CISCO 350-601 Implementing and Operating Cisco Data Center Core Technologies (DCCOR) Free Practice Test — 30 Questions

Question 1

A data center experienced a significant outage that affected multiple services, leading to a loss of revenue and customer trust. The operations team conducted a root cause analysis (RCA) and identified several contributing factors, including a misconfigured load balancer, outdated firmware on network switches, and insufficient monitoring of system performance. To effectively address the root cause, which of the following actions should the team prioritize to prevent future occurrences?

Accepted Answer

Implement a comprehensive monitoring solution that provides real-time alerts and performance metrics for all critical components.

Question 2

In the context of ISO/IEC standards, a data center manager is tasked with ensuring that the facility complies with the ISO/IEC 27001 standard for information security management systems (ISMS). The manager must implement a risk assessment process that identifies, evaluates, and mitigates risks to information security. Which of the following best describes the key components that should be included in this risk assessment process to align with ISO/IEC 27001 requirements?

Accepted Answer

Identification of assets, threat assessment, vulnerability analysis, risk evaluation, and risk treatment plan

Question 3

In a corporate environment, a network administrator is tasked with configuring SMB (Server Message Block) for file sharing across multiple departments. The administrator needs to ensure that the configuration supports both Windows and Linux clients while maintaining security and performance. Which of the following configurations would best achieve this goal while adhering to best practices for SMB implementation?

Accepted Answer

Enable SMB 3.0 with encryption and configure access control lists (ACLs) for shared folders.

Question 4

In a data center utilizing a spine-leaf architecture, a network engineer is tasked with optimizing the bandwidth and reducing latency for a multi-tier application that experiences high traffic. The application consists of multiple microservices that communicate frequently. Given that the leaf switches connect directly to the spine switches, which configuration would best enhance the performance of this architecture while ensuring redundancy and scalability?

Accepted Answer

Implementing additional spine switches to increase the number of available paths and load balancing traffic across them.

Question 5

In a corporate environment, a network administrator is tasked with configuring a firewall to protect sensitive data while allowing necessary traffic for business operations. The firewall must be set to allow HTTP and HTTPS traffic from the internet to a web server but block all other incoming traffic. Additionally, the administrator needs to ensure that internal users can access the web server without restrictions. Given this scenario, which of the following configurations best describes the appropriate firewall rules to achieve these objectives?

Accepted Answer

Allow incoming traffic on ports 80 (HTTP) and 443 (HTTPS) from any source; allow all outgoing traffic; allow all internal traffic to the web server.

Question 6

In a corporate environment, a network administrator is tasked with implementing a secure access control policy for a new data center. The policy must ensure that only authorized personnel can access sensitive data and that access is logged for auditing purposes. The administrator decides to use Role-Based Access Control (RBAC) and integrates it with a centralized authentication system. Which of the following best describes the advantages of using RBAC in this scenario?

Accepted Answer

RBAC simplifies the management of user permissions by assigning roles based on job functions, reducing the risk of unauthorized access and ensuring compliance with regulatory requirements.

Question 7

A data center is preparing for an upcoming audit to ensure compliance with the Health Insurance Portability and Accountability Act (HIPAA). The compliance officer is tasked with implementing a series of security measures to protect patient data. Which of the following measures would most effectively ensure compliance with HIPAA\'s Security Rule, particularly in the context of access control and data integrity?

Accepted Answer

Implementing role-based access control (RBAC) to restrict access to sensitive patient information based on user roles and responsibilities.

Question 8

A network engineer is troubleshooting a connectivity issue in a data center where multiple servers are unable to communicate with each other. The engineer follows a systematic troubleshooting methodology, starting with the identification of the problem. After confirming that the servers are powered on and connected to the network, the engineer checks the network configuration and finds that the VLAN settings on the switch ports are misconfigured. What should be the next step in the troubleshooting process according to best practices in troubleshooting methodologies?

Accepted Answer

Verify the VLAN configuration on the switch and ensure it matches the server requirements.

Question 9

In a data center environment, a network engineer is tasked with designing a Layer 2 network that supports VLAN segmentation for multiple tenants while ensuring efficient inter-VLAN routing. The engineer decides to implement a trunking protocol to allow multiple VLANs to traverse a single physical link between switches. Given the requirement for redundancy and load balancing, the engineer also considers using EtherChannel. Which of the following configurations would best achieve these goals while maintaining optimal performance and minimizing broadcast traffic?

Accepted Answer

Configure 802.1Q trunking on the switch ports and implement LACP for EtherChannel, allowing for dynamic link aggregation across multiple physical links.

Question 10

In a data center environment, a network engineer is tasked with designing a high-availability architecture for a critical application that requires minimal downtime. The application is deployed across multiple servers, and the engineer must choose between different load balancing strategies to ensure optimal performance and redundancy. Which load balancing method would best support the requirement for high availability while also distributing traffic evenly across the servers?

Accepted Answer

Active-Active Load Balancing

Question 11

In a network troubleshooting scenario, a network engineer is analyzing a packet that has been captured at the transport layer of the OSI model. The engineer notes that the packet contains a TCP segment with a sequence number of 1000 and an acknowledgment number of 2000. If the engineer needs to determine the expected behavior of the TCP connection in terms of data flow, which of the following statements best describes the implications of these sequence and acknowledgment numbers?

Accepted Answer

The sender has transmitted 1000 bytes of data, and the receiver is expecting the next byte to be 2001.

Question 12

A data center manager is evaluating the deployment of Cisco HyperFlex to optimize storage and compute resources for a virtualized environment. The manager needs to ensure that the HyperFlex architecture can support a workload that requires a minimum of 10,000 IOPS (Input/Output Operations Per Second) with a latency of less than 5 milliseconds. Given that each HyperFlex node can deliver 2,500 IOPS and the average latency per node is 3 milliseconds, how many nodes are required to meet the workload demands while also considering redundancy for high availability?

Accepted Answer

5 nodes

Question 13

In a data center environment, a security analyst is tasked with implementing a multi-layered security approach to protect sensitive data and resources. The analyst decides to utilize a combination of physical security measures, network security protocols, and access control mechanisms. Which of the following strategies best exemplifies the principle of defense in depth, ensuring that if one layer of security is breached, additional layers remain to protect the data?

Accepted Answer

Implementing biometric access controls at entry points, deploying firewalls to segment network traffic, and using encryption for data at rest and in transit.

Question 14

In a data center environment, a network engineer is tasked with designing a failover mechanism for a critical application that requires high availability. The application runs on two servers configured in an active-passive setup. The primary server handles all requests, while the secondary server remains on standby. If the primary server fails, the secondary server must take over seamlessly. The engineer needs to determine the best approach to monitor the health of the primary server and initiate failover. Which of the following strategies would be the most effective in ensuring minimal downtime and data loss during the failover process?

Accepted Answer

Implement a heartbeat mechanism that regularly checks the health of the primary server and triggers failover if no response is received within a specified timeout period.

Question 15

In a microservices architecture, a developer is tasked with designing a RESTful API for a new service that manages user profiles. The API must support CRUD (Create, Read, Update, Delete) operations and should be stateless. The developer decides to implement versioning in the API to ensure backward compatibility as the service evolves. Which approach would best facilitate this requirement while adhering to RESTful principles?

Accepted Answer

Implement versioning in the URL path, such as `/api/v1/users`, and use HTTP methods to define the operations.

Question 16

In a Cisco UCS environment, you are tasked with designing a system that can efficiently manage a workload requiring high availability and scalability. The architecture must support multiple service profiles and allow for dynamic resource allocation. Given the following options, which configuration best aligns with the principles of UCS architecture to achieve these goals?

Accepted Answer

Implementing a UCS Manager with multiple Fabric Interconnects in a high-availability pair, utilizing service profiles to abstract the hardware configuration and enable rapid deployment of virtual machines.

Question 17

In a VMware vSphere environment, you are tasked with optimizing resource allocation for a virtual machine (VM) that runs a critical application. The VM is currently configured with 4 vCPUs and 16 GB of RAM. The application experiences performance degradation during peak usage times. You decide to analyze the resource usage metrics and find that the CPU utilization is consistently above 85% during peak hours, while the memory usage hovers around 60%. Given this information, which of the following actions would most effectively enhance the performance of the VM without over-provisioning resources?

Accepted Answer

Increase the number of vCPUs to 6 and monitor the performance impact.

Question 18

In a data center environment, a network architect is tasked with designing a modular architecture that can scale efficiently as the organization grows. The architect decides to implement a three-tier architecture consisting of core, aggregation, and access layers. Each layer is designed to handle specific functions and can be expanded independently. If the core layer is designed to support a maximum of 10 Gbps per link and the aggregation layer can support up to 40 Gbps, what is the maximum theoretical throughput that can be achieved between the core and aggregation layers if there are 4 links between them?

Accepted Answer

40 Gbps

Question 19

A multinational corporation is planning to launch a new online service that collects personal data from users across various European Union (EU) member states. The company is aware of the General Data Protection Regulation (GDPR) and wants to ensure compliance. Which of the following actions should the company prioritize to align with GDPR requirements regarding data processing and user consent?

Accepted Answer

Implement a clear and concise privacy policy that outlines the purpose of data collection, the types of data collected, and the rights of users regarding their data.

Question 20

A data center manager is tasked with optimizing server performance for a high-traffic web application. The application is hosted on a cluster of servers, each with a CPU utilization rate of 75% during peak hours. The manager considers scaling the server resources. If the current configuration consists of 10 servers, each with a processing capacity of 2.5 GHz, what would be the total processing capacity of the cluster after adding 5 additional servers with the same specifications? Additionally, how would this impact the overall CPU utilization if the traffic increases by 50%?

Accepted Answer

37.5 GHz, with a new utilization rate of 50%

Question 21

In a large enterprise environment, a network administrator is tasked with implementing Role-Based Access Control (RBAC) to manage user permissions across various applications and systems. The administrator identifies three distinct roles: \"Admin,\" \"User,\" and \"Guest.\" Each role has specific permissions associated with it. The \"Admin\" role can create, read, update, and delete resources, while the \"User\" role can only read and update resources. The \"Guest\" role is limited to reading resources only. If a new application is introduced that requires a user to have the ability to read and update resources but not delete them, which role should the administrator assign to users of this application to ensure compliance with the RBAC model?

Accepted Answer

User

Question 22

A data center is experiencing rapid growth in its user base, leading to increased demand for resources. The IT team is tasked with designing a scalable architecture that can accommodate future growth without significant downtime or performance degradation. They consider two approaches: vertical scaling (adding more resources to existing servers) and horizontal scaling (adding more servers to the pool). Given that the current system can handle 500 concurrent users with a response time of 200 milliseconds, and the team anticipates a growth to 2000 concurrent users, which scaling approach would be more effective in maintaining performance while minimizing costs, and why?

Accepted Answer

Horizontal scaling is more effective as it distributes the load across multiple servers, allowing for better resource utilization and redundancy.

Question 23

A company is planning to implement a Storage Area Network (SAN) to enhance its data storage capabilities. They have two options for their SAN architecture: a Fibre Channel SAN and an iSCSI SAN. The company needs to determine the total cost of ownership (TCO) for each option over a five-year period, considering the initial setup costs, maintenance, and operational expenses. The Fibre Channel SAN has an initial setup cost of $50,000, annual maintenance costs of $5,000, and operational costs of $2,000 per year. The iSCSI SAN has an initial setup cost of $30,000, annual maintenance costs of $3,000, and operational costs of $1,500 per year. Which SAN option has a lower total cost of ownership over five years?

Accepted Answer

iSCSI SAN

Question 24

In a three-tier architecture for a data center, a company is planning to implement a new application that requires high availability and scalability. The architecture consists of a presentation layer, an application layer, and a data layer. The company anticipates that the application will experience a peak load of 10,000 concurrent users, each generating an average of 0.5 requests per second. Given that each server in the application layer can handle 200 requests per second, how many application servers are required to support the peak load without degradation of performance?

Accepted Answer

25 servers

Question 25

A multinational corporation is planning to launch a new customer relationship management (CRM) system that will process personal data of EU citizens. The company is based outside the EU but has a significant customer base within the EU. To comply with the General Data Protection Regulation (GDPR), the company must implement several measures. Which of the following actions is essential for ensuring compliance with GDPR when processing personal data of EU citizens?

Accepted Answer

Conducting a Data Protection Impact Assessment (DPIA) to evaluate risks associated with data processing activities.

Question 26

A company is evaluating the deployment of Cisco HyperFlex to enhance its data center capabilities. They have a workload that requires a total of 10 TB of storage, with an expected growth rate of 20% annually. The company plans to implement a HyperFlex cluster with three nodes, each equipped with 4 TB of usable storage. Given the current storage requirements and growth projections, how many additional nodes will the company need to add to the HyperFlex cluster after three years to accommodate the anticipated storage needs?

Accepted Answer

1 additional node

Question 27

In a Cisco Unified Computing System (UCS) environment, you are tasked with designing a solution that optimally utilizes the available resources while ensuring high availability and scalability. You have a UCS chassis with 8 blade slots, each capable of hosting a blade server with 2 CPUs and 128 GB of RAM. The organization anticipates a workload that requires a total of 512 GB of RAM and 8 CPUs. Given that each blade server can be configured with a maximum of 64 GB of RAM per CPU, what is the minimum number of blade servers you need to deploy to meet the organization\'s requirements while ensuring that the UCS architecture remains efficient and scalable?

Accepted Answer

4 blade servers

Question 28

In a data center environment utilizing Cisco UCS Manager, a network engineer is tasked with configuring a service profile for a new blade server. The service profile must include specific policies for boot order, firmware, and network connectivity. The engineer needs to ensure that the service profile is associated with the correct vNICs and vHBAs to facilitate optimal performance and redundancy. Given that the data center operates under a strict policy of high availability and minimal downtime, which of the following configurations would best meet these requirements while ensuring compliance with UCS best practices?

Accepted Answer

Configure the service profile to use two vNICs for network redundancy, with one vNIC connected to a primary VLAN and the other to a secondary VLAN, while also enabling the boot from SAN option for the vHBA.

Question 29

In a multi-layered security architecture designed to protect sensitive data in a corporate environment, a security analyst is tasked with implementing a Defense in Depth strategy. The analyst must ensure that each layer of security not only protects against external threats but also mitigates risks from internal vulnerabilities. Given the following layers: physical security, network security, endpoint security, and application security, which combination of measures would best exemplify a comprehensive Defense in Depth approach to safeguard against both external and internal threats?

Accepted Answer

Implementing biometric access controls at physical entry points, deploying firewalls and intrusion detection systems at the network layer, utilizing endpoint protection platforms on all devices, and enforcing secure coding practices in application development.

Question 30

In a data center environment, a network administrator is tasked with configuring an NFS (Network File System) setup to allow multiple clients to access shared files on a server. The administrator needs to ensure that the NFS server can handle a maximum of 100 concurrent connections while maintaining optimal performance. Given that each connection requires 10 MB of memory, what is the minimum amount of memory that the NFS server must have to support the maximum number of connections? Additionally, if the server also needs to allocate 200 MB for system processes, what is the total minimum memory requirement for the server?

Accepted Answer

1,000 MB

CISCO 350-601 Implementing and Operating Cisco Data Center Core Technologies (DCCOR) Free Practice Test — 30 Questions

A lot more is already mapped out

About the CISCO 350-601 Implementing and Operating Cisco Data Center Core Technologies (DCCOR) Certification