NCP-AIN NVIDIA-Certified Professional AI Networking Free Practice Exam Questions (2025 Updated)

In SONiC, to assign a static IP address to the management interface, the correct command is:

sudo config interface ip add eth0 20.11.12.13/24 20.11.12.254

This command sets the IP address and the default gateway for the management interface.​

SONiC (Software for Open Networking in the Cloud) is an open-source network operating system used on NVIDIA Spectrum-X platforms, including Spectrum-4 switches, to provide a flexible and scalable networking solution for AI and HPC data centers. Configuring the management interface in SONiC is a critical task for enabling remote access and network management. The question asks for the correct command to assign the IP address 20.11.12.13 to the management interface, typically identified as eth0 in SONiC, as it is the default management interface for out-of-band management.

Based on NVIDIA’s official SONiC documentation, the correct command to assign an IP address to the management interface involves using the config command-line utility, which is part of SONiC’s configuration framework. The command sudo config interface ip add eth0 20.11.12.13/24 20.11.12.254 is the standard method to configure the IP address and gateway for the eth0 management interface. This command specifies the interface (eth0), the IP address with its subnet mask (20.11.12.13/24), and the default gateway (20.11.12.254), ensuring proper network connectivity.

Exact Extract from NVIDIA Documentation:

“To configure the management interface in SONiC, use the config interface ip add command. For example, to assign an IP address to the eth0 management interface, run:

sudo config interface ip add eth0 /

Example:

sudo config interface ip add eth0 20.11.12.13/24 20.11.12.254

This command adds the specified IP address and gateway to the management interface, enabling network access.”

—NVIDIA SONiC Configuration Guide

This extract confirms that option C is the correct command for assigning the IP address to the management interface in SONiC. The use of sudo ensures the command is executed with the necessary administrative privileges, and the syntax aligns with SONiC’s configuration model, which persists the changes in the configuration database.

Configuring NVUE to ignore certain underlying Linux files allows administrators to manage specific settings manually or through automation tools like Ansible withoutNVUE overwriting these configurations. This approach enables the persistent manipulation of settings using both NVUE and flat-file methods, providing flexibility in network management.

The NVIDIA Spectrum-X Reference Architecture (RA) 1.0.1 is designed for Ethernet AI cloud deployments and includes the SN5600 Spectrum-4 switches and BlueField-3 SuperNICs. This architecture supports adaptive routing and DOCA programmable congestion control (PCC) for lossless RoCE traffic, optimizing performance for AI workloads.

The SN5600 switch offers 64 ports of 800GbE in a dense 2U form factor, providing high throughput and low latency essential for AI applications.

EVPN Multi-homingenablesactive-active redundancy without inter-switch linksby usingoverlay routingover VXLAN and distributed control plane using BGP EVPN.

From the officialNVIDIA Cumulus Linux EVPN Multihoming Documentation:

"EVPN multihoming allows multiple Top-of-Rack (ToR) switches to connect to the same server while maintaining full layer-2 redundancy without the need for inter-switch links or traditional MLAG configuration."

Key benefits:

Simplified topology (no ISL/peer-link needed)

BGP-based control plane

Fast convergence

Active-active links per host NIC

Incorrect Options:

MLAGrequires ISL between switches and peer-link configuration.

VSS(Virtual Switching System) is a Cisco term, not supported in NVIDIA networking.

In Cumulus Linux, configuring a bond interface with Link Aggregation Control Protocol (LACP) involves setting the bond mode to 'lacp'. The correct command to achieve this is:​

nv set interface bond1 bond mode lacp​

This command sets the bonding mode of 'bond1' to LACP, enabling dynamic link aggregation for increased bandwidth and redundancy.​

Reference Extracts from NVIDIA Documentation:

"To reset the link aggregation mode for bond1 to the default value of 802.3ad, run the nv set interface bond1 bond mode lacp command."​

Accessing theBlueField DPU Operating System (OS)is possible throughrshim, either over PCIe or USB, and viaSSH through the OOB interfacewhen in DPU mode.

From theNVIDIA BlueField Software Documentation:

"You can access the BlueField OS through the rshim interface. The rshim module enables host-to-DPU communication either via PCIe (default) or USB."

B. rshim over PCIe: Default when BlueField is installed in a host.

D. rshim over USB: Useful for provisioning or systems without PCIe drivers.

Incorrect Options:

A (NIC mode): BlueField acts as a transparent NIC; OS access is not available to the host.

C (Redfish): Redfish is for out-of-band management, not direct OS-level access.

NVIDIA AIR (AI-Ready Infrastructure) is a cloud-based simulation platform designed to model and validate data center network deployments, including Spectrum-X Ethernet networks, using realistic topologies and configurations. When creating a custom topology in NVIDIA AIR, users can define network links between devices (e.g., spine and leaf switches) using a DOT file format, which is based on the Graphviz graph visualization software. The question asks for the correct syntax to define a link between port 1 on a spine switch (spine-01) and port 41 on a leaf switch (gpu-leaf-01) in a NVIDIA AIR simulation.

According to NVIDIA’s official NVIDIA AIR documentation, the DOT file format is used to specify network topologies, including nodes (devices) and links (connections between ports). The syntax for defining a link in a DOT file uses a double dash (--) to indicate a connection between two ports, with each port specified in the format "":"". For Spectrum-X networks, which typically use Cumulus Linux or SONiC on NVIDIA Spectrum switches, ports are commonly labeled as swpX (switch port X) rather than ethX (Ethernet interface), especially for switch-to-switch connections in a leaf-spine topology. The correct syntax for the link between port 1 on spine-01 and port 41 on gpu-leaf-01 is:

"spine-01":"swp01" -- "gpu-leaf-01":"swp41"

This syntax uses swp01 and swp41 to denote switch ports, consistent with Cumulus Linux conventions, and the double dash (--) to indicate the link, as required by the DOT file format.

Exact Extract from NVIDIA Documentation:

“You can create custom topologies in Air using a DOT file, which is the file type used with the open-source graph visualization software, Graphviz. DOT files define nodes, attributes, and connections for generating a topology for a network. The following is an example of a link definition in a DOT file:

"leaf01":"swp31" -- "spine01":"swp1"

This specifies a connection between port swp31 on leaf01 and port swp1 on spine01. Port names typically follow the switch port naming convention (e.g., swpX) for Cumulus Linux-based switches.”

—NVIDIA Air Custom Topology Guide

This extract confirms that option A is the correct answer, as it uses the proper DOT file syntax with swp01 and swp41 for port names and the double dash (--) for the link, aligning with NVIDIA AIR’s topology definition process for Spectrum-X simulations.

Analysis of Other Options:

B. "spine-01":"swp1" to "gpu-leaf-01":"swp41": This option uses the correct port naming convention (swp1 and swp41) but incorrectly uses the word to as the connector instead of the double dash (--). The DOT file format requires -- to define links, making this syntax invalid for NVIDIA AIR.

C. "spine-01":"eth1" to "gpu-leaf-01":"eth41": This option uses ethX port names, which are typically used for host interfaces (e.g., servers) rather than switch ports in Cumulus Linux or SONiC environments. Switch ports in Spectrum-X topologies are labeled swpX. Additionally, the use of to instead of -- is incorrect for DOT file syntax, making this option invalid.

D. "spine-01":"eth1" - "gpu-leaf-01":"eth41": This option uses a single dash (-) instead of the required double dash (--) and incorrectly uses ethX port names instead of swpX. The ethX naming is not standard for switch ports in Spectrum-X, and the single dash is not valid DOT file syntax, making this option incorrect.

Why "spine-01":"swp01" -- "gpu-leaf-01":"swp41" is the Correct Answer:

Option A correctly adheres to the DOT file syntax used in NVIDIA AIR for defining network links:

Node and Port Naming: The nodes spine-01 and gpu-leaf-01 are specified with their respective ports swp01 and swp41, following the swpX convention for switch ports in Cumulus Linux-based Spectrum-X switches.

Link Syntax: The double dash (--) is the standard connector in DOT files to indicate a link between two ports, as required by Graphviz and NVIDIA AIR.

Spectrum-X Context: In a Spectrum-X leaf-spine topology, connections between spine and leaf switches (e.g., Spectrum-4 switches) use switch ports labeled swpX, making swp01 and swp41 appropriate for this simulation.

This syntax ensures that the NVIDIA AIR simulation accurately models the physical connection between spine-01 port 1 and gpu-leaf-01 port 41, enabling validation of the Spectrum-X network topology. The DOT file can be uploaded to NVIDIA AIR to generate the topology, as described in the documentation.

AnInfiniBand (IB) Routerconnects two or moreInfiniBand subnets, making it possible for nodes in different subnets to communicate throughroute-managed communication.

From the officialNVIDIA InfiniBand Routers Documentation:

"An InfiniBand router provides connectivity between two or more InfiniBand subnets, enabling communication between hosts that are not on the same subnet while preserving isolation and scalability."

Ensures fabric scalability by allowing subnet segmentation.

Uses LID routing across subnet managers (SMs).

Essential in large clusters with thousands of nodes.

Incorrect Options:

AandBare incorrect: InfiniBand does not connect directly to Ethernet or SANs without a gateway.

Cis unrelated: NVLink is a GPU interconnect, not tied to InfiniBand routers.

NetQintegrates multiple telemetry sources, includingWJH,DOCA, and notably,Behavioral Telemetry.

From theNetQ Documentation – Behavioral Telemetry Section:

"Behavioral telemetry in NetQ correlates server and application behavior with network events, offering insights into root cause analysis by detecting anomalies in protocol, path, or performance behavior."

This helps identify patterns like:

Misbehaving applications causing retransmits.

Sudden changes in traffic flows.

Latency spikes correlated with app-level issues.

It complements device-level telemetry by introducingintent-based anomaly detection, crucial for proactive operations.

Incorrect Options:

Flow telemetryandpacket captureoffer raw data but not behavioral insights.

Application telemetryis too vague and is not the term NetQ uses for this feature.

TheCloudAI Benchmarkis designed to evaluate and establish performance baselines in AI-optimized networking environments like NVIDIA Spectrum-X. It assesses various performance metrics, including throughput and latency, ensuring that the network meets the demands of AI workloads. This benchmarking is essential for validating the benefits of Spectrum-X and for ongoing performance monitoring.​

TheNVIDIA UFM Cyber-AI Platformis specifically designed to enhance security and operational efficiency in InfiniBand data centers. It leverages AI-powered analytics to detect security threats, operational anomalies, and predict potential network failures. By analyzing real-time telemetry data, it identifies abnormal behaviors and performance degradation, enabling proactive maintenance and threat mitigation.​

This platform integrates with existing UFM Enterprise and Telemetry services to provide a comprehensive view of the network's health and security posture. It utilizes machine learning algorithms to establish baselines for normal operations and detect deviations that may indicate security breaches or hardware issues.​

Adaptive Routingin InfiniBand networks dynamically selects the optimal path for data packets based on current network conditions, such as congestion levels and link utilization. This approach ensures that traffic is evenly distributed across the network, preventing bottlenecks and maximizing overall throughput.​

By continuously monitoring the network and adjusting routes in real-time, Adaptive Routing enhances performance and reliability, making it the preferred choice for high-performance computing environments where consistent low latency and high bandwidth are critical.​

Virtual Routing and Forwarding (VRF)is the most effective method to achievenetwork segmentation and isolationin a multi-tenant environment.

From theNVIDIA Cumulus Linux Documentation – VRF Section:

"VRF allows multiple instances of routing tables to coexist within the same switch, effectively isolating traffic between tenants or departments."

Each department can:

Operate in its own VRF domain

Have independent routing tables

Maintain strict separation of Layer 3 paths

Incorrect Options:

A (Port Mirroring)– Used for traffic monitoring, not isolation.

C (ACLs)– Useful for fine-grained filtering, but not scalable tenant isolation.

D (LLDP)– Used for neighbor discovery, not security or isolation.

MLNX-OS, the operating system for NVIDIA's networking devices, defines two primary user account types:adminandmonitor. Theadminaccount has full administrative privileges, allowing for complete configuration and management of the system. Themonitoraccount, on the other hand, is designed for users who need to view system configurations and statuses without making any changes. This separation ensures a clear distinction between users who manage the system and those who monitor its operations.​

Reference Extracts from NVIDIA Documentation:

"There are two user roles or account types: admin and monitor. As 'admin', the user is privileged to run all the available commands. As 'monitor', the user can run commands that show system configuration and status, or set terminal settings."​

MLNX-OS is the network operating system used on NVIDIA’s Mellanox Ethernet switches, including the Spectrum family (e.g., Spectrum-4 switches in the Spectrum-X platform), designed for high-performance Ethernet networking in AI and HPC data centers. MLNX-OS provides a command-line interface (CLI) for configuring and managing switch operations, with user accounts controlling access to various commands and functions. The question asks for the two general user account types in MLNX-OS, which define the primary privilege levels for user access.

According to NVIDIA’s official MLNX-OS documentation, the two general user account types in MLNX-OS are:

monitor: This account type has read-only access, allowing users to view configurations, status, and logs but not modify settings. It is used for monitoring and troubleshooting without risking unintended changes.

admin: This account type has full read-write access, enabling users to view and modify all configurations, execute commands, and manage the switch’s operations. It is intended for administrators with complete control over the system.

These two account types represent the primary privilege levels in MLNX-OS, providing a clear distinction between read-only monitoring and full administrative access.

Exact Extract from NVIDIA Documentation:

“MLNX-OS supports two primary user account types for managing switch operations:

monitor: Users with monitor privileges have read-only access to the system. They can view configuration details, system status, and logs but cannot make changes to the configuration.

admin: Users with admin privileges have full read-write access, allowing them to configure, manage, and troubleshoot all aspects of the switch, including executing privileged commands.These account types ensure secure and controlled access to the switch’s management functions.”—NVIDIA MLNX-OS User Manual

This extract confirms that options B (monitor) and C (admin) are the correct answers. These account types are the standard privilege levels in MLNX-OS, used to manage access for monitoring and administrative tasks on Spectrum switches, including those in Spectrum-X deployments.

The UFM Cyber-AI platform is an advanced feature of NVIDIA's Unified Fabric Manager designed to enhance security and reliability in InfiniBand data centers. It leverages AI-powered analytics and machine learning techniques to detect security threats, operational anomalies, and predict potential network failures. By analyzing real-time and historical telemetry data, UFM Cyber-AI can identify abnormal system behaviors, performance degradations, and usage profile changes. This proactive approach enables administrators to address issues before they escalate, ensuring the integrity and uptime of the data center.​

Reference Extracts from NVIDIA Documentation:

"The NVIDIA Unified Fabric Manager (UFM) Cyber-AI platform offers enhanced and real-time network telemetry, combined with AI-powered intelligence and advanced analytics. It enables IT managers to discover operational anomalies and even predict network failures."​

"UFM Cyber-AI uses machine learning (ML) techniques and AI models for anomaly detection and prediction to learn the lifecycle patterns of data center network components."​

“The NVIDIA UFM platforms revolutionize data center networking management by combining enhanced, real-time network telemetry with AI-powered cyber intelligence and analytics to support scale-out InfiniBand data centers. ... The UFM Cyber-AI platform takes fabric management to the next level by adding an analytics layer powered by artificial intelligence. It enables data center operators to proactively monitor and manage the InfiniBand fabric, predicting and preventing potential failures, optimizing performance, and enhancing security. By analyzing telemetry data and historical patterns, UFM Cyber-AI can detect anomalies that may indicate security threats or operational issues, providing actionable insights to prevent downtime.”

NVIDIA NetQ is a highly scalable network operations toolset that provides visibility, troubleshooting, and validation of networks in real-time. It delivers actionable insights and operational intelligence about the health of data center networks—from the container or host all the way to the switch and port—enabling a NetDevOps approach.

NetQ can be used as the functional test platform for the network CI/CD in conjunction with NVIDIA Air. Customers benefit from testing the new configuration with NetQ in the NVIDIA Air environment (“digital twin”) and fix errors before deploying to their production. ​

In InfiniBand networks,P_Keys (Partition Keys)control communication boundaries. Each port can belong to one or more partitions with eitherfullorlimitedmembership.

From NVIDIA InfiniBand Documentation (Partitioning and P_Keys):

"A limited (or partial) membership permits a port to communicate only with other ports in the same partition that have full membership. It cannot communicate with other limited members, even if they are in the same P_Key partition."

This makes limited/partial membership ideal formulti-tenant security, where tenant ports can reach infrastructure ports (full members) butnotother tenant ports (limited members).

Incorrect Options:

A & Bare not valid InfiniBand P_Key types.

C (Full membership)allows unrestricted communication within the same partition.

Direct Memory Access (DMA) in InfiniBand networks allows data to be transferred directly between the memory of two devices without involving the CPU. This capability significantly reduces CPU overhead, lowers latency, and increases throughput, making it ideal for AI workloads that demand efficient data transfers.

Role-Based Access Control (RBAC)is implemented within NVIDIA's Unified Fabric Manager (UFM) to manage user permissions effectively. RBAC allows administrators toassign roles to users, each with specific permissions, ensuring that only authorized individuals can make changes to the fabric configuration. This structured approach to access control enhances security by limiting the potential for unauthorized modifications and streamlines the management of user privileges across the network.​