2025/December Latest Braindump2go 350-601 Exam Dumps with PDF and VCE Free Updated Today! Following are some new Braindump2go 350-601 Real Exam Questions!
QUESTION 436
Which two features are used to allow a nondisruptive upgrade for the ISSU process? (Choose two.)
A. connectivity management processor
B. nonstop forwarding
C. graceful restart
D. stateful switchover
E. advanced services license
Answer: BD
QUESTION 437
Refer to the exhibit. An engineer must configure a Fibre Channel device alias named TEST for a device attached to port fc1/9 of a Cisco Nexus Series Switch. Which command set completes the configuration?
A. SITE-A-MDS-Fabric-A# configure terminal
SITE-A-MDS-Fabric-A (config)# device-alias database
SITE-A-MDS-Fabric-A (config-device-alias-db)# device-alias name TEST pwwn
50:00:14:42:d0:0 c:f5:20
SITE-A-MDS-Fabric-A (config-device-alias-db)# exit
B. SITE-A-MDS-Fabric-A# configure terminal
SITE-A-MDS-Fabric-A (config)# device-alias database
SITE-A-MDS-Fabric-A (config-device-alias-db)# device-alias name TEST pwwn
50:00:14:40:47:b0:0 c:f5
SITE-A-MDS-Fabric-A (config-device-alias-db)# device-alias commit
C. SITE-A-MDS-Fabric-A# configure terminal
SITE-A-MDS-Fabric-A (config)# device-alias database
SITE-A-MDS-Fabric-A (config-device-alias-db)# device-alias name TEST pwwn
50:00:14:42:d0:0 c:f5:20
SITE-A-MDS-Fabric-A (config-device-alias-db)# device-alias commit
D. SITE-A-MDS-Fabric-A# device-alias database
SITE-A-MDS-Fabric-A (config-device-alias-db)# device-alias name TEST pwwn
50:00:14:40:47:b0:0 c:f5
SITE-A-MDS-Fabric-A (config-device-alias-db)# device-alias commit
Answer: C
Explanation:
We need to zone the PWWN (port WWN) of fc1/9, not the NWWN (node WWN) of fc1/9.
QUESTION 438
A network engineer must configure a Fibre Channel interface on the Cisco MDS 9000 Series Switch.
The configuration must meet these requirements:
– The interface must be disabled when the bit errors threshold Is exceeded
– Buffer-to-buffer credits must be set to the maximum value
– The interface must have full bandwidth allocated for its port group
Which command set configures a Fibre Channel interface that meets these requirements?
A. interface fc1/1
switchport bit-errors
switchport fcrxbbcredit 220 mode Fx
switchport rate-mode dedicated
B. interface fc1/1
switchport ignore bit-errors
switchport fcrxbbcredit 255 mode Fx
no switchport rate-mode
C. interface fc1/1
no switchport ignore bit-errors
switchport fcrxbbcredit 255 mode Fx
switchport rate-mode dedicated
D. interface fc1/1
no switchport bit-errors
switchport fcrxbbcredit 220 mode Fx
no switchport rate-mode
Answer: A
QUESTION 439
Refer to the exhibit. A network engineer is using tcpdump to capture a snapshot of OSPF-related traffic on a specific Cisco NX-OS switch port. For security reasons, the capture must be taken using an embedded container that is already deployed on the Cisco Nexus device. Which command completes the script?
A. guestshell
B. guestshell-bash
C. run guestshell
D. run bash
Answer: A
QUESTION 440
Which file service protocol allows the files to appear locally mapped to the client and provides view, store, and update capabilities on a remote Linux-based storage repository that also serves as a distributed file system standard for NAS?
A. NFS
B. FTP
C. iSCSI
D. IFS
Answer: A
Explanation:
NFS is an Internet Standard, client/server protocol developed in 1984 by Sun Microsystems to support shared, originally stateless, (file) data access to LAN-attached network storage. As such, NFS enables a client to view, store, and update files on a remote computer as if they were locally stored.
QUESTION 441
Refer to the exhibit. Which command needs to be added to the line starting with the `file` keyword to have the generated running-config file with the name ‘fusion-config_’ and current date?
A. str.(‘fusion-config_’) + date
B. (‘fusion-config_’) + date
C. (‘fusion-config_ + date’)
D. string((‘fusion-config_’) + date
Answer: B
Explanation:
See below for an example:
nxos9kv# python
Python 2.7.11 (default, Feb 26 2018, 03:34:16)
[GCC 4.6.3] on linux2
Type “help”, “copyright”, “credits” or “license” for more information.
>>> import time
>>> import cli
>>> date = time.strftime(‘%Y%m%d’)
>>> file = (“fusion-config_’) + date
>>> print(file)
fusion-config_20210329
>>> print(‘copy running-config ftp://10.183.249.182/FusionSW/’ + file) copy running-config ftp://10.183.249.182/FusionSW/fusion-config_20210329
QUESTION 442
Which Cisco UCS Manager XML encoded backup type must be used to back up user names, roles, and service profiles?
A. Full State Configuration
B. Logical Configuration
C. All Configuration
D. System Configuration
Answer: C
QUESTION 443
Which two configuration settings are available in the Cisco UCS Firmware Auto Sync Server policy? (Choose two.)
A. Immediate Action
B. User Notification
C. User Acknowledge
D. Delayed Action
E. No Action
Answer: CE
Explanation:
Following are the values for the Firmware Auto Sync Server policy:
User Acknowledge – Firmware on the server is not synchronized until the administrator acknowledges
the upgrade in the Pending Activities dialog box.
No Action – No firmware upgrade is initiated on the server.
https://www.cisco.com/c/en/us/td/docs/unified_computing/ucs/sw/firmware-mgmt/gui/2-2/b_GUI_Firmware_Management_22/b_GUI_Firmware_Management_22_chapter_01111.pdf
QUESTION 444
A company plans to migrate some of its services to the cloud. The company does not want to manage or control the underlying cloud infrastructure. It also wants to maintain control over the deployment of its applications and configuration settings of the application-hosting environment.
Which cloud service model meets these requirements?
A. Infrastructure as a Service
B. Function as a Service
C. Platform as a Service
D. Software as a Service
Answer: A
QUESTION 445
What is a benefit of Cisco HyperFlex All-Flash Stretched cluster deployment as compared to All-HDD Stretched cluster deployment?
A. lower cost
B. lower number of IOPS
C. higher cost
D. higher number of IOPS
Answer: D
QUESTION 446
Refer to the exhibit. A network engineer must configure an authentication solution for Cisco UCS with these conditions:
– Two-factor authentication must be enabled for all UCS user authentication.
– All AAA packets must be encrypted and use TCP port 49 to establish communication.
Which set of actions needs these requirements?
A. Create the LDAP provider.
Change the LDAP group rule in an LDAP provider.
B. Create the RADIUS group mapping.
Change the RADIUS group rule in a RADIUS provider.
C. Remove the LDAP provider.
Create a TACACS+ provider in user management.
D. Delete the LDAP group mapping.
Create a RADIUS provider in user management.
Answer: C
QUESTION 447
A customer asks an engineer to develop an orchestration solution to automate repetitive tasks. The customer operations team must integrate the tool with its existing automation framework. The customer asks for the tool to support these requirements:
– The customer’s security requirements mandate the use of SSH transport.
– No extra software must be installed on the managed systems.
– The support staff has limited knowledge of scripting languages, so the solution must be easy to read and use declarative language.
Which solution meets these requirements?
A. PowerShell
B. Ansible
C. Chef
D. Puppet
Answer: B
QUESTION 450
Refer to the exhibit. An engineer is configuring a Cisco MDS 9000 Series Switch for the first time. After the initial setup process, the name server at IP 192.168.10.11 is missing from the configuration. Which set of actions completes the configuration?
A. Enter no at step 21 and reinitialize the installer. Press the Esc key to access ROMMON mode.
B. Enter no at step 21 and reload the switch. Configure the advanced IP options.
C. Enter yes at step 21 to edit the configuration. Add the line dns-server 192.168.10.11.
D. Enter yes at step 21 and log in. Modify the startup configuration DNS
Answer: B
QUESTION 451
An engineer is implementing a Cisco ACI fabric and must use static VLAN range as part of a VMM deployment. The static VLAN must be incorporated into the dynamic VLAN pool. The existing VLAN pool is set for dynamic allocation. Which action accomplishes this goal?
A. Add the VLAN to the pool configured with Inherit Allocation Mode from parent.
B. Change the existing VLAN pool to static allocation mode.
C. Add a static VLAN allocation range to the VLAN pool.
D. Create a static reservation within the dynamic VLAN pool.
Answer: C
QUESTION 452
A network engineer connects the CNA interface of a server to a switch. The switch must bring down all of the VLANs on the interface that are not enabled for FCoE, but the VLANs that are enabled for FCoE should continue to carry SAN traffic without interruption.
Which configuration should be applied to the switch to achieve this objective?
A. switch(config)# interface Ethernet 2/1
switch(config-if)# shutdown Ian
B. switch(config)# interface vfc 2
switch(config-if)# shutdown Ian
C. switch(config)# Interface Ethernet vfc 2
switch(config-if)# shutdown force
D. switch(config)# interface Ethernet 2/1
switch(config-if)# shutdown force
Answer: A
QUESTION 453
An engineer needs to connect Cisco UCS Fabric Interconnect (FI) to an external storage array. Due to budget limitations, the engineer must connect a Cisco UCS FI directly to an FC storage port.
Which two actions must be taken to complete this connection? (Choose two.)
A. Configure the fabric interconnect in FC switch mode.
B. Set FC zoning to disabled when creating the VSAN.
C. Create a storage connection policy.
D. Configure the fabric interconnect in end-host mode.
E. Create the required VSAN in the SAN cloud.
Answer: AE
Explanation:
To connect a Cisco UCS Fabric Interconnect (FI) directly to an external FC storage array, and considering the budget limitation (i.e., no external FC switch), the correct approach involves placing the FI in FC switch mode, not end-host mode.
Option A is Required. When directly connecting to FC storage, the FI must be in FC switch mode to establish direct fabric connectivity (FC end-host mode does not support direct-attached storage).
Option E is Required. You must define a VSAN in UCS Manager to map FC traffic correctly within the SAN cloud.
QUESTION 454
An engineer must configure a Cisco MDS 9000 Series Switch for traffic analysis from the storage array. The storage array is connected to the interface fc2/1 in VSAN 10 and the traffic analyzer to fc4/2. The capture file must include ingress and egress traffic between the switch and the storage array. Also, only traffic in VSAN 10 must be captured.
Which configuration set meets these requirements?
A. interface fc4/2
switchport mode trunk
switchport trunk allow vsan 10
no shutdown
!
span session 1
source interface fc2/1 tx
destination interface fc4/2 rx
no suspend
B. interface fc4/2
switchport mode SD
no shutdown
!
span session 1
source interface fc2/1
destination interface fc4/2
source filter vsan 10
C. interface fc4/2
switchport mode auto
no shutdown
!
span session 1
source interface fc2/1 rx
destination interface fc4/2
source filter vsan 10
no suspend
D. interface fc4/2
switchport mode ST
no shutdown
!
span session 1
source interface fc2/1
destination interface fc4/2
source filter vsan 10
Answer: B
QUESTION 455
Drag and Drop Question
Refer to the exhibit. The server is sending traffic to the storage server using Fiber Channel protocol. The requirement is for the N5K-1 to forward traffic to MDS9k-1. Drag and drop the configuration steps from the right to complete the configuration for N5K-1 on the left. Not all configuration steps are used.
Answer:
Explanation:
To meet the requirement for N5K-1 to forward FC traffic to MDS9k-1, the N5K (Nexus 5000) switch needs to operate in N-Port Virtualization (NPV) mode. In NPV mode, the Nexus 5K doesn’t perform Fibre Channel fabric services; instead, it acts as a proxy, forwarding traffic to an upstream MDS switch.
npv enable puts the N5K into NPV mode.
fc2/2 connects upstream to MDS (acts as NP port).
switchport mode NP is required for the uplink to the MDS.
fc2/1 connects to the server (acts as F port).
switchport mode F is used for connecting end devices like servers.
QUESTION 456
Drag and Drop Question
Refer to the exhibit. An engineer must provision a VXLAN deployment.
The OSPF has already been configured as the underlay protocol. All BGP configurations will be performed using the template method. The deployment must meet these requirements:
– The local update source for leaf switches must be loopback 1
– The router ID must be the local loopback IP address
– The external BGP connections must use a template name
Drag and drop the configuration snippets from the bottom to complete the configuration.
Answer:
QUESTION 457
Cisco Nexus 9000 Series Switches are configured with LACP protocol and default aging timers.
What is the impact on the LACP peer during an ISSU upgrade?
A. The LACP peer connection terminates.
B. The LACP peer session remains up.
C. The LACP peer renegotiates the adjacency.
D. The LACP peer connection resets.
Answer: B
Explanation:
ISSU and ungraceful switchovers are not supported with LACP fast timers.
QUESTION 458
A network architect must design an automation solution to initially support networking and also support the server infrastructure in the future. To keep configuration consistency, the network team requires a solution that enforces the desired state of the network and reverts any manual configuration. Which solution meets these goals?
A. NX-API
B. Ansible
C. Terraform
D. Puppet
QUESTION 459
Refer to the exhibit. An engineer installs a new Cisco UCS B-Series server. The requirement is to install an operating system on a LUN that is provided by the Fibre Channel storage array.
Which two steps must be configured in the boot policy to accomplish this goal? (Choose two.)
A. Disable Enforce vNIC/vHBA/iSCSI Name.
B. Add Local CD/DVD and SAN Boot.
C. Configure a SAN Boot Target with a WWPN.
D. Set Boot Order to External USB and LAN Boot.
E. Create iSCSI VNICs and add Local LUN.
Answer: BC
Explanation:
https://www.cisco.com/c/en/us/td/docs/unified_computing/ucs/ucs-manager/GUI-User-Guides/Server-Mgmt/4-2/b_Cisco_UCS_Manager_Server_Mgmt_Guide_4_2/chapter_01010.html#task_mhw_dvy_5db
QUESTION 460
An engineer must perform a POAP deployment of a Cisco Nexus 9000 Series Switch. The switch must automatically receive its software image and configuration file upon power-on. Also, only UDP is permitted between the Nexus 9000 switch and the server that hosts the Cisco NX-OS system images. Which set of actions completes the configuration?
A. Enable option 67. Define TFTP transfer protocol
B. Enable option 43. Define HTTP transfer protocol.
C. Enable option 46. Define TFTP transfer protocol
D. Enable option 35. Define HTTP transfer protocol.
Answer: A
QUESTION 461
Drag and Drop Question
Refer to the exhibit. Drag and drop the code snippets from the bottom onto the blanks in the code to complete the JSON request that implements the ACL presented. Not all code snippets are used.
Answer:
QUESTION 462
An engineer must allow communication between the APIC controller and an OpenStack OpFlex agent. The agent is running on a compute node directly plugged to a Cisco ACI leaf switch. The engineer must enable and extend Infra VLAN on the port facing the compute and extend the Infra VLAN to the host. Which action must be taken to meet these requirements?
A. Enable the Infra VLAN on the Interface Profile policy
B. Enable the Infra VLAN on the Attachable Access Entity Profile.
C. Add the infra VLAN via the physical domain.
D. Add the infra VLAN via the VMM domain.
Answer: C
QUESTION 463
Refer to the exhibit. Which command must be used to restore configuration changes made by disabling the PIM feature and skipping any errors?
A. rollback running-config checkpoint new-checkpoint stop-at-first-failure
B. rollback running-config checkpoint new-checkpoint verbose
C. rollback running-config checkpoint system-fm-pim-best-effort
D. rollback running-config checkpoint system-fm-pim atomic
Answer: C
QUESTION 464
An engineer troubleshoots an Fibre Channel deployment on a Cisco MDS 9000 Series Switch.
What does this output indicate about port channel 1?
A. Port channel 1 is configured to be an ISL.
B. Port channel 1 is configured to connect to a host bus adapter.
C. Port channel 1 is configured to connect to an NPIV switch.
D. Port channel 1 is configured to connect to an NPV switch.
Answer: D
QUESTION 465
Which component is upgraded by using an EPLD upgrade on a Cisco Nexus 9000 Series Switch?
A. dual-homed fabric extenders
B. BIOS
C. field-programmable gate arrays
D. ISSU of the NX-OS version
Answer: C
QUESTION 466
An engineer deploys a new Cisco Nexus 5000 Series Switch in an existing environment with strict security policies. The new device should meet these requirements:
– Secure end-user ports with minimum configuration effort.
– Log security breaches and require manual recovery.
– Retain the switch configuration if the device restarts.
Which configuration must be used?
A. switchport port-security
switchport port-security max 1
switchport port-security mac-address sticky
B. switchport port-security
switchport port-security violation restrict
switchport port-security mac-address sticky
C. switchport port-security
switchport port-security violation shutdown
switchport port-security mac-address dynamic
D. switchport port-security
switchport port-security max 1
switchport port-security violation shutdown
Answer: A
QUESTION 467
An engineer must perform backup and restore of the Cisco UCS Manager configuration. The configuration must be stored on a remote server via XML encoding. The backup must store the configurations of the chassis. FEX, rack servers. lOMs, and blade server.
Which set of actions accomplishes these goals?
A. Perform a logical configuration backup and run the replace import method.
B. Perform a full state configuration backup and run the restore procedure.
C. Perform a system configuration backup and run the merge import method
D. Perform an all configuration backup and run the system restore procedure.
Answer: C
Explanation:
System Configuration – The backup file preserves identities for Chassis, FEX, Rack Servers, and user labels for Chassis, FEX, Rack Servers, IOMs and Blade Servers.
https://www.cisco.com/c/en/us/td/docs/unified_computing/ucs/ucs-manager/GUI-User-Guides/Admin-Management/4-1/b_Cisco_UCS_Admin_Mgmt_Guide_4-1/m_backup_and_restore_configuration.html#task_D97990B1ED0F4BCB8469D5A671774B5D
QUESTION 468
An engineer must optimize ARP responses and reduce unnecessary ARP broadcasts over the VXLAN/EVPN fabric. Which action accomplishes these tasks?
A. Configure ip proxy-arp under the VLAN SVI associated with the VXLAN VNI.
B. Configure ip proxy-arp within the VXLAN VNI configuration under the VTEP NVE interface.
C. Configure suppress-arp within the VXLAN VNI configuration under the VTEP NVE interface.
D. Configure suppress-arp under the VLAN SVI associated with the VXLAN VNI.
Answer: C
QUESTION 470
Refer to the exhibit. An engineer must configure a QoS policy that controls only vHBA traffic. Which policy must be used to meet this requirement?
A. Best Effort
B. Fibre Channel
C. Gold
D. Platinum
Answer: B
QUESTION 471
An engineer requires the Cisco Fabric Services to distribute NTP configuration only to the members within the scope of a VSAN that belongs to a Cisco Unified Network.
Which scope distribution must be selected to meet this requirement?
A. Logical scope
B. Physical scope
C. Uncoordinated scope
D. Coordinated scope
Answer: A
QUESTION 472
A new user with access privileges in the Finance department moves to a new Admin department. The user must have access privileges to the Admin department data and applications inside the Cisco UCS Manager.
Which set of changes must be implemented in Cisco UCS Central for the user to acquire the privileges?
A. Create an Admin user account and remove the authentication service for the Finance privileges.
B. Disable the Finance user account and add the authentication service for the Admin privileges.
C. Create a new locale Admin and add the Admin department to the Admin locale. Delete the old locale
D. Finance and remove the Finance department from the Finance locale.
Answer: C
QUESTION 473
A network engineer must download a firmware image from a remote location to a Cisco UCS Fabric Interconnect. The software bundle is over 232 MB in size. The file transfer must use encryption and authentication. Which protocol must be used to accomplish this goal?
A. RDP
B. HTTPS
C. SCP
D. TFTP
Answer: C
QUESTION 474
Refer to the exhibit. An administrator connects a Cisco Nexus Series Switch to the Cisco ACI fabric. The connectivity must allow Cisco Discovery Protocol, LLDP, and LACP. Which action enables the protocols between Switch-1 and the ACI leaf switches?
A. Implement an interface policy group.
B. Activate a leaf interface.
C. Enable an existing interface selector.
D. Configure an interface profile.
Answer: A
QUESTION 475
An engineer must perform an initial configuration of VXLAN and MP-BGP EVPN on the Cisco Nexus 9000 Series platform. The underlay must be OSPF, and the VTEP must run with distributed default gateway on a VLAN interface. Which command set must be applied to meet these requirements?
A. NX9K(config)# feature nv overlay
NX9K(config)# feature vn-segment-vlan-based
NX9K(config)# feature bgp
NX9K(config)# nv overlay-evpn
NX9K(config)# feature ospf
NX9K(config)# feature interface-vlan
B. NX9K(config)# feature nv overlay
NX9K(config)# feature bfd
NX9K(config)# feature vn-segment-vlan-based
NX9K(config)# nv overlay-evpn
NX9K(config)# feature ngmvpn
NX9K(config)# feature ospf
C. NX9K(config)# feature nv overlay
NX9K(config)# feature bfd
NX9K(config)# feature fabric forwarding
NX9K(config)# feature vn-segment-vlan-based
NX9K(config)# nv overlay-evpn
NX9K(config)# feature ospfv3
D. NX9K(config)# feature nv overlay
NX9K(config)# feature bgp
NX9K(config)# feature bfd
NX9K(config)# feature ngmvpn
NX9K(config)# feature ospf
NX9K(config)# feature interface-vlan
Answer: A
QUESTION 476
What is a feature of EPLD upgrades on a Cisco Nexus 7000 Series Switch?
A. They do not cause service disruptions.
B. They are performed during an ISSU system and kickstart upgrade.
C. They are independent of the Cisco NX-OS ISSU process.
D. They execute simultaneously on multiple modules.
Answer: C
Explanation:
The EPLD image upgrades are independent from the Cisco NX-OS In Service Software Upgrade (ISSU) process, which upgrades the system and kickstart images with no impact on the network environment.
https://www.cisco.com/c/en/us/td/docs/switches/datacenter/sw/6_x/epld/epld_rn_62.html#20945
QUESTION 477
Which Cisco HyperFlex ability adds compute or storage-only nodes as required?
A. unified management
B. independent resource scaling
C. stretch clustering
D. in-cluster synchronous replication
Answer: B
Explanation:
https://www.cisco.com/c/dam/global/de_de/products/hyperconverged-infrastructure/le-wp-hxt-op.pdf
QUESTION 478
Drag and Drop Question
Refer to the exhibit. The VSAN 4041 and 4042 are exchanged between two Cisco MDS 9000 Series Switches called MDS-1 and MDS-2. The objective is to deploy a security mechanism on MDS-1 to allow MDS-2 to join the fabric exclusively.
Drag and drop the code snippets from the bottom onto the boxes in the code to complete the MDS-1 configuration. Not all code snippets are used.
Answer:
QUESTION 479
An engineer is implementing VSAN 10 on multiple Cisco Nexus 5600 Series Switches and must ensure that the full zone set and active zone set are identical across the fabric. Which configuration must be implemented to meet this requirement?
A. switch(config)# zoneset distribute vsan 10
B. switch(config)# zone-attribute-group name ATTR1 vsan 10
C. switch(config)# zoneset distribute full vsan 10
D. switch(config)# zoneset activate name ZONE10 vsan 10
Answer: C
QUESTION 480
Which value is missing in the field in the key called “msg” in this JSON response?
Request:
Response:
A. Success
B. Available
C. Unavailable
D. Drop
Answer: A
QUESTION 481
A DevOps engineer must use Python to manage a Cisco device. The device is in a highly secure DMZ environment. Only trusted Cisco Python libraries can be used.
Which solution meets the requirements?
A. Develop an on-box Python script that uses trusted Cisco libraries.
B. Develop an application by using serverless technologies in a primary cloud provider.
C. Develop an off-box Python script that uses trusted Cisco libraries.
D. Develop a containerization application that uses trusted Cisco-provided libraries.
Answer: D
QUESTION 482
What is the format of this output?
A. SOAP
B. YAML
C. XML
D. JSON
Answer: D
QUESTION 483
A network engineer needs a solution that simplifies the initial deployment of Cisco Nexus Series Switches. The solution must support these requirements:
– zero-touch provisioning
– configuration through DHCP options
– initial configuration from a central TFTP server
– no manual configuration management after the initial installation
Which technology supports these goals?
A. Ansible
B. Cisco Intersight
C. Chef
D. POAP
Answer: D
QUESTION 484
Drag and Drop Question
Refer to the exhibit. An engineer implements an MP-BGP deployment that must meet these requirements:
– Unicast traffic must flow through the Red link between the two autonomous systems.
– Multicast traffic must flow through the Green link.
– BGP must be configured to carry routing information and differentiate between unicast and multicast traffic to avoid RPF check failure.
Drag and drop the SiteA commands from the right onto the blanks in the configuration on the left. Commands can be used more than once.
Answer:
QUESTION 485
What does this configuration create?
A. three subnets within a bridge domain
B. a CTX1 tenant
C. an L3OUT-1 bridge domain
D. two L3Out domains
Answer: B
QUESTION 486
A network engineer implements a Python script on a Cisco Nexus 9000 Series Switch with redundant supervisors. The script is located on a built-in container that runs as part of the Cisco NX-OS system. The requirement is to automate the periodic transfer of the Python script to a redundant supervisor. In addition, the script must be transferred to an external server using encryption and authentication. Which configuration set meets these requirements?
A. Enable the checkpoint feature.
Configure an EEM job to transfer the script to the SCP server.
B. Implement the guest shell synchronization feature.
Configure a scheduler job to transfer the script to the TFTP server.
C. Enable the checkpoint feature.
Configure a scheduler job to transfer the script to the HTTP server.
D. Implement the guest shell synchronization feature.
Configure a CRON job to transfer the script to the SCP server.
Answer: A
QUESTION 487
Refer to the exhibit. A network engineer must monitor the traffic from the server on VLAN 80. All source traffic from the server must be captured on the monitoring device. Which configuration set meets these requirements?
A. switch(config-monitor)# destination interface ethernet 1/1
switch(config-monitor)# source vlan 80
B. switch(config-monitor)# destination interface ethernet 1/1
switch(config-monitor)# filter vlan 80
C. switch(config-monitor)# destination interface ethernet 1/2
switch(config-monitor)# filter vlan 80 rx tx
D. switch(config-monitor)# destination interface ethernet 1/2
switch(config-monitor)# source vlan 80 rx
Answer: A
QUESTION 488
The network team needs permissions to access the Cisco UCS B-Series Servers via the Cisco UCS Manager GUI to configure the network and collect information about faults. The administrator wants to assign these permissions to the newly configured user called netops. Which set of tasks must the administrator perform to accomplish these goals?
A. Implement username netops on the locally authenticated user.
Assign the roles of network administrator and operations.
B. Configure username netops on the Cisco UCS Manager login profile.
Assign the roles of AAA administrator and operations.
C. Enable username netops on the authenticated users.
Assign the roles of storage administrator and facility manager.
D. Deploy username netops on the users locales.
Assign the roles of networks security and facility manager.
Answer: A
QUESTION 489
ASAN administrator must implement infrastructure monitoring for the Fibre Channel storage environment. The storage environment consists of a standalone Cisco Nexus 9000 Series Switch and Cisco MDS 9000 Series Switches. The goal is to be able to visualize the SAN, support VXLAN overlays, and identify storage slow drain issues. Which monitoring solution accomplishes this task?
A. Cisco DCNM
B. Cisco APIC
C. Cisco Intersight
D. Cisco Prime Infrastructure
Answer: A
QUESTION 490
Refer to the exhibit. Which feature must be implemented on Postman to receive the response from a Cisco Nexus 9000 Series Switch?
A. API token in the APIC-cookie
B. username and password in the Nexus-cookie
C. username and password in the api/mo header
D. certificate in the HTML Nexus-API header
Answer: A
Explanation:
Subsequent operations on the REST API can use this token value as a cookie named APIC-cookie to authenticate future requests.
https://www.cisco.com/c/en/us/td/docs/switches/datacenter/aci/apic/sw/3-x/rest-api-config/b_Cisco_APIC_REST_API_Configuration_Guide_3x/b_Cisco_APIC_REST_API_Configuration_Guide_chapter_01.html
QUESTION 491
Refer to the exhibit. An engineer must activate the port-security database on a Cisco MDS 9000 Series Switch for VSAN 100, but receives the error shown. Which command completes the configuration?
A. port-security config-enable vsan 100
B. port-security vsan 100 database active
C. port-security enabled mode vsan 100
D. port-security activate vsan 100 force
Answer: D
Explanation:
https://www.cisco.com/c/en/us/td/docs/switches/datacenter/nexus5000/sw/configuration/guide/cli/CLIConfigurationGuide/psec.html#54776
QUESTION 492
An engineer builds a new Cisco ACI fabric. Which VLAN must be configured as the infrastructure VLAN during the Cisco APIC setup script?
A. a unique in-band management VLAN
B. a unique native VLAN
C. a unique OOB management VLAN
D. a unique VLAN within the network
Answer: D
QUESTION 493
Refer to the exhibit. An engineer must configure port security on the Cisco Nexus 5000 Series Switch that meets these requirements:
– Port security must be applied on VSAN 10 only.
– NWWN 20:10:10:10:10:10:10:10 to log in through SAN port-channel 2.
– Any WWN must be allowed to log in through interfaces fc1/1, fc1/2, fc1/3.
– Auto learning must be disabled.
Which command set satisfies these conditions?
A. Nexus5K(config)# port-security database vsan 10
Nexus5K(config-port-security)# nwwn 20:10:10:10:10:10:10:10 interface san-port-channel 2
Nexus5K(config-port-security)# any wwn interface fc1/1-3
Nexus5K(config-port-security)# port-security commit vsan 10
B. Nexus5K(config)# port-security activate vsan 10 no auto-learn
Nexus5K(config)# port-security database vsan 10
Nexus5K(config-port-security)# nwwn 20:10:10:10:10:10:10:10 interface san-port-channel 2
Nexus5K(config-port-security)# any wwn interface fc1/1-3
C. Nexus5K(config)# port-security database vsan 10
Nexus5K(config-port-security)# nwwn 20:01:01:01:01:01:01:01 interface san port-channel 5
Nexus5K(config-port-security)# any wwn interface fc1/1-3
Nexus5K(config)# port-security database diff active vsan 10
D. Nexus5K(config)# port-security database vsan 10
Nexus5K(config-port-security)# nwwn 20:01:01:01:01:01:01:01 interface port-channel 5
Nexus5K(config-port-security)# any wwn interface fc1/1-3
Nexus5K(config)# port-security database diff active vsan 10
Answer: A
Explanation:
https://www.cisco.com/en/US/docs/storage/san_switches/mds9000/sw/rel_3_x/configuration/guides/cli_3_2/psec.html#wp1298070
QUESTION 494
Drag and Drop Question
Drag and drop the telemetry concepts from the left onto their functions on the right.
Answer:
QUESTION 495
A SAN administrator receives reports about latency and response-time issues that impact various applications. The incidents have gradually increased in frequency and severity and have reached a critical state. Which DCNM configuration set identifies the source of the issues?
A. – Slow Drain Analysis
– Duration Once/Run Immediately
– Start/Stop Collection
– Current Jobs/Result
B. – SAN Insights
– Storage Enclosure
– Select Host/Initiator-Target Pair
C. – Events
– Time Now
– Select MDS Switch
– Advanced Filter/Source
D. – FC Flows
– Interval 24 Hours
– Export/Save
Answer: A
QUESTION 496
Refer to the exhibit. An engineer must upgrade the N9K_2 device to the latest code. In preparation for the upgrade, the engineer wants to divert all data plane traffic between RTR_1 and RTR_2 to N9K_4 and N9K_5. The traffic redirection must happen without forcing any OSPFv2 adjacency change in the network. Which configuration set must be used on N9K_2 OSPF process 1 to accomplish these goals?
A. area 0 stub no-summary
B. passive-interface default
C. max-metric router-lsa
D. area 0 filter-list route-map DENY_ALL out
Answer: C
QUESTION 497
Drag and Drop Question
Drag and drop the streaming telemetry component on the left to its function on the right. Not all components are used.
Answer:
QUESTION 498
Refer to the exhibit. A traffic collector virtual machine is installed inside the Cisco UCS server. The collector must monitor traffic that is received on G1/2 with ERSPAN. Which set of actions must be taken to send the traffic to the traffic collector?
A. Configure ERSPAN.
Configure a source session on Cisco UCS Manager.
B. Configure SPAN.
Configure a source session on the SW1 switch.
C. Configure SPAN.
Configure a source session on Cisco UCS Manager.
D. Configure ERSPAN.
Configure a source session on the SW1 switch.
Answer: D
QUESTION 499
Which device alias database is shown by this output?
switch# show device-alias database
device-alias name SampleName pwwn 24:40:00:e7:09:0b:27:56
A. inactive database
B. effective database
C. pending database
D. zoning database
Answer: D
QUESTION 500
Which storage solution operates at the file level and contains its own native lightweight operating system on simplified hardware?
A. NAS
B. SAN
C. unified fabric
D. standard file server
Answer: A
Explanation:
A NAS device is an appliance that directly connects to the network either through a hardwired Ethernet (RJ45) cable or via Wi-Fi, thus creating a LAN instead of WAN. It is assigned an IP address, and data transfer between users, servers, and a NAS via TCP/IP. NAS operates with a traditional file system — either a New Technology File System (NTFS) or NFS for remote file services and data sharing. All storage on the device is accessed at the file level through a file share.
QUESTION 501
Which component becomes unavailable for a maximum of 80 seconds during a nondisruptive Cisco NX-OS upgrade?
A. supervisor module
B. default VSAN
C. control plane
D. data plane
Answer: C
Resources From:
1.2025 Latest Braindump2go 350-601 Exam Dumps (PDF & VCE) Free Share:
https://www.braindump2go.com/350-601.html
2.2025 Latest Braindump2go 350-601 PDF and 350-601 VCE Dumps Free Share:
https://drive.google.com/drive/folders/1M-Px6bHjOJgp4aPsLoYq-hgm90ZKxV_i?usp=sharing
3.2025 Free Braindump2go 350-601 Exam Questions Download:
https://www.braindump2go.com/free-online-pdf/350-601-VCE-Dumps(436-501).pdf
Free Resources from Braindump2go,We Devoted to Helping You 100% Pass All Exams!