Cisco CCNP Data Center 350-601 Questions & Answers

• Question 331:

  A storage array must be connected to port ethernet1/10 on a Cisco MDS 9000 Series Switch In addition, the array must connect using the FCoE protocol and be single-homed. Which configuration meets these requirements?

  

  A. Option A

  B. Option B

  C. Option C

  D. Option D

  Correct Answer: D

• Question 332:

  Refer to the exhibit.

  

  All switches are configured with the default OSPF priority. Which configuration should be applied to ensure that the SW2 Cisco Nexus switch controls the LSA floods and advertises the network to the remaining nodes in the OSPFv2 area?

  A. SW2# configure terminal SW2 (config)# interface ethernet 1/1 SW2 (config-if)# ip ospf priority 255

  B. SW2# configure terminal SW2 (config)# interface ethernet 1/1 SW2 (config-if)# ip ospf priority 1

  C. SW2# configure terminal SW2 (config)# router ospf 1 SW2 (config-router)# router-id 10.10.10.22

  D. SW2# configure terminal SW2 (config)# interface ethernet 1/1 SW2 (config-if)# ip ospf priority 0

  Correct Answer: A

  Priority in OSPF is mainly used to influence/determine a designated router/backup designated router for a network. By default, the priority is 1 on all routers. A router with a high priority will always win the DR/BDR election process.

• Question 333:

  A customer undergoes an IT security review assessment. The auditor must have read-only access to the Cisco Nexus 9000 Series Switch to perform the configuration review. The customer implements this security role for the auditor:

  role name audit rule 1 permit command * rule 2 - Output omitted -username auditor password C4SAFF1B05EB1968$c0 role audit

  Which configuration snippet must complete the configuration?

  A. deny command configure terminal

  B. deny command write *

  C. permit command show *

  D. permit command enable

  Correct Answer: A

• Question 334:

  An engineer must implement a solution that prevents untrusted DHCP servers from compromising the network. The feature must be configured on a Cisco Nexus 7000 Series Switch and applied to VLAN 10. The legitimate DHCP servers are connected to interface Ethernet 2/4. Which configuration set must be used to meet these requirements?

  A. n7k-1(config)# ip dhcp snooping vlan 10 n7k-1(config)# interface Ethernet2/4

  n7k-1(config-if)# ip dhcp snooping verify vlan 10

  B. n7k-1(config)# ip dhcp snooping verify n7k-1(config)# interface Ethernet2/4 n7k-1(config-if)# ip dhcp snooping verify vlan 10

  C. n7k-1(config)# ip dhcp snooping vlan 10 n7k-1(config)# interface Ethernet2/4 n7k-1(config-if)# ip dhcp snooping trust

  D. n7k-1(config)# ip dhcp snooping verify n7k-1(config)# vlan configuration 10 n7k-1(config-vlan)# ip dhcp snooping trust

  Correct Answer: C

• Question 335:

  An engineer implements a Cisco UCS C-Series Server that must adhere to these security requirements:

  Unencrypted communication must be disabled. The session timeout must not exceed 15 minutes. Unencrypted traffic must be automatically diverted. CLI-based management must use nondefault ports.

  Which configuration set meets these requirements?

  A. SSH Enabled SSH Port: 8022 SSH Timeout: 1200 IPMI over LAN Enabled

  B. HTTP Port: 80 / HTTPS Port: 443 Session Timeout: 900 Redirect HTTP to HTTPS Enabled SSH Port: 2022

  C. Redfish Enabled checked Redfish Port: 443 SSH Enabled checked HTTPS Port: 8443

  D. XML API Enabled HTTP Port: 8080 / HTTPS Port: 8443 IPMI over LAN Enabled Randomized Encryption Key

  Correct Answer: B

• Question 336:

  An engineer must apply AAA configuration on a Cisco MDS 9000 Series Switch. The solution must meet these conditions: It must use a challenge-response authentication protocol that uses MD5 hashing with an incrementally changing identifier. The RADIUS configuration must be automatically shared with other MDS switches in the environment.

  The RADIUS server is already defined. Which command set completes the configuration?

  A. aaa authentication login chap enable radius distribute radius commit

  B. aaa authentication login pap enable distribute radius radius-server host 10.8.8.0 auth-port 1821

  C. aaa authentication login mschapv2 enable radius propagate radius authentication port 1821

  D. aaa authentication login mschap enable radius commit radius-server host 10.8.8.0

  Correct Answer: A

• Question 337:

  A company provides applications and database hosting services to multiple customers using isolated infrastructure-as-a-service services within the same data center environment. The environment is based on Cisco MDS 9000 Series Switches. The requirement is to manage the environment by using Fibre Channel Security Protocol and to enable user authentication when the centralized AAA server is unreachable. All communication between the MDS switches and the remote servers must be encrypted. Which command set must be used to meet these requirements?

  A. aaa group server radius RadiusServer1 aaa authentication login default RadiusServer1

  B. aaa group server tacacs+ TacacsServer1 aaa authentication dhchap default group TacacsServer1

  C. aaa group server radius RadiusServer1 aaa authentication dhchap default group RadiusServer1

  D. aaa group server tacacs+ TacacsServer1 aaa authentication login console TacacsServer1

  Correct Answer: B

• Question 338:

  Refer to the exhibit.

  

  An engineer must schedule the firmware upgrade of the Red1 and Red2 leaf switches. The requirement is to keep the upgrade time to the minimum, avoid any service impact, and perform the parallel upgrade. Which set of scheduler attributes must be used to meet these requirements?

  A. Configure SchedulerPolicy1 for leaf switches Blue1 and Red1, and SchedulerPolicy2 for leaf switches Blue2 and Red2. Configure SchedulerPolicy1 and SchedulerPolicy2 with a one-time window trigger that has maximum concurrent nodes 1.

  B. Configure SchedulerPolicy1 for leaf switches Blue1 and Red1, and SchedulerPolicy2 for leaf switches Blue2 and Red2. Configure SchedulerPolicy1 and SchedulerPolicy2 with a one-time window trigger that has maximum concurrent nodes 2.

  C. Configure SchedulerPolicy1 for all four leaf switches Blue1, Blue2, Red1, and Red2. Configure SchedulerPolicy1 and SchedulerPolicy2 with a one-time window trigger that has maximum concurrent nodes 1.

  D. Configure SchedulerPolicy1 for all four leaf switches Blue1, Blue2, Red1, and Red2. Configure SchedulerPolicy1 and SchedulerPolicy2 with a one-time window trigger that has maximum concurrent nodes 2.

  Correct Answer: A

• Question 339:

  Refer to the exhibit.

  

  A network engineer is configuring the Smart Call Home feature on a Cisco Nexus Series Switch. An email must be generated that contains the last 100 lines of the log every time a new piece of hardware is inserted into the chassis. Which command must be added to the configuration to receive the email?

  A. destination-profile Operations alert-group Inventory

  B. destination-profile Operations message-level 2

  C. alert-group Linecard-Hardware user-def-cmd show logging last 100

  D. alert-group Operations user-def-cmd show logging last 100

  Correct Answer: A

• Question 340:

  Refer to the exhibit.

  

  Which information must be added to the script to complete the POAP operation on the Cisco Nexus 9000 Series Switch?

  A. MD5SUM d41d8cd98f00b20449800998ecf8427e of the script file.

  B. MD5SUM d41d8cd98f00b204e9800998ecf8427e of the Python code.

  C. API token d41d8cd98f00b77986331998ecf8427e of the Cisco Nexus 9000 Series Switch.

  D. API token d41d8cd98f00b41051968198ecf8427e of the Cisco APIC.

  Correct Answer: B

  Reference: https://www.cisco.com/c/en/us/td/docs/switches/datacenter/nexus9000/sw/7-x/fundamentals/configuration/guide/b_Cisco_Nexus_9000_Series_NX- OS_Fundamentals_Configuration_Guide_7x/b_Cisco_Nexus_9000_Series_NXOS_Fundamentals_Configuration_Guide_7x_chapter_0100.html#id_53294