350-601.prepaway - Premium.exam..102q LzVgk8T

350-601.prepaway.premium.exam.
102q
Number: 350-601
Passing Score: 800
Time Limit: 120 min
File Version: 1.0
350-601
Implementing Cisco Data Center Core Technologies
Version 1.0
Sections
1. Network
2. Compute
3. Storage Network
4. Automation
5. Security
https://vceoreteconvert.com/
8A3E48E222C4B4B15D7694BE00C90AAA
Exam A
QUESTION 1
DRAG DROP
An engineer is implementing NetFlow on a Cisco Nexus 7000 Series Switch.
Drag and drop the NetFlow commands from the left into the correct order they must be entered on the right.
Select and Place:
Correct Answer:
Section: Network
Explanation
Explanation/Reference:
Reference: https://www.cisco.com/c/en/us/support/docs/switches/nexus-7000-series-switches/112213-
netflow-nexus7000-nsox-configex.html
QUESTION 2
Which virtual MAC address is the default for HSRP version 2 group 10?
A. 0000.5E00.0110
B. 0000.0C9F.F00A
C. 3716.1350.1C0A
D. 0000.0C9F.F010
Correct Answer: B
Section: Network
Explanation
QUESTION 3
Refer to the exhibit.
Which statement about the ERSPAN configuration in this environment is true?
A. The session number of the source of ERSPAN spanned traffic must have a session ID of 47 for the
traffic analyzer to receive the traffic.
B. Host B is the source of ERSPAN spanned traffic and host A is the traffic analyzer.
C. The session number of the source of ERSPAN spanned traffic must have a session ID of 48 for the
traffic analyzer to receive the traffic.
D. Host A is the source of ERSPAN spanned traffic and host B is the traffic analyzer.
Correct Answer: D
Section: Network
Explanation
QUESTION 4
Which two statements about the routing table of the leaf switch are true? (Choose two.)
A. 10.20.1.0/24 is a BD subnet in ACI.
B. The next hop 10.0.1.14 for route 172.16.99.0/24 is the TEP address of a border leaf in ACI.
C. 172.16.100.0/24 is a BD subnet in ACI.
D. The next hop 10.1.168.95 for route 172.16.100.0/24 is the TEP address of a border leaf in ACI.
E. The next hop 10.0.8.65 for route 10.20.1.0/24 is the TEP address of a border leaf in ACI.
Correct Answer: AE
Section: Network
Explanation
QUESTION 5
Which mroute state is created when Bidirectional PIM is deployed at a site?
A. *.G
B. MVPN Type-6
C. MVPN Type-7
D. S.G
Correct Answer: A
Section: Network
Explanation
QUESTION 6
Which statement about the default gateway configuration of the vPC is true?
A. Either switch can act as the active default gateway.

B. N7K-1 acts as the default gateway for all traffic.
C. N7K-2 forwards traffic that is destined for the default gateway by using the peer link.
D. N7K-2 acts as the default gateway for all traffic.
Correct Answer: A
Section: Network
Explanation
QUESTION 7
What must be connected to clear the HA NOT READY status?
A. Layer 1-Layer 2 ports

B. server chassis
C. management ports
D. network uplinks
Correct Answer: B
Section: Network
Explanation
QUESTION 8
A small remote office is set to connect to the regional hub site via NSSA ASBR.
Which type of LSA is sent to the remote office OSPF area?
A. type 7 LSA
B. type 1 LSA
C. type 5 LSA
D. type 3 LSA
Correct Answer: A
Section: Network
Explanation
QUESTION 9
Which adjacency server configuration makes two OTV edge devices located in the same site bring up the
dual-site adjacency?
A.
B.
C.
D.
Correct Answer: B
Section: Network
Explanation
QUESTION 10
The STP priority of N7K-1 and N7K-2 are the lowest in the network.
Which statement describes STP on the vPC?
A. N7K-1 and N7K-2 appear as a single STP root.

B. N7K-1 appears as the STP root.
C. N7K-1 preempts N7K-2 as the STP root.
D. N7K-2 appears as the STP root.
Correct Answer: A
Section: Network
Explanation
QUESTION 11
The engineer must configure SPAN on a Cisco Nexus 5000 Series Switch to get a capture of the traffic
from these applications for an in-depth packet analysis.
Which two SPAN characteristics must be considered? (Choose two.)
A. SPAN source ports can be monitored in multiple SPAN sessions.
B. The Ethernet, FC, vFC, port channel, SAN port channel can be used as SPAN source ports.
C. A SPAN source port cannot be a destination SPAN port.
D. Only Ethernet, FC, vFC, port channel port types can be used as SPAN source ports.
E. The rx/tx option is available for VLAN or VSAN SPAN sessions.
Correct Answer: BC
Section: Network
Explanation
QUESTION 12
Host1 is in VLAN100 located in DataCenter1 and Host2 is in VLAN200 located in DataCenter2.
Which OTV VLAN mapping configuration allows Layer 2 connectivity between these two hosts?
A.
B.
C.
D.
Correct Answer: A
Section: Network
Explanation
QUESTION 13
What is configured as a result of running these commands?
A. loose unicast RPF

B. strict unicast RPF
C. IP Source Guard
D. reverse lookup for outbound packets
Correct Answer: B
Section: Network
Explanation
QUESTION 14
Which configuration implements static ingress replication?
A.
B.
C.
D.
Correct Answer: D
Section: Network
Explanation
QUESTION 15
A network engineer is setting up a multihomed OTV network. The first site has been set up with a primary
and secondary adjacency server.
Which configuration must be added on the remote OTV AEDs site?
A.
B.
C.
D.
Correct Answer: C
Section: Network
Explanation
QUESTION 16
A customer has a requirement to deploy a cloud service and needs to have full control over the underlying
OS, data and applications.
Which cloud model meets this requirement?
A. MaaS
B. PaaS
C. SaaS
D. IaaS
Correct Answer: D
Section: Network
Explanation
QUESTION 17
A flapping link issue has been reported on the vPC keepalive link. A packet capture has been activated on
the Cisco Nexus switch.
What is the destination IP address of the vPC keepalive packets that are sent by the switch?
A. 192.168.254.4
B. 192.168.254.1
C. 192.168.254.2
D. 239.255.70.83
Correct Answer: A
Section: Network
Explanation
QUESTION 18
Due to a major version change, an engineer must perform a software upgrade on a Cisco Nexus Series
switch.
Which two technologies can be implemented to reduce disruptions to the network during the upgrade?
(Choose two.)
A. vPC
B. HSRP
C. VDC
D. MLAG
E. PAgP
Correct Answer: AC
Section: Network
Explanation
QUESTION 19
Which result of running the command is true?
A. Multicast traffic forwarding is suspended.

B. MRIB is flushed.
C. The PIM database is deleted.
D. PIM join messages are suspended.
Correct Answer: C
Section: Network
Explanation
QUESTION 20
What is the reason the system-fm-vrrp checkpoint was created?
A. The VRRP process crashed and the checkpoint was automatically created.
B. The VRRP service restarted and the checkpoint was automatically created.
C. The network administrator manually created it.
D. The VRRP-enabled feature has been disabled.
Correct Answer: D
Section: Network
Explanation
QUESTION 21
What are two capabilities of the Cisco Network Assurance Engine? (Choose two.)
A. It validates that devices comply with network security policies.

B. It predicts the impact of changes to the network.
C. It predicts the network load on a data center.
D. It ensures that network performance meets an SLA.
E. It verifies the speed of network packet flows by using telemetry.
Correct Answer: AB
Section: Network
Explanation
QUESTION 22
What is an advantage of streaming telemetry over SNMP?
A. on-change traps sent to a receiver

B. periodic push-based subscription messages
C. periodic polling of the device status
D. MD5-based authentication on polling
Correct Answer: B
Section: Network
Explanation
QUESTION 23
APIC EPG Resolution Immediacy is set to "Immediate".
Which statement is true about the Deployment Immediacy for VMM domains associated to EPGs?
A. If "On demand" is selected, the policy is programmed in the hardware only when the first packet is
received through the data path.
B. It "Immediate" is selected, the policy is programmed in the hardware as soon as the leaf is booted.
C. The "Immediate" and "On demand" options require a port group to be created on the VDS.
D. If "On demand" is selected, the policy is programmed in the hardware only when the APIC detects a VM
created in the EPG.
Correct Answer: A
Section: Network
Explanation
QUESTION 24
Which method must a network engineer use to upgrade the BIOS firmware or a Cisco UCS standalone C-
Series rack-mount server?
A. Use the U-ACPI Interface.

B. Use the Cisco host upgrade utility.
C. Use the Cisco hardware upgrade utility.
D. Use the Cisco host firmware policy.
Correct Answer: B
Section: Compute
Explanation
QUESTION 25
Which action must be performed before renumbering a Cisco UCS chassis?
A. Run the shut and no shut command on the connected ports.

B. Move the chassis to new ports on fabric interconnect.
C. Decommission the chassis.
D. Re-acknowledge the chassis.
Correct Answer: C
Section: Compute
Explanation
QUESTION 26
A server engineer wants to control power usage on a Cisco UCS C-Series rack server down to the
component level.
Which two components support specific power limits? (Choose two.)
A. storage controller
B. network controller
C. processor
D. graphic card
E. memory
Correct Answer: AB
Section: Compute
Explanation
QUESTION 27
An engineer is implementing an import operation in Cisco UCS Manager.
What is the impact of performing this operation?
A. Information can be modified on the management plane only.

B. A configuration can be imported from a higher release to a lower release.
C. An import operation can be scheduled.
D. Only a configuration file that was exported from the same Cisco UCS Manager can be imported.
Correct Answer: A
Section: Compute
Explanation
QUESTION 28
An engineer wants to create a backup of Cisco UCS Manager for disaster recovery purposes.
What are two characteristics of a full state backup of a Cisco UCS Manager database? (Choose two.)
A. contains all of the runtime states and statuses but not the configurations
B. performs a complete binary dump of the database as a .bin file
C. performs a complete binary dump of the database as a .sql file
D. performs a complete binary dump of the database as a .txz file
E. contains all of the configurations
Correct Answer: BE
Section: Compute
Explanation
QUESTION 29
What happens to the default host firmware policy after a Cisco UCS Manager upgrade?
A. It is assigned to all the service profiles that include a host firmware policy.
B. It is replaced by a new default policy without any firmware entries.
C. It is set to match the host firmware policy.
D. It is updated to contain the firmware entries of all the components.
Correct Answer: A
Section: Compute
Explanation
QUESTION 30
An engineer is asked to use SaaS to manage Cisco computing.
Which two items are needed to accomplish the task? (Choose two.)
A. Intersight
B. UCS Central
C. Device/Claim ID
D. Node name/Serial Number
E. UCS Manager
Correct Answer: AE
Section: Compute
Explanation
QUESTION 31
An engineer is configuring a backup operation on the existing Cisco UCS environment using a logical
configuration.
Which configuration is expected to be saved by using this backup type?
A. systems
B. roles
C. servers
D. service profiles
Correct Answer: D
Section: Compute
Explanation
QUESTION 32
An engineer is seeking the most optimal on demand CPU performance while configuring the BIOS settings
of a UCS C-series rack mount server.
What setting will accomplish this goal?
A. C6 Retention
B. C6 non-Retention
C. C2 state
D. C0/C1 state
Correct Answer: A
Section: Compute
Explanation
QUESTION 33
An engineer is duplicating an existing Cisco UCS setup at a new site.
What are two characteristics of a logical configuration backup of a Cisco UCS Manager database? (Choose
two.)
A. contains the configured organizations and locales

B. contains the VLAN and VSAN configurations
C. contains the AAA and RBAC configurations
D. contains all of the configurations
E. contains a file with an extension tgz that stores all of the configurations
Correct Answer: BC
Section: Compute
Explanation
QUESTION 34
Which two Cisco UCS components are upgraded as a result of the configuration? (Choose two.)
A. IOMs
B. Cisco UCS Manager
C. board controller
D. adapters
E. BIOS
Correct Answer: AC
Section: Compute
Explanation
QUESTION 35
Which two settings must be configured before enabling a Cisco UCS Manager domain for Cisco Intersight
connectivity? (Choose two.)
A. SMTP servers
B. SMTP reply-to address
C. NTP servers
D. syslog redirection
E. DNS servers
Correct Answer: CE
Section: Compute
Explanation
QUESTION 36
An engineer must configure Cisco IMC server management NIC for autonegotiation.
Which setting should be selected?
A. shared LOM
B. Cisco card
C. dedicated
D. shared LOM EXT
Correct Answer: C
Section: Compute
Explanation
QUESTION 37
A network engineer is adding a Cisco HyperFlex data platform to the Cisco Intersight management portal.
Which two components are required for Intersight to claim the Cisco HyperFlex data platform? (Choose
two.)
A. device FQDN
B. device claim code
C. device public IP address
D. device ID
E. device serial number
Correct Answer: BD
Section: Compute
Explanation
QUESTION 38
Where is the witness deployed in a two-node Cisco HyperFlex Edge deployment?
A. to the HyperFlex Edge two-node cluster

B. to Cisco Intersight
C. to a third-party cloud provider
D. to an additional server with network access to HyperFlex Edge
Correct Answer: B
Section: Compute
Explanation
QUESTION 39
What is the result of this series of commands?
A. It reboots the server immediately.

B. It activates the firmware on the next adapter boot.
C. It updates the firmware on adapter 1/1/1 immediately.
D. It verifies the firmware update on the server.
Correct Answer: B
Section: Compute
Explanation
QUESTION 40
What is the benefit of adding Cisco HyperFlex Hardware Acceleration Cards to a HyperFlex deployment?
A. increased compression efficiency

B. increased network throughput
C. GPU acceleration
D. offline encryption acceleration
Correct Answer: A
Section: Compute
Explanation
QUESTION 41
When the default firmware package is set to a new version, which type of policy determines the liming of
server reboots during the firmware upgrade?
A. diagnostics
B. maintenance
C. local disk
D. BIOS
Correct Answer: B
Section: Compute
Explanation
QUESTION 42
Which two hypervisors does Cisco HyperFlex support? (Choose two.)
A. OpenStack
B. Citrix XenServer
C. VMware vSphere
D. RedHat KVM
E. Microsoft Hyper-V
Correct Answer: CE
Section: Compute
Explanation
QUESTION 43
DRAG DROP
An engineer deploys a custom guest shell rootfs onto multiple switches.
Drag and drop the steps from the left into the correct order on the right.
Export the Guest Shell rootfs.
Select and Place:
Correct Answer:
Section: Compute
Explanation
QUESTION 44
An engineer changed a configuration and must perform a rollback.
Which statement applies to a Cisco Nexus 5600 Series Switch?
A. The configuration rollback functionality is disabled when FCoE is enabled.
B. A system checkpoint is generated automatically when the running configuration is saved to NVRAM.
C. A user who is assigned to the network-operator user role can perform a rollback.
D. Errors are skipped when an atomic rollback type is triggered.
Correct Answer: A
Section: Compute
Explanation
QUESTION 45
Which statement about the impact of a rolling EPLD upgrade on a Cisco MDS 9000 Series Switch is true?
A. The upgrade can be performed from the standby supervisor module.

B. Only the modules that are being upgraded are disrupted.
C. All modules on the switch are disrupted.
D. An EPLD upgrade is nondisruptive.
Correct Answer: B
Section: Compute
Explanation
QUESTION 46
Which command reduces the amount of time it takes to complete the ISSU on a Cisco Nexus 7000 Series
Switch that has dual supervisor modules and two I/O modules?
A. install all epld bootflash:<image> parallel

B. install all kickstart <image> system <image> parallel
C. install all kickstart <image> system <image>
D. install all epld bootflash: <image>
Correct Answer: B
Section: Compute
Explanation
QUESTION 47
Which two statements about the process of performing an EPLD upgrade on a Cisco MDS 9000 Series
Switch are true? (Choose two.)
A. The upgrade can be performed from the standby supervisor module.

B. The upgrade process disrupts only the module that is being upgraded.
C. The active supervisor can be upgraded.
D. If an upgrade is interrupted, the upgrade continues after a connection is restored.
E. Modules must be online to be upgraded.
Correct Answer: AB
Section: Compute
Explanation
QUESTION 48
Which two statements about the process at upgrading an EPLD on a Cisco MDS 9000 Series Switch are
correct? (Choose two.)
A. EPLDs can be upgraded only to the latest EPLD image.

B. EPLD upgrades can be completed without powering down the module during the upgrade.
C. An upgrade verification identifies the impact of each EPLD upgrade.
D. The EPLDs for all the modules on a switch must be upgraded at the same time.
E. EPLDs can be upgraded without replacing the hardware.
Correct Answer: CE
Section: Compute
Explanation
QUESTION 49
What is the outcome of this command when the EPLD is updated on a Cisco Nexus 9000 Series Switch?
A. displays the compatibility of the EPLD upgrade and the image in the bootflash
B. shows a simulated upgrade of the EPLD
C. upgrades the EPLD on the switch disruptively
D. displays the impact of the upgrade on the operation of the switch
Correct Answer: A
Section: Compute
Explanation
QUESTION 50
DRAG DROP
An engineer is configuring VNTag between a virtualized server and a Cisco Nexus 5500 Series switch.
Drag and drop the configuration steps from the left into the correct order on the right.
Select and Place:
Correct Answer:
Section: Compute
Explanation
Reference:
https://www.cisco.com/c/en/us/td/docs/switches/datacenter/nexus5500/sw/adapter-fex/6x/
b_5500_Adapter_FEX_Config_6x/b_5500_Adapter_FEX_Config_602N11_chapter_010.html
QUESTION 51
Multiple roles are applied to a user on the Cisco MDS 9000 Series Switch.
Which statement is true?
A. The last role assigned takes precedence over previous roles.

B. Access to a command takes priority over being denied access to a command.
C. Any commands that have conflicting settings between roles are denied.
D. The first role assigned takes precedence over subsequent roles.
Correct Answer: B
Section: Compute
Explanation
QUESTION 52
Which backup operation type does not include the Preserve Identities feature?
A. full state
B. all configuration
C. logical configuration
D. system configuration
Correct Answer: C
Section: Compute
Explanation
QUESTION 53
What is a characteristic presented in the service profile of the UUID?
A. unique system generated
B. allocated from a UUID pool
C. vendor assigned
D. based on the hardware
Correct Answer: B
Section: Compute
Explanation
QUESTION 54
Which action must be taken before the maintenance policy can be committed?
A. Specify a maintenance time by selecting a schedule.

B. Associate a service profile to the maintenance policy.
C. Set the soft shutdown timer to a specific time.
D. Set the policy to apply the changes on the next reboot.
Correct Answer: A
Section: Compute
Explanation
QUESTION 55
What is an advantage of NFS as compared to Fibre Channel?
A. NFS removes the impact of IP overhead.

B. NFS enables thin provisioning for LUNs.
C. NFS provides direct access to the underlying storage hardware.
D. NFS provides the dynamic allocation of storage capacity.
Correct Answer: B
Section: Storage Network
Explanation
QUESTION 56
Which statement is true about upgrading the firmware on a Cisco MDS storage switch with dual
supervisors?
A. Supervisors can be upgraded independently to test the new firmware.

B. The new firmware is loaded on the standby supervisor first.
C. Both supervisors load the new firmware and then the active supervisor reboots.
D. The standby supervisor must be offline before the firmware upgrade begins.
Correct Answer: B
Explanation
QUESTION 57
A Cisco MDS 9000 Series Storage Switch has reloaded unexpectedly.
Where does the engineer look for the latest core dump file?
A. /mnt/recovery
B. /mnt/core
C. /mnt/logs
D. /mnt/pss
Correct Answer: D
Explanation
QUESTION 58
An engineer must implement a Cisco UCS system at a customer site. One of the requirements is to
implement SAN boot. The storage system maps the source WWPN to a unique LUN.
Which method does Cisco recommend to configure the SAN boot?
A. Define the vHBAs as bootable and leave the boot target definition empty.
B. Create a SAN boot policy in which every initiator is mapped to a different target LUN.
C. Define the vHBAs as bootable and leave the default values on the boot target definition.
D. Create a SAN boot policy in which every initiator is mapped to the same target LUN.
Correct Answer: D
Explanation
QUESTION 59
In an FCoE environment, for which two sets of data must an interface that implements the PAUSE
mechanism always provision sufficient ingress buffer? (Choose two.)
A. frames that were sent with high credit

B. frames that were sent on the link but not yet received
C. frames that were processed and transmitted by the transmitter after the PAUSE frame left the sender
D. frames that were processed and transmitted by the transmitter before the PAUSE frame left the sender
E. frames that were sent on the link and received
Correct Answer: BD
Explanation
QUESTION 60
What are two types of FC/FCoE oversubscription ratios? (Choose two.)
A. switch processing power to end-node processing power

B. port bandwidth to uplink bandwidth
C. server storage to end-node count
D. edge ISL bandwidth to core ISL bandwidth
E. host bandwidth to storage bandwidth
Correct Answer: DE
Explanation
QUESTION 61
DRAG DROP
Drag and drop the characteristics from the left onto the correct storage systems on the right.
Select and Place:
Correct Answer:
Explanation
QUESTION 62
An engineer is implementing zoning on two Cisco MDS switches. After the implementation is finished, E
Ports that connect the two Cisco MDS switches become isolated.
What is wrong with the implementation?
A. Zones are local to the MDS switch and name service must be used to activate the connection between
E Ports.
B. Different zone set names must be configured on both MDS switches.
C. Zones must have the same name on both MDS switches for the E Ports to function.
D. E Ports on both MDS switches must be configured as F Ports for the zoning to function.
Correct Answer: A
Explanation
QUESTION 63
An engineer is implementing FCoE.
Which aspect of DCBXP on a Cisco Nexus switch affects this implementation?
A. It requires that LLDP transmit and LLDP receive are enabled on the FCoE interface.
B. It uses the Cisco Fabric Services protocol to exchange parameters between two peer links.
C. It provides the authentication of peers on the Cisco Nexus switch.
D. It always is enabled on 10/100-Mbps native Ethernet ports.
Correct Answer: A
Explanation
QUESTION 64
Which product includes prebuilt templates that can be used to customize fabric deployments?
A. Cisco Tetration
B. Cisco Data Center Network Manager
C. Cisco ACI
D. Cisco UCS Manager
Correct Answer: B
Explanation
QUESTION 65
Which statement about the MAC address that the FCoE Initialization Protocol chooses for use by an E-
Node in an FCoE implementation is true?
A. The FCoE Initialization Protocol uses a 24-bit FC-MAP and concatenates a 24-bit Fibre Channel ID to
create a fabric-provided MAC address.
B. The FCoE Initialization Protocol uses the burned-in MAC address of the converged network adapter for
all FCoE operations.
C. FCoE does not use a MAC address. The FCoE Initialization Protocol is used to acquire a Fibre Channel
ID, and the address is used for all FCoE communications in the same way as Fibre Channel Protocol.
D. The FCoE Initialization Protocol uses 01.00.0C as the first 24 bits of the MAC address and appends a
24-bit Fibre Channel ID to derive a full 48- bit FCoE MAC address.
Correct Answer: AB
Explanation
QUESTION 66
Which statement about monitoring Fibre Channel traffic on a Cisco UCS 6332 Fabric Interconnect is true?
A. Fibre Channel traffic can be monitored only on one vHBA per server.
B. Fibre Channel traffic can be monitored as it is encapsulated as FCoE.
C. The monitoring of Fibre Channel traffic is limited to the default VSAN.
D. The destination port for monitoring must be an unassigned Fibre Channel port.
Correct Answer: A
Explanation
QUESTION 67
An engineer is implementing NPV mode on a Cisco MDS 9000 Series Switch.
Which action must be taken?
A. NPIV must be enabled on the upstream switch.

B. The FCNS database must be disabled in the fabric.
C. A port channel must be configured to the upstream switch.
D. All switches in the fabric must be Cisco MDS switches.
Correct Answer: A
Explanation
QUESTION 68
Which two statements about modifying Cisco UCS user accounts are true? (Choose two.)
A. Disabling a user account maintains all of the data in the Cisco UCS Fabric Interconnect.
B. The admin account can be used to log on by using SSH only.
C. The password of the user account must contain a minimum of 10 characters.
D. Local user accounts override the same account on a remote authentication server, such as TACACS,
RADIUS, or LDAP.
E. The password of the user account expires in 30 days.
Correct Answer: AD
Explanation
QUESTION 69
An engineer must ensure fabric redundancy when implementing NPV mode on a Cisco MDS 9000 Series
Switch.
Which action enables fabric redundancy?
A. Use TE ports to connect to upstream switches.

B. Add a port channel to upstream switches.
C. Configure the NPV devices to use an external FLOGI database.
D. Connect the NPV devices to multiple upstream switches.
Correct Answer: B
Explanation
Reference: https://www.cisco.com/c/en/us/td/docs/switches/datacenter/mds9000/sw/5_0/configuration/
guides/int/nxos/cli_interfaces/pc.html
QUESTION 70
An engineer is converting a Cisco MDS switch to support NPIV mode.
What should be considered when implementing the solution?
A. It requires mapping of external interface traffic.

B. It must be enabled on VSAN 1 only.
C. It must be enabled globally on all VSANs.
D. It requires the FLOGI database to be disabled.
Correct Answer: C
Explanation
QUESTION 71
DRAG DROP
An engineer must recover configuration on a Cisco MDS 9000 Series switch from a previous version that
was backed up to bootflash and then verify the restoration.
Drag and drop the commands on the left to the correct order on the right.
Select and Place:
Correct Answer:
Explanation
QUESTION 72
What is the result of implementing this configuration?
A. The Fibre Channel interface is configured for SPAN.

B. The Fibre Channel interface is configured for source distribution.
C. The Fibre Channel interlace is configured for FSPF.
D. The Fibre Channel interface is configured for synchronization distribution.
Correct Answer: A
Explanation
QUESTION 73
Which two methods are available to manage an ACI REST API session authentication when a user is
unauthenticated? (Choose two.)
A. POST to aaaUserLogin
B. GET to aaaListDomains
C. GET aaaRefresh
D. DELETE to aaaLogout
E. POST to aaaLogin
Correct Answer: CE
Section: Automation
Explanation
QUESTION 74
A customer has a requirement for an automation solution that supports periodically acquiring configuration
from a centralized server and aligning UCS servers to their desired state.
Which open-source tool meets this requirement?
A. SaltStack
B. Kubernetes
C. Puppet
D. Terraform
Correct Answer: C
Section: Automation
Explanation
QUESTION 75
An administrator needs to configure an automated policy to shut down a link when a given threshold is
exceeded on MDS switch.
Which feature needs to be used?
A. RMON
B. EEM
C. Call Home
D. Scheduler
Correct Answer: B
Section: Automation
Explanation
QUESTION 76
What is an advantage of using Ansible for automation as compared to Puppet and Chef?
A. Ansible performs automation without installing a software agent on the target node.
B. Ansible abstracts a scenario so that one set of configuration settings can be used across multiple
operating systems.
C. Ansible automates the enforcement of configuration settings.
D. Ansible configures a set of CLI commands on a device by using NETCONF.
Correct Answer: A
Section: Automation
Explanation
QUESTION 77
What is required for using Ansible with HTTP/HTTPS protocol in a Cisco NX-OS environment?
A. XML management interface
B. SSH
C. Open Agent Container
D. NX-API
Correct Answer: D
Section: Automation
Explanation
QUESTION 78
What is required for using Puppet in a Cisco NX-OS environment?
A. OpenNP
B. XML management interface
C. NX-API
D. Open Agent Container
Correct Answer: D
Section: Automation
Explanation
QUESTION 79
Why does the Python code for Cisco NX-API print an error message?
A. The JSON is not a supported format for the NX-API.

B. The "type" is wrong in the header of the request and should be "cli_conf"
C. NX-API does not allow configuration for features via the requests module.
D. The "type" is wrong in the body of the request and should be "cli_conf"
Correct Answer: C
Section: Automation
Explanation
QUESTION 80
Which two components should be checked when a Cisco Nexus 9000 Series Switch fails to boot using
POAP? (Choose two.)
A. POAP feature license

B. DHCP server to bootstrap IP information
C. image noted in the script file against switch bootflash
D. script signed with security key
E. TFTP server that contains the configuration script
Correct Answer: BE
Section: Automation
Explanation
QUESTION 81
A POAP-enabled Cisco Nexus switch will not enter POAP mode.
Which two conditions should be verified? (Choose two.)
A. No startup configuration is available.

B. The switch is in bootup process.
C. The license file is missing on the switch.
D. Bootflash must contain a special directory named POAP with poap.py file.
E. No Cisco NX-OS image is present on the bootflash.
Correct Answer: AB
Section: Automation
Explanation
QUESTION 82
An engineer enters these commands while in EEM on a Cisco Nexus 9000 Series Switch
event manager applet Backup-config

event timer watchdog time 1800 name timer
event cli match "copy running-config startup-config"
What is the result of applying this configuration?
A. It generates an error because no action is mentioned.

B. It executes the copy running-config startup-coring command.
C. It saves the running configuration every 1800 seconds.
D. It blocks the copy running-config startup-config command.
Correct Answer: A
Section: Automation
Explanation
QUESTION 83
An engineer is asked to modify an overridden policy by changing the number of FCNS database entries to
1500 and then generate a message.
What Configuration will accomplish this task?
A. event manager applet fcns_policy

event fcns entries max-per-switch 1500
action 1.0 syslog priority warnings msg FCNS DB entries have reached the EEM limit
action 2.0 policy-default
B. event manager applet fcns_policy override __fcns_entries_max_per_switch
action 1.0 syslog priority errors "CNS DB entries have reached the EEM limit"
action 2.0 policy-default
C. event manager applet fcns_policy override __fcns_entries_max_per_switch
event fcns entries max-per-switch 1500
D. event manager applet fcns_policy
action 2.0 event-default
Correct Answer: C
Section: Automation
Explanation
QUESTION 84
An engineer configures a new application profile using REST API and receives this error message.
Which method can be used before the application profile can be configured?
A. GET to aaaListDomains
B. POST to aaaRefresh
C. POST to aaaLogin
D. POST to aaaLogout
Correct Answer: C
Section: Automation
Explanation
QUESTION 85
An engineer is asked to manage a large-scale data center and collect information from multiple Cisco NX-
OS devices using Cisco NX-OS Data Management Engine model.
Which technology should be used to accomplish this goal?
A. NETCONF
B. NX Yang
C. NX-API REST
D. JSON-RPC
Correct Answer: C
Section: Automation
Explanation
QUESTION 86
A network architect is asked to design and manage geographically distributed data centers across cities
and decides to use a Multi-Site Orchestrator deployment.
How many orchestrators should be deployed?
A. 5
B. 3
C. 4
D. 2
Correct Answer: B
Section: Automation
Explanation
QUESTION 87
Which configuration generates a syslog message when CPU utilization is higher than 60%?
A. event manager applet HIGH-CPU

event snmp oid 1.3.6.1.4.1.9.9.109.1.1.1.1.6.1 get-type exact entry-op gt 60 poll-interval 5
action 1.0 syslog priority notifications msg "cpu high"
B. event manager applet HIGH-CPU
event snmp oid 1.3.6.1.4.1.9.9.109.1.1.1.1.6.1 get-type exact entry-op lt 60 poll-interval 5
C. event manager applet HIGH-CPU
event snmp oid 1.3.6.1.4.1.9.9.109.1.1.1.1.6.1 get-type next entry-op gt 60 poll-interval 5
D. event manager applet HIGH-CPU
event snmp oid 1.3.6.1.4.1.9.9.109.1.1.1.1.6.1 get-type next entry-op lt 60 poll-interval 5
Correct Answer: A
Section: Automation
Explanation
QUESTION 88
Which feature must be enabled to support the use of JSON and XML encodings when a Cisco Nexus 7000
Series Switch is deployed?
A. Bash shell
B. NX-API
C. Open Agent Container
D. LLDP
Correct Answer: B
Section: Automation
Explanation
QUESTION 89
DRAG DROP
A network engineer must implement RBAC on Cisco MDS 9000 Series Multilayer Switches.
Drag and drop the Cisco MDS 9000 Series roles from the left onto the correct categories on the right.
Select and Place:
Correct Answer:
Section: Security
Explanation
Reference: https://www.cisco.com/c/en/us/td/docs/unified_computing/ucs/ucs-manager/GUI-User-Guides/
Admin-Management/3-1/b_Cisco_UCS_Admin_Mgmt_Guide_3_1/
b_UCSM_Admin_Mgmt_Guide_chapter_01.html
QUESTION 90
An engineer must configure RBAC in Cisco UCS Manager in an existing data center environment.
Which two roles can be used to configure LAN connectivity policies? (Choose two.)
A. server-profile
B. network-admin
C. operations
D. enable
E. admin
Correct Answer: BE
Section: Security
Explanation
QUESTION 91
An engineer is enabling port security on a Cisco MDS 9000 Series Switch.
Which feature of enabling port security on a Cisco MDS 9000 Series Switch must be considered?
A. It can be distributed by using Cisco Fabric Services.

B. It authorizes only the configured sWWN to participate in the fabric.
C. It always learns about switches that are logging in.
D. It binds the fabric at the switch level.
Correct Answer: A
Section: Security
Explanation
QUESTION 92
DRAG DROP
An engineer is implementing security on the Cisco MDS 9000 switch.
Drag and drop the descriptions from the left onto the correct security features on the right.
Select and Place:
Correct Answer:
Section: Security
Explanation
QUESTION 93
An engineer has a primary fabric that is named UCS-A and a secondary fabric that is named UCS-B. A
certificate request that has a subject name of sjc2016 for a keyring that is named kr2016 needs to be
created. The cluster IP address is 10.68.68.68.
Which command set creates this certificate request?
A. UCS-A # scope keyring kr2016

UCS-A /keyring # create certreq 10.68.68.68 sjc2016
UCS-A /keyring* # commit-buffer
B. UCS-B # scope keyring kr2016
UCS-B /keyring # create certreq ip 10.68.68.68 subject-name sjc2016
UCS-B /keyring* # commit-both
C. UCS-B# scope security
UCS-B /security # scope keyring kr2016
UCS-B /security/keyring # set certreq 10.68.68.68 sjc2016
UCS-B /security/keyring* # commit-both
D. UCS-A# scope security
UCS-A /security # scope keyring kr2016
UCS-A /security/keyring # create certreq ip 10.68.68.68 subject-name sjc2016
UCS-A /security/keyring* # commit-buffer
Correct Answer: D
Section: Security
Explanation
QUESTION 94
What is a feature of NFS?
A. zone-based access control

B. Kerberos-based security model
C. block-based file access
D. role-based access control
Correct Answer: B
Section: Security
Explanation
QUESTION 95
Port security is enabled on a Cisco MDS 9000 Series Switch.
A. Port security can be enabled only globally and affects all VSANs.
B. Any devices currently logged in must be added manually to the device database.
C. Auto-learning is always enabled automatically when port security is enabled.
D. Cisco Fabric Services must be disabled before enabling port security.
Correct Answer: C
Section: Security
Explanation
QUESTION 96
When a strict CoPP policy is implemented, which statement describes an event during which packets are
dropped?
A. A large system image is copied to a switch by using the default VRF.

B. Fifteen SSH sessions remain connected to the switch.
C. A ping sweep is performed on a network that is connected through a switch.
D. A web server that is connected to a switch is affected by a DDoS attack.
Correct Answer: D
Section: Security
Explanation
QUESTION 97
A host in EPG Client wants to talk to a webserver in EPG Web. A contract with default settings is defined
between EPG Client and EPG Web, which allows TCP communication initiated by the client toward the
webserver with TCP destination port 80.
A. If EPG Web is made a preferred group member, a contract between EPG Client and EPG Web is no
longer required for the host in EPG Client to reach the webserver in EPG Web.
B. If vzAny is configured to consume and provide a "deny all" contract, traffic between EPG Client and
EPG Web is no longer allowed.
C. The host in EPG Client can connect to TCP destination port 80 on the webserver in EPG Web. The
webserver will not be able to initiate a separate TCP connection to a host port with TCP source port 80.
D. The host in EPG Client can connect to TCP destination port 80 on the webserver in EPG Web. The
webserver can initiate a separate TCP connection to a host port with TCP source port 80.
Correct Answer: D
Section: Security
Explanation
QUESTION 98
An engineer is running an ACI fabric, has VMM integration with VMware vCenter, and wants to enable
microsegmentation based on vCenter VM attributes.
Which statement about microsegmentation is true?
A. ACI does not support microsegmentation based on vCenter VM attributes. You should use network
attributes for microsegmentation.
B. When enabled, microsegmentation performs distributed switching and routing on the ESXi hosts.
C. Microsegmentation is supported only using AVE or AVS.
D. An ACI microsegmented EPG automatically creates a port group with a private VLAN configured on a
VMware vCenter distributed virtual switch.
Correct Answer: D
Section: Security
Explanation
QUESTION 99
DRAG DROP
Drag and drop the storage technologies from the left onto the correct descriptions on the right.
Select and Place:
Correct Answer:
Section: Security
Explanation
QUESTION 100
Which two authentication types does Cisco UCS Manager support when configuring authentication?
(Choose two.)
A. PAM
B. local
C. 802.1X
D. Kerberos
E. LDAP
Correct Answer: BE
Section: Security
Explanation
QUESTION 101
What is the result of implementing this configuration?
A. The switch queries the TACACS+ server by using an encrypted text PAP login.
B. The TACACS+ server uses the type-6 encrypted format.
C. The switch queries the TACACS+ server by using a clear text PAP login.
D. The timeout value on the TACACS+ server is 10 seconds.
Correct Answer: D
Section: Security
Explanation
QUESTION 102
Which setting must be configured to prevent the reuse of passwords?
A. Change Interval
B. No Change Interval
C. History Count
D. Change Count
Correct Answer: C
Section: Security
Explanation

350-601.prepaway - Premium.exam..102q LzVgk8T

Uploaded by

Document Informationclick to expand document information

Copyright:

Available Formats

350-601.prepaway - Premium.exam..102q LzVgk8T

Uploaded by

Document Information

Original Title

Copyright

Available Formats

Share this document

Share or Embed Document

Sharing Options

Did you find this document useful?

Is this content inappropriate?

Copyright:

Available Formats

350-601.prepaway - Premium.exam..102q LzVgk8T

Uploaded by

Copyright:

Available Formats

350-601.prepaway.premium.exam.

Implementing Cisco Data Center Core Technologies

An engineer is implementing NetFlow on a Cisco Nexus 7000 Series Switch.

Select and Place:

A. 10.20.1.0/24 is a BD subnet in ACI.

A. Either switch can act as the active default gateway.

A. Layer 1-Layer 2 ports

Which type of LSA is sent to the remote office OSPF area?

Which statement describes STP on the vPC?

A. N7K-1 and N7K-2 appear as a single STP root.

Which two SPAN characteristics must be considered? (Choose two.)

What is configured as a result of running these commands?

A. loose unicast RPF

Which configuration must be added on the remote OTV AEDs site?

Which cloud model meets this requirement?

Which result of running the command is true?

A. Multicast traffic forwarding is suspended.

What is the reason the system-fm-vrrp checkpoint was created?

A. It validates that devices comply with network security policies.

A. on-change traps sent to a receiver

A. Use the U-ACPI Interface.

A. Run the shut and no shut command on the connected ports.

Which two components support specific power limits? (Choose two.)

What is the impact of performing this operation?

A. Information can be modified on the management plane only.

Which configuration is expected to be saved by using this backup type?

What setting will accomplish this goal?

A. contains the configured organizations and locales

Which setting should be selected?

A. to the HyperFlex Edge two-node cluster

A. It reboots the server immediately.

A. increased compression efficiency

An engineer deploys a custom guest shell rootfs onto multiple switches.

Export the Guest Shell rootfs.

Select and Place:

Which statement applies to a Cisco Nexus 5600 Series Switch?

A. The upgrade can be performed from the standby supervisor module.

A. install all epld bootflash:<image> parallel

A. The upgrade can be performed from the standby supervisor module.

A. EPLDs can be upgraded only to the latest EPLD image.

Select and Place:

Which statement is true?

A. The last role assigned takes precedence over previous roles.

What is a characteristic presented in the service profile of the UUID?

A. Specify a maintenance time by selecting a schedule.

A. NFS removes the impact of IP overhead.

A. Supervisors can be upgraded independently to test the new firmware.

Which method does Cisco recommend to configure the SAN boot?

A. frames that were sent with high credit

A. switch processing power to end-node processing power

Select and Place:

What is wrong with the implementation?

Which aspect of DCBXP on a Cisco Nexus switch affects this implementation?

Which action must be taken?

A. NPIV must be enabled on the upstream switch.

Which action enables fabric redundancy?

A. Use TE ports to connect to upstream switches.

What should be considered when implementing the solution?