Cisco CCNP Data Center 350-601 Questions & Answers

• Question 291:

  An engineer must implement private VLANs for a group of Cisco UCS 8-Series servers. The primary VLAN is present, But the secondary VLAN must Be added to Both fabrics.

  Which configuration set accomplishes this task?

  A. UCS-A# scope eth-uplink UCS-A /eth-uplink # create vlan vlan1981 1981 UCS-A /eth-uplink/vlan* # set sharing none

  B. UCS-A# scope eth-uplink UCS-A /eth-uplink # create vlan vlan1981 1981 UCS-A /eth-uplink/vlan* # set sharing isolated

  C. UCS-A# scope eth-uplink UCS-A /eth-uplink # scope fabric a UCS-A /eth-uplink/fabric # create vlan vlan1981 1981 UCS-A /eth-uplink/fabric/vlan* # set sharing secondary

  D. UCS-A# scope eth-uplink UCS-A /eth-uplink # scope fabric a UCS-A /eth-uplink/fabric # create vlan vlan1981 1981 UCS-A /eth-uplink/fabric/vlan* # set sharing private

  Correct Answer: B

  sharing parametres - set sharing {isolated | none | primary} https://www.cisco.com/en/US/docs/unified_computing/ucs/sw/cli/config/guide/1.4.1/CLI_Config_Guide_1_4_1_chapter14.html#task_1BD62D1911F74857BD5B2EBB458CE4EC

• Question 292:

  Which virtualization feature is provided by network-attached storage?

  A. ALUA path redirection

  B. hypervisor host boot LUN

  C. VM cluster shared disk

  D. raw device passthrough

  Correct Answer: C

• Question 293:

  An engineer must implement protection against ICMP DoS attacks on a Cisco Nexus 9000 Series Switch. The requirement is to rate-limit ICMP without denying all other ICMP traffic. The ICMP trafic currently passing through the Cisco Nexus 9000 device must not be affected. Which configuration accomplishes these goals?

  A. Configure SNMP traps to send the ICMP notification if the CPU utilization is more than 90%.

  B. Reconfigure the Layer 3 interfaces to be in the non-default VRF and ICMP broadcast storm control

  C. Create an access list to deny ICMP traffic and apply it to all interlaces in the inside direction.

  D. Apply a control plane service policy that matches all ICMP traffic to drop the traffic fiat exceeds the threshold.

  Correct Answer: D

• Question 294:

  A network administrator attempts to automate the provisioning of several new Cisco Nexus switches. The administrator prepares a bootstrap configuration script for the task Due to the number of switches a zero- touch provisioning solution is preferred Additionally, some switches arrive with outdated software and should be automatically upgraded as part of the provisioning workflow

  Which solution meets the requirements'

  A. DHCP

  B. Ansible

  C. NX-API

  D. POAP

  Correct Answer: C

• Question 295:

  Refer to the exhibit.

  

  A network engineer must run a continuous capture on a port A script called ''capture'1 is created to start and stop the capture task. Which command sequence makes the capture persistent after a reboot?

  

  A. Option A

  B. Option B

  C. Option C

  D. Option D

  Correct Answer: C

• Question 296:

  Refer to the exhibit.

  

  The communication between the web server and the application server experiences poor performance The network engineer must collect the traffic between the two servers, including the payload for more investigation The collected data must be sent from the remote site to the headquarters.

  Which action accomplishes this goal?

  A. Configure NetFlow on N5K-1 to send the data to the monitor server.

  B. Configure SNMP on N5K-1 to send the data to the monitor server.

  C. Configure a SPAN session between N5K-1 and N5K-2.

  D. Configure an ERSPAN session between N5K-1 and N5K-2.

  Correct Answer: D

• Question 297:

  An engineer is configuring HTTPS access to Cisco UCS Manager

  The engineer created a keyring and created the certificate request for the keyring Cisco UCS Manager continues to receive untrusted messages from a Firefox browser and a Chrome browser.

  Which action must be taken as the next step in the HTTPS access configuration?

  A. Create a trusted point

  B. Sign the certificate using the Cisco UCS Manager.

  C. Obtain a validated certificate from Cisco

  D. Install a trusted certificate in the browser store

  Correct Answer: A

• Question 298:

  Refer to the exhibit.

  

  A user must be granted management access to the Cisco Nexus 9000 Series Switch using AAA servers The RADIUS servers are configured to accept login requests from the same Layer 2 subnet of the switch The user must be permitted to log in with these requirements:

  1.

  RADIUS server 1 must be used to log in via a console.

  2.

  RADIUS server 2 must be used to log in via SSH.

  Which two actions meet these requirements?

  A. Enable command authorization to RAD1 and RAD2 for all successful logins.

  B. Change the dead timer for RAD1 and RAD2 to 1 minute.

  C. Set the RADIUS source interface to be mgmt0 for group RAD1 and VLAN 22 for group RAD2

  D. Configure the authentication login to use group RAD1 for console and group RAD2 for remote access.

  Correct Answer: AD

• Question 299:

  A SAN administrator must Implement Infrastructure monitoring for the Fibre Channel storage environment. The storage environment consists of a standalone Cisco Nexus 9000 Series Switch and Cisco MDS 9000 Series Switches. The goal is to be able to visualize the SAN support VXLAN overlays and identify storage slow drain issues. Which monitoring solution accomplishes this task?

  A. Cisco Prime Infrastructure

  B. Cisco DCNM

  C. Cisco APIC

  D. Cisco Intersight

  Correct Answer: B

• Question 300:

  An engineer must recover the Cisco UCS system The full backup is available on a backup SCP server Which set of actions recovers the configuration of the Cisco UCS Manager?

  A. Create an import-config task. Set the action to Replace.

  B. Copy the backup file to a USB drive. Copy the running-config.

  C. Factory reset the fabric interconnect. Select the Restore feature.

  D. Create a scheduled restore job. Reboot the UCS Manager.

  Correct Answer: C

  Full state--A binary file that includes a snapshot of the entire system. You can use the file generated from this backup to restore the system during disaster recovery. This file can restore or rebuild the configuration on the original fabric interconnect, or recreate the configuration on a different fabric interconnect. You cannot use this file for an import

  https://www.cisco.com/en/US/docs/unified_computing/ucs/sw/gui/config/guide/141/UCSM_GUI_Configuration_Guide_141_chapter43.html