Best Exam Practice Material for Cisco 350-601 Exam Q&A

Jonnie Karnath2023-03-16T08:08:54+00:00

If you want to reduce your chances of failure and increase your chances of success, consider using Cisco 350-601 exam Q&A to prepare for your Implementing and Operating Cisco Data Center Core Technologies (DCCOR) exam. Certspots Cisco 350-601 exam Q&As are created by industry experts who have years of experience in the field of Cisco. The questions are updated regularly to ensure that they reflect the most current trends and technologies in the industry, and to keep up with any changes to the exam format or content. These study materials can help candidates build a solid foundation of knowledge and can help you feel more confident and prepared on the day of the exam.

Page 1 of 14

1. A network engineer must migrate a Cisco WSA virtual appliance from one physical host to another physical host by using VMware vMotion.

What is a requirement for both physical hosts?

The hosts must run Cisco AsyncOS 10.0 or greater.

The hosts must have access to the same defined network.

The hosts must run different versions of Cisco AsyncO

The hosts must use a different datastore than the virtual appliance

2. An engineer is duplicating an existing Cisco UCS setup at a new site.

What are two characteristics of a logical configuration backup of a Cisco UCS Manager database? (Choose two.)

contains the AAA and RBAC configurations

contains a file with an extension.tgz that stores all of the configurations

contains the configuration organizations and locales

contains all of the configurations

contains the VLAN and VSAN configurations

3. Refer to the exhibit.

A network engineer must create an EEM script that saves a copy of the running configuration to bootftash and writes a message to syslog when a user saves the configuration to a Cisco Nexus 9000 Series Switch.

Which command completes the configuration set?

running-config

policy-default

syslog-config

event-default

4. A UCS B- Series server located in B5108 chassis 1 slot 1 is currently unavailable. The server needs to be associated with a specific service profile when it becomes available.

Which associate service profile option should be selected to accomplish this goal?

server pool

server

custom server

restrict migration

5. Refer to the exhibit.

An engineer installs a new Cisco UCS B-Series server. The requirement is to install an operating system on a LUN that is provided by the Fibre Channel storage array.

Which two steps must be configured in the boot policy to accomplish this goal? (Choose two.)

Disable Enforce vNIC^HBA/ISCSI Name

Add Local CD/DVD and SAN Boot.

Configure a SAN Boot Target with a WWPN

Set Boot Order to External USB and LAN Boot

Create (SCSI VNlCs and add Local LUN

6. An engineer requires a solution to automate the configuration and deployment of remote network devices for a customer.

The engineer must keep these considerations in mind:

• The customer's environment is based on industry-accepted standards and requires a solution that meets these standards.

• The security requirements mandate the use of a secure transport mechanism between the automation software and target devices such as SSH or TLS.

• The solution must be based on a human-readable and easy to parse format such as XML or JSON.

Which solution must be used to meet these requirements?

SNMP

REST API

Ansible

NETCONF

7. A network engineer needs a solution that simplifies the initial deployment of cisco nexus series switches.

The solution must support these requirements:

• zero-touch provisioning

• configuration through DHCP options

• initial configuration from a central TFTP server

• no manual configuration management after the initial installation

What technology supports these goals?

POAP

Ansible

Cisco Intersight

Chief

8. An engineer must migrate a Cisco UCS C-Series server from Cisco SingleConnect to direct integration mode. The Cisco UCS Manager Rack Server Discovery Policy and Rack Management Connection Policy are set to immediate and Auto-Acknowledge.

Which set of steps accomplishes this task?

Disconnect the cables from the EF

Connect the cables to appliance ports on the fabric interconnect Reset the Cisco IMC of the server.

Disconnect the cables from the FE

Connect the cables to server ports on the fabric interconnect Reset the Cisco IMC of the server.

Disconnect the cables from the FE

Connect the cables to appliance ports on the fabric interconnect Reacknowledge the sever

Disconnect the cables from the FE

Connect the cables to server ports on the fabric interconnect ReadKnowledge the server.

9. An engineer must implement Strict Unicast Reverse Path Forwarding mode for IPv4 packets on the Ethernet1/1 interface on the Cisco Nexus 9500 Series Switch.

Which configuration achieves this goal?

Option A

Option B

Option C

Option D

10. A new employee must be granted access to add VLANs into an existing Cisco UCS Manager and configure NTP synchronization with date and time zone settings.

Which two privileges must be granted to the employee to complete the task? (Choose two.)

Service Profile Compute (Is-compute)

Ext LAN Config (ext-lan-security)

Service Profile Network Policy (Is-network-policy)

Service Profile Config (Is-config)

Ext LAN Policy (ext-lan-policy)

Page 2 of 14

11. An engineer must perform a backup operation of the Cisco UCS system. The backup must be transferred to a secure location using UDP and must contain information about VLANs, VSANs, and other policies. Also, the operations team requires the backup file to be in a human-readable format.

Which configuration set meets these requirements?

Type: System configuration Protocol: SCP

Type: Logical configuration Protocol: TFTP

Type: All configuration Protocol: FTP

Type: Full state Protocol: SFTP

12. DRAG DROP

Drag and drop the keywords onto the URL request to collect all the subnets configured under tenant Production using a REST API. Not all options are used.

13. A customer requires a solution to orchestrate the configuration of storage arrays, firewalls, and Cisco ACI networking. Additionally, the orchestration product must support open automation and a service catalog.

Which solution meets these requirements?

Cisco UCS Director

Cisco Intersight

Cisco Data Center Network Manager

Cisco Workload Optimization Manager

14. An engineer must configure Cisco Nexus 9000 Series Switches for Cisco UCS Director integration. The configuration must enable automated onboarding of the switches as they come online. For security purposes, the switches must have the bare minimum of connection methods enabled. The connection protocol must allow authentication through credentials.

Which protocol must be configured on the switches to allow automated onboarding?

SNMP

Telnet

SSH

HTTPS

15. Refer to the exhibit.

An engineer monitors ingress traffic from Host-A and all traffic for VLAN 20 from Host-B.

Which configuration must be implemented to monitor and export traffic to Network Analyzer?

Option A

Option B

Option C

Option D

16. An engineer must configure a VDS port group using APIC policy. The requirements are for the frames to be mapped to a particular Layer 2 network and for the virtual machine assigned to the port group to receive all frames passed on the virtual switch.

Which two settings must be used to meet these requirements? (Choose two.)

forged transmits

VMDirectPath

port binding

promiscuous mode

VLAN

17. What is an advantage of using Ansible for automation as compared to puppet and chef?

Ansible automates the enforcement of configuration settings.

Ansible perform automation without installing a software agent on the target node.

Ansible configures a set of CLI commands on a device by using NETCON

Ansible abstracts a scenario so that set of configuration setting can be used across multiple operating systems.

18. An engineer needs a utility to translate traditional Nexus CLI inputs and generate Python code using XML and JSON message formats. The solution needs to be available on a Nexus 7700 series switch.

Which utility should be used?

NX-OS JSON-RPC

NX-API Sandbox

Guest Shell for NX-OS

Open NX-OS

19. A network architect wants to propose a scalable network monitoring solution in which data is repeatedly acquired from network devices. The solution must use a push model and provide close to realtime access to operational data.

Which technology must be used to meet these requirements?

streaming telemetry

logging

SNMPv3

CLI-based scripting

20. What is a recommended design choice in a topology for multipathing iSCSI traffic?

single initiator to dual targets

initiators and targets in separate subnets

dual initiators to a single target with bonded interfaces

two NICs bended together on the initiator

Page 3 of 14

21. Where does the witness VM reside in a Cisco Hyperflex Edge deployment?

Windows application

Hyper Rex Data Platform

Cisco Intersight

local HyperFlex datastore

22. Refer to the exhibit.

An engineer must monitor all LAN traffic on Fabric A from a blade server.

Which source should be configured in the test-span monitor session to complete this task?

all vHBAs from the service profile that correspond to this server

all uplink FCoE ports

all uplink Ethernet ports

all vNICs from the service profile that correspond to this server

23. Port security is enabled on a Cisco MDS 9000 series Switch.

Which statement is true?

Cisco Fabric Services must be disabled before enabling port security.

Port security can be enabled only globally and affects all VSANs.

Auto-learning is always enabled automatically when port security is enabled.

Any devices currently logged in must be added manually to the device databased.

24. A customer has a requirement to deploy a cloud service and needs to have full control over the underlying OS, data and application.

Which cloud model meets this requirement?

PaaS

MaaS

IaaS

SaaS

25. Refer to the exhibit.

SVR-A in EPG-A/BD-A fails to reach SVR-B in EPG-B/BD-B.

Which two conditions should be verified to analyze the traffic between the two EPGs? (Choose two.)

A contract exists between EPG-A and EPG-B and allows the traffic.

Limit Endpoint Learning is disabled on the bridge domain for EPG-

SVR-B is learned as an endpoint in EPG-B from Node-112.

EPG-A and EPG-B are excluded from the preferred group.

The bridge domain for EPG-B floods ARP packets.

26. A network engineer must configure a Fibre Channel interface on the Cisco MDS 9000 Series Switch.

The configuration must meet these requirements

• The interface must be disabled when the bit errors threshold Is exceeded

• Buffer-to-buffer credits must be set to the maximum value

• The interface must have full bandwidth allocated for its port group

Which command set configures a Fibre Channel interface that meets these requirements?

A)

Option A

Option B

Option C

Option D

27. An engineer is configuring AAA authentication on an MDS 9000 switch. The LDAP server is located under the IP 10.10.2.2. The data sent to the LDAP server should be encrypted.

Which command should be used to meet these requirements?

Idap-server host 10.10.2.2 enable-ssl

Idap-server 10.10.2.2 port 443

Idap server host 10.10.2.2 key SSL_KEY

Idap-server 10.10.2.2 key SSL_KEY

28. AN engineer enters these commands while in EEM on a Cisco Nexus 9000 Series Switch.

event manager applet Backup-config

event timer watchdog time 1800 name timer

event cli match “copy running-config startup-config”

What is the result of applying this configuration?

It saves the running configuration every 1800 seconds.

It generates an error because no action is mentioned.

It executes the copy running-config startup-config command.

It blocks the copy running-config startup-config command.

29. Which component is excluded by default from the host firmware package?

network interface controller

board controller

storage controller

local disk

30. An engineer is implementing FCoE.

Which aspect of DCBXP on a Cisco Nexus switch affects this implementation?

It uses the Cisco Fabric Services protocol to exchange parameters between two peer links.

It always is enabled on 10/100-Mbps native Ethernet ports.

It provides the authentication of peers on the Cisco Nexus switch.

It requires that LLDP transmit and LLDP receive are enabled on the FCoE interface.

Page 4 of 14

31. DRAG DROP

An engineer is implementing NetFlow on a Cisco Nexus 7000 Series Switch.

Drag and drop the NetFlow commands from the left into the correct order they must be entered on the right.

32. An engineer mus! send JSON encoded telemetry data to an external collector. The transport mechanism must prevent tampenng or forgery of the data.

Which protocol accomplishes this goal?

GPB

HTTP

gRPC

DTLS

33. DRAG DROP

Drag and drop the technologies from the left onto the description on the right.

34. An engineer must configure SAN connectivity in Cisco UCS manager. The requirement is to specify the WWPN of the storage array and set the zoning type to single initiator multiple targets. The engineer must also configure interrupt handling and queues of the vHBA interface.

Which two Cisco UCS policies should be used to configure the settings? (Choose two.)

storage connection policy

SAN connectivity policy

vHBA policy

Fibre Channel adaptor policy

boot policy

35. DRAG DROP

A storage engineer must configure zoning on a Cisco MDS 9000 Series switch.

Drag and drop actions from the left into the order on right

36. Refer to the exhibit.

Which configuration ensure that the cisco Nexus 7000 series switches are the primary devices for LACP?

A)

Option A

Option B

Option C

Option D

37. Which adjacency server configuration makes two OTV edge devices located in the same site bring up the dual-site adjacency?

A)

Option A

Option B

Option C

Option D

38. An engineer must configure Cisco Nexus 9000 Series Switches for Cisco UCS Director integration. The configuration must enable automated onboarding of the switches as they come online. For security purposes, the switches must have the bare minimum of connection methods enabled. The connection protocol must allow authentication through credentials.

Which protocol must be configured on the switches to allow automated onboarding?

SNMP

Telnet

SSH

HTTPS

39. Which feature is supported with an In-Service Software Upgrade on a Cisco Nexus 9000 Series Switch?

configuration changes during an upgrade

nondisruptive upgrades via nonstop forwarding

zero downtime downgrades via dual supervisor modules

upgrades to Individual modules and line cards

40. Refer to the exhibit.

A developer must create a Bash script that performs a Chef Client reload in the event of a system reset.

Which command completes the script?

Option A

Option B

Option C

Option D

Page 5 of 14

41. An engineer mus! configure the remote SSH management connectivity for Cisco Nexus 9000 Series Switches to meet these requirements

✑ The connectivity must be permitted from a jump host with an IP address of 10 10.10 10/24

✑ All switches must be permitted to connect via SSH to other devices from the subnet of 10 .20.20.0/24.

Which configuration set accomplishes these requirements?

Option A

Option B

Option C

Option D

42. An engineer needs to perform a backup of user roles and locales from Cisco UCS Manager to replicate the setting to a different fabric interconnect. The engineer wants to review the file before importing it to a target fabric interconnect.

Which backup type must be selected to meet these requirements?

all configuration

system configuration

logical configuration

full state

43. A network administrator must configure an extra keyring in Cisco UCS Manager. The key must provide a high level of encryption and secure authentication when users use the web interface.

Which configuration command set must be applied to meet these requirements?

Option A

Option B

Option C

Option D

44. An infrastructure architect is analyzing the deployment type for an application. Several companies must be able to operate the application environment and integrate it with a third-party protocol. The development team also must have maximum control over their development environment, Including the operating system used, Python interpreter, and corresponding libraries.

Which cloud deployment solution meets these requirements?

public cloud Storage as a Service

private cloud Platform as a Service

hybrid cloud Software as a Service

community cloud Infrastructure as a Service

45. Refer to the exhibit.

Service degradation is reported on a VM that is deployed on a Cisco UCS blade server. The traffic from the vNIC is required to SPAN in both directions to a packet analyzer that is connected to UCS-A slot 2 port 12.

Which two commands are needed to complete the configuration? (Choose two.)

UCS-A /org/service-profile/vnic/mon-src* # set direction both

UCS-A /eth-traffic-mon/fabric/eth-mon-session' # create dest-interface 2 12

UCS-A /org/service-profile/vnic/mon-src* # set direction receive transmit

UCS-A /eth-traffic-mon/fabric/eth-mon-session # activate

UCS-A /eth-traffic-mon/fabric/eth-mon-session* # create eth-mon-session/dest-interface 2 12

46. An engineer must configure RBAC is Cisco UCS Manager in an existing data center environment.

Which two roles can be used to configure LAN Connectivity policies? (Choose two.)

network-admin

server-profile

admin

enable

operations

47. 1.An engineer must perform a software upgrade on a production Cisco Nexus 7000 Series Switch. Before the upgrade activity, the requirement is for all ports to be shut down and routing protocols to terminate gracefully.

Which feature must be used to meet these requirements?

Configuration Profile

Maintenance Mode Profile

Switch Profile

Service Profile Template

48. A network engineer must configure a power redundancy policy on a Cisco UCS C-Series Rack Server. The power redundancy must support two power sources being used to power the server.

Which configuration should be applied to meet the requirement?

Option A

Option B

Option C

Option D

49. Refer to the exhibit.

An engineer must monitor ingress traffic from SW1 and SW2 port-channel interfaces from SW3.

Which configuration must be implemented to accomplish this goal?

A)

Option A

Option B

Option C

Option D

50. An engineer must apply AAA configuration on a Cisco MDS 9000 Series Switch.

The solution must meet these conditions:

✑ It must use a challenge-response authentication protocol that uses MD5 hashing with an incrementally changing identifier

✑ The RADIUS configuration must t>e automatically shared with other MDS switches in the environment.

The RADIUS server is already defined.

Which command set completes the configuration?

Option A

Option B

Option C

Option D

Page 6 of 14

51. An engineer must implement a VXLAN-based data center interconnect. The long-distance transport provided by a service provider is IP-based,supports a maximum MTU of 1554 bytes, and does not support outbound traffic replication.

Which action must be take to build the data center interconnect?

Configure a route map to associate the IPs of the remote VTEPs.

Create an IP access list and associate it with VNI to replicate traffic to remote VTEPs.

Announce host reachability over BG

Implement BGP EVPN ingress replication.

52. An engineer must implement private VLANs for a group of Cisco UCS 8-Series servers.

The primary VLAN is present, But the secondary VLAN must Be added to Both fabrics.

Which configuration set accomplishes this task?

Option A

Option B

Option C

Option D

53. Refer to the exhibit.

An engineer is configuring a Cisco MDS 9000 Series Switch for the first time. After the initial setup process, the name server at IP 192.168.10.11 is missing from the configuration.

Which set of actions completes the configuration?

Enter no at step 21 and reinitialize the installer. Press the Esc key to access ROMMON mode.

Enter no at step 21 and reload the switch. Configure the advanced IP options.

Enter yes at step 21 to edit the configuration. Add the line dns-server 192.168.10.11.

Enter yes at step 21 and log in. Modify the startup configuration DNS

54. An engineer must implement an automation solution to allow the backup of the configuration of cisco Nexus series switches to a centralized location.

The solution must:

* Support the team-developed custom monitoring scripts that are packaged using RPM packaging that the framework must support.

* Be developed from the underlying cisco Nexus operating system.

* Have no impact on the operating system of the underlying switch if the resource contention occurs.

* Use Python to expand the existing automation framework.

Which solution meets these requirements?

Guest Shell

Bash Shell

TCL Shell

Vegas Shell

55. DRAG DROP

Drag and drop the Hyperflex characteristics from the left onto the appropriate Hyper Hex node types on the right.

56. An engineer configured an environment that contains the vPC and non-vPC switches. However, it was noticed that the downstream non-vPC switches do not receive the upstream vPC switch peers.

Which vPC feature must be implement to ensure that vPC and non-vPC switches receive same STP bridge ID from the upstream vPC switch peers?

vpc local role-priority 4000

peer-switch

system-mac 0123.4567.89ab

peer-gateway

57. Refer to the exhibit.

An engineer configures a new application profile using REST API and receives this error massage.

Which method can be used before application profile can be configured?

POST to aaaLogin

POST to aaaRefresh

POST to aaaLogout

GET to aaaListDomains

58. Refer to the exhibit.

Which backup operation type not include the preserve identities feature?

Full state

Logical configuration

System configuration

All configuration

59. What is a benefit of using the Cisco UCS Lightweight upgrade feature?

Security updates are scheduled with the next reboot of the fabric interconnects.

All servers are rebooted to push the latest updates.

The firmware version of a component is updated only when it has been modified.

A soft reboot is available for the fabric interconnects.

60. Refer to the exhibit.

An engineer is configuring a VSAN on the network.

Which option must be selected to create the VSAN?

Fabric B

FC Zoning Enabled

Fabric A

Common/Global

Page 7 of 14

61. What is a benefit of using Cisco Tetration?

It collects telemetry data from servers and then uses software sensors to analyze flow information.

It collects near-real time data from servers and inventories the software packages that exist on servers.

It collects policy compliance data and process details.

It collects enforcement data from servers and collects interpacket variation.

62. An engineer must configure Cisco IMC server management NIC for autonegotiation.

Which setting should be selected?

Cisco card

shared LOM

dedicated

shared LOM EXT

63. Which two protocols are used by the NFSv4 protocol? (Choose two.)

FCP

TCP

UDP

Ethernet

64. An engineer is enabling port security on a Cisco MDS 9000 Series Switch.

Which feature of enabling port security on a Cisco MDS 9000 Series Switch must be considered?

It always learns about switches that are logging in.

It can be distributed by using Cisco Fabric services.

It authorizes only the configured sWWN to participate in the fabric.

It binds the fabric at the switch level.

65. The Cisco Nexus 5600 Series Switch experiences occasional packet drops on interface ethernet 1/16. An engineer wants to implement a SPAN session to investigate the issue further. The network analyzer to which the packets must be directed is located on interface 1/3. The analyzer is limited on disk space available for traffic capture, so the Nexus switch should send only the relevant data.

Which two command sets configure the SPAN session that meets these requirements? (Choose two.)

Option A

Option B

Option C

Option D

Option E

66. An engineer must configure a Nexus 7000 series switch for HSRP on VLAN 100. When fully functional, the router must be the active master.

Which set of commands must be used to implement the scenario?

Option A

Option B

Option C

Option D

67. DRAG DROP

Drag and drop the NAS and NFS concepts from the left onto the definitions on the right.

68. Refer to the exhibit.

A network engineer is using tcpdump to capture a snapshot of OSPF-related traffic on a specific Cisco NX-OS switch port. For security reasons, the capture must be taken using an embedded container that is already deployed on the Cisco Nexus device.

Which command completes the script?

guestshell

guestshell-bash

run guestshell

run bash

69. A customer asks an engineer to develop a framework that will be used to replace the process of the manual device configuration of Cisco NX-OS devices.

The engineer plans to use the programmatic interface that meets these requirements:

✑ The development team is familiar with Windows-based scripting environment using PowerShell.

✑ The customer's security requirements mandate the use of HTTPS transport.

Which solution must be used to meet these requirements?

NX-API

VISORE

Open Agent Container

NETCONF-YANG

70. Which MAC address is an HSRP version 2?

0100.5E7

FFFF

3799.9943 3000

0000.0C9

F0C8

0000.OC07.AC1H

Page 8 of 14

71. Refer to the exhibit.

Which action must be taken before the maintenance policy can be committed?

Set the soft shutdown timer to a specific time.

Associate a service profile to the maintenance policy.

Set the policy to apply the change on the next reboot.

Specify a maintenance time by selecting a schedule.

72. What is an advantage of NAS compared to SAN?

It offers enhanced NFS features.

It offers enhanced security features

It functions in an existing IP environment.

It provides lossless throughput.

73. Refer to the exhibit.

A network engineer configures the VXLAN between the routers in a data center. The VLAN 10 must be extended between routers A and B. The initial VXLAN configuration is completed on Router A.

Which configuration finishes the VXLAN configuration on Router A?

A)

Option A

Option B

Option C

Option D

74. Copy startup-config in the boot flash to the running-config file.

75. Which service profile is affected if the default host firmware policy in Cisco UCS Manager is changed?

any service profile that has no host firmware policy defined

any service profile that uses a user-created host firmware policy

any service profile that is not in the root sub-org

any service profile that uses the global-default host firmware policy

76. Refer to the exhibit

A network engineer created a new role to be assigned to the SAN users.

The requirement is for users to have these characteristics

- permitted to show access to the system, SNMP, module, and hardware information

- permitted to run debug zone and exec fcping commands

- restricted from accessing show feature environment command.

Which configuration set meets these requirements?

Option A

Option B

Option C

Option D

77. Which statement about the impact of a rolling EPLD upgrade on a Cisco MDS 9000 Series Switch is true?

All modules on the switch are disrupted.

An EPLD upgrade is nondisruptive.

Only the modules that are being upgraded are disrupted.

The upgrade can be performed from the standby supervisor module.

78. Refer to the exhibit.

What be connected to clear the HA NOT READY status?

server chassis

network uplinks

management ports

Layer 1-Layer 2 ports

79. A host EPG Client wants to talk to a webserver in EGP Web. A contract with default settings is defined between EPG Client and EPG Web, which allows TCP communication initiated by the client toward the webserver with TCP destination port 80.

Which statement is true?

If EPG Web is made a preferred group member, a contract between EPG Client and EPG Web is no longer required for the host in EPG Client to reach the webserver in EPG Web.

If vzAny is configured to consume and provide a "deny all" contract, traffic between EPG Client and EPG Web is no longer allowed.

The host in EPG Client is allowed to connect to TCP destination port 80 on the webserver in EPG Web. The webserver will not be allowed to initiate a separate TCP connection to a host port with TCP source port 80.

The host in EPG Client is allowed to connect to TCP destination port 80 on the webserver in EPG Web. The webserver is allowed to initiate a separate TCP connection to a host port with TCP source port 80.

80. An engineer needs to install a new package on a Cisco Nexus 9000 Series Switch.

What is the impact of running the install commit <filename> command on the switch?

The switch is restarted after the upgrade is complete

The package is used after the switch is restarted.

The previous package that was in use is deleted from bootflash.

The package is used in the running configuration.

Page 9 of 14

81. Refer to the exhibit.

An engineer must configure a QoS policy that controls only vHBA traffic.

Which policy must be used to meet this requirement?

Best Effort

Fibre Channel

Gold

Platinum

82. DRAG DROP

An engineer is implementing security on the Cisco MDS 9000 switch.

Drag drop the descriptions from the left onto the correct security features on the right.

83. Refer to the exhibit

A Cisco MDS 9000 Series Switch is configured with RBAC. The default role applies to all users User A is also assigned to the rote Custom-Role-B.

Which set of features will user A be authorized to configure?

hardware environment TACACS+

NTP SSH DPVM

DPVM NTP SSH hardware

SSH DPVM TACACS+ NTP

84. A Cisco MDS 9000 series storage Switch has reloaded unexpectedly.

Where does the engineer look for the latest core dump file?

/mnt/core

/mnt/pss

/mnt/logs

/mnt/recovery

85. An engineer changed a configuration and must perform a rollback.

Which statement applies to a Cisco Nexus 5600 Series switch?

Errors are skipped when an atomic rollback type is triggered.

A user who is assigned to the network-operator user role can perform a rollback.

The configuration rollback functionality is disabled when FCoE is enabled.

A system checkpoint is generated automatically when the running configuration is saved to NVRA

86. Refer to the exhibit.

An engineer is troubleshooting intermittent connectivity issues between the client PC and the DHCP server.

What does the last package captured from the Cisco Nexus 2000 Series Switch indicate?

The DCHP server releases the IP address from the client.

The client receives an IP address from the DHCP server.

The DHCP server sends an IP address via a broadcast message.

The client sends a unicast message to receive an IP address from the DCHP server.

87. An engineer is converting a Cisco MDS switch to support NPIV mode.

What should be considered when implementing the solution?

It must be enabled on VSAN 1 only.

It must be enabled globally on all VSANs.

It requires mapping of external interface traffic.

It requires the FLOGI database to be disabled.

88. A network architect must design an automation solution to initially support networking and also support the server infrastructure in the future. To keep configuration consistency, the network team requires a solution that enforces the desired state of the network and reverts any manual configuration.

Which solution meets these goals?

NX-API

Ansible

Terraform

Puppet

89. An engineer must configure a Cisco MDS 9000 Series Switch for traffic analysis from the storage array. The storage array is connected to the interface fc2/1 in VSAN 10 and the traffic analyzer to fc4/2. The capture file must include ingress and egress traffic between the switch and the storage array. Also, only traffic in VSAN 10 must be captured.

Which configuration set meets these requirements?

A)

Option A

Option B

Option C

Option D

90. Refer to the exhibit.

An engineer must configure a Fibre Channel device alias named TEST for a device attached to port fc1/9 of a Cisco Nexus Series Switch.

Which command set completes the configuration?

A)

Option

Page 10 of 14

91. Refer to the exhibit.

A secure server that provides services to EPG-2 must be placed in EPG-1. The remaining EPGs―EPG-2, EPG-3. and EPG-4―must communicate without any contracts.

Which set of actions accomplishes this goal?

Option A

Option B

Option C

Option D

92. An engineer must configure the order in which the server attempts to boot from available boot device types using Cisco Integrated Management Controller (Cisco IMC). The engineer must change the boot order configuration during the setup and apply the new requirements multiple times. The requirement is to change the Cisco IMC actual boot order so it is different from the configured boot order.

Which setting accomplishes this goal?

Enable the system to boot with the configured boot order.

Set the boot configuration directly through BIO

Configure the legacy and precision boot order to be mutually exclusive.

Apply UEFI Secure Boot for a nonsupported operating system.

93. What is the benefit of adding Cisco HyperFlex Hardware Acceleration Cards to a HyperFlex deployment?

offline encryption acceleration

increased network throughput

GPU acceleration

Increased compression efficiency

94. An engineer must configure OSPFv2 connectivity between a pair of Cisco Nexus switches.

The connection between the switches must meet these requirements:

✑ Use unicast for updates.

✑ Use decentralized communication of updates.

✑ Full adjacency between switches.

Which configuration is needed to meet these requirements?

interface with a type of p2p network

stub area between the neighbors

filter list between the neighbors

virtual link between the neighbors

95. An engineer upgrades the bash on the Cisco Nexus 9000 Series Switch.

Which command must be sed to complete the task?

rpm -qa

rpm -Uhv

upgrade -U

update -vh

96. A new user with access privileges in the Finance department moves to a new Admin department. The user must have access privileges to the Admin department data and applications inside the Cisco UCS Manager.

Which set of changes must be implemented in Cisco UCS Central for the user to acquire the privileges?

Create an Admin user account and remove the authentication service for the Finance privileges.

Disable the Finance user account and add the authentication service for the Admin privileges.

Create a new locale Admin and add the Admin department to the Admin locale. Delete the old locale

Finance and remove the Finance department from the Finance locale.

97. Which component is upgraded by using an EPLD upgrade on a Cisco Nexus 9000 Series Switch?

dual-homed fabric extenders

BIOS

field-programmable gate arrays

ISSU of the NX-OS version

98. A network engineer must configure a Cisco MDS switch to use the local user database for console access if all AAA servers are unreachable.

Which configuration should be applied to complete this task?

aaa authentication login default fallback error local

aaa authentication login console fallback error local

aaa authentication login default local

aaa authentication login console local

99. A network engineer is adding a Cisco HyperFlex data platform to the Cisco intersight management portal.

Which two components are required for Intersight to claim the Cisco HyperFlex data platform? (Choose two.)

device FQDN

device public IP address

device claim code

device ID

device serial number

100. An engineer is automating a Cisco Nexus 9000 Series Switch using the NX-OS API.

Which code snippet creates a local user called "tacuser" with an expiration date of 22 November?

Option A

Option B

Option C

Option D

Page 11 of 14

101. A company plans to migrate some of its services to the cloud. The company does not want to manage or control the underlying cloud infrastructure. It also wants to maintain control over the deployment of its applications and configuration settings of the application-hosting environment.

Which cloud service model meets these requirements?

Infrastructure as a Service

Function as a Service

Platform as a Service

Software as a Service

102. DRAG DROP

A network engineer must implement RBAC on Cisco MDS 9000 Series Multilayer Switches.

Drag and drop the Cisco MDS 9000 Series roles from the left onto the correct categories on the right.

103. An engineer creates a service profile in Cisco UCS Manager and must assign a policy that reboots blades when changes are applied. The changes must be applied only after user acknowledgment.

Which two policies must be configured to meet these requirements? (Choose two.)

Boot Policy

Global Policy

Power Control Policy

Maintenance Policy

Reboot Policy

104. A storage administrator notices an increasing number of storage targets that unexpectedly reach capacity, causing periodic service interruptions. The administrator must now create and submit a daily report of the environment that shows the status of the storage targets with the highest capacities.

Which solution provides this information?

Nagios Core with OpManager

Cisco DCNM with SAN Insight

SolarWinds with Slow Drain Analysis

Cisco Intersight with Slow Drain Analysis

105. An engineer needs to make an XML backup of Cisco UCS Manager The backup should be transferred using an authenticated and encrypted tunnel and it should contain all system and service profiles configuration.

Which command must be implemented to meet these requirements?

Option A

Option B

Option C

Option D

106. An engineer must configure a Cisco UCS blade system that is managed by Cisco UCS Manager. All four connected interfaces between the blade system and the fabric interconnects must be used. Additionally, the connectivity must tolerate any link failure between the l/O module and the fabric interconnects.

Which action accomplishes these requirements?

Configure port aggregation with LACP policy set to default

Configure Firmware Auto Sync Server policy to Auto Acknowledge

Configure Link Group Preference to Port Channel.

Configure chassis/FEX discovery pokey action to four links

107. What is a characteristic of the NFS protocol?

It is used for booting Cisco UCS B-Series servers.

It is used to access a storage array at a block level.

It uses UDP and HTTP as its transport.

It uses remote procedure calls with TCP/IP for transport.

108. A network engineer must deploy a configuration backup policy to the Cisco UCS Manager. The file generated from this backup must have a snapshot of the entire system that should be used to restore the system during disaster recovery. The backup file must be transferred insecurely by using the TCP protocol.

Which configuration backup settings meet these requirements?

Type: All Configuration Protocol: SCP

Type: Logical Configuration Protocol: SFTP

Type: Full State Protocol: FTP

Type: System Configuration Protocol: TFTP

109. Refer to the exhibit.

Which statement describes the default gateway configuration of the vPC?

N7K-1 acts as the default gateway for all traffic.

N7K-2 forwards traffic that is destined for the default gateway by using the peer link.

N7K-2 acts as the default gateway for all traffic.

Either switch can act as the active default gateway.

110. What is a benefit of independent resource scaling in Cisco HyperFlex hybrid architecture?

flexible expansion of compute, caching, and capacity

remote booting of converged servers

multivendor converged node hardware support

support for compute nodes with third-party storage

Page 12 of 14

111. Refer to the exhibit.

VLAN 10 Is experiencing delays and packet drops when the traffic is forwarded through the switch. The destination flow analyzer accepts traffic captures of not more than 30 seconds.

Which configuration implements the traffic capture that meets the requirements?

Option A

Option B

Option C

Option D

112. DRAG DROP

Drag and drop the hyperflex characteristics from the left onto the appropriate. HyperFlex Node types on the right. Not all options are used.

113. An engineer is implementing OTV on a transport that supports multicast.

The solution needs to meet the following requirements:

• Establish adjacency to the remote peer by using multicast.

• Enable OTV advertisements for VLAN 100 to the other site.

Which two commands should be configured to meet these requirements? (Choose two.)

otv site-vlan 100

otv data-group 232.2.2.0/28

otv use-adjacency-server 172.27.255.94

otv extend-vlan 100

otv control-group 232.1.1.1

114. An engineer implements SPAN configuration on an Nexus 5000 series switch.

Which two commands are necessary to complete the SPAN session configuration? (Choose two)

Configure the switchport monitor under interface fc2/2

Configure the switchport mode SD under interface tc2/1.

Configure switchport speed 4000 under interface fc2/2.

Configure session type fc under monitor session 1.

Configure the switchport mode SD under interface fc2/2.

115. An engineer is performing a configuration on a Cisco Nexus 5000 Series Switch. The requirement is for the current Fibre Channel IDs in VSAN 120 to be saved across reboots.

The Cisco environment also must integrate with a third-party solution that requires persistent Fibre Channel IDs for the VSAN The WWN of the Cisco switch must be 33:*8:00:05:30:00:16:df and its Fibre Channel ID 0x070128.

Which command set meets these requirements?

Option A

Option B

Option C

Option D

116. Refer to the exhibit.

A network engineer must Improve the convergence time during vPC primary peer device failure and recovery.

Which set of actions is required on both vPC switches to accomplish this task?

Option A

Option B

Option C

Option D

117. Refer to the exhibit.

A network engineer plans to upgrade the current software images of a Cisco Nexus switch.

What is the impact of starting the EPLD upgrade?

The switch reboots one time for the new EPLD versions to take effect.

The switch reboots multiple times for the new EPLD versions to take effect.

The switch skips the EPLD upgrade for each EPLD device of the switch.

The switch skips the EPLD upgrade for MIFPGA and proceeds with the other EPLD devices.

118. Refer to the exhibit.

An engineer is implementing zoning on two Cisco MDS switches. After the implementation is finished, E Ports that connect the two Cisco MDS switches becomes isolated.

What is wrong with the implementation?

E Ports on both MDS switches must be configured as F ports for the zoning to function.

Zones are local to the MDS switch and name service must be used to activate the connection between E ports.

Different zone set names must be configured on both MDS switches.

Zones must have the same name on both MDS switches for the E ports to function.

119. A customer reports Fibre Channel login requests to a cisco MDS 9000 series Switch from an unauthorized source. The customer requires a feature that will allow all devices already logged in and learned in and learned to be added to the Fibre channel active database.

Which two features must be enabled to accomplish this goal? (Choose two.)

Auto-learning

Port security

Enhanced zoning

Device aliases

Smart aliases

120. Which event is expected during direct upgrade of Cisco UCS Manager firmware?

The I/O Module reboots immediately after the firmware is activated.

All users logged in to the UCSM are logged out, and their sessions end.

Data traffic is disrupted for a single fabric interconnect setup.

IPMI polling is interrupted.

Page 13 of 14

121. DRAG DROP

An engineer deploys a custom Guest Shell rootfs on a Nexus 9000 Series Switch.

Drag and drop the steps from the left into the order required to deploy the solution on the right. Not all options are used.

122. A Cisco UCS user called “Employee1” accidentally changed the boot policy of the Cisco UCS server at the Cisco UCS Manager root level. This change impacted all service profiles, and their storage connectivity was lost. The system administrator wants to prevent this issue from recurring in the future. The new security policy mandates that access must be restricted up to the organization level and prevent other users from modifying root policies.

Which action must be taken to meet these requirements?

Modify the privilege level assigned to the user

Assign users to a specific Cisco UCS locale

Assign the user "Employee1" the network-operator role

Define a custom user role and assign it to users

123. An engineer must configure OSPF routing on Cisco Nexus 9000 Series Switches. The IP subnet of the Eth 1/2 interface for both switches must be advertised via OSPF. However, these interfaces must not establish OSPF adjacency or send routing updates. The current OSPF adjacency over the interface Eth1/1 on SW1 and Eth1/1 on SW2 must remain unaffected.

Which configuration must be applied to both Nexus switches to meet these requirements?

interface ethernet 1/2 passive-interface default

Interface ethernet 1/2 Ip ospf network point-to-point

interface ethernet 1/2 ip ospf passive-interface

interface ethernet 1/2 no ip ospf passive-Interface

124. An engineer must perform a nondisruptive software upgrade on a dual supervisor Cisco Nexus 7000 series switch.

What is the cause of the upgrade being disruptive?

The show install all impact command is not issued before the upgrade

The kickstart image is installed by using the Install all kickstart image system image command

Attempt to simultaneously upgrade more than three cards

Change to the configuration settings or the network connections during the upgrade process

125. Which configuration generates a syslog message when CPU utilization is higher than 60%?

event manager applet HIGH-CPU event snmp oid 1.3.6.1.4.1.9.9.109.1.1.1.1.6.1 get-type exact entry-op gt 60 poll-interval 5 action 1.0 syslog priority notifications msg "cpu high"

event manager applet HIGH-CPU event snmp oid 1.3.6.1.4.1.9.9.109.1.1.1.1.6.1 get-type exact entry-op lt 60 poll-interval 5 action 1.0 syslog priority notifications msg "cpu high"

event manager applet HIGH-CPU event snmp oid 1.3.6.1.4.1.9.9.109.1.1.1.1.6.1 get-type next entry-op gt 60 poll-interval 5 action 1.0 syslog priority notifications msg "cpu high"

event manager applet HIGH-CPU event snmp oid 1.3.6.1.4.1.9.9.109.1.1.1.1.6.1 get-type next entry-op lt 60 poll-interval 5 action 1.0 syslog priority notifications msg "cpu high"

126. DRAG DROP

Refer to the exhibit.

In a bidirectional PIM network using Phantom RP as an RP redundancy mechanism, two Cisco NX-OS routers have these requirements:

• R1 must be the active RP.

• R2 must be the backup RP that is used only if R1 is not reachable

Drag and drop the configuration steps to complete the configuration for Router 2. Not all configuration steps are used.

127. An engineer must implement a solution that prevents untrusted DHCP servers from compromising the network. The feature must be configured on a Cisco Nexus 7000 Series Switch and applied to VLAN 10. The legitimate DHCP servers are connected to interface Ethernet 2/4.

Which configuration set must be used to meet these requirements?

Option A

Option B

Option C

Option D

128. A network engineer needs to upgrade the EPLDs of the fabric modules for a Cisco MDS director-class switch.

In which order are components reloaded during the process?

one fabric module at the time

all fabric modules followed by the entire switching platform

all fabric modules in parallel

one module and one supervisor at the time

129. Refer to the exhibit.

Which statement about the ERSPAN configuration in this environment is true.

Host A is the source of ERSPAN spanned traffic and host B is the traffic analyzer.

Host B is the source of ERSPAN spanned traffic and host A is the traffic analyzer.

The session number of the source of ERSPAN spanned traffic must have a session ID of 48 for the traffic analyzer to receive the traffic.

The session number of the source of ERSPAN spanned traffic must have a session ID of 47 for the traffic analyzer to receive the traffic.

130. A SAN administrator must Implement Infrastructure monitoring for the Fibre Channel storage environment. The storage environment consists of a standalone Cisco Nexus 9000 Series Switch and Cisco MDS 9000 Series Switches. The goal is to be able to visualize the SAN support VXLAN overlays and identify storage slow drain issues.

Which monitoring solution accomplishes this task?

Cisco Prime Infrastructure

Cisco DCNM

Cisco APIC

Cisco Intersight

Page 14 of 14

131. Refer to the exhibit.

Which result of running the command is true?

The PIM database is deleted.

Multicast traffic forwarding is suspended.

PIM join messages are suspended.

MRIB is flushed

132. Refer to the exhibit.

During a vPC peer switch reload, there is packet loss between the server and the router.

Which action must be taken to prevent this behavior during future reloads?

Set the routed uplink ports of the Cisco Nexus peers as orphans.

Increase the vPC delay restore timer.

Decrease the OSPF hello and dead interval timers.

Disable vPC ARP synchronize on the vPC peers.

133. What is a characteristic of the install all command on the cisco Nexus series switch?

Upgrades only certain modules

Automatically checks the image integrity

Impact data plan traffic

Continues the upgrade process if any step in the sequence fails

134. A network administrator is using the Cisco ESA with Cisco AMP to upload files to the cloud for analysis. The network is congested and is affecting communication.

How will the Cisco ESA handle any files which need analysis?

Cisco AMP calculates the SHA-256 fingerprint, caches it, and periodically attempts the upload.

The Cisco ESA immediately makes another attempt to upload the file.

The file is queued for upload when connectivity is restored.

The file upload is abandoned.

135. An engineer must start a software upgrade on a Cisco Nexus 5000 Series Switch during a zone merge.

What is the result of this action?

The zone merge stops.

The zone merge pauses until the upgrade completes

The upgrade stops

The zone merge executes and then the upgrade completes.

Facebook Twitter LinkedIn Google + Email