Free 350-601 Exam Braindumps
Implementing and Operating Cisco Data Center Core Technologies (DCCOR) Questions 251–255 (page: 52)

Updated On: 10-Feb-2026

When a strict CoPP policy is implemented, which statement describes an event during which packets are dropped?

  1. A large system image is copied to a switch by using the default VRF.
  2. Fifteen SSH sessions remain connected to the switch.
  3. A ping sweep is performed on a network that is connected through a switch.
  4. A web server that is connected to a switch is affected by a DDoS attack.

Answer(s): A

Explanation:

CoPP only protects the Cisco device that is configured for it, so only traffic destined to the switch/router itself will be affected, not traffic to other devices.


Reference:

https://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst6500/ios/15-0SY/configuration/guide/15_0_sy_swcg/control_plane_policing_copp.pdf



A host in EPG Client wants to talk to a webserver in EPG Web. A contract with default settings is defined between EPG Client and EPG Web, which allows TCP communication initiated by the client toward the webserver with TCP destination port 80.
Which statement describes this scenario?

  1. If EPG Web is made a preferred group member, a contract between EPG Client and EPG Web is no longer required for the host in EPG Client to reach the webserver in EPG Web.
  2. If vzAny is configured to consume and provide a "deny all" contract, traffic between EPG Client and EPG Web is no longer allowed.
  3. The host in EPG Client is allowed to connect to TCP destination port 80 on the webserver in EPG Web. The webserver will not be allowed to initiate a separate TCP connection to a host port with TCP source port 80.
  4. The host in EPG Client is allowed to connect to TCP destination port 80 on the webserver in EPG Web. The webserver is allowed to initiate a separate TCP connection to a host port with TCP source port 80.

Answer(s): C

Explanation:

Reverse filter and apply in both directions is default.
If a filter allows traffic from any consumer port to a provider port (e.g. 8888), if reverse port filtering is enabled and the contract is applied both directions (say for
TCP traffic), either the consumer or the provider can initiate communication. The provider could open up a TCP socket to the consumer using port 8888, whether the provider or consumer sent traffic first.


Reference:

https://www.cisco.com/c/en/us/td/docs/switches/datacenter/aci/apic/sw/1-x/Operating_ACI/guide/b_Cisco_Operating_ACI/ b_Cisco_Operating_ACI_chapter_01000.html



An engineer is running an ACI fabric, has VMM integration with VMware vCenter, and wants to enable microsegmentation based on vCenter VM attributes.
Which statement describes microsegmentation in this scenario?

  1. ACI does not support microsegmentation based on vCenter VM attributes. The network attributes should be used for microsegmentation.
  2. When enabled, microsegmentation performs distributed switching and routing on the ESXi hosts.
  3. Microsegmentation is supported only using AVE or AVS.
  4. An ACI microsegmented EPG automatically creates a port group with a private VLAN configured on a VMware vCenter distributed virtual switch.

Answer(s): D

Explanation:

When you enable Microsegmentation with Cisco ACI, Cisco APIC allocates a pair of VLANs (PVLANs) and configures a PVLAN portgroup on VMware vCenter.
Doing so forces traffic to go to the leaf switch even if two VMs in the same portgroup try to talk to each other


Reference:

https://www.cisco.com/c/en/us/td/docs/switches/datacenter/aci/apic/sw/4-x/virtualization/Cisco-ACI-Virtualization-Guide-42x/Cisco-ACI-Virtualization-
Guide-421_chapter_0100.html



DRAG DROP (Drag and Drop is not supported)
Drag and drop the technologies from the left onto the correct descriptions on the right.
Select and Place:

  1. See Explanation section for answer.

Answer(s): A

Explanation:



Which two authentication types does Cisco UCS Manager support when configuring authentication? (Choose two.)

  1. PAM
  2. local
  3. 802.1X
  4. Kerberos
  5. LDAP

Answer(s): B,E

Explanation:

Cisco UCS supports two methods to authenticate user logins:
* Through user accounts local to Cisco UCS Manager
* Remotely through one of the following protocols:
LDAP -
RADIUS -
TACACS+


Reference:

https://www.cisco.com/en/US/docs/unified_computing/ucs/sw/gui/config/guide/141/UCSM_GUI_Configuration_Guide_141_chapter7.html



Viewing page 52 of 106
Viewing questions 256 - 260 out of 584 questions


Post your Comments and Discuss Cisco 350-601 exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!