350-601 practice questions 321–330

1. Question 321 · 504 in bank

   Select 2

   Which two components are used by the Cisco Nexus switches telemetry process? (Choose two.)

   • Atelemetry agent
   • Bdata encoding
   • Cdata collection
   • Dtelemetry compression
   • Edata manipulation

   Show answer

   Answer: BC

   Explanation

   https://www.cisco.com/c/en/us/td/docs/switches/datacenter/nexus9000/sw/93x/progammability/guide/b-cisco-nexus-9000-series-nx-os-programmability-guide-93x/b-cisco-nexus-9000-series-nx-os-programmability-guide-93x_chapter_0101001.html it is B and C. There is not telemetry agent, telemetry compresion or data manipulation. There are: Data Collection (data collected from DME), Data Enconding (data encapsulated in desired format), Data Transport and Telemetry receiver

   Source: Adapted from community discussion — Rollizo

   References

   • Cisco documentation
   • Cisco documentation

   Next question

2. Question 322 · 504 in bank

   A network engineer implements a Python script on a Cisco Nexus 9000 Series Switch with redundant supervisors. The script is located on a built-in container that runs as part of the Cisco NX-OS system. The requirement is to automate the periodic transfer of the Python script to a redundant supervisor. In addition, the script must be transferred to an external server using encryption and authentication. Which configuration set meets these requirements?

   • AEnable the checkpoint feature. Configure an EEM job to transfer the script to the SCP server.
   • BImplement the guest shell synchronization feature. Configure a scheduler job to transfer the script to the TFTP server.
   • CEnable the checkpoint feature. Configure a scheduler job to transfer the script to the HTTP server.
   • DImplement the guest shell synchronization feature. Configure a CRON job to transfer the script to the SCP server.

   Show answer

   Answer: D

   Explanation

   No it's not. Correct answer is D. guesthell runs in container. checkpoint and EEM is part of NX-OS. https://www.cisco.com/c/en/us/td/docs/switches/datacenter/nexus9000/sw/7-x/programmability/guide/b_Cisco_Nexus_9000_Series_NX-OS_Programmability_Guide_7x/Guest_Shell.html [admin@guestshell ~]$ crontab -h crontab: invalid option -- 'h' crontab: usage error: unrecognized option Usage: crontab [options] file crontab [options] crontab -n [hostname] Options: -u define user -e edit user's crontab -l list user's crontab -r delete user's crontab -i prompt before deleting -n set host in cluster to run users' crontabs -c get host in cluster to run users' crontabs -s selinux context -x enable debugging Default operation is replace, per 1003.2 [admin@guestshell ~]$

   Source: Adapted from community discussion — vladdar

   References

   • Cisco documentation

   Next question

3. Question 323 · 504 in bank

   

   Refer to the exhibit. A network engineer must monitor the traffic from the server on VLAN 80. All source traffic from the server must be captured on the monitoring device. Which configuration set meets these requirements?

   

   • Aswitch(config-monitor)# destination interface ethernet 1/1 switch(config-monitor)# source vlan 80
   • Bswitch(config-monitor)# destination interface ethernet 1/1 switch(config-monitor)# filter vlan 80
   • Cswitch(config-monitor)# destination interface ethernet 1/2 switch(config-monitor)# filter vlan 80 rx tx
   • Dswitch(config-monitor)# destination interface ethernet 1/2 switch(config-monitor)# source vlan 80 rx

   Show answer

   Answer: A

   Explanation

   D is right answer here When you specify a VLAN as a SPAN source, all supported interfaces in the VLAN are SPAN sources. https://www.cisco.com/c/en/us/td/docs/switches/datacenter/nexus9000/sw/6-x/system_management/configuration/guide/b_Cisco_Nexus_9000_Series_NX-OS_System_Management_Configuration_Guide/sm_14span.html#:~:text=When%20you%20specify%20a%20VLAN,the%20VLAN%20are%20SPAN%20sources.&text=VLANs%20can%20be%20SPAN%20sources%20only%20in%20the%20ingress%20direction.&text=These%20interfaces%20are%20supported%20in,3%20subinterfaces%20are%20not%20supported.

   Source: Adapted from community discussion — Lalag

   References

   • Cisco documentation
   • Cisco documentation
   • Cisco documentation

   Next question

4. Question 324 · 504 in bank

   The network team needs permissions to access the Cisco UCS B-Series Servers via the Cisco UCS Manager GUI to configure the network and collect information about faults. The administrator wants to assign these permissions to the newly configured user called netops. Which set of tasks must the administrator perform to accomplish these goals?

   • AImplement username netops on the locally authenticated user. Assign the roles of network administrator and operations.
   • BConfigure username netops on the Cisco UCS Manager login profile. Assign the roles of AAA administrator and operations.
   • CEnable username netops on the authenticated users. Assign the roles of storage administrator and facility manager.
   • DDeploy username netops on the users locales. Assign the roles of networks security and facility manager.

   Show answer

   Answer: A

   References

   • Cisco documentation

   Next question

5. Question 325 · 504 in bank

   ASAN administrator must implement infrastructure monitoring for the Fibre Channel storage environment. The storage environment consists of a standalone Cisco Nexus 9000 Series Switch and Cisco MDS 9000 Series Switches. The goal is to be able to visualize the SAN, support VXLAN overlays, and identify storage slow drain issues. Which monitoring solution accomplishes this task?

   • ACisco DCNM
   • BCisco APIC
   • CCisco Intersight
   • DCisco Prime Infrastructure

   Show answer

   Answer: A

   References

   • Cisco documentation

   Next question

6. Question 326 · 504 in bank

   

   Refer to the exhibit. Which feature must be implemented on Postman to receive the response from a Cisco Nexus 9000 Series Switch?

   • AAPI token in the APIC-cookie
   • Busername and password in the Nexus-cookie
   • Cusername and password in the api/mo header
   • Dcertificate in the HTML Nexus-API header

   Show answer

   Answer: A

   Explanation

   The correct asnwer is A Subsequent operations on the REST API can use this token value as a cookie named APIC-cookie to authenticate future requests https://www.cisco.com/c/en/us/td/docs/switches/datacenter/aci/apic/sw/3-x/rest-api-config/b_Cisco_APIC_REST_API_Configuration_Guide_3x/b_Cisco_APIC_REST_API_Configuration_Guide_chapter_01.html

   Source: Adapted from community discussion — 7korn7

   References

   • Cisco documentation

   Next question

7. Question 327 · 504 in bank

   Which protocol does Cisco HyperFlex use to share data among nodes in a VMware vSphere environment?

   • AFCoE
   • BNFS
   • CCIFS
   • DSMB

   Show answer

   Answer: B

   Explanation

   The correct answer is Option B: NFS. Cisco HyperFlex uses the Network File System (NFS) protocol to share data among nodes in a VMware vSphere environment [1][2]. NFS is a client-server protocol that allows a user on a client computer to access files over a network, just as if they were on the local computer. NFS is often used to mount remote file systems over the Internet, allowing users to access files on remote systems as if they were loca

   Source: Adapted from community discussion — Rocky_Truth

   Next question

8. Question 328 · 504 in bank

   

   Refer to the exhibit. An engineer must activate the port-security database on a Cisco MDS 9000 Series Switch for VSAN 100, but receives the error shown. Which command completes the configuration?

   • Aport-security config-enable vsan 100
   • Bport-security vsan 100 database active
   • Cport-security enabled mode vsan 100
   • Dport-security activate vsan 100 force

   Show answer

   Answer: D

   References

   • Cisco documentation

   Next question

9. Question 329 · 504 in bank

   Select 2

   Refer to the exhibit.

   

   Which two statements about the routing table of the leaf switch are true? (Choose two.)

   • A10.20.1.0/24 is a BD subnet in ACI.
   • BThe next hop 10.0.1.14 for route 172.16.99.0/24 is the TEP address of a border leaf in ACI.
   • C172.16.100.0/24 is a BD subnet in ACI.
   • DThe next hop 10.1.168.95 for route 172.16.100.0/24 is the TEP address of a border leaf in ACI.
   • EThe next hop 10.0.8.65 for route 10.20.1.0/24 is the TEP address of a border leaf in ACI.

   Show answer

   Answer: AD

   Explanation

   10.20.1.0/24 is a BD in ACI because of the part which says "direct, pervasive". For the other answer choice, we see form the administrative distance and the "internal" naming, we know that this is an external subnet (172.16.100.0/24) and that as all external routes are exchanged withing the fabric through MP-BG. MP-BGP is actually used to populate the leaves in the fabric with routing on how to reach those external routes. In MP-BGP, the spines are only the route reflectors. So from this we know that the next hop of the external subnet will be a VTEP of a leaf.

   Source: Adapted from community discussion — mauchi

   References

   • cisco.com documentation

   Next question

10. Question 330 · 504 in bank

    Select 2

    After a Cisco Nexus 7000 Series Switch chassis replacement, the administrator discovers that all vPC-enabled LACP port channels are reinitialized. The administrator wants to prevent this issue the next time the chassis is replaced. Which two actions must be taken to meet this requirement before the isolated device is reloaded? (Choose two.)

    • AChange the vPC system-priority of the replacement chassis to a higher value than the peer
    • BSet the vPC MAC address to a higher value than the peer
    • CConfigure auto-recovery to the disable state on both peers
    • DSet the vPC MAC address to a lower value than the peer
    • EChange the vPC system-priority of the replacement chassis to a lower value than the peer

    Show answer

    Answer: BC

    Explanation

    Confirming B and C. When the peer-link comes up between two vPC peers, apart from the vPC roles, the LACP permanent roles are also decided (one peer become the Master, while the other becomes the Slave). An LACP role election occurs if both peers have same role (either master or slave). The system with the lower MAC address wins as master and this election is not governed by the vPC role priority configuration. A re-election causes vPC LACP port-channels to re-initialize, which leads to a possible traffic outage. Before you introduce an already isolated vPC device back into production, check the LACP roles on both boxes. If the same role, disable auto recovery with no auto-recovery under the vPC domain on both peers and reload the isolated device. After reload, the isolated device comes up with the LACP role 'none established' and can be introduced into the vPC without LACP role re-election.

    Source: Adapted from community discussion — MaxG

    References

    • Cisco documentation
    • Cisco documentation
    • cisco.com documentation
    • Cisco documentation
    • cisco.com documentation

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

350-601 practice, question 321. 504 questions available.