Cisco CCNP 350-601 Questions & Answers

• Question 1:

  DRAG DROP

  An engineer must configure Cisco UCS Manager to accept only HTTPS connections that use TLS 1 2 The cipher security level must be high and the length of the keyring key value must be 2048 bits.

  Drag and drop the code snippets from the right onto the blanks in the code on the left to accomplish these goals. Not all commands are used.

  Select and Place:

  

  Correct Answer:

  

• Question 2:

  An engineer must perform a backup and restore in Cisco UCS to rebuild the system in a disaster recovery scenario. The backup file must be encrypted to prevent the passwords from being stored as cleartext. Which backup configuration meets these requirements?

  A. Full state backup over TFTP

  B. Logical configuration backup over SCP

  C. System configuration backup over FTP

  D. All configuration backup over SFTP

  Correct Answer: A

• Question 3:

  An engineer is implementing VSANs on a Cisco MDS 9000 Series Switch with a native Fibre Channel. The deployment must meet these requirements:

  1.

  The host on port fc1/1 must be assigned to VSAN 10.

  2.

  The port channel 10 ISL must pass multiple VSANs, including VSAN 10.

  Which configuration set meets these requirements?

  A. Activate VSAN 10 in the vFC interface. Associate VSAN 10 to interface vfc 1/1. Enable vsan F-port-channel-trunk on the ISL. Set encapsulation EISL on the switch port.

  B. Create VSAN 10 in the VSAN database. Bind VSAN 10 to interface fc1/1 in the VSAN database. Enable VSAN trunking on the ISL. Allow VSAN 10 on the ISL.

  C. Configure VSAN 10 in the interface configuration. Attach VSAN 10 to the VSAN database. Enable VSAN trunking on fc1/1. Filter all VSAN on the ISL.

  D. Disable VSAN 1 in the VSAN database. Assign VSAN 10 to the ISL. Enable VSAN trunking on the port channel members. Permit VSAN 10 in the FLOGI database.

  Correct Answer: B

• Question 4:

  An engineer must configure port aggregation between two Cisco MDS 9000 Series Switches. The solution must meet these requirements:

  1.

  Suspend member interface if parameters mismatch.

  2.

  Load-balance traffic on multiple ports.

  3.

  Support traffic from multiple VSANs.

  Which port channel configuration must be used?

  A. Port type: FT Port Port channel mode: Active

  B. Port type: F Port Port channel mode: On

  C. Port type: E Port

  Port channel mode: Active

  D. Port type: TE Port Port channel mode: On

  Correct Answer: D

  https://www.cisco.com/en/US/docs/switches/datacenter/mds9000/sw/6_2/configuration/guides/int/nx-os/pc.html#wp1072515

• Question 5:

  An engineer implements an environment with multiple traffic types on a consolidated I/O link between Cisco Nexus 9000 Series Switch and MDS 9000 Series Switch. The configuration must meet these requirements:

  1.

  The unified I/O link must support LAN and SAN traffic.

  2.

  A single, multipurpose Ethernet transport must be used.

  3.

  The configuration must discard MAC addresses that are not part of the current fabric.

  4.

  The QoS markings must be preserved.

  Which configuration set meets the requirements?

  A. MDS-A(config)# interface fcip4 MDS-A(config-if)# use-profile 8 MDS-A(config-if)# peer-info ipaddr 200.200.100.7

  B. N9K-2(config)# interface Eth2 N9K-2(config-if)# switchport mode trunk N9K-2(config-if)# auto qos trust dscp

  C. MDS-B(config)# interface fc3 MDS-B(config-if)# switchport trunk mode on MDS-B(config-if)# switchport trunk allowed vsan 2-5

  D. N9K-1(config)# fcoe fcmap 0e.fc.1d N9K-1(config)# int vfc 1 N9K-1(config-if)# bind interface e1/3

  Correct Answer: D

• Question 6:

  An engineer must create a new Cisco UCS user account to perform these actions:

  1.

  Modify systems logs, faults, and power management settings.

  2.

  View access to all other configuration in the UCS domain.

  Which two roles must be assigned to the user to permit these actions? (Choose two.)

  A. Server Compute

  B. Read-Only

  C. Operations

  D. Facility Manager

  E. Administrator

  Correct Answer: CD

• Question 7:

  An engineer is designing a cloud solution for an organization. The security requirements mandate that the cloud must be hosted in a local data center but leverage the remote data center for remote backups. Additionally, the workloads in the data center must be scaled out to a known cloud provider in the future. Which cloud deployment model must be used to meet these requirements?

  A. public cloud

  B. hybrid cloud

  C. private cloud

  D. edge cloud

  Correct Answer: B

• Question 8:

  The Cisco TACACS+ on a Cisco Nexus Series Switch must authenticate any user attempting to access the device and fail over to the local account if the TACACS+ sever becomes unavailable.

  Which command accomplishes these goals?

  A. aaa authentication login default fallback error local

  B. aaa authentication login console group local

  C. aaa authentication login default local

  D. aaa authentication login default group ISE local

  Correct Answer: B

• Question 9:

  A QoS policy on Cisco UCS must meet these requirements:

  1.

  No-drop class must be configured.

  2.

  Jumbo frames must be enabled without fragmentation.

  Which configuration must be implemented to mast these conditions?

  A. Configure slow-drain timers and specify an MTU value of 9100 bytes.

  B. Create a Flow Control Policy and specify an MTU value of 9000 bytes.

  C. Create a QoS system class and specify an MTU value of 9216 bytes.

  D. Configure Platinum system class and specify an MTU value of 9100 bytes.

  Correct Answer: D

• Question 10:

  A network automation engineer must configure a Cisco NX-OS REST API on a Cisco 9000 Series Switch with these requirements:

  1.

  NX-API REST and the DME database must be enabled.

  2.

  The NX-API REST must listen for HTTP traffic on port 83.

  3.

  The HTTPS certificate must be uploaded.

  Which configuration set must be used to accomplish these goals?

  A. feature nxapi nxapi (tcp) port 83 nxapi certificate {httpscrt}

  B. feature nxapi nxapi (tcp) port 83 nxapi certificate {httpscrt} nxapi certificate enable

  C. feature nxapi nxapi (http) port 83 nxapi certificate {httpscrt}

  D. feature nxapi nxapi {http} port 83 nxapi certificate {httpscrt | httpskey} nxapi certificate enable

  Correct Answer: D

  https://www.cisco.com/c/en/us/td/docs/switches/datacenter/nexus9000/sw/93x/progammability/guide/b-cisco-nexus-9000-series-nx-os-programmability-guide-93x/b-cisco-nexus-9000-series-nx-os-programmability-guide93x_chapter_010011.html