Cisco 350-601 Online Practice Questions and Exam Preparation

Cisco 350-601 Online Questions & Answers

• Question 221:

  Refer to the exhibit.

  

  Which two statements about the routing table of the leaf switch are true? (Choose two.)

  A. The next hop 10.0.1.14 for route 172.16.99.0/24 is the TEP address of a border leaf in ACI.
  B. 172.16.100.0/24 is a BD subnet in ACI.
  C. The next hop 10.0.8.65 for route 10.20.1.0./24 is the TEP address of a border leaf in ACI.
  D. The next hop 10.1.168.95 for route 172.16.100.0/24 is the TEP address of a border leaf in ACI.
  E. 10.20.1.0./24 is a BD subnet in ACI.
  D. The next hop 10.1.168.95 for route 172.16.100.0/24 is the TEP address of a border leaf in ACI.
  E. 10.20.1.0./24 is a BD subnet in ACI.

• Question 222:

  A network engineer repeatedly saves a configuration on Catalyst switches to NVRAM using the write memory command.

  What action should be taken to implement the same action on Nexus switches?

  A. Use the write memory command to save the configuration.
  B. Use the alias command to use the write memory command.
  C. Use the exit command to leave the configuration mode and save the configuration automatically.
  D. Use the wri command to use the copy running-config startup-config command.
  B. Use the alias command to use the write memory command.

  ---

  Explanation

  https://community.cisco.com/t5/switching/write-command-on-nexus-switchs/td-p/1958386

• Question 223:

  Refer to the exhibit.

  

  A network engineer uses Ansible to automate the provisioning of different ACI tasks.

  The current design requires that each application profile has a single applications.

  All application EPGs must belong to the same configured bridge domain.

  Which set of actions must be taken to accomplish this goal?

  A. Delete line ap: App{{item}} under create ap task. Delete line with_sequence: start=1 end=100 under create epg task.
  B. Add line ap: App{{item}} under create epg task. Add line with_sequence: start=1 end=100 under create ap task
  C. Delete line ap: App{{item}} under create ap task. Add line with_sequence: start=1 end=100 under create ap task.
  D. Add line ap: App{{item}} under create epg task. Delete line with_sequence: start=1 end=100 under create epg task
  B. Add line ap: App{{item}} under create epg task. Add line with_sequence: start=1 end=100 under create ap task

  ---

  
  

• Question 224:

  An engineer must implement private VLANs for a group of Cisco UCS 8-Series servers. The primary VLAN is present, but the secondary VLAN must Be added to Both fabrics.

  Which configuration set accomplishes this task?

  A. UCS-A# scope eth-uplink UCS-A /eth-uplink # create vlan vlan1981 1981 UCS-A /eth-uplink/vlan* # set sharing none
  B. UCS-A# scope eth-uplink UCS-A /eth-uplink # create vlan vlan1981 1981 UCS-A /eth-uplink/vlan* # set sharing isolated
  C. UCS-A# scope eth-uplink UCS-A /eth-uplink # scope fabric a UCS-A /eth-uplink/fabric # create vlan vlan1981 1981 UCS-A /eth-uplink/fabric/vlan* # set sharing secondary
  D. UCS-A# scope eth-uplink UCS-A /eth-uplink # scope fabric a UCS-A /eth-uplink/fabric # create vlan vlan1981 1981 UCS-A /eth-uplink/fabric/vlan* # set sharing private
  B. UCS-A# scope eth-uplink UCS-A /eth-uplink # create vlan vlan1981 1981 UCS-A /eth-uplink/vlan* # set sharing isolated

  ---

  Explanation

  sharing parametres - set sharing {isolated | none | primary}

  https://www.cisco.com/en/US/docs/unified_computing/ucs/sw/cli/config/guide/1.4.1/CLI_Config_Guide_1_4_1_chapter14.html#task_1BD62D1911F74857BD5B2EBB458CE4EC

• Question 225:

  A Cisco ACI engineer must configure an access port on a Cisco ACI leaf switch. The access policy should be configured so that it supports L3Out connectivity concurrently with several EPGs that are mapped to this interface with the static port method.

  How should the access policy be configured?

  A. by linking the interface policy group to multiple Attachable Access Entity Profiles
  B. with two interface policy groups that are linked to the same interface profile port selector
  C. by mapping a single physical domain, mapped to the L3out and EPG interfaces
  D. with a single Attachable Access Entity Profile that is linked to the corresponding routed domain and physical domain
  D. with a single Attachable Access Entity Profile that is linked to the corresponding routed domain and physical domain

• Question 226:

  Refer to the exhibit.

  

  A network engineer must Improve the convergence time during vPC primary peer device failure and recovery.

  Which set of actions is required on both vPC switches to accomplish this task?

  A. Configure the same system priority. Enable LACP toward the access switches.
  B. Configure the same STP priority. Enable the peer-switch feature.
  C. Configure vPC role priority. Enable the peer-gateway feature.
  D. Configure port channels with BPDU guard. Globally enable the loop guard feature.
  B. Configure the same STP priority. Enable the peer-switch feature.

  ---

  Explanation

  vPC Peer Switch

  The vPC peer switch feature was added to Cisco NX-OS to address performance concerns around STP convergence. This feature allows a pair of Cisco Nexus 9000 Series devices to appear as a single STP root in the Layer 2 topology. This feature eliminates the need to pin the STP root to the vPC primary switch and improves vPC convergence if the vPC primary switch fails. To avoid loops, the vPC peer link is excluded from the STP computation. In vPC peer switch mode, STP BPDUs are sent from both vPC peer devices to avoid issues related toSTP BPDU timeout on the downstream switches, which can cause traffic disruption.

  This feature can be used with the pure peer switch topology in which the devices all belong to the vPC.

• Question 227:

  An engineer must configure a monitoring solution for a Cisco Nexus 9000 Series Switch based data center. The solution must provide real-time insight into the network health with subscription-based monitoring. The monitoring must be initiated from the client side, and the data must be sent via encryption.

  Which configuration steps complete the configuration?

  A. Configure Grafana on the Nexus switch. Specify the logging certificate. Enable syslog level 7 export to Grafana.
  B. Set the telemetry feature on the Nexus switch. Specify a certificate for telemetry transport. Configure a sensor group and destination.
  C. Activate SNMPv3 on the Nexus switch. Set the globalEnforcePriv parameter. Configure an SNMP agent to poll information.
  D. Enable GRPC on the Nexus switch. Generate a certificate. Configure gNMI inputs in Telegraf and output to InfluxDB.
  B. Set the telemetry feature on the Nexus switch. Specify a certificate for telemetry transport. Configure a sensor group and destination.

  ---

  Explanation

  About Telemetry - Collecting data for analyzing and troubleshooting has always been an important aspect in monitoring the health of a network. Cisco NX-OS provides several mechanisms such as SNMP, CLI, and Syslog to collect data from a network. These mechanisms have limitations that restrict automation and scale. One limitation is the use of the pull model, where the initial request for data from network elements originates from the client. The pull model does not scale when there is more than one network management station (NMS) in the network. With this model, the server sends data only when clients request it. To initiate such requests, continual manual intervention is required. This continual manual intervention makes the pull model inefficient. A push model continuously streams data out of the network and notifies the client. Telemetry enables the push model, which provides near-real-time access to monitoring data.

  https://www.cisco.com/c/en/us/td/docs/switches/datacenter/nexus9000/sw/7-x/programmability/guide/b_Cisco_Nexus_9000_Series_NX-OS_Programmability_Guide_7x/b_Cisco_Nexus_9000_Series_NX-OS_Programmability_Guide_7x_chapter_011000.html

• Question 228:

  An engineer is configuring AAA authentication on an MDS 9000 switch. The LDAP server is located under the IP 10.10.2.2. The data sent to the LDAP server should be encrypted.

  Which command should be used to meet these requirements?

  A. Idap-server host 10.10.2.2 enable-ssl
  B. Idap-server 10.10.2.2 port 443
  C. Idap server host 10.10.2.2 key SSL_KEY
  D. Idap-server 10.10.2.2 key SSL_KEY
  A. Idap-server host 10.10.2.2 enable-ssl

  ---

  Explanation

  https://www.cisco.com/c/en/us/td/docs/switches/datacenter/mds9000/sw/6_2/configuration/guides/security/nx-os/sec_cli_6-x/cradtac1.html

• Question 229:

  Refer to the exhibit. An engineer configures FCoE in a newly installed data center.

  Which configuration must be applied to activate VSAN 100 on VFC 100?

  

  A. Map an FCoE VLAN to VSAN 100.
  B. Allow VSAN 100 on interface eth1/12.
  C. Issue the shutdown lan command on VFC 100.
  D. Configure a VLAN on VFC 100.
  A. Map an FCoE VLAN to VSAN 100.

• Question 230:

  DRAG DROP

  Drag and drop the characteristics from the left onto the NAS protocols on the right.

  Select and Place: