Cisco CCNP Data Center 300-610 Questions & Answers

• Question 161:

  An engineer needs to configure multiple network devices using Ansible Device passwords must meet these requirements:

  1.

  be stored securely

  2.

  not be visible as plaintext

  3.

  be available to Ansible playbooks for executing scripts Which solution must the engineer choose?

  A. Encrypt a password variable file using Ansible Vault.

  B. Store the passwords within a Git repository Secrets Manager

  C. Encrypt passwords as Ansible environment variables

  D. Encrypt the passwords within the Ansible inventory file.

  Correct Answer: A

• Question 162:

  A Cisco engineer is preparing a service profile template for a design, which consists of 20 x UCS B200M6 blade servers 2 x UCS 6454 Fabric Interconnect in End Host Mode, and 3 x UCS 5108 server chassis with 2408 Fabric Extenders The blade servers are equipped with VIC 1480 adapters The engineer does not configure a vNIC/vHBA placement policy in the service profile and the vNICs and vHBAs are assigned to the vCon in a particular order What is the mapping scheme in which Cisco UCS assigns the vCons based on the type of server and the selected virtual slot?

  A. linear ordered

  B. network mesh

  C. cross match

  D. round robin

  Correct Answer: D

• Question 163:

  An engineer must deploy a Cisco HyperFlex system at two data centers. For redundancy reasons, the setup must achieve data protection in case of an entire site failure. The data must be available on both sites at all times to keep the recovery time objective to a minimum.

  Which Cisco HyperFlex deployment model meets these requirements?

  A. ROBO cluster

  B. stretched cluster

  C. edge with four nodes or more

  D. standard with eight nodes

  Correct Answer: B

• Question 164:

  An engineer must design a VXLAN EVPN network. The solution should optimize broadcast, unknown unicast, and multicast (BUM) and short BUM replication, and use PIM anycast RP. Which solution should be included in the design?

  A. PIM sparse mode

  B. ingress replication

  C. head-end replication

  D. PIM dense mode

  Correct Answer: A

  https://www.cisco.com/c/en/us/td/docs/ios/solutions_docs/ip_multicast/White_papers/anycast.html

• Question 165:

  An ACI deployment must:

  1.

  Only use a proxy for border leaf switches.

  2.

  Classify incoming traffic on L3OUT.

  3.

  Immediately update the endpoint database when the endpoint moves between leaf switches.

  Which VRF configuration must be used?

  A. Ingress Policy Control enforcement Egress Policy Control enforcement IP Dataplane Learning enabled

  B. Enforce Subnet Check disabled IP Dataplane Learning disabled Ingress Policy Control enforcement

  C. Enforce Subnet Check enabled IP Dataplane Learning enabled Egress Policy Control enforcement

  D. Ingress Policy Control enforcement Enforce Subnet Check enabled IP Dataplane Learning disabled

  Correct Answer: A

• Question 166:

  Which address pool is used when a vHBA template is created?

  A. MAC

  B. WWPN

  C. IP

  D. UUID

  Correct Answer: B

  Reference:

  https://www.cisco.com/c/en/us/td/docs/unified_computing/ucs/sw/gui/config/guide/2-1/b_UCSM_GUI_Configuration_Guide_2_1/b_UCSM_GUI_Configuration_Guide_2_1_chapt er_011010.html

• Question 167:

  An engineer must design a solution based on Cisco Nexus 7709 Switches. The solution must connect test and development network segments and separate the enterprise applications from the production network. The network security team requires routing instances and the IP stack to be completely separated from each other and for traffic between the environments to undergo a deep packet inspection. The development team also requests the ability to allocate additional physical interfaces from the Cisco Nexus 7709 device in each environment.

  Which solution meets these requirements?

  A. 1. Create a VRF for the testing and development environments.

  2. Use ACLs to control traffic between the two environments.

  B. 1. Enable new routing instances for the testing and development environments in the same VDC.

  2. Control reachability by using firewall access policies.

  C. 1. Assign a separate VDC for the testing and development environments.

  2. Place a firewall between the VDCs.

  D. 1. Create a separate VRF for the testing and development environments.

  2. Control reachability by using firewall access policies.

  Correct Answer: C

• Question 168:

  An engineer must logically partition two Cisco Nexus 7000 Series Switches into two environments called Test_39919596 and Production_59423879. The environments must use only F2-Series line cards and be limited to a maximum of 265 port-channels.

  Which Cisco Nexus feature must be used?

  A. vPC

  B. VDC

  C. vFC

  D. VRF

  Correct Answer: B

• Question 169:

  When planning to deploy a load-balancing service as a managed node, which ACI configuration must be included?

  A. BGP ECMP

  B. Layer 4 to Layer 7 device package

  C. inline load-balancing device

  D. ITD

  Correct Answer: B

  Reference: https://www.cisco.com/c/en/us/td/docs/switches/datacenter/aci/apic/sw/1-x/ACI_Best_Practices/b_ACI_Best_Practices/b_ACI_Best_Practices_chapter_0110.html

• Question 170:

  A network engineer is using a Cisco UCS environment connected to a Fibre Channel storage array. The Cisco UCS environment must be connected to an existing SAN network, and several Cisco MDS 9000 Series Switches must be added to increase storage density. The solution must not exhaust the SAN network from the list of available domain IDs after connecting Also, most of the SAN traffic must be mapped from the Cisco UCS blades to a specific group of the fabric interconnect ports

  Which two features must be deployed to meet these requirements? (Choose two.)

  A. end host mode

  B. static PIN grouping

  C. priority flow control

  D. N-Port lD virtualization

  E. dynamic port pinning

  Correct Answer: CE