350-601 practice questions 311–320

1. Question 311 · 504 in bank

   An engineer deploys a new Cisco Nexus 5000 Series Switch in an existing environment with strict security policies. The new device should meet these requirements: • Secure end-user ports with minimum configuration effort. • Log security breaches and require manual recovery. • Retain the switch configuration if the device restarts. Which configuration must be used?

   • Aswitchport port-security switchport port-security max 1 switchport port-security mac-address sticky
   • Bswitchport port-security switchport port-security violation restrict switchport port-security mac-address sticky
   • Cswitchport port-security switchport port-security violation shutdown switchport port-security mac-address dynamic
   • Dswitchport port-security switchport port-security max 1 switchport port-security violation shutdown

   Show answer

   Answer: A

   Explanation

   A. If port security is enabled, the default settings on a Nexus 5000 switch are: The maximum number of MAC addresses allowed per port is 1. The violation action is set to "shutdown", which means that the port will be disabled if a violation occurs. The violation mode is set to "restrict", which means that traffic from the violating MAC address is dropped and a syslog message is generated, but the port remains enabled. Sticky secure MAC addresses – like Dynamic secure MAC addresses, MACs are learned dynamically but are saved in the running configuration.

   Source: Adapted from community discussion — Ronny2202

   Next question

2. Question 312 · 504 in bank

   A network engineer needs a solution that simplifies the initial deployment of Cisco Nexus Series Switches. The solution must support these requirements: • zero-touch provisioning • configuration through DHCP options • initial configuration from a central TFTP server • no manual configuration management after the initial installation Which technology supports these goals?

   • AAnsible
   • BCisco Intersight
   • CChef
   • DPOAP

   Show answer

   Answer: D

   Next question

3. Question 313 · 504 in bank

   DRAG DROP -

   

   Refer to the exhibit. An engineer implements an MP-BGP deployment that must meet these requirements: • Unicast traffic must flow through the Red link between the two autonomous systems. • Multicast traffic must flow through the Green link. • BGP must be configured to carry routing information and differentiate between unicast and multicast traffic to avoid RPF check failure. Drag and drop the SiteA commands from the right onto the blanks in the configuration on the left. Commands can be used more than once.

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   weird question, probably incorrect or missing infromation in the question itself. I don't see ASN 65002 in the picture and neighbor in ipv4 uncast family should be in 172.16.10.0/24 subnet

   Source: Adapted from community discussion — vladdar

   

   Next question

4. Question 314 · 504 in bank

   What does this configuration create?

   

   • Athree subnets within a bridge domain
   • Ba CTX1 tenant
   • Can L3OUT-1 bridge domain
   • Dtwo L3Out domains

   Show answer

   Answer: A

   References

   • Cisco documentation
   • Cisco documentation

   Next question

5. Question 315 · 504 in bank

   Select 2

   

   Refer to the exhibit. An engineer installs a new Cisco UCS B-Series server. The requirement is to install an operating system on a LUN that is provided by the Fibre Channel storage array. Which two steps must be configured in the boot policy to accomplish this goal? (Choose two.)

   • AAdd Local CD/DVD and SAN Boot.
   • BSet Boot Order to External USB and LAN Boot.
   • CCreate iSCSI VNICs and add Local LUN.
   • DConfigure a SAN Boot Target with a WWPN.
   • EDisable Enforce vNIC/vHBA/iSCSI Name.

   Show answer

   Answer: AD

   References

   • Cisco documentation

   Next question

6. Question 316 · 504 in bank

   A bridge domain is being extended out of a Cisco ACI fabric. Between which of these components are policies used to identify the connectivity between Endpoint Groups and the external connection?

   • Ainternal contracts and external contracts
   • Ban external bridge domain and an external routed domain
   • Cinternal EPGs and external EPGs
   • DL2Out and L3Out

   Show answer

   Answer: C

   Explanation

   Its asking between which components you "enable" connectivity from EPGs to external in this case. So its between an EPG and an external EPG.

   Source: Adapted from community discussion — MihaiBur88

   Next question

7. Question 317 · 504 in bank

   Select 2

   An engineer needs to connect Cisco UCS Fabric Interconnect (FI) to an external storage array. Due to budget limitations, the engineer must connect a Cisco UCS FI directly to an FC storage port. Which two actions must be taken to complete this connection? (Choose two.)

   • ACreate a storage connection policy.
   • BConfigure the fabric interconnect in end-host mode.
   • CCreate the required VSAN in the SAN cloud.
   • DSet FC zoning to disabled when creating the VSAN.
   • EConfigure the fabric interconnect in FC switch mode.

   Show answer

   Answer: AE

   Explanation

   i thin tha asnwer is C and E Named VSANs A named VSAN creates a connection to a specific external SAN. The VSAN isolates traffic to that external SAN, including broadcast traffic. The traffic on one named VSAN knows that the traffic on another named VSAN exists, but cannot read or access that traffic.

   Source: Adapted from community discussion — 7korn7

   References

   • Cisco documentation

   Next question

8. Question 318 · 504 in bank

   Which component is excluded by default from the host firmware package?

   • Anetwork interface controller
   • Blocal disk
   • Cboard controller
   • Dstorage controller

   Show answer

   Answer: B

   References

   • Cisco documentation
   • Cisco documentation

   Next question

9. Question 319 · 504 in bank

   Which behavior defines streaming telemetry as a push model in Cisco devices?

   • AEvents and network changes generate telemetry data
   • BMonitoring clients are pulling data from the network to see real-time statistics
   • CJSON encoded telemetry data is transported using the gRPC protocol
   • DThe network devices send data in JSON or GPB format to configure endpoints

   Show answer

   Answer: A

   Explanation

   I think the answer should be: D Pag 337 CCNP and CCIE Data Center Core DCCOR 350-601 Official Cert Guide "Cisco NX-OS streaming telemetry allows you to push data off the device to a defined endpoint as JavaScript Object Notation (JSON) or using Google Protocol Buffers (GPB) at a much higher frequency and more efficiently, as shown in Figure 6-13."

   Source: Adapted from community discussion — crosillo30

   References

   • cisco.com documentation
   • Cisco documentation
   • Cisco documentation
   • cisco.com documentation

   Next question

10. Question 320 · 504 in bank

    An engineer must configure a Cisco MDS 9000 Series Switch for traffic analysis from the storage array. The storage array is connected to the interface fc2/1 in VSAN 10 and the traffic analyzer to fc4/2. The capture file must include ingress and egress traffic between the switch and the storage array. Also, only traffic in VSAN 10 must be captured. Which configuration set meets these requirements?

    • Ainterface fc4/2 switchport mode trunk switchport trunk allow vsan 10 no shutdown ! span session 1 source interface fc2/1 tx destination interface fc4/2 rx no suspend
    • Binterface fc4/2 switchport mode SD no shutdown ! span session 1 source interface fc2/1 destination interface fc4/2 source filter vsan 10
    • Cinterface fc4/2 switchport mode auto no shutdown ! span session 1 source interface fc2/1 rx destination interface fc4/2 source filter vsan 10 no suspend
    • Dinterface fc4/2 switchport mode ST no shutdown ! span session 1 source interface fc2/1 destination interface fc4/2 source filter vsan 10

    Show answer

    Answer: B

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

350-601 practice, question 311. 504 questions available.