Courseiva
← Back to Cisco DCCOR / CCNP Data Center Core 350-601 questions

Scenario-based practice

Hard Difficulty Questions

Practise Cisco DCCOR / CCNP Data Center Core 350-601 practice questions — original exam-style scenarios covering every exam domain, with detailed explanations, wrong-answer analysis, and common exam traps.

Start full practice testRead exam guide
20
scenario questions
350-601
exam code
Cisco
vendor

Scenario guide

How to approach hard difficulty questions

These are the questions most candidates get wrong. They require connecting multiple concepts, reading tricky output, or knowing edge-case behaviour that isn't on most study cards. Practising them trains you to operate under uncertainty — a necessary skill on the real exam.

Quick answer

Hard Difficulty Questions questions test whether you can apply the concept in context, not just recognise a definition.

How the topic appears in realistic exam-style scenarios.

Which detail in the question changes the correct answer.

How to eliminate plausible but wrong options.

How to connect the question back to the wider exam objective.

Related practice questions

Related 350-601 topic practice pages

Scenario questions usually connect to one or more exam topics. Use these links to review the underlying concepts behind the scenario.

Network practice questions

Sharpen your 350-601 knowledge of Network.

Storage Network practice questions

Practise 350-601 questions linked to Storage Network.

Automation practice questions

Work through 350-601 questions on Automation.

Compute practice questions

Sharpen your 350-601 knowledge of Compute.

Security practice questions

Security practice questions for 350-601.

350-601 fundamentals practice questions

Targeted 350-601 practice covering 350-601 fundamentals.

350-601 scenario practice questions

Practise 350-601 questions linked to 350-601 scenario.

350-601 troubleshooting practice questions

Sharpen your 350-601 knowledge of 350-601 troubleshooting.

Practice set

Practice scenarios

Question 1hardmultiple choice
Open the full VLAN trunking answer →

During an FCoE deployment, the server team reports that hosts can reach the storage array but performance is intermittent with periodic timeouts. The network team sees no errors on the FCoE VLAN. The DCB configuration on the upstream switch shows that PFC is enabled for CoS 3. What should the engineer check next?

Question 2hardmultiple choice
Read the full VRF explanation →

In a Cisco ACI fabric, a tenant has multiple bridge domains in the same VRF all with 'Unicast Routing' enabled and hardware proxy mode. However, endpoints in different BDs within the same VRF cannot communicate even with a contract. What is a possible reason?

Question 3hardmulti select
Full question →

Which TWO statements about Cisco TrustSec in a data center are true?

Question 4hardmultiple choice
Full question →

Refer to the exhibit. A server connected to Ethernet1/1 is experiencing intermittent connectivity. The server sends BPDUs, causing the switch to place the port into a blocking state. Which configuration change should be made to prevent this while maintaining rapid convergence?

Exhibit

interface Ethernet1/1
  description Server-01
  switchport mode trunk
  switchport trunk allowed vlan 10,20,30
  spanning-tree port type edge trunk
  no shutdown
Question 5hardmultiple choice
Study the full AAA explanation →

A large financial institution has a Cisco ACI fabric with multiple tenants. The security team requires that all management access to the APIC controllers be authenticated via multi-factor authentication (MFA) using a RADIUS server. The RADIUS server is configured to send a One-Time Password (OTP) challenge during authentication. The current configuration uses local authentication. The engineer needs to implement RADIUS authentication with MFA for APIC GUI and CLI access. The RADIUS server is reachable at 10.10.10.10, shared secret 'SecureSecret123'. The APIC is running software version 4.2(3). The engineer must ensure that local authentication is used as fallback if the RADIUS server is unreachable. Which of the following actions should the engineer take?

Question 6hardmultiple choice
Full question →

A HyperFlex cluster uses replication factor 3 (RF3) and consists of 4 all-flash nodes. One node fails permanently. After replacing the node, the cluster re-replicates data. What is the minimum number of additional node failures that can be tolerated without data loss after re-replication completes?

Question 7hardmultiple choice
Full question →

A Cisco MDS switch is configured as an NPV switch to connect to a core switch. Which statement about NPV operation is true?

Question 8hardmultiple choice
Full question →

In an ACI fabric, an EPG is configured with a contract that provides a service to another EPG. The contract has a filter for TCP port 80. Which component defines the directionality of the communication between the provider and consumer EPG?

Question 9hardmultiple choice
Full question →

A UCS Central administrator is creating a global service profile policy that applies to multiple UCS domains. The policy must include boot order settings. What is the recommended approach to ensure consistency across domains?

Question 10hardmulti select
Read the full Ansible explanation →

Which TWO are best practices when automating ACI fabric configuration using Ansible?

Question 11hardmultiple choice
Full question →

In a Cisco HyperFlex cluster, the management plane uses vCenter, but the data plane uses which protocol to replicate data across nodes?

Question 12hardmultiple choice
Open the full VLAN trunking answer →

A data center engineer is designing a UCS Manager solution that requires VLAN segmentation across multiple fabric interconnects. The network team requires that each VLAN is assigned a unique native VLAN ID per fabric. Which pool configuration supports this requirement?

Question 13hardmultiple choice
Study the full Python automation breakdown →

A large enterprise runs a multi-site Cisco ACI fabric with APICs in a cluster. The automation team uses Python scripts with the Cobra SDK to create and manage tenant policies. Recently, after upgrading the APIC firmware from version 4.2(3) to 5.2(1), a script that previously worked now fails with an 'Unauthorized' error when calling the APIC REST API. The script uses a service account with a locally stored password. The automation engineer verifies that the account credentials are correct and that the account is not locked. The script was not modified during the upgrade. Which action should the engineer take to resolve the issue?

Question 14hardmultiple choice
Full question →

A Cisco UCS upgrade from release 3.1(1) to 4.0(4) is planned. The current release has a known issue that affects NVRAM backup. What is the best practice to avoid an outage during this upgrade?

Question 15hardmultiple choice
Open the full BGP breakdown →

In a VXLAN BGP EVPN fabric, which component is responsible for handling BUM traffic using ingress replication, and how does the VTEP learn the list of remote VTEPs to replicate to?

Question 16hardmultiple choice
Open the full BGP breakdown →

A network engineer is configuring Cisco Nexus VXLAN with BGP EVPN. The VTEPs are using loopback0 as the NVE source. The physical interfaces are up, but the NVE interface remains down. What is the most likely cause?

Question 17hardmultiple choice
Full question →

Based on the exhibited FLOGI database, what is the state of the interface fc1/1?

Exhibit

Refer to the exhibit.

switch# show flogi database vsan 10
INTERFACE  VSAN  FCID            PORT NAME               NODE NAME
fc1/1      10    0x020001  50:00:00:00:00:00:00:01  50:00:00:00:00:00:00:01
fc1/1      10    0x020002  50:00:00:00:00:00:00:02  50:00:00:00:00:00:00:02
fc1/2      10    0x020003  10:00:00:00:00:00:00:01  20:00:00:00:00:00:00:01
Total entries: 3
Question 18hardmultiple choice
Full question →

An engineer is designing an ACI fabric and needs to provide connectivity to an external Layer 3 network. Which construct must be configured to achieve this?

Question 19hardmultiple choice
Study the full QoS explanation →

An engineer notices that a UCS server with a service profile using a QoS policy for FC traffic experiences excessive latency during heavy workloads. The Fibre Channel fabric is configured for lossless operation. Which design issue is most likely causing the latency?

Question 20hardmultiple choice
Full question →

Refer to the exhibit. A UCS domain shows a 'Major' NVRAM backup failure alarm in Intersight. What is the best immediate action?

Exhibit

Refer to the exhibit.

Intersight API response (partial):
{
  "Results": [
    {
      "Moid": "5f6d8e2b1c3d4e5f6a7b8c9d",
      "Name": "UCS-Domain-1",
      "Version": "4.1(2a)",
      "ConnectionStatus": "Connected",
      "DeviceModel": "UCS-FI-6348",
      "State": "Operational",
      "Alarms": [
        {"Severity": "Major", "Description": "NVRAM backup failure"}
      ]
    }
  ]
}

These 350-601 practice questions are part of Courseiva's free Cisco certification practice question bank. Courseiva provides original exam-style 350-601 questions with detailed explanations, topic-based practice, mock exams, readiness tracking, and study analytics.