Cisco CCNP Data Center 350-601 Questions & Answers

• Question 361:

  A network engineer is configuring the Cisco UCS service profile template with Ansible using this code:

  hostname: 192.168.10.23 username: cisco password: f718c4329405726531f6247ff982 name: DCE-CTRL template_type: updating-template uuid_pool: UUID-POOL storage_pronte: DCE-StgProf maintenance_policy: default server_pool: Container-Pool host_firmware_package: 4.1(1a) bios_policy: Docker

  Which attribute must be used to apply the iSCSI initiator identifiers to all iSCSI vNICs for the service profiles derived from the service template?

  A. san_connectivity_policy

  B. lan_connectivity_policy

  C. boot_policy

  D. iqn_pool

  Correct Answer: D

  An IQN pool is a collection of iSCSI Qualified Names (IQNs) for use as initiator identifiers by iSCSI vNICs in a Cisco UCS domain. IQN pools created in Cisco UCS Central can be shared between Cisco UCS domains.

  Reference: https://www.cisco.com/c/en/us/td/docs/unified_computing/ucs/ucs-central/GUI-User-Guides/Server-Mgmt/1-5/b_CiscoUCSCentral_Server_Management_Guide_1-5/b_CiscoUCSCentral_Server_Management_Guide_1-5_chapter_0101.html

• Question 362:

  An engineer must implement Strict Unicast Reverse Path Forwarding mode for IPv4 packets on the Etnerret1/1 interface on the Cisco Nexus 9500 Series Switch. Which configuration achieves this goal?

  A. interlace Ethernet1/1 ip address 172.16.10.1/24 ip verify unicast source reachable-via rx

  B. interface Ethernet1/1 ip address 172.16.10.1/24 ip verify unicast source any

  C. interface Ethernet1/1 ip address 172.16.10.1/24 ip verify unicast source reachable-via any

  D. interface Ethernet1/1 ip address 172.16.10.1/24 ip verify unicast source rx

  Correct Answer: A

• Question 363:

  An engineer must implement a VXLAN-based data center interconnect. The long-distance transport provided by a service provider is IP-based, supports a maximum MTU of 1554 bytes, and does not support outbound traffic replication. Which action must be taken to build the data center interconnect?

  A. Announce host reachability over BGP.

  B. Create an IP access list and associate it with VNI to replicate traffic to remote VTEPs.

  C. Configure a route map to associate the IPs of the remote VTEPs.

  D. Implement BGP EVPN ingress replication.

  Correct Answer: D

• Question 364:

  An engineer must perform an initial configuration of VXLAN Tunnel End-Point functionality on the Cisco Nexus 9000 Series platform. All the necessary features are already enabled on the switch. Which configuration set must be used to accomplish this goal?

  A. NX9K(config)# interface loopback0 NX9K(config-if)# ip address 10.10.10.11/32 NX9K(config)# interface VLAN10 NX9K(config-if)# ip unnumbered loopback0 NX9K(config)# interface nve1 NX9K(contig-if-nve)# source-interface loopback0

  B. NX9K(config)# interface loopback0 NX9K(config-if)# ip address 10.10.10.11/32 NX9K(config)# interface overlay0 NX9K(config-if-overlay)# source-interface loopback0 NX9K(config)# interface VLAN10 NX9K(contig-if-nve)# source-interface loopback0

  C. NX9K(config)# interface loopback0 NX9K(config-if)# ip address 10.10.10.11/32 NX9K(config)# interface tunnel1 NX9K(config-if)# tunnel source loopback0 NX9K(config)# interface ethernet1/1 NX9K(contig-if)# ip unnumbered loopback0

  D. NX9K(config)# interface loopback0 NX9K(config-if)# ip address 10.10.10.11/32 NX9K(config)# interface nve1 NX9K(config-if-nve)# source-interface loopback0 NX9K(config)# interface ethernet1/1 NX9K(contig-if)# ip unnumbered loopback0

  Correct Answer: D

• Question 365:

  An engineer must perform a software upgrade on a production Cisco Nexus 7000 Series Switch. Before the upgrade activity, the requirement is for all ports to be shut down and routing protocols to terminate gracefully. Which feature must be used to meet these requirements?

  A. Switch Profile

  B. Service Profile Template

  C. Maintenance Mode Profile

  D. Configuration Profile

  Correct Answer: C

• Question 366:

  An engineer must configure the HSRP protocol between two Cisco Nexus 9000 Series Switches. This configuration is present on Nexus A.

  

  The final HSRP configuration must meet these requirements:

  The HSRP communication must be secured on both switches. Both switches must support more than 300 groups.

  Which two commands must be added to the HSRP configuration on Nexus A to complete these requirements? (Choose two.)

  A. authentication text 1020

  B. hsrp version 1

  C. authenticate md5 key-chain NHRP-KEYS

  D. hsrp version 2

  E. authentication text 1010

  Correct Answer: CD

• Question 367:

  Refer to the exhibit.

  

  Which action completes the vPC domain implementation?

  A. Add the vPC member ports to the vPC channel group.

  B. Configure the system MAC on the vPC domain.

  C. Include the VRF management on the vPC domain.

  D. Allow VLANs on the vPC peer link member interfaces.

  Correct Answer: A

• Question 368:

  Refer to the exhibit.

  

  A network engineer is implementing a configuration checkpoint on a Cisco Nexus 9000 Series Switch. The configuration must skip any existing vPC configuration errors and must complete it there are any configuration errors. The engineer finished the vPC domain configuration part.

  Which command completes the checkpoint implementation?

  A. best-effort

  B. stop-at-first-failure

  C. atomic

  D. verbose

  Correct Answer: A

• Question 369:

  A Cisco ACI engineer must configure an access port on a Cisco ACI leaf switch. The access policy should be configured so that it supports L3Out connectivity concurrently with several EPGs that are mapped to this interface with the static port method. How should the access policy be configured?

  A. by linking the interface policy group to multiple Attachable Access Entity Profiles

  B. with two interface policy groups that are linked to the same interface profile port selector

  C. by mapping a single physical domain, mapped to the L3out and EPG interfaces

  D. with a single Attachable Access Entity Profile that is linked to the corresponding routed domain and physical domain

  Correct Answer: D

• Question 370:

  Refer to the exhibit.

  

  An engineer monitors ingress traffic from Host-A and all traffic for VLAN 20 from Host-B. Which configuration must be implemented to monitor and export traffic to Network Analyzer?

  A. SW-1(config)# monitor session 5 SW-1(config-monitor)# source interface ethernet 1/2 rx SW-1(config-monitor)# source interface ethernet 1/1 tx SW-1(config-monitor)# source vlan 20 both SW-1(config-monitor)# destination ip 10.10.10.1 SW-1(config-monitor)# no shut

  B. SW-1(config)# monitor session 5 type erspan-source SW-1(config-erspan-src)# source interface ethernet 1/2 rx SW-1(config-erspan-src)# source vlan 20 both SW-1(config-erspan-src)# destination ip 10.10.10.1 SW-1(config-erspan-src)# erspan-id 111 SW-1(config-erspan-src)# no shut

  C. SW-1(config)# monitor session 5 SW-1(config-monitor)# source interface ethernet 1/2 rx SW-1(config-monitor)# source interface ethernet 1/1 both SW-1(config-monitor)# source vlan 20 both SW-1(config-monitor)# destination interface ethernet 2/1 SW-1(conflg-monitor)# no shut

  D. SW-1(config)# monitor session 5 type erspan SW-1(config-erspan-src)# source interface ethernet 1/2 rx SW-1(config-erspan-src)# source interface ethernet 1/1 both SW-1(config-erspan-src)# destination ip 10.10.10.1 SW-1(config-erspan-src)# mtu 1000 SW-1(config-erspan-src)# no shut

  Correct Answer: B