350-601 Practice Test Free – 50 Questions to Test Your Knowledge
Are you preparing for the 350-601 certification exam? If so, taking a 350-601 practice test free is one of the best ways to assess your knowledge and improve your chances of passing. In this post, we provide 50 free 350-601 practice questions designed to help you test your skills and identify areas for improvement.
By taking a free 350-601 practice test, you can:
- Familiarize yourself with the exam format and question types
- Identify your strengths and weaknesses
- Gain confidence before the actual exam
50 Free 350-601 Practice Questions
Below, you will find 50 free 350-601 practice questions to help you prepare for the exam. These questions are designed to reflect the real exam structure and difficulty level.
Refer to the exhibit.
An engineer must restrict users assigned to the sangroup role on the Cisco MDS 9000 Series Switch from issuing commands on VSANs 15 to 20. Which command must the engineer run to achieve this objective?A. permit vsan 15-20
B. no vsan policy deny
C. vsan policy deny vsan 15-20
D. no permit vsan 15-20
An engineer must optimize ARP responses and reduce unnecessary ARP broadcasts over the VXLAN/EVPN fabric. Which action accomplishes these tasks?A. Configure ip proxy-arp within the VXLAN VNI configuration under the VTEP NVE interface.
B. Configure suppress-arp within the VXLAN VNI configuration under the VTEP NVE interface.
C. Configure ip proxy-arp under the VLAN SVI associated with the VXLAN VNI.
D. Configure suppress-arp under the VLAN SVI associated with the VXLAN VNI.
Refer to the exhibit.
An administrator connects a Cisco Nexus Series Switch to the Cisco ACI fabric. The connectivity must allow Cisco Discovery Protocol, LLDP, and LACP. Which action enables the protocols between Switch-1 and the ACI leaf switches?A. Implement an interface policy group.
B. Activate a leaf interface.
C. Enable an existing interface selector.
D. Configure an interface profile.
An online retailer uses 200 cloud-hosted virtual machines (VMs). Currently, the configuration of each VM is performed manually. To support the growth strategy of the retailer, the retailer starts to automatically scale the VMs to meet demand and uses Ansible for configuration management.
Which action must be performed in Ansible to meet the requirements before automation is performed?A. Register each VM in Ansible.
B. Add each VM to the .ini inventory file.
C. Set up and configure Ansible Tower.
D. Configure a dynamic inventory plug-in.
An engineer must deploy Cisco ACI in two data centers with a multisite configuration. The deployment must support a central management console for multiple data centers host multiple applications and support hardware and virtual clouds.
Which product must be used?A. Nexus Dashboard
B. Nexus Dashboard Insights
C. Nexus Dashboard Orchestrator
D. Nexus Dashboard Fabric Controller
Refer to the exhibit.
An engineer must implement an Application Performance Monitoring (APM) for the production servers on the Cisco Nexus 93180 Series Switch-based infrastructure in datacenter 1. The APM solution must meet these requirements:
• It must copy all inbound and outbound production traffic.
• It must support real-time telemetry.
Which configuration must be used on datacenter 1 switches to meet these objectives?A.
B.
C.
D.
Refer to the exhibit.
An engineer implements an FCoE Unified Fabric where vPC exists between N9K-A and N9K-B. To avoid rate discards, bandwidth must be regulated to account for sent traffic that exceeds the access speed.
Which set of commands completes the configuration?A. fcoe cost 255 on N9K-Arandom-detect min 10 max 20spanning-tree port type edge on Po10
B. fcoe cost 0 on N9K-Ashape min 0 gbps max 1 gbpsspanning-tree port type edge on Po1
C. fcoe fcf-priority 0 on N9K-Ahardware qos fc rate-shaper lowspanning-tree port type edge trunk on Po10
D. fcoe fcf-priority 255 on N9K-Apolice 50000spanning-tree port type edge trunk on Po1
DRAG DROP
-
Refer to the exhibit.
The server is sending traffic to the storage server using Fiber Channel protocol. The requirement is for the N5K-1 to forward traffic to MDS9k-1. Drag and drop the configuration steps from the right to complete the configuration for N5K-1 on the left. Not all configuration steps are used.
![]()
Refer to the exhibit.
A DevOps engineer must create a PowerShell script to display a list of tenants in the Cisco Application Centric Infrastructure (ACI) by using the Cisco ACI PowerShell module. The engineer does NOT know how many results will be returned, so it is important to iterate through all the results.
Which code snippet completes the script?A.
B.
C.
D.
DRAG DROP
-
Refer to the exhibit. Drag and drop FCoE port types from the right onto the corresponding positions on the left to complete the FCoE deployment. Port types can be used more than once. Not all port types are used.
![]()
Refer to the exhibit.
switch(config)# fcns proxy-port 21:00:00:b2:c5:71:32:a9 vsan 100
What is the result of this configuration?A. It creates a FLOGI database.
B. It adds an entry for the name server database.
C. It implements a mapping between the WWN and the VSAN.
D. It enables the registration of parameters for another node.
Which Cisco UCS component does an infra bundle "A" software upgrade?A. adapter
B. BIOS
C. board controller
D. I/O module
An engineer must remove the running configuration of a Cisco Nexus 9000 Series Switch and replace it with a backup file without restarting the switch. The backup file is stored on an SFTP server that is reachable via the mgmt0 interface.
Which set of commands accomplishes this task?A. configure replace sftp://admin@192.168.10.100/backup.cfg vrf mgmt0 copy running-config bootflash://startup-config
B. copy sftp://admin@192.168.10.100/backup.cfg bootflash:///backup.cfg vrf management configure replace bootflash:///backup.cfg
C. copy sftp://admin@192.168.10.100/backup.cfg startup-config vrf mgmt0 copy startup-config running-config
D. copy sftp://admin@192.168.10.100/backup.cfg startup-config vrf management reload in 10
Refer to the exhibit.
An engineer must create a script that downloads the POAP personality tarball file from an FTP server that is exposed in the SERVER environmental variable. The personality file to be downloaded is named with the hostname of the switch and the tar extension. The default method of downloading the file must be SCP.
Which code snippet completes the script?A.
B.
C.
D.
DRAG DROP
-
Refer to the exhibit.
Drag and drop the code snippets from the bottom onto the blanks in the code to complete the JSON request that implements the ACL presented. Not all code snippets are used.
![]()
An engineer must integrate Cisco ACI with VMware vCenter. The virtualization team configured the necessary port groups and assigned them to virtual machines through VMware vCenter. The final port group configuration must be protected from being changed by Cisco APIC.
Which action accomplishes these goals?A. Create the VMM domain with switch mode set to AVE.
B. Set the VMM domain access mode to Read Only Mode.
C. Configure the VMM domain with tag collection.
D. Activate CDP and LLDP in the VMM domain.
A company with a small network team purchases 10 Cisco Nexus 9000 Series Switches for a network refresh. Some elements of the existing network infrastructure will be retained including DHCP and DNS servers. The company wants the network team to use PowerOn Auto Provisioning (POAP) to configure the switches, but the team only has experience with manual configuration.
Which two additional network infrastructure components must be configured to use POAP? (Choose two.)A. NETBOOT host discovery
B. GIT server
C. SCP file repository
D. TFTP script server
E. SNMP trap receiver
Refer to the exhibit.
A software downgrade must be performed on a Cisco Nexus 9000 Series switch. What is displayed by running the command shown?A. features that are removed automatically from the switch
B. that the bootflash file is incompatible with the switch hardware
C. that the bootflash file is incompatible with the switch software
D. impact of an in-service software upgrade and chassis reload
Refer to the exhibit.
A network engineer must retrieve the network interface name from a JSON object. The engineer loads the JSON into a Python dictionary named json_object. Which code snippet completes the Python script?A. interface_name = json_object[“if-name”]
B. interface_name = json_object[0]
C. interface_name = json_object[“eth0”]
D. interface_name = json_object[0][2]
Refer to the exhibit.
Users report SAN traffic packet loss on a blade server that is managed by using Cisco UCS Manager. An engineer must implement a SPAN feature to an external Fibre Channel analyzer.
Which configuration source in the TEST monitoring session must the engineer select?A. all the VSANs from the server
B. all the uplink Fibre Channel ports
C. all the virtual host bus adapters from the server
D. all the storage ports
Refer to the exhibit.
An engineer must configure Embedded Event Manager to output a message to syslog when the Cisco IOS write memory CLI command runs. Which command completes the script?A. event cli pattern "write memory.*" sync yes
B. event cli match "write memory.*" sync yes
C. event cli regex "write memory.*" sync yes
D. event cli command "write memory.*" sync yes
Refer to the exhibit.
Three operational endpoints are deployed under the same application EPG. Only the ICMP traffic must be permitted within the Web_EPG. Which two actions must be taken to accomplish this goal? (Choose two.)A. Check box of forward control proxy ARP.
B. Set VRF policy control preference to unenforced.
C. Add Taboo contract on the Web_EPG.
D. Configure intra EPG contract under Web_EPG.
E. Mark intra EPG isolation as enforced.
Refer to the exhibit.
An engineer is implementing an ERSPAN configuration to mirror web server traffic connected to N7K-2. Which ERSPAN configuration must be applied on N7K-1 to forward traffic to the network analyzer?A.
B.
C.
D.
Which component is, by default, excluded from the host firmware package on a Cisco UCS B-Series Server?A. local SD card
B. local disk
C. storage controller
D. graphics processing unit
What does WWPN uniquely identify in this Fibre Channel fabric?
![]()
A. interface
B. zone
C. area
D. switch
Refer to the exhibit.
The network management system that is located at 192.168.10.10 and port 2000 must receive traps from the Cisco UCS Manager called UCSM. The community name is Cisco123! and the SNMP version must be the most secure.
These two commands have already been configured on Cisco UCSM.
UCS-A# scope monitoring -
UCS-A/monitoring # enable snmp -
Which command set completes the SNMP configuration?A.
B.
C.
D.
An engineer implements an environment with multiple traffic types on a consolidated I/O link between Cisco Nexus 9000 Series Switch and MDS 9000 Series Switch. The configuration must meet these requirements:
• The unified I/O link must support LAN and SAN traffic.
• A single, multipurpose Ethernet transport must be used.
• The configuration must discard MAC addresses that are not part of the current fabric.
• The QoS markings must be preserved.
Which configuration set meets the requirements?A. MDS-A(config)# interface fcip4 -MDS-A(config-if)# use-profile 8 -MDS-A(config-if)# peer-info ipaddr 200.200.100.7
B. N9K-2(config)# interface Eth2 -N9K-2(config-if)# switchport mode trunkN9K-2(config-if)# auto qos trust dscp
C. MDS-B(config)# interface fc3 -MDS-B(config-if)# switchport trunk mode onMDS-B(config-if)# switchport trunk allowed vsan 2-5
D. N9K-1(config)# fcoe fcmap 0e.fc.1dN9K-1(config)# int vfc 1 -N9K-1(config-if)# bind interface e1/3
Refer to the exhibit. A VXLAN data center fabric consists of three hosts mapped to different VLANs. Ingress VTEPs perform Layer 2 bridging and Layer 3 routing. Egress VTEPs only perform a Layer 2 bridging lookup. Which VNI values must be set to allow inter-VNI communication?A. VLAN 100 to Layer 2 VNI 2020 -Test_Telco_VRF to Layer 3 VNI 5050
B. VLAN 100 to Layer 2 VNI 2020 -VLAN 200 to Layer 2 VNI 5050
C. VLAN 100 to Layer 2 VNI 2020 -Test_Telco_VRF to Layer 3 VNI 1010
D. VLAN 100 to Layer 2 VNI 1010 -VLAN 200 to Layer 2 VNI 1010
Refer to the exhibit. A network engineer must configure the physical domain and attach a VLAN pool to it. Which two commands accomplish this goal? (Choose two.)A. attributes
B. PATCH
C. GET
D. POST
E. variables
An engineer must perform a configuration backup of an existing Cisco UCS Manager environment. The backup file must contain all vNIC, vHBA, and service profile template settings. Also, the engineer must validate the backup before import and requires an XML output format. Which backup type must be used to meet these requirements?A. full state
B. all configuration
C. logical configuration
D. system configuration
An engineer is implementing VSANs on a Cisco MDS 9000 Series Switch with a native Fibre Channel. The deployment must meet these requirements:
• The host on port fc1/1 must be assigned to VSAN 10.
• The port channel 10 ISL must pass multiple VSANs, including VSAN 10.
Which configuration set meets these requirements?A. Activate VSAN 10 in the vFC interface.Associate VSAN 10 to interface vfc 1/1.Enable vsan F-port-channel-trunk on the ISL.Set encapsulation EISL on the switch port.
B. Create VSAN 10 in the VSAN database.Bind VSAN 10 to interface fc1/1 in the VSAN database.Enable VSAN trunking on the ISL.Allow VSAN 10 on the ISL.
C. Configure VSAN 10 in the interface configuration.Attach VSAN 10 to the VSAN database.Enable VSAN trunking on fc1/1.Filter all VSAN on the ISL.
D. Disable VSAN 1 in the VSAN database.Assign VSAN 10 to the ISL.Enable VSAN trunking on the port channel members.Permit VSAN 10 in the FLOGI database.
Refer to the exhibit. An engineer is configuring Cisco Data Center Network Manager to automate the provisioning of Cisco Nexus 9000 Series Switches. The engineer must configure user access for network engineers to permit device operations in Interface Manager. The solution must hide Admin and Config Menu items in Interface Manager. Which two roles must be assigned to the network engineers to meet these requirements? (Choose two.)A. network-admin
B. global-admin
C. access-admin
D. network-operator
E. san-admin
DRAG DROP
-
An engineer must authenticate OSPF on interfaces of the Cisco Nexus 9000 Series Switch so that:
• eth1/1 uses clear text password.
• eth1/2 uses encrypted md5 password.
Drag and drop the commands from the bottom onto the boxes in the code to complete the configuration. Not all commands are used.
![]()
Refer to the exhibit. An engineer is performing a Cisco Nexus 3000 Series Switch configuration backup with a TFTP server that is reachable in the global routing table. Which action completes the scheduler configuration?A. Use the default VRF for the scheduler job.
B. Configure the scheduler authentication password.
C. Define the scheduler start time as required.
D. Make the size of the job output lower than the size of the log file.
An engineer must perform a backup and restore in Cisco UCS to rebuild the system in a disaster recovery scenario. The backup file must be encrypted to prevent the passwords from being stored as cleartext. Which backup configuration meets these requirements?A. Full state backup over TFTP
B. Logical configuration backup over SCP
C. System configuration backup over FTP
D. All configuration backup over SFTP
Refer to the exhibit. An engineer configures FCoE in a newly installed data center. Which configuration must be applied to activate VSAN 100 on VFC 100?A. Map an FCoE VLAN to VSAN 100.
B. Allow VSAN 100 on interface eth1/12.
C. Issue the shutdown lan command on VFC 100.
D. Configure a VLAN on VFC 100.
Refer to the exhibit. A Cisco MDS 9000 Series Switch is configured with RBAC. The default role applies to all users. User A is also assigned to the role Custom-Role-B. Which set of features will user A be authorized to configure?A. NTP -SSH -DPVM
B. SSH -DPVM -TACACS+NTP
C. DPVM -NTP -SSH -hardware
D. hardwareenvironmentTACACS+
An engineer is designing a cloud solution for an organization. The security requirements mandate that the cloud must be hosted in a local data center but leverage the remote data center for remote backups. Additionally, the workloads in the data center must be scaled out to a known cloud provider in the future. Which cloud deployment model must be used to meet these requirements?A. public cloud
B. hybrid cloud
C. private cloud
D. edge cloud
A network engineer needs a tool to automate the provisioning of Cisco UCS Service Profiles. The administrator has limited programming knowledge but is skilled with scripting tools. The tool must include existing support for Cisco UCS configuration. Additionally, the administrator will eventually use the solution to manage Cisco UCS C-Series Rack Servers.
Which tool meets these requirements?A. Bash scripts
B. Python scripts
C. Cisco DCNM
D. PowerShell
Refer to the exhibit. An engineer must configure FCoE with these requirements:
• VLAN 100 must be used to carry the Ethernet traffic.
• Fabric A must use FCoE on VLAN 11 and VSAN 11.
• Fabric B must use FCoE on VLAN 12 and VSAN 12.
• vfc 10 on Fabric A must be bound to Ethernet 1/1 on N5K_1.
• vfc 11 on Fabric B must be bound to Ethernet 1/1 on N5K_2.
Which interface vfc 10 configuration accomplishes these requirements?A.
B.
C.
D.
Refer to the exhibit. A network engineer must improve the convergence time during vPC primary peer device failure and recovery. Which set of actions is required on both vPC switches to accomplish this task?A. Configure the same system priority.Enable LACP toward the access switches.
B. Configure the same STP priority.Enable the peer-switch feature.
C. Configure vPC role priority.Enable the peer-gateway feature.
D. Configure port channels with BPDU guard.Globally enable the loop guard feature.
A customer deploys a media server to distribute streaming videos to network clients. The requirement is to allow the video feed to reach only requesting clients. The shared trees must not propagate the video feed if no clients from that tree request it. To reduce configuration touchpoints, the solution must support the automatic discovery and announcement of RP-set information. Each router in the network is responsible for selecting the RP. Which configuration set meets these requirements?A. router(config-if)# ip pim bidir-enablerouter(config)# ip pim ssm defaultrouter(config)# ip igmp version 3
B. router(config-if)# ip pim dense-moderouter(config)# ip pim rp-address 1.1.1.1router(config)# ip pim rp listener
C. router(config-if)# ip pim sparse-sense moderouter(config)# ip pim auto-rprouter(config)# ip pim send-rp-announce
D. router(config-if)# ip pim sparse moderouter(config)# ip pim bsr-candidate Lo0router(config)# ip pim rp-candidate Lo0
An engineer must configure port aggregation between two Cisco MDS 9000 Series Switches. The solution must meet these requirements:
• Suspend member interface if parameters mismatch.
• Load-balance traffic on multiple ports.
• Support traffic from multiple VSANs.
Which port channel configuration must be used?A. Port type: FT Port -Port channel mode: Active
B. Port type: F Port -Port channel mode: On
C. Port type: E Port -Port channel mode: Active
D. Port type: TE Port -Port channel mode: On
Refer to the exhibit. Two data center fabrics use VPC data center interconnect. The system MAC value on SW1 is 00:23:04:ee:be:20. Which value must be set to configure the system MAC address?A. 00:23:04:ee:be:14 on SW3
B. 00:23:04:ee:be:20 on SW3
C. 00:23:04:ee:be:14 on SW2
D. 46:43:32:e5:92:80 on SW2
Refer to the exhibit. A Cisco data center environment is implemented with vPC. The web server replies using the SVI MAC address as the Layer 2 header instead of the HSRP MAC address on VLAN 23. This behavior causes packet drops on the Cisco Nexus 9000 Series Switches due to the vPC loop prevention mechanism. The requirement is for the vPC feature to allow N9K_1 and N9K_2 to forward traffic between the NAS server and the web server, even if the HSRP’s MAC address is not used on Layer 2 headers for VLAN 23. Which feature must be used to accomplish this goal?A. ARP Sync
B. Object Tracking
C. L3 Peer Router
D. Peer Gateway
DRAG DROP
-
Refer to the exhibit. An engineer must provision a VXLAN deployment. The OSPF has already been configured as the underlay protocol. All BGP configurations will be performed using the template method. The deployment must meet these requirements:
• The local update source for leaf switches must be loopback1.
• The router ID must be the local loopback IP address.
• The external BGP connections must use a template name.
Drag and drop the configuration snippets from the bottom to complete the configuration.
![]()
The Cisco TACACS+ on a Cisco Nexus Series Switch must authenticate any user attempting to access the device and fail over to the local account if the TACACS+ sever becomes unavailable.
Which command accomplishes these goals?A. aaa authentication login default fallback error local
B. aaa authentication login console group local
C. aaa authentication login default local
D. aaa authentication login default group ISE local
An engineer must configure device aliases for a Cisco MDS 9000 Series Switches-based SAN fabric. The configuration must meet these requirements:
• The engineer must be prompted before the changes are committed to the database.
• Pending changes must be explicitly displayed on the console.
Which command accomplishes this task?A. device-alias enhanced
B. device-alias commit
C. device-alias confirm-commit
D. device-alias distribute diffs-only
A QoS policy on Cisco UCS must meet these requirements:
• No-drop class must be configured.
• Jumbo frames must be enabled without fragmentation.
Which configuration must be implemented to mast these conditions?A. Configure slow-drain timers and specify an MTU value of 9100 bytes.
B. Create a Flow Control Policy and specify an MTU value of 9000 bytes.
C. Create a QoS system class and specify an MTU value of 9216 bytes.
D. Configure Platinum system class and specify an MTU value of 9100 bytes.
Refer to the exhibit. An engineer configures an FCoE connection between a Cisco UCS and a Cisco Nexus 9000 Series Switch. The UCS FI-A connects to the Nexus switch using interface e1/12. All relevant configurations have been completed on the Nexus switch to support FCoE deployment. Which action must be taken on Cisco UCS Manager to complete the configuration?A. Trunk VLAN 500 on interface e1/12.
B. Create a Virtual Fibre Channel Interface.
C. Change the Transport Type to FCoE.
D. Configure an FCoE uplink interface.
Get More 350-601 Practice Questions
If you're looking for more 350-601 practice test free questions, click here to access the full 350-601 practice test.
We regularly update this page with new practice questions, so be sure to check back frequently.
Good luck with your 350-601 certification journey!