350-601 Free Practice Test

Refer to the exhibit.

Server1 is connected to a Cisco Nexus 9000 Series Switch via a 1-Gb port channel. The storm control is applied to the Eth0 device with a zero percent value. What does the switch do to traffic that traverses the switch interfaces during the streaming window that exceeds the bandwidth of the interfaces?

1. A. forwards all traffic
2. B. forwards half of the traffic
3. C. suppresses all traffic
4. D. drops all of the excess traffic

Correct Answer: B

A host EPG Client wants to talk to a webserver in EGP Web. A contract with default settings is defined between EPG Client and EPG Web, which allows TCP communication initiated by the client toward the webserver with TCP destination port 80. Which statement is true?

1. A. If EPG Web is made a preferred group member, a contract between EPG Client and EPG Web is no longer required for the host in EPG Client to reach the webserver in EPG Web.
2. B. If vzAny is configured to consume and provide a "deny all" contract, traffic between EPG Client and EPG Web is no longer allowed.
3. C. The host in EPG Client is allowed to connect to TCP destination port 80 on the webserver in EPG Web.The webserver will not be allowed to initiate a separate TCP connection to a host port with TCP source port 80.
4. D. The host in EPG Client is allowed to connect to TCP destination port 80 on the webserver in EPG Web.The webserver is allowed to initiate a separate TCP connection to a host port with TCP source port 80.

Correct Answer: D
Apply Both Direction and Reverse Filter Port in the subject for the filter. These two options are by default enabled...This means that if the provider EPG initiates traffic toward the consumer EPG, the Cisco ACI fabric allows it for any destination ports if the source port is 80. https://www.cisco.com/c/en/us/td/docs/switches/datacenter/aci/apic/sw/1-x/Operating_ACI/guide/
b_Cisco_Operating_ACI/b_Cisco_Operating_ACI_chapter_01000.html Reverse filter and apply in both directions is default.
If a filter allows traffic from any consumer port to a provider port (e.g. 8888), if reverse port filtering is enabled and the contract is applied both directions (say for TCP traffic), either the consumer or the provider can initiate communication. The provider could open up a TCP socket to the consumer using port 8888, whether the provider or consumer sent traffic first. https://www.cisco.com/c/en/us/td/docs/switches/datacenter/aci/apic/sw/1-x/Operating_ACI/guide/ b_Cisco_Operating_ACI/b_Cisco_Operating_ACI_chapter_01000.html

The EPLD update of the supervisor module has been scheduled for several cisco MDS 9000 switches. What will be the impact of the update?

1. A. All control plane traffic is stopped for the duration of the EPLD update and the switch remain operational for the duration of the upgrade.
2. B. The redundant supervisor lakes over while the EPLD update is in progress and there is no service disruption.
3. C. All traffic is stopped for the duration of the EPLD update and the switch is rebooted after the upgrade is completed.
4. D. The redundant supervisor lakes while the EPLD update is in progress and the switch is rebooted after the upgrade is completed.

Correct Answer: C
An EPLD update of the supervisor module of fabric switches (Cisco MDS 9100, Cisco MDS 9200, and Cisco MDS 9300 Series switches) is disruptive since there is no redundant supervisor to take over while the update is in progress. All traffic through the system is stopped for the duration of the update and the switch is rebooted after the upgrade has completed. The update may take up to 30 minutes to complete. https://www.cisco.com/c/en/us/td/docs/switches/datacenter/mds9000/sw/6_2/release/notes/epld/epld_rn.html#pg

Refer to the exhibit.

A network engineer requires remote access via SSH to a Cisco MDS 9000 Series Switch. The solution must support secure access using the local user database when the RADIUS servers are unreachable from the switches. Which command meets these requirements?

1. A. aaa authentication none
2. B. aaa authentication login default group radius
3. C. aaa authentication login default group local
4. D. aaa authentication login default fallback error local

Correct Answer: D
https://www.cisco.com/c/en/us/td/docs/switches/datacenter/mds9000/sw/6_2/configuration/guides/security/nx-o

A network administrator must automate the process of pinging all the IP addresses from the 10.0.0.0/8 subnet. The subnet is already present in the ARP table of the Cisco Nexus switch. Drag and drop the bash commands to generate the desired output. Not all commands are used.

Solution:
vsh -c "show ip arp", awk'{print "ping" $1}', vsh, egrep "statistics|loss"

Does this meet the goal?

1. A. Yes
2. B. No

Correct Answer: A