courseiva

350-601 · domain

troubleshooting

Practise Cisco DCCOR / CCNP Data Center Core 350-601 troubleshooting practice questions — original exam-style scenarios with answer choices, explanations, and analysis of common mistakes.

984 questions249 easy443 medium292 hard

Focused practice

Practice troubleshooting questions

Scored sessions drawing only from this domain — pick a length below.

Start 20-question practice test →

What this domain covers

What to know about troubleshooting

troubleshooting questions test whether you can apply the concept in context, not just recognise a definition.

How the topic appears in realistic exam-style scenarios.

Which detail in the question changes the correct answer.

How to eliminate plausible but wrong options.

How to connect the question back to the wider exam objective.

Watch out for

Common troubleshooting exam traps

  • Answering from memory before reading the full scenario.
  • Missing a constraint such as cost, availability, security, scope or command context.
  • Choosing a broad answer when the question asks for the most specific fix.
  • Ignoring why the wrong options are tempting.

Question index

All troubleshooting questions (984)

Click any question to see the full explanation, or start a practice session above.

1

Which THREE components are required to configure a Cisco UCS Direct-attached storage environment using SAS expanders?

Hard
2

A data center network uses Cisco Nexus 9000 switches running NX-OS. The operations team notices that the CPU utilization on the supervisor module spikes intermittently, causing BGP session flaps. Analysis shows that the CPU spikes coincide with traceroute probes from external networks, which generate ICMP TTL exceeded messages that are process-switched. The engineer must implement a solution to protect the control plane without affecting normal ICMP functionality. The goal is to rate-limit ICMP traffic to a maximum of 1000 packets per second with a burst of 200 bytes, while allowing other control plane traffic without restriction. Which configuration should be applied?

Hard
3

A company wants to consolidate multiple physically separate Fibre Channel SANs into one switch infrastructure while keeping each SAN's traffic isolated. Which technology best achieves this?

Easy
4

Match each Cisco data center technology to its primary purpose.

Medium
5

A financial services firm has deployed Cisco UCS C-Series rack servers running VMware vSphere 7.0. They use Cisco Intersight for management. Recently, a critical application server (Server-A) became unresponsive. The Intersight dashboard shows the server's health status as 'Warning' with a firmware compliance alert: the server's Cisco Integrated Management Controller (CIMC) firmware version is 4.0(1a), while the Intersight firmware baseline is 4.2(1c). The server is running ESXi 7.0u2 on a local datastore. The storage is provided by a Cisco MDS switch via Fibre Channel. The server has two 10GbE uplinks to the fabric interconnect. The engineer notices that the vCenter Server cannot communicate with Server-A, and all VMs on that host are isolated. The engineer suspects the issue is related to the firmware mismatch. What is the most appropriate first step to resolve this issue while minimizing downtime?

Medium
6

A large data center uses a Cisco Nexus 9000 switch with FCoE NPV feature. The switch is connected to an MDS 9700 upstream. The network team recently replaced the MDS 9700 with a new one. After the replacement, the FCoE hosts are unable to log in to the storage fabric. The Nexus switch shows that the FCoE NPV uplinks are up but no FLOGIs are being forwarded. The show npv flogi-table on the Nexus is empty. The upstream MDS shows that the uplinks are in VSAN 100, and the zoning is correct. The Nexus switch configuration includes 'feature npv' and 'npv enable' on the relevant interfaces. The FCoE VLAN 100 is mapped to VSAN 100. What is the most likely cause?

Hard
7

Refer to the exhibit. A network engineer notices that the NVE1 interface is up but VXLAN traffic is not being encapsulated. What is the most likely cause?

Easy
8

A network engineer notices that when a host sends a packet to a destination on a different VTEP, the packet is flooded to all VTEPs even though the destination MAC is known. What is the most likely cause?

Hard
9

A Nexus switch is configured with port security. Which violation action will cause the switch to shut down the interface when a security violation occurs?

Medium
10

An engineer uses the APIC REST API to create a new EPG. The API endpoint for creating an EPG under a specific tenant and application profile uses which object class?

Hard
11

A network engineer is configuring OSPF on a pair of Nexus 9000 switches acting as spine switches in a VXLAN fabric. The engineer needs to ensure that the spine switches do not become the DR for any VLAN. Which configuration should be applied?

Easy
12

Which BGP variant is commonly used in spine-leaf fabrics to advertise EVPN routes for VXLAN?

Easy
13

In a VXLAN EVPN fabric with MP-BGP, which route type is used to advertise MAC addresses and associated VNI?

Hard
14

A UCS administrator must ensure that a service profile can be updated without disrupting production traffic. Which two configuration options support this requirement? (Choose two.)

Medium
15

An engineer needs to extend a Layer 2 VLAN across a VXLAN EVPN fabric. Which construct maps the VLAN to the overlay network?

Medium
16

A UCS administrator needs to update the firmware on a remote rack server that is not reachable via the production network. Which two features of Cisco IMC can be used? (Choose two.)

Medium
17

Which STP variant provides per-VLAN load balancing and is commonly used in data center networks with Cisco Nexus switches?

Easy
18

In a HyperFlex cluster with hybrid nodes (HDD+SSD), which statement best describes the role of the SSD cache?

Hard
19

Which tool provides a programmatic HTTP-based interface to execute CLI commands on Cisco Nexus switches and returns structured JSON data?

Easy
20

A data center network uses Cisco Nexus switches with VXLAN EVPN. Which two components are essential for VXLAN EVPN operation? (Choose two.)

Easy
21

Which Nexus security feature validates ARP packets to prevent ARP spoofing attacks?

Easy
22

An engineer is writing a Python script using the cisco_nxapi library to configure a Nexus switch. Which of the following is a valid step to establish a connection using NX-API?

Medium
23

A network engineer is hardening a Nexus switch. Which two security best practices should be applied? (Choose two.)

Medium
24

Which HyperFlex node type offers the best performance for all-flash workloads and does not include HDDs?

Easy
25

A Nexus switch is being hardened. An engineer wants to protect the control plane from CPU-targeted attacks, such as heavy ICMP traffic. Which feature should be configured?

Hard
26

An engineer is configuring zoning on a Cisco MDS switch. The requirement is to ensure that only the storage array ports with specific WWPNs can access the host initiators. Which zoning approach should be used to enforce this policy regardless of physical port changes?

Medium
27

A network automation engineer is developing a CI/CD pipeline for network configuration changes. Which tool would best serve as a version control system for Infrastructure as Code (IaC) files in a data center network?

Medium
28

In a dual-fabric UCS environment, Fabric Interconnect A and Fabric Interconnect B provide redundancy. If Fabric Interconnect A fails, what happens to the traffic from servers using vNICs assigned to Fabric A?

Easy
29

A network engineer is implementing automated configuration management using Cisco NSO (Network Services Orchestrator). The team wants to ensure that any configuration changes made directly on the devices (out-of-band) are detected and reconciled. Which NSO feature should be used?

Hard
30

An engineer is designing an automation solution for a large data center with multiple Cisco UCS Manager domains. Which approach best ensures idempotent configuration operations?

Hard
31

Which TWO methods are used to secure management plane access on Cisco Nexus 9000 series switches?

Easy
32

Which THREE statements about Cisco Network Services Orchestrator (NSO) are true?

Medium
33

Which Fibre Channel address component identifies the port on a storage target?

Easy
34

An automation engineer is using the cisco_nxapi Python library to configure a Nexus switch. Which step is required before using the library?

Medium
35

Which VLAN trunking protocol is used by default on Cisco Nexus switches to carry multiple VLANs over a single link?

Easy
36

A data center engineer is configuring vPC on a pair of Cisco Nexus switches. The vPC peer-link is established but the vPC member ports remain suspended. After checking the configuration, the engineer notices that the vPC peer-keepalive link is not functioning. What is the most likely cause of the suspended member ports?

Hard
37

In UCS Manager, which feature provides role-based access control for managing the fabric interconnects?

Hard
38

Refer to the exhibit. An Ansible playbook targeting an NX-OS switch fails with this error. What is the most likely cause?

Easy
39

An engineer is deploying FCoE in a data center and must ensure lossless transport for Fibre Channel traffic over Ethernet. The engineer configures Priority Flow Control (PFC) on the DCB-enabled switches. However, FCoE initialization fails. Which additional DCB feature is required to enable FCoE devices to discover and negotiate PFC settings with the switch?

Hard
40

A network engineer wants to automate the deployment of a new VLAN across all Cisco Nexus switches in a data center using Python scripts. Which tool is most appropriate for this task?

Easy
41

During an iSCSI deployment, an administrator configures CHAP authentication between the initiator and target. Which statement about CHAP in iSCSI is correct?

Hard
42

A storage administrator is configuring synchronous replication between two storage arrays over a Fibre Channel link. Which characteristic best describes synchronous replication?

Medium
43

A network engineer is troubleshooting a slow backup performance between a backup server and a tape library connected via FC. The backup server is connected to a Cisco MDS switch at 8 Gbps, and the tape library is connected at 4 Gbps. The backup job is using hardware compression. Which factor is most likely limiting performance?

Easy
44

A large enterprise is deploying a new storage network for a VMware vSphere cluster with 200 VMs. The cluster uses vSphere 7 with vVols and requires a SAN that supports 16 Gbps FC. The storage team wants to use a Cisco MDS 9148S switch and has configured two VSANs: VSAN 100 for production and VSAN 200 for backup. The backup server is connected to VSAN 200. After the deployment, the backup administrator reports that backup jobs from the backup server to the storage array are failing. The storage array is connected to both VSANs via a single FC interface configured in 'auto' mode. The backup server is connected to an F-port in VSAN 200. The storage array's interface shows 'trunking' enabled and is in 'up' state. What is the most likely cause of the backup failure?

Medium
45

Which TWO statements correctly describe the use of Cisco UCS Manager service profiles for server deployment?

Medium
46

During iSCSI configuration, the storage administrator requires authentication between initiator and target. Which method uses a bidirectional secret to verify both ends?

Medium
47

A data center spine-leaf architecture is designed to ensure low latency and high bandwidth. Which of the following best describes the role of the leaf switches in this topology?

Medium
48

An engineer is configuring iSCSI CHAP authentication between an initiator and a target. The initiator has a CHAP username and secret configured. What must be configured on the target?

Medium
49

A NetApp storage array is configured for synchronous replication between two data centers. The round-trip latency is 2 ms. Which RAID type provides the best balance of capacity efficiency and protection for the primary storage volumes that are replicated?

Medium
50

Which type of UCS service profile allows an administrator to define a configuration that can be used as a starting point for multiple servers, with each server potentially having unique settings?

Medium
51

Which TWO are benefits of using a spine-leaf architecture? (Choose two.)

Medium
52

A Cisco Intersight managed UCS domain has a policy that requires all firmware updates to be applied within 30 days of release. An engineer needs to check compliance for a specific server. Which Intersight feature should be used?

Easy
53

A financial services company operates a multi-site data center with Cisco ACI. The automation team uses Ansible Tower to manage configurations. They have a playbook that configures EPGs using the 'aci_epg' module. The playbook runs successfully for most sites but fails on one site with the error 'Object 'uni/tn-Tenant1/ap-AP1/epg-EPG1' doesn't exist'. The engineer checks the ACI fabric and confirms that the tenant, application profile, and EPG exist on that site. The playbook uses the same credentials and variables across all sites. What is the most likely cause of the failure?

Hard
54

Which THREE of the following are required to configure Fibre Channel PortChannels on Cisco MDS switches?

Hard
55

Which feature on Nexus switches provides a Linux shell environment to run Python scripts and tools directly on the switch?

Easy
56

A storage array is configured with RAID 10 across 8 disks. How many disks can fail without data loss, assuming optimal configuration?

Easy
57

In an ACI fabric, an automation engineer needs to create a new tenant with an application profile and EPG using the APIC REST API. The engineer decides to use the Cobra SDK for Python. Which statement about the Cobra SDK is true?

Hard
58

In a spine-leaf architecture with 40 leaf switches and 4 spine switches, each leaf has four 40G uplinks to the spines. What is the oversubscription ratio if each leaf has 48 ports of 10G for servers?

Medium
59

Which THREE of the following are required to configure FCoE NPV on a Cisco Nexus switch?

Easy
60

A data center team is automating network changes and wants to ensure that only validated configurations are deployed to production. Which CI/CD practice specifically addresses this?

Hard
61

In a UCS service profile, which configuration allows a blade server to boot from a SAN LUN without local storage?

Medium
62

Which TWO commands are used to verify zoning configuration on a Cisco MDS switch? (Choose two.)

Easy
63

A network administrator implements the ACL shown. After verifying the ACL statistics, all counters show 0 matches. What is the most likely cause?

Medium
64

What is the purpose of the vPC peer keepalive link in a vPC domain?

Medium
65

An organization uses UCS Central to manage multiple UCS domains. They need to create a global VLAN policy that applies to all domains. How is this achieved?

Medium
66

A storage administrator notices that a Fiber Channel link between a server and a Cisco MDS switch is flapping every few minutes. The server's HBA and the switch port are both configured for 16 Gbps. Which action is most likely to resolve the issue?

Medium
67

Which TWO options are correct regarding Cisco UCS server profiles? (Select TWO.)

Medium
68

An engineer is configuring FCoE on a Cisco UCS Fabric Interconnect. The network requires lossless Ethernet to support FCoE traffic. Which Data Center Bridging (DCB) feature must be enabled first to ensure no frames are dropped due to congestion?

Hard
69

A Python script using NX-API returns HTTP 401. What is the most likely cause?

Medium
70

Refer to the exhibit. An engineer configured a VXLAN tunnel endpoint (VTEP) but the VXLAN tunnel is not operational. The underlay OSPF adjacency is established. What is the missing configuration?

Medium
71

A data center team is troubleshooting an automation script that uses REST API to configure a Cisco Nexus 9000 switch. The script fails with a '401 Unauthorized' error. What is the most likely cause?

Medium
72

An engineer is designing a HyperFlex cluster with strict fault tolerance requirements. Which three considerations should be taken into account? (Choose three.)

Hard
73

Which two methods can be used to boot a UCS C-Series rack server in a UCS Manager managed environment? (Choose two.)

Medium
74

An engineer configures an ISL between two MDS switches using E_ports. To utilize all available bandwidth, the engineer wants to bundle four physical links into a single logical link. Which technology should be used?

Medium
75

In ACI, which object defines the logical separation of traffic within a tenant, analogous to a VLAN in traditional networking, and is associated with a VRF?

Easy
76

Which THREE of the following are required for a successful FCoE deployment on a Cisco MDS switch?

Medium
77

A storage engineer is planning a disaster recovery solution that requires zero data loss in the event of a site failure. The storage arrays support both synchronous and asynchronous replication. Which replication type should be chosen to meet the requirement?

Hard
78

In a VXLAN EVPN fabric, BUM traffic can be handled by ingress replication or multicast. Which statement about ingress replication is accurate?

Hard
79

When configuring BGP EVPN on spine switches functioning as route reflectors, which two address families must be configured? (Choose two.)

Hard
80

After adding a new spine switch to a VXLAN EVPN fabric with OSPF underlay, some leaf switches experience routing instability. Which action could resolve the instability?

Hard
81

Which RAID level provides striping with parity and can tolerate a single disk failure while offering higher storage efficiency than RAID 1?

Easy
82

An organization is deploying UCS C-series rack servers in standalone mode. Which two management capabilities are available through Cisco IMC? (Choose two.)

Medium
83

Refer to the exhibit. Which VLANs are allowed on the VPC peer-link?

Medium
84

An engineer is implementing VXLAN with a centralized routing gateway. Which TWO statements are correct about BUM traffic handling?

Medium
85

Which TWO statements about NPV configuration on a Cisco MDS switch are true? (Choose two.)

Easy
86

Refer to the exhibit. A VXLAN VNI (10030) is operationally down. What is the most likely cause?

Medium
87

Which NX-OS command is used to display the current OSPF neighbor states?

Easy
88

Which feature allows a single Fibre Channel port to log in with multiple N-port IDs, enabling a host to connect to multiple targets through one port?

Easy
89

A storage team is implementing zoning in a Fibre Channel fabric. They want a method where zone members are identified by their World Wide Port Name (WWPN) and the fabric enforces access based on that, without relying on switch port information. Which type is this?

Hard
90

A network team is troubleshooting a vPC issue where one of the member ports is not coming up. Which TWO conditions can cause a vPC member port to fail consistency checks? (Select two.)

Hard
91

A UCS domain is configured with two fabric interconnects in end-host mode. The engineer needs to ensure that traffic from a specific VLAN is load-balanced across both uplinks to the upstream network. Which THREE of the following are valid methods to achieve load balancing on the uplink ports?

Hard
92

An engineer is designing a UCS environment for a virtualized workload that requires high availability. Two Fabric Interconnects are deployed in an active-active configuration. Which statement about the role of the Fabric Interconnects is accurate?

Medium
93

A storage network engineer is planning an FC SAN upgrade. Which two benefits does Fibre Channel PortChannel provide over a single ISL? (Choose two.)

Medium
94

An engineer is configuring a new Cisco MDS 9148 switch to connect to an existing Fibre Channel fabric. The switch will be used at the edge of the SAN and must not participate in fabric services. Which port mode should be used for the ports connecting to the core switches?

Easy
95

Which Fibre Channel address component identifies a specific port on a node?

Easy
96

Match each Cisco data center security feature to its purpose.

Medium
97

A small business SAN consists of a single Cisco MDS 9148S switch with 16 Gb Fibre Channel ports. The storage array has four active paths to the switch, and four servers each have two HBAs. The administrator wants to ensure that all paths are utilized and that no single point of failure exists. Currently, all devices are in a single VSAN and zoning is permissive (default deny). After powering on all devices, the administrator notices that the storage array only logs in on two of its four ports. The other two ports show 'no light'. The switch has not been configured with any port settings. What is the most likely cause?

Easy
98

In an ACI fabric, a tenant is configured with multiple bridge domains (BDs) and EPGs. Which three statements correctly describe the ACI model? (Choose three.)

Hard
99

Which NX-OS command displays the VPC status, including peer-link and consistency parameters?

Medium
100

A data center architect is designing a spine-leaf network with 40 leaf switches and 8 spine switches. Each leaf has 40x25G downlinks to servers and 8x100G uplinks to spines. The oversubscription ratio from server to spine is calculated as (total downlink bandwidth) / (total uplink bandwidth). What is the oversubscription ratio for each leaf?

Hard
101

An ACI administrator is configuring external connectivity using L3Out. Which THREE components must be defined for a successful L3Out deployment? (Select three.)

Medium
102

In a Cisco UCS environment, which component provides the Fibre Channel connectivity to the SAN switches when using FCoE?

Hard
103

A network engineer is designing an NPV environment with Cisco MDS switches. The edge switch is configured in NPV mode. Which port type does the edge switch present to the core switch when connecting upstream?

Hard
104

A network engineer needs to create a consistent QoS policy for all servers in a UCS service profile template. Which policy must be attached to the template to ensure uniform traffic management?

Easy
105

In a HyperFlex cluster with replication factor 2 (RF2), what is the minimum number of nodes required to sustain a single node failure?

Medium
106

In a VXLAN EVPN fabric, a new server is connected to a leaf switch and requires Layer 2 connectivity to an existing VM on a different leaf. The engineer notes that the VTEP on the new leaf does not have a Type-2 route for the VM's MAC address. Which EVPN route type is used to advertise MAC addresses?

Hard
107

In ACI, a tenant requires that all traffic between two EPGs is denied except for specific HTTP traffic. Which policy elements must be configured?

Hard
108

An engineer is deploying an ACI fabric with VMM integration for VMware vSphere. Which THREE components must be configured to enable dynamic EPG assignment based on VM attributes? (Choose three.)

Hard
109

An engineer is writing a Python script to interact with a Nexus 9000 switch using the NX-API REST interface. Which Python library is designed for this purpose?

Medium
110

A network engineer wants to use Ansible to automate the configuration of Nexus switches. Which two statements about the cisco.nxos Ansible collection are correct? (Choose two.)

Medium
111

What is the purpose of NPIV (N_Port ID Virtualization) in a Fibre Channel SAN?

Easy
112

A team is configuring FCoE on a Cisco Nexus switch. Which TWO steps are mandatory to establish a lossless FCoE link?

Medium
113

Which TWO conditions require the use of NPIV in a Fibre Channel SAN? (Choose two.)

Medium
114

A storage administrator reports that an FC initiator cannot log in to the SAN. The FC switch shows the following on the interface connected to the initiator: 'VSAN 100, State: Offline'. Which action should be taken to resolve the issue?

Medium
115

Which THREE components are required to implement Fibre Channel over Ethernet (FCoE) in a data center?

Hard
116

An FCoE link between a Nexus switch and a storage array fails to come up. The switch is configured as an FCF. The administrator runs 'show interface ethernet 1/1' and sees the interface is up/up. Which command will most likely reveal the root cause?

Hard
117

A UCS C-series server is deployed in standalone mode and managed via CIMC. The administrator needs to mount an ISO image for OS installation. Which CIMC feature should be used to remotely attach the ISO?

Medium
118

A Cisco MDS switch has the above configuration on two 16 Gbps FC interfaces. An engineer connects an initiator to fc1/2 and a target to fc1/1. The initiator cannot discover the target. What is the most likely cause?

Hard
119

What is the primary purpose of NX-API on Cisco Nexus switches in a data center automation context?

Easy
120

A network team is planning to automate configuration management of a brownfield Nexus 9000 fabric using YANG data models and NETCONF. Which consideration is critical when implementing this solution?

Hard
121

A HyperFlex cluster with 6 nodes using RF3 experiences a node failure. After the failed node is replaced, the administrator notices degraded performance. Which THREE factors could contribute to the performance degradation?

Hard
122

A storage administrator is implementing synchronous replication between two storage arrays over a Fibre Channel link. Which three characteristics are true of synchronous replication? (Choose three.)

Hard
123

An organization is deploying Cisco ISE for 802.1X authentication on Cisco Nexus switches. Some endpoints fail authentication and fall back to the MAB. The security policy requires that endpoints failing both 802.1X and MAB be placed in a restricted VLAN. Which configuration is needed on the switch port?

Medium
124

An attacker attempts to spoof a legitimate client's IP address to intercept traffic. DHCP snooping is enabled. Which feature prevents this spoofing by validating source IP in data packets?

Hard
125

Which of the following best describes stateless computing in Cisco UCS?

Easy
126

An engineer is implementing storage virtualization with thin provisioning on a Pure Storage array. Which three benefits does thin provisioning provide? (Choose three.)

Hard
127

An engineer is deploying a new application in an ACI fabric. Which two objects must be created to define a network policy? (Choose two.)

Easy
128

Which TWO of the following are valid methods to recover from buffer credit loss on a Fibre Channel link?

Hard
129

A storage administrator is configuring zoning on a Cisco MDS switch. They need to ensure that only the specified WWPNs can communicate, even if a device is moved to a different physical port. Which zoning method should be used?

Medium
130

A UCS B-series blade has two vHBAs configured for Fibre Channel SAN connectivity. The engineer wants to ensure that if one vHBA fails, the other can take over. What must be configured in the service profile?

Medium
131

A UCS C-Series rack server with a boot from SAN policy fails to discover the LUN during POST. The HBA is correctly zoned with the storage array. Which step should be taken to troubleshoot the issue?

Medium
132

In VXLAN, what is the role of the VNI in the overlay network?

Medium
133

A data center engineer is troubleshooting intermittent connectivity between two servers in different VLANs. The servers are connected to different leaf switches in a VXLAN EVPN fabric. When checking the fabric, the engineer notices that the NVE interface on one leaf is up/up but the VNI for the server VLAN is not listed in 'show nve vni'. What is the most likely cause?

Medium
134

An organization requires disk encryption for data at rest in their UCS environment. Which technology should be used?

Medium
135

An engineer is troubleshooting a Cisco UCS B-Series blade that fails to boot. The service profile is associated and the boot policy is set to 'SAN Boot'. The storage administrator confirms the LUN is properly mapped to the WWPN. Which check should the engineer perform first?

Easy
136

During a maintenance window, a network engineer plans to upgrade the NX-OS software on a pair of Nexus 9000 switches configured as vPC peers. The engineer wants to minimize traffic disruption. Which upgrade sequence is recommended?

Hard
137

An engineer is deploying UCS B-series blades in a 5108 chassis connected to a pair of Fabric Interconnects. To ensure high availability, each blade's vNICs must be pinned to both FIs. Which configuration method should be used in the service profile to achieve this?

Medium
138

Which TWO are features of the Embedded Event Manager (EEM) with Python applets on Cisco NX-OS? (Choose two.)

Medium
139

Which TWO UCS components are part of the unified fabric architecture?

Easy
140

Which protocol is used by NETCONF to transport YANG-defined configuration data between a controller and a network device?

Easy
141

Which TWO troubleshooting steps should be taken when a UCS blade server fails to discover during the initial discovery process?

Hard
142

In a VXLAN overlay, which encapsulation is used to transport Ethernet frames over the IP network?

Medium
143

A DevOps team uses Ansible to automate the configuration of Cisco Nexus switches. After running a playbook, some switches have the correct configuration but others do not. The playbook uses the 'nxos_config' module. Which action should be taken to ensure consistent configuration?

Medium
144

An engineer is deploying a VXLAN overlay network in a data center using Cisco Nexus 9000 series switches. The network must handle BUM traffic efficiently across the fabric. Which method for BUM traffic handling requires the VTEP to maintain a list of all remote VTEPs and replicate packets individually?

Medium
145

An engineer is troubleshooting a UCS B-Series blade that fails to boot from SAN. Which TWO actions should be verified first? (Choose TWO.)

Medium
146

A network engineer wants to send NX-OS CLI commands via HTTP/HTTPS to a Nexus switch programmatically. Which API should be used?

Easy
147

An engineer is configuring a new Cisco MDS switch to connect to an existing Fibre Channel fabric. The switch will be deployed in NPV mode to scale the number of edge ports. Which port type should be used on the upstream switch to connect to this NPV switch?

Easy
148

In a Cisco HyperFlex cluster, the management plane uses vCenter, but the data plane uses which protocol to replicate data across nodes?

Hard
149

A UCS domain has two Fabric Interconnects in end-host mode. Which statement about server-side traffic is true?

Easy
150

A storage administrator needs to configure zoning while minimizing administrative overhead and allowing multiple initiators to access multiple targets without having to change zones when new members are added. Which zoning approach is best?

Medium
151

A data center engineer is designing a Fibre Channel SAN for high availability. The design includes two MDS 9710 directors connected to multiple storage arrays. Which best practice should be followed when configuring NPV mode on the switches connecting the hosts?

Medium
152

A data center administrator is designing a HyperFlex cluster for a virtualized environment. The cluster must be able to tolerate the failure of any two nodes. Which two configuration choices are required? (Choose two.)

Medium
153

A network engineer is configuring an ACI contract between an EPG and an external EPG. Which construct is used to permit traffic from the external EPG to the internal EPG?

Hard
154

An engineer is configuring AAA authentication on a Cisco MDS 9000 series switch. The goal is to authenticate users via RADIUS first, then local as a fallback. Which command sequence should be used?

Easy
155

A data center engineer is planning a Cisco UCS deployment for a virtualized environment. The requirement is to maximize performance for virtual machine traffic while minimizing latency. Which feature should be enabled on the UCS Manager to offload packet processing from the host CPU?

Easy
156

A Cisco UCS Manager administrator notices that a newly provisioned service profile is showing 'Config Error' for the vNIC. The vNIC is configured to use a dynamic MAC address from a pool that has no free addresses. What is the correct remediation?

Medium
157

A large enterprise uses Cisco Nexus 9000 switches in a VXLAN EVPN fabric. The underlay is OSPF. Each leaf switch has a loopback0 interface as the source interface for VXLAN tunnel endpoints. After a maintenance window, an engineer modifies the IP address of loopback0 on leaf-5 from 10.1.1.5/32 to 10.1.1.105/32. Subsequently, all VXLAN tunnels to leaf-5 go down. OSPF adjacencies between leaf-5 and the spines are still FULL. The engineer checks the NVE interface on leaf-5 and sees the source-interface is loopback0 but the interface status is up/up. However, pings from other leaves to 10.1.1.105 fail. What is the most likely cause?

Hard
158

Which statement about Fibre Channel buffer credits is true?

Easy
159

In a Fibre Channel SAN, flow control is managed by buffer credits. Which statement about buffer credits is accurate?

Medium
160

An engineer is designing a Fibre Channel fabric with two Cisco MDS switches for redundancy. The switches are connected via two ISLs. The engineer wants to aggregate the ISLs for higher throughput and load balancing. Which feature should be used?

Hard
161

A company is designing a HyperFlex cluster with 4 nodes and wants to tolerate the failure of any two nodes simultaneously while maintaining data availability. Which replication factor and cluster configuration should be used?

Hard
162

A company is deploying a new SAN with two MDS 9148S switches in a single VSAN. They want to ensure that a failure of one switch does not affect storage traffic. Which technology should be implemented?

Hard
163

An engineer is implementing VXLAN in a data center. The network must handle BUM traffic without relying on IP multicast in the underlay. Which BUM handling method should be chosen?

Medium
164

A network engineer is planning to implement VPC in a Cisco Nexus data center. Which two statements about VPC components are true? (Choose two.)

Medium
165

An administrator needs to configure zoning on a Cisco MDS switch. After creating zones and adding members, what must be done to activate the zoning configuration?

Medium
166

A company is deploying FCoE in their data center. The design includes a Cisco Nexus 9000 switch with FEX modules. The storage team insists on using dedicated FCoE VLANs. Which best practice should be followed to ensure lossless behavior for FCoE traffic?

Medium
167

An engineer is designing a SAN for a virtualized environment. Which two best practices should be followed for Fibre Channel zoning?

Medium
168

A network engineer is configuring a UCS service profile for a B-series blade server. The goal is to allow the blade to be replaced without requiring reconfiguration of network identities. Which UCS feature enables this capability?

Easy
169

A Nexus switch is configured with DHCP snooping. Which switchport mode is required for trusted ports to prevent rogue DHCP server attacks?

Medium
170

In a Cisco Application Centric Infrastructure (ACI) fabric, a tenant has two EPGs: Web and App. A contract is created between Web (consumer) and App (provider) with a filter that permits TCP port 8080 (the only port used by the application). However, traffic from App to Web is failing. The application requires bidirectional communication: Web initiates requests to App on TCP 8080, and App responds on the same connection (stateful). The engineer verifies that the filter is correctly applied and that both EPGs are in the same VRF. The contract is applied in the direction Web -> App. What is the most efficient way to resolve this issue without compromising security?

Hard
171

Which technology provides at-rest encryption for disk drives in UCS servers?

Medium
172

Refer to the exhibit. A network engineer notices that the VPC peer status is down, and the peer-keepalive is not reachable. Based on the configuration, what is the likely issue?

Medium
173

An engineer is configuring a storage network with FCoE and must ensure that the FCoE traffic does not interfere with standard LAN traffic. Which two mechanisms should be implemented?

Medium
174

A company plans to deploy multiple UCS domains across different geographical locations. They want a single pane of glass to manage service profiles globally. Which Cisco solution should be used?

Medium
175

Which FC addressing component is used to uniquely identify a host bus adapter (HBA) port in a Fibre Channel fabric, and is often used for zoning?

Medium
176

A CCNP engineer is troubleshooting a UCS environment where a server is stuck in 'Discovery: In Progress' state. The chassis has been power-cycled, but the issue persists. FEX fabric port is configured correctly. What is the most likely cause?

Hard
177

An engineer applies an IPv4 ACL to a Nexus switch interface. The ACL must permit traffic from host 10.1.1.1 to host 10.2.2.2 on TCP port 443 and deny all other traffic. Which configuration is correct?

Medium
178

An engineer is configuring a Cisco MDS switch to connect two SAN islands using a Fibre Channel ISL. The interfaces on both switches are set to auto mode. However, the link does not come up. What is the most likely cause?

Medium
179

A data center architect is designing a Fibre Channel fabric using Cisco MDS switches. To reduce the number of domain IDs and simplify management, the edge switches will operate in NPV mode. However, the core switches must be configured appropriately. Which port type must be used on the core switches to connect to NPV edge switches?

Hard
180

An engineer is configuring a Fibre Channel over Ethernet (FCoE) deployment. The network must ensure lossless transport for FCoE traffic. Which Data Center Bridging (DCB) feature must be enabled to provide no-drop service for FCoE frames?

Easy
181

A network administrator wants to send NX-OS CLI commands to a Nexus switch via HTTP/HTTPS. Which API should be used?

Easy
182

Which of the following is a required characteristic of an FCoE SAN?

Easy
183

Which feature on Nexus switches prevents ARP spoofing attacks by validating ARP packets?

Easy
184

Which TWO statements about VXLAN BGP EVPN control plane are true? (Choose two.)

Medium
185

In ACI, what is the purpose of a contract?

Medium
186

In a Cisco ACI fabric, the administrator notices that traffic between two endpoints in different EPGs but on the same leaf switch is being dropped when a contract is applied. The endpoints are in the same VRF but different bridge domains. What is the likely cause?

Hard
187

Which three components are part of the ACI Management Information Tree (MIT)? (Choose three.)

Hard
188

A UCS administrator wants to deploy a Cisco UCS C-Series rack server in a UCS Manager-managed environment. The server is currently in standalone mode using CIMC. Which step is required to integrate the C-Series server into UCS Manager?

Hard
189

Which Cisco DCNM feature allows centralized management and monitoring of multiple NX-OS fabrics?

Medium
190

An iSCSI storage array is being deployed with two network interfaces for redundancy. The hosts also have two iSCSI initiators. To ensure load balancing and failover, which feature should be configured?

Medium
191

An organization wants to encrypt data at rest in a storage array. Which two technologies can be used? (Choose two.)

Hard
192

A storage network engineer notices high buffer credit starvation counters on an inter-switch link. What is the most effective solution to reduce this issue?

Medium
193

Match each Cisco data center high availability feature to its description.

Medium
194

An administrator is configuring a HyperFlex cluster with 4 nodes. To ensure data availability in the event of two simultaneous node failures, what replication factor should be configured?

Hard
195

An engineer is designing an ACI fabric and needs to provide connectivity to an external Layer 3 network. Which construct must be configured to achieve this?

Hard
196

Which TWO methods are supported by Cisco NX-API for automating Nexus switches? (Choose two.)

Easy
197

A Cisco MDS switch is configured with an ISL trunk between two switches. The administrator wants to enable multiple VSANs over the same physical link. Which two actions must be taken? (Choose two.)

Hard
198

An engineer is configuring BGP EVPN for VXLAN in a spine-leaf fabric. The leaf switches must advertise host IP-to-MAC mappings to the control plane. Which BGP address family should be enabled on the leaf switches?

Hard
199

An engineer is integrating a UCS C-series rack server into UCS Manager. The server is currently managed by CIMC. Which mode must be enabled on the C-series server to allow UCS Manager to discover and manage it?

Medium
200

A network engineer is configuring micro-segmentation in an ACI fabric. Two EPGs, Web and App, must communicate via HTTPS only. Which type of contract should be applied between the EPGs?

Medium
201

Refer to the exhibit. What is the intended effect of this Ansible playbook task?

Easy
202

An administrator needs to limit the number of MAC addresses learned on a Nexus access port to prevent MAC flooding attacks. Which feature should be configured?

Medium
203

A Nexus switch is experiencing high CPU utilization due to control plane traffic. Which feature should be configured to protect the CPU?

Medium
204

An engineer needs to isolate storage traffic for different departments using Fibre Channel switches. Which technology should be used?

Easy
205

An administrator wants to ensure that a specific initiator can only access a single target LUN. Which zoning approach satisfies this requirement?

Easy
206

A network engineer needs to automate the configuration of BGP on a Nexus switch using Ansible. Which Ansible module from the cisco.nxos collection is appropriate for managing BGP configuration?

Medium
207

Refer to the exhibit. A server connected to Ethernet1/1 is experiencing intermittent connectivity. The server sends BPDUs, causing the switch to place the port into a blocking state. Which configuration change should be made to prevent this while maintaining rapid convergence?

Hard
208

A storage architect is designing a disaster recovery solution with a storage array supporting replication. Which three factors should be considered when choosing between synchronous and asynchronous replication? (Choose three.)

Hard
209

Which TWO statements are true about VPC consistency checks? (Choose two.)

Medium
210

Which component provides out-of-band management for Cisco UCS C-Series rack servers, including KVM console access?

Easy
211

A network engineer is implementing QoS on a Nexus 9000 switch. The requirement is to prioritize storage traffic (iSCSI) and ensure lossless behavior. Which queuing strategy should be applied to the egress interface?

Easy
212

Refer to the exhibit. A Python script is processing the response from NX-API. It attempts to extract the interface state using `response['ins_api']['outputs']['output']['body']['ROW_interface']['state']` but receives a KeyError. What is the most likely reason?

Hard
213

A network engineer is implementing port security on a Cisco Nexus 9000 switch to limit the number of MAC addresses learned on a single access port. The switchport is configured as follows: interface Ethernet 1/2 switchport mode access switchport port-security switchport port-security maximum 2 switchport port-security violation shutdown switchport port-security mac-address sticky After connecting two authorized devices, a third unauthorized device is connected, causing the port to enter the err-disabled state. The engineer needs to restore connectivity for the two authorized devices as quickly as possible, while maintaining the security posture. What is the best practice to recover the port automatically in the future?

Easy
214

A Cisco MDS switch is connected to another MDS via a Fibre Channel link. The two switches need to carry traffic for multiple VSANs over a single physical link. Which feature should be configured?

Medium
215

A data center runs OSPF as the underlay for an EVPN-VXLAN fabric. The fabric includes two spine switches and eight leaf switches. After adding a new leaf switch, the network team notices that some EVPN routes are missing from the other leaves. The new leaf has established BGP EVPN sessions to both spines and the BGP sessions are up. The spines report receiving all routes from the new leaf, but the other leaves do not receive certain prefixes. The engineer checks the BGP configuration on the new leaf and sees the address-family l2vpn evpn is configured under router bgp. Which action should the engineer take to resolve the issue?

Easy
216

A company is deploying UCS C-Series rack servers and wants to integrate them into UCS Manager for centralized management. The servers are currently managed individually via CIMC. Which integration mode must be configured on the C-Series servers to allow UCS Manager to discover and manage them?

Hard
217

Which feature in UCS Manager allows centralized management of firmware policies across multiple chassis without creating a separate policy for each chassis?

Easy
218

During a SAN performance analysis, a Fibre Channel link shows a high number of CRC errors. The link operates at 16 Gbps over a 10 km dark fiber. Which corrective action is least likely to resolve the issue?

Hard
219

Which three EVPN route types are essential for VXLAN EVPN operation in a typical data center fabric? (Choose three.)

Medium
220

In a HyperFlex cluster, what is the function of the cluster witness VM when replication factor 3 (RF3) is used?

Hard
221

In an ACI fabric, an automation engineer needs to deploy tenant policies in an idempotent manner. Which approach is most aligned with best practices?

Hard
222

An engineer needs to connect a new server to an existing FC SAN. The server is located 50 km away from the data center. Which technology should be used to extend the FC SAN over this distance?

Easy
223

Which statement accurately describes the APIC REST API?

Easy
224

A company uses Cisco ISE for 802.1X authentication on data center edge switches. After a recent upgrade, some endpoints that previously authenticated successfully now fail. The ISE logs show the endpoint is in the wrong authorization profile. What is the most likely cause?

Hard
225

Which two advantages does thin provisioning provide in a storage array? (Choose two.)

Medium
226

An engineer is configuring a Fibre Channel SAN with a Cisco MDS switch. To ensure high availability and load balancing, the engineer plans to use PortChannels. Which two statements about Fibre Channel PortChannels are true? (Choose two.)

Medium
227

An engineer is configuring MST on a pair of Cisco Nexus switches that will be part of a vPC domain. The vPC peer-link will carry multiple MST instances. Which MST parameter must be identical on both vPC peers to ensure proper operation?

Medium
228

A data center administrator needs to manage multiple UCS domains from a single pane of glass, including the ability to push global service profile policies. Which Cisco management tool should be used?

Hard
229

An MDS switch is configured with VSANs 100 and 200. The engineer wants to isolate traffic between two storage arrays on the same physical fabric. Which best practice should be applied?

Medium
230

Which YANG model is commonly used for vendor-neutral network configuration and operations?

Easy
231

Which two of the following are benefits of using YANG data models for network automation? (Choose two.)

Medium
232

Which authentication protocol is recommended by Cisco for network device administration due to its separation of authentication, authorization, and accounting?

Easy
233

Which YANG-based protocol uses RESTful operations (GET, POST, PUT, DELETE) over HTTP/HTTPS for network configuration?

Easy
234

A UCS administrator needs to deploy 20 identical servers with the same firmware, BIOS, and boot order. Which approach is the most efficient?

Easy
235

Which VLAN range is reserved by default on Cisco Nexus switches?

Easy
236

An engineer is writing a Python script to automate ACI fabric discovery using the APIC SDK. The script needs to wait until the fabric formation is complete before proceeding. Which approach is most reliable?

Hard
237

A UCS C-Series rack server is being integrated into UCS Manager. Which mode allows the server to be managed directly by UCS Manager using a Fabric Interconnect?

Medium
238

Which of the following is a benefit of using Fibre Channel over Ethernet (FCoE) in a data center?

Easy
239

A DevOps engineer is building a CI/CD pipeline for network changes. After a configuration change is pushed to a Nexus switch, which step should be included to verify that the change did not cause any operational issues?

Hard
240

Which NX-OS feature ensures that vPC member ports on both peers are configured identically to prevent inconsistencies that could lead to traffic black-holing?

Medium
241

Which TWO of the following are required components for a Cisco ACI contract to allow communication between EPGs?

Easy
242

A data center uses Cisco ACI with multiple tenants. The security policy requires that all traffic between EPGs must be explicitly allowed via contracts. However, the operations team reports that communication between two EPGs in the same bridge domain is working even though no contract is applied. What is the most likely reason?

Medium
243

In a Cisco UCS Central environment, which feature enables global consistency of boot order and firmware policies across multiple UCS domains?

Hard
244

In a HyperFlex cluster with replication factor 3 (RF3), a node fails completely. The cluster has five nodes. What is the minimum number of nodes that must be operational for the cluster to continue serving data without interruption?

Hard
245

An organization is migrating from traditional SNMP monitoring to model-driven telemetry on their Nexus 9000 switches. They have configured a telemetry destination using gRPC and have defined sensor paths for interface statistics. After several hours, the collector (a Linux server running Telegraf) reports no data received. The engineer verifies that the switch can reach the collector via ICMP. On the switch, 'show telemetry data collector details' indicates the destination is 'connected', but the 'last data sent' timestamp is several hours old. Which action should the engineer take next?

Medium
246

An engineer is deploying Cisco TrustSec in a data center. Which technology uses Security Group Tags (SGTs) to enforce east-west traffic policies without relying on IP addresses?

Medium
247

In a HyperFlex cluster, what is the function of the witness VM?

Easy
248

A Cisco MDS switch is connected to a Fibre Channel storage array and a host. The host cannot see the storage LUNs. The 'show flogi database' command on the MDS shows the host's WWPN, but the 'show fcns database' does not show the storage target. What is the most likely cause?

Easy
249

An engineer is configuring 802.1X for network access control. Which AAA protocol should be used for communication between the authenticator (switch) and the authentication server?

Medium
250

Which encryption technology is used to secure Fibre Channel traffic in flight between storage and switches?

Medium
251

Which TWO of the following are best practices when interconnecting two Cisco MDS 9700 directors via Fibre Channel ISLs?

Medium
252

A UCS C-Series server is initially deployed in standalone mode using CIMC. Later, the server is moved into a UCS domain managed by UCS Manager. What must be done to the CIMC configuration to allow UCS Manager to take control?

Medium
253

Which Fibre Channel addressing component identifies a specific port on a host or storage device uniquely in the fabric?

Easy
254

A network engineer is configuring a Fabric Extender (FEX) to connect to a parent switch. Which best practice should be followed for FEX host interfaces?

Medium
255

An engineer is configuring a UCS server for VMware ESXi. The service profile must support NPIV for virtual machine SAN connectivity. Which two conditions must be met? (Choose two.)

Hard
256

An engineer needs to secure the management plane on a Cisco Nexus 9000 switch. Which feature should be configured to restrict access to the switch's management interface based on source IP?

Easy
257

A Fibre Channel switch port is experiencing high latency due to insufficient buffer credits. What is the most likely cause?

Easy
258

Ansible playbook that deploys VLANs on NX-OS fails on a particular switch with 'privilege escalation required'. What should be checked first?

Medium
259

A server connected to Ethernet1/1 is unable to communicate on VLAN 1. The server is configured to send untagged frames. Based on the exhibit, what is the most likely cause?

Medium
260

A storage engineer is configuring replication between two data centers. The distance is 500 km with a round-trip latency of 10 ms. The application requires zero data loss in the event of a primary site failure. Which replication method should be chosen?

Hard
261

A data center network uses VXLAN EVPN for network virtualization. Which component is responsible for advertising MAC addresses and host routes across the fabric?

Easy
262

Which TWO of the following Fibre Channel port types are used to connect end devices such as hosts or storage?

Easy
263

A Cisco MDS switch has two VSANs (VSAN 10 and VSAN 20). The engineer wants to connect two switches using a single ISL that carries both VSANs. Which configuration is required on the ISL interface?

Medium
264

Refer to the exhibit. An engineer applies this QoS policy to a Cisco Nexus 9000 switch in a data center. After applying the policy, storage traffic (iSCSI) is experiencing high latency and occasional drops. The engineer verifies that the iSCSI traffic is not matching the 'BulkData' class. What is the most likely cause of the issue?

Hard
265

Which TWO of these are best practices for securing the Cisco ACI fabric?

Medium
266

During a security audit, you discover that a Cisco Nexus 9000 switch is allowing traffic between two ports in the same VLAN despite having a VLAN ACL that should deny it. The VACL is applied correctly, and the ACL entries are properly configured. What is the most likely reason for this behavior?

Hard
267

Which TWO security features rely on the DHCP snooping binding table? (Select exactly 2)

Medium
268

Arrange the steps to configure a port-channel (LAG) on a Cisco Nexus switch.

Medium
269

A large enterprise uses Cisco Nexus 5548UP switches in FCoE mode. The storage array is connected via native FC to an MDS 9700. The FCoE switches are connected to the MDS via FC uplinks. Recently, the storage team deployed a new FCoE initiator that requires access to a specific LUN. After configuring the zone and VSAN, the initiator cannot discover the target. The zone includes the pWWN of the target and the FCoE initiator's pWWN (derived from its MAC address). The initiator is in VSAN 100, and the target is in the same VSAN. The MDS show flogi database shows the initiator. The show fcoe database on the Nexus shows the initiator but the session is not active (state: FIP-VN_Port not logged in). The engineer checks the FIP snooping policy and notices that the FCoE VLAN to VSAN mapping is correct. What is the most likely issue?

Hard
270

A network engineer is configuring 802.1Q trunking between a Nexus switch and a server. Which TWO statements are true regarding 802.1Q trunking?

Medium
271

Which command displays the VLANs allowed on a trunk interface?

Easy
272

In a Cisco ACI fabric, which component is responsible for policy enforcement and management of the entire infrastructure?

Easy
273

A data center uses FCoE on Nexus 9000 switches. The storage team reports inconsistent performance during peak times. Queuing drops are seen on the FCoE-enabled interfaces. Which QoS configuration change would best address the issue?

Hard
274

A network automation engineer wants to use EEM with Python applets on a Nexus switch to trigger a script when an interface goes down. Which EEM configuration is required to invoke the Python script?

Medium
275

Which THREE statements about Cisco UCS Manager automation using XML API are correct? (Choose three.)

Hard
276

A data center architect is designing security for a Cisco ACI fabric that must comply with PCI DSS. The requirement is to encrypt all traffic between EPGs within the same tenant. Which solution should be used?

Hard
277

Which Nexus feature dynamically validates ARP packets to prevent man-in-the-middle attacks?

Medium
278

An engineer needs to connect a Cisco MDS switch to a core Fibre Channel fabric using NPV mode. What port type will the edge switch's uplink ports assume in this scenario?

Medium
279

In a HyperFlex cluster configured with replication factor 2 (RF2), a storage node fails. What is the impact on data availability?

Medium
280

An administrator is configuring CHAP authentication for iSCSI. Which two statements about CHAP are correct? (Choose two.)

Medium
281

You are a data center engineer at a financial company. The production environment uses UCS B-Series blades with fabric interconnects in a clustered configuration. One of the blades (blade 3) is running a critical trading application. The server is associated with a service profile that boots from SAN using a single HBA path. During a routine network upgrade, the storage administrator reports that LUN 0 on the primary storage array is no longer accessible from blade 3. The server is still powered on, but the application is unresponsive. You check UCS Manager and see that the vHBA for blade 3 is in an 'Unavailable' state. The fabric interconnect ports show no errors. The storage array logs show that the target port is active. Which action should you take to restore connectivity with minimal downtime?

Medium
282

Which TWO are valid methods to configure a Cisco UCS service profile for stateless computing? (Choose two.)

Hard
283

A network engineer is hardening a Nexus 9000 switch. Which action is most effective in reducing the attack surface?

Medium
284

An engineer notices that a Fibre Channel link between two Cisco MDS 9000 series switches is flapping every few minutes. The interface counters show a high number of CRC errors. What is the most likely cause of this issue?

Easy
285

Refer to the exhibit. The TACACS+ server at 10.1.1.1 is unreachable. What will happen when a user tries to authenticate to the switch using SSH?

Easy
286

In ACI, when integrating with VMware vSphere, which component is used to automatically push port group configurations to virtual switches?

Hard
287

Refer to the exhibit. An engineer is creating a service profile template in Cisco UCSM. What is the effect of setting the vnet to 'VM_Network' for vNIC_A?

Hard
288

A network engineer is designing a Cisco HyperFlex cluster for a virtualized environment. The cluster will run VDI workloads. Which storage policy should be selected to ensure that all VMs have the highest possible performance while maintaining data redundancy?

Easy
289

A company has two data centers connected via a WAN link using an FCIP tunnel between two Cisco MDS 9700 switches. The FCIP link is configured on a GigabitEthernet port with an MTU of 1500 bytes and uses IPSec for encryption. Recently, storage replication traffic has become slow, and the administrator notices high TCP retransmissions on the FCIP interface. The administrator checks the bandwidth utilization and sees it is only 50% of the link capacity. The storage arrays report no errors or performance issues on their local switches. The administrator also verifies that the FCIP profile is configured correctly and that compression is enabled but not causing any errors. What is the most likely cause of the TCP retransmissions?

Hard
290

Which two statements correctly describe VXLAN BUM traffic handling? (Choose two.)

Medium
291

Which three actions can be taken when a port security violation occurs? (Choose three.)

Hard
292

An engineer needs to deploy a new UCS C-Series standalone server in a remote branch without local IT staff. Which technology allows remote firmware upgrade and hardware monitoring without requiring a dedicated management IP?

Medium
293

Which FC port type is used for end-device connection in Fibre Channel fabric, and is typically found on a host bus adapter?

Easy
294

Sequence the steps to configure a Cisco UCS Fabric Interconnect (FI) for the first time.

Medium
295

In a multipath Fibre Channel SAN, which component is responsible for selecting the active path for I/O operations?

Hard
296

An ACI fabric administrator wants to enable microsegmentation for workloads in a Virtual Routing and Forwarding (VRF) instance. The security policy must allow communication between two endpoints based on their EPG (Endpoint Group) membership, regardless of IP address. Which construct must be used?

Hard
297

Which THREE components are required to successfully use NETCONF for configuration automation on a Nexus 9000 switch?

Hard
298

Which of the following is a benefit of using OpenConfig YANG models for network automation?

Easy
299

An organization uses Cisco TrustSec to tag traffic. An endpoint is assigned SGT 5 (Developers) and another SGT 10 (Testers). The SGACL on the leaf switch permits traffic from SGT 5 to SGT 10 for HTTP but denies other. Which action is taken by the leaf switch?

Hard
300

A UCS administrator is configuring a service profile for a VMware ESXi host. Which TWO of the following configuration items must be included to enable Fibre Channel SAN boot?

Easy
301

An organization is deploying a HyperFlex cluster for a database workload requiring low latency and high IOPS. Which node type should be selected?

Hard
302

A data center switch has DHCP snooping enabled globally. Which of the following is a best practice to ensure DHCP server legitimacy?

Easy
303

A data center engineer is configuring VLANs in a Cisco UCS domain. Which TWO statements are true regarding VLAN configuration?

Medium
304

Which feature prevents IP spoofing by ensuring that a client uses only the IP address assigned by DHCP?

Easy
305

A data center uses VPC between two Nexus switches. Which statement is true about the VPC peer-link?

Easy
306

In an FCoE environment, a CNA presents a VN-port to the network. Which protocol is used to establish the virtual link between the VN-port and the FCoE switch's VF-port?

Hard
307

Which TWO commands are used on NX-OS to verify vPC status and consistency? (Choose two.)

Easy
308

An engineer is troubleshooting a SAN that uses FCoE. The FCoE Initialization Protocol (FIP) discovery phase is failing for one server. The server is connected to a Cisco Nexus switch configured for FCoE. Which command should be checked first?

Hard
309

Your company integrates UCS B-Series blades with VMware vSphere using UCS Manager and vCenter. You have configured a UCS service profile with a boot policy that boots from SAN. The virtual infrastructure administrator reports that a new ESXi host (blade 6) fails to meet host profile compliance for the 'Boot Device' policy. The host profile requires the boot LUN to be set to 'VMware LUN' but the UCS boot policy uses a generic 'SAN Target' setting. The ESXi host boots and runs, but compliance checks fail. You cannot modify the host profile because it is managed by a separate team. Which action should you take to resolve the compliance failure while maintaining boot functionality?

Hard
310

In a spine-leaf architecture, what is the primary advantage of having multiple spine switches?

Easy
311

In the context of ACI L3Out, which object is used to advertise external networks into the ACI fabric and is associated with a VRF?

Medium
312

A storage administrator is troubleshooting a connectivity issue between a server and a storage array over Fibre Channel. The server is connected to an NPV edge switch, which uplinks to a core switch. The server's WWPN is registered in the zone, but the server cannot see the target. The administrator notices that the core switch does not see the server's WWPN in its FC name server database. What is the most likely cause?

Hard
313

A network engineer is configuring OSPF on a Nexus switch. To ensure fast convergence in case of a link failure, which OSPF feature should be enabled?

Medium
314

An engineer needs to deploy a stateless UCS B-series blade with a boot from SAN configuration. Which components must be defined in the service profile to achieve this?

Medium
315

Which TWO statements are true regarding VXLAN BUM traffic handling? (Choose two.)

Medium
316

Which TWO of the following are valid methods to configure zoning in a Cisco MDS 9000 series switch?

Easy
317

In a Cisco ACI fabric, a tenant has multiple bridge domains in the same VRF all with 'Unicast Routing' enabled and hardware proxy mode. However, endpoints in different BDs within the same VRF cannot communicate even with a contract. What is a possible reason?

Hard
318

In a Cisco ACI fabric, which component acts as the centralized policy and management controller?

Easy
319

A network administrator needs to automate ACI configuration using a Python library that abstracts the APIC REST API. Which library should be used?

Medium
320

In a VXLAN EVPN fabric, which protocol is used to exchange MAC and IP address reachability information among VTEPs?

Easy
321

An engineer is troubleshooting a VXLAN network where traffic between two VTEPs in the same VNI is not being forwarded. The underlay network is operational and IP connectivity exists between the VTEPs. Which two actions should the engineer take to verify the VXLAN configuration?

Easy
322

Which TWO of the following are valid methods to run Python scripts on a Cisco Nexus switch? (Choose two.)

Medium
323

Which THREE are valid characteristics of using Terraform for ACI automation? (Choose three.)

Hard
324

Which TWO features are commonly used together to prevent IP spoofing on a Nexus switch? (Choose two.)

Medium
325

Which TWO statements about Cisco TrustSec in a data center are true?

Hard
326

A data center engineer configures an ACL on a Nexus 9000 switch to block all traffic from the management network (10.10.0.0/16) to the production servers (192.168.1.0/24) except for SSH access from a specific jump host (10.10.1.100). The ACL is applied inbound on the management interface. Which ACL entry is correctly ordered to achieve this requirement?

Medium
327

An organization is deploying Cisco UCS and needs to ensure that server personality is maintained even after a new server is added to the chassis. Which policy should be configured to achieve this?

Medium
328

In a spine-leaf architecture, the oversubscription ratio between leaf switches and spine switches is 3:1. Each leaf has 48 x 10G server ports and 4 x 40G uplinks to the spine. What is the oversubscription ratio at the leaf level?

Medium
329

A network engineer needs to automate the configuration of BGP on a Nexus 9000 switch using Ansible. The playbook uses the cisco.nxos.nxos_bgp module. Which of the following parameters is required in the module to specify the local AS number?

Hard
330

Which Ansible module from the cisco.nxos collection is used to apply a set of CLI commands on a Nexus switch?

Easy
331

A Cisco UCS C-Series rack server requires remote management with KVM and virtual media. Which feature must be enabled?

Easy
332

A storage engineer is planning an FCoE deployment in a data center. The network must support lossless Ethernet for Fibre Channel traffic. Which three Data Center Bridging (DCB) features are required? (Choose three.)

Medium
333

A Cisco MDS switch is configured as an NPV switch to connect to a core switch. Which statement about NPV operation is true?

Hard
334

An organization is deploying Cisco ACI in a brownfield data center. They have existing VLANs that need to be mapped to ACI EPGs. The network team notices that some VLANs are used across multiple tenants. How should the engineer design the VLAN pool to support overlapping VLANs?

Medium
335

An engineer is deploying iSCSI storage in a data center. Which two features should be configured to improve performance and redundancy? (Choose two.)

Medium
336

A UCS Central administrator is creating a global service profile policy that applies to multiple UCS domains. The policy must include boot order settings. What is the recommended approach to ensure consistency across domains?

Hard
337

In a VXLAN BGP EVPN fabric, which component is responsible for handling BUM traffic using ingress replication, and how does the VTEP learn the list of remote VTEPs to replicate to?

Hard
338

A UCS Manager administrator is deploying a service profile for a boot-from-SAN environment. The SAN switch is configured with NPV mode. The administrator notices that the WWPN of the vHBA in the service profile is not being recognized by the SAN switch. What is the most likely cause?

Hard
339

A data center administrator is deploying a HyperFlex cluster and needs to choose between hybrid (HDD+SSD) and all-flash node configurations. Which two factors should be considered when making this decision? (Choose two.)

Medium
340

Which statement about RSTP (802.1w) is true?

Medium
341

A network engineer needs to retrieve the operational state of interfaces from a Nexus switch using a YANG-based protocol. Which protocol should be used to get structured data via REST?

Medium
342

In a UCS 5108 chassis, which component provides the connectivity between the blade servers and the Fabric Interconnects?

Easy
343

A data center administrator is using UCS Central to manage multiple UCS domains. They need to create a global service profile policy that defines the boot order for all blades across domains. What is the correct approach?

Hard
344

Which Fibre Channel addressing component uniquely identifies a port on a storage array and is used for zoning and target identification?

Easy
345

During a network upgrade, an engineer applies a new OSPF configuration on a Nexus 9000 spine. After the change, several leaf switches lose connectivity to each other. The engineer examines the logs and sees OSPF adjacency flapping. What is the most likely cause?

Medium
346

Which Fibre Channel port type is used to connect two Cisco MDS switches together to form an inter-switch link (ISL)?

Easy
347

An engineer needs to protect the control plane of a Nexus 9000 switch from CPU-targeted attacks. Which feature should be configured?

Medium
348

An engineer notices that a UCS server with a service profile using a QoS policy for FC traffic experiences excessive latency during heavy workloads. The Fibre Channel fabric is configured for lossless operation. Which design issue is most likely causing the latency?

Hard
349

An engineer is troubleshooting a DHCP issue in a data center VLAN. Clients are unable to obtain IP addresses from the DHCP server. The switch has DHCP snooping enabled on the VLAN, and the DHCP server is connected to a trusted port. The clients are on untrusted ports. Which additional security feature is most likely causing the problem if the DHCP server is on a different subnet and the switch is not configured as a DHCP relay?

Hard
350

Refer to the exhibit. The interface fc1/1 is configured as an E_port. The connected switch also has an E_port configured. However, the interface shows an 'init' state. What is the most likely cause?

Easy
351

An engineer needs to trigger a Python script on a Nexus switch when a specific syslog message appears. Which Cisco technology allows event-driven execution of Python applets?

Medium
352

A UCS domain is configured with multiple service profile templates. An engineer wants to ensure that when a template is updated, all associated service profiles are automatically updated. Which property must be enabled in the template?

Medium
353

Refer to the exhibit. A new host is connected to interface fc1/3. It is not appearing in the flogi database. The switch is in NPV mode. What is the most likely reason?

Medium
354

Which Cisco UCS feature allows a failed blade server to be replaced with a new one without any reconfiguration, because all identity and configuration information is abstracted?

Easy
355

An organization is deploying UCS B-series blades in a 5108 chassis connected to Fabric Interconnects A and B. Each blade has two vNICs. How should the vNICs be connected to the fabric to ensure maximum redundancy and bandwidth?

Medium
356

A data center architect is designing an FCoE deployment. The network must support lossless Ethernet for storage traffic. Which set of IEEE standards must be enabled on the Ethernet switches to meet this requirement?

Hard
357

A UCS administrator wants to apply a consistent set of QoS policies across multiple UCS domains. Which tool should be used to centrally manage these policies?

Medium
358

Refer to the exhibit. The interface shows CRC errors. What is the most likely cause of these errors?

Medium
359

On a Cisco MDS 9700, an engineer configures an FC port channel with 4 member interfaces. The connected storage array also supports port channels. Which load-balancing algorithm provides the best distribution of I/O when the array uses multiple LUNs per target?

Hard
360

A customer is deploying Cisco ACI with a requirement to isolate tenant traffic in a multi-tenant environment. They want to ensure that a tenant admin can only manage their own tenant's objects. Which RBAC configuration should be implemented?

Hard
361

Match each Cisco UCS component to its function.

Medium
362

An iSCSI storage array is configured to support multipath I/O (MPIO) for high availability. The administrator needs to configure the initiator to use multiple network paths. What must be ensured for MPIO to work correctly?

Medium
363

A data center is implementing iSCSI with MPIO. Which three components are required for MPIO to function? (Choose three.)

Medium
364

Match each Cisco NX-OS feature to its description.

Medium
365

A Nexus 7000 switch is experiencing high CPU utilization due to control plane traffic. The engineer notices that many packets are being punted to the CPU from the data plane, particularly ARP packets. After examining the CoPP configuration, the engineer sees that the 'arp' class-map is matched in a policy-map with a police rate of 1000 pps and a conform-action of 'transmit'. The current ARP rate is 2000 pps. What is the immediate impact?

Hard
366

A company uses hard zoning based on World Wide Names (WWNs) to control access between servers and storage arrays. An administrator needs to add a new server with WWPN 50:00:00:00:00:00:01:23 to the zone. What is an advantage of hard zoning over soft zoning?

Medium
367

A network engineer is configuring a Cisco UCS service profile for a blade server that must boot from a LUN on a SAN. Which boot policy type should be selected in the service profile?

Medium
368

Refer to the exhibit. A server with WWPN 10:00:00:00:c9:2b:1a:5f is zoned to two storage ports in zone Server1_Storage1 and to one storage port in zone Server1_Storage2. The server can access the LUNs through the first zone but not through the second. What is the most likely cause?

Hard
369

A storage administrator is troubleshooting a Fibre Channel SAN where initiators cannot log in to a target. The administrator verifies that the VSAN is configured correctly and that zoning is in place. Which two additional checks should be performed to resolve the issue?

Medium
370

A Fibre Channel fabric has multiple initiators and targets. The engineer wants to ensure that only specific hosts can access specific storage volumes. Which zoning practice is most secure?

Medium
371

A company is planning to deploy Cisco Intersight to manage a hybrid environment including on-premises UCS domains and AWS EC2 instances. Which THREE of the following are required components for integrating AWS with Intersight?

Medium
372

A server administrator reports that a newly provisioned application server cannot access its LUN on the storage array. The SAN zoning uses WWPNs. The administrator verifies that the server's HBA WWPN is correctly zoned with the storage port's WWPN. Which additional check should the engineer perform to isolate the issue?

Medium
373

A data center uses self-encrypting drives (SEDs) in UCS servers. Which type of protection does SED provide?

Hard
374

What does the oversubscription ratio in a spine-leaf fabric represent?

Medium
375

A network engineer is designing a spine-leaf fabric with oversubscription ratio 3:1. Each leaf switch has 48x10G host-facing ports and 4x40G uplinks to spines. What is the oversubscription ratio per leaf?

Medium
376

A network engineer is troubleshooting inter-VLAN routing on a Cisco Nexus 9000 switch. The switch is configured with VLAN 10 and VLAN 20. Hosts in VLAN 10 cannot ping hosts in VLAN 20. The engineer checks the VLAN ACL (VACL) applied to VLAN 10 and finds the following configuration: ip access-list VACL-FILTER 10 permit ip any any ... vlan access-map VACL-MAP 10 match ip address VACL-FILTER action forward vlan filter VACL-MAP vlan-list 10 What is the most likely reason for the connectivity failure?

Medium
377

During a UCS firmware upgrade, the upgrade fails on a few servers in a chassis. The administrators notice that the management plane is still responsive, but the data plane is disrupted. What is the most likely cause?

Hard
378

Which THREE security features are commonly used on Cisco Nexus switches to prevent DHCP-based attacks? (Choose three.)

Medium
379

In a BGP EVPN deployment, route type 2 (MAC/IP advertisement) is used to advertise MAC addresses. What additional information is carried in route type 2 for IP routing?

Hard
380

An engineer is implementing CI/CD for network changes. Which tool is commonly used for version control of network configuration files and infrastructure code?

Hard
381

A HyperFlex cluster is configured with RF3 and has 6 nodes. If one node fails completely, how many nodes are still required to maintain data availability and cluster quorum?

Hard
382

An engineer wants to prevent unauthorized devices from connecting to access ports. Which port security violation mode will disable the port and generate a syslog message?

Easy
383

A storage array uses thin provisioning. A volume is created with a virtual size of 1 TB but only 100 GB of physical storage is allocated initially. What happens when the host writes data beyond the currently allocated physical space?

Medium
384

Refer to the exhibit. A client connected to Ethernet1/2 cannot obtain an IP address via DHCP. What is the most likely cause?

Medium
385

A Cisco HyperFlex cluster is experiencing performance issues during peak hours. The cluster uses a 4-node all-flash configuration. The engineer notices that the vSphere DRS cluster is heavily imbalanced. Which HyperFlex feature should be used to improve performance by balancing the storage load across nodes?

Hard
386

An engineer configures vPC on a pair of Nexus switches. The vPC peer-keepalive link fails, but the vPC peer-link remains operational. What is the expected behavior?

Medium
387

Which THREE of the following are valid UCS Manager RBAC roles?

Medium
388

An engineer is configuring PXE boot for a UCS B-series blade. The blade's vNIC is associated with a VLAN that has no IP helper address configured. What is required to allow the blade to obtain an IP address from a DHCP server on a different subnet?

Hard
389

In a VXLAN overlay network, what is the primary purpose of ingress replication for BUM traffic?

Medium
390

Which security feature on a Nexus switch prevents a rogue DHCP server from assigning invalid IP addresses to clients?

Easy
391

A data center administrator reports that traffic from a specific UCS server is not flowing through the expected Fabric Interconnect (FI) A. The pin group is configured, but traffic is still sent to FI B. What should the administrator check?

Medium
392

A medium-sized enterprise has a Cisco UCS environment with two Fabric Interconnects (FIs) in a cluster. There are 10 blade servers, each with a VIC 1340 adapter. The SAN consists of two MDS 9148S switches in a VSAN for storage. Each server is configured with two vHBAs (primary and secondary) connecting to the SAN via the FIs. Recently, after a firmware upgrade on the MDS switches, several servers are unable to boot from SAN. The storage administrator confirms that the storage array LUNs are accessible from the MDS switches. The UCS administrator reports that the vHBAs show a 'link down' status on the FI. Which action should be taken to resolve the issue?

Medium
393

A data center network engineer wants to encrypt all traffic between two top-of-rack (ToR) switches that are connected via a direct link. The encryption should be transparent to upper-layer protocols and operate at Layer 2. Which technology should be used?

Easy
394

A Python script uses NX-API's XML output to extract interface status. Which method is most robust and recommended for parsing the XML?

Hard
395

A UCS C-series server is deployed in a standalone environment. The administrator needs to update the server's firmware remotely. Which CIMC feature should be used?

Hard
396

A network engineer is configuring a VPC peer-link on a Nexus switch. Which interface configuration is required for the peer-link port-channel?

Easy
397

Which statement is true about the VLANs carried on a VPC peer-link?

Medium
398

A data center administrator is implementing FCoE on a Cisco UCS fabric. The converged network adapters (CNAs) must communicate with the Fibre Channel storage array via the FCoE forwarder. Which FCoE port type is used on the CNA to connect to the FCoE forwarder?

Hard
399

Which UCS C-Series management mode allows the server to be managed as part of a UCS domain using service profiles, while still retaining the ability to use CIMC for direct out-of-band management?

Medium
400

Which command is used to verify the OSPF neighbor state in NX-OS?

Easy
401

A data center engineer is deploying a new application on Cisco UCS Manager. The application requires consistent low-latency access to storage. The engineer decides to use SAN boot from a Fibre Channel SAN. Which configuration change is necessary on the UCS service profile to enable SAN boot?

Medium
402

Which Fibre Channel address component uniquely identifies a port within a fabric and is assigned during fabric login (FLOGI)?

Easy
403

Which statement describes how firmware management works for UCS B-Series blade servers?

Easy
404

An engineer is configuring FCoE on a Cisco Nexus switch. Which two components are required for FCoE initialization? (Choose two.)

Medium
405

A network administrator is configuring copp (Control Plane Policing) on a Cisco Nexus 9300 to protect the control plane from high-rate traffic. After applying the policy, the switch becomes unresponsive to SSH sessions, but ICMP still works. What is the most likely misconfiguration?

Hard
406

A network engineer wants to automate the configuration of VLANs on a Nexus 9000 switch using REST-based APIs. Which approach should be used to send NX-OS commands via HTTP/HTTPS in JSON format?

Medium
407

Which HyperFlex replication factor ensures that data is stored on at least three nodes, providing higher data protection?

Easy
408

An engineer is troubleshooting connectivity between two Nexus 9000 switches configured with vPC. The vPC peer link is up, but the vPC peer-keepalive link is failing. Which action should be taken to ensure vPC convergence in the event of a peer-link failure?

Medium
409

An engineer is designing a SAN to connect hosts to two storage arrays for redundancy. The hosts are dual-attached to two MDS switches. Each storage array has two controllers, each with a single FC port. The engineer wants to avoid a single point of failure and ensure that each host can reach both storage controllers. Which design should be used?

Hard
410

An engineer is tuning performance for a storage network. Which two practices improve FC SAN performance?

Medium
411

In VXLAN overlay networks, which mechanism is used to forward broadcast, unknown unicast, and multicast (BUM) traffic when multicast is not enabled in the underlay?

Medium
412

A data center administrator needs to deploy a new blade server in a Cisco UCS chassis. The server must automatically inherit the correct service profile based on its slot location. Which feature should be configured?

Easy
413

A large enterprise is using Cisco UCS Manager to manage a chassis with 8 B-Series blades. The environment uses a combination of Ethernet and Fibre Channel traffic. The UCS fabric interconnect (FI) is configured in end-host mode with two uplinks to the core network. Recently, the engineering team deployed a new service profile for a high-performance computing workload that requires 40Gbps Ethernet per vNIC and 16Gbps Fibre Channel per vHBA. The server has two vNICs and two vHBAs. After deployment, the server's OS shows only 10Gbps connectivity on each vNIC. The engineer checks UCS Manager and sees that the vNIC templates are set to '10 Gbps' and the vHBA templates are set to '16 Gbps' but the actual link speed for vNICs is only 10Gbps. The fabric interconnect ports are configured as 40Gbps uplinks. The engineer has verified that the server adapter supports 40Gbps. What is the most likely cause of the speed mismatch?

Hard
414

Which TWO characteristics are true about Cisco VPC? (Choose two)

Easy
415

An organization uses synchronous replication between two storage arrays for disaster recovery. Which three characteristics apply to synchronous replication? (Choose three.)

Hard
416

A HyperFlex cluster uses RF2 and consists of 5 nodes. One node fails. Data is re-replicated to the remaining nodes. After re-replication, what is the largest number of additional node failures that can occur without data loss?

Hard
417

An engineer is deploying a UCS B-Series blade server and needs to configure connectivity to the SAN. Which component is responsible for the physical connection between the blade and the Fabric Interconnect?

Medium
418

A network engineer is troubleshooting CoPP drops on a Cisco Nexus 9000 switch. The 'show control-plane' output indicates that packets are being dropped due to 'CoPP' on the 'default' control-plane class. Which action is most likely to resolve the issue without affecting routing protocol stability?

Hard
419

A network engineer is planning a VXLAN EVPN fabric. Which two statements about VXLAN Network Identifiers (VNIs) are correct? (Choose two.)

Medium
420

An engineer is designing an NPV deployment to scale the number of hosts connected to a Fibre Channel fabric. In NPV mode, which port type is used on the NPV switch to connect to the core switch?

Hard
421

A new storage administrator is configuring LUN masking on a Cisco MDS switch. The storage array presents two LUNs to the fabric with the same LUN ID (0) but to different target ports. The administrator wants to ensure that a specific host can access both LUNs. The host is connected to a single HBA port. The host will see both target ports in the same zone. After zoning, the host discovers both target ports but only sees the first LUN. The show flogi database shows the host's pWWN with two FC IDs assigned. What is the most likely issue?

Easy
422

A storage administrator is configuring Fibre Channel zoning on a Cisco MDS switch to restrict access between initiators and targets. Which two statements about hard zoning vs. soft zoning are true? (Choose two.)

Medium
423

Which VXLAN EVPN route type is used for discovering VTEPs and building the BUM forwarding tree?

Hard
424

Refer to the exhibit. An administrator connects a new server to Ethernet1/1 and the port immediately goes into errdisable state. The previous device was connected to that port. What is the most likely cause?

Medium
425

Which TWO benefits does NPIV (N_Port ID Virtualization) provide in a Fibre Channel SAN? (Choose two.)

Medium
426

Which two statements about the Cisco NX-API REST interface are true? (Choose two.)

Medium
427

A developer wants to run a Python script directly on a Nexus switch to automate local operations. Which feature allows executing a Python script in a Linux environment on the switch?

Medium
428

In a VXLAN environment, what is the function of a VTEP?

Easy
429

A Cisco MDS switch is configured with a VSAN and the administrator needs to assign a Fibre Channel port to this VSAN. Which command should be used in interface configuration mode to assign the port to VSAN 10?

Medium
430

Which feature allows a Fibre Channel switch to use multiple links between two switches as a single logical link?

Easy
431

Refer to the exhibit. What is the most likely cause of the NVE interface being down?

Hard
432

An engineer is configuring OSPF on a Nexus 9000 switch in a data center spine-leaf topology. Which OSPF network type is most appropriate on the point-to-point links between leaf and spine switches to ensure fast convergence?

Medium
433

A Cisco ACI fabric administrator wants to implement microsegmentation using Cisco Group-Based Policy (GBP) in a network that hosts virtual machines and bare-metal servers. Which component must be used to enforce microsegmentation policies for bare-metal servers?

Medium
434

A storage administrator is configuring iSCSI security. Which two methods can be used to authenticate iSCSI initiators to a target? (Choose two.)

Medium
435

Refer to the exhibit. A Python script using the Cisco ACI Cobra SDK fails with 'AuthenticationError'. Which of the following is the most likely cause?

Hard
436

A Python script using the pyATS framework to parse 'show interface' output on a Nexus 9000 switch fails with a parsing error, even though the CLI command runs successfully. What is the most likely missing component?

Medium
437

An administrator wants to use the APIC REST API to create a new Tenant in ACI. Which object in the Management Information Tree (MIT) should be the target of the POST request?

Medium
438

A network engineer wants to automate the deployment of VLANs across 50 Nexus switches in a data center. Which approach provides the most consistent and repeatable results with minimal manual effort?

Easy
439

Refer to the exhibit. A UCS administrator applies a service profile with this boot policy to a blade. The blade boots from the SAN LUN successfully. However, after a reboot due to a firmware update, the blade boots from the local disk instead of the SAN. What is the most likely reason?

Medium
440

Which TWO statements about Fibre Channel zoning are correct? (Choose two.)

Medium
441

In a centralized anycast gateway VXLAN EVPN design, which is a requirement?

Medium
442

A UCS B-series blade is configured to boot from SAN using a vHBA that connects to a Fibre Channel SAN. The storage administrator reports that the LUN is not being presented to the blade. Which component in the UCS domain is responsible for mapping the vHBA WWPN to the physical Fibre Channel interface?

Medium
443

A UCS administrator needs to replace a failed blade server in a chassis with a new blade. The new blade must automatically receive the same configuration as the failed one. Which feature enables this?

Medium
444

Which VXLAN component is responsible for encapsulating and decapsulating Ethernet frames into UDP packets?

Easy
445

Refer to the exhibit. An automation script queries the Cisco Nexus 9000 using the NX-API JSON format and receives the above output. The script is designed to validate that interface Eth1/1 is in access mode with VLAN 100. However, the script reports a failure. What is the most likely reason?

Hard
446

An engineer is troubleshooting high CPU utilization on a Nexus 7700 switch. The output of 'show process cpu' shows high usage from the 'netstack' process. Which action should the engineer take to identify the cause?

Medium
447

A data center engineer is designing a UCS Manager solution that requires VLAN segmentation across multiple fabric interconnects. The network team requires that each VLAN is assigned a unique native VLAN ID per fabric. Which pool configuration supports this requirement?

Hard
448

An administrator is troubleshooting a performance issue in an FC SAN. The initiator and target are in the same VSAN. The link is 16 Gbps but throughput is only 4 Gbps. The engineer checks the BB_Credit utilization and sees a high count of BB_Credit zero. What is the most likely cause?

Medium
449

Refer to the exhibit. A UCS administrator has configured vNIC templates as shown. Both Fabric Interconnects have identical uplink configurations. The vNIC templates have 'Failover: Enabled'. However, when Fabric Interconnect A fails, servers using vNIC-A do not fail over to Fabric Interconnect B. What is the most likely cause?

Medium
450

Which AAA protocol is recommended by Cisco for network device administration, as it separates authentication, authorization, and accounting?

Easy
451

A data center uses a Cisco MDS 9710 director with multiple line cards. The storage network includes several host servers connected to the director via 16 Gbps FC connections. Recently, the engineering team deployed a new storage array that supports 32 Gbps FC. To take advantage of the higher speed, they upgraded the host HBAs to 32 Gbps. However, after the upgrade, some hosts are experiencing intermittent connection drops. The team notices that when a host disconnects, it takes approximately 30 seconds to reconnect. The link lights on the host and switch ports are green. The switch logs show 'VSAN 100: Port fc1/1 is down (link failure)' messages. No other errors are reported. The MDS line cards support 32 Gbps, and the ports are configured with the 'speed 32000' command. What is the most likely cause of the intermittent drops?

Medium
452

An administrator is configuring zoning on a Cisco MDS switch to ensure that two servers can only communicate with their assigned storage arrays. Which three statements about Fibre Channel zoning are correct? (Choose three.)

Easy
453

What is the primary purpose of Cisco UCS service profiles?

Easy
454

An engineer is troubleshooting a SAN performance issue. The show interface counters command shows high output discard counts on a particular Fibre Channel interface. What is the most likely cause?

Medium
455

A company is deploying a new storage array with dual controllers. Each controller has two 16 Gbps Fibre Channel ports. The engineer wants to connect each controller to two separate MDS switches for redundancy. What is the recommended port type configuration on the MDS switches for the storage-facing ports?

Easy
456

A data center engineer is designing a storage network for a virtualized environment with 100 hosts and 50 storage arrays. Each host requires 4 Gbps of bandwidth to storage, and each storage array provides 8 Gbps. All devices use 16 Gbps FC links. What is the minimum number of 16 Gbps FC links required to support the total bandwidth demand without oversubscription?

Hard
457

Which TWO statements about Cisco NX-API are correct? (Choose two.)

Medium
458

An engineer is designing a VXLAN EVPN fabric with multicast-based BUM replication. Which two components are required to support this? (Choose two.)

Medium
459

Which THREE of the following are best practices for Fibre Channel zoning on Cisco MDS switches?

Hard
460

A DevOps team wants to apply Infrastructure as Code principles to manage their data center network. Which tool is best suited for declaratively managing ACI configurations using Terraform?

Medium
461

A data center administrator is troubleshooting slow storage performance on a UCS B-Series blade server. The server is connected to a Cisco UCS 6300 Series Fabric Interconnect and uses local SAS drives. The administrator checks the UCS Manager and sees that the storage adapter has a driver version that is not recommended. What is the most likely impact of using a non-recommended driver version?

Medium
462

An engineer is configuring a UCS service profile for a blade server that will boot from local disk. However, the engineer wants to ensure that if the local disk fails, the server will attempt to boot from the SAN. Which boot policy setting should be used?

Medium
463

An engineer is writing an Ansible playbook to configure BGP on a Nexus 9000 switch. Which module from the cisco.nxos collection should be used to manage BGP configuration?

Hard
464

Which two features are provided by Cisco IMC on UCS C-series rack servers? (Choose two.)

Easy
465

A data center architect is designing a spine-leaf network with 40 leaf switches and 4 spine switches. Each leaf has 48 x 25G server-facing ports and 8 x 100G uplinks to the spines. What is the oversubscription ratio from server to spine?

Medium
466

Which protocol is recommended for streaming model-driven telemetry from NX-OS to a collector?

Easy
467

A large financial institution operates a dual-fabric Fibre Channel SAN with two separate MDS 9710 directors. Each fabric has multiple storage arrays and hundreds of hosts. The SAN is configured with VSANs to isolate different environments (production, development, backup). Recently, the backup VSAN has been experiencing slow performance during backup windows. Analysis shows that the ISLs between the directors in the backup VSAN are heavily utilized (near 100%) while other ISLs have spare capacity. The backup traffic consists of large sequential reads and writes. The SAN administrator has confirmed that there are no CRC errors or link issues. The backup VSAN uses a single 16 Gbps ISL. Which of the following is the best solution to improve backup performance?

Hard
468

An enterprise requires that all virtual machines using a specific service profile must have the same MAC address pool. Which policy should be configured on the service profile template?

Easy
469

Which of the following is a requirement for VPC peer keepalive to function correctly?

Hard
470

Which THREE conditions can cause Fibre Channel buffer credit starvation? (Choose three.)

Hard
471

An engineer is configuring micro-segmentation in an ACI fabric. Which object defines the whitelist model for communication between EPGs?

Easy
472

A storage administrator wants to isolate two Fibre Channel fabrics on the same physical switch infrastructure. Which technology should be used to achieve this isolation similar to VLANs in Ethernet?

Medium
473

Refer to the exhibit. A UCS manager profile is configured with two vNICs on separate fabrics. The server is failing to communicate with the default gateway on VLAN 100. Both vNICs are up. What is the most likely issue?

Hard
474

In a VXLAN overlay, what is the role of the VXLAN Network Identifier (VNI)?

Medium
475

An engineer is configuring a UCS service profile for a blade server that will be used for a critical application. The application requires high availability for both network and storage connectivity. Which three policies should be configured in the service profile to meet these requirements? (Choose three.)

Hard
476

An administrator is configuring a Cisco MDS switch for FCoE. Which two DCB features must be enabled to support FCoE traffic? (Choose two.)

Medium
477

Which type of zoning uses the World Wide Port Name (WWPN) to define zone members, providing better security because WWPNs are globally unique?

Easy
478

A Cisco MDS switch is being configured for FCoE. Which three DCB components are required for lossless Ethernet operation? (Choose three.)

Medium
479

During a SAN migration, an engineer connects new storage to an existing MDS switch. The new storage array is configured with WWPNs that were previously used by decommissioned servers. After zoning is updated, some servers fail to see the correct LUNs. What is the most likely cause?

Hard
480

In a Cisco ACI fabric, a tenant has multiple bridge domains with different subnets. The administrator wants to allow traffic between two EPGs in the same tenant but different bridge domains. Which ACI construct is required to enable communication?

Medium
481

An engineer wants to automate the creation of VLANs on a Nexus 9000 switch using Python scripts. Which on-box solution allows running Python scripts directly on the switch without an external server?

Easy
482

In a UCS domain, fabric interconnects are deployed in an end-host mode. What is a characteristic of this mode?

Medium
483

A network engineer is troubleshooting a VXLAN EVPN problem where some endpoints are not reachable. The output of 'show bgp l2vpn evpn' shows Type-3 routes but no Type-2 routes for a specific VNI. What should the engineer check?

Medium
484

An engineer is configuring FCoE on a Cisco MDS switch and needs to ensure that the switch can communicate with FCoE-enabled servers. Which FCoE port type should be used on the switch to connect to a server's CNA?

Hard
485

In a spine-leaf architecture using eBGP, which of the following is the recommended BGP configuration for the spine switches?

Easy
486

A data center uses FCoE to consolidate storage and LAN traffic. Which IEEE standard ensures that FCoE frames are not dropped due to congestion by providing lossless Ethernet?

Medium
487

A UCS administrator needs to implement boot-from-SAN for a B-series blade. Which two components must be properly configured in the service profile? (Choose two.)

Medium
488

A NETCONF session to an NX-OS switch fails with 'Connection refused'. What is the most likely cause?

Easy
489

An organization uses VXLAN EVPN for network segmentation. Which component provides per-tenant isolation of control plane traffic?

Medium
490

Refer to the exhibit. The blade server is unassociated. Which action is required to assign a service profile to this server?

Easy
491

Which FCoE port type is analogous to an N-port in traditional Fibre Channel and connects to a VF-port on an FCoE switch?

Medium
492

An engineer is troubleshooting a UCS B-Series server that fails to boot from SAN. The SAN boot LUN is correctly zoned and presented. The service profile has WWPNs configured. What is a likely cause?

Medium
493

A storage administrator configures a new Cisco MDS switch and enables NPV mode. However, the upstream switch shows the NPV switch as an end device instead of a switch. What is the most likely reason?

Medium
494

An engineer wants to automate VLAN configuration on a Cisco Nexus 9000 switch using a Python script running in the guest shell. Which library should the engineer use to send NX-OS commands via the NX-API?

Easy
495

An organization uses UCS Central to manage multiple UCS domains. A global service profile policy is created in UCS Central to enforce a common boot policy across all domains. However, one UCS domain needs a different boot order for a specific set of blades. How should the administrator implement this deviation while maintaining centralized manageability?

Hard
496

A storage network using Cisco MDS 9700 switches has two VSANs (100 and 200). The engineer wants to share a physical ISL between both VSANs while maintaining traffic isolation. Which feature should be used?

Hard
497

A Cisco MDS switch is configured for NPV mode. An upstream NPIV-enabled switch is connected. The administrator notices that the NPV switch is not logging in to the NPIV switch. The NPV switch shows the following: 'show npv status' indicates NPV is enabled but no traffic. Which three conditions could cause this issue?

Hard
498

Which Fibre Channel port type is used to connect a host bus adapter (HBA) to a Fibre Channel switch in a point-to-point topology?

Easy
499

A Cisco MDS switch is being configured to support multiple isolated Fibre Channel fabrics over a single physical infrastructure. Which feature should be used to achieve this isolation?

Medium
500

Which two are benefits of using Cisco UCS Central for multi-domain management? (Choose two.)

Medium
501

A team is using Cisco DCNM for fabric management. They need to integrate with an external CI/CD pipeline. Which API should they use to trigger a network configuration change?

Medium
502

Match each Cisco UCS Manager CLI command to its function.

Medium
503

An engineer needs to automate configuration backups on NX-OS switches using Python. Which Python library is specifically designed for this purpose?

Easy
504

A large enterprise runs a Cisco HyperFlex cluster with three nodes, managed through Intersight. After a planned maintenance window, the administrator notices that one of the nodes is in a 'Degraded' state and the cluster is running in 'Read-Only' mode. The administrator checks the Intersight dashboard and sees that the node's disk status shows 'Missing' for one of the SSDs. The administrator also notices that the node's IP address is reachable and the ESXi host is still operational. The administrator reviews the cluster health and sees no other alerts. What is the most likely root cause and the recommended action to restore full cluster health?

Hard
505

A storage administrator has deployed a Fibre Channel fabric with two MDS switches. Each host has a single HBA. Which port type is used to connect the HBA to the switch?

Easy
506

Which three components are required to boot a UCS blade server from SAN? (Choose three.)

Easy
507

In ACI, the management information tree (MIT) organizes managed objects hierarchically. Which object is the parent of an Application Profile (AP)?

Medium
508

Which THREE methods can be used to propagate Cisco TrustSec Security Group Tags (SGTs) across a network? (Choose three.)

Medium
509

In a VXLAN EVPN fabric, which component is responsible for encapsulating and decapsulating VXLAN packets?

Medium
510

Which TWO statements are true about Cisco ACI contracts? (Choose two)

Hard
511

A UCS C-series rack server is being integrated into UCS Manager using direct connect mode. Which statement about management connectivity is true?

Medium
512

A network administrator is configuring iSCSI multipath I/O (MPIO) for a storage array. Which two conditions are required for MPIO to operate correctly? (Choose two.)

Medium
513

A network engineer is designing a spine-leaf fabric with oversubscription ratio of 3:1. Each leaf switch uses 40 Gbps uplinks to the spine and has 48 x 10 Gbps server ports. How many spine links are needed per leaf to achieve the target oversubscription?

Hard
514

An engineer is configuring a new Fibre Channel switch in a Cisco MDS environment. The switch will connect to end devices such as servers and storage arrays. Which two port types will be used on the switch to connect to these end devices?

Easy
515

Refer to the exhibit. An administrator updates template-B but its associated profile SP2 shows 'unassigned'. The administrator wants SP2 to reflect the changes. What should be done first?

Medium
516

Refer to the exhibit. An engineer notices that traffic is not load-balanced across all four links. What is the most likely cause?

Hard
517

A data center architect needs to enforce role-based access control for UCS Manager. What is the correct approach?

Hard
518

A data center administrator is configuring a Cisco UCS C-series rack server in standalone mode using CIMC. Which interface must be used to mount an ISO image for OS installation over the network?

Hard
519

An engineer is configuring VXLAN bridging and routing on a Cisco Nexus 9000 switch. Which configuration is required to enable inter-VNI routing?

Medium
520

In an ACI fabric, which THREE components are required to define a policy that allows communication between two EPGs?

Hard
521

An engineer is configuring intelligent zoning and wants to use device aliases to simplify zone membership. What is a characteristic of device aliases compared to zone aliases?

Medium
522

A network engineer is configuring FCoE on a Cisco Nexus switch. Which two DCB features must be enabled to support lossless Ethernet for FCoE traffic? (Choose two.)

Medium
523

A UCS B-Series chassis has four IOM modules installed. The chassis is connected to two Fabric Interconnects. How many uplink connections are typically used from each IOM to the Fabric Interconnects to ensure full bandwidth redundancy?

Medium
524

An engineer notices that the CPU utilization on a Cisco Nexus 5548UP switch is consistently above 80%. The switch is used for FCoE storage traffic. Which action is most likely to reduce CPU utilization?

Easy
525

A storage administrator reports that a new host cannot log into the SAN. The host is connected to a Cisco MDS switch. The switch interface shows up/up but the host is not in the active zone. What is the most likely cause?

Easy
526

Which THREE of the following are valid methods to secure the control plane on a Cisco Nexus 9000 switch?

Hard
527

An engineer needs to design a resilient Fibre Channel SAN that eliminates single points of failure between two MDS switches and a storage array with two controllers. What is the minimum number of FC port channels required to achieve this goal?

Easy
528

An engineer needs to implement port security on a Cisco Nexus 1000v virtual switch to prevent MAC flooding attacks. The requirement is to allow only the first MAC address learned on the port. Which command sequence accomplishes this?

Easy
529

An administrator needs to perform a remote firmware upgrade on a UCS C220 rack server. The server has CIMC configured with an IP address. Which method should the administrator use to upgrade the CIMC firmware?

Medium
530

When using Cisco NSO (Network Services Orchestrator) to automate service creation across a data center network, what is a key consideration regarding device compatibility?

Medium
531

Which protocol is used by NETCONF for transport?

Easy
532

An administrator wants to create separate FC fabrics on a single Cisco MDS switch for isolation of production and backup traffic. Which technology should they use?

Medium
533

A company is consolidating its storage network into a single fabric using a Cisco MDS 9509. They want to use VSANs to isolate different departments. The VSANs will be 10, 20, and 30. They have a single ISL between two MDS switches. The engineers want to carry all three VSANs over the ISL. They configure both ends of the ISL as E ports and enable trunking. After configuration, they notice that only VSAN 10 traffic passes over the ISL. The other VSANs appear isolated. The show vsan membership shows all three VSANs are present on both switches. The show interface trunk on the ISL shows that the trunk is up but only VSAN 10 is allowed. What is the most likely cause?

Medium
534

An engineer is configuring a UCS service profile for a blade server that will use FCoE to connect to a Fibre Channel SAN. What must be configured in the service profile to support FCoE traffic?

Medium
535

A Cisco MDS switch is configured with two VSANs. Hosts in VSAN 1 cannot communicate with hosts in VSAN 2. What is the most likely reason?

Medium
536

A storage administrator needs to isolate Fibre Channel traffic between two departments in a data center using a single MDS switch. The administrator decides to create separate VSANs. Which statement about VSANs is true?

Medium
537

An engineer is designing a SAN for a virtualized environment with 20 hosts and 4 storage arrays. Each host requires a separate zone per storage array for security. What is the minimum number of zones required?

Hard
538

Refer to the exhibit. An engineer is troubleshooting poor FCoE performance. The exhibit shows output from the FCoE interface. Which observation indicates a potential issue?

Hard
539

In an FCoE deployment, a storage administrator needs to ensure that FCoE traffic is carried over a dedicated VLAN. Which configuration is required on a Cisco Nexus switch?

Medium
540

A storage administrator is troubleshooting FCoE performance issues between a Cisco UCS FI and a storage array. The fabric is configured with FIP snooping and DCB. The administrator checks the FCoE interface counters and sees many dropped frames due to 'no buffer space'. What is the most likely root cause?

Hard
541

Which three components are part of the ACI Management Information Tree (MIT)? (Choose three.)

Hard
542

For consistent multi-data-center automation, which tool is best suited to orchestrate both NX-OS and ACI across sites?

Medium
543

An engineer is configuring FCoE on a Cisco Nexus 5000 switch. The switch connects to a Fibre Channel storage array. The FCoE Initialization Protocol (FIP) snooping must be enabled. What is the effect of enabling FIP snooping?

Hard
544

Which command is used on a Cisco Nexus switch to display the VXLAN network identifier (VNI) associated with a specific VLAN?

Medium
545

An administrator needs to replace a faulty blade server in a UCS chassis. The blade is associated with a service profile that has a persistent WWPN pool. What is the correct procedure to maintain stateless computing?

Hard
546

Which three components are required for a basic Cisco UCS B-Series deployment? (Choose three.)

Medium
547

Which TWO security features are used to prevent MAC address flooding attacks on a Cisco Nexus switch? (Choose two.)

Medium
548

Which three features are used on Nexus switches to mitigate Layer 2 attacks? (Choose three.)

Easy
549

An engineer notices that after a reboot of one UCS fabric interconnect (FI-A), the server traffic fails over to FI-B but never fails back to FI-A even after FI-A is fully operational. Which configuration change would ensure automatic failback?

Medium
550

A network engineer is configuring DHCP snooping on a Cisco Nexus 9000 switch to prevent rogue DHCP server attacks. The switch connects to the legitimate DHCP server on Ethernet 1/1. Clients are connected to ports Ethernet 1/2 through 1/24. The engineer enables DHCP snooping globally and on VLAN 10, but clients are unable to obtain IP addresses from the DHCP server. Other connectivity between clients and the server works (e.g., static IPs). What is the most likely cause and solution?

Easy
551

A company is deploying a new storage network using Cisco MDS 9700 switches. They have multiple host servers and storage arrays. The security policy requires that each host can only access its own LUNs. The solution must be efficient and not require reconfiguration when new hosts are added. Which approach best meets these requirements?

Medium
552

A data center team is implementing configuration automation for a fleet of Nexus 9000 switches. They need a solution that supports idempotent configuration, works well with version control, and does not require an agent on the switches. Which two tools should they consider?

Medium
553

Which protocol is used to carry VXLAN encapsulation and facilitates the exchange of MAC reachability information between VTEPs in a VXLAN EVPN fabric?

Easy
554

An iSCSI SAN is experiencing performance issues. The storage array and initiators are connected via a dedicated VLAN. The network team notices high jitter. What is the most effective mitigation?

Hard
555

An engineer receives an error 'XML namespace mismatch' when using NETCONF to configure a Nexus switch. The YANG model used is from the Cisco NX-OS openconfig model. What is the most likely cause?

Hard
556

Which two statements about the NX-API REST interface on Nexus switches are true? (Choose two.)

Easy
557

A UCS administrator is creating a boot policy for a service profile that will be used for B-series blades. The requirement is to boot from a LUN on a SAN-attached storage array. Which boot order should be configured in the service profile boot policy?

Medium
558

An organization deploys compute resources using both UCS B-Series blades and C-Series rack servers. The network uses Cisco ACI. Which approach ensures consistent connectivity policies across both compute types?

Hard
559

A storage administrator connects a host to an MDS switch via Fibre Channel. The host has an HBA with WWPN 21:00:00:1b:32:12:34:56. Which port type does the MDS switch automatically configure on the interface connecting to the host?

Easy
560

Which best practice should be followed when creating a UCS service profile template for stateless computing?

Easy
561

In a Cisco ACI fabric, a new EPG is created and associated with a bridge domain that has 'Unicast Routing' enabled. However, endpoints in that EPG cannot communicate with endpoints in other EPGs in the same VRF. What is missing?

Medium
562

Refer to the exhibit. The server in slot 2 is associated and working. A new server is inserted into slot 1, but after 30 minutes it remains in 'Unassigned' state. What is the most likely reason?

Medium
563

In ACI automation, the APIC REST API interacts with the Management Information Tree (MIT). Which of the following represents a typical hierarchical object path in the MIT?

Medium
564

A UCS service profile includes a vHBA that is bound to a WWPN. The blade server fails and is replaced with a new blade of the same model. What happens to the WWPN configuration after the replacement?

Medium
565

What is the purpose of FIP (FCoE Initialization Protocol) in an FCoE network?

Medium
566

Which THREE are correct about using Ansible with Cisco NX-OS? (Choose three.)

Medium
567

Refer to the exhibit. What is the current state of the VPC domain?

Easy
568

Refer to the exhibit. The configuration is intended to provide Layer 2 isolation within VLAN 100 while allowing the promiscuous port (Ethernet 1/1) to communicate with all ports in the community VLAN. However, hosts in VLAN 100 cannot communicate with each other. What is the most likely misconfiguration?

Hard
569

Match each Cisco ACI component to its role.

Medium
570

In an FCoE environment, which protocol is responsible for discovering and initializing FCoE-capable endpoints, including the exchange of MAC addresses and establishing virtual links?

Hard
571

Which feature on a Nexus switch uses DHCP snooping binding information to filter IP traffic on a per-port basis?

Medium
572

Arrange the steps to create a service profile template in Cisco UCS Manager.

Medium
573

During a UCS service profile configuration, an engineer needs to specify that the server should boot from a SAN LUN. Which boot policy type should be configured?

Hard
574

In a Cisco NX-OS environment, which command is used to verify the operational state of a virtual Port Channel (vPC) peer link?

Easy
575

Which THREE are benefits of using Cisco UCS Manager to manage compute resources? (Choose three.)

Medium
576

An engineer is configuring OSPF on a Cisco Nexus switch in a data center. The network consists of multiple point-to-point links. To improve convergence, the engineer wants to reduce the dead interval to 10 seconds. Which command sets the dead interval correctly?

Medium
577

In a Cisco ACI fabric, which object represents a collection of endpoints that share the same forwarding behavior and security policies?

Medium
578

An engineer is configuring iSCSI multipath I/O (MPIO) for a storage array. The initiator has two NICs connected to two different switches, and the target has two iSCSI ports on different subnets. Which condition must be met for MPIO to function correctly?

Easy
579

An organization is deploying a new leaf-spine fabric with Cisco ACI. The requirement is to allow inter-tenant communication between two EPGs in different tenants. Which configuration object is necessary to enable this communication?

Medium
580

An organization is deploying a new Fibre Channel SAN with Cisco MDS switches. The design requires high availability and load sharing over multiple ISLs. Which three features should be implemented? (Choose three.)

Hard
581

Order the steps to upgrade the software on a Cisco Nexus switch using ISSU.

Medium
582

A data center uses HyperFlex HX Data Platform with a 3-node cluster configured with replication factor 2 (RF2). One node fails permanently. What is the impact on data availability and cluster operation?

Hard
583

A network administrator is planning a UCS C-Series rack server deployment. Which two statements correctly describe the integration modes with UCS Manager? (Choose two.)

Medium
584

An organization has deployed a Cisco UCS B-Series blade server with a Fabric Interconnect pair. The administrator is tasked with deploying a new server for a critical application. The administrator creates a service profile from an existing template that includes vNIC, vHBA, and storage policies. The blade is located in chassis 2, slot 1. The administrator attempts to associate the profile with this blade but fails with the error: 'No suitable compute resource available.' The administrator verifies that the blade's firmware is updated, that the blade is not already associated with another profile, and that it has sufficient memory and CPU. What is the most likely cause?

Easy
585

An engineer is configuring a Cisco MDS switch to connect to a core switch in NPV mode. The edge switch will be connected to the core via an ISL. What port mode should be configured on the edge switch's interface connecting to the core?

Medium
586

Which two VXLAN control plane options are supported on Cisco Nexus 9000 switches? (Choose two.)

Easy
587

Which three checks are part of the vPC type-1 consistency check? (Choose three.)

Hard
588

In Cisco TrustSec, which technology is used to enforce east-west traffic policies based on identity without relying on IP addresses?

Hard
589

A DevOps team wants to version control network device configurations. Which tool is best suited for tracking changes and collaborating on configuration files?

Medium
590

Refer to the exhibit. The CoPP policy above is applied. Which traffic is most likely to be dropped?

Hard
591

A UCS administrator notices that a server in a UCS domain is not booting from SAN after a firmware upgrade. The service profile shows the correct WWPN and boot policy. The SAN switch sees the initiator login. However, the storage array does not see any initiator attempts. What is the most likely issue?

Hard
592

A network administrator is troubleshooting a vPC pair and needs to verify the operational status of the vPC peer-link. Which NX-OS command displays vPC status including peer-link and member port states?

Medium
593

In a Cisco ACI fabric, an external L3Out is configured to advertise a subnet to the outside. Which object must be created in the tenant to define the Layer 3 outside network connection?

Hard
594

Match each Cisco MDS FC switch feature to its purpose.

Medium
595

An engineer is troubleshooting a SAN performance issue. The MDS switch shows high CRC errors on an F port. The host is connected via a 16 Gbps FC link. The errors increase when the host sends large I/O. What is the most likely cause?

Hard
596

Which VPC component is used to send Layer 2 control plane traffic between peer switches?

Easy
597

Which THREE statements accurately describe FCIP (Fibre Channel over IP) configurations on Cisco MDS switches?

Hard
598

Two Cisco Nexus 9000 switches are connected via Ethernet interface 1/1. The engineer wishes to secure the link using MACsec (IEEE 802.1ae) with a pre-shared key for connectivity association key (CAK) protection. Both switches have the same hardware and software version supporting MACsec. The engineer configures the following on both switches: feature macsec macsec policy MACSEC_POLICY cipher-suite gcm-aes-128 security-mode no-encrypt mka sak-rekey-time 30 interface ethernet 1/1 macsec policy MACSEC_POLICY However, the link comes up without MACsec encryption (the port counter shows MACsec frames dropped). The engineer checks that the pre-shared key is configured correctly via 'macsec key-chain' but notices it was not explicitly applied. What is the most likely reason for MACsec failing to establish?

Medium
599

In a VXLAN EVPN multi-tier design, which feature ensures traffic between leaf switches takes the optimal path without hair-pinning through a spine?

Hard
600

What is the purpose of the Cisco Integrated Management Controller (CIMC) for UCS C-Series rack servers?

Easy
601

Which THREE are characteristics of Cisco TrustSec? (Select exactly 3)

Hard
602

A UCS B-series blade server is experiencing boot issues. The service profile is configured to boot from local disk first, then SAN. The blade has local disks but they are not recognized. Which TWO actions should be taken to diagnose the issue?

Medium
603

An organization has deployed a 4-node HyperFlex cluster with all-flash storage and replication factor 3 (RF3). One node fails. How many nodes are required to remain operational for the cluster to continue serving data without interruption?

Medium
604

An engineer is troubleshooting a performance issue on a Cisco MDS 9700 switch. The 'show interface fc1/1' output shows CRC errors incrementing slowly. The interface is connected to a storage array. Which two actions should the engineer take to resolve the issue?

Hard
605

An engineer notices that a vPC peer link is flapping. Which vPC component must be operational for the vPC to function correctly?

Medium
606

Refer to the exhibit. What is the most likely cause of neighbor 10.1.1.3 being stuck in EXSTART?

Hard
607

A data center engineer is configuring a Cisco UCS C-Series server with a hardware RAID controller. The server will host a critical database. The RAID controller supports RAID 0, 1, 5, 6, and 10. Which RAID level should be chosen to provide the best combination of performance and fault tolerance?

Medium
608

A UCS administrator needs to ensure that only the fabric interconnect management plane is accessible from the management network. Which feature should be implemented?

Hard
609

An engineer is configuring a pair of Nexus 9000 switches as vPC peers. The vPC peer keepalive link is established. Which statement about the vPC peer keepalive is true?

Medium
610

A storage administrator is configuring a new Fibre Channel fabric using Cisco MDS switches. The edge switches must connect to the core without participating in the full routing domain to conserve domain IDs. Which Fibre Channel feature should be configured on the edge switches?

Medium
611

A network administrator wants to prevent IP spoofing attacks on a data center access switch. The switch has IP Source Guard enabled on the client-facing ports. Which condition must be met for IP Source Guard to work properly?

Medium
612

A network engineer is configuring VLAN ACLs on a Cisco Nexus 9000 switch to enforce traffic filtering between VLANs. Which configuration step is required to apply a VACL to a VLAN?

Easy
613

An engineer is configuring a VXLAN EVPN fabric. Which address family must be enabled under BGP to exchange MAC/VTEP reachability information?

Medium
614

Sequence the steps to configure a VXLAN with BGP EVPN on a Cisco Nexus switch.

Medium
615

Which TWO of the following are components of the Cisco ACI Management Information Tree (MIT)? (Choose two.)

Medium
616

A large enterprise data center has a disaster recovery site 100 km away. The SAN uses two MDS 9700 series switches at each site, connected via a dedicated dark fiber. Each link operates at 16 Gbps with a round-trip time of 2 ms. Recently, backup jobs to the remote storage array have been failing with timeout errors. The backup server is local to Site A, but the backup target is in Site B. The link utilization never exceeds 40%, and no errors are reported on the interfaces. The engineer suspects the issue is related to buffer credits. The current buffer credit count on the ISL is 16. The engineer calculates that for 16 Gbps over 100 km (2 ms RTT), they need at least 200 credits to maintain full throughput. Which action is most appropriate to resolve the issue?

Hard
617

Which TWO features are used to validate ARP packets and prevent ARP spoofing attacks? (Select exactly 2)

Easy
618

In an ACI fabric, an EPG is configured with a contract that allows HTTP traffic to an external network. The external network is reachable via a Layer 3 Outside. However, HTTP traffic from the EPG fails. What is the most likely cause?

Hard
619

A network engineer is configuring a new Fibre Channel switch to connect to an existing storage fabric. The switch will be used to aggregate multiple edge switches and must appear as a single Fibre Channel device to the core. Which port type should be used on the edge switch facing the core switch to achieve this?

Easy
620

A data center architect is designing a SAN with two MDS switches using VSANs. Which method ensures traffic isolation between departments while allowing sharing of a tape library?

Easy
621

A Cisco UCS upgrade from release 3.1(1) to 4.0(4) is planned. The current release has a known issue that affects NVRAM backup. What is the best practice to avoid an outage during this upgrade?

Hard
622

In a Cisco UCS B-Series deployment, which component provides the physical connectivity between blade server mezzanine cards and the Fabric Interconnects?

Easy
623

An engineer is connecting a Cisco UCS C-Series rack server to the network. The server must be managed by UCS Manager alongside existing B-Series blades. Which mode should the C-Series server be configured in?

Medium
624

A UCS administrator notices that a service profile associated with a vNIC template that uses 'fabric failover' is not failing over to the secondary Fabric Interconnect when the primary link goes down. The vNIC template is set to 'fabric failover' enabled, and both Fabric Interconnects are in the same VLAN. What is the most likely cause?

Medium
625

In the context of Ansible automation for Cisco Nexus switches, which module can be used to manage VLAN configurations?

Medium
626

An organization wants to encrypt Fibre Channel traffic in-flight between storage and servers. Which standard should be used?

Hard
627

Which control plane protection mechanism should be configured to limit the rate of BGP updates destined to the CPU of a Nexus 9000 switch to prevent CPU overload?

Easy
628

Which NX-OS command displays the vPC consistency parameters and status on a Cisco Nexus switch?

Easy
629

Arrange the steps to recover a lost admin password on a Cisco Nexus switch.

Medium
630

A network engineer is troubleshooting high CPU utilization on a Nexus 9000 switch. Which command is most useful to identify the process consuming the most CPU?

Easy
631

What is the primary benefit of using UCS service profiles for server deployment?

Easy
632

Which Cisco UCS component is responsible for aggregating traffic from multiple blade servers in a 5108 chassis to the Fabric Interconnect?

Medium
633

In UCS service profile templates, when you update the template, how do the changes propagate to the service profiles derived from it?

Medium
634

An organization wants to integrate their UCS C-series rack servers into an existing UCS Manager domain. Which mode should be used to achieve centralized management of the C-series servers through UCS Manager?

Medium
635

An NFS client is unable to write to a mounted export. The client can read files. What is the most likely cause?

Easy
636

Which TWO statements correctly describe active zone sets in a Cisco MDS Fibre Channel fabric?

Medium
637

A Cisco ACI fabric has contracts configured to allow traffic between two EPGs. After deployment, traffic between endpoints in these EPGs is being dropped, but contract statistics show no packets have been permitted. The administrator checks the contract configuration and it looks correct. What is the most likely cause?

Medium
638

In a data center running MST, which region configuration parameter must match on all switches for them to be part of the same region?

Medium
639

A Cisco MDS switch is configured with fabric binding to restrict which switches can join the fabric. A new switch is added, but it fails to establish an E-port connection. What is the most likely cause?

Medium
640

In a spine-leaf architecture, what is the primary advantage of using a full mesh between spines and leaves?

Medium
641

A data center deployment uses NPV mode on a Cisco MDS switch to connect to a core Fibre Channel switch. After configuration, the NPV switch does not register with the core. What is the most likely cause?

Hard
642

A DevOps team is implementing CI/CD for network configuration changes on Nexus switches. Which tool is most suitable for version control of network configuration files?

Easy
643

Which two statements are true about Cisco TrustSec? (Choose two.)

Easy
644

Which FCoE component is responsible for encapsulating Fibre Channel frames into Ethernet frames?

Easy
645

Which TWO methods are supported for authenticating to the APIC REST API?

Easy
646

Which component in a UCS domain is responsible for aggregating and forwarding all management traffic between the chassis and the fabric interconnects?

Medium
647

Arrange the steps to configure a vPC domain on a pair of Cisco Nexus switches.

Medium
648

A company is deploying a multi-tenant environment with several virtualized hosts using NPIV. Each virtual machine requires its own WWPN. During testing, some VMs cannot log into the SAN. The MDS switch logs show 'FLOGI rejected: no available resources'. What is the most likely cause?

Hard
649

A storage array supports both synchronous and asynchronous replication. The application requires zero data loss in case of a site failure. Which replication type should be chosen?

Medium
650

In a UCS environment, which method provides management plane isolation for the fabric interconnects?

Hard
651

An administrator wants to prevent a rogue DHCP server from assigning IP addresses on a Nexus switch. Which feature should be enabled?

Medium
652

An organization wants to adopt Infrastructure as Code (IaC) principles for their data center network. Which practice best aligns with IaC for network configuration?

Hard
653

A network engineer is troubleshooting an OSPF adjacency issue between two Nexus switches. The neighbors are stuck in the EXSTART state. What is the most likely cause?

Medium
654

Which TWO of the following are characteristics of the NETCONF protocol? (Choose two.)

Medium
655

Which THREE components are part of a HyperFlex HX Data Platform (HXDP) cluster? (Choose three.)

Hard
656

Which Cisco Data Center Network Manager component is used for centralized fabric management and automation of Nexus switches?

Easy
657

A small business has a Cisco MDS 9148S switch with a single fabric. Two hosts are connected to ports fc1/1 and fc1/2, and a storage array is connected to ports fc1/3 and fc1/4. The administrator wants to ensure that each host can only see its own assigned LUNs on the array. They have configured a zone for each host containing the host pWWN and the target pWWN for the respective LUNs. However, Host A is able to see Host B's LUNs. What is the most likely cause?

Easy
658

A service profile is configured to boot from local disk, but the blade server has no local storage. What will happen when the blade is associated with this service profile?

Medium
659

In a spine-leaf data center architecture, what is the primary purpose of using equal-cost multipath (ECMP) routing?

Easy
660

Which TWO statements about Cisco TrustSec in a data center environment are true? (Choose two.)

Hard
661

A data center engineer is using Cisco Intersight to manage a hybrid infrastructure that includes UCS servers and HyperFlex clusters. The engineer needs to deploy a new server profile to a UCS domain that is claimed in Intersight. The profile includes a firmware policy that specifies version 4.1(3c) for the motherboard and 5.0(3a) for the storage controller. The target server is a C-Series rack mount server currently running firmware version 4.0(2a) on the motherboard. After deploying the profile, the server goes into a 'Pending' state and does not become 'Selectable'. The engineer checks the UCS Manager and sees that the server is in 'Discovery Failed' state. The engineer has verified that network connectivity is fine and the CIMC is accessible. What should the engineer do to resolve this?

Medium
662

A UCS C-series rack server is to be integrated into UCS Manager. The server will be managed by CIMC and must participate in compute pools. Which operating mode should be configured on the C-series server to allow UCS Manager to discover and manage it?

Easy
663

A company is deploying a multi-site UCS environment with UCS Central. Which three capabilities does UCS Central provide over individual UCS Manager instances? (Choose three.)

Hard
664

An engineer is configuring a Fibre Channel over Ethernet (FCoE) SAN. Which statement about FCoE Initialization Protocol (FIP) is true?

Easy
665

Refer to the exhibit. The Fabric Interconnect cannot ping its default gateway. The management interface is configured and up. What is the most likely cause?

Easy
666

An engineer is deploying a new VXLAN fabric and must ensure that the control plane can handle MAC advertisement without flooding. Which TWO protocols can be used for control plane learning in VXLAN? (Select two.)

Medium
667

In an ACI environment, an automation script uses the acitoolkit Python library to create a new EPG. The script connects to the APIC using login credentials. After creating the EPG, what must be called to commit the changes?

Hard
668

During FCoE initialization, which protocol is used by a CNA to discover FCoE-capable switches and establish a virtual link?

Hard
669

A data center architect is designing an ACI fabric with VMM integration to VMware vSphere. The goal is to allow dynamic policy assignment to virtual machines. What is the correct configuration hierarchy to enable this?

Hard
670

Which API uses RESTful principles and supports both XML and JSON encoding for network configuration, as defined in RFC 8040?

Medium
671

A data center architect is designing a spine-leaf fabric with OSPF as the underlay routing protocol. Which two statements about OSPF in this design are correct? (Choose two.)

Easy
672

An engineer is deploying a new UCS chassis with two Fabric Interconnects. The design requires that server traffic can fail over to the secondary FI if the primary FI fails, without requiring any changes to the server's network configuration. Which technology must be enabled on the uplink ports of the Fabric Interconnects to the upstream switches to ensure transparent failover of server traffic?

Hard
673

Refer to the exhibit. A server connected to interface fc1/3 on the MDS switch cannot log in to the fabric. The server's HBA WWPN is 10:00:00:00:c9:2b:1a:62. What is the most likely reason for the login failure?

Medium
674

A network administrator suspects that a rogue DHCP server is active on the data center network. The switches are Cisco Nexus 9000 series running NX-OS. Which configuration should be applied to prevent DHCP spoofing?

Hard
675

An engineer is configuring OSPF in a data center fabric with multiple Nexus 9000 switches. To ensure fast convergence after a link failure, which OSPF feature should be enabled?

Medium
676

A data center engineer is configuring 802.1X authentication on Cisco Nexus switches for wired endpoints. The requirement is to allow traffic on the port even if no EAPOL packet is received from the endpoint (e.g., a printer). Which authentication method should be used?

Easy
677

Which Python library is part of the ACI SDK and provides a high-level object-oriented interface for interacting with the APIC?

Medium
678

In a UCS B-series chassis, which component provides the management connectivity between the blades and the Fabric Interconnects?

Medium
679

Which UCS B-Series chassis component provides the physical slot for a blade server?

Easy
680

An engineer notices that the LED of an FC interface is off on a Cisco MDS switch. The interface is up/up. What is the most likely cause?

Easy
681

A company runs a multi-tenant data center using Cisco ACI with multiple tenants. Each tenant has its own VRF and EPGs. The security policy requires that tenant A's web servers (EPG web_tenantA) be accessible from tenant B's application servers (EPG app_tenantB) only via HTTPS (TCP 443). The ACI fabric is configured with contracts. The administrator has created a contract with a filter for HTTPS (tcp dstPort 443) and applied it as a provider contract on EPG web_tenantA and as a consumer contract on EPG app_tenantB. However, traffic from tenant B's app servers to tenant A's web servers is being dropped. The administrator has verified that the contracts are applied correctly and the filter is correct. What is the most likely cause of the traffic drop?

Medium
682

A storage administrator is setting up iSCSI connectivity between a server and a storage array. To enhance security, the administrator wants to authenticate the initiator and target during the login process. Which authentication method should be configured?

Medium
683

You are a network engineer at a financial institution. The company has two data centers: DC1 and DC2, connected via a dark fiber link. Each data center has a pair of Nexus 7000 switches in a vPC configuration. The dark fiber link connects to a port on each Nexus 7000 pair using a Layer 2 port-channel. The requirement is to extend VLAN 100 between the two data centers for a critical application that requires a stretched Layer 2 domain. The current configuration has the port-channel on both sides set to mode 'active' with LACP. VLAN 100 is allowed on the trunk. The application servers report intermittent connectivity issues, with some packets being dropped. Upon inspection, you notice that the MAC address table on the Nexus 7000 in DC1 shows the MAC address of the server in DC2 on the dark fiber port-channel interface, but also on a local access port connected to a different server in the same VLAN. What is the most likely cause of the intermittent connectivity?

Hard
684

In a spine-leaf architecture using eBGP as the routing protocol, what is the primary purpose of using eBGP rather than iBGP between spine and leaf switches?

Medium
685

In an EVPN-VXLAN fabric, a network engineer notices that MAC addresses learned from an external router are not being advertised as EVPN type-2 routes. The external router is connected to a leaf switch via a Layer 3 port. Which additional configuration is needed on the leaf switch?

Hard
686

Which TWO are best practices when automating ACI fabric configuration using Ansible?

Hard
687

Which THREE factors should be considered when determining the number of upstream Ethernet uplinks from a UCS Fabric Interconnect to the core network? (Choose THREE.)

Hard
688

Which THREE are best practices for securing a data center network? (Choose three.)

Easy
689

Which Cisco NX-OS feature allows automation and programmatic access to device configuration and monitoring using REST APIs?

Easy
690

A large cloud provider is building a new data center using Cisco ACI with multiple leaf and spine switches. They plan to host thousands of tenants with overlapping IP addresses in different VRFs. The network team has deployed the fabric with a common security policy. During testing, they discover that traffic from Tenant A to Tenant B is being allowed even though a contract should deny it. The APIC policy shows the contract is applied to the EPGs and the deny rule is present. What is the most likely cause of the policy not being enforced?

Hard
691

Refer to the exhibit. What is the effect of this configuration on traffic in VLAN 10?

Medium
692

An organization has deployed Cisco UCS Central to manage multiple UCS domains. A global service profile template is created in UCS Central. When a local UCS domain administrator tries to modify the service profile derived from this global template in UCS Manager, what happens?

Hard
693

An engineer configures zoning on a Cisco MDS switch to restrict access between storage arrays and servers. They use the command 'zone name ZONE1 vsan 10' and 'member pwwn 21:00:00:1b:32:12:34:56'. Which type of zoning is being configured?

Medium
694

Which management interface is used for out-of-band management of UCS C-Series rack servers, providing features like KVM, virtual media, and remote firmware upgrade?

Easy
695

Match each Cisco storage protocol to its characteristic.

Medium
696

Which protocol is used by Cisco ACI fabric to distribute endpoint information among spines?

Easy
697

A company uses Cisco TrustSec in its data center to enforce segmentation. Servers in VLAN 10 (Finance) should only communicate with servers in VLAN 20 (ERP) via an application gateway. Which TrustSec component is used to assign a Security Group Tag (SGT) to traffic from the Finance servers?

Medium
698

A company is deploying a Cisco UCS Mini in a remote office. They need to support both VMware vSphere and Microsoft Hyper-V on the same UCS domain. What is the best practice for deploying compute resources for both hypervisors?

Hard
699

A Cisco MDS switch has multiple Fibre Channel interfaces that need to be aggregated into a single logical interface to increase bandwidth and provide redundancy. Which technology should be used?

Hard
700

Which THREE factors should be considered when designing an FCoE SAN to avoid traffic loss? (Choose three.)

Hard
701

An administrator notices that a new server connected to a Fibre Channel switch cannot log in. The 'show flogi database' command does not show the server's WWPN. What is the most likely cause?

Medium
702

In a vPC domain, a consistency check failure is observed for the vPC keepalive link. What is the impact on the vPC domain operation?

Hard
703

Refer to the exhibit. A server with vNIC eth0 is experiencing packet drops on its Ethernet interface. The server is sending jumbo frames (MTU 9000) on VLAN 100. The QoS system class 'Class-Platinum' has an MTU of 9216 and is configured with 'Drop'. The vNIC is not assigned to any QoS policy. What is the most likely reason for the drops?

Hard
704

When troubleshooting a VXLAN EVPN fabric with Cisco Nexus 9000 switches, which three commands provide information about the EVPN operation? (Choose three.)

Medium
705

A network engineer is automating a repetitive configuration task on a Nexus 9000 switch using Python scripts with NX-API. The script sends a CLI command via POST request but receives HTTP 400 status with error 'Invalid request payload'. What is the most likely cause?

Medium
706

An OSPF router in a broadcast network has not formed a neighbor relationship. What are three possible causes? (Choose three.)

Medium
707

A storage administrator reports that a Cisco UCS domain is not booting from the Fibre Channel SAN. The boot policy is correctly configured and the vHBA is associated. Which two alignment issues could cause this problem? (Choose two.)

Easy
708

Based on the exhibited FLOGI database, what is the state of the interface fc1/1?

Hard
709

A Cisco MDS switch is configured in NPV mode. A host connected to this switch fails to log into the SAN. Which command should be used to verify the host's FLOGI status?

Medium
710

A storage administrator notices that a host is unable to see a LUN after zoning is configured. The zone contains the host WWPN and the target WWPN. The LUN is not masked at the storage array. What is the most likely cause?

Hard
711

A startup company is deploying a new web application on UCS B-Series blades. They want to use PXE boot for rapid provisioning. The network team has configured a DHCP server and a PXE server on the same VLAN as the UCS service profiles. The system administrator creates a service profile for a blade and sets the boot policy to 'PXE' as the first boot device, and local disk as second. However, when the blade powers on, it boots from the local disk instead of PXE. The PXE server logs show no request from the blade's MAC address. The DHCP server logs show no activity. The fabric interconnect is configured with a default VLAN. What is the most likely cause?

Easy
712

A data center architect is designing access control for a Cisco ACI fabric. The requirement is to allow HTTP traffic from the web tier (EPG web) to the app tier (EPG app), but deny SSH from the management EPG to the web EPG. Which construct should be used?

Easy
713

An administrator needs to reset the CIMC password on a Cisco UCS C-Series server without physical access. Which method can be used?

Easy
714

An organization is deploying UCS Central to manage multiple UCS domains. Which THREE benefits does UCS Central provide over using individual UCS Managers?

Medium
715

In ACI, which construct defines the set of endpoints that can communicate based on contracts?

Medium
716

Based on the exhibited output, what is the status of the interface?

Easy
717

A network engineer is verifying VPC configuration on a pair of Nexus switches. Which two commands should be used to check VPC status and consistency? (Choose two.)

Easy
718

What is the purpose of jumbo frames in an iSCSI storage network?

Easy
719

A large financial institution has recently migrated its data center network to a new Cisco ACI fabric. The operations team is tasked with automating the provisioning of new application tenants, including EPGs, contracts, and bridge domains, using the APIC REST API. They have developed a comprehensive set of Python scripts that successfully performed these actions in their lab environment. However, when deploying the scripts to production, they receive an 'SSL: CERTIFICATE_VERIFY_FAILED' error from the requests library. The production APIC cluster uses a self-signed certificate for HTTPS, and the corporate security policy strictly prohibits the use of HTTP or disabling certificate verification. Additionally, the policy does not allow replacing the self-signed certificate with a CA-signed one without a lengthy approval process that could delay the automation project. The team needs an immediate solution that maintains security best practices. What should the team do?

Easy
720

A network engineer is configuring Cisco Nexus VXLAN with BGP EVPN. The VTEPs are using loopback0 as the NVE source. The physical interfaces are up, but the NVE interface remains down. What is the most likely cause?

Hard
721

An engineer wants to automate the configuration of BGP on a Nexus switch using Ansible. Which module from the cisco.nxos collection is appropriate?

Medium
722

Which FCoE feature allows multiple VLANs to be carried over a single physical link when using FIP snooping?

Easy
723

Refer to the exhibit. After applying this configuration, the engineer activates the zoneset with 'zoneset activate name ZONESET1 vsan 10'. The host with pwwn 10:00:00:00:c9:aa:bb:01 can communicate with the target with pwwn 10:00:00:00:c9:aa:bb:02. However, the host reports that it cannot see a third target with pwwn 10:00:00:00:c9:aa:bb:03. What is the most likely reason?

Medium
724

Which three components are part of the VXLAN overlay architecture? (Choose three.)

Medium
725

What is the purpose of a cluster witness VM in a HyperFlex cluster?

Easy
726

A Nexus administrator wants to apply an IPv4 ACL to filter traffic on a specific VLAN. Which command is correct?

Medium
727

A data center design requires Layer 2 extension between two sites using OTV. The network engineer notices that MAC addresses from Site A are not learned at Site B. OTV adjacency is up, and both sites have the same overlay interface configured. Which configuration issue is most likely the cause?

Hard
728

When configuring a UCS service profile for a blade server that needs to boot from the local disk, which boot order setting is appropriate?

Medium
729

A network administrator configures DHCP snooping on a Nexus 9000 switch. The legitimate DHCP server is connected to Ethernet 1/1. An unauthorized DHCP server is detected on Ethernet 1/2. Which action should be taken to prevent the unauthorized server from offering IP addresses?

Medium
730

A network engineer is configuring OSPF on a Cisco Nexus switch for a data center network. The requirement is to ensure that the switch does not become the Designated Router (DR) on a multi-access segment. Which OSPF configuration achieves this?

Easy
731

In a UCS B-Series environment, where are vNICs and vHBAs defined to provide network and storage connectivity to a blade server?

Medium
732

A data center team is implementing FCoE and needs to ensure that FCoE traffic is not dropped during congestion. The network switches support Data Center Bridging (DCB). Which two DCB features are required for FCoE?

Medium
733

Which Nexus security feature validates the source IP address of packets on a per-port basis and drops packets with invalid source IPs?

Medium
734

Which TWO statements are true about Control Plane Policing (CoPP) on a Cisco Nexus 9000 switch? (Choose two.)

Hard
735

A large enterprise data center uses Cisco UCS Manager to manage hundreds of blade servers. The automation team has been using Python SDK scripts to provision service profiles. Recently, after a UCS Manager firmware upgrade, several scripts that previously worked are now failing with 'AttributeError: 'ServiceProfile' object has no attribute 'set_vnic_order''. The team confirms that the UCS Manager version changed from 4.0 to 4.2. Which course of action should the engineer take to resolve the issue?

Medium
736

A multicast application requires that all receivers join the same group using PIM sparse mode. Which router is responsible for forwarding traffic from the source to the RP?

Easy
737

An engineer is designing a Cisco ACI multi-site solution. Which two considerations are critical for inter-site connectivity? (Choose two.)

Hard
738

Which TWO are required for FCoE communication on a Nexus switch configured as an FCF? (Choose two.)

Easy
739

Which THREE of the following are components of an Ansible playbook for automating Cisco Nexus configuration? (Choose three.)

Hard
740

An engineer notices that AAA authentication using RADIUS is failing, and the RADIUS server logs show no incoming authentication requests. Which of the following is the most likely cause?

Easy
741

An engineer is configuring iSCSI multipath I/O (MPIO) on a Windows server connected to a storage array. The goal is to provide load balancing and failover. What must be configured on the storage side to support MPIO?

Easy
742

Which of the following is a YANG data model developed by the OpenConfig working group to provide vendor-neutral configuration for network interfaces?

Hard
743

An engineer is troubleshooting BGP EVPN control plane. They issue 'show bgp l2vpn evpn' and see Type-3 routes but no Type-2 routes for any VNI. Which condition is most likely?

Hard
744

A data center network uses MST to interoperate with a legacy switch that supports only RSTP. Which MST configuration parameter must match between the MST region and the legacy switch?

Hard
745

A network engineer is configuring a UCS service profile for a B-series blade server that will boot from SAN. Which WWPN assignment method should be used to ensure the boot LUN remains accessible if the blade is replaced with another blade of the same type?

Medium
746

In a Cisco MDS switch, what is the effect of the command 'fcdomain restart vsan 100'?

Hard
747

Two data center switches are connected via a fiber link. They need to encrypt all traffic at Layer 2. Which configuration is required on both switches to establish MACsec?

Hard
748

A DevOps team is implementing CI/CD for network configuration using Git. They want to ensure that any changes to the YANG-based configuration are automatically validated before merging. Which tool is used for network automation with YANG models and supports NETCONF/RESTCONF?

Medium
749

Which TWO of the following are characteristics of NPV (N-Port Virtualization) in a Cisco MDS fabric?

Medium
750

In a Fibre Channel SAN, a technique is used to allow multiple initiators to share a single physical FC port by assigning multiple N-port IDs. What is this technique called?

Easy
751

An ACI fabric has multiple tenants and the requirement to allow only HTTP traffic from the web EPG to the app EPG. The contract must restrict traffic to TCP port 80. Which ACI object defines that specific port?

Hard
752

An organization is deploying Ansible for network automation across multiple Nexus 9000 leaf switches. They need to ensure that configuration tasks are idempotent and only apply changes when necessary. Which best practice should be followed when using the cisco.nxos.nxos_config module?

Hard
753

Two Nexus switches are configured for MACsec using MKA. The link between them is up, but MKA does not establish. Which issue is most likely?

Hard
754

A HyperFlex cluster is being designed with 4 nodes using RF2. Which three statements are true about the cluster's data availability and management? (Choose three.)

Hard
755

A storage administrator has been tasked with integrating a new Cisco MDS 9706 switch into an existing Fibre Channel SAN. The existing SAN consists of two Cisco MDS 9148S switches configured in a VSAN 100 with a single zone set that contains all initiator and target WWPNs. The administrator connects the new switch to one of the existing switches using an ISL and configures the new switch with VSAN 100 and the same zone configuration. The administrator activates the zone set on the new switch and verifies that the ISL is up and both switches see each other's Fibre Channel IDs. However, servers attached to the existing switches still cannot discover the storage targets that are connected to the new switch. The administrator has confirmed that the ISL is operational and that the zone set on the new switch is activated with the correct WWPNs. What should the administrator check next?

Easy
756

A UCS administrator is planning to deploy stateless computing using service profiles. Which three components are abstracted from the physical hardware and defined in the service profile? (Choose three.)

Hard
757

A storage administrator is configuring a VSAN on a Cisco MDS switch. After creating the VSAN, what is the next step to ensure that the ports can communicate within that VSAN?

Medium
758

An organization is deploying Cisco Nexus 9000 switches with NX-OS and needs to prevent ARP spoofing attacks. The network engineer enables Dynamic ARP Inspection (DAI) on all VLANs. However, some legitimate hosts are unable to obtain IP addresses via DHCP. What is the most likely reason?

Hard
759

A network administrator must enforce security policies for east-west traffic in a Cisco TrustSec-enabled data center without using IP-based ACLs. Which technology should be used?

Hard
760

An engineer is designing a spine-leaf fabric using eBGP for the underlay. The spine switches are in AS 65000 and each leaf switch uses a different private AS from 65001 to 65010. For optimal convergence and to avoid BGP path hunting, which BGP feature should be configured on the spines?

Hard
761

Which THREE components are part of an EVPN VXLAN fabric? (Choose three)

Medium
762

Which two features allow running Python scripts directly on a Cisco Nexus switch? (Choose two.)

Medium
763

A data center designer is evaluating oversubscription ratios in a spine-leaf topology with 40 leaf switches and 4 spine switches. Each leaf has 4x100G uplinks to spines, and each spine has 40x100G downlinks. The leaf switches have 48x25G server ports. What is the oversubscription ratio from the server ports to the spine uplinks?

Hard
764

Which two commands are used to verify Spanning Tree Protocol (STP) status on a Cisco Nexus switch? (Choose two.)

Easy
765

An organization has deployed a pair of Nexus 93180YC-EX switches as vPC peers in a data center. The switches are connected to a server with two 10GbE interfaces configured as an LACP port-channel. The vPC configuration has been verified and was working correctly for months. After a scheduled maintenance window that included upgrading the NX-OS software from version 7.0(3)I7(1) to 7.0(3)I7(5), the server begins experiencing frequent link flaps on the port-channel. The server administrator reports that every 5-10 minutes, the link goes down for about 2 seconds and then recovers. The network team checks the logs on the Nexus switches and sees repeated messages: 'LACP-3-MISCONFIG: Port-channel <channel> is misconfigured: partner not on same aggregator.' The 'show vpc brief' output shows all vPCs in the 'up' state. The 'show port-channel summary' shows the port-channel is up with both member ports in the bundle. What is the most likely root cause?

Hard
766

Refer to the exhibit. Two Nexus switches are connected via Ethernet1/1. MKA does not initiate. What is the issue?

Easy
767

In Cisco ACI, when creating a contract, which three components are part of the contract definition? (Choose three.)

Medium
768

Refer to the exhibit. An engineer sees this error on a Cisco MDS switch. What is the best action to resolve the issue?

Medium
769

A HyperFlex cluster requires a cluster witness VM for quorum. The cluster is deployed with 5 nodes using RF2. If one node fails, the cluster remains operational. However, if a second node fails simultaneously, what determines whether the cluster remains available?

Medium
770

An organization has four Cisco MDS 9700 directors connected in a full-mesh topology. They use VSANs to separate production, backup, and management traffic. The backup VSAN is experiencing high latency and occasional timeouts. The engineer runs the 'show fcspf routes' command and notices that the path from the backup host to the backup target has an uneven hop count across different paths. The links are all 16 Gbps. The engineer also notes that the backup target is connected to a different director than the backup host. Which action is most likely to improve performance?

Medium
771

An engineer is deploying a HyperFlex cluster with all-flash nodes and replication factor 3. What is the minimum number of converged nodes required for the cluster to be fully operational?

Hard
772

Which TWO statements are true regarding the differences between REST API (NX-API) and NETCONF for automating Nexus switches?

Easy
773

Which TWO are benefits of using the Cisco NX-API for network automation compared to traditional SSH-based scripting?

Medium
774

In a Fibre Channel fabric using NPV mode, what is the role of the NP-port on the edge switch?

Medium
775

An engineer wants to enforce security policies in a data center based on user identity rather than IP addresses. Which Cisco technology enables identity-based tagging and policy enforcement?

Medium
776

An organization's storage network uses RAID-10 for critical databases. The storage array has 12 disks. How many disks can fail simultaneously without data loss, assuming the worst-case scenario?

Hard
777

A network engineer is deploying FCoE in a top-of-rack design. Which statement about the required lossless Ethernet fabric is correct?

Medium
778

An engineer is configuring a Cisco UCS Manager deployment. The goal is to enforce the organization's security policy by limiting administrative access based on job roles. Which two actions should the engineer take? (Select two.)

Medium
779

Which THREE conditions must be met for a Cisco Nexus switch to form a vPC? (Choose three.)

Hard
780

A storage administrator wants to provide a volume that appears larger than its actual physical capacity, allocating storage blocks only as data is written. Which storage provisioning method is being described?

Easy
781

A data center switch is experiencing high CPU due to excessive BGP updates. Which action can mitigate this without affecting legitimate BGP traffic?

Medium
782

Which TWO configuration steps are necessary to enable VXLAN EVPN on a Cisco Nexus 9000 switch using the centralized anycast gateway model?

Hard
783

Refer to the exhibit. A network administrator configured VXLAN EVPN as above. The VTEP can communicate with neighbors on VNI 5001, but cannot reach the default gateway for VNI 5002. What is the problem?

Hard
784

During a fabric reconfigure event, which behavior is expected if all switches are running the same Cisco SAN-OS version and have the same domain ID configuration?

Hard
785

An organization uses FCIP to extend their SAN between two data centers over a 100 Mbps WAN link with 80 ms latency. The storage traffic includes large sequential writes. Which statement best describes the benefit of enabling compression on the FCIP tunnel?

Hard
786

During a capacity planning review, an engineer notices that a UCS domain with 8 blades (each with 16 cores) is using 70% CPU average. The environment runs VDI workloads. Each VM requires 2 vCPUs and 4 GB RAM. The hypervisor uses 1:1 CPU oversubscription. How many additional VMs can be deployed before reaching 100% CPU utilization?

Hard
787

In a Cisco UCS B-Series environment, which component provides the physical connectivity between blade chassis and Fabric Interconnects?

Easy
788

Which BGP variant is commonly used in data center EVPN fabrics to carry Layer 2 and Layer 3 network information?

Easy
789

Refer to the exhibit. A DHCP server is connected to Ethernet1/1 and a client in VLAN 10 is connected to Ethernet1/2. The client obtains an IP address. Which statement is best supported?

Easy
790

An engineer is automating ACI configuration using Terraform. Which provider and resource should be used to create an Application Profile under a Tenant?

Medium
791

An engineer needs to enable equal-cost multipath (ECMP) routing in a spine-leaf fabric using OSPF. Which OSPF feature allows load balancing across multiple equal-cost paths?

Medium
792

Which component in a UCS B-series chassis provides the connectivity between blade servers and the Fabric Interconnects?

Easy
793

In VXLAN, which method of handling BUM traffic replicates packets to remote VTEPs only when there is a known receiver behind that VTEP?

Medium
794

An engineer is configuring a new VLAN on a Nexus switch that is part of a vPC pair. Which step is mandatory to ensure the VLAN is created on both vPC peers?

Medium
795

An engineer is writing an Ansible playbook to configure a Nexus switch. The playbook uses the cisco.nxos.nxos_config module. Which Ansible concept is used to ensure the playbook is idempotent?

Medium
796

Which TWO statements about NPV (N_Port Virtualization) mode in FC networks are correct?

Hard
797

What is the purpose of a witness VM in a HyperFlex cluster?

Easy
798

An engineer is troubleshooting a UCS blade server that fails to boot from SAN. The server is associated with a service profile that includes a SAN connectivity policy. Which two items should be verified to ensure the boot from SAN works? (Choose two.)

Medium
799

Which two mechanisms are used by Dynamic ARP Inspection to prevent ARP spoofing? (Choose two.)

Medium
800

A UCS administrator is deploying a 3-node HyperFlex cluster with vSphere. Each node has a single vNIC for management and two vNICs for storage data traffic. During the cluster creation, the storage vNIC MTU must be configured. What is the recommended MTU value for the storage data vNICs in HyperFlex?

Hard
801

Which two of the following are valid methods to automate Nexus switch configuration using Python? (Choose two.)

Medium
802

A SAN administrator notices intermittent connectivity issues between an initiator and target. The Fibre Channel link shows CRC errors. What is the most likely cause?

Medium
803

Refer to the exhibit. An engineer is configuring a server-facing interface on a Nexus switch. The server is running VMware ESXi with multiple virtual machines in VLANs 10, 20, and 30. After applying the configuration, the ESXi host reports that it cannot communicate on VLAN 30. Which configuration change should be made?

Easy
804

An engineer has configured a service profile with a WWPN pool that has exhausted its assigned range. The server boots from SAN. What happens when the server is associated?

Medium
805

A UCS administrator needs to update the firmware on a UCS 5108 chassis that contains eight B-Series blades. The firmware update must be performed with minimal downtime. Which update method should be used?

Medium
806

Which three components are required for a fully functional FCoE deployment in a data center? (Choose three.)

Hard
807

In a VXLAN overlay network, which component is responsible for encapsulating and decapsulating packets and resides at the edge of the underlay network?

Easy
808

Which THREE are valid methods for handling BUM traffic in VXLAN? (Choose three.)

Hard
809

Which TWO statements about NPV (N_Port Virtualization) are correct? (Choose two.)

Easy
810

Based on the exhibited output, what can be concluded about the fabric?

Medium
811

An engineer is configuring a UCS service profile for a blade that will boot from local disk. The blade has two SAS drives configured as a RAID 1 mirror. Which policy is required to specify the local disk boot order?

Medium
812

In a Cisco HyperFlex cluster, which component is responsible for ensuring data redundancy and consistency across nodes, and typically requires a separate VM for proper operation?

Medium
813

Which TWO commands are used to verify Fibre Channel connectivity issues on a Cisco MDS switch? (Choose two.)

Medium
814

Which TWO statements accurately describe Cisco UCS service profiles? (Choose two.)

Medium
815

A data center switch port is configured for 802.1X with MAB as fallback. A device that does not support 802.1X is connected. Which method will allow the device to authenticate?

Easy
816

An engineer is troubleshooting a vPC consistency check failure. Which parameter must be identical on both vPC peer switches to avoid a consistency check violation for a vPC member port?

Hard
817

A UCS blade server has two vHBAs configured. The storage array is connected to both Fabric Interconnects. Which multipathing configuration should be used on the host to provide path redundancy without needing additional storage ports?

Easy
818

A financial services company is migrating its core banking application to a new data center built on Cisco Nexus 9000 switches with VXLAN EVPN. The application requires active-active multihoming for its servers, which are dual-homed to two leaf switches. The network team has configured vPC on the leaf switches for the server connections. After the migration, the application team reports that some packets are being dropped during failover events when one of the vPC member links goes down. The network team confirms that vPC is properly configured and the peer-keepalive is functioning. What is the most likely cause of packet drops during failure?

Medium
819

An engineer is deploying data encryption in a SAN environment. Which two methods provide at-rest encryption? (Choose two.)

Hard
820

A network administrator is configuring a Cisco Nexus switch to use NX-API for automation. Which statement about NX-API is true?

Hard
821

An administrator needs to configure a Fibre Channel SAN to support two separate departments that must not see each other's storage. Each department has its own set of initiators and targets. Which technology should be used?

Medium
822

A Fibre Channel switch is experiencing high latency on a specific ISL. The link is operating at 16 Gbps and has high utilization. Which action will most likely reduce latency?

Hard
823

A storage administrator notices that a newly deployed Fibre Channel initiator cannot log in to the SAN switch. The switch is configured for NPV mode. Which condition is most likely causing the issue?

Easy
824

A large enterprise data center uses Cisco ACI with a spine-leaf architecture. The security team requires that all traffic between the Web and App tiers be inspected by a firewall, but traffic within the same tier should be allowed directly. The Web EPG is in VRF PROD with Bridge Domain WEB-BD, and App EPG is in VRF PROD with Bridge Domain APP-BD. The firewall is connected as a service graph device in a different VRF (FW-VRF). The administrator configures a contract between Web and App EPGs that redirects traffic through the firewall. However, after implementation, traffic from Web to App is not passing through the firewall; instead, it is forwarded directly. The contract is applied correctly. What is the most likely cause?

Hard
825

Which of the following correctly describes the role of Fabric Interconnects A and B in a UCS domain?

Medium
826

Which MST configuration parameter must match across all switches in the same MST region?

Medium
827

In ACI, a contract is defined between two EPGs. Which component specifies the type of traffic allowed?

Medium
828

A Cisco MDS switch is configured with NPV mode. A host NPIV-capable HBA is connected to this switch. The HBA needs to log in with multiple N-port IDs to support multiple virtual machines. What must be configured on the MDS switch to allow this?

Medium
829

Which TWO methods can be used to manage Cisco UCS C-series rack servers out-of-band? (Choose two.)

Easy
830

Which feature in NX-OS allows for direct API calls to the switch for automation purposes?

Medium
831

Which THREE factors must be considered when implementing FCIP for SAN extension over a WAN? (Choose three.)

Hard
832

Which iSCSI authentication method provides mutual authentication between initiator and target using a shared secret?

Hard
833

A storage administrator is configuring a new storage array that supports thin provisioning. The array reports 10 TB of physical storage and 50 TB of thin-provisioned logical capacity. Which risk is most important to monitor to avoid out-of-space conditions?

Hard
834

A network engineer is troubleshooting an OSPF adjacency that fails to reach FULL state between two Nexus 9000 switches. Which TWO are common causes for this issue?

Medium
835

A data center engineer is implementing FCoE and must ensure lossless behavior for Fibre Channel traffic over Ethernet. Which Data Center Bridging (DCB) mechanism prevents frame loss by pausing traffic on a per-priority basis?

Hard
836

A company has two Cisco MDS 9700 switches in a dual-fabric SAN. Each fabric has its own set of storage arrays and hosts. The company wants to enable selective communication between specific devices in Fabric A and Fabric B without merging the fabrics. Which Cisco technology should be used?

Hard
837

A UCS administrator needs to ensure that server boot order always starts from the local disk if available, and falls back to a SAN LUN if local disk fails. Which boot policy setting should be used?

Easy
838

An engineer is designing a SAN extension over a WAN link using FCIP. The link has high latency (50 ms RTT). Which configuration is most critical to maintain performance?

Medium
839

Which THREE statements are true regarding YANG models in the context of data center automation? (Choose three.)

Hard
840

A storage administrator wants to implement Fibre Channel zoning to ensure that only specific initiators can access specific targets. The administrator prefers a method that does not require reconfiguration when a host's HBA is replaced with a new one with a different WWPN. Which zoning type meets this requirement?

Medium
841

In a Cisco ACI fabric, which component is responsible for managing the policy repository, fault monitoring, and API endpoints?

Easy
842

Order the steps to configure FCoE on a Cisco Nexus switch with NPV mode.

Medium
843

An engineer is configuring vPC on a pair of Nexus switches. Which statement correctly describes the vPC peer-keepalive link?

Medium
844

A network engineer needs to replace a failed UCS B-Series blade server with a new blade of the same model. The original blade had a custom service profile with specific vNIC and vHBA settings. What is the most efficient method to apply the same configuration to the new blade without manual reconfiguration?

Medium
845

Match each Cisco data center automation tool to its primary use.

Medium
846

Which TWO are important considerations when using Cisco UCS Central for multi-domain management? (Select TWO.)

Easy
847

A HyperFlex cluster uses replication factor 3 (RF3) and consists of 4 all-flash nodes. One node fails permanently. After replacing the node, the cluster re-replicates data. What is the minimum number of additional node failures that can be tolerated without data loss after re-replication completes?

Hard
848

Refer to the exhibit. An administrator notices the blade firmware is outdated. What is the recommended first step to update the blade firmware?

Medium
849

Which of the following is a requirement for iSCSI storage connectivity to support jumbo frames?

Easy
850

Which THREE factors should be considered when sizing buffer credits for a long-haul FC link?

Hard
851

A data center network uses MST with multiple instances. Different VLANs are mapped to different MST instances to utilize multiple spanning tree paths. Which MST parameter must be identical on all switches in the same region to ensure proper operation?

Medium
852

Refer to the exhibit. An NX-API request returns this JSON error. What is the most likely cause?

Medium
853

In a Cisco HyperFlex cluster, a new ESXi host is being added. The host is discovered, but the cluster health status shows 'Degraded'. What should be the first troubleshooting step?

Medium
854

Which THREE factors should be considered when calculating the required number of buffer credits for a long-distance Fibre Channel link? (Choose three.)

Hard
855

A security engineer is deploying IP Source Guard on a Nexus switch. Which two components must be operational for IP Source Guard to function correctly?

Medium
856

A storage administrator reports that a host cannot reach any of the targets on a Cisco MDS 9000 Series switch. The VSAN configuration is correct, and all interfaces are up. Which two commands should be used to verify the Fibre Channel name server database and zoning configuration?

Medium
857

Which two benefits does EVPN provide compared to traditional VPLS? (Choose two.)

Hard
858

An engineer is configuring a HyperFlex cluster with three nodes. Which three components are required for a functional cluster? (Choose three.)

Hard
859

An engineer is configuring a UCS service profile for PXE boot. The server must obtain an IP address from a DHCP server and then download the OS image from a TFTP server. Which boot policy parameters must be configured?

Medium
860

In Cisco TrustSec, what is used to tag traffic based on identity or group membership?

Easy
861

A mid-size organization is upgrading its data center network to support server virtualization. They have deployed two Nexus 9300 switches as access switches for their server racks. The servers are configured with VLAN tagging and connect to the switches using trunks. The network administrator needs to ensure that the switches can provide default gateway services to the servers to reduce latency. They have configured interface VLAN interfaces and HSRP for redundancy. After implementation, the servers can communicate within the same VLAN but fail to reach the default gateway. The network administrator checks the switch configuration and finds that "ip routing" is not enabled globally. What is the most likely impact of this missing configuration?

Easy
862

In a Fibre Channel over Ethernet (FCoE) deployment, which Data Center Bridging (DCB) feature is responsible for preventing frame loss due to congestion and ensuring the lossless behavior required for FCoE traffic?

Hard
863

What is a key advantage of using structured data (e.g., JSON or XML) from Cisco NX-API responses compared to traditional CLI scraping (e.g., using regular expressions)?

Easy
864

A Nexus 9000 switch is configured with VPC. The VPC keepalive link fails. What is the effect on the VPC domain?

Medium
865

A storage administrator needs to monitor traffic between two specific storage arrays without causing any disruption. Which approach should be used?

Medium
866

Which Fibre Channel frame field is used to identify the upper-layer protocol being carried?

Easy
867

A storage administrator needs to ensure that a Fibre Channel zone configuration is operationally effective without disrupting the current active zone set. Which approach should be used?

Medium
868

Which TWO of the following are valid methods to enforce security on a Cisco Nexus switch? (Choose two.)

Easy
869

Which VXLAN component is responsible for encapsulating and decapsulating Ethernet frames into UDP packets for transport over the IP network?

Easy
870

An engineer is configuring AAA on a Cisco Nexus switch to authenticate management access via TACACS+. The switch is reachable, but login attempts repeatedly fail. Which action should the engineer take to isolate the issue?

Medium
871

A company is deploying a new Cisco UCS Mini. They need to ensure that the chassis can be managed from either fabric interconnect. What configuration is required to achieve this?

Medium
872

A UCS administrator needs to perform a firmware upgrade on a UCS B-Series blade server. Which management interface should be used to perform the upgrade remotely?

Medium
873

A data center team is configuring a Cisco MDS switch to support multiple isolated SAN environments on the same physical infrastructure. They need to create separate fabrics that are completely isolated at Layer 2. Which technology should be used?

Medium
874

A data center administrator is implementing Cisco TrustSec on a Nexus 7000 switch to enforce role-based access control. After configuring a security group tag (SGT) classification policy, users report that traffic between two servers is not being tagged. What is the most likely cause?

Medium
875

In a UCS environment, an administrator needs to restrict access to the UCS Manager so that only specific users can configure server policies. Which feature should be used?

Medium
876

A VACL is configured to capture traffic between hosts in the same VLAN. The capture port is configured and the VACL is applied to the VLAN. However, no traffic is being captured. What is a likely reason?

Medium
877

An engineer is configuring a UCS service profile for a blade server that will boot from SAN. The storage is connected via FC SAN. Which policy must be included in the service profile to define the WWPNs for the HBAs?

Hard
878

A UCS domain is experiencing intermittent storage connectivity. The storage admin confirms the SAN is properly zoned and the VSANs are configured. The UCS admin finds that the host interface (HBAs) are showing 'Link Down' intermittently. Which of the following is a likely cause?

Hard
879

An engineer is configuring zoning on a Cisco MDS switch. The requirement is to allow a single host HBA to access two storage array ports. Which zone configuration meets this requirement?

Medium
880

In a vPC environment, which two conditions must be identical on both vPC peer switches to ensure proper consistency? (Choose two.)

Hard
881

A network administrator needs to configure iSCSI multipath I/O (MPIO) for a host connecting to a storage array. Which requirement must be met to ensure that MPIO functions correctly with load balancing?

Medium
882

A network engineer is troubleshooting VXLAN connectivity between two VTEPs. The source VTEP is configured with `nve1` and member VNI 10000. The `show nve peers` command shows the remote VTEP IP but the status is 'Init'. What is a likely cause?

Easy
883

A UCS domain has two fabric interconnects in end-host mode. The engineer needs to implement a policy that ensures all traffic from a specific vNIC is load-balanced across both uplinks to the upstream switches. Which type of policy should be used?

Hard
884

An administrator is deploying a new application in a Cisco ACI fabric. The application requires multicast traffic between end hosts. Which configuration is necessary for multicast in ACI?

Hard
885

In an ACI fabric, a contract between two EPGs uses a filter that permits TCP port 443. The provider EPG is configured with a VMM domain integration. Which statement about the contract's effect is true?

Hard
886

A company recently deployed Cisco UCS B-Series blades with a single Fabric Interconnect. During a maintenance window, the Fabric Interconnect must be upgraded. Which action ensures minimal disruption to running workloads?

Medium
887

An engineer needs to deny all traffic between two EPGs in ACI while allowing other EPG communications. Which construct should be used?

Medium
888

A large enterprise data center is deploying a new application using Cisco ACI with a multi-pod design. The application requires low-latency communication between servers in different pods. The network team has configured the ACI fabric with two pods, each connected via inter-pod network (IPN) switches. After deployment, the application experiences intermittent latency spikes and packet loss. The APIC health scores remain high but the latency issue persists. The team has verified the underlay IP connectivity and MTU settings. What is the most likely cause of the latency issues?

Hard
889

An engineer is designing a UCS Mini deployment for a remote office. The chassis will contain four blade servers. Each server needs two 10GbE connections for data and one 1GbE for management. What is the minimum number of fabric interconnects required?

Medium
890

Which NX-OS command displays the current VLAN configuration on a Nexus switch?

Easy
891

Which TWO statements about Cisco UCS service profiles are correct? (Choose TWO.)

Medium
892

Which RAID level provides both striping and mirroring for high performance and fault tolerance?

Easy
893

A network engineer is configuring a UCS service profile for a new blade server. The requirement is that if the blade fails, it can be replaced with any blade of the same model without reconfiguration. Which UCS feature enables this capability?

Easy
894

A data center engineer is implementing model-driven telemetry using Cisco NX-OS. Which three components are required in the telemetry configuration? (Choose three.)

Hard
895

A UCS domain has two Fabric Interconnects (FI-A and FI-B) in a redundant configuration. A blade server is configured with two vNICs: one for FI-A and one for FI-B. What happens if FI-A fails?

Medium
896

A storage administrator configures zoning on a Cisco MDS switch. The requirement is to prevent any changes to the zone set from taking effect unless explicitly activated. Which configuration is correct?

Hard
897

A company wants to automate backup of running-configurations for 200 Nexus switches. Which solution provides the best combination of reliability and version history?

Medium
898

A data center has 100 Nexus switches in a fabric managed by Cisco Nexus Dashboard Orchestrator (NDO). The network team needs to automate the creation of a new network template that includes multiple VLANs and VRF configurations. They want to ensure that the template is applied consistently across all leaf switches without manual intervention. The engineer writes a Python script using the NDO REST API to create the template and deploy it. However, the deployment fails with an error 'Template validation failed: overlapping IP subnets'. Upon reviewing the template, the engineer notices that two VLANs have overlapping subnet definitions. Which action should the engineer take to resolve this issue efficiently?

Easy
899

An engineer is hardening a Nexus switch. Which THREE actions should be taken? (Choose three.)

Hard
900

An engineer is troubleshooting a BGP EVPN session between a leaf and a spine. The 'show bgp l2vpn evpn summary' output shows the peer state as 'Active'. What does this indicate?

Medium
901

A UCS B-Series blade server shows high CPU latency when processing network I/O. The engineer suspects a bottleneck in the I/O subsystem. Which metric in UCS Manager should be examined first?

Medium
902

An organization adopts Infrastructure as Code (IaC) for network automation. Which tool is commonly used to manage ACI fabric configuration declaratively?

Easy
903

Which TWO statements correctly describe the benefits of thin provisioning in a storage array?

Medium
904

In an ACI fabric, a security policy requires that traffic from EPG1 to EPG2 be denied, but all other inter-EPG traffic is permitted by default. Which type of contract should be used?

Hard
905

An engineer is configuring a UCS server profile for a database application that requires low latency. The server will use a Cisco UCS VIC 1340 adapter. Which vNIC placement policy should be selected to minimize latency?

Easy
906

Which type of I/O module (IOM) is installed in a UCS 5108 blade chassis to provide connectivity between blade servers and the fabric interconnects?

Easy
907

Refer to the exhibit. A UCS B-Series blade shows a failed power supply. The blade is currently running. Which action should the engineer take to replace the power supply without causing service disruption?

Medium
908

An engineer needs to collect streaming telemetry from a Nexus 9000 switch. Which two protocols can be used to transmit telemetry data to a collector? (Choose two.)

Easy
909

In a private VLAN configuration, a host in a community VLAN needs to communicate with a host in the primary VLAN. What configuration is required on the switch?

Medium
910

A network engineer wants to use Terraform to automate the creation of an Application Profile in ACI. Which provider should be used?

Easy
911

A data center engineer is troubleshooting high CPU utilization on a Cisco Nexus 9000 switch. The engineer suspects a distributed denial-of-service (DDoS) attack targeting the switch. To mitigate the attack, the engineer configures a Control Plane Policing (CoPP) policy that drops all ICMP packets destined to the switch. The policy is applied to the control-plane using the 'service-policy input COPP' command. After applying the policy, the switch CPU utilization remains high, and ICMP traffic is still reaching the switch. The engineer verifies that the CoPP policy is applied and that the class-map matches ICMP. The policy-map has the correct police and drop actions. No other CoPP policies are applied. What is the most likely cause of the issue?

Hard
912

In an ACI fabric, an EPG is configured with a contract that provides a service to another EPG. The contract has a filter for TCP port 80. Which component defines the directionality of the communication between the provider and consumer EPG?

Hard
913

Which component connects a UCS 5108 blade chassis to the Fabric Interconnects?

Easy
914

You manage a UCS domain with two fabric interconnects (FI-A and FI-B) in an cluster. The domain contains 8 blade servers. After a power failure, both FIs come back online, but the cluster experiences a split-brain situation where both FIs claim to be primary. The subordinate FI (FI-B) shows all blades as 'Discovery' state. You suspect configuration mismatch. You have console access to both FIs. Which recovery procedure should be performed to restore a stable cluster?

Hard
915

A Fibre Channel switch port is experiencing a high number of CRC errors. Which action should be taken to resolve this issue?

Medium
916

In a VXLAN EVPN fabric using BGP as the control plane, which BGP address family is used to exchange MAC/VTEP reachability information between VTEPs?

Hard
917

In Cisco ACI, which component is responsible for translating EPG communication policies into concrete configuration on leaf switches?

Medium
918

An administrator needs to replace a faulty UCS B200 M5 blade with a new blade of the same model. The original blade had a service profile associated. What is the minimum required action to allow the new blade to take over the workload with the same configuration?

Medium
919

A storage administrator is configuring Fibre Channel zoning on a Cisco MDS switch. The administrator creates a zone, adds members, and activates the zone set. However, the hosts still cannot access the storage targets. What is the most likely cause?

Medium
920

Which two BGP features are commonly used in a Cisco Data Center spine-leaf fabric to achieve optimal ECMP load balancing? (Choose two.)

Medium
921

A data center team is planning a Fibre Channel fabric with multiple Cisco MDS switches. They want to ensure that all switches share the same configuration and that zone changes are propagated automatically. Which feature should be enabled?

Medium
922

Which TWO components are required in a HyperFlex cluster to provide both compute and storage functionality?

Easy
923

A Nexus switch configured with 'feature nxapi' and 'nxapi https port 443' fails to respond to REST API calls from a monitoring system. The engineer can ping the management IP. Which troubleshooting step should be taken first?

Hard
924

An engineer wants to run a Python script on a Nexus switch without copying it to the bootflash. The script interacts with the switch's CLI and file system. Which feature allows this?

Medium
925

An engineer is configuring a Fibre Channel PortChannel between two Cisco MDS switches. What is the maximum number of physical links that can be aggregated into a single PortChannel in Fibre Channel?

Easy
926

Refer to the exhibit. A host with WWPN 10:00:00:00:c9:29:3b:23 can only see its own WWPN but not the target. What is the likely cause?

Medium
927

Which THREE of the following must be enabled to implement 802.1X authentication with MAB fallback on a Cisco Nexus switch for a mixed environment of 802.1X-capable and non-802.1X endpoints? (Choose three.)

Hard
928

A network automation engineer is writing an Ansible playbook to configure Nexus switches. Which three modules are available to manage NX-OS configuration? (Choose three.)

Medium
929

An engineer wants to automate the configuration of VLANs on a Nexus switch using Ansible. Which module from the cisco.nxos collection should be used?

Easy
930

A UCS B-Series blade server (blade 5) has been running a database application for months. Recently, the storage team upgraded the SAN firmware. Since then, the blade experiences intermittent 'SCSI command timeout' errors in the system logs. The application performance degrades periodically. You check the UCS Manager performance data and see that the vHBA statistics show a high number of 'Link Reset' events. The storage array logs show no errors. The fibre channel cables are new. Which step should you take to resolve the issue?

Medium
931

An engineer is configuring Fibre Channel PortChannels on a Cisco MDS switch. Which statement about Fibre Channel PortChannels is true?

Hard
932

In Cisco ACI, when integrating with VMware vSphere via VMM domain, what is the purpose of the 'vCenter Domain' policy?

Hard
933

An Ansible playbook using the cisco.nxos.nxos_config module fails with the error: 'Unsupported parameters for (cisco.nxos.nxos_config) module: connection type setting'. What is the most likely cause?

Hard
934

A data center engineer notices that a UCS B-Series blade server is failing to boot from a SAN LUN that is correctly mapped to the server's WWPN. The SAN switch shows that the LUN is accessible and the zone is configured correctly. The UCS Manager shows the server's vNIC is associated with a vHBA that has the correct WWPN, but the server's BIOS does not list the Fibre Channel boot target. Which configuration is most likely missing?

Medium
935

A storage engineer needs to isolate two Fibre Channel fabrics within the same physical infrastructure using Cisco MDS switches. Which feature allows the creation of multiple logical Fibre Channel networks on the same set of switches?

Medium
936

Refer to the exhibit. An engineer is using an Ansible playbook to configure a Nexus switch. The playbook task uses the nxos_config module to set an MTU value on an interface. What is the most likely issue?

Hard
937

Refer to the exhibit. An automation script is used to configure a new VLAN 40 on Eth1/2 trunk. The script sends the following NX-API command: 'switchport trunk allowed vlan add 40'. After execution, the engineer runs 'show running-config interface eth1/2' and sees that the trunk allowed VLAN list shows '10,20,30'. The automation script logs indicate success for adding VLAN 40, but the running config does not show the change. What is the most likely issue?

Medium
938

Which three of the following are characteristics of the ACI Management Information Tree (MIT)? (Choose three.)

Hard
939

An organization is deploying a new ACI fabric. The design requires that traffic between EPGs in the same bridge domain be allowed by default, but traffic between EPGs in different bridge domains must be denied unless explicitly permitted. Which contract scope configuration meets this requirement?

Hard
940

A storage engineer is planning to migrate from an existing 2 Gbps Fibre Channel fabric to a new 16 Gbps fabric while maintaining connectivity during the cutover. The legacy and new switches are connected via ISL and use the same VSAN. What is a best practice to ensure a seamless migration?

Medium
941

During an FCoE deployment, the server team reports that hosts can reach the storage array but performance is intermittent with periodic timeouts. The network team sees no errors on the FCoE VLAN. The DCB configuration on the upstream switch shows that PFC is enabled for CoS 3. What should the engineer check next?

Hard
942

Refer to the exhibit. An engineer configured NX-API on a Nexus 9000 switch. The REST API client receives 'SSL_ERROR_BAD_CERT_DOMAIN'. What is the most likely cause?

Medium
943

Refer to the exhibit. An engineer notices intermittent packet loss on interface Ethernet 1/1 of the Fabric Interconnect. Based on the transceiver statistics shown, which condition is the most likely cause?

Hard
944

Order the steps for troubleshooting a Fibre Channel link that is not coming up.

Medium
945

Which component in a UCS 5108 blade chassis provides the connectivity between the blade servers and the Fabric Interconnects?

Easy
946

Refer to the exhibit. A network engineer notices that traffic for VNI 10000 is not being encapsulated. What is the most likely reason?

Medium
947

A large financial institution has a Cisco ACI fabric with multiple tenants. The security team requires that all management access to the APIC controllers be authenticated via multi-factor authentication (MFA) using a RADIUS server. The RADIUS server is configured to send a One-Time Password (OTP) challenge during authentication. The current configuration uses local authentication. The engineer needs to implement RADIUS authentication with MFA for APIC GUI and CLI access. The RADIUS server is reachable at 10.10.10.10, shared secret 'SecureSecret123'. The APIC is running software version 4.2(3). The engineer must ensure that local authentication is used as fallback if the RADIUS server is unreachable. Which of the following actions should the engineer take?

Hard
948

In ACI, which model is used for micro-segmentation to allow traffic between EPGs?

Easy
949

A storage administrator wants to ensure that only designated initiators can access a specific target in a Fibre Channel SAN. Which mechanism enforces this policy?

Easy
950

A data center uses NPV to connect edge switches to a core Fibre Channel switch. The edge switches report that some servers cannot log in. What is a likely cause?

Medium
951

In a UCS service profile, which construct is used to abstract the network interface configuration so that the same profile can be used with different blade models?

Easy
952

A Cisco MDS 9000 switch is used in a storage network. The security policy requires that a junior administrator named 'user1' can view zone configurations but cannot make any changes. Currently, 'user1' is assigned the default 'network-operator' role, which allows read-only access to most configuration, but the engineer wants to ensure that zone modification is explicitly denied. The engineer creates a custom role named 'zone-viewer' and assigns it to 'user1'. The role should permit viewing of the running configuration related to zones but deny any command that modifies zone or zoneset configurations. Which configuration best achieves this objective?

Medium
953

Which ECMP load-balancing method is recommended for data center spine-leaf fabrics to ensure optimal traffic distribution?

Medium
954

A data center switch is configured with 802.1X port-based authentication for edge ports. Users report authentication failures. The engineer wants to verify the authentication status of a specific interface. Which command should be used?

Easy
955

A network engineer is configuring a new UCS B-series blade server. The engineer wants the server to automatically inherit network and storage settings without manual configuration when replaced. Which UCS technology enables this capability?

Easy
956

A large enterprise runs a multi-site Cisco ACI fabric with APICs in a cluster. The automation team uses Python scripts with the Cobra SDK to create and manage tenant policies. Recently, after upgrading the APIC firmware from version 4.2(3) to 5.2(1), a script that previously worked now fails with an 'Unauthorized' error when calling the APIC REST API. The script uses a service account with a locally stored password. The automation engineer verifies that the account credentials are correct and that the account is not locked. The script was not modified during the upgrade. Which action should the engineer take to resolve the issue?

Hard
957

An engineer is troubleshooting a BGP EVPN issue where leaf switches are not learning remote MAC addresses. The underlay is reachable and BGP sessions are established. What is a likely cause?

Hard
958

An engineer is configuring Cisco ACI to secure inter-tenant traffic. Tenants 'TenantA' and 'TenantB' need to communicate via a shared service, such as a DNS server in TenantA. How should the contract be configured?

Medium
959

A network engineer is configuring device access control for Cisco NX-OS switches. The requirement is to use a protocol that separates authentication, authorization, and accounting, and encrypts all communication except the header. Which solution meets this requirement?

Easy
960

An engineer is deploying a HyperFlex cluster with three nodes using all-flash storage and replication factor 2 (RF2). What is the minimum number of nodes required to tolerate a single node failure?

Medium
961

An administrator configures 'aaa authentication login default group tacacs+ local'. What happens if the TACACS+ server is unreachable?

Easy
962

An engineer needs to ensure that only authorized servers can connect to a specific switch port in a data center. The port connects to a critical database server with fixed MAC address 00:1a:2b:3c:4d:5e. Which configuration is most appropriate?

Easy
963

What is the primary function of the Cisco Integrated Management Controller (CIMC) on UCS C-series rack servers?

Easy
964

Which management interface is used for out-of-band configuration and remote KVM access to a standalone UCS C-series rack server?

Easy
965

In a vPC setup, what is the purpose of the vPC peer-keepalive link?

Medium
966

Which TWO statements correctly describe the difference between synchronous and asynchronous replication?

Medium
967

A data center switch has multiple access ports configured with spanning-tree portfast. A new server is connected to one of these ports and immediately causes a network loop. What is the most likely cause?

Easy
968

Which TWO of the following are benefits of using Smart Zoning in Cisco MDS switches?

Medium
969

An engineer is designing a Layer 3 network for a data center using OSPF. The core switches are connected to aggregation switches. To optimize convergence, which OSPF network type should be used on the links between core and aggregation?

Medium
970

Which NX-OS command is used to display the consistency status of Virtual Port Channel (vPC) parameters across both vPC peers?

Medium
971

Sequence the steps for configuring OSPF on a Cisco Nexus switch in a data center fabric.

Medium
972

Refer to the exhibit. A UCS domain shows a 'Major' NVRAM backup failure alarm in Intersight. What is the best immediate action?

Hard
973

A server team reports that after connecting a new server to a switchport, the server can receive traffic but cannot send traffic. The port is configured with port security. What is the most likely cause?

Medium
974

A data center automation script uses Python's requests library to call the NX-API for a Nexus 9000 switch. The script works but returns HTTP 400. Which is a likely cause?

Easy
975

An engineer is deploying a HyperFlex cluster and needs to ensure that if a disk fails in a hybrid node, the system can rebuild the data from parity. Which RAID configuration is required on the disk controller for the cache SSD and HDDs in a HyperFlex hybrid node?

Hard
976

A storage administrator needs to isolate traffic between two departments on the same Fibre Channel SAN infrastructure. Each department has its own storage array and hosts. Which technology should be used to create separate logical fabrics without additional hardware?

Medium
977

A data center engineer is troubleshooting connectivity issues between two EPGs in the same tenant on a Cisco ACI fabric. The first EPG 'web_epg' is in VLAN 100 and the second EPG 'db_epg' is in VLAN 200. The contract 'web_to_db' allows TCP port 3306 from web_epg to db_epg. The EPGs are in the same VRF. The engineer has verified that the physical connectivity is correct and the endpoints are learning their IP addresses. However, traffic from web_epg to db_epg is not reaching the destination. The engineer checks the contract and sees that the subject 'mysql_access' has filter 'mysql' with direction 'both'. The provider is db_epg and consumer is web_epg. The engineer also notices that the default action in the contract is 'deny'. What is the most likely cause of the issue?

Medium
978

A Nexus switch experiences high CPU utilization due to excessive ICMP traffic. An engineer applies a CoPP policy that includes a class matching ICMP with a drop action. After applying, legitimate OSPF hello packets are also being dropped. What is the most likely cause?

Hard
979

A storage array supports RAID-5, RAID-6, and RAID-10. The array has 12 disks of equal size. The requirement is to maximize usable capacity while tolerating up to two simultaneous disk failures without data loss. Which RAID level should be chosen?

Medium
980

Which protocol is recommended by Cisco for network device administration AAA due to its separation of authentication, authorization, and accounting?

Easy
981

An engineer is deploying FCoE on a Cisco Nexus 9000v switch in a converged network. The storage array is connected via native Fibre Channel to an MDS switch, and the MDS is connected to the Nexus using an FCoE link. The engineer creates a virtual Fibre Channel (VFC) interface on the Nexus, binds it to an Ethernet interface, and maps VSAN 200 to VLAN 200. The MDS side has an FCoE port configured and enabled. Servers connected to the Nexus with FCoE initiators can successfully log into the storage targets, but performance is very poor and intermittent. The engineer checks for drops on all interfaces and finds none. The engineer also verifies that the FCoE VLAN is not blocked by spanning tree. What is the most likely cause of the performance issue?

Medium
982

Refer to the exhibit. A network engineer has configured a port-channel for OSPF adjacency. What additional configuration is required for the port-channel to operate correctly?

Easy
983

An engineer needs to automate a repetitive configuration task on a Nexus switch. Which method is most suitable for programmatic access?

Medium
984

An engineer observes that ARP packets are being dropped. Based on the exhibit, what is the drop rate percentage for ARP packets?

Hard

Frequently asked questions

What does the troubleshooting domain cover on the 350-601 exam?
troubleshooting questions test whether you can apply the concept in context, not just recognise a definition.
How many questions are in this domain?
This page lists all 984 troubleshooting questions in the 350-601 question bank. The actual exam draws from this domain proportionally to its weighting in the official exam blueprint.
What is the best way to practise this domain?
Start with a short focused session (10 questions) to identify gaps, then work through explanations. Repeat with a longer session once the weak areas feel solid.
Can I practise only troubleshooting questions?
Yes — the session launcher on this page filters questions to this domain only. Choose any session length for inline explanations and scoring.