Cisco Updated 350-601 Exam Questions and Answers by keira

The contract between EPG Client and EPG Web allows TCP communication initiated by the client toward the webserver with TCP destination port 80. This means that the host in EPG Client can establish a connection to the webserver in EPG Web on TCP port 80. However, the contract does not allow the webserver to initiate a connection back to the host on the same port, which is typically used for HTTP traffic.

References: The explanation is based on the understanding of Cisco Application Centric Infrastructure (ACI) contracts, which are used to define the communication between EPGs (Endpoint Groups). For more detailed information, refer to the Cisco Data Center Core Technologies source book and the ACI documentation available on Cisco’s official website.

 NFSv4 uses the TCP protocol and requires only one IP port (2049) to run the service. This simplifies firewall configuration and improves security by reducing the number of open ports

The statement that is true about upgrading the firmware on a Cisco MDS storage switch with dual supervisors is that the new firmware is load on the standby supervisor first. This is part of the non-disruptive upgrade process that allows the switch to continue operating while the firmware is updated. The standby supervisor receives the new firmware image and reloads with the new version, while the active supervisor remains in service with the old version. Then, a switchover occurs, making the standby supervisor the new active one, and the old active supervisor receives the new firmware image and reloads. Finally, the modules are upgraded one by one, starting from the lowest numbered module. The other statements are not true because:

• The standby supervisor does not need to be offline before the firmware upgrade begins. It can be online and in standby mode, ready to receive the new firmware image and reload.
• Both supervisors do not load the new firmware and then the active supervisor reboots. This would cause a disruption of service and a loss of configuration. The firmware upgrade is done in a sequential manner, with one supervisor at a time.
• Supervisors cannot be upgraded independently to test the new firmware. The firmware versions on both supervisors must match, otherwise the switchover will fail and the switch will not operate properly.

References: For more details on how to perform a firmware upgrade on a Cisco MDS storage switch, please refer to the following resources:

• How to Perform an MDS 9000 Series Switch Non-Disruptive Upgrade
• Cisco MDS 9000 NX-OS Software Upgrade and Downgrade Guide, Release 6.2(x)

 The commands shown in the exhibit configure Unicast Reverse Path Forwarding (uRPF) in loose mode on the interface Ethernet 2/2. The ip verify unicast source reachable-via rx command enables uRPF to check that the source address of a received packet has a route in the routing table and that the packet has been received from a valid interface that aligns with the routing table. This helps prevent IP spoofing by ensuring that packets are received from the expected interface.

References := This explanation is based on the principles of uRPF as described in Cisco’s security configuration guides and the Implementing and Operating Cisco Data Center Core Technologies (DCCOR) course materials. For more detailed information, please refer to these resources.