Implementing and Operating Cisco Data Center Core Technologies (350-601) practice questions

Domain coverage 5 domains

• Network (25%)
• Compute (25%)
• Storage Network (20%)
• Automation and Artificial Intelligence (15%)
• Security (15%)

Sample questions 20 of 197 shown

1. Q1

   An engineer must configure OSPFv2 connectivity between a pair of Cisco Nexus switches. The connection between the switches must meet these requirements:

   • Use unicast for updates.
   • Use decentralized communication of updates.
   • Full adjacency between switches.

   Which configuration is needed to meet these requirements?

   1. interface with a type of p2p network
   2. stub area between the neighbors
   3. filter list between the neighbors
   4. virtual link between the neighbors

   A point-to-point network type requires no DR/BDR election, so OSPF updates are exchanged directly between the two neighbors rather than funneled through a centralized DR/BDR (decentralized), and the two switches form a full adjacency. In contrast, the broadcast network type centralizes flooding through a DR, and a stub area (B) only restricts external route types; a filter list (C) filters LSA propagation; a virtual link (D) is used to connect a partitioned area to Area 0 and does not change update transport.
2. Q2

   An engineer must perform a backup operation of the Cisco UCS system. The backup must be transferred to a secure location using UDP and must contain information about VLANs, VSANs, and other policies. Also, the operations team requires the backup file to be in a human-readable format. Which configuration set meets these requirements?

   1. Type: System configuration / Protocol: SCP
   2. Type: Logical configuration / Protocol: TFTP
   3. Type: All configuration / Protocol: FTP
   4. Type: Full state / Protocol: SFTP

   TFTP uses UDP as its transport. The "Logical configuration" backup type exports policies, VLANs, VSANs, pools, and profiles in human-readable XML, but excludes system-level settings. SCP/SFTP (A, D) use TCP, "All configuration" (C) includes database and admin accounts, and Full state is a binary snapshot not human-readable.
3. Q3

   A Cisco ACI engineer must configure an access port on a Cisco ACI leaf switch. The access policy should be configured so that it supports L3Out connectivity concurrently with several EPGs that are mapped to this interface with the static port method. How should the access policy be configured?

   1. by linking the interface policy group to multiple Attachable Access Entity Profiles
   2. with a single Attachable Access Entity Profile that is linked to the corresponding routed domain and physical domain
   3. with two interface policy groups that are linked to the same interface profile port selector
   4. by mapping a single physical domain, mapped to the L3Out and EPG interfaces

   An interface policy group can be associated with only one AAEP, and a port selector can bind to only one interface policy group. A single AAEP can associate both a physical domain (for the static-port EPGs) and a routed domain (for the L3Out), which satisfies both requirements simultaneously. Multiple AAEPs (A) or multiple IPGs (C) are not valid on one port.
4. Q4

   An engineer must configure the order in which the server attempts to boot from available boot device types using Cisco Integrated Management Controller (Cisco IMC). The engineer must change the boot order configuration during the setup and apply the new requirements multiple times. The requirement is to change the Cisco IMC actual boot order so it is different from the configured boot order. Which setting accomplishes this goal?

   1. Enable the system to boot with the configured boot order.
   2. Set the boot configuration directly through BIOS.
   3. Configure the legacy and precision boot order to be mutually exclusive.
   4. Apply UEFI Secure Boot for a nonsupported operating system.

   When the boot configuration is set directly through BIOS, the actual boot order used at POST can differ from the boot order defined in the IMC configured policy, and it can be changed repeatedly during setup. Booting strictly with the configured boot order (A) ties the actual order to the IMC policy; UEFI Secure Boot (D) is a security feature, not a boot-order mechanism.
5. Q5

   An engineer is performing an ISSU upgrade on the Cisco MDS 9000 Series Switch. What is the impact on the control plane of the switch?

   1. It remains down until the next reboot.
   2. It remains up throughout the update.
   3. It remains down for more than 80 seconds but less than 140 seconds.
   4. It is down for less than 80 seconds.

   During an ISSU on Cisco MDS 9000 switches, the control plane is unavailable for less than 80 seconds while the supervisors are upgraded in turn; the data plane continues forwarding via the standby supervisor takeover. The control plane is not down for the whole upgrade or until reboot, and the documented worst case is under 80 seconds.
6. Q6

   An engineer must perform a software upgrade on a production Cisco Nexus 7000 Series Switch. Before the upgrade activity, the requirement is for all ports to be shut down and routing protocols to terminate gracefully. Which feature must be used to meet these requirements?

   1. Configuration Profile
   2. Maintenance Mode Profile
   3. Switch Profile
   4. Service Profile Template

   The NX-OS Maintenance Mode Profile (used with the maintenance mode feature) shuts down all interfaces and gracefully tears down routing protocol sessions before an upgrade or disruptive maintenance. Switch Profiles synchronize configuration between vPC peers, Service Profile Templates are a UCS concept, and a plain configuration profile does not provide these automated shutdown actions.
7. Q7

   When deploying a Cisco HyperFlex edge with a pair of switches, what is the minimum number of interfaces in trunk mode required on each HX node?

   1. 1
   2. 2
   3. 4
   4. 6

   In a HyperFlex Edge deployment with a pair of upstream switches, each HX node requires at least two trunk-mode interfaces (one toward each switch) to carry the storage, management, and VM traffic VLANs and to survive a switch failure. A single trunk interface would create a single point of failure.
8. Q8

   What is a characteristic of the NFS protocol?

   1. It is used for booting Cisco UCS B-Series servers.
   2. It is used to access a storage array at a block level.
   3. It uses UDP and HTTP as its transport.
   4. It uses remote procedure calls with TCP/IP for transport.

   NFS is a file-level storage protocol that operates over ONC RPC (remote procedure calls) transported by TCP/IP. Block-level access is iSCSI/FC (B), NFS does not use HTTP (C), and UCS servers boot via PXE/iSCSI/FC, not NFS (A).
9. Q9

   A customer asks an engineer to develop a framework that will be used to replace the process of the manual device configuration of Cisco NX-OS devices. The engineer plans to use the programmatic interface that meets these requirements:

   • The development team is familiar with Windows-based scripting environment using PowerShell.
   • The customer's security requirements mandate the use of HTTPS transport.

   Which solution must be used to meet these requirements?

   1. NX-API
   2. VISORE
   3. Open Agent Container
   4. NETCONF-YANG

   NX-API exposes NX-OS CLI and configuration as an HTTPS-based API (JSON/XML payloads) and integrates naturally with PowerShell scripts over HTTPS. VISORE is UCSM's internal XML query engine, OAC hosts third-party agents on Nexus switches, and NETCONF-YANG is SSH-based (port 830), not the PowerShell/HTTPS-oriented choice.
10. Q10

    Which NFS version uses the TCP protocol and needs only one IP port to run the service?

    1. NFSv1
    2. NFSv2
    3. NFSv3
    4. NFSv4

    NFSv4 uses TCP and listens on a single well-known port (2049), bundling previously separate services (mountd, lockd, statd) into the protocol itself. NFSv2/v3 require multiple auxiliary ports and commonly used UDP, so they cannot satisfy both requirements.
11. Q11

    What is a benefit of independent resource scaling in Cisco HyperFlex hybrid architecture?

    1. flexible expansion of compute, caching, and capacity
    2. remote booting of converged servers
    3. multivendor converged node hardware support
    4. support for compute nodes with third-party storage

    HyperFlex separates the compute layer, the caching layer (IOOpt/HX accelerators), and the capacity/data layer (HX nodes), so each resource can be expanded independently as demand changes. Remote boot, multivendor hardware, and third-party storage are not features of HyperFlex independent scaling.
12. Q12

    An engineer must send JSON encoded telemetry data to an external collector. The transport mechanism must prevent tampering or forgery of the data. Which protocol accomplishes this goal?

    1. GPB
    2. HTTP
    3. gRPC
    4. DTLS

    gRPC transports model-driven telemetry over HTTP/2 and natively supports TLS, providing encryption, authentication, and integrity protection that prevents tampering and forgery of streamed telemetry. GPB (A) is only an encoding format, plain HTTP (B) provides no integrity or authentication, and DTLS (D) is a UDP-based security layer not used for NX-OS gRPC telemetry dial-out. (Scraped source listed HTTP; corrected to gRPC based on Cisco model-driven telemetry documentation.)
13. Q13

    Which feature is supported with an In-Service Software Upgrade on a Cisco Nexus 9000 Series Switch?

    1. configuration changes during an upgrade
    2. nondisruptive upgrades via nonstop forwarding
    3. zero downtime downgrades via dual supervisor modules
    4. upgrades to individual modules and line cards

    NX-OS ISSU relies on nonstop forwarding (NSF/SSO) so that the data plane keeps forwarding while supervisors are upgraded, resulting in a nondisruptive upgrade. Configuration changes are blocked during ISSU (A), ISSU does not provide zero-downtime downgrades (C), and individual line card upgrades alone are not what ISSU provides on Nexus 9000 (D).
14. Q14

    An engineer must integrate Cisco ACI with VMware vCenter. The virtualization team configured the necessary port groups and assigned them to virtual machines through VMware vCenter. The final port group configuration must be protected from being changed by Cisco APIC. Which action accomplishes these goals?

    1. Create the VMM domain with switch mode set to AVE.
    2. Set the VMM domain access mode to Read Only Mode.
    3. Configure the VMM domain with tag collection.
    4. Activate CDP and LLDP in the VMM domain.

    Read Only Mode in the VMM domain configuration makes APIC push policy to vCenter but prevents APIC from modifying or overwriting the port group configuration that the virtualization team created. AVE changes the switching mode, tag collection enables microsegmentation attributes, and CDP/LLDP relate to discovery, not write protection.
15. Q15

    A software downgrade must be performed on a Cisco Nexus 9000 Series switch. What is displayed by running the "show install all impact" command shown?

    1. features that are removed automatically from the switch
    2. that the bootflash file is incompatible with the switch hardware
    3. that the bootflash file is incompatible with the switch software
    4. impact of an in-service software upgrade and chassis reload

    "show install all impact" analyzes the target NX-OS image against the running configuration and lists which features and commands are removed automatically (unsupported in the target release) before the downgrade is performed. Compatibility verification is done by "show incompatibility", and the impact output is not about bootflash or ISSU impact.
16. Q16

    Users report SAN traffic packet loss on a blade server that is managed by using Cisco UCS Manager. An engineer must implement a SPAN feature to an external Fibre Channel analyzer. Which configuration source in the TEST monitoring session must the engineer select?

    1. all the VSANs from the server
    2. all the uplink Fibre Channel ports
    3. all the virtual host bus adapters from the server
    4. all the storage ports

    On Cisco UCS Fabric Interconnects, the traffic of a specific blade server is seen on the vHBAs defined in that server's service profile, so selecting all the server's vHBAs as SPAN sources captures exactly that server's SAN traffic. VSAN-wide or uplink sources would capture unrelated traffic, and storage ports carry upstream array traffic.
17. Q17

    Three operational endpoints are deployed under the same application EPG. Only the ICMP traffic must be permitted within the Web_EPG. Which two actions must be taken to accomplish this goal? (Choose two.)

    1. Check box of forward control proxy ARP.
    2. Set VRF policy control preference to unenforced.
    3. Add Taboo contract on the Web_EPG.
    4. Configure intra EPG contract under Web_EPG.
    5. Mark intra EPG isolation as enforced.

    By default endpoints within the same EPG can communicate freely. Enforcing intra-EPG isolation (E) blocks all intra-EPG traffic, and then an intra-EPG contract (D) permit-restore only the ICMP traffic between endpoints of Web_EPG. Proxy ARP (A) and VRF enforcement (B) are unrelated, and a Taboo contract (C) controls inter-EPG denied traffic rather than intra-EPG traffic.
18. Q18

    Which component is, by default, excluded from the host firmware package on a Cisco UCS B-Series Server?

    1. local SD card
    2. local disk
    3. storage controller
    4. graphics processing unit

    The host firmware package updates components such as the BIOS, CIMC, adapters, storage controller, and FC adapters, but local disk drive firmware is excluded by default because disk firmware updates carry higher operational risk and are managed separately. Local SD cards, storage controllers, and GPUs are included in the package.
19. Q19

    What does WWPN uniquely identify in this Fibre Channel fabric?

    1. interface
    2. zone
    3. area
    4. switch

    A World Wide Port Name (WWPN) uniquely identifies an individual FC port/interface (typically a host HBA port or array target port). The WWNN identifies the whole node/device, while zones and areas are fabric constructs, not addressed by a WWPN.
20. Q20

    An engineer implements an FCoE Unified Fabric where vPC exists between N9K-A and N9K-B. To avoid rate discards, bandwidth must be regulated to account for sent traffic that exceeds the access speed. Which set of commands completes the configuration?

    1. fcoe cost 255 on N9K-A / random-detect min 10 max 20 / spanning-tree port type edge on Po10
    2. fcoe cost 0 on N9K-A / shape min 0 gbps max 1 gbps / spanning-tree port type edge on Po1
    3. fcoe fcf-priority 0 on N9K-A / hardware qos fc rate-shaper low / spanning-tree port type edge trunk on Po10
    4. fcoe fcf-priority 255 on N9K-A / police 50000 / spanning-tree port type edge trunk on Po1

    In FCoE vPC topologies, the fcf-priority controls FCF advertisement preference, the hardware QoS FC rate-shaper (low) regulates FCoE traffic that exceeds the negotiated access speed to prevent rate-based discards, and the vPC peer-facing port channel must be an edge trunk to carry the VLANs. Plain shaping/policing commands (B, D) do not apply to the FC rate-shaper, and edge (non-trunk) port types (A, B) would not carry multiple VLANs.

Answer all 197 questions with instant feedback →

Reader reviews 73 ratings

• I bought the 350-601 question bank a week before my exam and passed with 90%+. The questions are that good.

  ★★★★★ Maria V.

• Excellent value for 350-601 prep. The lifetime access means I can always come back to review concepts when needed.

  ★★★★★★ Samantha L.

• Straightforward and effective. No fluff in the 350-601 practice set, just relevant questions with solid answer keys.

  ★★★★★★ Owen P.

• Great resource for 350-601. I liked that I could jump straight to specific domains instead of going through everything in order.

  ★★★★★★ Dominic S.

• I had almost given up on 350-601 after failing twice. These questions pinpointed exactly what I was missing. Third time’s the charm!

  ★★★★★ Noah S.

• The 350-601 practice exam was crucial to my success. The domains map perfectly to the official exam blueprint.

  ★★★★★★ Jennifer F.

Frequently asked questions

Free study resources

Community-verified analysis of 27 questions from real test-taker discussions — 10 deep analyses and 0 FAQs.

More Microsoft exams