Cisco CCNP 350-601 Questions & Answers

• Question 21:

  A company plans to migrate some of its services to the cloud. The company does not want to manage or control the underlying cloud infrastructure. It also wants to maintain control over the deployment of its applications and configuration settings of the application-hosting environment. Which cloud service model meets these requirements?

  A. Infrastructure as a Service

  B. Function as a Service

  C. Platform as a Service

  D. Software as a Service

  Correct Answer: C

• Question 22:

  Refer to the exhibit.

  

  A network engineer is using tcpdump to capture a snapshot of OSPF-related traffic on a specific Cisco NX-OS switch port. For security reasons, the capture must be taken using an embedded container that is already deployed on the Cisco Nexus device. Which command completes the script?

  A. guestshell

  B. guestshell-bash

  C. run guestshell

  D. run bash

  Correct Answer: A

• Question 23:

  Refer to the exhibit.

  

  An engineer is configuring a Cisco MDS 9000 Series Switch for the first time. After the initial setup process, the name server at IP 192.168.10.11 is missing from the configuration. Which set of actions completes the configuration?

  A. Enter no at step 21 and reinitialize the installer. Press the Esc key to access ROMMON mode.

  B. Enter no at step 21 and reload the switch. Configure the advanced IP options.

  C. Enter yes at step 21 to edit the configuration. Add the line dns-server 192.168.10.11.

  D. Enter yes at step 21 and log in. Modify the startup configuration DNS

  Correct Answer: B

• Question 24:

  A network architect must design an automation solution to initially support networking and also support the server infrastructure in the future. To keep configuration consistency, the network team requires a solution that enforces the desired state of the network and reverts any manual configuration. Which solution meets these goals?

  A. NX-API

  B. Ansible

  C. Terraform

  D. Puppet

  Correct Answer: D

• Question 25:

  An engineer must integrate Cisco ACI with a VMware vSphere environment. The requirement is to use a VMware Distributed Virtual Switch and to assign the encapsulation VLAN of the EPG from the VLAN pool. Which configuration set accomplishes this goa?

  A. Create a VMM domain association under the EPGs Create a VLAN pool with static alocated VLANs.

  B. Create a physical domain association under the EPGs Create a VLAN pool with static alocated VLANs.

  C. Create a physical domain association under the EPGs. Create a VLAN pool with oVnarmc alocated VLANs

  D. Create a VMM domain association under the EPGs Create a VLAN pool with dynamic alocated VLANs.

  Correct Answer: D

• Question 26:

  A network engineer must migrate a Cisco WSA virtual appliance from one physical host to another physical host by using VMware vMotion. What is a requirement for both physical hosts?

  A. The hosts must run Cisco AsyncOS 10.0 or greater.

  B. The hosts must have access to the same defined network.

  C. The hosts must run different versions of Cisco AsyncOS.

  D. The hosts must use a different datastore than the virtual appliance

  Correct Answer: B

• Question 27:

  An engineer deploys a new Cisco Nexus 5000 Series Switch in an existing environment with strict security policies. The new device should meet these requirements: Secure end-user ports with minimum configuration effort. Log security breaches and require manual recovery. Retain the switch configuration if the device restarts. Which configuration must be used?

  

  A. Option A

  B. Option B

  C. Option C

  D. Option D

  Correct Answer: C

• Question 28:

  Refer to the exhibit.

  

  An engineer must mirror the traffic on a switch. The engineer locates the server port that requires monitoring on switch1, but the packet sniffer is on switch2. The engineer must configure the source IP address on switch1. Which command accomplishes this goal?

  A. monitor session 10 type erspan-source

  B. monitor erspon origin ip-address 209.165.200.225

  C. source ip 209.165.200.225

  D. source interface vbn512

  Correct Answer: B

• Question 29:

  An engineer must perform a POAP deployment of a Cisco Nexus 9000 Series Switch The switch must automatically receive its software image and configuration file upon power-on. Also, only UDP is permitted between the Nexus 9000 switch and the server that hosts the Cisco NX-OS system images.

  Which set of actions completes the configuration?

  A. Enable option 67. Define TFTP transfer protocol

  B. Enable option 43 Define HTTP transfer protocol.

  C. Enable option 46. Define TFTP transfer protocol

  D. Enable option 35. Define HTTP transfer protocol.

  Correct Answer: A

• Question 30:

  An engineer must optimize ARP responses and reduce unnecessary ARP broadcasts over the VXLAN/EVPN fabric. Which action accomplishes these tasks?

  A. Configure ip proxy-arp under the VLAN SVI associated with the VXLAN VNI.

  B. Configure ip proxy-arp within the VXLAN VNI configuration under the VTEP NVE interface.

  C. Configure suppress-arp within the VXLAN VNI configuration under the VTEP NVE interface.

  D. Configure suppress-arp under the VLAN SVI associated with the VXLAN VNI.

  Correct Answer: C