Free 350-601 practice test: 30 questions with answers

The distributed anycast gateway places the same gateway IP and MAC on every leaf, so first-hop routing is local and consistent. HSRP and VRRP elect a single active router rather than distributing the gateway, and host-side static routes do not provide a fabric-wide gateway.

VXLAN wraps Layer 2 frames in UDP, typically on port 4789, and its 24-bit VNI supports about 16 million segments. GRE is a different encapsulation, VXLAN does not depend on spanning tree between VTEPs, and the 12-bit limit belongs to classic VLANs.

BGP with the EVPN address family advertises MAC and IP routes between VTEPs, which replaces flood-and-learn behavior. Spanning tree, LACP and host-route OSPF do not provide EVPN reachability distribution.

A contract, consisting of subjects and filters, specifies which traffic is allowed between provider and consumer EPGs. Bridge domains and VRFs define forwarding boundaries, and access policies configure physical interfaces.

vPC lets a downstream device form a single port channel across two peer switches, which removes the loop-blocking effect of spanning tree on that link. HSRP provides gateway redundancy, root guard protects the spanning tree root, and port security limits MAC addresses.

UDLD detects unidirectional links and shuts the affected port so that loops do not form. BPDU filter suppresses spanning tree frames, storm control limits traffic volume, and loop guard addresses a different failure mode.

Cisco Intersight is the SaaS platform that manages UCS and other infrastructure through a unified API. UCS Manager runs inside each domain, DNA Center manages campus networks, and Nexus Dashboard manages Nexus fabrics.

A server profile carries identity and configuration, including boot policy and the virtual network and HBA interfaces. Switch firmware schedules, SNMP receivers and spanning tree priorities belong to switch configuration rather than the server profile.

A MAC address pool supplies unique MAC addresses to vNICs when profiles are associated. UUID pools supply server identifiers, WWN pools supply Fibre Channel names, and the KVM IP pool supplies management addresses.

The host firmware package sets the firmware versions that server components should run. Maintenance policies control when changes are applied, boot policies define boot order, and local disk policies configure storage.

The boot policy defines boot order and the SAN target and LUN used for boot. Local disk policy handles local storage, power policy controls power behavior, and scrub policy erases data.

A maintenance policy sets whether disruptive changes apply immediately or wait for user acknowledgment. Scrub policy erases disk contents, power policy handles power limits, and BIOS policy sets firmware-level options.

Single-initiator zones limit each zone to one host HBA and the storage ports it needs, which reduces disruption. Zoning is enforced by the fabric switches within each VSAN. It is not a host setting, NPIV still requires zoning, and zone names are free text.

An E port carries inter-switch links between Fibre Channel switches. F ports connect to end devices, N ports are end-device ports, and NP ports connect a switch in NPV mode to an upstream core.

NPIV lets one physical port register multiple World Wide Port Names, so each virtual machine gets its own FC identity. NPV is the switch-side mode that aggregates logins, FLOGI is the login process itself, and vPC applies to Ethernet port channels.

A VSAN creates independent Fibre Channel fabrics on shared switches, with their own services and zoning. VLANs and VRFs belong to Ethernet and IP segmentation, and a zoneset is a group of zones inside a VSAN.

Fibre Channel over Ethernet encapsulates FC frames in Ethernet so one link can carry both LAN and SAN traffic. iSCSI carries SCSI over TCP/IP, while NFS and SMB are file protocols.

Zoning is enforced by the fabric to limit which devices can communicate, and LUN masking on the array limits which hosts see which volumes. LUN masking is an array function, zoning does not control LUN visibility on the array, and the two work at different layers.

NX-API exposes NX-OS configuration and show commands over HTTP, and Ansible modules provide structured automation for Nexus devices. Manual console entry is not automation, and editing flash or using SNMP to dump files is unsupported and fragile.

Intersight uses API keys with signed HTTP requests, so each call proves possession of the private key without sending a password. Basic authentication and SNMPv1 community strings are not used by the Intersight API, and Kerberos is not its mechanism.

The intersight Python package is Cisco's official SDK for the Intersight API. ucsmsdk targets UCS Manager, pyeapi targets Arista EOS, and netmiko is a general SSH connection library.

Idempotent modules check the current state and change only what differs, and they report changes accurately. Skipping authentication is unsafe, modules still need connectivity, and reboots are not a default behavior of the modules.

PUT replaces the target resource with the representation sent in the request, and repeating it gives the same result. GET reads a resource, OPTIONS asks which methods are allowed, and TRACE echoes the request for diagnostics.

JSON and YAML are structured text formats used widely in REST payloads and Ansible variables. Bytecode, COBOL copybooks and Fortran namelists are not standard formats for these automation tasks.

show vpc displays the peer link, keepalive status and consistency of the vPC domain. Spanning tree, OSPF and port-channel summaries show other protocols or local port channels rather than the vPC domain state.

Emergency is severity 0 and is used when the system is unusable. Alert is for conditions needing immediate action without the system being fully unusable, Critical covers serious failures, and Error covers non-urgent errors.

A configuration checkpoint stores the running configuration by name, and it can be restored after a bad change. Port tracking follows link states, session manager stages changes, and terminal monitor displays log output.

The flogi database shows whether the device logged in, and port status with VSAN membership and mode reveal misconfiguration. Rebooting the array, disabling zoning and deleting the VSAN are disruptive and do not isolate the cause.

SPAN copies traffic from a source port or VLAN to a destination port where an analyzer is attached. Storm control limits traffic volume, LACP negotiates port channels, and port tracking follows link state.

The running configuration diff shows what changed compared with the saved configuration, and recent logs show whether the change produced errors. Reload, clearing counters and erasing startup configuration are disruptive and do not verify a change.