Cisco CCNP Data Center 300-615 Questions & Answers

• Question 61:

  An engineer troubleshoots a custom AV pair that a client created on an external authentication server to map a read-only role for a specific security domain. Which AV pair solves the problem?

  A. shell:domains=Security_Domain_1//Read_Role_1|Read_Role_2

  B. shell:domains=Security_Domain_1/Write_Role_1|Read_Role_2

  C. shell=Security_Domain_1/Read_Role_1|Read_Role_2

  D. shell:domains=Security_Domain_1/Read_Role_1|Read_Role_2

  Correct Answer: A

• Question 62:

  Refer to the exhibit.

  

  The scheduler was configured to save the running-config automatically daily. However, the scheduler is returning the error presented. Which action resolves the issue?

  A. Reconfigure the scheduler using the admin user

  B. Use the kstack attribute for copying the configuration file

  C. Remove vrf management from the command

  D. Change the file transfer protocol to TFTP in scheduler job

  Correct Answer: C

• Question 63:

  Refer to the exhibit.

  

  RBAC is configured on the MDS switch for a new SAN administrator engineer to work on the FSPF configuration. However, after the configuration is applied the engineer who was assigned the FSPF_Admin role cannot perform any configuration changes. Which action resolves the issue?

  A. Write rule 2 before rule 1

  B. Remove rule 1 from the role

  C. Configure the switch license for RBAC

  D. Reload the switch

  Correct Answer: A

• Question 64:

  A client reports that many flaps and server cluster disconnects are occurring in its data center. While troubleshooting the issue, an engineer discovers that a network attack is hitting the Cisco Nexus 7000 Series Switches and that the source IP addresses are spoofed. Which first-line security solution resolves this issue?

  A. Dynamic ARP Inspection

  B. Unicast RPF

  C. IP Source Guard

  D. Storm Control

  Correct Answer: A

• Question 65:

  Refer to the exhibit.

  

  An engineer must strictly enforce the port security configuration database in the Fibre Channel fabric. A new device has been connected to the Fibre Channel storage interface that was configured for port security. The port security was enabled for the VSAN that the port belongs to. Despite the configuration, the rogue devices can log into the fabric. Which action resolves the issue?

  A. Commit the active database with the port-security database copy vsan 1 command

  B. Disable auto learn in VSAN 1 with the no port-security auto-learn vsan 1 command

  C. Disable CFS distribution with the no port-security distribute vsan 1 command

  D. Commit the changes with the port-security commit copy vsan 1 command

  Correct Answer: B

• Question 66:

  Refer to the exhibit.

  

  An engineer discovers that if the vPC peer link goes down, half of the devices in VLAN 20 experience connectivity issues with the external networks Which action resolves the issue?

  A. Configure a dedicated Layer 3 link between vPC peers

  B. Allow non-vPC VLANs on a second trunk between the two vPC peers

  C. Add the non-vPC SVIs in the dual-active exclude VLAN list

  D. Exclude the non-vPC VLANs from vPC peer link

  Correct Answer: B

  Reference: https://www.cisco.com/c/dam/en/us/td/docs/switches/datacenter/sw/design/vpc_design/vpc_best_practices_design_guide.pdf

• Question 67:

  Refer to the exhibit.

  

  A network administrator must delete a feature group from a Cisco Nexus 5000 Series Switch. Which action resolves the issue?

  A. Detach the association with the no rule command within the role configuration mode

  B. Detach the association with the no role command within the feature-group configuration mode

  C. Detach the association with the no rule command within the feature-group configuration

  D. Detach the association with the no role command within the role configuration mode

  Correct Answer: A

• Question 68:

  Refer to the exhibit.

  

  An engineer is troubleshooting the connectivity between Server-1 and Server-2. Which action resolves the connectivity issue?

  A. Enable BGP advertise pip feature on both leaf switches

  B. Configure the same source IP address on NVE and virtual peer link on leaf switches

  C. Classify CFS messages for strict priority queue on spine switches

  D. Change all ports on spine switches as port-type fabric

  Correct Answer: A

  Reference: https://www.cisco.com/c/en/us/td/docs/dcn/nx-os/nexus9000/101x/configuration/vxlan/cisco-nexus-9000-series-nx-os-vxlan-configuration-guide-release-101x/m_configuring_vpc_multihoming.pdf

• Question 69:

  Refer to the exhibit.

  

  A functioning trunk port Ethernet1/48 exists between two identical Cisco Nexus 5000 Series Switches. The interfaces on the switches support the MACsec feature and are configured identically. The trunk port stops functioning. Which action should be taken to resolve the issue?

  A. Disable and then enable the port

  B. Enable the license for the trunk ports to support MACsec

  C. Lower the MTU value to less than 9216 bytes

  D. Configure the PMK with a length of 2048 bytes

  Correct Answer: B

• Question 70:

  Refer to the exhibit.

  

  A network engineer is troubleshooting a Cisco Nexus 5000 Series Switch. The interface between the server and the switch is nonoperational and is expected to operate at 10 Gbps. The drain rate of the interface is 3 Mbps. Which action resolves the issue?

  A. Configure pause error-disable recovery

  B. Enable link level pause on the interface

  C. Reset priority flow counters

  D. Set priority flow control pause

  Correct Answer: A

  Reference: https://www.cisco.com/c/en/us/td/docs/switches/datacenter/nexus5000/sw/troubleshooting/guide/N5K_Troubleshooting_Guide/n5K_ts_fcoe.html