Cisco 350-601 Online Practice Questions and Exam Preparation

Cisco 350-601 Online Questions & Answers

• Question 101:

  Refer to the exhibit.

  

  What is the result of implementing this configuration?

  A. The TACACS+ server uses the type-6 encrypted format.
  B. The switch queries the TACACS+ server by using a clear text PAP login.
  C. The timeout value on the TACACS+ server is 10 seconds.
  D. The switch queries the TACACS+ server by using an encrypted text PAP login.
  D. The switch queries the TACACS+ server by using an encrypted text PAP login.

  ---

  Explanation

  tacacs-server key

  To configure a global TACACS+ shared secret key, use the tacacs-server key command. To remove a configured shared secret, use the no form of this command.

  tacacs-server key [0 | 7] shared-secret

  Syntax Description 7 (Optional) Configures a preshared key specified in encrypted text to authenticate communication between the TACACS+ client and server.

• Question 102:

  A network administrator attempts to automate the provisioning of several new Cisco Nexus switches. The administrator prepares a bootstrap configuration script for the task. Due to the number of switches, a zero-touch provisioning solution is preferred. Additionally, some switches arrive with outdated software and should be automatically upgraded as part of the provisioning workflow.

  Which solution meets the requirements?

  A. Ansible
  B. NX-API
  C. POAP
  D. DHCP
  C. POAP

  ---

  Explanation

  POAP (PowerOn Auto Provisioning) is the solution that meets the given requirements. POAP is a feature in Cisco Nexus switches that automates the provisioning process. When a new switch boots up, it automatically obtains its IP address via DHCP and then contacts a designated POAP server to download a configuration script that can perform the necessary setup tasks. POAP can also check the switch's software version and automatically upgrade it if necessary.

• Question 103:

  Refer to the exhibit.

  

  An administrator connects a Cisco Nexus Series Switch to the Cisco ACI fabric. The connectivity must allow Cisco Discovery Protocol, LLDP, and LACP.

  Which action enables the protocols between Switch-1 and the ACI leaf switches?

  A. Implement an interface policy group.
  B. Activate a leaf interface.
  C. Enable an existing interface selector.
  D. Configure an interface profile.
  A. Implement an interface policy group.

• Question 104:

  Which two statements describe about modifying Cisco UCS user accounts are true? (Choose two.)

  A. The password of the user account must contain a minimum of 10 characters.
  B. Disabling a user account maintains all of the data in the Cisco UCS Fabric Interconnect.
  C. Local user accounts override the same account on a remote authentication server, such as TACACS, RADIUS, or LDAP.
  D. The password of the user account expires in 30 days.
  E. The admin account can be used to log on by using SSH only.
  B. Disabling a user account maintains all of the data in the Cisco UCS Fabric Interconnect.
  C. Local user accounts override the same account on a remote authentication server, such as TACACS, RADIUS, or LDAP.

  ---

  Explanation

  https://www.cisco.com/c/en/us/td/docs/unified_computing/ucs/ucs-manager/GUI-User-Guides/Admin-Management/3-1/b_Cisco_UCS_Admin_Mgmt_Guide_3_1/b_UCSM_Admin_Mgmt_Guide_chapter_01.html

• Question 105:

  A network engineer must configure a vPC on a pair of Cisco Nexus switches connected to a third-party load balancer. The connection must meet these requirements:

  The port channel must be negotiated with the load balancer via an open standards protocol.

  Traffic that is sent directly to the physical MAC address of the other peer switch must be forwarded locally by the receiving switch.

  Which command set accomplishes these goals?

  A. vpe domain 10 peer-gateway interface Eth1/1 channel-group 1 mode on
  B. vpe domain 10 peer-switch interface Eth1/1 channel-group 1 mode on
  C. vpe domain 10 peer-switch interface Eth1/1 channel-group 1 mode active
  D. vpc domain 10peer-gateway interface Eth1/1 channel-group 1 mode active
  D. vpc domain 10peer-gateway interface Eth1/1 channel-group 1 mode active

• Question 106:

  DRAG DROP

  A network engineer must implement a telemetry solution to collect real-time structured data in a large-scale network. Drag and drop the actions from the left into the order on the right to implement the solution. Not all actions are used.

  Select and Place:

  

  

  ---

  switch# show running-config | section telemetry

  feature telemetry

  telemetry

  destination-group 100 ip address 1.2.3.4 port 50004 protocol gRPC encoding GPB

  sensor-group 100 path sys/bgp/inst/dom-default depth 0

  subscription 600

  dst-grp 100

  snsr-grp 100 sample-interval 7000

  switch# show running-config | section telemetry > telemetry_running_config switch# show file bootflash:telemetry_running_config

  feature telemetry

  telemetry

  destination-group 100 ip address 1.2.3.4 port 50004 protocol gRPC encoding GPB

  sensor-group 100 path sys/bgp/inst/dom-default depth 0

  subscription 600

  dst-grp 100

  snsr-grp 100 sample-interval 7000

  switch#

• Question 107:

  Refer to the exhibit.

  

  Which configuration ensures that the Cisco Nexus 7000 Series Switches are the primary devices for LACP?

  A. N7K_A(config-vpc-domain)# role priority 1 N7K_B(config-vpc-domain )# role priority 2
  B. N7K_A(config-vpc-domain)# system-priority 32768 N7K_B(config-vpc-domain)# system-priority 32768
  C. N7K_A(config-vpc-domain)# system-priority 100 N7K_B(config-vpc-domain)# system-priority 200
  D. N7K_A(config-vpc-domain)# system-priority 4000 N7K_B(config-vpc-domain)# system-priority 4000
  D. N7K_A(config-vpc-domain)# system-priority 4000 N7K_B(config-vpc-domain)# system-priority 4000

  ---

  Explanation

  Option A: Incorrect - role priority influences vPC primary/secondary election.

  Option B: Incorrect - System priorities match however uses default values of lacp, would not ensure n7k's are primary devices. Option C: Incorrect - vPC System priorities do not match between the peers, this config would result in vPC's never coming up. Option D: Correct - Defining a system priority of 4000 in vpc domain config ensures lacp priority for vPC's would be 4000, the lower the number the more likely to become lacp master. What is the purpose and usage of the system priority command under vpc configuration mode? The vpc quick config guide mentioned: "You should manually configure the vPC system priority when you are running Link Aggregation Control Protocol (LACP) to help ensure that the vPC peer devices are the primary devices on LACP".

  When you manually configure the system priority, ensure that you configure the same priority value on both vPC peer devices. If these values do not match, vPC will not come up.

• Question 108:

  Multiple roles are applied to a user on the Cisco MDS 9000 Series Switch.

  Which statement is true?

  A. Any commands that have conflicting settings between roles are denied.
  B. Access to a command takes priority over being denied access to a command.
  C. The first role assigned takes precedence over subsequent roles.
  D. The last role assigned takes precedence over previous roles.
  B. Access to a command takes priority over being denied access to a command.

  ---

  Explanation

  https://www.cisco.com/c/en/us/td/docs/switches/datacenter/mds9000/sw/5_0/configuration/guides/sec/nxos/sec/clicfgur.html

  https://www.cisco.com/c/en/us/td/docs/switches/datacenter/mds9000/sw/8_x/config/security/cisco_mds9000_security_config_guide_8x/configuring_users_and_common_roles.html

• Question 109:

  An engineer must send JSON-encoded telemetry data to an external collector. The transport mechanism must prevent tampering or forgery of the data.

  Which protocol accomplishes this goal?

  A. GPB
  B. HTTP
  C. gRPC
  D. DTLS
  D. DTLS

• Question 110:

  Refer to the exhibit.

  

  The Cisco NX-OS scheduler must run every day at 3:00 a.m.

  Which code snippet completes the script?

  A. time start daily 3:00
  B. time start weekly 7 3:00
  C. time weekly 7 3:00
  D. time daily 3:00
  D. time daily 3:00