Implementing and Operating Cisco Data Center Core Technologies (DCCOR) practice questions

1. Question 1 of 25

   DRAG DROP - An engineer is configuring VNTag between a virtualized server and a Cisco Nexus 5500 Series switch. Drag and drop the configuration steps from the left into the correct order on the right. Select and Place:

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer

   Explanation

   Reference: https://www.cisco.com/c/en/us/td/docs/switches/datacenter/nexus5500/sw/adapter-fex/6x/b_5500_Adapter_FEX_Config_6x/ b_5500_Adapter_FEX_Config_602N11_chapter_010.html

   Adapted from community discussion by corelate_9 · 2023-09-30 · 8 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

   Supporting references

   • Cisco documentation
   • Cisco documentation
   • Cisco documentation
   • Cisco documentation

   Answer figure

   

   View community discussion4

   Candidate context

   Question 1 discussion

   These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by 350-601 or CertExamHQ.

   1. K

      kkzz82

      2022-04-12

      22 upvotes

      nstall feature-set virtualization enable feature-set virtualization VNTag interface support port profile support NIV vNIC of the server

   2. C

      corelate_9

      2023-09-30

      8 upvotes

      guys, these document is the only valid reference: https://www.cisco.com/c/en/us/td/docs/switches/datacenter/nexus5500/sw/adapter-fex/7x/b_5500_Adapter_FEX_Config_7x/b_5500_Adapter_FEX_Config_7x_chapter_010.html Configuring the Adapter FEX Feature ------------------------------------------------------------- Configure the switch to support Adapter-FEX. ------------------------------------------------------------------------------ Before You Begin Enable the Adapter FEX feature by enabling the virtualization feature set. Enable network interface virtualization (NIV) on the physical server adapters using the Cisco Integrated Management Controller (CIMC). Therefore the correct step are: 1. Install feature 2. enable feature 3. Support NIV 4. port profile 5 VNTag 6 vNIC of the server

   3. K

      kkzz82

      2022-04-12

      8 upvotes

      first you set switchport mode vntag and then create port profile https://www.cisco.com/c/en/us/support/docs/switches/nexus-5000-series-switches/117691-config-5500switch-00.html

   4. F

      fatmok

      2023-09-11

      6 upvotes

      there are 2 verions available.... https://www.cisco.com/c/en/us/support/docs/switches/nexus-5000-series-switches/117691-config-5500switch-00.html and https://www.cisco.com/c/en/us/td/docs/switches/datacenter/nexus5500/sw/adapter-fex/7x/b_5500_Adapter_FEX_Config_7x/b_5500_Adapter_FEX_Config_7x_chapter_010.html one is more recent: install feature-set virtualization enable feature-set virtualization port profile VNTag support NIV vNIC of the server

2. Question 2 of 25

   Refer to the exhibit.

   

   What is a characteristic presented in the service profile of the UUID?

   • Aunique system generated
   • Ballocated from a UUID pool
   • Cvendor assigned
   • Dbased on the hardware

   Show answer

   Correct answer: D

   How others answered

   • D67%
   • B33%

   Only 67% agreed on this answer — treat it as contested rather than settled.

   Explanation

   Answer should be D. Based on the hardware Reason: set identity dynamic-uuid derived means it will derive the UUID from the one burned into the hardware at manufacture.

   Adapted from community discussion by ZlightkunZ · 2020-12-26 · 26 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

   Supporting references

   • Cisco documentation
   • Cisco documentation
   • Cisco documentation
   • Cisco documentation

   View community discussion4

   Candidate context

   Question 2 discussion

   These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by 350-601 or CertExamHQ.

   1. Z

      ZlightkunZ

      2020-12-26

      26 upvotes

      Answer should be D. Based on the hardware Reason: set identity dynamic-uuid derived means it will derive the UUID from the one burned into the hardware at manufacture.

   2. S

      shagua

      2021-01-17

      18 upvotes

      Answer should be D UCS-A /org/service-profile # set identity {dynamic-uuid {uuid | derived} | dynamic-wwnn {wwnn | derived} | uuid-pool pool-name | wwnn-pool pool-name} Specifies how the server acquires a UUID or WWNN. You can do one of the following: Create a unique UUID in the form nnnnnnnn-nnnn-nnnn-nnnnnnnnnnnn . Derive the UUID from the one burned into the hardware at manufacture. Use a UUID pool. Create a unique WWNN in the form hh : hh : hh : hh : hh : hh : hh : hh . Derive the WWNN from one burned into the hardware at manufacture. Use a WWNN pool. https://www.cisco.com/en/US/docs/unified_computing/ucs/sw/cli/config/guide/1.4.1/CLI_Config_Guide_1_4_1_chapter27.html

   3. H

      Heyyeh71

      2021-01-16

      5 upvotes

      Answer is B. It was typical to use the derived values (burned-in values) for UUID and adapter identities when you deployed (installed, booted, or accessed) the Cisco Unified Computing System (UCS) Blade with the Rack-Mounted (traditional server) paradigm. https://www.cisco.com/c/en/us/support/docs/servers-unified-computing/ucs-manager/110295-create-pools-for-service-profile.html

   4. C

      ciscochick

      2021-03-17

      6 upvotes

      B is correct. It's a trick question... the UUID pool name is 'derived'

3. Question 3 of 25

   Select 2

   A new employee must be granted access to add VLANs into an existing Cisco UCS Manager and configure NTP synchronization with date and time zone settings. Which two privileges must be granted to the employee to complete the task? (Choose two.)

   • AService Profile Compute (ls-compute)
   • BExt LAN Policy (ext-lan-policy)
   • CService Profile Network Policy (ls-network-policy)
   • DService Profile Config (ls-config)
   • EExt LAN Config (ext-lan-security)

   Show answer

   Correct answer: B, E

   How others answered

   • BE100%

   Explanation

   Answer is B and E Ext Lan Security (ext-lan-security) This privilege allows a user to configure NTP providers, and date and time zone settings. Ext Lan Policy (ext-lan-policy) This privilege allows a user to configure LAN settings on a fabric interconnect, including Ethernet border ports, VLANs, LAN PIN groups, Ethernet SPAN sessions, LAN policies, and vNIC/vHBA placement policies. Service profiles can add VLANs to vNICs that are configured in UCS Manager. So service profile is not valid solution.

   Adapted from community discussion by CactusJoe · 2022-11-03 · 12 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

   Supporting references

   • Cisco documentation
   • Cisco documentation
   • Cisco documentation
   • Cisco documentation

   View community discussion4

   Candidate context

   Question 3 discussion

   These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by 350-601 or CertExamHQ.

   1. C

      CactusJoe

      2022-11-03

      12 upvotes

      Answer is B and E Ext Lan Security (ext-lan-security) This privilege allows a user to configure NTP providers, and date and time zone settings. Ext Lan Policy (ext-lan-policy) This privilege allows a user to configure LAN settings on a fabric interconnect, including Ethernet border ports, VLANs, LAN PIN groups, Ethernet SPAN sessions, LAN policies, and vNIC/vHBA placement policies. Service profiles can add VLANs to vNICs that are configured in UCS Manager. So service profile is not valid solution.

   2. M

      misjdg11

      2023-01-22

      3 upvotes

      Agree with CactusJoe, B & E: https://www.cisco.com/c/en/us/td/docs/unified_computing/ucs/ucsm_privileges/3-2/UCSM-Privileges-3_2/UCSM-Privileges-3_2_chapter_01.html#:~:text=Ext%20Lan%20Security%20(ext%2Dlan,date%20and%20time%20zone%20settings.&text=with%20this%20Privilege-,A%20user%20with%20this%20privilege%20can%20perform%20the%20following%20tasks,providers%2C%20date%20and%20time%20zone.

   3. S

      Smoothey

      2023-09-04

      Selected B, E1 upvote

      xt Lan Policy (ext-lan-policy) This privilege allows a user to configure LAN settings on a fabric interconnect, including Ethernet border ports, VLANs, LAN PIN groups, Ethernet SPAN sessions, LAN policies, and vNIC/vHBA placement policies. Ext Lan Security (ext-lan-security) This privilege allows a user to configure NTP providers, and date and time zone settings.

   4. M

      mku_72

      2024-01-11

      Selected B, E1 upvote

      Answer is B and E. https://www.cisco.com/c/en/us/td/docs/unified_computing/ucs/ucsm_privileges/3-2/UCSM-Privileges-3_2/UCSM-Privileges-3_2_chapter_01.html

4. Question 4 of 25

   What is a recommended design choice in a topology for multipathing iSCSI traffic?

   • Asingle initiator to dual targets
   • Btwo NICs bonded together on the initiator
   • Cdual initiators to a single target with bonded interfaces
   • Dinitiators and targets in separate subnets

   Show answer

   Correct answer: C

   How others answered

   • C40%
   • A20%
   • B20%

   Only 40% agreed on this answer — treat it as contested rather than settled.

   Explanation

   You can create multiple paths by configuring multiple ports and target portals on different IP subnets. By keeping initiator and target ports in different subnets, you can force ESXi to create paths through specific ports. In this configuration, you do not use port binding because port binding requires that all initiator and target ports are on the same subnet. Reference: https://docs.vmware.com/en/VMware-vSphere/7.0/com.vmware.vsphere.storage.doc/GUID-4C19E34E-764C-4069-9D9F-D0F779F2A96C.html

   Adapted from community discussion by Scheldon · 2023-04-23 · 2 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

   Supporting references

   • Cisco documentation
   • docs.vmware.com documentation
   • Cisco documentation

   View community discussion4

   Candidate context

   Question 4 discussion

   These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by 350-601 or CertExamHQ.

   1. K

      knorrapple

      2021-07-13

      10 upvotes

      D is wrong according to https://www.cisco.com/c/en/us/td/docs/switches/datacenter/nexus1000/sw/4_2_1_s_v_1_5_1/system_management/configuration/guide/n1000v_system/n1000v_system_13iscsi.html#wp1052813 shouldn't it be C??

   2. S

      Scheldon

      2023-04-23

      Selected C2 upvotes

      Per VM documentation https://docs.vmware.com/en/VMware-vSphere/7.0/com.vmware.vsphere.storage.doc/GUID-4C19E34E-764C-4069-9D9F-D0F779F2A96C.html Looks like we have 2 answers for this question which is C&D. Port binding on Initiator will allow to create multiple paths to single target. We can create multiple paths by configuring multiple ports and target portals on different IP subnets. In this situation port binding is not in use. In this particular question I would reply C but we should have possibility to choose 2 answers.

   3. G

      GuyThatTakesDumps

      2022-09-25

      4 upvotes

      D is right, because there will be two subnets for each two initiator and two targets

   4. G

      Gopz28

      2021-12-23

      2 upvotes

      Answer D seems to be correct: You can create multiple paths by configuring multiple ports and target portals on different IP subnets. By keeping initiator and target ports in different subnets, you can force ESXi to create paths through specific ports. In this configuration, you do not use port binding because port binding requires that all initiator and target ports are on the same subnet. https://docs.vmware.com/en/VMware-vSphere/7.0/com.vmware.vsphere.storage.doc/GUID-4C19E34E-764C-4069-9D9F-D0F779F2A96C.html

5. Question 5 of 25

   A network engineer needs to upgrade the EPLDs of the fabric modules for a Cisco MDS director-class switch. In which order are components reloaded during the process?

   • Aone fabric module at the time
   • Ball fabric modules followed by the entire switching platform
   • Call fabric modules in parallel
   • Done module and one supervisor at the time

   Show answer

   Correct answer: A

   How others answered

   • A53%
   • D47%

   Only 53% agreed on this answer — treat it as contested rather than settled.

   Explanation

   https://www.cisco.com/c/en/us/td/docs/switches/datacenter/mds9000/sw/6_2/release/notes/epld/epld_rn.html#pgfId-138014 On the Cisco MDS 9513 director switch, there is no command to directly update the fabric module EPLD. The fabric module EPLD is updated as part of the corresponding supervisor module EPLD update, that is, fabric module 1 is updated as part of the slot 7 supervisor module update, and fabric module 2 is updated as part of the slot 8 supervisor module update. For information about how to update Cisco MDS 9513 supervisor modules, see “Installing Supervisor Module EPLDs” section.

   Adapted from community discussion by Alphonza · 2022-04-24 · 2 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

   Supporting references

   • Cisco documentation
   • Cisco documentation
   • Cisco documentation
   • Cisco documentation

   View community discussion4

   Candidate context

   Question 5 discussion

   These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by 350-601 or CertExamHQ.

   1. M

      mendieta

      2022-04-17

      4 upvotes

      D is the best answer for me. https://www.cisco.com/c/en/us/td/docs/switches/datacenter/mds9000/sw/6_2/release/notes/epld/epld_rn.html#62980

   2. S

      Salilgen

      2022-11-21

      1 upvote

      I think correct answer is A. The Cisco MDS 9700 Series and Cisco MDS 9513 director-class switch have dedicated fabric modules. These modules contain EPLDs, which can be upgraded. All other Cisco MDS switches do not have these modules, so this process is not applicable for them For the Cisco MDS 9700 Series of switches, use the install all epld uri parallel xbar-module slot command to update EPLD images on the fabric modules. This process reloads the updated module. On the Cisco MDS 9513 Multilayer Director switch, there is no command to directly update the fabric module EPLD. The fabric module EPLD is updated as part of the corresponding supervisor module EPLD update; that is, fabric module 1 is updated as part of the slot 7 supervisor module update, and fabric module 2 is updated as part of the slot 8 supervisor module update. D only seems right for MDS 9513

   3. O

      onix

      2021-07-21

      3 upvotes

      Agree, Answer is A. https://www.cisco.com/c/en/us/td/docs/switches/datacenter/mds9000/sw/8_x/release_notes/epld/epld_rn_8_4_1a.html#pgfId-321469 "To update all EPLDs sequentially with a single command, use the install all epld command with the module all fan-module all xbar all options. After each module is upgraded, it is power cycled to load the EPLD update."

   4. A

      Alphonza

      2022-04-24

      2 upvotes

      https://www.cisco.com/c/en/us/td/docs/switches/datacenter/mds9000/sw/6_2/release/notes/epld/epld_rn.html#pgfId-138014 On the Cisco MDS 9513 director switch, there is no command to directly update the fabric module EPLD. The fabric module EPLD is updated as part of the corresponding supervisor module EPLD update, that is, fabric module 1 is updated as part of the slot 7 supervisor module update, and fabric module 2 is updated as part of the slot 8 supervisor module update. For information about how to update Cisco MDS 9513 supervisor modules, see “Installing Supervisor Module EPLDs” section.

6. Question 6 of 25

   

   Refer to the exhibit. A network engineer created a new role to be assigned to the SAN users. The requirement is for users to have these characteristics: * permitted to show access to the system, SNMP, module, and hardware information. * permitted to run debug zone and exec fcping commands. * restricted from accessing show feature environment command. Which configuration set meets these requirements?

   • AMDS-B(config)# role name default-role MDS-B(config-role)# rule 5 deny show feature environment
   • BMDS-B(config)# role name default-role MDS-B(config-role)# rule 5 permit show feature module MDS-B(config-role)# rule 6 deny *
   • CMDS-B(config)# role name san-users MDS-B(config-role)# rule 3 deny show feature environment
   • DMDS-B(config)# role name san-users MDS-B(config-role)# rule 3 permit show feature system MDS-B(config-role)# rule 4 permit show feature hardware MDS-B(config-role)# rule 5 permit show feature module

   Show answer

   Correct answer: A

   How others answered

   • A55%
   • C27%
   • D18%

   Only 55% agreed on this answer — treat it as contested rather than settled.

   Explanation

   I think it's A because you can't deny what's already allowed on the default role. https://www.cisco.com/c/en/us/td/docs/switches/datacenter/nexus9000/sw/7-x/security/configuration/guide/b_Cisco_Nexus_9000_Series_NX-OS_Security_Configuration_Guide_7x/b_Cisco_Nexus_9000_Series_NX-OS_Security_Configuration_Guide_7x_chapter_01000.pdf&ved=2ahUKEwjI3KD-6KD5AhWll1YBHXQpC9AQFnoECA4QAQ&usg=AOvVaw0LMfWmT-hIZrUAFuMORswG If you belong to multiple roles, you can execute a combination of all the commands permitted by these roles. Access to a commandtakes priority over being denied access to a command. For example, suppose a user has RoleA, which denied access to the configuration commands. However, the user also has RoleB, which has access to the configuration commands. In this case, the user has access to the configuration commands.

   Adapted from community discussion by harmann · 2023-07-30 · 3 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

   Supporting references

   • Cisco documentation
   • Cisco documentation
   • Cisco documentation

   View community discussion4

   Candidate context

   Question 6 discussion

   These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by 350-601 or CertExamHQ.

   1. H

      harmann

      2023-07-30

      Selected A3 upvotes

      I think it's A because you can't deny what's already allowed on the default role. https://www.cisco.com/c/en/us/td/docs/switches/datacenter/nexus9000/sw/7-x/security/configuration/guide/b_Cisco_Nexus_9000_Series_NX-OS_Security_Configuration_Guide_7x/b_Cisco_Nexus_9000_Series_NX-OS_Security_Configuration_Guide_7x_chapter_01000.pdf&ved=2ahUKEwjI3KD-6KD5AhWll1YBHXQpC9AQFnoECA4QAQ&usg=AOvVaw0LMfWmT-hIZrUAFuMORswG If you belong to multiple roles, you can execute a combination of all the commands permitted by these roles. Access to a commandtakes priority over being denied access to a command. For example, suppose a user has RoleA, which denied access to the configuration commands. However, the user also has RoleB, which has access to the configuration commands. In this case, the user has access to the configuration commands.

   2. U

      U_O

      2024-07-05

      Selected A2 upvotes

      I think we can make changes in the default-role and not in the system generated roles like network-admin, network-operator and server admin. The default-role applies to all users so even if the deny access in san-users role the user will still get the access. Hence option A looks to be the right one. https://www.cisco.com/c/en/us/td/docs/switches/datacenter/mds9000/sw/8_x/config/security/cisco_mds9000_security_config_guide_8x/configuring_users_and_common_roles.html

   3. D

      DSAM9

      2025-02-07

      1 upvote

      If the default role, say A, has the following rules: rule 5 permit show feature environment rule 4 permit show feature hardware rule 3 permit config feature ssh rule 2 permit config feature ntp rule 1 permit config feature tacacs+ And, a specific user is assigned to the following role, say B, with two rules: rule 6 permit config feature dpvm rule 2 deny config feature ntp Rule 2 of A and B are in conflict. In this case, A overrides the conflicting rule of B, and the user is assigned with the remaining rules of A and B, including the overridden rule: rule 6 permit config feature dpvm rule 5 permit show feature environment rule 4 permit show feature hardware rule 3 permit config feature ssh rule 2 permit config feature ntp -----------> Overridden rule rule 1 permit config feature tacacs+

   4. 2

      25e4462

      2025-02-17

      1 upvote

      The documentation is incorrect, only network-admin & network-operation roles cannot be changed. Default-role can be amended. (config)# role name network-operator ERROR: Cannot configure system defined role "network-operator" (config)# role name default-role (config-role)# rule 6 permit show feature version Role: default-role Description: This is a system defined role and applies to all users. Vsan policy: permit (default) ------------------------------------------------- Rule Type Command-type Feature ------------------------------------------------- 1 permit show system 2 permit show snmp 3 permit show module 4 permit show hardware 5 permit show environment 6 permit show version

7. Question 7 of 25

   Select 2

   A POAP-enabled Cisco Nexus switch will not enter POAP mode. Which two conditions should be verified? (Choose two.)

   • ANo startup configuration is available.
   • BThe switch is in bootup process.
   • CThe license file is missing on the switch.
   • DBootflash must contain a special directory named POAP with poap.py file.
   • ENo Cisco NX-OS image is present on the bootflash.

   Show answer

   Correct answer: A, B

   How others answered

   • AB75%

   Explanation

   https://www.cisco.com/c/en/us/td/docs/switches/datacenter/nexus9000/sw/7-x/fundamentals/configuration/guide/b_Cisco_Nexus_9000_Series_NX-OS_Fundamentals_Configuration_Guide_7x/b_Cisco_Nexus_9000_Series_NX-OS_Fundamentals_Configuration_Guide_7x_chapter_0100.html#concept_88533D1764C843189A825D54B9FA9E7D C is Correct: The POAP feature does not require a license and is enabled by default. However for the POAP feature to function, appropriate licenses must be installed on the devices in the network before the deployment of the network. E is also Correct : The switch software image must support POAP for this feature to function. A cant be an answer becuase thats why Switch Goes to POAP "When a device with the POAP feature boots and does not find the startup configuration, the device enters POAP mode, locates a DHCP server...(output omitted) and B doesnt make any sense. and i havent found anything on D So Correct ans is C & E

   Adapted from community discussion by Cobra_kai · 2022-04-21 · 8 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

   Supporting references

   • Cisco documentation
   • Cisco documentation
   • Cisco documentation
   • Cisco documentation
   • Cisco documentation

   View community discussion4

   Candidate context

   Question 7 discussion

   These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by 350-601 or CertExamHQ.

   1. C

      Cobra_kai

      2022-04-21

      8 upvotes

      https://www.cisco.com/c/en/us/td/docs/switches/datacenter/nexus9000/sw/7-x/fundamentals/configuration/guide/b_Cisco_Nexus_9000_Series_NX-OS_Fundamentals_Configuration_Guide_7x/b_Cisco_Nexus_9000_Series_NX-OS_Fundamentals_Configuration_Guide_7x_chapter_0100.html#concept_88533D1764C843189A825D54B9FA9E7D C is Correct: The POAP feature does not require a license and is enabled by default. However for the POAP feature to function, appropriate licenses must be installed on the devices in the network before the deployment of the network. E is also Correct : The switch software image must support POAP for this feature to function. A cant be an answer becuase thats why Switch Goes to POAP "When a device with the POAP feature boots and does not find the startup configuration, the device enters POAP mode, locates a DHCP server...(output omitted) and B doesnt make any sense. and i havent found anything on D So Correct ans is C & E

   2. M

      MaxG

      2023-03-23

      8 upvotes

      It's B and C. Not A - this is why we run POAP Not D - there is no such thing as poap.py file Not E - if there is no image on the bootflash, POAP will download a new image This leaves us with B and C

   3. S

      Scheldon

      2024-10-23

      Selected A, B4 upvotes

      If we will look on that question like It need to be verified if: A. No startup configuration is available. - Yes it need to be verified, because if we have configuration available on Switch then there is no need to RUN POAP, so NO POAP. B. The switch is in bootup process. - Yes it need to be verified, because if yes then we have a problem with start POAP. C. The license file is missing on the switch. - There is no license needed for POAP. POAP is enabled by default. The only licence which would be need is for example on TFTP server, but in that situation POAP will start but will not be able to download something (Soft or script) D. Bootflash must contain a special directory named POAP with poap.py file. - No. Switch can be compleatly clean and POAP should RUN. E. No Cisco NX-OS image is present on the bootflash. - In this situation POAP should RUN and download NX-OS. This is for what POAP is made for. For me A and B. But who knows what someone from CISCO had in mind???

   4. J

      Jey10

      2022-11-01

      6 upvotes

      I think A & B are correct. Which conditions should be verified, so they need to be TRUE. Like no startup (A) and bootup (B). C means that it needs to miss a license file and E means it needs to miss an NX-OS image. So it has to be A & B because they must be true. If you choose A & C as people say, it is contradictory because A is true and C must be false

8. Question 8 of 25

   The Cisco Nexus switch Generic Online Diagnostics policy for a PortLoopback test requires 10 consecutive failures to error disable the port. The customer wants to change it to 5 consecutive failures. Which configuration applies the changes for module 1 only?

   • ANexus(config)# event manager applet custom-PortLoopback override __PortLoopback Nexus(config-applet)# event gold mod all test PortLoopback testing-type bootup consecutive-failure 5 Nexus(config-applet)# action 1 publish-event
   • BNexus(config)# event manager applet custom-PortLoopback override __PortLoopback Nexus(config-applet)# event gold mod 1 test PortLoopback testing-type monitoring consecutive-failure 5 Nexus(config-applet)# action 1 publish-default
   • CNexus(config)# event manager applet custom-PortLoopback override __PortLoopback Nexus(config-applet)# event gold mod all test PortLoopback testing-type monitoring consecutive-failure 5 Nexus(config-applet)# action 1 policy-default
   • DNexus(config)# event manager applet custom-PortLoopback override __PortLoopback Nexus(config-applet)# event gold mod 1 test PortLoopback testing-type bootup consecutive-failure 5 Nexus(config-applet)# action 1 policy-event

   Show answer

   Correct answer: C

   How others answered

   • C35%
   • B35%
   • D29%

   Only 35% agreed on this answer — treat it as contested rather than settled.

   Explanation

   C should be the answer https://www.cisco.com/c/en/us/td/docs/switches/datacenter/mds9000/sw/8_x/config/system-management/cisco_mds9000_system_management_config_guide_8x/configuring_the_embedded_event_manager.html#con_1000285 Note If you want to allow the triggered event to process the default actions also, you must explicitly configure an EEM action with event-default or policy-default, based on the type of policy. For example, if you match a CLI command in a match statement, you must add the event-default action statement to the EEM policy. If the event-default action statement is not added, EEM will not allow the CLI command to execute.

   Adapted from community discussion by g_kuchima · 2023-01-14 · 2 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

   Supporting references

   • Cisco documentation
   • Cisco documentation
   • Cisco documentation

   View community discussion4

   Candidate context

   Question 8 discussion

   These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by 350-601 or CertExamHQ.

   1. A

      akm88

      2022-05-15

      1 upvote

      https://docplayer.net/45256558-Advanced-troubleshooting-nexus-7000-series-switches.html GOLD: Generic On-Line Diagnostics GOLD tests & corrective actions are run via EEM as system policies Nexus(config)# show event manager system-policy Name : PortLoopback Description : Do CallHome, log error and disable further HM testing on affected ports after 10 consecutive failures of GOLD "PortLoopback" test Overridable : Yes Can override various GOLD test s parameters Original portloopback policy required 10 consecutive failures Nexus(config)# event manager applet custom-portloopback override PortLoopback Nexus(config-applet)# event gold mod 2 test PortLoopback testing-type monitoring consecutive-failure 5 Nexus(config-applet)# action 1 policy-default Nexus(config-applet)# show event manager policy internal Name : custom-portloopback (overrides PortLoopback) Policy Type : applet Event Specification : event gold module 2 test PortLoopback testing-type monitoring After overriding policy, consecutive-failure 5 now requires only 5. Action : 1,sup:service:default Event Specification active on : Active

   2. G

      g_kuchima

      2023-01-14

      2 upvotes

      C should be the answer https://www.cisco.com/c/en/us/td/docs/switches/datacenter/mds9000/sw/8_x/config/system-management/cisco_mds9000_system_management_config_guide_8x/configuring_the_embedded_event_manager.html#con_1000285 Note If you want to allow the triggered event to process the default actions also, you must explicitly configure an EEM action with event-default or policy-default, based on the type of policy. For example, if you match a CLI command in a match statement, you must add the event-default action statement to the EEM policy. If the event-default action statement is not added, EEM will not allow the CLI command to execute.

   3. M

      mauchi

      2022-05-04

      Selected C3 upvotes

      It's C, policy-event doesnt exist, its policy-default https://www.cisco.com/c/en/us/td/docs/switches/datacenter/nexus5600/sw/system_management/7x/b_5600_System_Mgmt_Config_7x/configuring_eem.pdf

   4. S

      Scheldon

      2023-04-23

      Selected C1 upvote

      Looks like C is correct as we need to have monitoring https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/eem/command/eem-cr-book/eem-cr-e1.html#:~:text=scheduled%20diagnostic%20tests.-,monitoring,-%2D%2DSpecifies%20the%20diagnostic and the only correct other option is policy-default https://www.cisco.com/c/en/us/td/docs/switches/datacenter/mds9000/sw/8_x/config/system-management/cisco_mds9000_system_management_config_guide_8x/configuring_the_embedded_event_manager.html#con_1000285:~:text=action%20number-,policy%2Ddefault,-Executes%20the%20default publish-default doesn't exist.. we have publish-event only

9. Question 9 of 25

   Port security is enabled on a Cisco MDS 9000 Series Switch. Which statement is true?

   • APort security can be enabled only globally and affects all VSANs.
   • BAny devices currently logged in must be added manually to the device database.
   • CAuto-learning is always enabled automatically when port security is enabled.
   • DCisco Fabric Services must be disabled before enabling port security.

   Show answer

   Correct answer: C

   How others answered

   • C100%

   Explanation

   About Enabling Auto-learning - The state of the auto-learning configuration depends on the state of the port security feature: ג€¢ If the port security feature is not activated, auto-learning is disabled by default. ג€¢ If the port security feature is activated, auto-learning is enabled by default (unless you explicitly disabled this option). Reference: https://www.cisco.com/en/US/docs/storage/san_switches/mds9000/sw/rel_3_x/configuration/guides/fm_3_3_1/psec.html#:~:text=About%20Enabling% 20Auto%2Dlearning,-The%20state%20of&text=If%20the%20port%20security%20feature,by%20using%20the%20force%20option

   Adapted from community discussion by careca · 2023-01-26 · 8 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

   Supporting references

   • Cisco documentation
   • Cisco documentation
   • Cisco documentation

   View community discussion4

   Candidate context

   Question 9 discussion

   These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by 350-601 or CertExamHQ.

   1. C

      careca

      2023-01-26

      8 upvotes

      Yes it is... (...) By default, the port security feature is not activated in any switch in the Cisco MDS 9000 Family. By activating the port security feature, the following apply: •Auto-learning is also automatically enabled, which means: (...) https://www.cisco.com/en/US/docs/storage/san_switches/mds9000/sw/rel_3_x/configuration/guides/fm_3_3_1/psec.html#wp1297119

   2. U

      Ultimabstract

      2022-07-14

      4 upvotes

      Correct https://www.cisco.com/en/US/products/ps5989/products_configuration_guide_chapter09186a00805ed01e.html#wp1297119

   3. T

      tazerman

      2023-03-07

      1 upvote

      Dynamic Method By default, when you enable port security on an interface, you enable the dynamic learning method. With this method, the device secures MAC addresses as ingress traffic passes through the interface. If the address is not yet secured and the device has not reached any applicable maximum, it secures the address and allows the traffic. The device stores dynamic secure MAC addresses in memory. A dynamic secure MAC address entry remains in the configuration of an interface until one of the following events occurs: The device restarts The interface restarts The address reaches the age limit that you configured for the interface You explicitly remove the address You configure the interface to act as a Layer 3 interface

   4. O

      onix

      2023-07-19

      2 upvotes

      Port-security can be enabled individually for a VSAN: https://www.cisco.com/c/en/us/td/docs/switches/datacenter/mds9000/sw/8_x/config/security/cisco_mds9000_security_config_guide_8x/configuring_port_security.html switch(config)# port-security activate vsan 1 Activates the port security database for the specified VSAN, and automatically enables auto-learning.

10. Question 10 of 25

    A host in EPG Client wants to talk to a webserver in EPG Web. A contract with default settings is defined between EPG Client and EPG Web, which allows TCP communication initiated by the client toward the webserver with TCP destination port 80. Which statement describes this scenario?

    • AIf EPG Web is made a preferred group member, a contract between EPG Client and EPG Web is no longer required for the host in EPG Client to reach the webserver in EPG Web.
    • BIf vzAny is configured to consume and provide a "deny all" contract, traffic between EPG Client and EPG Web is no longer allowed.
    • CThe host in EPG Client is allowed to connect to TCP destination port 80 on the webserver in EPG Web. The webserver will not be allowed to initiate a separate TCP connection to a host port with TCP source port 80.
    • DThe host in EPG Client is allowed to connect to TCP destination port 80 on the webserver in EPG Web. The webserver is allowed to initiate a separate TCP connection to a host port with TCP source port 80.

    Show answer

    Correct answer: C

    How others answered

    • C57%
    • D43%

    Only 57% agreed on this answer — treat it as contested rather than settled.

    Explanation

    D is correct : Apply Both Direction and Reverse Filter Port in the subject for the filter. These two options are by default enabled...This means that if the provider EPG initiates traffic toward the consumer EPG, the Cisco ACI fabric allows it for any destination ports if the source port is 80. https://www.cisco.com/c/en/us/td/docs/switches/datacenter/aci/apic/sw/1-x/Operating_ACI/guide/b_Cisco_Operating_ACI/b_Cisco_Operating_ACI_chapter_01000.html

    Adapted from community discussion by DC4000 · 2021-03-28 · 16 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

    Supporting references

    • Cisco documentation
    • cisco.com documentation
    • Cisco documentation

    View community discussion4

    Candidate context

    Question 10 discussion

    These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by 350-601 or CertExamHQ.

    1. D

       DC4000

       2021-03-28

       16 upvotes

       D is correct : Apply Both Direction and Reverse Filter Port in the subject for the filter. These two options are by default enabled...This means that if the provider EPG initiates traffic toward the consumer EPG, the Cisco ACI fabric allows it for any destination ports if the source port is 80. https://www.cisco.com/c/en/us/td/docs/switches/datacenter/aci/apic/sw/1-x/Operating_ACI/guide/b_Cisco_Operating_ACI/b_Cisco_Operating_ACI_chapter_01000.html

    2. H

       Here_comes_MrLamb

       2021-03-25

       10 upvotes

       Correct is C "Cisco ACI fabric allows a packet from the consumer EPG to the provider EPG with the destination port 80 and source port any. However, a return packet from the provider to the consumer is not allowed yet" https://www.cisco.com/c/en/us/td/docs/switches/datacenter/aci/apic/sw/1-x/Operating_ACI/guide/b_Cisco_Operating_ACI/b_Cisco_Operating_ACI_chapter_01000.html#concept_B767BAC8A4F2438E9B1D9D00F28D9D48

    3. L

       Llitam

       2021-04-22

       7 upvotes

       I agree D is correct, because by default : Apply Both Direction and Reverse Filter Port are enabled. But not the "stateful" option in the filter However, Cisco ACI contracts are not stateful and packets from the provider EPG to the consumer EPG does not have to be a return packet. This means that if the provider EPG initiates traffic toward the consumer EPG, the Cisco ACI fabric allows it for any destination ports if the source port is 80. The Stateful option in the filter can be used to avoid such an issue for TCP traffic. When the Stateful option is enabled, the rule for the return direction (provider to consumer) will check the TCP ACK flag on top of the TCP ports (any destination port and source port 80 in this example) to block traffic initiated from the provider EPG.

    4. M

       mauchi

       2022-05-07

       Selected C3 upvotes

       I disagree with D and think its C. Indeed because of the default apply both directions and reverse filter ports enabled, the web server (source 80) will be able to re RESPOND to the client, however the question says "initiate a SEPARATE tcp connection", and this would need that another contract exists with the web server as the consumer, and the client as the provider. Thus for me its clearly C.

11. Question 11 of 25

    

    Refer to the exhibit. Which action is taken to ensure that the relay agent forwards the DHCP BOOTREQUEST packet to a DHCP server?

    • AConfigure the IP address of the DHCP server.
    • BVerify the DHCP snooping bindings.
    • CConfigure the interface of the DHCP server as untrusted.
    • DEnable the DHCP relay agent.

    Show answer

    Correct answer: A

    How others answered

    • A83%
    • D17%

    Explanation

    the answer is correct A you can configure a DHCP server IP address on a layer 3 ethernet or subinterface. when an inbound DHCP BOOTREQUEST packet arrives on a port that is member of the port channel, the relay agent forward the packet to the IP address https://www.cisco.com/c/en/us/td/docs/switches/datacenter/sw/4_0/dcnm/security/configuration/guide/sec_dcnm_config/sec_dhcpsnoop.pdf

    Adapted from community discussion by ikholidd · 2021-09-16 · 8 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

    Supporting references

    • Cisco documentation
    • Cisco documentation
    • Cisco documentation

    View community discussion4

    Candidate context

    Question 11 discussion

    These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by 350-601 or CertExamHQ.

    1. B

       blurain

       2021-09-29

       8 upvotes

       By process of elimination the correct answer is A: configure the ip add of the dhcp server - verifying the dhcp snooping bindings does not confirm the relay agent forwards BOOTREQUEST packet - "service dhcp" command is a deprecated command that has been replace by "ip dhcp relay" and has the purpose of enabling the dhcp relay agent (enabled by default) - you would never configure the interfaces of the DHCP server as untrusted

    2. I

       ikholidd

       2021-09-16

       8 upvotes

       the answer is correct A you can configure a DHCP server IP address on a layer 3 ethernet or subinterface. when an inbound DHCP BOOTREQUEST packet arrives on a port that is member of the port channel, the relay agent forward the packet to the IP address https://www.cisco.com/c/en/us/td/docs/switches/datacenter/sw/4_0/dcnm/security/configuration/guide/sec_dcnm_config/sec_dhcpsnoop.pdf

    3. C

       Camaro1

       2023-11-27

       1 upvote

       not sure you are reading.... https://www.cisco.com/c/en/us/td/docs/switches/datacenter/nexus9000/sw/7-x/security/configuration/guide/b_Cisco_Nexus_9000_Series_NX-OS_Security_Configuration_Guide_7x/b_Cisco_Nexus_9000_Series_NX-OS_Security_Configuration_Guide_7x_chapter_01100.html#concept_FB2E370D05B345658FC748ACAD9F9FD6 Configuring the DHCP Relay Source Interface You can configure the source interface for the DHCP relay agent. By default, the DHCP relay agent uses the relay agent address as the source address of the outgoing packet. Configuring the source interface enables you to use a more stable address (such as the loopback interface address) as the source address of relayed messages. Before you begin Ensure that the DHCP feature is enabled. Ensure that the DHCP relay agent is enabled.

    4. U

       U_O

       2024-01-10

       Selected A1 upvote

       Indeed the correct ans in A. Below links confirms that DHCP relay is enabled by default. https://www.cisco.com/c/en/us/td/docs/switches/datacenter/nexus9000/sw/6-x/security/configuration/guide/b_Cisco_Nexus_9000_Series_NX-OS_Security_Configuration_Guide/b_Cisco_Nexus_9000_Series_NX-OS_Security_Configuration_Guide_chapter_01101.html#:~:text=In%20DHCP%20relay%2C%20the%20circuit,field%20to%20the%20DHCP%20server.

12. Question 12 of 25

    

    Refer to the exhibit. A network engineer requires remote access via SSH to a Cisco MDS 9000 Series Switch. The solution must support secure access using the local user database when the RADIUS servers are unreachable from the switches. Which command meets these requirements?

    • Aaaa authentication none
    • Baaa authentication login default group radius
    • Caaa authentication login default fallback error local
    • Daaa authentication login default group local

    Show answer

    Correct answer: B

    How others answered

    • B50%
    • C50%

    Only 50% agreed on this answer — treat it as contested rather than settled.

    Explanation

    It's "B". Fallback is on by default Disabling Fallback to Local Authentication By default, if remote authentication is configured for console or default login and all AAA servers are unreachable (resulting in an authentication error), the Cisco NX-OS device falls back to local authentication to ensure that users are not locked out of the device. However, you can disable fallback to local authentication in order to increase security. https://www.cisco.com/c/en/us/td/docs/switches/datacenter/nexus9000/sw/6-x/security/configuration/guide/b_Cisco_Nexus_9000_Series_NX-OS_Security_Configuration_Guide/b_Cisco_Nexus_9000_Series_NX-OS_Security_Configuration_Guide_chapter_0111.html

    Adapted from community discussion by subject10 · 2021-07-20 · 11 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

    Supporting references

    • Cisco documentation
    • Cisco documentation
    • Cisco documentation

    View community discussion4

    Candidate context

    Question 12 discussion

    These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by 350-601 or CertExamHQ.

    1. S

       subject10

       2021-07-20

       11 upvotes

       It's "B". Fallback is on by default Disabling Fallback to Local Authentication By default, if remote authentication is configured for console or default login and all AAA servers are unreachable (resulting in an authentication error), the Cisco NX-OS device falls back to local authentication to ensure that users are not locked out of the device. However, you can disable fallback to local authentication in order to increase security. https://www.cisco.com/c/en/us/td/docs/switches/datacenter/nexus9000/sw/6-x/security/configuration/guide/b_Cisco_Nexus_9000_Series_NX-OS_Security_Configuration_Guide/b_Cisco_Nexus_9000_Series_NX-OS_Security_Configuration_Guide_chapter_0111.html

    2. O

       onix

       2021-07-20

       4 upvotes

       Agree, answer: B https://www.cisco.com/c/en/us/td/docs/switches/datacenter/mds9000/sw/8_x/config/security/cisco_mds9000_security_config_guide_8x/configuring_security_features_on_external_aaa_server.html "When you have configured server groups using the server group authentication method, an authentication request is sent to the first AAA server in the group. (...) If all configured methods fail, then by default local database is used for authentication. (...) The fallback is set to local by default in case of an authentication error."

    3. C

       corelate_9

       2022-03-30

       5 upvotes

       it doesn't state that fallback is enabled or disabled, therefore, to ensure that fallback is already not disable, we can use "aaa authentication login default fallback error local"

    4. M

       MajklNajt

       2021-07-14

       3 upvotes

       I bet this is B as the referenced link states (under Configuring Default Login Authentication Methods): The default console login method is local, which is used when no methods are configured or when all the configured methods fail to respond, unless fallback to local is disabled for the console login. AND ...The local keyword is not supported (and is not required) when configuring AAA authentication groups because local authentication is the default if remote servers are unreachable. For example, if you configure aaa authentication login default group g1, local authentication is tried if you are unable to authenticate using AAA group g1.

13. Question 13 of 25

    Select 2

    An engineer must configure RBAC in Cisco UCS Manager in an existing data center environment. Which two roles are suitable for configuring LAN connectivity policies? (Choose two.)

    • Aserver-profile
    • Bnetwork-admin
    • Coperations
    • Denable
    • Eadmin

    Show answer

    Correct answer: B, E

    How others answered

    • BE100%

    Explanation

    The system contains the following default user roles: AAA Administrator - Read-and-write access to users, roles, and AAA configuration. Read access to the rest of the system. Administrator - Complete read-and-write access to the entire system. The default admin account is assigned this role by default and it cannot be changed. Facility Manager - Read-and-write access to power management operations through the power-mgmt privilege. Read access to the rest of the system. Network Administrator - Read-and-write access to fabric interconnect infrastructure and network security operations. Read access to the rest of the system. Operations - Read-and-write access to systems logs, including the syslog servers, and faults. Read access to the rest of the system. Read-Only - Read-only access to system configuration with no privileges to modify the system state. Server Equipment Administrator - Read-and-write access to physical server related operations. Read access to the rest of the system. Server Profile Administrator - Read-and-write access to logical server related operations. Read access to the rest of the system. Server Security Administrator - Read-and-write access to server security related operations. Read access to the rest of the system. Storage Administrator - Read-and-write access to storage operations. Read access to the rest of the system. Reference: https://www.cisco.com/en/US/docs/unified_computing/ucs/sw/gui/config/guide/141/UCSM_GUI_Configuration_Guide_141_chapter9.html

    Adapted from community discussion by poy4242 · 2021-11-08 · 3 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

    Supporting references

    • Cisco documentation
    • Cisco documentation
    • Cisco documentation

    View community discussion4

    Candidate context

    Question 13 discussion

    These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by 350-601 or CertExamHQ.

    1. P

       poy4242

       2021-11-08

       3 upvotes

       B & E network admin have access to network security, so i guess its include scope security /aaa Administrator Complete read-and-write access to the entire system. Assigns this role to the default administrator account by default. You cannot change it. Network Administrator Read-and-write access to fabric interconnect infrastructure and network security operations. Read access to the remaining system. Operations Read-and-write access to systems logs, including the syslog servers, and faults. Read access to the remaining system. Server Profile Administrator Read-and-write access to logical server-related operations. Read access to the remaining system. Server Security Administrator Read-and-write access to server security-related operations. Read access to the remaining system. https://www.cisco.com/c/en/us/td/docs/unified_computing/ucs/ucs-manager/CLI-User-Guides/Admin-Management/3-2/b_Cisco_UCS_Manager_CLI_Administration_Mgmt_Guide_3_2/b_Cisco_UCS_Manager_CLI_Administration_Mgmt_Guide_3_2_chapter_0100.html

    2. M

       MaxG

       2021-09-16

       3 upvotes

       Correct are B and E. "server-profile" is not a role. User Roles are: network-admin network-operator vdc-admin vdc-operator server-admin admin

    3. M

       mauchi

       2022-05-07

       Selected B, E1 upvote

       B and E are correct https://www.cisco.com/c/en/us/td/docs/unified_computing/ucs/ucs-manager/CLI-User-Guides/Network-Mgmt/3-2/b_CLI_UCSM_Network_Management_Guide_3_2/b_CLI_UCSM_Network_Management_Guide_3_2_chapter_01001.html#concept_FB41C0E2FA9F4733BC5088F065225632

    4. S

       Salilgen

       2022-11-21

       2 upvotes

       I think correct answer are A and B admin is a priviledge. It is not a role

14. Question 14 of 25

    Select 2

    Which two actions should be performed before upgrading the infrastructure and firmware of multiple UCS blades? (Choose two.)

    • AGet Full State and All Configuration backup files before beginning the upgrade.
    • BVerify if the bootflash on the fabric interconnects in the Cisco UCS has at least 10% available space.
    • CVerify if the bootflash on the fabric interconnects in the Cisco UCS has at least 15% available space.
    • DEnable Smart Call Home feature during the firmware upgrade process.
    • ERun the Check Conformance feature to verify that all your components are running the compatible firmware version after the upgrade.

    Show answer

    Correct answer: A, E

    How others answered

    • AE50%
    • AC50%

    Only 50% agreed on this answer — treat it as contested rather than settled.

    Explanation

    From the document you referenced This should not be used before a firmware upgrade is performed, but after the upgrade is completed. Not E

    Adapted from community discussion by msully · 2024-02-07 · 2 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

    Supporting references

    • Cisco documentation
    • Cisco documentation
    • Cisco documentation

    View community discussion4

    Candidate context

    Question 14 discussion

    These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by 350-601 or CertExamHQ.

    1. 7

       7korn7

       2022-09-29

       Selected A, E1 upvote

       https://www.cisco.com/c/en/us/td/docs/unified_computing/ucs/sw/upgrading/from1-1-1/to1-4-1/UpgradingCiscoUCSFrom1-1-1To1-4-1_chapter2.html#:~:text=in%20a%20Chassis-,Completing%20the%20Prerequisites%20for%20Upgrading%20the%20Firmware,-This%20chapter%20includes https://www.cisco.com/c/en/us/td/docs/unified_computing/ucs/ucs-manager/GUI-User-Guides/Firmware-Mgmt/4-0/b_UCSM_GUI_Firmware_Management_Guide_4-0/b_UCSM_GUI_Firmware_Management_Guide_4-0_chapter_0100.html#task_i4c_bzx_42b:~:text=or%20other%20document.-,Checking%20Conformance%20of%20the%20Contents%20of%20a%20Firmware%20Package,-You%20can%20use

    2. E

       elper

       2024-05-01

       1 upvote

       As per the document below, "when the bootflash partition exceeds 70 percent, faults are raised". It also mentions we should have at least 20% available space, otherwise Auto Install will not proceed. https://www.cisco.com/c/en/us/td/docs/unified_computing/ucs/ucs-manager/GUI-User-Guides/Firmware-Mgmt/4-2/b_UCSM_GUI_Firmware_Management_Guide_4-2/b_UCSM_GUI_Firmware_Management_Guide_chapter_010.html

    3. M

       msully

       2024-02-07

       2 upvotes

       From the document you referenced This should not be used before a firmware upgrade is performed, but after the upgrade is completed. Not E

    4. J

       JCGO

       2023-10-30

       1 upvote

       Will go for A, B. Question states: do stuff before. E is after upgrade procedure. Smartl call home should be disabled. This leaves us with two options: B,C. B is logically more suited, because of 90% raises faults in UCSM

15. Question 15 of 25

    An engineer must perform backup and restore of the Cisco UCS Manager configuration. The configuration must be stored on a remote server via XML encoding. The backup must store the configurations of the chassis, FEX, rack servers, IOMs, and blade server. Which set of actions accomplishes these goals?

    • APerform an all configuration backup and run the system restore procedure.
    • BPerform a full state configuration backup and run the restore procedure.
    • CPerform a logical configuration backup and run the replace import method.
    • DPerform a system configuration backup and run the merge import method.

    Show answer

    Correct answer: D

    How others answered

    • D69%
    • C31%

    Only 69% agreed on this answer — treat it as contested rather than settled.

    Explanation

    I'd say B, full configuration: ''You can use the file generated from this backup to restore the system during disaster recovery. ''. Other files cannot be used for system restore. https://www.cisco.com/c/en/us/td/docs/unified_computing/ucs/ucs-manager/GUI-User-Guides/Admin-Management/4-1/b_Cisco_UCS_Admin_Mgmt_Guide_4-1/m_backup_and_restore_configuration.html#task_D97990B1ED0F4BCB8469D5A671774B5D But the issue is that in the question it is mentioned that the XML encoding shold be used, and the full sate is binary.... Even here the Full state is mentioned : https://www.cisco.com/c/en/us/td/docs/unified_computing/ucs/ucs-central/install-upgrade/2-0/b_Cisco_UCSC_Install_and_Upgrade_Guide_2_0.pdf

    Adapted from community discussion by RFV147 · 2023-07-17 · 2 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

    Supporting references

    • Cisco documentation
    • Cisco documentation
    • Cisco documentation

    View community discussion4

    Candidate context

    Question 15 discussion

    These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by 350-601 or CertExamHQ.

    1. R

       RFV147

       2023-07-17

       2 upvotes

       I'd say B, full configuration: ''You can use the file generated from this backup to restore the system during disaster recovery. ''. Other files cannot be used for system restore. https://www.cisco.com/c/en/us/td/docs/unified_computing/ucs/ucs-manager/GUI-User-Guides/Admin-Management/4-1/b_Cisco_UCS_Admin_Mgmt_Guide_4-1/m_backup_and_restore_configuration.html#task_D97990B1ED0F4BCB8469D5A671774B5D But the issue is that in the question it is mentioned that the XML encoding shold be used, and the full sate is binary.... Even here the Full state is mentioned : https://www.cisco.com/c/en/us/td/docs/unified_computing/ucs/ucs-central/install-upgrade/2-0/b_Cisco_UCSC_Install_and_Upgrade_Guide_2_0.pdf

    2. P

       paradigm88

       2023-04-02

       Selected D2 upvotes

       System Configuration—The backup file preserves identities for Chassis, FEX, Rack Servers, and user labels for Chassis, FEX, Rack Servers, IOMs and Blade Servers. https://www.cisco.com/c/en/us/td/docs/unified_computing/ucs/ucs-manager/GUI-User-Guides/Admin-Management/4-1/b_Cisco_UCS_Admin_Mgmt_Guide_4-1/m_backup_and_restore_configuration.html#task_D97990B1ED0F4BCB8469D5A671774B5D

    3. E

       elper

       2024-04-25

       Selected D2 upvotes

       It cannot be C. As per the document below, a logical configuration backup doesn't store chassis, FEX, IOMs, blade/rack servers information. https://www.cisco.com/c/en/us/td/docs/unified_computing/ucs/ucs-manager/GUI-User-Guides/Admin-Management/4-2/b_Cisco_UCS_Admin_Mgmt_Guide_4-2/m_backup_and_restore_configuration.html

    4. O

       ospfstub7

       2023-05-13

       Selected D2 upvotes

       System Configuration—The backup file preserves identities for Chassis, FEX, Rack Servers, and user labels for Chassis, FEX, Rack Servers, IOMs and Blade Servers.

16. Question 16 of 25

    An engineer performs a Cisco UCS C480 ML M5 installation from a Cisco UCS Manager. As a part of the design, the server must perform an iSCSI boot from the storage array. Which configuration must be performed in the SAN settings in the root organization to satisfy that condition?

    • AEnable a host SAN pool.
    • BCreate an IQN suffix pool.
    • CCreate a virtual iSCSI vNIC.
    • DImplement a WWPN pool.

    Show answer

    Correct answer: B

    How others answered

    • B88%

    Explanation

    Although both iSCSI vNIC and IQN suffix pool needs to be created to complete this task, the question specifically asks for the configuration that must be performed under SAN settings. Creating the IQN suffix pool is done under SAN > Pools, whereas the vNIC is created under Servers > Service Profiles. I think the key word here is "SAN settings". Based on that, I would choose answer [B] here. Reference: https://www.cisco.com/c/en/us/td/docs/unified_computing/ucs/sw/gui/config/guide/2-0/b_UCSM_GUI_Configuration_Guide_2_0/b_UCSM_GUI_Configuration_Guide_2_0_chapter_011101.html#concept_D7BF302366F24CF5A602B0E0BD18787C

    Adapted from community discussion by PacketLife · 2023-07-21 · 4 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

    Supporting references

    • Cisco documentation
    • Cisco documentation
    • Cisco documentation

    View community discussion4

    Candidate context

    Question 16 discussion

    These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by 350-601 or CertExamHQ.

    1. P

       PacketLife

       2023-07-21

       Selected B4 upvotes

       Although both iSCSI vNIC and IQN suffix pool needs to be created to complete this task, the question specifically asks for the configuration that must be performed under SAN settings. Creating the IQN suffix pool is done under SAN > Pools, whereas the vNIC is created under Servers > Service Profiles. I think the key word here is "SAN settings". Based on that, I would choose answer [B] here. Reference: https://www.cisco.com/c/en/us/td/docs/unified_computing/ucs/sw/gui/config/guide/2-0/b_UCSM_GUI_Configuration_Guide_2_0/b_UCSM_GUI_Configuration_Guide_2_0_chapter_011101.html#concept_D7BF302366F24CF5A602B0E0BD18787C

    2. C

       CoAsT_x

       2024-11-16

       Selected B1 upvote

       SAN tab has IQN pool. host SAN pool....not a thing iSCSI vNIC is not in the SAN tab, but will definitely be needed. WWPN pool is strictly FC. "...must be...SAN settings in the ROOT org..." WHAT????? Nothing has to be in the root org. VLANs do have a fair warning when creating and selecting the org: "A service profile's access to a VLAN is determined by the service profile's organization and the VLAN permit and group permit settings. Permitted Orgs for VLAN(s):" IQN is the only one that fits that matches the in SAN settings, so i would go with that. ODDLY there is a bunch of mentions of the root org in the UCS Manager 4.2 IQN configuration guide, which is odd in itself. https://www.cisco.com/c/en/us/td/docs/unified_computing/ucs/ucs-manager/GUI-User-Guides/Server-Mgmt/4-2/b_Cisco_UCS_Manager_Server_Mgmt_Guide_4_2/chapter_01010.html?bookSearch=true#task_FFEF54B8CAE349F3ABE04AC4895EDB4D

    3. G

       Gayan84

       2023-10-02

       1 upvote

       The Answer is >> https://www.cisco.com/c/en/us/support/docs/servers-unified-computing/ucs-manager/116003-iscsi-ucs-config-00.html Step 1 This procedure describes how to configure the service profile for iSCSI boot. Select the iSCSI VLAN to be a Native VLAN on the last vNIC; use the last vNIC to avoid issues with ESXi 5.0 installations Step 2 Create a virtual iSCSI vNIC in order to serve as an iSCSI configuration placeholder. This is not an actual vNIC; it is an iSCSI boot firmware table (iBFT) configuration placeholder for iSCSI boot configuration. Use this configuration: The Overlay vNICs should be the ones with native VLAN configured in Step 1. Modify the iSCSI Adapter Policy only if it is necessary. The VLAN is the one defined as native in Step 1. Note: Do not assign a MAC address for more information of setp 2 & 4, pls refer the link

    4. S

       Scheldon

       2023-10-24

       Selected B1 upvote

       if we are talking about "Which configuration must be performed in the SAN settings" then IQN https://www.cisco.com/c/en/us/td/docs/unified_computing/ucs/sw/gui/config/guide/2-0/b_UCSM_GUI_Configuration_Guide_2_0/b_UCSM_GUI_Configuration_Guide_2_0_chapter_011101.html#task_FFEF54B8CAE349F3ABE04AC4895EDB4D:~:text=the%20same%20prefix.-,Creating%20an%20IQN%20Pool,-Note

17. Question 17 of 25

    Which behavior defines streaming telemetry as a push model in Cisco devices?

    • AEvents and network changes generate telemetry data
    • BMonitoring clients are pulling data from the network to see real-time statistics
    • CJSON encoded telemetry data is transported using the gRPC protocol
    • DThe network devices send data in JSON or GPB format to configure endpoints

    Show answer

    Correct answer: A

    How others answered

    • A64%
    • D27%

    Only 64% agreed on this answer — treat it as contested rather than settled.

    Explanation

    I think the answer should be: D Pag 337 CCNP and CCIE Data Center Core DCCOR 350-601 Official Cert Guide "Cisco NX-OS streaming telemetry allows you to push data off the device to a defined endpoint as JavaScript Object Notation (JSON) or using Google Protocol Buffers (GPB) at a much higher frequency and more efficiently, as shown in Figure 6-13."

    Adapted from community discussion by crosillo30 · 2021-09-06 · 6 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

    Supporting references

    • cisco.com documentation
    • Cisco documentation
    • Cisco documentation
    • cisco.com documentation

    View community discussion4

    Candidate context

    Question 17 discussion

    These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by 350-601 or CertExamHQ.

    1. M

       malkovitch

       2021-08-11

       12 upvotes

       A is correct. https://developer.cisco.com/docs/ios-xe/#!streaming-telemetry-quick-start-guide/streaming-telemetry

    2. C

       crosillo30

       2021-09-06

       6 upvotes

       I think the answer should be: D Pag 337 CCNP and CCIE Data Center Core DCCOR 350-601 Official Cert Guide "Cisco NX-OS streaming telemetry allows you to push data off the device to a defined endpoint as JavaScript Object Notation (JSON) or using Google Protocol Buffers (GPB) at a much higher frequency and more efficiently, as shown in Figure 6-13."

    3. A

       Alfi91

       2021-11-28

       6 upvotes

       The question says "to configure endpoints", not "to a defined endpoint".

    4. A

       Alfi91

       2021-11-28

       4 upvotes

       The 350-601 cert guide says "to a defined endpoint", not "to configure endpoints". If this is not a typo in answer D, then the answer must be A.

18. Question 18 of 25

    

    Refer to the exhibit. A network engineer must monitor the traffic from the server on VLAN 80. All source traffic from the server must be captured on the monitoring device. Which configuration set meets these requirements?

    

    • Aswitch(config-monitor)# destination interface ethernet 1/1 switch(config-monitor)# source vlan 80
    • Bswitch(config-monitor)# destination interface ethernet 1/1 switch(config-monitor)# filter vlan 80
    • Cswitch(config-monitor)# destination interface ethernet 1/2 switch(config-monitor)# filter vlan 80 rx tx
    • Dswitch(config-monitor)# destination interface ethernet 1/2 switch(config-monitor)# source vlan 80 rx

    Show answer

    Correct answer: A

    How others answered

    • A67%
    • D17%
    • B17%

    Only 67% agreed on this answer — treat it as contested rather than settled.

    Explanation

    D is right answer here When you specify a VLAN as a SPAN source, all supported interfaces in the VLAN are SPAN sources. https://www.cisco.com/c/en/us/td/docs/switches/datacenter/nexus9000/sw/6-x/system_management/configuration/guide/b_Cisco_Nexus_9000_Series_NX-OS_System_Management_Configuration_Guide/sm_14span.html#:~:text=When%20you%20specify%20a%20VLAN,the%20VLAN%20are%20SPAN%20sources.&text=VLANs%20can%20be%20SPAN%20sources%20only%20in%20the%20ingress%20direction.&text=These%20interfaces%20are%20supported%20in,3%20subinterfaces%20are%20not%20supported.

    Adapted from community discussion by Lalag · 2024-04-05 · 2 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

    Supporting references

    • Cisco documentation
    • Cisco documentation
    • Cisco documentation

    View community discussion4

    Candidate context

    Question 18 discussion

    These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by 350-601 or CertExamHQ.

    1. L

       Lalag

       2024-04-05

       2 upvotes

       D is right answer here When you specify a VLAN as a SPAN source, all supported interfaces in the VLAN are SPAN sources. https://www.cisco.com/c/en/us/td/docs/switches/datacenter/nexus9000/sw/6-x/system_management/configuration/guide/b_Cisco_Nexus_9000_Series_NX-OS_System_Management_Configuration_Guide/sm_14span.html#:~:text=When%20you%20specify%20a%20VLAN,the%20VLAN%20are%20SPAN%20sources.&text=VLANs%20can%20be%20SPAN%20sources%20only%20in%20the%20ingress%20direction.&text=These%20interfaces%20are%20supported%20in,3%20subinterfaces%20are%20not%20supported.

    2. S

       Scheldon

       2023-10-25

       Selected A1 upvote

       A is ok The following example shows configuring a VLAN SPAN source: ... switch(config-monitor)# source vlan https://www.cisco.com/c/en/us/td/docs/switches/datacenter/nexus5000/sw/configuration/guide/cli/CLIConfigurationGuide/Span.pdf

    3. E

       elper

       2024-10-23

       Selected A1 upvote

       https://www.cisco.com/c/en/us/td/docs/switches/datacenter/nexus5000/sw/system_management/503_n1_1/cisco_n5k_system_mgmt_cg_rel_503_n1_1_chapter15.pdf

    4. G

       Gayan84

       2023-10-10

       1 upvote

       I will select answer B ================================================= Source VLANs are supported only in the ingress direction. ================================================

19. Question 19 of 25

    Select 2

    After a Cisco Nexus 7000 Series Switch chassis replacement, the administrator discovers that all vPC-enabled LACP port channels are reinitialized. The administrator wants to prevent this issue the next time the chassis is replaced. Which two actions must be taken to meet this requirement before the isolated device is reloaded? (Choose two.)

    • AChange the vPC system-priority of the replacement chassis to a higher value than the peer
    • BSet the vPC MAC address to a higher value than the peer
    • CConfigure auto-recovery to the disable state on both peers
    • DSet the vPC MAC address to a lower value than the peer
    • EChange the vPC system-priority of the replacement chassis to a lower value than the peer

    Show answer

    Correct answer: B, C

    How others answered

    • BC67%
    • AD33%

    Only 67% agreed on this answer — treat it as contested rather than settled.

    Explanation

    Confirming B and C. When the peer-link comes up between two vPC peers, apart from the vPC roles, the LACP permanent roles are also decided (one peer become the Master, while the other becomes the Slave). An LACP role election occurs if both peers have same role (either master or slave). The system with the lower MAC address wins as master and this election is not governed by the vPC role priority configuration. A re-election causes vPC LACP port-channels to re-initialize, which leads to a possible traffic outage. Before you introduce an already isolated vPC device back into production, check the LACP roles on both boxes. If the same role, disable auto recovery with no auto-recovery under the vPC domain on both peers and reload the isolated device. After reload, the isolated device comes up with the LACP role 'none established' and can be introduced into the vPC without LACP role re-election.

    Adapted from community discussion by MaxG · 2021-09-15 · 9 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

    Supporting references

    • Cisco documentation
    • Cisco documentation
    • cisco.com documentation
    • Cisco documentation
    • cisco.com documentation

    View community discussion4

    Candidate context

    Question 19 discussion

    These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by 350-601 or CertExamHQ.

    1. M

       MaxG

       2021-09-15

       9 upvotes

       Confirming B and C. When the peer-link comes up between two vPC peers, apart from the vPC roles, the LACP permanent roles are also decided (one peer become the Master, while the other becomes the Slave). An LACP role election occurs if both peers have same role (either master or slave). The system with the lower MAC address wins as master and this election is not governed by the vPC role priority configuration. A re-election causes vPC LACP port-channels to re-initialize, which leads to a possible traffic outage. Before you introduce an already isolated vPC device back into production, check the LACP roles on both boxes. If the same role, disable auto recovery with no auto-recovery under the vPC domain on both peers and reload the isolated device. After reload, the isolated device comes up with the LACP role 'none established' and can be introduced into the vPC without LACP role re-election.

    2. H

       hk1000

       2021-11-16

       3 upvotes

       B and C are correct. https://www.cisco.com/c/en/us/support/docs/interfaces-modules/nexus-7000-series-supervisor-1-module/119033-technote-nexus-00.html. 1) The system with the lower MAC address wins as master and this election is not governed by the vPC role priority 2) Before you introduce an already isolated vPC device back into production, check the LACP roles on both boxes. If the same role, disable auto recovery with no auto-recovery under the vPC domain on both peers and reload the isolated device. After reload, the isolated device comes up with the LACP role 'none established' and can be introduced into the vPC without LACP role re-election.

    3. G

       GeekT

       2021-07-02

       4 upvotes

       I think it should be B,C, as with higher mac address, it would act as slave for LACP and won't trigger election. https://www.cisco.com/c/en/us/support/docs/interfaces-modules/nexus-7000-series-supervisor-1-module/119033-technote-nexus-00.html

    4. P

       paradigm88

       2023-03-27

       2 upvotes

       You cannot Set the vPC MAC address (mac is generated automatically from vpc domain ID to be an unique value) A - (lower system priority number has higher priority on the Primary election. That's why the replaced device should have higher system priority than the active one) C - is enough to disable auto-recovery on the newly introduced switch before the vpc restoration default timer expires and reload it Also another option would be to enable sticky-bit on the active switch, this would make sure the newly introduced switch will never take the active role Correct Answer A and C

20. Question 20 of 25

    Refer to the exhibit. An engineer must mirror the traffic on a switch. The engineer locates the server port that requires monitoring on switch1, but the packet sniffer is on switch2. The engineer must configure the source IP address on switch1. Which command accomplishes this goal?

    

    • Asource ip 209.165.200.225
    • Bmonitor session 10 type erspan-source
    • Csource interface vlan512
    • Dmonitor erspan origin ip-address 209.165.200.225

    Show answer

    Correct answer: D

    How others answered

    • D71%
    • B29%

    Only 71% agreed on this answer — treat it as contested rather than settled.

    Explanation

    Can be configured without the "global". This example shows how to configure an IP address as the source for an ERSPAN session: switch# configure terminal switch(config)# monitor erspan origin ip-address 192.0.2.1 switch(config)# exit https://www.cisco.com/c/en/us/td/docs/switches/datacenter/nexus5500/sw/system_management/6x/b_5500_System_Mgmt_Config_6x/b_5500_System_Mgmt_Config_602N12_chapter_010001.pdf

    Adapted from community discussion by ed27 · 2024-10-27 · 3 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

    Supporting references

    • Cisco documentation
    • Cisco documentation
    • Cisco documentation

    View community discussion4

    Candidate context

    Question 20 discussion

    These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by 350-601 or CertExamHQ.

    1. E

       ed27

       2024-10-27

       Selected D3 upvotes

       Can be configured without the "global". This example shows how to configure an IP address as the source for an ERSPAN session: switch# configure terminal switch(config)# monitor erspan origin ip-address 192.0.2.1 switch(config)# exit https://www.cisco.com/c/en/us/td/docs/switches/datacenter/nexus5500/sw/system_management/6x/b_5500_System_Mgmt_Config_6x/b_5500_System_Mgmt_Config_602N12_chapter_010001.pdf

    2. C

       CoAsT_x

       2024-11-13

       Selected D1 upvote

       Configuration Example for an IP Address as the Source for an ERSPAN Session This example shows how to configure an IP address as the source for an ERSPAN session: switch# configure terminal switch(config)# monitor erspan origin ip-address 192.0.2.1 switch(config)# exit switch(config)# copy running-config startup config Other comments mention needing the global command at end, but on this document (right above the snippet i shared) it shows the global command at end of syntax for "ERSPAN Type III Source Session" https://www.cisco.com/c/en/us/td/docs/switches/datacenter/nexus5500/sw/system_management/6x/b_5500_System_Mgmt_Config_6x/b_5500_System_Mgmt_Config_602N12_chapter_010001.html#concept_5FB9BFDA3C874133805ACEEB49103891 Lol, just saw ed27 comment. Yeah. :) D.

    3. S

       Scheldon

       2023-10-25

       2 upvotes

       Correction, we need to configure IP hence the closes one is D (lack of Global flag) monitor erspan origin ip-address ip-address global https://www.cisco.com/c/en/us/td/docs/switches/datacenter/sw/5_x/nx-os/system_management/configuration/guide/sm_nx_os_cg/sm_erspan.html#:~:text=Step%202-,monitor%20erspan%20origin%20ip%2Daddress%20ip%2Daddress%20global,-Example%3A

    4. W

       warCZert

       2023-10-18

       2 upvotes

       It may be D, but for this command to be valid, it must be in a form "monitor erspan origin ip-address 209.165.200.225 global". It is invalid without the "global" keyword.

21. Question 21 of 25

    

    Refer to the exhibit. Server1 is connected to a Cisco Nexus 9000 Series Switch via a 1-Gb port channel. The storm control is applied to the Eth0 device with a zero percent value. What does the switch do to traffic that traverses the switch interfaces during the streaming window that exceeds the bandwidth of the interfaces?

    • Asuppresses all traffic
    • Bforwards all traffic
    • Cdrops all of the excess traffic
    • Dforwards half of the traffic

    Show answer

    Correct answer: A

    How others answered

    • A71%
    • C29%

    Only 71% agreed on this answer — treat it as contested rather than settled.

    Explanation

    agree but they are asking about the traffic that exceeds the bw of the interfaces and I dont see the relation to storm control there. That traffic is either buffered or dropped.

    Adapted from community discussion by Huberttheman · 2023-07-02 · 2 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

    Supporting references

    • Cisco documentation
    • Cisco documentation
    • Cisco documentation

    View community discussion4

    Candidate context

    Question 21 discussion

    These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by 350-601 or CertExamHQ.

    1. J

       JCGO

       2023-12-07

       Selected A3 upvotes

       A for sure. Supress all traffic. https://www.cisco.com/c/en/us/td/docs/switches/datacenter/nexus3548/sw/layer_2_switching/60x/b_Cisco_N3548_Layer_2_Switching_Config_602_A1_1/b_Cisco_N3548_Layer_2_Switching_Config_602_A1_1_chapter_01011.pdf

    2. R

       Rollizo

       2024-08-16

       Selected A1 upvote

       https://www.cisco.com/c/en/us/td/docs/dcn/nx-os/nexus9000/102x/configuration/layer-2-switching/cisco-nexus-9000-nx-os-layer-2-switching-configuration-guide-102x/m-configuring-traffic-storm-control.html Specify the traffic storm control level as a percentage of the total interface bandwidth: The pps range can be from 0 to 200000000. The optional fraction of a level can be from 0 to 99. 100 percent means no traffic storm control. 0.0 percent suppresses all traffic.

    3. P

       pythonad

       2023-08-11

       1 upvote

       Since the storm level is set to 0.0 percent, it should suppress all traffic(blackhole, basically). If it were set to 50 percent, that would allow half the traffic to pass through. Unless I'm reading this wrong: https://www.cisco.com/c/en/us/td/docs/switches/datacenter/nexus9000/sw/7-x/security/configuration/guide/b_Cisco_Nexus_9000_Series_NX-OS_Security_Configuration_Guide_7x/b_Cisco_Nexus_9000_Series_NX-OS_Security_Configuration_Guide_7x_chapter_010001.html#task_1101084

    4. I

       iMack

       2023-05-25

       1 upvote

       Guidelines and Limitations for Traffic Storm Control Traffic storm control has the following configuration guidelines and limitations: You can configure traffic storm control on a port-channel interface. Specify the traffic storm control level as a percentage of the total interface bandwidth: The level can be from 0 to 100. The optional fraction of a level can be from 0 to 99. 100 percent means no traffic storm control. 0.0 percent suppresses all traffic.

22. Question 22 of 25

    An environment consists of a Cisco MDS 9000 Series Switch that uses port channels. An engineer must ensure that frames between the source and the destination follow the same links for a specific flow. Subsequent flows are allowed to use a different link. Which load balancing method should be used to accomplish this goal?

    • Asrc-id/dst-id
    • Bsrc-dst-oui
    • Csrc-dst-port
    • Dsrc-id/dst-id/oxid

    Show answer

    Correct answer: D

    How others answered

    • D50%
    • A50%

    Only 50% agreed on this answer — treat it as contested rather than settled.

    Explanation

    Wrong. D is correct. Exchange based—The first frame in an exchange picks a link and subsequent frames in the exchange follow the same link. However, subsequent exchanges can use a different link. This provides more granular load balancing while preserving the order of frames for each exchange. Source: https://www.cisco.com/c/en/us/td/docs/switches/datacenter/mds9000/sw/5_0/configuration/guides/int/nxos/cli_interfaces/pc.html Load balancing attributes indicate the use of the source-destination ID (src-dst-id) or the originator exchange OX ID (src-dst-ox-id, the default) for load balancing path selection. Source: https://www.cisco.com/c/en/us/td/docs/switches/datacenter/mds9000/sw/6_2/configuration/guides/fabric/nx-os/nx_os_fabric/vsan.html?bookSearch=true

    Adapted from community discussion by Daeh · 2021-07-15 · 6 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

    Supporting references

    • Cisco documentation
    • Cisco documentation
    • Cisco documentation

    View community discussion4

    Candidate context

    Question 22 discussion

    These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by 350-601 or CertExamHQ.

    1. G

       GeekT

       2021-06-23

       12 upvotes

       I think it is option A. Refer 6.4 and 6.5. Sid/did uses same link for particular flow between source id/ dest id. Exchange based uses same link for specific exchange and not for specific flow.

    2. D

       Daeh

       2021-07-15

       6 upvotes

       Wrong. D is correct. Exchange based—The first frame in an exchange picks a link and subsequent frames in the exchange follow the same link. However, subsequent exchanges can use a different link. This provides more granular load balancing while preserving the order of frames for each exchange. Source: https://www.cisco.com/c/en/us/td/docs/switches/datacenter/mds9000/sw/5_0/configuration/guides/int/nxos/cli_interfaces/pc.html Load balancing attributes indicate the use of the source-destination ID (src-dst-id) or the originator exchange OX ID (src-dst-ox-id, the default) for load balancing path selection. Source: https://www.cisco.com/c/en/us/td/docs/switches/datacenter/mds9000/sw/6_2/configuration/guides/fabric/nx-os/nx_os_fabric/vsan.html?bookSearch=true

    3. S

       SwitchKiller

       2022-03-14

       5 upvotes

       I think GeekT is correct and the Answer is A. The question states "the source and the destination follow the same links for a specific flow. Subsequent flows are allowed to use a different link" There can be mutiple exchanges within a specific flow and Exchange based Load Balancing would there alternate between links for that flow. Flow based, using src/dst would use the same link for a single flow and then alternate on a new flow

    4. R

       Rocky_Truth

       2023-03-05

       Selected D1 upvote

       To ensure that frames between the source and the destination follow the same links for a specific flow, while subsequent flows are allowed to use a different link on a Cisco MDS 9000 Series Switch that uses port channels, the load balancing method that should be used is "src-dst-oxid". The "src-dst-oxid" load balancing method uses the source and destination Fibre Channel ID and exchange ID (OXID) to determine which link in the port channel to use. This method ensures that frames between the same source and destination always follow the same path in the port channel, while subsequent flows can use a different link. Option A, "src-id/dst-id", uses the source and destination Fibre Channel IDs to determine which link in the port channel to use, but it does not consider the exchange ID (OXID). ource and destination port to determine which link in the port channel to use, but it does not consider the exchange ID (OXID). Therefore, the correct option is D, "src-id/dst-id/oxid".

23. Question 23 of 25

    An engineer is performing an ISSU upgrade on the Cisco MDS 9000 Series Switch. What is the impact on the control plane of the switch?

    • AIt is down for less than 80 seconds.
    • BIt remains down for more than 80 seconds but less than 140 seconds.
    • CIt remains down until the next reboot.
    • DIt remains up throughout the update.

    Show answer

    Correct answer: A

    How others answered

    • A100%

    Explanation

    https://www.cisco.com/c/en/us/td/docs/switches/datacenter/mds9000/sw/6_2/upgrade/guides/nx-os/upgrade.html "Nondisruptive upgrades on these fabric switches disrupts the control plane for not more than 80 seconds. The software upgrade might be disruptive if the upgrade progresses beyond when it can be stopped gracefully or if a failure occurs."

    Adapted from community discussion by harmann · 2022-07-31 · 3 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

    Supporting references

    • cisco.com documentation
    • Cisco documentation
    • Cisco documentation
    • Cisco documentation

    View community discussion4

    Candidate context

    Question 23 discussion

    These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by 350-601 or CertExamHQ.

    1. H

       harmann

       2022-07-31

       3 upvotes

       https://www.cisco.com/c/en/us/td/docs/switches/datacenter/mds9000/sw/6_2/upgrade/guides/nx-os/upgrade.html "Nondisruptive upgrades on these fabric switches disrupts the control plane for not more than 80 seconds. The software upgrade might be disruptive if the upgrade progresses beyond when it can be stopped gracefully or if a failure occurs."

    2. M

       Mustafa

       2024-06-23

       1 upvote

       A is correct Nondisruptive upgrades on these fabric switches disrupts the control plane for not more than 80 seconds. The software upgrade might be disruptive if the upgrade progresses beyond when it can be stopped gracefully or if a failure occurs. Note During the upgrade the control plane is down, but the data plane remains up. New devices are not able to log in to the fabric through the control plane, but existing devices do not experience any disruption of traffic through the data plane https://community.cisco.com/t5/storage-networking/how-can-issu-be-nondisruptive-for-mds-9148-or-9396/td-p/3354960#:~:text=Nondisruptive%20upgrades%20on%20these%20fabric,the%20data%20plane%20remains%20up.

    3. H

       harmann

       2022-07-31

       1 upvote

       https://www.cisco.com/c/en/us/td/docs/switches/datacenter/nexus9000/sw/7-x/upgrade/guide/b_Cisco_Nexus_9000_Series_NX-OS_Software_Upgrade_and_Downgrade_Guide_Release_7x/b_Cisco_Nexus_9000_Series_NX-OS_Software_Upgrade_and_Downgrade_Guide_Release_7x_chapter_010.html "The data plane traffic is not disrupted during the ISSU process. In other words, the data plane forwards the packets while the control plane is being upgraded, any servers that are connected to the Cisco Nexus 9000 and 3100 Series switches do not see any traffic disruption. The control plane downtime during the ISSU process is approximately less than 120 seconds."

    4. B

       Brute_Wane

       2022-05-06

       Selected A1 upvote

       Dataplane is unaffected, but the control plane needs to perform a switchover for dual SUPs and will need to reboot for single SUPs. https://www.cisco.com/c/en/us/support/docs/storage-networking/mds-9000-nx-os-san-os-software/118952-technote-mds9k-00.html

24. Question 24 of 25

    Select 2

    An engineer wants to create a backup of Cisco UCS Manager for disaster recovery purposes. What are two characteristics of a full state backup of a Cisco UCS Manager database? (Choose two.)

    • Acontains all of the runtime states and statuses but not the configurations
    • Bperforms a complete binary dump of the database as a .bin file
    • Cperforms a complete binary dump of the database as a .sql file
    • Dperforms a complete binary dump of the database as a .txz file
    • Econtains all of the configurations

    Show answer

    Correct answer: B, E

    How others answered

    • BE69%
    • DE31%

    Only 69% agreed on this answer — treat it as contested rather than settled.

    Explanation

    .bin is correct for full state back ups Backup Types You can perform one or more of the following types of backups through Cisco UCS Manager: Full state—A binary file that includes a snapshot of the entire system. You can use the file generated from this backup to restore the system during disaster recovery. This file can restore or rebuild the configuration on the original fabric interconnect, or recreate the configuration on a different fabric interconnect. You cannot use this file for an import. https://www.cisco.com/en/US/docs/unified_computing/ucs/sw/gui/config/guide/141/UCSM_GUI_Configuration_Guide_141_chapter43.html

    Adapted from community discussion by NetworkNinja76 · 2020-07-31 · 15 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

    Supporting references

    • Cisco documentation
    • Cisco documentation
    • Cisco documentation
    • Cisco documentation

    View community discussion4

    Candidate context

    Question 24 discussion

    These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by 350-601 or CertExamHQ.

    1. N

       NetworkNinja76

       2020-07-31

       15 upvotes

       .bin is correct for full state back ups Backup Types You can perform one or more of the following types of backups through Cisco UCS Manager: Full state—A binary file that includes a snapshot of the entire system. You can use the file generated from this backup to restore the system during disaster recovery. This file can restore or rebuild the configuration on the original fabric interconnect, or recreate the configuration on a different fabric interconnect. You cannot use this file for an import. https://www.cisco.com/en/US/docs/unified_computing/ucs/sw/gui/config/guide/141/UCSM_GUI_Configuration_Guide_141_chapter43.html

    2. H

       Heyyeh71

       2020-07-15

       7 upvotes

       Correct answer is D & E. File: compressed file in .tar.gz format https://www.virtual-odyssey.com/2019/10/31/its-the-little-stuff-cisco-ucs-backups/

    3. N

       nav2kz

       2021-02-04

       5 upvotes

       D & E the file extension for bin in a cisco context is usually the OS. tar files are used for backup. https://peazip.github.io/tar-file-format.html

    4. K

       kovahi1097com

       2024-12-14

       Selected B, E1 upvote

       A full state backup of Cisco UCS Manager provides a comprehensive snapshot of the system, including all configurations and operational state data, which can be used for disaster recovery. Binary dump as a .bin file (B): The full state backup generates a .bin file, which is a binary dump of the entire database. This format is designed to capture the complete state of UCS Manager for restoration purposes. Contains all configurations (E): The full state backup captures all UCS Manager configurations, such as service profiles, VLANs, policies, and other setup details. This ensures that the system can be fully restored to its original state.

25. Question 25 of 25

    An engineer is seeking the most optimal on demand CPU performance while configuring the BIOS settings of a UCS C-series rack mount server. What setting will accomplish this goal?

    • AC6 Retention
    • BC6 non-Retention
    • CC2 state
    • DC0/C1 state

    Show answer

    Correct answer: D

    How others answered

    • D83%
    • A17%

    Explanation

    My vote is for D. Cobra_kai's reference gives the correct information but the question isn't about how to save the most power - which would be C6 Retention - but what's most suitable for on-demand compute. This means transitioning back to high performance as quickly as possible. So the answer would be C0/C1.

    Adapted from community discussion by ccnp_or_bust · 2021-02-11 · 18 community upvotes. Third-party contribution; reviewed by our quality filter, not independently verified.

    Supporting references

    • Cisco documentation
    • Cisco documentation
    • Cisco documentation
    • Cisco documentation

    View community discussion4

    Candidate context

    Question 25 discussion

    These are quality-filtered excerpts from third-party community discussion. They can be useful reasoning signals, but they are not official answers and have not been independently verified by 350-601 or CertExamHQ.

    1. C

       ccnp_or_bust

       2021-02-11

       18 upvotes

       My vote is for D. Cobra_kai's reference gives the correct information but the question isn't about how to save the most power - which would be C6 Retention - but what's most suitable for on-demand compute. This means transitioning back to high performance as quickly as possible. So the answer would be C0/C1.

    2. C

       Cobra_kai

       2020-10-22

       4 upvotes

       Ans is A https://www.cisco.com/c/dam/en/us/products/collateral/servers-unified-computing/ucs-b-series-blade-servers/whitepaper_c11-740098.pdf he higher the package C-state, the lower the power use of that idle package state. The default setting, Package C6 (nonretention), is the lowest power idle package state supported by the processor. https://www.cisco.com/c/en/us/td/docs/unified_computing/ucs/c/sw/gui/config/guide/4_0/b_Cisco_UCS_C-Series_GUI_Configuration_Guide_for_S3260_Servers_40/b_Cisco_UCS_C-Series_GUI_Configuration_Guide_for_S3260_Servers_40_appendix_010011.html "Whether the BIOS sends the C6 report to the operating system. When the OS receives the report, it can transition the processor into the lower C6 power state to decrease energy usage while maintaining optimal processor performance"

    3. D

       designated

       2021-11-30

       Selected D3 upvotes

       I think it should be D C0/C2 because the question is related to performance on demand. When we are working on demand, we really do not know when we will have a spike and need to answer the requests quickly so working on C0/C1 will be suitable for this case. C0 state—The server provides all server components with full power at all times. This option maintains the highest level of performance and requires the greatest amount of power. C1 state—When the CPU is idle, the system slightly reduces the power consumption. This option requires less power than C0 and allows the server to return quickly to high-performance mode. While C3, C6, and C7 could cause performance issues until the server returns to full power and it is not suitable for on-demand.

    4. C

       crosillo30

       2021-09-09

       2 upvotes

       Answer should be D Allows you to determine whether system performance or energy efficiency is more important on this server. This can be one of the following: Performance — The server provides all server components with full power at all times. This option maintains the highest level of performance and requires the greatest amount of power. Reference: https://www.cisco.com/c/en/us/td/docs/unified_computing/ucs/c/sw/gui/config/guide/4_0/b_Cisco_UCS_C-series_GUI_Configuration_Guide_40/b_Cisco_UCS_C-series_GUI_Configuration_Guide_40_appendix_010011.html

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

350-601 practice, question 1 of 25