Cisco CCNP Data Center 350-601 Questions & Answers

• Question 271:

  A content delivery network sends video traffic to a multicast distribution device where the receiver requests the traffic from the multicast distribution device through an IGMP join message When the traffic reaches the multicast routing device from a CDN the switching network populates the multicast routing table in the group (S G) and the multicast distribution device sends the required traffic back to the receiver. Which feature is used to send back the trafic from the streamer to the receiver in the group (S G)?

  A. RP

  B. IGMP

  C. Reverse Path Forwarding

  D. Source Specific Multicast

  Correct Answer: C

• Question 272:

  Refer to the exhibit.

  

  A network engineer created a new role to be assigned to the SAN users. The requirement is for users to have these characteristics:

  1.

  permitted to show access to the system, SNMP, module, and hardware information.

  2.

  permitted to run debug zone and exec fcping commands.

  3.

  restricted from accessing show feature environment command.

  Which configuration set meets these requirements?

  A. MDS-B(config)# role name default-role MDS-B(config-role)# rule 5 deny show feature environment

  B. MDS-B(config)# role name default-role MDS-B(config-role)# rule 5 permit show feature module MDS-B(config-role)# rule 6 deny *

  C. MDS-B(config)# role name san-users MDS-B(config-role)# rule 3 deny show feature environment

  D. MDS-B(config)# role name san-users MDS-B(config-role)# rule 3 permit show feature system MDS-B(config-role)# rule 4 permit show feature hardware MDS-B(config-role)# rule 5 permit show feature module

  Correct Answer: D

• Question 273:

  Refer to the exhibit.

  

  A secure server that provides services to EPG-2 must be placed in EPG-1. The remaining EPGs--EPG-2, EPG-3. and EPG-4--must communicate without any contracts. Which set of actions accomplishes this goal?

  

  A. Option A

  B. Option B

  C. Option C

  D. Option D

  Correct Answer: B

• Question 274:

  A network administrator must create a Linux container on a Cisco Nexus Series Switch. The container requires 10 percent of the CPU of the switch and 1024 MB of RAM to run successfully. Which task provides the necessary resources?

  A. Edit the container properties with the guestshell run command.

  B. Increase the compute resources with the guestshell resize command.

  C. Enable the Bash shell of the switch with the feature bash command

  D. Modify resource allocation with the virtual-service resize command.

  Correct Answer: B

• Question 275:

  An engineer must configure Cisco Nexus 9000 Series Switches for Cisco UCS Director integration The configuration must enable automated onboarding of the switches as they come online. For security purposes, the switches must have the bare minimum of connection methods enabled. The connection protocol must allow authentication through credentials. Which protocol must be configured on the switches to allow automated onboarding?

  A. SNMP

  B. Telnet

  C. SSH

  D. HTTPS

  Correct Answer: D

• Question 276:

  Due to a newly announced security advisory, a company has been Informed that they must update the configuration of 500 network devices that ate deployed n their network. The engineering team must assist the operations team to prepare for this update. The operations team does not have direct access to the network devices and must log in via a Linux server. This Is the first time that the team is making a network- wide configuration and must change all devices without first installing additional software on the network devices. The operations team is unfamiliar with automation and scripting technologies. Which automation tool must be used to accomplish this goal?

  A. Chef

  B. Ansible

  C. Puppet

  D. Saltstack

  Correct Answer: B

• Question 277:

  Refer to the exhibit.

  

  The gateway of Server 1 is in the VLAN 100 SVI on N5K-1 and the gateway of Server 2 is in the VLAN 200 SVI on N5K-2 Server 1 must connect to Server 2 using unidirectional traffic. Which action accomplishes this requirement?

  A. Add VLAN 100 and 200 to the allowed VLANs list on the Ethernet 1/1 interface on NK5- 1.

  B. Assign VRF WEB membership to interfaces VLAN 150 and 200 on N5K-2.

  C. Configure access VLAN 100 on interface Ethernet 1/2 on N5K-2.

  D. Create a static route in VRF WEB for the subnet of Server 2 on N5K-1

  Correct Answer: D

  Static route which we see in configuration is not for VRF WEB but for global one. We need to add static routing in VRF WEB Example switch# configure terminal switch(config)# vrf context StaticVrf switch(config-vrf)# ip route 192.0.2.0/8 192.0.2.10 switch(config-vrf)# copy running-config startup-config

• Question 278:

  A network engineer needs a tool to automate the provisioning of Cisco UCS Service Profiles. The administrator has limited programming knowledge but is skilled with scripting tools. The tool must include existing support for Cisco UCS

  configuration. Additionally, the administrator will eventually use the solution to manage Cisco UCS C-Series Rack Servers.

  Which tool meets these requirements?

  A. Cisco DCNM

  B. Python scripts

  C. PowerShell

  D. Bash scripts

  Correct Answer: C

• Question 279:

  An engineer must implement a new VRF that permits communication between all endpoint groups (EPGs) by default. The new EPGs and bridge domains (BDs) that are created in the new VRF must not require additional configuration to permit traffic between the newly created EPGs or BDs.

  Which action accomplishes this goal?

  A. Provide and consume a permit any contract on the VRF level

  B. Create a VRF in the common tenant.

  C. Place all EPGs in the preferred group.

  D. Implement a global contract.

  Correct Answer: A

  A requires no additional configuration on EPG level.

  There are several different configuration options available to enable open communication amongst many/all EPGs on a Cisco ACI fabric:

  Contract with vzAny: vzAny represents all EPGs, ESGs and external EPGs on a VRF instance. Providing and consuming an open "permit-any" contract on vzAny allows open communication between all endpoints on a VRF instance.

  Preferred Groups - Assigning multiple EPGs to a Preferred Group allows open communication between the EPGs in the Preferred Group, with the restriction that there can only be one Preferred Group per VRF instance.

  Disable security - We do not recommend this option because configuring the VRF instance to "unenforced" mode converts the VRF instance to "permit only," allowing open communication between all endpoints in the VRF instance. Disabling

  security implicitly disables security contracts and advanced functionality such as service graphs.

• Question 280:

  A company plans to deploy a Cisco HyperFlex solution for data-intensive applications and databases The proposed solution should offer the highest performance with high consistency and low latency.

  Which Cisco HyperFlex storage configuration should be used?

  A. All-HDD

  B. AII-NVMe

  C. All-Flash

  D. Hybrid

  Correct Answer: B