350-601 practice questions 461–470

1. Question 461 · 504 in bank

   

   Refer to the exhibit. Which configuration ensures that the Cisco Nexus 7000 Series Switches are the primary devices for LACP?

   • AN7K_A(config-vpc-domain)# role priority 1 N7K_B(config-vpc-domain )# role priority 2
   • BN7K_A(config-vpc-domain)# system-priority 32768 N7K_B(config-vpc-domain)# system-priority 32768
   • CN7K_A(config-vpc-domain)# system-priority 100 N7K_B(config-vpc-domain)# system-priority 200
   • DN7K_A(config-vpc-domain)# system-priority 4000 N7K_B(config-vpc-domain)# system-priority 4000

   Show answer

   Answer: D

   Explanation

   D is correct. What is the purpose and usage of the system priority command under vpc configuration mode? The vpc quick config guide mentioned: "You should manually configure the vPC system priority when you are running Link Aggregation Control Protocol (LACP) to help ensure that the vPC peer devices are the primary devices on LACP". When you manually configure the system priority, ensure that you configure the same priority value on both vPC peer devices. If these values do not match, vPC will not come up.

   Source: Adapted from community discussion — designated

   Next question

2. Question 462 · 504 in bank

   

   Refer to the exhibit. An engineer needs to implement streaming telemetry on a Cisco MDS 9000 Series Switch. The requirement is for the show command data to be collected every 30 seconds and sent to receivers. Which command must be added to the configuration to meet this requirement?

   • Asnsr-grp 200 sample-interval 30000
   • Bsnsr-grp 200 sample-interval 30
   • Csensor-grp 200 sample-period 30
   • Dsensor-grp 200 sample-period 30000

   Show answer

   Answer: A

   Explanation

   The correct answer is A Link the sensor group with an ID to the subscription node and set the data streaming sample interval in milliseconds: switch(conf-tm-sub)# snsr-grp id sample-interval interval Note: The minimum streaming sample interval that is recommended is 30000. https://www.cisco.com/c/en/us/td/docs/switches/datacenter/mds9000/sw/8_x/config/san_analytics/cisco-mds9000-san-analytics-telemetry-streaming-config-guide-8x/configuring-san-telemetry-streaming.html

   Source: Adapted from community discussion — designated

   References

   • Cisco documentation

   Next question

3. Question 463 · 504 in bank

   An engineer must configure OSPF in the data center. The external routes have already been redistributed into OSPF. The network must meet these criteria: * The data center servers must reach services in the cloud and the services behind the redistributed routes. * The exit point toward the Internet should be propagated only when there is a dynamically learned default route from the upstream router. Which feature is required?

   • Astubby area
   • Btotally stubby area
   • Cdefault-information originate
   • Ddefault-information originate always

   Show answer

   Answer: C

   Explanation

   C is correct because in OSPF, the “default-information originate” command will not advertise to any other routers without a default route in the routing table. When added the “always” keyword, it tells the router to advertise a default route to other routers even if you don't have a default route in the routing table.

   Source: Adapted from community discussion — designated

   Next question

4. Question 464 · 504 in bank

   An engineer must configure a VXLAN routing on a Cisco Nexus 9000 Series Switch. The engineer requires a solution where all the leaf switches have the same gateway MAC and IP addresses. Which configuration set accomplishes this task?

   • ANX9K(config)# fabric forwarding anycast-gateway-mac AA:BB:AA:BB:AA:BB NX9K(config)# interface VLAN-interface-name NX9K(config-if)# vrf member vrf-name NX9K(config-if)# fabric forwarding mode anycast-gateway
   • BNX9K(config)# install feature-set fabric NX9K(config)# feature-set fabric NX9K(config)# fabric forwarding anycast-gateway-mac AA:BB:AA:BB:AA:BB NX9K(config)# interface VLAN-interface-name NX9K(config-if)# fabric forwarding mode anycast-gateway
   • CNX9K(config)# install feature-set fabric NX9K(config)# feature-set fabric NX9K(config)# fabric forwarding anycast-gateway-mac AA:BB:AA:BB:AA:BB NX9K(config)# interface VLAN-interface-name NX9K(config-if)# vrf member vrf-name NX9K(config-if)# fabric forwarding mode anycast-gateway
   • DNX9K(config)# fabric forwarding anycast-gateway-mac AA:BB:AA:BB:AA:BB NX9K(config)# interface VLAN-interface-name NX9K(config-if)# fabric forwarding mode anycast-gateway

   Show answer

   Answer: A

   Explanation

   Answer A is correct. I am not clear what would be the impact if you would configure anycast gateway without vrf. Bu in VxLAN config you would assign VRF for every subnet interface.

   Source: Adapted from community discussion — Gopz28

   References

   • Cisco documentation

   Next question

5. Question 465 · 504 in bank

   An engineer implements an ACI fabric and must implement microsegmentation of endpoints within the same IP subnet using a network-based attribute. The attribute mapping must allow IP subnet independence. Which attribute must be selected?

   • AIP
   • Btag
   • Ccustom
   • DMAC address

   Show answer

   Answer: D

   Explanation

   If you want to use a network-based attribute and classify IP addresses in the same subnet, you must use the MAC-based network attribute. IP-based microsegmented EPGs do not support classification for IP addresses in the same subnet. IP-based microsegmented EPGs are supported only when traffic requires Layer 3 routing. If the traffic is bridged, the microsegmentation policy cannot be enforced. Reference: https://www.cisco.com/c/en/us/td/docs/switches/datacenter/aci/apic/sw/3-

   Source: Adapted from community discussion — vincenzop

   References

   • Cisco documentation

   Next question

6. Question 466 · 504 in bank

   What is a characteristic of the install all command on the Cisco Nexus Series Switch?

   • Aautomatically checks the image integrity
   • Bcontinues the upgrade process if any step in the sequence fails
   • Cupgrades only certain modules
   • Dimpacts data plane traffic

   Show answer

   Answer: A

   Explanation

   Benefits of Using the install all Command The install all command provides the following benefits: ג€¢ You can upgrade the entire switch using just one procedure command. ג€¢ You can receive descriptive information on the intended changes to your system before you continue with the installation. ג€¢ You have the option to cancel the command. Once the effects of the command are presented, you can continue or cancel when you see this question (the default is no): Do you want to continue (y/n) [n] :y ג€¢ You can upgrade the entire switch using the least disruptive procedure. ג€¢ You can see the progress of this command on the console, Telnet, and SSH screens: ג€" After a switchover process, you can see the progress from both the supervisor modules. ג€" Before a switchover process, you can only see the progress from the active supervisor module. ג€¢ The command automatically checks the image integrity. This includes the running kickstart and system images. Reference: https://www.cisco.com/en/US/docs/storage/san_switches/mds9000/sw/rel_3_x/configuration/guides/cli_3_2/img.pdf

   References

   • Cisco documentation

   Next question

7. Question 467 · 504 in bank

   DRAG DROP - An engineer must configure the HSRP protocol to implement redundancy using two Cisco Nexus Series Switches, in addition, me HSRP must meet these requirements: * switch1 must retain the primary role if switch2 goes offline. * switch1 must retain the primary role until normal conditions are restored. * switch1 and switch2 must ensure that the routing tables are converged before taking the active role. * switch2 must retain the primary role if the default gateway is not reachable. Drag and drop the configuration commands from the right to the left to meet the requirements. The commands are used more than once. Not all commands are used. Select and Place:

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   I dont this answer is correct. track 100 decrement 200 + preempt delay 30 for Switch1 is ok. If default GW unreachable it will become secondary. track 100 decrement 200 on secondary (with default prio 100) will decrement it to zero actually (someone have tested, it will not decrease to negative, nor 1. straight to 0) and will leave switch as standby, not primary as question asks to do. suppose correct command missing in answers;

   Source: Adapted from community discussion — JCGO

   References

   • cisco.com documentation
   • cisco.com documentation

   

   Next question

8. Question 468 · 504 in bank

   

   Refer to the exhibit. During a vPC peer switch reload, there is packet loss between the server and the router. Which action must be taken to prevent this behavior during future reloads?

   • ASet the routed uplink ports of the Cisco Nexus peers as orphans.
   • BIncrease the vPC delay restore timer.
   • CDisable vPC ARP synchronize on the vPC peers.
   • DDecrease the OSPF hello and dead interval timers.

   Show answer

   Answer: B

   Explanation

   B is correct - we allow time for the vpc to learn all the routing and have all its interfaces ready before we preempt on the reloaded switch https://community.cisco.com/t5/switching/hsrp-delay-minimum-amp-reload-question/td-p/3327186

   Source: Adapted from community discussion — mauchi

   References

   • Cisco documentation
   • cisco.com documentation

   Next question

9. Question 469 · 504 in bank

   A Cisco ACI engineer must configure an access port on a Cisco ACI leaf switch. The access policy should be configured so that it supports L3Out connectivity concurrently with several EPGs that are mapped to this interface with the static port method. How should the access policy be configured?

   • Aby linking the interface policy group to multiple Attachable Access Entity Profiles
   • Bwith two interface policy groups that are linked to the same interface profile port selector
   • Cby mapping a single physical domain, mapped to the L3out and EPG interfaces
   • Dwith a single Attachable Access Entity Profile that is linked to the corresponding routed domain and physical domain

   Show answer

   Answer: D

   Explanation

   The correct answer is D - the access policy (the interface policy group) needs to have one single AAEP assigned (bcs its the same port/s). Then different physical domains can be used for the routed and switched domain.

   Source: Adapted from community discussion — mauchi

   Next question

10. Question 470 · 504 in bank

    

    Refer to the exhibit. An engineer monitors ingress traffic from Host-A and all traffic for VLAN 20 from Host-B. Which configuration must be implemented to monitor and export traffic to Network Analyzer?

    • ASW-1(config)# monitor session 5 SW-1(config-monitor)# source interface ethernet 1/2 rx SW-1(config-monitor)# source interface ethernet 1/1 tx SW-1(config-monitor)# source vlan 20 both SW-1(config-monitor)# destination ip 10.10.10.1 SW-1(config-monitor)# no shut
    • BSW-1(config)# monitor session 5 type erspan-source SW-1(config-erspan-src)# source interface ethernet 1/2 rx SW-1(config-erspan-src)# source vlan 20 both SW-1(config-erspan-src)# destination ip 10.10.10.1 SW-1(config-erspan-src)# erspan-id 111 SW-1(config-erspan-src)# no shut
    • CSW-1(config)# monitor session 5 SW-1(config-monitor)# source interface ethernet 1/2 rx SW-1(config-monitor)# source interface ethernet 1/1 both SW-1(config-monitor)# source vlan 20 both SW-1(config-monitor)# destination interface ethernet 2/1 SW-1(config-monitor)# no shut
    • DSW-1(config)# monitor session 5 type erspan SW-1(config-erspan-src)# source interface ethernet 1/2 rx SW-1(config-erspan-src)# source interface ethernet 1/1 both SW-1(config-erspan-src)# destination ip 10.10.10.1 SW-1(config-erspan-src)# mtu 1000 SW-1(config-erspan-src)# no shut

    Show answer

    Answer: B

    Explanation

    B is correct. look Step 5 source {interface type number| vlanvlan-ID} [, | -| both | rx | tx] https://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst3850/software/release/16-3/configuration_guide/b_163_consolidated_3850_cg/b_163_consolidated_3850_cg_chapter_01001010.pdf

    Source: Adapted from community discussion — SemperFi

    References

    • Cisco documentation

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

350-601 practice, question 461. 504 questions available.