Free Practice Questions for the Cisco CCNP Data Center 350-601 Exam (2026 Updated)
At Marks4sure, we are dedicated to providing IT professionals with the most accurate and reliable preparation materials for the Cisco 350-601 exam. To support your certification journey, we have made a selection of our premium 2026 CCNP Data Center practice questions and answers available completely free. You can take this practice test as many times as you need. Every question includes a detailed, expertly verified explanation to ensure you fully grasp the core security concepts before test day.
A server engineer must create a backup operation that will be used for the entire restore of the Cisco UCS system using a binary that includes a snapshot of the entre system. Which Backup type must be configured to achieve the objective?
What is the impact of an electronic programmable logic device upgrade on a Cisco MDS 9000 Series Director Switch with dual supervisors?
350-601 Report Card
What is the impact of a nondisruptive update on a Cisco MOS 9000 Series Modular Switch?
Refer to the exhibit.
An engineer must monitor all LAN traffic on Fabric A from a blade server. Which source should be configured in the test-span monitor session to com- plete this task?
Refer to the exhibit.
A developer must create a Bash script that performs a Chef Client reload following a system reset. Which command completes the script?
An engineer must integrate Cisco ACI with VMware vCenter The visualization team configured the necessary port groups and assigned them to virtual machines through VMware vCenter The final port group configuration must be protected from being changed by Cisco APIC Which action accomplishes these goals ' ?
An engineer must create an EPG called " Test* The configuration request should succeed it the Tenant called " Tenant " and the application profile called " Test " exist The firewall policy allows only the HTTP connectivity lo APIC from the user ' s computer. Which action accomplishes this goal?
A new employee must be granted access to add VLANs into an existing Cisco UCS Manager and configure NTP synchronization with date and time zone settings. Which two privileges must be granted to the employee to complete the task? (Choose two.)
Which cloud deployment model uses two or more private or public clouds for a single organization using a technology to connect the two clouds together?
Refer to the exhibit. An engineer must configure NetFlow on the Cisco Nexus 5600 Series Switch for all traffic that arrives from the web server. Drag and drop the configuration steps from the right onto the blanks in the code on the left to complete the N5K-1 configuration. Not all configuration steps are used.
A company provides applications and database hosting services to multiple customers using isolated infrastructure-as-a-service services within the same data center environment. The environment is based on Cisco MDS 9000 Series Switches. The requirement is to manage the environment by using Fibre Channel Security Protocol and to enable user authentication when the centralized AAA server is unreachable. All communication between the MDS switches and the remote servers must be encrypted. Which command set must be used to meet these requirements?
An engineer must configure the RBAC role to perform these tasks In the Cisco UCS Manager:
Configure VLANs and VLAN groups.
Configure Ethernet Link Profile and LACP policy.
Specify the allowed range for virtual MAC addresses.
Configure SPAN Ethernet monitoring sessions.
Which set of permissions must be used to create a user role that accomplishes these roles?
Refer to the exhibit. An engineer must configure infrastructure monitoring in a Cisco UCS domain to monitor traffic on the Cisco fabric interconnect A and Cisco fabric interconnect B port links connected to Cisco MDS switches SW1 and SW2. The monitored traffic must be sent to Cisco Intersight at 20 Gbps for further analysis. Which command must be run on a UCS device after the create eth-mon-eession EthMonitor1/0 command is run?
An engineer must configure a new Cisco UCS B-Series infrastructure with a Cisco 5108 chassis. The configuration must meet these requirements:
• The setup must use aggregation between Cisco UCS Fabric Interconnects and IO modules.
• The implementation requires four 10 GbE connections per I/O module.
• The Cisco UCS Fabric Interconnects must support uplinks of different speeds for future expansion.
Which two steps must be taken to meet these requirements? (Choose two.)
A DevOps engineer must design a solution for a Cisco Unified Fabric solution to provision, monitor, and troubleshoot the network infrastructure for a data center based on Cisco Nexus
Series Switches. The solution must provide visibility and control of the unified data center. Which solution meets these requirements?
A QoS policy on Cisco UCS must meet mese requirements:
No-drop class must be configured
Jumbo frames must be enabled without fragmentation.
Which configuration must be implemented to meet mese conditions?
Drag and drop each traffic flow type from the left onto the corresponding num- ber on the right Not all traffic flow types are used
Refer to the exhibit. VSAN 2077 has been configured as the primary path. Which configuration must be implemented to allow the Cisco UCS system to enable zoning while the device neighbor allows communication using port FC1/24 to the servers?
Refer to the exhibit. Which value must be added to the LDAP provider to complete the LDAP group map configuration in Cisco UCS Manager?
What is the impact of upgrading the firmware version of the Cisco MDS 9200i Series Switch?
Refer to the exhibit. A network engineer must configure an authentication solution for Cisco UCS with these conditions:
Two-factor authentication must be enabled for all UCS user authentication.
All AAA packets must be encrypted and use TCP port 49 to establish communication.
Which set of actions needs these requirements?
An engineer updated firmware on Fabric Interconnects and activates it However, the endpoint falls to boot from the new firmware image. What is expected to occur in this case?
Refer to the exhibit. A network engineer must implement VXLAN between two core switches called CORE_2 and CORE_3. The core switches must have multicast disabled. In addition, the VLAN 100 called APP and VLAN 200 called DB must be extended between the core switches. The initial VXLAN configuration has been completed on CORE_2. Which Network Virtual Interface configuration completes VXLAN configura
A)
B)
C)
D)
An engineer is configuring AAA authentication on an MDS 9000 switch. The LDAP server is located under the IP 10.10.2.2. The data sent to the LDAP server should be encrypted. Which command should be used to meet these requirements?
Refer to the exhibit An engineer must resolve a connectivity issue on a Cisco 9000 Senes Switch that was configured by using Ansible The switch must be configured to meet these requirements •Interface G*gabitethemet0/1 must be a member of VLAN 10 in access mode •Interface G*gabetethernet0/2 must allow VLANs 10 and 20 in trunk mode, with native VLAN 20
Which set of actions must be taken to meet these criteria?
Refer to the exhibit. User1 and User2 are connected to VTEP1 switch. The users can reach the WEB server. The monitoring tool shows degrading network performance and excessive traffic is sent from User2 to reach the WEB server. Which storm control percentage levels must be used to suppress traffic from User2 and allow all traffic types from User1?
Refer to the exhibit.
Two Cisco Nexus 9000 Series Switches are connected using interfaces Ethernet 1/1. Which CLI must be configured to configure the switches as EIGKP neighbors ' '
A)
B)
C)
D)
Refer to the exhibit. An engineer must configure a new user name called user 1 in a UCS domain hosting multiple sub-organizations The security policy mandates that the role of admin cannot be used The user name must have these permissions:
Which configuration must be used for user 1 to have these permissions?
Refer to the exhibit.
A user must be granted management access to a Cisco Nexus 9000 Series Switch through two RADIUS server groups. RADIUS server 1 must authenticate console logins, and RADIUS server 2 must authenticate SSH logins. Both servers accept requests only from the Layer 2 subnet connected to the switch. Which two actions meet these requirements? (Choose two.)
Which Cisco UCS Manager XML encoded backup type must be used to back up user names, roles, and service profiles?
Which configuration must be used to boot a Cisco UCS C-Series Server using iSCSI?
Which Feature differentiates Intersight Managed Mode from UCSM Managed Mode when configuring and managing a Cisco UCS-X Series Modular System?
An engineer must create a scheduler configuration to create two backup jobs per day. The backup file must be copied to a server in the operations VRF. Which configuration accomplishes this task?
A network engineer plans to upgrade the firmware of a Cisco UCS B-Series chassis by using the Auto Install feature. Which component is upgraded during the infrastructure firmware upgrade stage?
Refer to the exhibit A network engineer plans to upgrade the current software images of a Cisco Nexus switch What is the impact of starling the EPLD upgrade?
Refer to the exhibit. The list of RPM packages was installed in a Bash shell of a Cisco Nexus 9000 Series Switch. Which action must be used to install and enable a BGP feature on the switch?
What is a characteristic of a cloud-computing model according to NIST Special Publication 800-145?
Which protocol supports mounting shared folders and access to storage at the file level?
A service profile in Cisco UCS Manager must be configured with these requirements:
Cisco UCS Manager must identify the interfaces on the VMware ESXi host that connect to the Cisco ACI fabric switches.
The vNIC must support traffic management when congestion occurs.
Which two policies meet these requirements? (Choose two.)
An engineer must configure a Fibre Channel port channel on a Cisco Nexus 9000 Series Switch. The configuration must meet these requirements:
A port-channel protocol negotiation is performed with the peer ports.
The trunk mode must be explicitly configured for the interfaces.
VSANs from 10 to 20 must be allowed.
Which command set configures the devices to meet the requirements?
Refer to the exhibits An engineer must implement a SPAN session that sends a copy of all VLAN 11 traffic on N5K_1 to the Traffic Capturing Device The configuration that is presented is already applied to the Cisco UCS Manager. Which additional action meets the objective?
Which protocol does Cisco Hyperflex use to share data among nodes in a VMware vSphere environment?
A Cisco UCS user called " Employee1 " accidentally changed the boot policy of the Cisco UCS server at the Cisco UCS Manager root level. This change impacted all service profiles and their storage connectivity was lost. The system administrator wants to prevent this issue from recurring in the future. The new security policy mandates that access must be restricted up to the organization level and prevent other users from modifying root policies. Which action must be taken to meet these requirements?
Refer to the exhibit.
An engineer must enable interlace Eth1/2 when the interface Ethi/1 is shut down using EEM on a Cisco Nexus 9000 Series Switch. Which command set accomplishes this goal?
An engineer needs to connect Cisco UCS Manager to an external storage array. Due to budget limitations, the engineer must connect a Cisco UCS manager directly to an FC storage port. Which two actions must be taken to complete this connection? (Choose two)
An engineer is implementing the Cisco ACI fabric and must create two different vPCs from leaf switches A and B. The vPCs are deployed as follows:
vPC 1 encompasses ports Eth 1 /1 on leaf A and B and connects to server 1.
vPC 2 encompasses port Eth1/2 on leaf A and B and connects to server 2.
A leaf switch profile listing leaves A and B is already configured Which ACI object must be created to meet these requirements?
An engineer implements an ACI fabric and must implement microsegmentation of endpoints within the same IP subnet using a network-based attribute. The attribute mapping must allow IP subnet independence. Which attribute must be selected?
Refer to the exhibit. An engineer must configure SPAN to monitor the traffic sent to the server. The copied traffic must be sent to the network analyzer. Which configuration on N9K1 accomplishes these goals?
A Cisco ACI fabric is created with a single L30ul with R1 and R2 The requirement is to prevent all received subnets from R1 and R2 from communicating. Which configuration accomplishes this goal?
Drag and drop the steps on the left onto the order that they must be implemented on the right to recover a fabric interconnect when there is no working image on the bootflash.
An engineer must implement a disaster recovery policy for the Cisco UCS infrastructure. The solution must meet these criteria
The Recovery Point Objective must be 48 hours
The backup must use encrypted transmission
The Recovery Time Objective must be 4 hours
Which configuration set must be used in the scheduled backup to meet these requirements?
An engineer must authenticate OSPF on interfaces of me Cisco Nexus 9000 Senes Switch so mat
eth1/1 uses clear text password
etht ' 2 uses encrypted md5 password
Drag and drop the commands from the bottom onto the boxes in the code to complete me configuration Not all commands are used.
A network administrator attempts to automate the provisioning of several new Cisco Nexus switches. The administrator prepares a bootstrap configuration script for the task Due to the number of switches a zero-touch provisioning solution is preferred Additionally, some switches arrive with outdated software and should be automatically upgraded as part of the provisioning workflow Which solution meets the requirements?
Several production and development database servers exist in the same EPG and IP subnet. The IT security policy is to prevent connections between production and development. Which attribute must be used to assign me servers to different microsegments?
Which component is disrupted when the Cisco Integrated Management Controller is upgraded on a Cisco UCS C-Series Server?
Refer to the exhibit. An engineer must configure a QoS policy that controls only vHBA traffic. Which policy must be used to meet this requirement?
What is the primary purpose of a UCS Domain Profile in Intersight Managed Mode?
Refer to the exhibit.
A network engineer must configure port E1/31- 32 to forward only storage server traffic of VLAN 200 on Cisco fabric interconnects A and B. Port E1/31- 32 is not reserved for any other traffic. Which port type must be configured to accomplish this goal?
Which feature of Cisco Nexus Dashboard permits users to switch between site controllers of Cisco ACI?
company is running a pair of cisco Nexus 7706 series switches as part of a data center segment. All network engineers have restricted read-Write access to the core switches. A network engineer must a new FCoE VLAN to allow traffic from services toward FCoE storage. Which set of actions must be taken to meet these requirements?
In a Cisco SAN fabric, UCS fabric interconnects and blades are all monitored by Cisco DCNM. The requirement is for the Cisco UCS manager to be monitored by Cisco DCNM. Which two
configuration steps accomplish this goal? (Choose two.)
Refer to the exhibit Which port type must be used to complete the configuration of a monitoring session that sends traffic to a monitoring device ' ?
An engineer musí create a new Cisco UCS user account to perform these actions:
Modify systems logs, faults, and power management settings
View access to all other configuration in the UCS domain.
Which two roles must be assigned to the user to permit these actions? (Choose two.)
Drag and drop the Cisco Nexus 9000 Series Switch software update processes from the left onto the corresponding characteristics on the right.
Which action does Cisco UCS Manager perform during the firmware Auto-Install process?
Which configuration statically assigns VSAN membership to a virtual Fibre Channel interface?
Refer to the exhibit.
An engineer must connect a Cisco MDS Series Switch to a Cisco UCS domain using a port channel, but the link fails to activate. Which command activates the interface?
An engineer musí perform an initial configuration of VXLAN and MP-BGP EVPN on the Cisco Nexus 9000 Series platform. The underlay must be OSPF. and the VTEP must run with distributed default gateway on a VLAN interface. Which command set must be applied to meet these requirements?
Refer to the exhibit. Software downgrade is required on a Cisco Nexus 7000 Series Switch. What is displayed when this command is executed?
An engineer requires Cisco Fabric Services to distribute the NTP configuration only to members within the scope of a VSAN belonging to a Cisco unified network. Which distribution scope must be selected?
A customer asks an engineer to develop an orchestration solution to automate repetitive tasks. The customer operations team must integrate the tool with its existing automation framework. The customer asks for the tool to support these requirements:
• The customer ' s security requirements mandate the use of SSH transport.
• No extra software must be installed on the managed systems.
• The support staff has limited knowledge of scripting languages, so the solution must be easy to read and use declarative language.
Which solution meets these requirements?
Refer to the exhibit. An engineer configures FCoE in a newly installed data center Which configuration must be applied to activate VSAN 100 on VFC 100?
Which two actions are needed to configure a single Cisco APIC controller for a Cisco ACI fabric for the first time? (Choose two.)
A network engineer deploys a cloud service for a customer The customer wants complete control over the underlying operating system data and application Which cloud service model must be used to accomplish this goal?
An engineer must assign a device alias of Marketing to a Fibre Channel port that has a world wide name of 21:00:00:00:11:11:22:22 on a Cisco MDS 9000 Series Switch. Which two commands accomplish this goal? (Choose two.)
Which two statements describe the process of upgrading an EPLD on a Cisco MUS 9000 Series Switch? (Choose two)
An engineer is deploying a VXLAN EVPN environment for a customer. The customers environment suffers from a large amount of flooding related to hosts attempting to resolve the MAC to IP mapping on the network segment. Which feature prevents this issue from happening in the future?
An engineer is performing a configuration on a Cisco Nexus 5000 Series Switch. The requirement is for the current Fibre Channel IDs in VSAN 120 to be saved across reboots. The Cisco environment also must integrate with a third-party solution that requires persistent Fibre Channel IDs for the VSAN. The WWN of the Cisco switch must be 33:e8:00:05:30:00:16:df and its Fibre Channel ID 0x070128. Which command set meets these requirement?
Refer to the exhibit. An engineer must capture Fibre Channel traffic from the server and the supervisor to the Cisco MDS 9000 Series Switch fabric. The traffic must be forwarded to the analyzer Drag and drop the code snippets from the right onto the blanks in the code on the left to complete the configuration. Not all code snippets are used.
An engineer implements a Cisco UCS C-Series Server that must meet these security requirements:
Unencrypted communication must be disabled.
The session timeout must not exceed 15 minutes.
Unencrypted web traffic must be redirected automatically.
CLI management must use a nondefault port.
Which configuration meets the requirements?
An engineer installs a group of Cisco Nexus 93180YC-FX3 switches. The intended Cisco NX-OS software image is nxos64-cs.10.2.4.M.bin. The engineer must use a Python script to automate the upgrade and configuration of the switches when they are powered on. Which design action must be taken?
Service degradation is reported on a VM that is deployed on a Cisco UCS blade server. The traffic from the vNIC is required to SPAN in both directions to a packet analyzer that is connected to UCS-A slot 2 port 12. Which two commands are needed to complete the configuration? (Choose two.)
Refer to the exhibit.
Users report SAN traffic packet loss on a blade server that is managed by using Cisco UCS Manager. An engineer must implement a SPAN feature to an external Fibre Channel analyzer. Which configuration source in the TEST monitoring session must the engineer select?
An engineer must configure Net Row to Identify packet flows and pfov.de statistics based on the collected flows for the Layer 2 attribute on a Cisco Nexus Series Switch. Which action must the engineer take to complete a NetFlow exporter configuration?
What is a benefit of independent resource scaling in Cisco
HyperFlex hybrid architecture?
A network engineer must enable port security on all cisco MDS series switches in the fabric. The requirement is to avoid the extensive manual configuration of the switch ports. Which action must be taken to meet these requirements?
Refer to the exhibit. An engineer implements a VXLAN pod deployment with the vPC. During an upgrade of switches in POD1. Leaf 102 starts to rejoin the vPC pair. Also, traffic to and from the Web Cluster becomes intermittent for five minutes. Which additional command must be applied on both switches to resolve this issue?
Refer to the exhibit. Server1 is connected to a Cisco Nexus 9000 Series Switch via a 1-Gb pod channel. The storm control is applied to the Eth0 device with a zero percent value What does the switch do to traffic that traverses the switch interfaces during the streaming window that exceeds the bandwidth of the interfaces?
What occurs when the following command is run on a Cisco Nexus 9000 Series Switch?
Nexus01# install all epld n9000-epld.9.2.4.img
All logins to a Cisco Nexus 9000 Series Switch must pass through the TACACS+ server at IP address 192.168.10.10. The configuration must meet these requirements:
• The TACACS+ server must be used for SSH and Telnet.
• The TACACS+ server key must be Cisco123!.
• Management VRF must be used for connectivity.
• The deployment must fail back to local credentials if the TACACS+ server fails to respond within 30 seconds.
Drag and drop the code snippets from the right onto the blanks in the code on the left to complete the configuration. Not all code snippets are used.
Cisco Nexus 9000 Series Switches are configured with LACP protocol and default aging timers. What is the impact on the LACP peer during an ISSU upgrade?
Refer to Exhibit:
An engineer must use the python module in the guest shell of the Cisco Nexus 9000 Series switch to shutdown port Ethernet 1/4 Which command set will accomplish this?
An engineer must implement private VLANs for a group of Cisco UCS 8-Series servers. The primary VLAN is present, But the secondary VLAN must Be added to Both fabrics. Which configuration set accomplishes this task?
Refer to the exhibit. A network administrator experiences these issues with the network:
• PC1 is experiencing a buffering problem for video applications.
• The servers that are connected to SW2 are experiencing packet drops when they connect to the Internet.
The engineer wants to configure the required traffic capture to investigate the issue further. Which configuration must be implemented to monitor the traffic?
A network automation engineer must configure a Cisco NX-OS REST API on a Cisco 9000 Series Switch with these requirements:
NX-API REST and the DME database must be enabled.
The NX-API REST must listen for HTTP traffic on port 83.
The HTTPS certificate must be uploaded.
Which configuration set must be used to accomplish these goals?
A)
B)
C)
D)
A Cisco UCS C-Series server needs to be installed in a data center. The server must be managed by using Cisco UCS Manager with a single cable for management and data traffic. Which set of commands must be run on the server after a physical connection is established?
A)
B)
C)
D)
Refer to the exhibit An engineer must restrict users assigned to the sangroup role on the Cisco MDS 9000 Series Switch from issuing commands
on VSANs 15 to 20 Which command must the engineer run to achieve
this objective?
A network engineer implements a Python script on a Cisco Nexus 9000 Series Switch with redundant supervisors. The script is located on a built-in container that runs as part of the Cisco NX-OS system. The requirement is to automate the periodic transfer of the Python script to a redundant supervisor. In addition, the script must be transferred to an external server using encryption and authentication. Which configuration set meets these requirements?
Which feature is supported with an In-Service Software Upgrade on a Cisco Nexus 9000 Series Switch?
Refer to the exhibit.
Which type of backup is required to restore a Cisco UCS configuration?
An engineer configured an environment that contains the vPC and non-vPC switches. However, it was noticed that the downstream non-vPC switches do not receive the same STP bridge ID from the upstream vPC switch peers. Which vPC feature must be implemented to ensure that vPC and non-vPC switches receive the same STP bridge ID from the upstream vPC switch peers?
Which technology enables RDMA functionality over Ethernet between multiple broadcast domains?
Which service profile is affected if the default host firmware policy in Cisco UCS Manager is changed?
Refer to the exhibit An engineer must access a Cisco UCS C-Series server KVM from a remote location. The engineer must use the out-of-band interface to access the KVM Which configuration set meets these requirements?
An engineer must configure role-based access control in Cisco UCS Manager for a network analyst. The analyst must be able to configure syslog servers and review system logs. Which two default user roles must be assigned? (Choose two.)
Refer to the exhibit. An engineer must add a new VRF to an existing VXLAN environment. The VRF and interface VLAN have already been configured. The deployment is configured with these parameters:
OSPF is used as the underlay.
BGP is used as the overlay.
The network virtual interface ID is 1.
The VXLAN network identifier must include the VLAN number.
Drag and drop the configuration snippets from the bottom to complete the VXLAN configuration.
How does a modular Cisco Nexus 9000 Series Switch handle an in-service software (ISSU) upgrade as compared to a nonmodular switch?
An engineer builds a new Cisco ACI fabric Which VLAN must be configured as the infrastructure VLAN during the Cisco APIC setup script?
Refer to the exhibit. A Cisco data center environment is implemented with vPC. The web server replies using the SVI MAC address as the Layer 2 header instead of the HSRP MAC address on VLAN 23. This behavior causes packet drops on the Cisco Nexus 9000 Series Switches due to the vPC loop prevention mechanism The requirement is for the vPC feature to allow N9K_1 and N9K_2 to forward traffic between the NAS server and the web server, even if the HSRP ' s MAC address is not used on Layer 2 headers for VLAN 23. Which feature must be used to accomplish this goal?
An engineer is implementing Cisco Intersight in a secure environment. The environment must use LDAP directory service and ensure information integrity and confidentiality. Which two steps must be taken to implement the solution? (Choose two.)
Refer to the exhibit.
Which Cisco MDS 9700 Series Switch module EPLDs are upgraded?
An engineer is configuring a traffic-monitoring session on a Cisco Unified Computing System to analyze Fibre Channel over Ethernet traffic for performance tuning. The session must monitor traffic from a VSAN associated with the vHBA of a service profile. Which set of actions accomplishes this goal?
PDF + Testing Engine
Testing Engine
PDF (Q&A)
