Cisco 350-601 Online Practice Questions and Exam Preparation

Cisco 350-601 Online Questions & Answers

• Question 391:

  An engineer must automate the provisioning of Cisco ACI objects using the Terraform tool. The engineer must ensure that APIC counts the authentication login requests against the threshold to avoid a DOS attack.

  Which configuration must be used in Terraform to accomplish these goals?

  A. resources with user ID and password
  B. resources with signature-based authentication
  C. provider with user ID and password
  D. provider with signature-based authentication
  C. provider with user ID and password

• Question 392:

  An engineer deploys a new Cisco Nexus 5000 Series Switch in an existing environment with strict security policies. The new device should meet these requirements:

  1. Secure end-user ports with minimum configuration effort.

  2. Log security breaches and require manual recovery.

  3. Retain the switch configuration if the device restarts.

  Which configuration must be used?

  A. switchport port-security switchport port-security max 1 switchport port-security mac-address sticky
  B. switchport port-security switchport port-security violation restrict switchport port-security mac-address sticky
  C. switchport port-security switchport port-security violation shutdown switchport port-security mac-address dynamic
  D. switchport port-security switchport port-security max 1 switchport port-security violation shutdown
  A. switchport port-security switchport port-security max 1 switchport port-security mac-address sticky

• Question 393:

  An engineer must configure Protocol Independent Multicast on two Cisco Nexus 9000 Series Switches. The engineer must ensure that the chosen rendezvous point (RP) uses a mapping agent and only supports one RP per multicast group.

  Which type of RP must be used on both switches to meet these requirements?

  A. bootstrap router
  B. static
  C. Auto-RP
  D. Anycast-RP
  A. bootstrap router

• Question 394:

  switch(config)# fcns proxy-port 21:00:00:b2:c5:71:32:a9 vsan 100

  What is the result of this configuration?

  A. It creates a FLOGI database.
  B. It adds an entry for the name server database.
  C. It implements a mapping between the WWN and the VSAN.
  D. It enables the registration of parameters for another node.
  B. It adds an entry for the name server database.

• Question 395:

  An engineer must configure port aggregation between two Cisco MDS 9000 Series Switches. The solution must meet these requirements:

  1. Suspend member interface if parameters mismatch.

  2. Load-balance traffic on multiple ports.

  3. Support traffic from multiple VSANs.

  Which port channel configuration must be used?

  A. Port type: FT Port Port channel mode: Active
  B. Port type: F Port Port channel mode: On
  C. Port type: E Port Port channel mode: Active
  D. Port type: TE Port Port channel mode: On
  D. Port type: TE Port Port channel mode: On

  ---

  Explanation

  https://www.cisco.com/en/US/docs/switches/datacenter/mds9000/sw/6_2/configuration/guides/int/nx-os/pc.html#wp1072515

• Question 396:

  Refer to the exhibit.

  

  A network engineer is configuring the Smart Call Home feature on a Cisco Nexus Series Switch. An email must be generated that contains the last 100 lines of the log every time a new piece of hardware is inserted into the chassis.

  Which command must be added to the configuration to receive the email?

  A. destination-profile Operations alert-group Inventory
  B. destination-profile Operations message-level 2
  C. alert-group Linecard-Hardware user-def-cmd show logging last 100
  D. alert-group Operations user-def-cmd show logging last 100
  A. destination-profile Operations alert-group Inventory

• Question 397:

  An engineer must configure a Fibre Channel port channel on a Cisco Nexus 9000 Series Switch. The configuration must meet these requirements:

  1. A port-channel protocol negotiation is performed with the peer ports.

  2. The trunk mode must be explicitly configured for the interfaces.

  3. VSANs from 10 to 20 must be allowed.

  Which command set configures the devices to meet the requirements?

  

  A. Option A
  B. Option B
  C. Option C
  D. Option D
  C. Option C

  ---

  Explanation

  A port-channel protocol negotiation is performed with the peer ports. channel mode active plus san-port-channel for Cisco 9000

• Question 398:

  DRAG DROP

  Refer to the exhibit.

  

  An administrator must complete the unified fabric configuration between Server1 and a pair of Cisco Nexus 9000 Series Switches.

  Drag and drop the code snippets from the right onto the blanks in the code on the left to complete the N9K-1 configuration Snippets are used more than once.

  Select and Place:

  

  

  ---

  The following example shows how to configure the VLAN on a physical Ethernet address, create virtual Fibre Channel interface 4, bind vfc 4 to the physical Ethernet interface, enable associated VLAN 200, and map VLAN 200 to VSAN 2:

  switch# configure terminal

  switch(config)# interface ethernet 1/2

  switch(config-if)# switchport mode trunk switch(config-if)# switchport trunk allowed vlan 1,200

  switch(config)# interface vfc 4

  switch(config-if)# bind interface ethernet 1/2

  switch(config-if)# exit

• Question 399:

  An engineer must create an EPG called "Test". The configuration request should succeed if the Tenant called "Tenant" and the application profile called "Test" exist. The firewall policy allows only the HTTP connectivity to APIC from the user's computer.

  Which action accomplishes this goal?

  A. Send <fvAEPg dn="uni/tn-Tenant//epg-Test//ap-Test" status="created"/> to APIC payload using HTTP PUT to the Cisco APIC.
  B. Send <fvAEPg dn="uni/tn-Tenant/ap-Test/epg-Test" status="created"/> to APIC payload using HTTP POST to the Cisco APIC.
  C. Send <fvAEPg dn="uni/tn-Test/ap-Test/epg-Tenant" status="created"/> to APIC payload using HTTP POST to the Cisco APIC.
  D. Send <fvAEPg dn="uni/tn-Test//ap-Test//epg-Tenant" status="created"/> to APIC payload using HTTP PUT to the Cisco APIC.
  B. Send <fvAEPg dn="uni/tn-Tenant/ap-Test/epg-Test" status="created"/> to APIC payload using HTTP POST to the Cisco APIC.

  ---

  Explanation

  Based on the question a tenant named Tenant and an application profile Test should exist.

• Question 400:

  A Cisco Nexus 9000 Series Switch experiences a startup configuration corruption. The engineer must implement a procedure to recover the backup configuration file from the switch.

  Which command set must be used?

  A. 1. Clear the current configuration of the switch 2. Restart the device 3. Copy a previously saved configuration file to the running-configuration 4. Copy the running-configuration to the startup configuration
  B. 1. Clear the current configuration of the switch 2. Restart the device 3. Copy the running configuration to the startup configuration 4. Copy a previously saved configuration file to the running configuration
  C. 1. Copy the running-configuration to the startup configuration 2. Clear the current configuration of the switch 3. Restart the device 4. Copy a previously saved configuration file to the running configuration
  D. 1. Restart the device 2. Copy the running-configuration file to a remote server 3. Clear the current configuration of the switch 4. Copy the running configuration to the startup configuration
  A. 1. Clear the current configuration of the switch 2. Restart the device 3. Copy a previously saved configuration file to the running-configuration 4. Copy the running-configuration to the startup configuration