Cisco CCNP Data Center 350-601 Questions & Answers

• Question 461:

  What is a feature of NFS?

  A. role-based access control

  B. Kerberos-based security model

  C. block-based file access

  D. zone-based access control

  Correct Answer: B

  https://www.cisco.com/c/en/us/support/docs/security-vpn/kerberos/16087-1.html#modifiednfs

  

• Question 462:

  In an FCoE environment, for which two sets of data must an interface that implements the PAUSE mechanism always provision sufficient ingress buffer? (Choose two)

  A. frames that were sent with high credit

  B. frames that were processed and transmitted by the transmitter before the PAUSE frame left the sender

  C. frames that were sent on the link but not yet received.

  D. frames that were sent on the link and received.

  E. frames that were processed and transmitted by the transmitter after the PAUSE frame left the sender.

  Correct Answer: BC

  https://www.cisco.com/c/en/us/td/docs/switches/datacenter/nexus7000/sw/fcoe/config/cisco_nexus7000_fcoe_config_guide_8x/configuring_fcoe.html

• Question 463:

  Refer to the exhibit.

  

  What is the reason the system-fm-vrrp checkpoint was created?

  A. The VRRP service restarted and the checkpoint was automatically created.

  B. The network administrator manually created it.

  C. The VRRP process crashed and the checkpoint was automatically created.

  D. The VRRP-enable feature has been disabled.

  Correct Answer: D

  automatically created by the Nexus when the vrrp feature is disabled

• Question 464:

  Refer to the exhibit.

  

  Which action must be taken before the maintenance policy can be committed?

  A. Set the soft shutdown timer to a specific time.

  B. Associate a service profile to the maintenance policy.

  C. Set the policy to apply the change on the next reboot.

  D. Specify a maintenance time by selecting a schedule.

  Correct Answer: D

  https://www.cisco.com/c/en/us/td/docs/unified_computing/ucs/ucs-manager/CLI-User-Guides/AdminManagement/3-1/b_Cisco_UCS_Manager_CLI_Administration_Mgmt_Guide_3_1/ b_Cisco_UCS_Manager_CLI_Administration_Mgmt_Guide_3_1_chapter_01100.html

• Question 465:

  An engineer is asked to manage a large-scale data center and collect information from multiple Cisco NX- OS devices using Cisco NX-OS Data Management Engine model. Which technology should be used to accomplish this goal?

  A. NX-API REST

  B. NETCONF

  C. JSON-RPC

  D. NX Yang

  Correct Answer: A

  https://www.cisco.com/c/en/us/td/docs/switches/datacenter/nexus9000/sw/7-x/programmability/guide/b_Cisco_Nexus_9000_Series_NX-OS_Programmability_Guide_7x/ b_Cisco_Nexus_9000_Series_NXOS_Programmability_Guide_7x_chapter_010001.pdf

• Question 466:

  A host EDG Client wants to talk to a webserver in EGP Web. A contract with default settings is defined between EPG Client and EPG Web, which allows TCP communication initiated by the client toward the webserver with TCP destination port 80. Which statement is true?

  A. If EPG Web is made a preferred group member, a contract between EPG Client and EPG Web is no longer required for the host in EPG Client to reach the webserver in EPG Web.

  B. If vzAny is configured to consume and provide a "deny all" contract, traffic between EPG Client and EPG Web is no longer allowed.

  C. The host in EPG Client is allowed to connect to TCP destination port 80 on the webserver in EPG Web. The webserver will not be allowed to initiate a separate TCP connection to a host port with TCP source port 80.

  D. The host in EPG Client is allowed to connect to TCP destination port 80 on the webserver in EPG Web. The webserver is allowed to initiate a separate TCP connection to a host port with TCP source port 80.

  Correct Answer: D

  Apply Both Direction and Reverse Filter Port in the subject for the filter. These two options are by default enabled...This means that if the provider EPG initiates traffic toward the consumer EPG, the Cisco ACI fabric allows it for any destination ports if the source port is 80.

  https://www.cisco.com/c/en/us/td/docs/switches/datacenter/aci/apic/sw/1-x/Operating_ACI/guide/b_Cisco_Operating_ACI/b_Cisco_Operating_ACI_chapter_01000.html

  Reverse filter and apply in both directions is default. If a filter allows traffic from any consumer port to a provider port (e.g. 8888), if reverse port filtering is enabled and the contract is applied both directions (say for TCP traffic), either the consumer or the provider can initiate communication. The provider could open up a TCP socket to the consumer using port 8888, whether the provider or consumer sent traffic first.

  https://www.cisco.com/c/en/us/td/docs/switches/datacenter/aci/apic/sw/1-x/Operating_ACI/guide/b_Cisco_Operating_ACI/b_Cisco_Operating_ACI_chapter_01000.html

• Question 467:

  Which statement is true about upgrading the firmware on a Cisco MDS storage switch with dual supervisors?

  A. The standby supervisor must be offline before the firmware upgrade begins.

  B. Both supervisors load the new firmware and then the active supervisor reboots.

  C. Supervisors can be upgraded independently to test the new firmware.

  D. The new firmware is load on the standby supervisor first.

  Correct Answer: D

• Question 468:

  Where is the witness deployed in a two-node Cisco HyperFlex Edge deployment?

  A. to the HyperFlex Edge two-node cluster

  B. to an additional server with network access to HyperFlex Edge

  C. to a third-party cloud provider

  D. to Cisco Intersight

  Correct Answer: D

  The Cisco HyperFlex Edge invisible cloud witness is only required for 2-node HX Edge deployments. correct, it has to connect to Intersight as it is a CLOUD invisible witness as per the document shared: The Cisco HyperFlexEdge invisiblecloud witnessis only requiredfor 2-nodeHX Edge deployments. The witness does not require any additional infrastructure, setup, configuration, backup, patching ,or management of any kind. This feature is automatically configured as part of a 2-node Hyper Flex Edge installation. Outbound access at the remote site must be present for connectivity to Intersight (eitherIntersight.com or to the Intersight Virtual Appliance). HyperFlexEdge 2nodeclusters cannot operate without this connectivity in place

  https://www.cisco.com/c/en/us/td/docs/hyperconverged_systems/HyperFlex_HX_DataPlatf ormSoftware/ Edge_Deployment_Guide/b_HyperFlex_Edge_Deployment_Guide_4_0.pdf

• Question 469:

  Which two methods are available to Manage an ACI REST API session authentication when a user is unauthenticated?

  A. POST to aaaLogin

  B. POST to aaaUserLogin

  C. GET aaaRefresh

  D. GET to aaaListDomains

  E. DELETE to aaaLogout

  Correct Answer: AC

  These API methods enable you to manage session authentication:

  aaaLogin--Sent as a POST message, this method logs in a user and opens a session.

  The message body contains an aaa:User object with the name and password attributes, and the response contains a session token and cookie. If multiple AAA login domains are configured, you must prepend the user's name with apic:

  domain\\ .

  aaaRefresh--Sent as a GET message with no message body or as a POST message with the aaaLogin message body, this method resets the session timer. The response contains a new session token and cookie.

  aaaLogout--Sent as a POST message, this method logs out the user and closes the session.

  The message body contains an aaa:User object with the name attribute. The response contains an empty data structure.

  aaaListDomains--Sent as a GET message, this method returns a list of valid AAA login domains.

  You can send this message without logging in.

  https://www.cisco.com/c/en/us/td/docs/switches/datacenter/aci/apic/sw/2-x/rest_cfg/2_1_x/b_Cisco_APIC_REST_API_Configuration_Guide/b_Cisco_APIC_REST_API_Configuration_Guide_chapter_01.html

• Question 470:

  What is the benefit of adding Cisco HyperFlex Hardware Acceleration Cards to a HyperFlex deployment?

  A. offline encryption acceleration

  B. increased network throughput

  C. GPU acceleration

  D. Increased compression efficiency

  Correct Answer: D

  

  https://www.cisco.com/c/en/us/td/docs/hyperconverged_systems/HyperFlex_HX_DataPlatf ormSoftware/Installation_VMWare_ESXi/3_5/b_HyperFlexSystems_Installation_Guide_for_VMware_ES Xi_3_5/ b_HyperFlexSystems_Installation_Guide_for_VMware_ESXi_3_5_chapter_01100.html#:~:t ext=Overview%20of%20HyperFlex%20Hardware%20Acceleration%20Cards,-This%20chapter%20providesandtext=These%20cards%20provide% 20improved%20performance%20and%20compression%20efficiency%20for%20most%20storage%20workloads.