The Best Cisco 350-601 Study Guides and Dumps of 2025 [Q212-Q234]

The Best Cisco 350-601 Study Guides and Dumps of 2025

Top Cisco 350-601 Exam Audio Study Guide! Practice Questions Edition

NEW QUESTION # 212
Refer to the exhibit.

What is the result of implementing this configuration?

A. The switch queries the TACACS+ server by using an encrypted text PAP login.
B. The switch queries the TACACS+ server by using a clear text PAP login.
C. The timeout value on the TACACS+ server is 10 seconds.
D. The TACACS+ server uses the type-6 encrypted format.

Answer: A

NEW QUESTION # 213
What is a feature of NFS?

A. zone-based access control
B. block-based file access
C. Kerberos-based security model
D. role-based access control

Answer: C

Explanation:
Section: Security

NEW QUESTION # 214
An engineer must design an automation solution for the Cisco ACI Fabric to speed up the deployment of logical network elements for tenant provisioning. When creating a solution, the engineer must keep in mind that the tool must support these requirements:
* Allow the rapid creation and removal of logical containers.
* Support the creation of custom modules and data structures.
* Be extensible with external libraries and modules.
* Allow rapid testing of code using an on-demand execution
environment.
Which automation tool meets these requirements?

A. YAML
B. SaltStack
C. Python
D. Chef

Answer: D

NEW QUESTION # 215
Refer to the exhibit.

An engineer needs to implement a monitoring session that should meet the following requirements:
* Monitor traffic from leaf to leaf switches on a Cisco ACI network
* Support filtering traffic from Bridge Domain or VRF
Which configuration must be added to meet these requirements?

A. interface eth 1/2 leaf 101
B. application epg epg1 app1
C. interface eth 1/2 switch 101
D. filter tenant t1 application app1 epg epg1

Answer: D

Explanation:
To monitor traffic between leaf switches in a Cisco ACI network and support filtering traffic from a Bridge Domain or VRF, the configuration must allow for specifying the traffic of interest based on tenant, application, and EPG. Option C, filter tenant t1 application app1 epg epg1, meets these requirements by defining a filter that targets traffic from a specific EPG within an application profile in the tenant 't1'. This filter can be applied to the monitoring session to capture the relevant traffic.
References := For detailed procedures on implementing monitoring sessions in Cisco ACI, refer to the Cisco Data Center Core Technologies documentation, particularly sections covering ACI traffic monitoring and filtering.

NEW QUESTION # 216
When the default firmware package is set a new version, which type of policy determines the timing of server reboots during the firmware upgrade?

A. maintenance
B. local disk
C. BIOS
D. diagnostics

Answer: A

NEW QUESTION # 217
An engineer performs a Firmware Auto Install upgrade through the Cisco UCS Manager.
Which two Cisco UCS components are upgraded in the Install Server Firmware stage? (Choose two)

A. Cisco UCS C-Series Rack-Mount Server
B. Cisco UCS Manager
C. I/O Modules
D. Cisco UCS B-Series Blade Server
E. Fabric Interconnects

Answer: A,D

Explanation:
Firmware Upgrades through Auto Install
Auto Install enables you to upgrade a Cisco UCS domain to the firmware versions contained in a single package in the following two stages:
Install Infrastructure Firmware-Uses the Cisco UCS Infrastructure Software Bundle to upgrade the infrastructure components, such as the fabric interconnects, the I/O modules, and Cisco UCS Manager.
Install Server Firmware-Uses the Cisco UCS B-Series Blade Server Software Bundle to upgrade all blade servers in the Cisco UCS domain and/or the Cisco UCS C-Series Rack-Mount UCS-Managed Server Software Bundle to upgrade all rack servers.

NEW QUESTION # 218
An engineer configures an intersignt virtual application and must claim over 200 targets. The engineer starts the Claim target procedure. The engineer has prepared this initial comma- separated value file to provision the targets:

Which Information must be included In the comma-separated value flit to provision the targets?

A. location, address, name. password
B. target type, hostname or P address, user name, password
C. FQON, AD name, IP address, email
D. certificate, user name, password. email

Answer: C

NEW QUESTION # 219
Refer to the exhibit.

Which setting must be configured to prevent reuse of passwords?

A. History Count
B. No Change Interval
C. Change Interval
D. Change Count

Answer: A

Explanation:
The History Count setting in a user management system is used to prevent the reuse of old passwords. It specifies the number of unique new passwords that must be used before an old password can be reused. This helps enhance security by ensuring that passwords are not easily guessable and that users are not cycling through a small set of favorite passwords.

NEW QUESTION # 220
An engineer is configuring VNTag between a virtualized server and a Cisco Nexus 5500 Series switch. Drag and drop the configuration steps from the into the correct order on the right.

Answer:

Explanation:

Explanation:
install the virtualization feature set
Enable the virtualization feature set
Configure the port profile
Configure support for VNTag mode on the interface that connects to the server.
Configure the server to support NIV mode
Configure the vNICs of the server
https://www.cisco.com/c/en/us/support/docs/switches/nexus-5000-series-switches/117691-config-
5500switch-00.html
https://www.cisco.com/c/en/us/td/docs/switches/datacenter/nexus5500/sw/adapter-fex/6x/ b_5500_Adapter_FEX_Config_6x/ b_5500_Adapter_FEX_Config_602N11_chapter_010.html

NEW QUESTION # 221
Which product includes prebuilt templates that can be used to customize fabric deployments?

A. Cisco Data Center Network Manager
B. Cisco UCS Manager
C. Cisco Tetration
D. Cisco ACI

Answer: A

Explanation:
Section: Storage Network

NEW QUESTION # 222
Refer to the exhibit. What is the result of implementing the configuration?

A. Users specify the RADIUS server when they log in.
B. RADIUS traffic is sourced from the VLAN 200 interface.
C. Only the RADIUS server is used for authentication.
D. The RADIUS server timeout value is 15 milliseconds.

Answer: C

Explanation:
https://www.cisco.com/c/en/us/support/docs/security-vpn/terminal-access-controller-access- control-system-tacacs-/200606-aaa-authentication-login- default-local.html

NEW QUESTION # 223
Cisco Nexus 9000 Series Switches are configured with LACP protocol and default aging timers. What is the impact on the LACP peer during an ISSU upgrade?

A. The LACP peer renegotiates the adjacency.
B. The LACP peer connection terminates.
C. The LACP peer connection resets.
D. The LACP peer session remains up.

Answer: D

Explanation:
During an In-Service Software Upgrade (ISSU) on Cisco Nexus 9000 Series Switches, the LACP peer session is designed to remain up without any renegotiation or reset. This is because ISSU is a process that allows for software upgrades without disrupting the normal operation of the network. The default LACP timers and the ISSU process are designed to work together to maintain the session state even during the upgrade process. The Nexus upgrade process will force the chassis itself to upgrade disruptively if LACP fast is used, which is not the default setting. A disruptive upgrade means the chassis itself will fully reload, impacting all ports on the switch, not just the LACP fast ones. However, with the default aging timers, the LACP peer connection should not be affected1.
References:
* Cisco Nexus 9000 Series NX-OS Software Upgrade and Downgrade Guide2.
* Cisco Community discussions on LACP and ISSU impact

NEW QUESTION # 224
An engineer is converting a Cisco MDS switch to support NPIV mode. What should be considered when implementing the solution?

A. It must be enabled on VSAN 1 only.
B. It requires the FLOGI database to be disabled.
C. It requires mapping of external interface traffic.
D. It must be enabled globally on all VSANs.

Answer: D

Explanation:
Explanation
https://www.cisco.com/c/en/us/td/docs/switches/datacenter/mds9000/sw/5_0/configuration/guides/int/nxos/cli_in

NEW QUESTION # 225
A POAP-enabled Cisco Nexus switch will not enter POAP mode. Which two conditions should be verified?
(Choose two.)

A. The switch is in bootup process.
B. No Cisco NX-OS image is present on the bootflash.
C. No startup configuration is available.
D. The license file is missing on the switch.
E. Bootflash must contain a special directory named POAP with poap.py file.

Answer: D,E

NEW QUESTION # 226
Which statement describes monitoring Fibre Channel traffic on a Cisco UCS 6332 Fabric Interconnect?

A. The destination port for monitoring must be an unassigned Fibre Channel port.
B. Fibre Channel traffic is capable to be monitored as it is encapsulated as FCoE.
C. The monitoring of Fibre Channel traffic is limited to the default VSAN.
D. Fibre Channel traffic is monitored only on one vHBA per server.

Answer: B

Explanation:
Explanation
You can monitor Fibre Channel traffic using either a Fibre Channel traffic analyzer or an Ethernet traffic analyzer. When Fibre Channel traffic is monitored with an Ethernet traffic monitoring session, at an Ethernet destination port, the destination traffic is FCoE. The Cisco UCS 6300 Fabric Interconnect supports FC SPAN only on the ingress side. A Fibre Channel port on a Cisco UCS 6248 Fabric Interconnect cannot be configured as a source port.
https://www.cisco.com/c/en/us/td/docs/unified_computing/ucs/ucs-manager/GUI-User-Guides/System- Monitoring/3-2/b_UCSM_GUI_System_Monitoring_Guide_3_2/ b_UCSM_GUI_System_Monitoring_Guide_3_2_chapter_01101.pdf

NEW QUESTION # 227
Drag and Drop Question
An engineer must shut down the Ethernet 1/2 interface when the Ethernet 4/5 interface state is down. Drag and drop the CLI commands from the bottom onto the blanks in the exhibit to implement this EEM. Not all commands are used.

Answer:

Explanation:

NEW QUESTION # 228
An engineer must implement a Cisco UCS system at a customer site. One of the requirements is to implement SAN boot. The storage system maps the source WWPN to a unique LUN. Which method does Cisco recommend to configure the SAN boot?

A. Create a SAN boot policy in which every initiator is mapped to a different target LUN.
B. Define the vHBAs as bootable and leave the default values on the target definition.
C. Create a SAN boot policy in which every initiator is mapped to the same target LUN.
D. Define the vHBAs as bootable and leave the boot target definition empty.

Answer: C

Explanation:
Explanation
While you have multiple zones consisting of FC vHBAs and storage target wwpns for SAN Fabrics A and B, you are ultimately booting off of the same boot LUN. Multiple paths to get to the same boot device which correspond with the same LUN ID.
https://www.cisco.com/c/en/us/td/docs/unified_computing/ucs/ts/guide/UCSTroubleshooting/ UCSTroubleshooting_chapter_0110.html#r_sanarrayconfigurationchecklist

NEW QUESTION # 229
Refer to the exhibit. What is the result of this series of commands?

A. It updates the firmware on adapter 1/1/1 immediately.
B. It reboots the server immediately.
C. It activates the firmware on the next adapter boot.
D. It verifies the firmware update on the server.

Answer: C

Explanation:
Use the set-startup-only keyword if you want to reboot the I/O module only when the fabric interconnect in its data path reboots. If you do not use the set-startup- only keyword, the I/O module reboots and disrupts traffic. In addition, if Cisco UCS Manager detects a protocol and firmware version mismatch between it and the I/O module, it updates the I/O module with the firmware version that matches its own and then activates the firmware and reboots the I/O module again.
https://www.cisco.com/c/en/us/td/docs/unified_computing/ucs/ucs- manager/CLI-User- Guides/Firmware-Mgmt/4-
0/b_UCSM_CLI_Firmware_Management_Guide_4-
0/b_UCSM_CLI_Firmware_Management_Guide_4-0_chapter_011.html

NEW QUESTION # 230
An engineer must create a backup file of the entire Cisco UCS system before the maintenance window starts. The backup file must include these attributes:
* all logical configuration settings such as service profiles. VLANs. and VSANs
* all Cisco UCS usernames. roles, and locales
* all Cisco UCS system settings
Which backup type must be selected to achieve this goal?

A. System Configuration
B. Full State
C. All Configuration
D. Logical Configuration

Answer: B

NEW QUESTION # 231

Refer to the exhibit. Which action is taken to ensure that the relay agent forwards the DHCP BOOTREQUEST packet to a DHCP server?

A. Configure the IP address of the DHCP server.
B. Enable the DHCP relay agent.
C. Verify the DHCP snooping bindings.
D. Configure the interface of the DHCP server as untrusted.

Answer: C

Explanation:
Section: Security
Explanation/Reference:
Reference:
https://www.cisco.com/en/US/docs/ios/12_4t/ip_addr/configuration/guide/htdhcpre.html

NEW QUESTION # 232
A storage engineer must configure zoning on a Cisco MDS 9000 Series switch. Drag and drop actions from the left into the order on right

Answer:

Explanation:

Explanation:
Graphical user interface, table Description automatically generated with medium confidence

https://www.cisco.com/c/en/us/td/docs/switches/datacenter/mds9000/sw/6_2/ configuration/guides/fabric/nx-os/nx_os_fabric/zone.html