Cisco 350-601 Online Practice Questions and Exam Preparation

Cisco 350-601 Online Questions & Answers

• Question 371:

  The network team needs permissions to access the Cisco UCS B-Series Servers via the Cisco UCS Manager GUI to configure the network and collect information about faults. The administrator wants to assign these permissions to the newly configured user called netops.

  Which set of tasks must the administrator perform to accomplish these goals?

  A. Implement username netops on the locally authenticated user. Assign the roles of network administrator and operations.
  B. Configure username netops on the Cisco UCS Manager login profile. Assign the roles of AAA administrator and operations.
  C. Enable username netops on the authenticated users. Assign the roles of storage administrator and facility manager.
  D. Deploy username netops on the users locales. Assign the roles of networks security and facility manager.
  A. Implement username netops on the locally authenticated user. Assign the roles of network administrator and operations.

• Question 372:

  An engineer has a primary fabric that is named UCS-A and a secondary fabric that is named UCS-B. A certificate request that has a subject name of sjc2016 for a keyring that is named kr2016 needs to be created. The cluster IP address is 10.68.68.68.

  Which command set creates this certificate request?

  A. UCS-A # scope keyring kr2016 UCS-A /keyring # create certreq 10.68.68.68 sjc2016 UCS-A /keyring* # commit-buffer
  B. UCS-B # scope keyring kr2016 UCS-B /keyring # create certreq ip 10.68.68.68 subject-name sjc2016 UCS-B /keyring* # commit-both
  C. UCS-B# scope security UCS-B /security # scope keyring kr2016 UCS-B /security/keyring # set certreq 10.68.68.68 sjc2016 UCS-B /security/keyring* # commit-both
  D. UCS-A# scope security UCS-A /security # scope keyring kr2016 UCS-A /security/keyring # create certreq ip 10.68.68.68 subject-name sjc2016 UCS-A /security/keyring* # commit-buffer
  D. UCS-A# scope security UCS-A /security # scope keyring kr2016 UCS-A /security/keyring # create certreq ip 10.68.68.68 subject-name sjc2016 UCS-A /security/keyring* # commit-buffer

  ---

  Explanation

  https://www.cisco.com/c/en/us/td/docs/unified_computing/ucs/ucs-manager/CLI-User-Guides/Admin-Management/4-0/b_Cisco_UCS_Manager_CLI_Administration_Mgmt_Guide_4-0/b_Cisco_UCS_Manager_CLI_Administration_Mgmt_Guide_4-0_chapter_0110.html

• Question 373:

  An engineer is implementing VSANs on a Cisco MDS 9000 Series Switch with a native Fibre Channel. The deployment must meet these requirements:

  1. The host on port fc1/1 must be assigned to VSAN 10.

  2. The port channel 10 ISL must pass multiple VSANs, including VSAN 10.

  Which configuration set meets these requirements?

  A. Activate VSAN 10 in the vFC interface. Associate VSAN 10 to interface vfc 1/1. Enable vsan F-port-channel-trunk on the ISL. Set encapsulation EISL on the switch port.
  B. Create VSAN 10 in the VSAN database. Bind VSAN 10 to interface fc1/1 in the VSAN database. Enable VSAN trunking on the ISL. Allow VSAN 10 on the ISL.
  C. Configure VSAN 10 in the interface configuration. Attach VSAN 10 to the VSAN database. Enable VSAN trunking on fc1/1. Filter all VSAN on the ISL.
  D. Disable VSAN 1 in the VSAN database. Assign VSAN 10 to the ISL. Enable VSAN trunking on the port channel members. Permit VSAN 10 in the FLOGI database.
  B. Create VSAN 10 in the VSAN database. Bind VSAN 10 to interface fc1/1 in the VSAN database. Enable VSAN trunking on the ISL. Allow VSAN 10 on the ISL.

• Question 374:

  A customer wants to offload some of its order processing to a public cloud environment. The customer environment is based on Cisco ACI and uses Puppet with containenzed applications. The operations team requires a solution to orchestrate and optimize the cost of the new solution.

  Which product must be used to meet these requirements?

  A. Cisco Intersight
  B. Cisco Workload Optimization Manager
  C. Cisco CloudCenter
  D. Cisco Data Center Network Manager
  C. Cisco CloudCenter

  ---

  Explanation

  https://www.cisco.com/c/dam/en/us/products/collateral/cloud-systems-management/cloudcenter/white-paper-c11-737224.pdf-

  Enforce multicloud governance by guiding user decisions to reduce risk - Securely automate deployment to reduce manual effort and get consistent results - Increase feature velocity via integration with developer tools to accelerate time to market (CI/CD = Puppet, Chef, and Ansible). - Optimize cloud consumption to cut pay-per-use cloud costs

  https://www.cisco.com/c/en/us/products/collateral/cloud-systems-management/cloudcenter-suite/datasheet-c78-741886.html

• Question 375:

  Refer to the exhibit.

  

  Which backup operation type does not include the Preserve Identities feature?

  A. logical configuration
  B. system configuration
  C. full state
  D. all configuration
  C. full state

  ---

  Explanation

  This checkbox remains selected for All Configuration and System Configuration. Full State backup does not have Preserver Identity feature.

  All configs, logical and system backups seem to allow "preserve identities":

  https://books.google.pt/books?id=5VXUDwAAQBAJ&pg=PT699&lpg=PT699&dq=Preserve+Identities+feature+backup+ucs&source=bl&ots=daWxti4DV&sig=ACfU3U3X8UlPtS8EewzRIqTxqpyNVqOaNQ&hl=es419&sa=X&ved=2ahUKEwiYhtaxyMDqAhXFzIUKHXl8CzoQ6AEwC3oECAoQAQ#v=onepage&q=Preserve%20Identities%20feature%20backup%20ucs&f=false

• Question 376:

  DRAG DROP

  Refer to the exhibit.

  

  An administrator is deploying BGP to geographically connect two data center sites. Both sites are configured for dual-stack routed protocols. The administrator must inject the IPv6 network 2001:AE4:1::/64 into the IPv6 unicast database. Drag and drop the SiteA commands from the right into the blanks in the configuration on the left. Commands are used more than once.

  Select and Place:

  

  

• Question 377:

  Port security is statically configured on a Cisco Nexus 7700 Series switch and F3 line card. The switch is configured with an Advanced Services license.

  Which two actions delete secured MAC addresses from the interface? (Choose Two)

  A. The address must be removed from the configuration.
  B. The address must reach the age limit that is configured for the interface.
  C. The interface must be converted to a routed port.
  D. The device must be restarted manually.
  E. Shutdown and then no shutdown must be run on the interface.
  A. The address must be removed from the configuration.
  C. The interface must be converted to a routed port.

  ---

  Explanation

  https://www.cisco.com/c/en/us/td/docs/switches/datacenter/sw/6_x/nx-os/security/configuration/guide/b_Cisco_Nexus_7000_NX-OS_Security_Configuration_Guide__Release_6-x/b_Cisco_Nexus_7000_NX-OS_Security_Configuration_Guide__Release_6-x_chapter_010001.html

  

• Question 378:

  An engineer is implementing a Cisco ACI fabric and must use static VLAN range as part of a VMM deployment. The static VLAN must be incorporated into the dynamic VLAN pool. The existing VLAN pool is set for dynamic allocation. Which action accomplishes this goal?

  A. Add the VLAN to the pool configured with Inherit Allocation Mode from parent.
  B. Change the existing VLAN pool to static allocation mode.
  C. Add a static VLAN allocation range to the VLAN pool.
  D. Create a static reservation within the dynamic VLAN pool.
  C. Add a static VLAN allocation range to the VLAN pool.

• Question 379:

  Refer to the exhibit.

  

  SVR-A in EPG-A/BD-A fails to reach SVR-B in EPG-B/BD-B.

  Which two conditions should be verified to analyze the traffic between the two EPGs? (Choose two.)

  A. A contract exists between EPG-A and EPG-B and allows the traffic.
  B. Limit Endpoint Learning is disabled on the bridge domain for EPG-B.
  C. SVR-B is learned as an endpoint in EPG-B from Node-112.
  D. EPG-A and EPG-B are excluded from the preferred group.
  E. The bridge domain for EPG-B floods ARP packets.
  A. A contract exists between EPG-A and EPG-B and allows the traffic.
  C. SVR-B is learned as an endpoint in EPG-B from Node-112.

• Question 380:

  An engineer is performing a configuration on a Cisco Nexus 5000 Series Switch. The requirement is for the current Fibre Channel IDs in VSAN 120 to be saved across reboots. The Cisco environment also must integrate with a third-party solution that requires persistent Fibre Channel IDs for the VSAN. The WWN of the Cisco switch must be 33:e8:00:05:30:00:16:df and its Fibre Channel ID 0x070128.

  Which command set meets these requirements?

  A. fcdomain fcid database vsan 120 wwn 33:e8:00:05:30:00:16:df fcid 0x070128 fcdomain fcid persistent vsan 120
  B. fabric-binding database vsan 120 vsan 120 wwn 33:e8:00:05:30:00:16:df fcid 0x070128
  C. vsan 120 wwn 33:e8:00:05:30:00:16:df fcid 0x070128 fabric-binding activate vsan 120 purge fcdomain fcid vsan 4
  D. vsan 120 wwn 33:e8:00:05:30:00:16:df fcid 0x070128 fcdomain fcid preserve vsan 120
  A. fcdomain fcid database vsan 120 wwn 33:e8:00:05:30:00:16:df fcid 0x070128 fcdomain fcid persistent vsan 120

  ---

  Explanation

  switch# config t switch(config)# fcdomain fcid database

  switch(config-fcid-db)# vsan 1000 wwn 33:e8:00:05:30:00:16:df fcid 0x070128

  switch# config t switch(config)# fcdomain fcid persistent vsan 1000

  https://www.cisco.com/en/US/docs/storage/san_switches/mds9000/sw/rel_1_x/1_0_2a/san-os/configuration/guide/Domains.pdf