Cisco 350-601 Online Practice Questions and Exam Preparation

Cisco 350-601 Online Questions & Answers

• Question 321:

  An engineer must implement protection against ICMP DoS attacks on a Cisco Nexus 9000 Series Switch. The requirement is to rate-limit ICMP without denying all other ICMP traffic. The ICMP trafic currently passing through the Cisco Nexus 9000 device must not be affected.

  Which configuration accomplishes these goals?

  A. Configure SNMP traps to send the ICMP notification if the CPU utilization is more than 90%.
  B. Reconfigure the Layer 3 interfaces to be in the non-default VRF and ICMP broadcast storm control
  C. Create an access list to deny ICMP traffic and apply it to all interlaces in the inside direction.
  D. Apply a control plane service policy that matches all ICMP traffic to drop the traffic fiat exceeds the threshold.
  D. Apply a control plane service policy that matches all ICMP traffic to drop the traffic fiat exceeds the threshold.

• Question 322:

  An engineer must configure a named VSAN when the fabric interconnect is in Fibre Channel switch mode.

  The VSAN must meet these requirements:

  1. Named VSAN must be called `VSAN10`.

  2. VSAN ID must be 10.

  3. FCoE ID must be 20.

  4. VSAN 10 must be attached to port 2 in slot 1.

  Which command set configures a VSAN when the fabric interconnect is in Fibre Channel switch mode?

  

  A. Option A
  B. Option B
  C. Option C
  D. Option D
  A. Option A

• Question 323:

  Refer to the exhibit.

  

  An engineer must create a Bash script to run in the Cisco NX-OS Guest Shell. The script must loop through the available namespaces and output all registered interfaces.

  Which code snippet completes the script?

  A. chvrf "$ns";
  B. echo "$ns";
  C. ifconfig "$ns";
  D. vrfinfo"$ns";
  C. ifconfig "$ns";

  ---

  Explanation

  https://www.cisco.com/c/en/us/td/docs/switches/datacenter/nexus9000/sw/7-x/programmability/guide/b_Cisco_Nexus_9000_Series_NX-OS_Programmability_Guide_7x/Guest_Shell.html

• Question 324:

  After a Cisco Nexus 7000 Series Switch chassis replacement, the administrator discovers that all vPC- enabled LACP port channels are reinitialized. The administrator wants to prevent this issue the next time the chassis is replaced.

  Which two actions must be taken to meet this requirement before the isolated device is reloaded? (Choose two)

  A. Set the vPC MAC address to a lower value than the peer
  B. Change the vPC system-priority of the replacement chassis to a higher value than the peer if.
  C. Change the vPC system-priority of the replacement chassis to a lower value than the peer.
  D. Set the vPC MAC address to a higher value than the peer
  E. Configure auto-recovery to the disable state on both peers
  D. Set the vPC MAC address to a higher value than the peer
  E. Configure auto-recovery to the disable state on both peers

• Question 325:

  An engineer must deploy a new Cisco MDS 9000 Series Switch and be able to receive LinkUp/LinKDown notifications that were sent using a secure industry standard.

  Which technology must be used to accomplish this goal?

  A. PMON
  B. SPAN
  C. RMON
  D. SNMP
  D. SNMP

• Question 326:

  A company with a small network team purchases 10 Cisco Nexus 9000 Series Switches for a network refresh. Some elements of the existing network infrastructure will be retained including DHCP and DNS servers. The company wants the network team to use PowerOn Auto Provisioning (POAP) to configure the switches, but the team only has experience with manual configuration.

  Which two additional network infrastructure components must be configured to use POAP? (Choose two.)

  A. NETBOOT host discovery
  B. GIT server
  C. SCP file repository
  D. TFTP script server
  E. SNMP trap receiver
  C. SCP file repository
  D. TFTP script server

  ---

  Explanation

  SCP & of course TFTP seem the most likely answers - no reference to NETBOOT,GIT,SNMP from looking at cisco docs but SCP is a default protocol

• Question 327:

  Which feature of the Cisco Nexus Dashboard Insights uses Duo to reduce the risk of static passwords?

  A. single sign-on
  B. cloud-site onboarding
  C. multifactor authentication
  D. air-gap support
  C. multifactor authentication

• Question 328:

  An engineer is seeking the most optimal on demand CPU performance while configuring the BIOS settings of UCS C-series rack mount server.

  What setting will accomplish this goal?

  A. C0/C1 state
  B. C6 Retention
  C. C2 state
  D. C6 non-Retention
  A. C0/C1 state

  ---

  Explanation

  https://www.cisco.com/c/en/us/td/docs/unified_computing/ucs/c/sw/gui/config/guide/4_0/b_Cisco_UCS_C-Series_GUI_Configuration_Guide_for_S3260_Servers_40/b_Cisco_UCS_C-Series_GUI_Configuration_Guide_for_S3260_Servers_40_appendix_010011.html

• Question 329:

  What is an advantage of NFS as compared to Fibre Channel?

  A. NFS enable thin provisioning for LUNs.
  B. NFS provides the dynamic allocation of storage capacity.
  C. NFS removes the impact of IP overhead.
  D. NFS provides direct access to the underlying storage hardware.
  B. NFS provides the dynamic allocation of storage capacity.

  ---

  Explanation

  https://www.ciscolive.com/c/dam/r/ciscolive/apjc/docs/2018/pdf/BRKINI-1011.pdf

• Question 330:

  An engineer must back up the Cisco UCS Manager configuration to a remote server. The backup job must meet these requirements:

  1. The backup must use the TCP protocol and be secure.

  2. Client identification does not need to be verified before data is transmitted

  3. The backup must contain the system configuration, including usernames, roles, and locales.

  4. The operations team requires that the backup file is in a human-readable format.

  Which set of configurations should the engineer use?

  A. Type: Full state Protocol: SCP
  B. Type: System configuration Protocol: SFTP
  C. Type: All configuration Protocol: SCP
  D. Type: Logical configuration Protocol: SFTP
  B. Type: System configuration Protocol: SFTP