All About Verified 350-601 Test

NEW QUESTION 1
Refer to the exhibit.

What is the reason the system-fm-vrrp checkpoint was created?

• A. The VRRP process crashed and the checkpoint was automatically created.
• B. The VRRP service restarted and the checkpoint was automatically created.
• C. The network administrator manually created it.
• D. The VRRP-enabled feature has been disabled.

Answer: D

NEW QUESTION 2
Refer to the exhibit.

The STP priority of N7K-1 and N7K-2 are the lowest in the network. Which statement describes STP on the vPC?

• A. N7K-1 and N7K-2 appear as a single STP root.
• B. N7K-1 appears as the STP root.
• C. N7K-1 preempts N7K-2 as the STP root.
• D. N7K-2 appears as the STP root.

Answer: A

NEW QUESTION 3
Which two statements about the process at upgrading an EPLD on a Cisco MDS 9000 Series Switch are correct? (Choose two.)

• A. EPLDs can be upgraded only to the latest EPLD image.
• B. EPLD upgrades can be completed without powering down the module during the upgrade.
• C. An upgrade verification identifies the impact of each EPLD upgrade.
• D. The EPLDs for all the modules on a switch must be upgraded at the same time.
• E. EPLDs can be upgraded without replacing the hardware.

Answer: CE

NEW QUESTION 4
Refer to the exhibit.

What is the result of implementing this configuration?

• A. The switch queries the TACACS+ server by using an encrypted text PAP login.
• B. The TACACS+ server uses the type-6 encrypted format.
• C. The switch queries the TACACS+ server by using a clear text PAP login.
• D. The timeout value on the TACACS+ server is 10 seconds.

Answer: D

NEW QUESTION 5
Port security is enabled on a Cisco MDS 9000 Series Switch.
Which statement is true?

• A. Port security can be enabled only globally and affects all VSANs.
• B. Any devices currently logged in must be added manually to the device database.
• C. Auto-learning is always enabled automatically when port security is enabled.
• D. Cisco Fabric Services must be disabled before enabling port security.

Answer: C

NEW QUESTION 6
An engineer is asked to use SaaS to manage Cisco computing.
Which two items are needed to accomplish the task? (Choose two.)

• A. Intersight
• B. UCS Central
• C. Device/Claim ID
• D. Node name/Serial Number
• E. UCS Manager

Answer: AE

NEW QUESTION 7
What are two capabilities of the Cisco Network Assurance Engine? (Choose two.)

• A. It validates that devices comply with network security policies.
• B. It predicts the impact of changes to the network.
• C. It predicts the network load on a data center.
• D. It ensures that network performance meets an SLA.
• E. It verifies the speed of network packet flows by using telemetry.

Answer: AB

NEW QUESTION 8
A network architect is asked to design and manage geographically distributed data centers across cities and decides to use a Multi-Site Orchestrator deployment. How many orchestrators should be deployed?

• A. 5
• B. 3
• C. 4
• D. 2

Answer: B

NEW QUESTION 9
Which statement about monitoring Fibre Channel traffic on a Cisco UCS 6332 Fabric Interconnect is true?

• A. Fibre Channel traffic can be monitored only on one vHBA per server.
• B. Fibre Channel traffic can be monitored as it is encapsulated as FCoE.
• C. The monitoring of Fibre Channel traffic is limited to the default VSAN.
• D. The destination port for monitoring must be an unassigned Fibre Channel port.

Answer: A

NEW QUESTION 10
An engineer must ensure fabric redundancy when implementing NPV mode on a Cisco MDS 9000 Series Switch.
Which action enables fabric redundancy?

• A. Use TE ports to connect to upstream switches.
• B. Add a port channel to upstream switches.
• C. Configure the NPV devices to use an external FLOGI database.
• D. Connect the NPV devices to multiple upstream switches.

Answer: B

NEW QUESTION 11
Which method must a network engineer use to upgrade the BIOS firmware or a Cisco UCS standalone C-Series rack- mount server?

• A. Use the U-ACPI Interface.
• B. Use the Cisco host upgrade utility.
• C. Use the Cisco hardware upgrade utility.
• D. Use the Cisco host firmware policy.

Answer: B

NEW QUESTION 12
What is a feature of NFS?

• A. zone-based access control
• B. Kerberos-based security model
• C. block-based file access
• D. role-based access control

Answer: B

NEW QUESTION 13
Which configuration implements static ingress replication?

• A.
• B.
• C.
• D.

Answer: D

NEW QUESTION 14
Which mroute state is created when Bidirectional PIM is deployed at a site?

• A. *.G
• B. MVPN Type-6
• C. MVPN Type-7
• D. S.G

Answer: A

NEW QUESTION 15
An engineer is seeking the most optimal on demand CPU performance while configuring the BIOS settings of a UCS C-series rack mount server.
What setting will accomplish this goal?

• A. C6 Retention
• B. C6 non-Retention
• C. C2 state
• D. C0/C1 state

Answer: A

NEW QUESTION 16
Refer to the exhibit.

A network engineer is setting up a multihomed OTV network. The first site has been set up with a primary and secondary adjacency server.
Which configuration must be added on the remote OTV AEDs site? A.

• A.
• B.
• C.
• D.

Answer: C

NEW QUESTION 17
Refer to the exhibit.

Why does the Python code for Cisco NX-API print an error message?

• A. The JSON is not a supported format for the NX-API.
• B. The "type" is wrong in the header of the request and should be "cli_conf"
• C. NX-API does not allow configuration for features via the requests module.
• D. The "type" is wrong in the body of the request and should be "cli_conf"

Answer: C

NEW QUESTION 18
DRAG DROP
A network engineer must implement RBAC on Cisco MDS 9000 Series Multilayer Switches.
Drag and drop the Cisco MDS 9000 Series roles from the left onto the correct categories on the right.
Select and Place:

• A. Mastered
• B. Not Mastered

Answer: A

Explanation:

NEW QUESTION 19
An engineer has a primary fabric that is named UCS-A and a secondary fabric that is named UCS-B. A certificate request that has a subject name of sjc2021 for a keyring that is named kr2021 needs to be created. The cluster IP address is 10.68.68.68.
Which command set creates this certificate request?

• A. UCS-A # scope keyring kr2021UCS-A /keyring # create certreq 10.68.68.68 sjc2021UCS-A /keyring* # commit-buffer
• B. UCS-B # scope keyring kr2021UCS-B /keyring # create certreq ip 10.68.68.68 subject-name sjc2021 UCS- B /keyring* # commit-both
• C. UCS-B# scope securityUCS-B /security # scope keyring kr2021UCS-B /security/keyring # set certreq 10.68.68.68 sjc2021UCS-B /security/keyring* # commit-both
• D. UCS-A# scope securityUCS-A /security # scope keyring kr2021UCS-A /security/keyring # create certreq ip 10.68.68.68 subject-name sjc2021 UCS- A /security/keyring* # commit-buffer

Answer: D

NEW QUESTION 20
A host in EPG Client wants to talk to a webserver in EPG Web. A contract with default settings is defined between EPG Client and EPG Web, which allows TCP communication initiated by the client toward the webserver with TCP destination port 80.
Which statement is true?

• A. If EPG Web is made a preferred group member, a contract between EPG Client and EPG Web is no longer required for the host in EPG Client to reach the webserver in EPG Web.
• B. If vzAny is configured to consume and provide a "deny all" contract, traffic between EPG Client and EPG Web is no longer allowed.
• C. The host in EPG Client can connect to TCP destination port 80 on the webserver in EPG We
• D. The webserver will not be able to initiate a separate TCP connection to a host port with TCP source port 80.
• E. The host in EPG Client can connect to TCP destination port 80 on the webserver in EPG We
• F. The webserver can initiate a separate TCP connection to a host port with TCP source port 80.

Answer: D

NEW QUESTION 21
An engineer is running an ACI fabric, has VMM integration with VMware vCenter, and wants to enable microsegmentation based on vCenter VM attributes. Which statement about microsegmentation is true?

• A. ACI does not support microsegmentation based on vCenter VM attribute
• B. You should use network attributes for microsegmentation.
• C. When enabled, microsegmentation performs distributed switching and routing on the ESXi hosts.
• D. Microsegmentation is supported only using AVE or AVS.
• E. An ACI microsegmented EPG automatically creates a port group with a private VLAN configured on a VMware vCenter distributed virtual switch.

Answer: D

NEW QUESTION 22
Which two methods are available to manage an ACI REST API session authentication when a user is unauthenticated? (Choose two.)

• A. POST to aaaUserLogin
• B. GET to aaaListDomains
• C. GET aaaRefresh
• D. DELETE to aaaLogout
• E. POST to aaaLogin

Answer: CE

NEW QUESTION 23
Which two components should be checked when a Cisco Nexus 9000 Series Switch fails to boot using POAP? (Choose two.)

• A. POAP feature license
• B. DHCP server to bootstrap IP information
• C. image noted in the script file against switch bootflash
• D. script signed with security key
• E. TFTP server that contains the configuration script

Answer: BE

NEW QUESTION 24
A server engineer wants to control power usage on a Cisco UCS C-Series rack server down to the component level.
Which two components support specific power limits? (Choose two.)

• A. storage controller
• B. network controller
• C. processor
• D. graphic card
• E. memory

Answer: AB

NEW QUESTION 25
An engineer must implement a Cisco UCS system at a customer site. One of the requirements is to implement SAN boot. The storage system maps the source WWPN to a unique LUN. Which method does Cisco recommend to configure the SAN boot?

• A. Define the vHBAs as bootable and leave the boot target definition empty.
• B. Create a SAN boot policy in which every initiator is mapped to a different target LUN.
• C. Define the vHBAs as bootable and leave the default values on the boot target definition.
• D. Create a SAN boot policy in which every initiator is mapped to the same target LUN.

Answer: D

NEW QUESTION 26
......