350-601 practice questions 331–340

1. Question 331 · 504 in bank

   A customer requires a solution to orchestrate the configuration of storage arrays, firewalls, and Cisco ACI networking. Additionally, the orchestration product must support open automation and a service catalog. Which solution meets these requirements?

   • ACisco Workload Optimization Manager
   • BCisco UCS Director
   • CCisco Intersight
   • DCisco Data Center Network Manager

   Show answer

   Answer: B

   Explanation

   The correct answer is Option B: Cisco UCS Director. Cisco UCS Director is an automation and orchestration platform designed to simplify and automate the management of data center resources, including storage arrays, firewalls, and Cisco ACI networking. It supports open source automation tools such as Heat and Ansible, as well as a service catalog to allow customers to easily configure and deploy services.

   Source: Adapted from community discussion — Rocky_Truth

   References

   • Cisco documentation

   Next question

2. Question 332 · 504 in bank

   An engineer configures port security on a Cisco MDS 9000 Series Switch. The MDS switch configuration must meet these requirements: • The switch must initiate the VSAN 4 port security database despite any conflicts. • New devices must be statically added to the switch. • Configuration changes for VSAN 4 must be applied throughout the fabric with any locks on the fabric released. Which configuration set meets these requirements?

   • Aport-security activate vsan 4 no port-security auto-learn vsan 4 port-security allocate port-security commit vsan 4
   • Bport-security activate vsan 4 force port-security auto-learn vsan 4 port-security distribute port-security commit
   • Cport-security activate vsan 4 port-security manual-learn vsan 4 port-security allocate port-security commit
   • Dport-security activate vsan 4 force no port-security auto-learn vsan 4 port-security distribute port-security commit vsan 4

   Show answer

   Answer: D

   Explanation

   D because: port-security activate vsan 4 force: This command activates port security on VSAN 4 and forces the switch to initiate the port security database despite any conflicts, meeting the first requirement. no port-security auto-learn vsan 4: This command disables the automatic learning of new MAC addresses on VSAN 4, ensuring that new devices are statically added to the switch, meeting the second requirement. port-security distribute: This command applies the port security configuration changes throughout the fabric, releasing any locks on the fabric, meeting the third requirement. port-security commit vsan 4: This command commits the port security configuration changes on VSAN 4.

   Source: Adapted from community discussion — redgremlin

   Next question

3. Question 333 · 504 in bank

   

   Refer to the exhibit. The ASA_1 acts as a Layer 3 gateway for all servers. The servers lose the gateway connectivity when the vPC peer links go down and the vPC keepalive remains up. Which action improves the high availability in the network?

   • ACreate a static port channel with two links from each firewall to the switch.
   • BActivate the vPC orphan-port suspend feature on the switch ports connected to the firewall.
   • CEnable the vPC peer gateway feature on the vPC devices.
   • DImplement the IP redirect feature on the vPC devices.

   Show answer

   Answer: B

   Explanation

   vPC orphan ports suspend feature was developed for single-attached devices to vPC domain and optionally working in active/standby mode (firewall or load-balancer for instance). When a vPC peer-link goes down, the vPC secondary peer device shuts all of its vPC member ports, but it does not shut down vPC orphan ports. With vPC orphan-ports suspend configured, an orphan port is also shut down along with the vPC member ports when the peer-link goes down (figure 98). When the vPC peer-link is restored, configured vPC orphan ports on the secondary vPC peer device are brought up along with vPC member ports.

   Source: Adapted from community discussion — paradigm88

   References

   • cisco.com documentation

   Next question

4. Question 334 · 504 in bank

   An engineer builds a new Cisco ACI fabric. Which VLAN must be configured as the infrastructure VLAN during the Cisco APIC setup script?

   • Aa unique in-band management VLAN
   • Ba unique native VLAN
   • Ca unique OOB management VLAN
   • Da unique VLAN within the network

   Show answer

   Answer: D

   References

   • Cisco documentation

   Next question

5. Question 335 · 504 in bank

   

   Refer to the exhibit. An engineer must configure port security on the Cisco Nexus 5000 Series Switch that meets these requirements: • Port security must be applied on VSAN 10 only. • NWWN 20:10:10:10:10:10:10:10 to log in through SAN port-channel 2. • Any WWN must be allowed to log in through interfaces fc1/1, fc1/2, fc1/3. • Auto learning must be disabled. Which command set satisfies these conditions?

   • ANexus5K(config)# port-security database vsan 10 Nexus5K(config-port-security)# nwwn 20:10:10:10:10:10:10:10 interface san-port-channel 2 Nexus5K(config-port-security)# any wwn interface fc1/1-3 Nexus5K(config-port-security)# port-security commit vsan 10
   • BNexus5K(config)# port-security activate vsan 10 no auto-learn Nexus5K(config)# port-security database vsan 10 Nexus5K(config-port-security)# nwwn 20:10:10:10:10:10:10:10 interface san-port-channel 2 Nexus5K(config-port-security)# any wwn interface fc1/1-3
   • CNexus5K(config)# port-security database vsan 10 Nexus5K(config-port-security)# nwwn 20:01:01:01:01:01:01:01 interface san port-channel 5 Nexus5K(config-port-security)# any wwn interface fc1/1-3 Nexus5K(config)# port-security database diff active vsan 10
   • DNexus5K(config)# port-security database vsan 10 Nexus5K(config-port-security)# nwwn 20:01:01:01:01:01:01:01 interface port-channel 5 Nexus5K(config-port-security)# any wwn interface fc1/1-3 Nexus5K(config)# port-security database diff active vsan 10

   Show answer

   Answer: A

   Explanation

   C and D - wrong Adress B - there is no point of implementing "port-security activate vsan vsan-id no-auto-learn" as it is implemented before, beside it should be "no-auto-learn" not "no auto-learn" So after elimination process we have A on the table

   Source: Adapted from community discussion — Scheldon

   References

   • Cisco documentation
   • Cisco documentation

   Next question

6. Question 336 · 504 in bank

   DRAG DROP - Drag and drop the telemetry concepts from the left onto their functions on the right.

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   

   Next question

7. Question 337 · 504 in bank

   

   Refer to the exhibit. A network engineer configures the VXLAN between the routers in a data center. The VLAN 10 must be extended between routers A and B. The initial VXLAN configuration is completed on Router A. Which configuration finishes the VXLAN configuration on Router A?

   • Asystem bridge-domain 10 member vni 10010 interface nve1 no shutdown source-interface Io0
   • BInterface nve1 - no shutdown source-interface Io0 vni 10100 I2 rd auto
   • CInterface nve1 - no shutdown source-interface Io0 member vni 10010 mcast-group 231.1.1.1
   • Dvrf context tenant1 vni 10010 Interface nve1 - source-interface Io0 no shutdown member vni 10010 interface 10.10.0.1

   Show answer

   Answer: C

   References

   • Cisco documentation

   Next question

8. Question 338 · 504 in bank

   An engineer is implementing the Cisco ACI fabric and must create two different vPCs from leaf switches A and B. The vPCs are deployed as follows: • vPC 1 encompasses ports Eth1/1 on leaf A and B and connects to server 1. • vPC 2 encompasses port Eth1/2 on leaf A and B and connects to server 2. A leaf switch profile listing leaves A and B is already configured. Which ACI object must be created to meet these requirements?

   • Aone access port interface policy group
   • Btwo PortChannel interface policy groups
   • Cone vPC interface policy group
   • Dtwo vPC interface policy groups

   Show answer

   Answer: D

   Next question

9. Question 339 · 504 in bank

   A SAN administrator receives reports about latency and response-time issues that impact various applications. The incidents have gradually increased in frequency and severity and have reached a critical state. Which DCNM configuration set identifies the source of the issues?

   • A• Slow Drain Analysis • Duration Once/Run Immediately • Start/Stop Collection • Current Jobs/Result
   • B• SAN Insights • Storage Enclosure • Select Host/Initiator-Target Pair
   • C• Events • Time Now • Select MDS Switch • Advanced Filter/Source
   • D• FC Flows • Interval 24 Hours • Export/Save

   Show answer

   Answer: A

   References

   • Cisco documentation

   Next question

10. Question 340 · 504 in bank

    A network engineer must download a firmware image from a remote location to a Cisco UCS Fabric Interconnect. The software bundle is over 232 MB in size. The file transfer must use encryption and authentication. Which protocol must be used to accomplish this goal?

    • ATFTP
    • BSCP
    • CRDP
    • DHTTPS

    Show answer

    Answer: B

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

350-601 practice, question 331. 504 questions available.