350-601 Practice Questions Free – 50 Exam-Style Questions to Sharpen Your Skills
Are you preparing for the 350-601 certification exam? Kickstart your success with our 350-601 Practice Questions Free – a carefully selected set of 50 real exam-style questions to help you test your knowledge and identify areas for improvement.
Practicing with 350-601 practice questions free gives you a powerful edge by allowing you to:
- Understand the exam structure and question formats
- Discover your strong and weak areas
- Build the confidence you need for test day success
Below, you will find 50 free 350-601 practice questions designed to match the real exam in both difficulty and topic coverage. They’re ideal for self-assessment or final review. You can click on each Question to explore the details.
Which command reduces the amount of time it takes to complete the ISSU on a Cisco Nexus 7000 Series Switch that has dual supervisor modules and two I/O modules?
A. insinstall all epld bootflash: parallel
B. install all kickstart system parallel
C. install all kickstart system
D. install all epld bootflash:
Refer to the exhibit. The ASA_1 acts as a Layer 3 gateway for all servers. The servers lose the gateway connectivity when the vPC peer links go down and the vPC keepalive remains up. Which action improves the high availability in the network?
A. Create a static port channel with two links from each firewall to the switch.
B. Activate the vPC orphan-port suspend feature on the switch ports connected to the firewall.
C. Enable the vPC peer gateway feature on the vPC devices.
D. Implement the IP redirect feature on the vPC devices.
A Cisco UCS user called `Employee1` accidentally changed the boot policy of the Cisco UCS server at the Cisco UCS Manager root level. This change impacted all service profiles, and their storage connectivity was lost. The system administrator wants to prevent this issue from recurring in the future. The new security policy mandates that access must be restricted up to the organization level and prevent other users from modifying root policies. Which action must be taken to meet these requirements?
A. Modify the privilege level assigned to the user
B. Assign users to a specific Cisco UCS locale
C. Assign the user ג€Employee1ג€ the network-operator role
D. Define a custom user role and assign it to users
An engineer is running an ACI fabric, has VMM integration with VMware vCenter, and wants to enable microsegmentation based on vCenter VM attributes. Which statement describes microsegmentation in this scenario?
A. ACI does not support microsegmentation based on vCenter VM attributes. The network attributes should be used for microsegmentation.
B. When enabled, microsegmentation performs distributed switching and routing on the ESXi hosts.
C. Microsegmentation is supported only using AVE or AVS.
D. An ACI microsegmented EPG automatically creates a port group with a private VLAN configured on a VMware vCenter distributed virtual switch.
A network engineer configures a converged network adapter (CNA) and must associate a virtual Fibre Channel 7 interface to VSAN 7. The CNA is connected to the interface Eth1/7, and VLAN 700 is mapped to the VSAN. Which configuration must be applied to create the virtual Fibre Channel interface and associate it with the Ethernet physical interface?
A. switch(config)# interface vfc 7 switch(config-if)# bind interface ethernet 1/7
B. switch(config)# vlan 700 switch(config-vlan)# fcoe vsan 7
C. switch(config)# vsan database switch(config-vsan)# vsan 7 interface vfc 7
D. switch(config)# interface ethernet 1/7 switch(config-if)# vfc 7 attach vlan 1,700
Refer to the exhibit. An engineer must activate the port-security database on a Cisco MDS 9000 Series Switch for VSAN 100, but receives the error shown. Which command completes the configuration?
A. port-security config-enable vsan 100
B. port-security vsan 100 database active
C. port-security enabled mode vsan 100
D. port-security activate vsan 100 force
An online retailer uses 200 cloud-hosted virtual machines (VMs). Currently, the configuration of each VM is performed manually. To support the growth strategy of the retailer, the retailer starts to automatically scale the VMs to meet demand and uses Ansible for configuration management. Which action must be performed in Ansible to meet the requirements before automation is performed?
A. Register each VM in Ansible.
B. Add each VM to the .ini inventory file.
C. Set up and configure Ansible Tower.
D. Configure a dynamic inventory plug-in.
A network architect wants to propose a scalable network monitoring solution in which data is repeatedly acquired from network devices. The solution must use a push model and provide close to real-time access to operational data. Which technology must be used to meet these requirements?
A. CLI-based scripting
B. logging
C. SNMPv3
D. streaming telemetry
Which virtualization feature is provided by network-attached storage?
A. raw device passthrough
B. VM cluster shared ask
C. hypervisor host boot LUN
D. ALUA path redirection
DRAG DROP - A network engineer must configure FCoE on an interface of a Cisco MDS 9000 Series Switch. It should be used for mapping between VLAN 600 and VLAN 6. Drag and drop the commands from the bottom into their implementation order in the FCoE configuration. Not all commands are used. Select and Place:
Refer to the exhibit. A network engineer requires remote access via SSH to a Cisco MDS 9000 Series Switch. The solution must support secure access using the local user database when the RADIUS servers are unreachable from the switches. Which command meets these requirements?
A. aaa authentication none
B. aaa authentication login default group radius
C. aaa authentication login default fallback error local
D. aaa authentication login default group local
Due to a major version change, an engineer must perform a software upgrade on a Cisco Nexus Series switch. Which two technologies should be implemented to reduce disruptions to the network during the upgrade? (Choose two.)
A. vPC
B. HSRP
C. VDC
D. VRF
E. VTP
DRAG DROP - Drag and drop the keywords onto the URL request to collect all the subnets configured under tenant Production using a REST API. Not all options are used. Select and Place:
Refer to the exhibit. A source is sending a multicast traffic stream to the receiver. How is the multicast traffic expected to flow through the network when it reaches a vPC peer?
A. • The multicast traffic is not replicated to the ports that joined a multicast group (224.0.0.13) or the peer link.• The multicast traffic stream flows over the vPC link to ensure that orphan ports get the multicast stream in failure scenarios.
B. • The multicast traffic is replicated to the ports that joined a given multicast group and the peer link.• The multicast traffic stream flows from Agg-1 to Agg-2 over the M1-to-M2 peer link and forwards the traffic over Layer 4 to Access-2.
C. • The multicast traffic is replicated to the ports that joined a given multicast group and the peer link.• The multicast traffic stream flows over the peer link to ensure that orphan ports receive the multicast stream in failure scenarios.
D. • The multicast traffic is not replicated to the ports that joined a multicast group (224.0.0.13) or the peer link.• The multicast traffic stream flows from Agg-1 to Agg-2 over the M1-to-M2 peer link and forwards the traffic over Layer 4 to Access-2.
An engineer needs to connect Cisco UCS Fabric Interconnect (FI) to an external storage array. Due to budget limitations, the engineer must connect a Cisco UCS FI directly to an FC storage port. Which two actions must be taken to complete this connection? (Choose two.)
A. Create a storage connection policy.
B. Configure the fabric interconnect in end-host mode.
C. Create the required VSAN in the SAN cloud.
D. Set FC zoning to disabled when creating the VSAN.
E. Configure the fabric interconnect in FC switch mode.
An engineer must use the Embedded Event Manager to monitor events that occur on a Cisco Nexus 9000 Series Switch. An environment variable needs to be created so that several policies use the monitored events in their actions. The external email server is represented by IP address 10.10.10.10. Which command sets the environment variable?
A. n9k2# event manager environment mailserver “10.10.10.10”
B. n9k2(config)# event manager environment mailserver “10.10.10.10”
C. n9k2(config-applet)# environment mailserver “10.10.10.10”
D. n9k2(config)# event manager policy environment mailserver “10.10.10.10”
An engineer must perform a POAP deployment of a Cisco Nexus 9000 Series Switch. The switch must automatically receive its software image and configuration file upon power-on. Also, only UDP is permitted between the Nexus 9000 switch and the server that hosts the Cisco NX-OS system images. Which set of actions completes the configuration?
A. Enable option 35.Define HTTP transfer protocol.
B. Enable option 67.Define TFTP transfer protocol.
C. Enable option 43.Define HTTP transfer protocol.
D. Enable option 46.Define TFTP transfer protocol.
Which two statements describe modifying Cisco UCS user accounts? (Choose two.)
A. Disabling a user account maintains all of the data in the Cisco UCS Fabric Interconnect.
B. The admin account is used only to log on by using SSH.
C. The password of the user account must contain a minimum of 10 characters.
D. Local user accounts override the same account on a remote authentication server, such as TACACS, RADIUS, or LDAP.
E. The password of the user account expires in 30 days.
Which data structure results from running this Python code?
A. tuple
B. dictionary
C. set
D. list
Refer to the exhibit. VLAN 10 is experiencing delays and packet drops when the traffic is forwarded through the switch. The destination flow analyzer accepts traffic captures of not more than 30 seconds. Which configuration implements the traffic capture that meets the requirements? A.
B.
C.
D.
Refer to the exhibit.An engineer implements an FCoE Unified Fabric where vPC exists between N9K-A and N9K-B. To avoid rate discards, bandwidth must be regulated to account for sent traffic that exceeds the access speed. Which set of commands completes the configuration?
A. fcoe cost 255 on N9K-Arandom-detect min 10 max 20spanning-tree port type edge on Po10
B. fcoe cost 0 on N9K-Ashape min 0 gbps max 1 gbpsspanning-tree port type edge on Po1
C. fcoe fcf-priority 0 on N9K-Ahardware qos fc rate-shaper lowspanning-tree port type edge trunk on Po10
D. fcoe fcf-priority 255 on N9K-Apolice 50000spanning-tree port type edge trunk on Po1
Which configuration statically assigns VSAN membership to a virtual Fibre Channel interface?
A. switch(config-vsan-db)# vsan 100 interface vfc 31
B. switch(config-vsan-db)# vsan 100 fc 3/1
C. switch(config-vsan-db)# vsan 100 bind interface fc 3/1
D. switch(config-vsan-db)# vsan 100 bind interface vfc 31
Refer to the exhibit.A DevOps engineer must create a PowerShell script to display a list of tenants in the Cisco Application Centric Infrastructure (ACI) by using the Cisco ACI PowerShell module. The engineer does NOT know how many results will be returned, so it is important to iterate through all the results. Which code snippet completes the script?
A.
B.
C.
D.
Which two components are used by the Cisco Nexus switches telemetry process? (Choose two.)
A. telemetry agent
B. data encoding
C. data collection
D. telemetry compression
E. data manipulation
What is the benefit of adding Cisco HyperFlex Hardware Acceleration Cards to a HyperFlex deployment?
A. increased compression efficiency
B. increased network throughput
C. GPU acceleration
D. offline encryption acceleration
An engineer is implementing traffic monitoring for a server vNIC that is configured with fabric failover enabled. The requirement is for the traffic to be sent to an analyzer, even during a failure of one of the fabric interconnects. The analyzer is connected to unconfigured Ethernet ports on both fabric interconnects. Which configuration accomplishes this task?
A. Create two traffic monitoring sessions with different names, one per fabric. Connect an analyzer on each FI as the destination for the monitoring session local to the FI.
B. Create two traffic monitoring sessions with the same name, one per fabric. Connect the analyzer connected to FI-A as the destination for both monitoring sessions.
C. Create two traffic monitoring sessions with different names, one per fabric. Connect the analyzer connected to FI-B as the destination for both monitoring sessions.
D. Create two traffic monitoring sessions with the same name, one per fabric. Connect an analyzer on each FI as the destination for the monitoring session local to that FI.
A network architect must redesign a data center network based on OSPFv2. The network must perform fast reconvergence between directly connected switches. Which two actions must be taken to meet the requirements? (Choose two.)
A. Set low OSPF hello and DEAD timers.
B. Configure all links on AREA 0.
C. Enable BFD for failure detection.
D. Use OSPF point-to-point links only.
E. Implement a virtual link between the switches.
A customer reports Fibre Channel login requests to a Cisco MDS 9000 Series Switch from an unauthorized source. The customer requires a feature that will allow all devices already logged in and learned to be added to the Fibre Channel active database. Which two features must be enabled to accomplish this goal? (Choose two.)
A. auto-learning
B. smart aliases
C. port security
D. enhanced zoning
E. device aliases
A network engineer must prevent data corruption due to cross fabric communication in an FCoE environment. Which configuration must be applied to the Cisco Nexus Unified Switches to achieve this objective?
A. switch(config-if)# shutdown lan
B. switch(config-if)# no fcoe fcf-priority 0
C. switch(config)# fcoe fcmap 0e.fc.2a
D. switch(config)# no fcoe fcf-priority 255
The Cisco Nexus switch Generic Online Diagnostics policy for a PortLoopback test requires 10 consecutive failures to error disable the port. The customer wants to change it to 5 consecutive failures. Which configuration applies the changes for module 1 only?
A. Nexus(config)# event manager applet custom-PortLoopback override __PortLoopback Nexus(config-applet)# event gold mod all test PortLoopback testing-type bootup consecutive-failure 5 Nexus(config-applet)# action 1 publish-event
B. Nexus(config)# event manager applet custom-PortLoopback override __PortLoopback Nexus(config-applet)# event gold mod 1 test PortLoopback testing-type monitoring consecutive-failure 5 Nexus(config-applet)# action 1 publish-default
C. Nexus(config)# event manager applet custom-PortLoopback override __PortLoopback Nexus(config-applet)# event gold mod all test PortLoopback testing-type monitoring consecutive-failure 5 Nexus(config-applet)# action 1 policy-default
D. Nexus(config)# event manager applet custom-PortLoopback override __PortLoopback Nexus(config-applet)# event gold mod 1 test PortLoopback testing-type bootup consecutive-failure 5 Nexus(config-applet)# action 1 policy-event
A customer needs a tool to take advantage of the CI/CD model to streamline its operations and optimize cost. The customer wants to integrate the solution with the Cisco products it currently uses, including Cisco ACI networking and Cisco UCS Series servers. The solution should also provide on-premises Kubernetes and AppDynamics performance monitoring. Because of the security requirements, the solution should not install a local client on products under management. Which orchestration solution meets these requirements?
A. Cisco UCS Director
B. Cisco CloudCenter
C. Cisco APIC
D. Cisco DCNM
A network engineer needs a solution that simplifies the initial deployment of Cisco Nexus Series Switches. The solution must support these requirements: • zero-touch provisioning • configuration through DHCP options • initial configuration from a central TFTP server • no manual configuration management after the initial installation Which technology supports these goals?
A. Ansible
B. Cisco Intersight
C. Chef
D. POAP
Which Cisco UCS Manager XML encoded backup type must be used to back up user names, roles, and service profiles?
A. System Configuration
B. Full State Configuration
C. Logical Configuration
D. All Configuration
An engineer is performing a configuration on a Cisco Nexus 5000 Series Switch. The requirement is for the current Fibre Channel IDs in VSAN 120 to be saved across reboots. The Cisco environment also must integrate with a third-party solution that requires persistent Fibre Channel IDs for the VSAN. The WWN of the Cisco switch must be 33:e8:00:05:30:00:16:df and its Fibre Channel ID 0x070128. Which command set meets these requirements?
A. fcdomain fcid database vsan 120 wwn 33:e8:00:05:30:00:16:df fcid 0x070128 fcdomain fcid persistent vsan 120
B. fabric-binding database vsan 120 vsan 120 wwn 33:e8:00:05:30:00:16:df fcid 0x070128
C. vsan 120 wwn 33:e8:00:05:30:00:16:df fcid 0x070128 fabric-binding activate vsan 120 purge fcdomain fcid vsan 4
D. ysan 120 wwn 33:e8:00:05:30:00:16:df fcid 0x070128 fcdomain fcid preserve vsan 120
Refer to the exhibit. An engineer is configuring a VSAN on the network. Which option must be selected to create the VSAN?
A. Common/Global
B. Fabric B
C. FC Zoning Enabled
D. Fabric A
An engineer needs to install a new package on a Cisco Nexus 9000 Series Switch. What the impact of running the install commit command on the switch?
A. The switch is restarted after the upgrade is complete.
B. The previous package that was in use is deleted from bootflash.
C. The package is used after the switch is restarted.
D. The package is used in the running configuration.
An engineer is implementing VSAN 10 on multiple Cisco Nexus 5600 Series Switches and must ensure that the full zone set and active zone set are identical across the fabric. Which configuration must be implemented to meet this requirement?
A. switch(config)# zoneset distribute vsan 10
B. switch(config)# zone-attribute-group name ATTR1 vsan 10
C. switch(config)# zoneset distribute full vsan 10
D. switch(config)# zoneset activate name ZONE10 vsan 10
Which component is disrupted when the Cisco Integrated Management Controller is upgraded on a Cisco UCS Series Server?
A. SAN traffic
B. Cisco UCS Manager
C. KVM sessions
D. data traffic
Refer to the exhibit.A network engineer is setting up a multihomed OTV network. The first site has been set up with a primary and secondary adjacency server. Which configuration must be added on the remote OTV AEDs site? A.
B.
C.
D.
A SAN administrator receives reports about latency and response-time issues that impact various applications. The incidents have gradually increased in frequency and severity and have reached a critical state. Which DCNM configuration set identifies the source of the issues?
A. • Slow Drain Analysis• Duration Once/Run Immediately• Start/Stop Collection• Current Jobs/Result
B. • SAN Insights• Storage Enclosure• Select Host/Initiator-Target Pair
C. • Events• Time Now• Select MDS Switch• Advanced Filter/Source
D. • FC Flows• Interval 24 Hours• Export/Save
An engineer must configure a VDS port group using APIC policy. The requirements are for the frames to be mapped to a particular Layer 2 network and for the virtual machine assigned to the port group to receive all frames passed on the virtual switch. Which two settings must be used to meet these requirements? (Choose two.)
A. VLAN
B. forged transmits
C. port binding
D. promiscuous mode
E. VMDirectPath
An engineer must remove the running configuration of a Cisco Nexus 9000 Series Switch and replace it with a backup file without restarting the switch. The backup file is stored on an SFTP server that is reachable via the mgmt0 interface. Which set of commands accomplishes this task?
A. configure replace sftp://admin@192.168.10.100/backup.cfg vrf mgmt0 copy running-config bootflash://startup-config
B. copy sftp://admin@192.168.10.100/backup.cfg bootflash:///backup.cfg vrf management configure replace bootflash:///backup.cfg
C. copy sftp://admin@192.168.10.100/backup.cfg startup-config vrf mgmt0 copy startup-config running-config
D. copy sftp://admin@192.168.10.100/backup.cfg startup-config vrf management reload in 10
DRAG DROP - A network engineer must implement RBAC on Cisco MDS 9000 Series Multilayer Switches. Drag and drop the Cisco MDS 9000 Series roles from the left onto the categories they belong to on the right. Select and Place:
Which component is excluded by default from the host firmware package?
A. network interface controller
B. local disk
C. board controller
D. storage controller
A Cisco ACI engineer must configure an access port on a Cisco ACI leaf switch. The access policy should be configured so that it supports L3Out connectivity concurrently with several EPGs that are mapped to this interface with the static port method. How should the access policy be configured?
A. by linking the interface policy group to multiple Attachable Access Entity Profiles
B. with two interface policy groups that are linked to the same interface profile port selector
C. by mapping a single physical domain, mapped to the L3out and EPG interfaces
D. with a single Attachable Access Entity Profile that is linked to the corresponding routed domain and physical domain
What does WWPN uniquely identify in this Fibre Channel fabric?
A. interface
B. zone
C. area
D. switch
An engineer configures user authentication on Cisco UCS Manager to ensure that the user and roles can be saved on the external server and secured using authentication. Which set of actions meets these requirements?
A. Implement a logical configuration backup and configure the HTTPS protocol.
B. Configure a full state backup and implement an FTP protocol.
C. Perform a system configuration backup and use the SCP protocol.
D. Deploy an all configuration backup and implement a TFTP protocol.
Refer to the exhibit. What happens to the broadcast traffic when it reaches aggregation switches?
A. Agg-2 switch receives broadcast packets and stops forwarding to the peer link on Agg-1 switch.
B. Agg-1 switch prevents broadcast packets received on the vPC peer link from exiting the switch on ports Eth2/4 and Eth2/5.
C. Agg-1 and Agg-2 switches receive broadcast packets and does not forward them to the peer link or the port channel.
D. Only Agg-1 switch receives broadcast packets and does not forward to the peer link on Agg-2 switch.
An engineer must configure multiple EPGs on a single access port in a large Cisco ACI fabric without using VMM integration. The relevant access policies and tenant policies have been created. A single AAEP is used to configure the access ports in the fabric. Which two additional steps must be taken to complete the configuration? (Choose two.)
A. The EPGs must link directly to the corresponding AAEP
B. A contract must be defined between the EPGs
C. The EPGs must be configured as static ports
D. The corresponding bridge domains must be configured in legacy mode
E. The EPGs must be linked to the correct physical domain
Which behavior defines streaming telemetry as a push model in Cisco devices?
A. Events and network changes generate telemetry data
B. Monitoring clients are pulling data from the network to see real-time statistics
C. JSON encoded telemetry data is transported using the gRPC protocol
D. The network devices send data in JSON or GPB format to configure endpoints
Free Access Full 350-601 Practice Questions Free
Want more hands-on practice? Click here to access the full bank of 350-601 practice questions free and reinforce your understanding of all exam objectives.
We update our question sets regularly, so check back often for new and relevant content.
Good luck with your 350-601 certification journey!