350-601 practice questions 161–170

1. Question 161 · 504 in bank

   Select 2

   Which two methods are available to manage an ACI REST API session authentication when a user is unauthenticated? (Choose two.)

   • APOST to aaaUserLogin
   • BGET to aaaListDomains
   • CGET aaaRefresh
   • DDELETE to aaaLogout
   • EPOST to aaaLogin

   Show answer

   Answer: BE

   Explanation

   CorrectThese API methods enable you to manage session authentication: aaaLogin —Sent as a POST message, this method logs in a user and opens a session. The message body contains an aaa:User object with the name and password attributes, and the response contains a session token and cookie. If multiple AAA login domains are configured, you must prepend the user's name with apic: domain\\ . aaaRefresh —Sent as a GET message with no message body or as a POST message with the aaaLogin message body, this method resets the session timer. The response contains a new session token and cookie. aaaLogout —Sent as a POST message, this method logs out the user and closes the session. The message body contains an aaa:User object with the name attribute. The response contains an empty data structure. aaaListDomains —Sent as a GET message, this method returns a list of valid AAA login domains. You can send this message without logging in. https://www.cisco.com/c/en/us/td/docs/switches/datacenter/aci/apic/sw/2-x/rest_cfg/2_1_x/b_Cisco_APIC_REST_API_Configuration_Guide/b_Cisco_APIC_REST_API_Configuration_Guide_chapter_01.html

   Source: Adapted from community discussion — Yorsh

   References

   • Cisco documentation

   Next question

2. Question 162 · 504 in bank

   DRAG DROP - A network administrator must automate the process of pinging all the IP addresses from the 10.0.0.0/8 subnet. The subnet is already present on the ARP table of the Cisco Nexus switch. Drag and drop the bash commands to generate the desired output. Not all commands are used. Select and Place:

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   step1: vsh -c "show ip arp" step2: awk'{print "ping" $1}' step3: vsh step4: egrep "statistics|loss" step3 is necessary because egrep command must process the ping command output and not awk command output

   Source: Adapted from community discussion — Salilgen

   

   Next question

3. Question 163 · 504 in bank

   A customer asks an engineer to develop a framework that will be used to replace the process of the manual device configuration of Cisco NX-OS devices. The engineer plans to use the programmatic interface that meets these requirements: ✑ The development team is familiar with Windows-based scripting environment using PowerShell. ✑ The customer's security requirements mandate the use of HTTPS transport. Which solution must be used to meet these requirements?

   • ANETCONF-YANG
   • BNX-API
   • CVISORE
   • DOpen Agent Container

   Show answer

   Answer: B

   Explanation

   Reference: https://www.cisco.com/c/en/us/td/docs/switches/datacenter/nexus9000/sw/93x/progammability/guide/b-cisco-nexus-9000-series-nx-os- programmability-guide-93x/b-cisco-nexus-9000-series-nx-os-programmability-guide-93x_chapter_010011.html

   Next question

4. Question 164 · 504 in bank

   

   Refer to the exhibit. Which information must be added to the script to complete the POAP operation on the Cisco Nexus 9000 Series Switch?

   • AMD5SUM d41d8cd98f00b20449800998ecf8427e of the script file.
   • BMD5SUM d41d8cd98f00b204e9800998ecf8427e of the Python code.
   • CAPI token d41d8cd98f00b77986331998ecf8427e of the Cisco Nexus 9000 Series Switch.
   • DAPI token d41d8cd98f00b41051968198ecf8427e of the Cisco APIC.

   Show answer

   Answer: B

   Explanation

   I am leaning towards B...but unsure of syntax. Every time you make a change to the configuration script, ensure that you recalculate the MD5 checksum by running # f=poap_fabric.py ; cat $f | sed '/^#md5sum/d' > $f.md5 ; sed -i "s/^#md5sum=.*/#md5sum=\"$(md5sum $f.md5 | sed 's/ .*//')\"/" $f using a bash shell. This procedure replaces md5sum in poap_fabric.py with a new value if there was any change in that file. https://www.cisco.com/c/en/us/td/docs/switches/datacenter/nexus9000/sw/7-x/fundamentals/configuration/guide/b_Cisco_Nexus_9000_Series_NX-OS_Fundamentals_Configuration_Guide_7x/b_Cisco_Nexus_9000_Series_NX-OS_Fundamentals_Configuration_Guide_7x_chapter_0100.html

   Source: Adapted from community discussion — cypher9

   References

   • Cisco documentation

   Next question

5. Question 165 · 504 in bank

   

   Refer to the exhibit. An engineer must schedule the firmware upgrade of the Red1 and Red2 leaf switches. The requirement is to keep the upgrade time to the minimum, avoid any service impact, and perform the parallel upgrade. Which set of scheduler attributes must be used to meet these requirements? A. ✑ Configure SchedulerPolicy1 for leaf switches Blue1 and Red1, and SchedulerPolicy2 for leaf switches Blue2 and Red2. Configure SchedulerPolicy1 and SchedulerPolicy2 with a one-time window trigger that has maximum concurrent nodes 1.

   

   B. ✑ Configure SchedulerPolicy1 for leaf switches Blue1 and Red1, and SchedulerPolicy2 for leaf switches Blue2 and Red2. ✑ Configure SchedulerPolicy1 and SchedulerPolicy2 with a one-time window trigger that has maximum concurrent nodes 2. C. ✑ Configure SchedulerPolicy1 for all four leaf switches Blue1, Blue2, Red1, and Red2. ✑ Configure SchedulerPolicy1 and SchedulerPolicy2 with a one-time window trigger that has maximum concurrent nodes 1. D. ✑ Configure SchedulerPolicy1 for all four leaf switches Blue1, Blue2, Red1, and Red2. ✑ Configure SchedulerPolicy1 and SchedulerPolicy2 with a one-time window trigger that has maximum concurrent nodes 2.

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer:

   Explanation

   We need to define maximum concurrent nodes of 1 to avoid impacting service.

   Source: Adapted from community discussion — corelate_9

   Next question

6. Question 166 · 504 in bank

   

   Refer to the exhibit. A network engineer is configuring the Smart Call Home feature on a Cisco Nexus Series Switch. An email must be generated that contains the last 100 lines of the log every time a new piece of hardware is inserted into the chassis. Which command must be added to the configuration to receive the email?

   • Adestination-profile Operations alert-group Inventory
   • Bdestination-profile Operations message-level 2
   • Calert-group Linecard-Hardware user-def-cmd show logging last 100
   • Dalert-group Operations user-def-cmd show logging last 100

   Show answer

   Answer: A

   References

   • Cisco documentation

   Next question

7. Question 167 · 504 in bank

   What is a feature of NFS?

   • Azone-based access control
   • BKerberos-based security model
   • Cblock-based file access
   • Drole-based access control

   Show answer

   Answer: B

   Explanation

   Reference: https://www.cisco.com/c/en/us/support/docs/security-vpn/kerberos/16087-1.html#modifiednfs

   References

   • Oracle documentation

   Next question

8. Question 168 · 504 in bank

   DRAG DROP -

   

   Refer to the exhibit. In a bidirectional PIM network using Phantom RP as an RP redundancy mechanism, two Cisco NX-OS routers have these requirements: ✑ R1 must be the active RP. ✑ R2 must be the backup RP that is used only if R1 is not reachable. Drag and drop the configuration steps to complete the configuration for Router 2. Not all configuration steps are used. Select and Place:

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   Reference: https://community.cisco.com/t5/networking-documents/rp-redundancy-with-pim-bidir-phantom-rp/ta-p/3117191

   Source: Adapted from community discussion — GuyThatTakesDumps

   

   Next question

9. Question 169 · 504 in bank

   Port security is enabled on a Cisco MDS 9000 Series Switch. Which statement is true?

   • APort security can be enabled only globally and affects all VSANs.
   • BAny devices currently logged in must be added manually to the device database.
   • CAuto-learning is always enabled automatically when port security is enabled.
   • DCisco Fabric Services must be disabled before enabling port security.

   Show answer

   Answer: C

   Explanation

   About Enabling Auto-learning - The state of the auto-learning configuration depends on the state of the port security feature: ג€¢ If the port security feature is not activated, auto-learning is disabled by default. ג€¢ If the port security feature is activated, auto-learning is enabled by default (unless you explicitly disabled this option). Reference: https://www.cisco.com/en/US/docs/storage/san_switches/mds9000/sw/rel_3_x/configuration/guides/fm_3_3_1/psec.html#:~:text=About%20Enabling% 20Auto%2Dlearning,-The%20state%20of&text=If%20the%20port%20security%20feature,by%20using%20the%20force%20option

   Source: Adapted from community discussion — careca

   References

   • Cisco documentation
   • Cisco documentation
   • Cisco documentation

   Next question

10. Question 170 · 504 in bank

    When a strict CoPP policy is implemented, which statement describes an event during which packets are dropped?

    • AA large system image is copied to a switch by using the default VRF.
    • BFifteen SSH sessions remain connected to the switch.
    • CA ping sweep is performed on a network that is connected through a switch.
    • DA web server that is connected to a switch is affected by a DDoS attack.

    Show answer

    Answer: A

    Explanation

    A could be correct if the wording is "to the switch" rather than "to a switch", strict CoPP default settings for Nexus 9k is 3000pps with a committed burst of 32 A large image upload is more probable to generate that level of traffic. 15 SSH session would mean an average of 200pps per session, and they simply mention that the session remain connected, if there are no inputs in them they have 0pps and even a full config push would probably not require 200 packets total. https://www.cisco.com/c/en/us/td/docs/switches/datacenter/nexus9000/sw/6-x/security/configuration/guide/b_Cisco_Nexus_9000_Series_NX-OS_Security_Configuration_Guide/b_Cisco_Nexus_9000_Series_NX-OS_Security_Configuration_Guide_chapter_010001.html class copp-system-p-class-management set cos 2 police cir 3000 pps bc 32 packets conform transmit violate drop

    Source: Adapted from community discussion — JS8

    References

    • Cisco documentation
    • Cisco documentation

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

350-601 practice, question 161. 504 questions available.