350-601 practice questions 221–230

1. Question 221 · 504 in bank

   

   Refer to the exhibit. An engineer is troubleshooting intermittent connect issues between the client PC and the DHCP server. What does the last package captured from the Cisco Nexus 2000 Series Switch indicate?

   • AThe client receives an IP address from the DHCP server.
   • BThe DHCP server sends an IP address via a broadcast message.
   • CThe client sends a unicast message to receive an IP address from the DCHP server.
   • DThe DCHP server releases the IP address from the client.

   Show answer

   Answer: D

   Explanation

   It's a DHCP Release message type (as indicated in the snippet). It's sent from the client to the DHCP server. When this message is received at the server it will mark that IP address as not allocated however the server will retain the record of client parameters if in case client want to reuse the same address when sending new requests. So the best answer here seems to be [D] https://iponwire.com/dhcp-message-type/#:~:text=requested%20IP%20address-,DHCP%20RELEASE,to%20the%20Client%20ID%20field.

   Source: Adapted from community discussion — PacketLife

   Next question

2. Question 222 · 504 in bank

   A network engineer must deploy a configuration backup policy to the Cisco UCS Manager. The file generated from this backup must have a snapshot of the entire system that should be used to restore the system during disaster recovery. The backup file must be transferred insecurely by using the TCP protocol. Which configuration backup settings meet these requirements?

   • AType: Full State Protocol: FTP
   • BType: System Configuration Protocol: TFTP
   • CType: All Configuration Protocol: SCP
   • DType: Logical Configuration Protocol: SFTP

   Show answer

   Answer: A

   Next question

3. Question 223 · 504 in bank

   Refer to the exhibit.

   

   Which statement about the ERSPAN configuration in this environment is true?

   • AThe session number of the source of ERSPAN spanned traffic must have a session ID of 47 for the traffic analyzer to receive the traffic.
   • BHost B is the source of ERSPAN spanned traffic and host A is the traffic analyzer.
   • CThe session number of the source of ERSPAN spanned traffic must have a session ID of 48 for the traffic analyzer to receive the traffic.
   • DHost A is the source of ERSPAN spanned traffic and host B is the traffic analyzer.

   Show answer

   Answer: D

   Explanation

   D is correct The following factors are applicable while using ERSPAN as a local SPAN: Both sessions have the same ERSPAN ID. Both sessions have the same IP address. This IP address is the router’s own IP address; that is, the loopback IP address or the IP address configured on any port. https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/lanswitch/configuration/xe-16/lanswitch-xe-16-book/lnsw-conf-erspan.html

   Source: Adapted from community discussion — Toa

   References

   • Cisco documentation
   • Cisco documentation

   Next question

4. Question 224 · 504 in bank

   A network engineer repeatedly saves a configuration on Catalyst switches to NVRAM using the write memory command. Which action should be taken to implement the same action on Nexus switches?

   • AUse the alias command to use the write memory command.
   • BUse the wri command to use the copy running-config startup-config command.
   • CUse the exit command to leave the configuration mode and save the configuration automatically.
   • DUse the write memory command to save the configuration.

   Show answer

   Answer: A

   Explanation

   Correct answer is A because there is no copy running config startup config on Nexus by default. We need to create an alias related it.

   Source: Adapted from community discussion — designated

   Next question

5. Question 225 · 504 in bank

   What is a benefit of using the Cisco UCS Lightweight upgrade feature?

   • AA soft reboot is available for the fabric interconnects.
   • BThe firmware version of a component is updated only when it has been modified.
   • CAll servers are rebooted to push the latest updates.
   • DSecurity updates are scheduled with the next reboot of the fabric interconnects.

   Show answer

   Answer: B

   Explanation

   B is correct Cisco UCS Manager Release 3.1(3) introduces light weight upgrades, which enhances firmware upgrade in the following ways: The firmware version of a component will be updated only if it has been modified. Security updates will be provided through service packs. In Release 3.1(3), light weight upgrade supports only security updates. Within a service pack, updates may only apply to certain components. These components may, at times, be upgraded without a fabric interconnect reboot. Infrastructure and server components updates are delivered through a common service pack bundle. For servers components, only the modified firmware images will be part of the service pack bundle. This results in smaller-sized service pack bundles, compared to the traditional B-Series and C-Series bundles.

   Source: Adapted from community discussion — g_kuchima

   References

   • Cisco documentation

   Next question

6. Question 226 · 504 in bank

   An engineer must configure a Cisco UCS domain for monitoring and management by the Cisco Intersight SaaS platform. After the setup is complete, administrators must have full control to configure the device through Cisco UCS Manager and Intersight. Which set of actions accomplishes this task?

   • AConfigure Device Connector Access Mode as Allow Control in Device Consol. Claim the device on Intersight as UCSM Managed Mode.
   • BConfigure Device Connector Access Mode as Allow Control in Cisco UCS Manager. Claim the device on Intersight as UCSM Managed Mode.
   • CConfigure Device Connector Access Mode as Allow Control in Device Console. Claim the device on Intersight as Intersight Managed Mode.
   • DConfigure Device Connector Access Mode as Allow Control in Cisco UCS Manager. Claim the device on Intersight as Intersight Managed Mode.

   Show answer

   Answer: B

   Explanation

   It is B (9 year UCS admin here) As others have mentioned, Intersight Managed Mode (IMM) completely removes UCSM from the system. They are looking to stay in UMM. https://www.cisco.com/c/en/us/td/docs/unified_computing/ucs/ucs-manager/GUI-User-Guides/Admin-Management/3-2/b_Cisco_UCS_Admin_Mgmt_Guide_3_2/b_Cisco_UCS_Admin_Mgmt_Guide_3_2_chapter_010000.html#task_msq_4kh_5y In the Navigation pane, click Admin. Expand All > Device Connector. Configures Access mode settings. Access Mode—Configure access as Read-only or Allow Control. Read-only—When the Read-only access mode is selected, you cannot configure the device through Intersight. Allow Control—When the Allow Control access mode is selected, you have full control to configure the device through Intersight.

   Source: Adapted from community discussion — CoAsT_x

   References

   • Cisco documentation

   Next question

7. Question 227 · 504 in bank

   An engineer implements a Python script inside a Cisco Bash shell. The script contains this dictionary object:

   

   Which command must be used to add the 'N9K-Spine-2': '1498323434' element to the switch_id list dictionary?

   • Aswitch_id_list += {ג€N9K-Spine-2ג€: ג€1498323434ג€}
   • Bswitch_id_list = [ג€N9K-Spine-2ג€: ג€1498323434ג€]
   • Cswitch_id_list.append({ג€N9K-Spine-2ג€: ג€1498323434ג€})
   • Dswitch_id_list.update({ג€N9K-Spine-2ג€: ג€1498323434ג€})

   Show answer

   Answer: D

   Explanation

   not append(), update() method is correct! switch_id_list = { "N9K-SPINE-1" : "0000", "N9K-LEAF-1" : "1111", "N9K-LEAF-2" : "2222" } switch_id_list.update({"N9K-Spine-2" : "3333"}) print(switch_id_list) =============================================== {'N9K-SPINE-1': '0000', 'N9K-LEAF-1': '1111', 'N9K-LEAF-2': '2222', 'N9K-Spine-2': '3333'} this switch_id_list type is "dict" not "list" ( plz using type() func! ) if it's type was "list" that append() method might be correct.

   Source: Adapted from community discussion — roky

   Next question

8. Question 228 · 504 in bank

   DRAG DROP - A network engineer must configure FCoE on an interface of a Cisco MDS 9000 Series Switch. It should be used for mapping between VLAN 600 and VLAN 6. Drag and drop the commands from the bottom into their implementation order in the FCoE configuration. Not all commands are used. Select and Place:

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   The answer is correct. Example:Mapping VSANs to VLANs The following example shows how to configure the FCoE VLAN and a virtual Fibre Channel interface: Step 1 Enable the associated VLAN and map the VLAN to a VSAN. switch(config)# vlan 200 switch(config-vlan)# fcoe vsan 200 switch(config-vlan)# exit Step 2 Configure the VLAN on a physical Ethernet interface. switch# configure terminal switch(config)# interface ethernet 1/4 switch(config-if)# spanning-tree port type edge trunk switch(config-if)# switchport mode trunk switch(config-if)# switchport trunk allowed vlan 1,200 switch(config-if)# exit Step 3 Create a virtual Fibre Channel interface and bind it to a physical Ethernet interface. switch(config)# interface vfc 4 switch(config-if)# bind interface ethernet 1/4 By default, all virtual Fibre Channel interfaces reside on VSAN 1. If the VLAN to VSAN mapping is to a VSAN other than VSAN 1, then proceed to Step 4. Note Step 4 Associate the virtual Fibre Channel interface to the VSAN. switch(config)# vsan database switch(config-vsan)# vsan 200 interface vfc 4 switch(config-vsan)# exit

   Source: Adapted from community discussion — 7korn7

   

   Next question

9. Question 229 · 504 in bank

   

   Refer to the exhibit. The gateway of Server1 is in the VLAN 100 SVI on N5K-1 and the gateway of Server 2 is in the VLAN 200 SVI on N5K-2. Server 1 must connect to Server 2 using unidirectional traffic. Which action accomplishes this requirement?

   • AConfigure access VLAN 100 on interface Ethernet 1/2 on N5K-2.
   • BCreate a static route in VRF WEB for the subnet of Server 2 on N5K-1.
   • CAssign VRF WEB membership to interfaces VLAN 150 and 200 on N5K-2
   • DAdd VLAN 100 and 200 to the allowed VLANs list on the Ethernet 1/1 interface on N5K-1.

   Show answer

   Answer: B

   References

   • Cisco documentation

   Next question

10. Question 230 · 504 in bank

    Select 2

    An engineer configures a storage environment for a customer with high-security standards. The secure environment is configured in VSAN 50. The customer wants to maintain a configuration and active databases and prevent unauthorized switches from joining the fabric. Additionally, the switches must prevent rogue device from connecting to their ports by automatically learning the WWPNs of the ports connected to them for the first time. Which configuration sets must be used to meet these requirements? (Choose two.)

    • Afcsp enable fcsp auto-active
    • Bfcsp dhchap hash md5 sha1
    • Cfabric-binding activate vsan 50 force
    • Dclear fabric-binding activate vsan 50 fabric-binding activate vsan 50
    • Eport-security enable port-security activate vsan 50

    Show answer

    Answer: CE

    Explanation

    The fabric binding feature ensures ISLs are only enabled between specified switches in the fabric binding configuration. Fabric binding is configured on a per-VSAN basis. This feature helps prevent unauthorized switches from joining the fabric or disrupting current fabric operations. switch(config)# fabric-binding activate vsan 3 force Activates the fabric binding database for the specified VSAN forcefully—even if the configuration is not acceptable.

    Source: Adapted from community discussion — C4rlos

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

350-601 practice, question 221. 504 questions available.