Cisco CCNP Data Center 350-601 Questions & Answers

• Question 211:

  A network administrator must configure an extra keyring in Cisco UCS Manager. The key must provide a high level of encryption and secure authentication when users use the web interface. Which configuration command set must be applied to meet these requirements?

  

  A. Option A

  B. Option B

  C. Option C

  D. Option D

  Correct Answer: B

  UCS-A# scope system UCS-A /system # scope services UCS-A /system/services # enable https UCS-A /system/services* # set https port 443 Warning: When committed, this closes all the web sessions. UCS-A /system/services* # set https keyring kring7984 UCS-A /system/services* # set https cipher-suite-mode high UCS-A /system/services* # set https ssl-protocol tls1-2 UCS-A /system/services* # commit-buffer

  Reference: https://www.cisco.com/c/en/us/td/docs/unified_computing/ucs/ucs-manager/CLI-User-Guides/Admin-Management/3-1/b_Cisco_UCS_Manager_CLI_Administration_Mgmt_Guide_3_1/ b_Cisco_UCS_Manager_CLI_Administration_Mgmt_Guide_3_1_chapter_0110.html

• Question 212:

  An engineer must configure HTTPS secure management for Cisco UCS Manager using a key ring named kr2016 and a key size of 1024 bits. The environment consists of a primary fabric interconnect named UCS-A and a secondary fabric interconnect named UCS-B. Which command sequence must be used to accomplish this goal?

  

  A. Option A

  B. Option B

  C. Option C

  D. Option D

  Correct Answer: B

  Reference: https://www.cisco.com/c/en/us/td/docs/unified_computing/ucs/ucs-manager/CLI-User-Guides/Admin-Management/4-0/b_Cisco_UCS_Manager_CLI_Administration_Mgmt_Guide_4-0/ b_Cisco_UCS_Manager_CLI_Administration_Mgmt_Guide_4-0_chapter_0110.html

• Question 213:

  A network engineer needs to configure system logging on the MDS switch. The messages must be displayed with the severity level of "warning" and above. For security reasons, the users must be logged out of the console after 5 minutes of inactivity. Which configuration must be applied to meet these requirements?

  A. MDS-A(config)# logging console 5 MDS-A(config-console)# exec-timeout 300

  B. MDS-A(config)# line console MDS-A(config-console)# speed 38400 MDS-A(config-console)# exec-timeout 5 MDS-A(config)# logging console 4

  C. MDS-A(config)# logging line 4 MDS-A(config-console)# session-limit 300

  D. MDS-A(config)# console MDS-A(config-console)# speed 38400 MDS-A(config-console)# session-limit 5 MDS-A(config)# logging console 5

  Correct Answer: B

  Reference: https://www.cisco.com/c/en/us/td/docs/switches/datacenter/mds9000/sw/6_2/configuration/guides/fundamentals/b_Cisco_MDS_9000_Series_NX-OS_Fundamentals_Configuration_Guide/b_Cisco_MDS_9000_Series_NXOS_Fundamentals_Configuration_Guide_Release_6_chapter_0100.html

• Question 214:

  Refer to the exhibit.

  

  Which VLANs are capable to be assigned on vPC interfaces?

  A. 100-103

  B. 100-104

  C. 100-102

  D. 100-105

  Correct Answer: D

• Question 215:

  An engineer need to implement a solution that prevents loops from occurring accidentally by connecting a switch to interface Ethernet1/1. The port is designated to be used for host connectivity.

  Which configuration should be implemented?

  A. switch# configure terminal switch(config)# interface Ethernet1/1 switch(config-if)# spanning-tree bpduguard enable

  B. switch# configure terminal switch(config)# interface Ethernet1/1 switch(config-if)# spanning-tree guard loop

  C. switch# configure terminal switch(config)# interface Ethernet1/1 switch(config-if)# spanning-tree loopguard default

  D. switch# configure terminal switch(config)# interface Ethernet1/1 switch(config-if)# spanning-tree bpdufilter enable

  Correct Answer: A

  Reference: https://www.cisco.com/c/m/en_us/techdoc/dc/reference/cli/nxos/commands/l2/spanning-tree-bpduguard.html#:~:text=To%20enable%20bridge%20protocol%20data,no%20form%20of%20this%20command.

• Question 216:

  Refer to the exhibit.

  

  An engineer needs to implement a monitoring session that should meet the following requirements:

  1.

  Monitor traffic from leaf to leaf switches on a Cisco ACI network

  2.

  Support filtering traffic from Bridge Domain or VRF Which configuration must be added to meet these requirements?

  A. interface eth 1/2 switch 101

  B. interface eth 1/2 leaf 101

  C. application app1 epg epg1

  D. application epg epg1 app1

  Correct Answer: C

  Reference: https://www.cisco.com/c/en/us/td/docs/switches/datacenter/aci/apic/sw/1-x/troubleshooting/b_APIC_Troubleshooting/b_APIC_Troubleshooting_chapter_0110.html

• Question 217:

  An engineer is configuring a vHBA template in UCS Manager. The engineer needs to specify the logical addresses used by the vHBA and the path through which the SAN traffic flows. Which two resources must be specified in the vHBA template? (Choose two.)

  A. MAC addresses

  B. WWPNPool

  C. WWNN

  D. VLAN ID

  E. Fabric ID

  Correct Answer: BE

  https://www.cisco.com/c/en/us/products/collateral/servers-unified-computing/ucs-manager/whitepaper_c11-697337.html

• Question 218:

  Which component is upgraded by using an EPLD upgrade on a Cisco Nexus 9000 Series Switch?

  A. dual-homed fabric extenders

  B. BIOS

  C. field-programmable gate arrays

  D. ISSU of the NX-OS version

  Correct Answer: C

• Question 219:

  Refer to the exhibit.

  

  An engineer configures port security on a Cisco Nexus 9000 Series Switch. The requirement is to prevent any newly learned MAC addresses from forwarding traffic on the interface. Also, the already learned MAC addresses must not be affected by the changes.

  Which configuration meets these requirements?

  A. switchport port-security violation shutdown

  B. switchport port-security violation isolate

  C. switchport port-security violation protect

  D. switchport port-security violation restrict

  Correct Answer: C

• Question 220:

  A network engineer repeatedly saves a configuration on Catalyst switches to NVRAM using the write memory command. What action should be taken to implement the same action on Nexus switches?

  A. Use the write memory command to save the configuration.

  B. Use the alias command to use the write memory command.

  C. Use the exit command to leave the configuration mode and save the configuration automatically.

  D. Use the wri command to use the copy running-config startup-config command.

  Correct Answer: B

  Reference: https://community.cisco.com/t5/switching/write-command-on-nexus-switchs/td-p/1958386