Cisco CCNP Data Center 350-601 Questions & Answers

• Question 481:

  What is an advantage of using Ansible for automation as compared to puppet and chef?

  A. Ansible automates the enforcement of configuration settings.

  B. Ansible perform automation without installing a software agent on the target node.

  C. Ansible configures a set of CLI commands on a device by using NETCONF.

  D. Ansible abstracts a scenario so that set of configuration setting can be used across multiple operating systems.

  Correct Answer: B

• Question 482:

  A Cisco MDS 9000 series storage Switch has reloaded unexpectedly. Where does the engineer look for the latest core dump file?

  A. /mnt/core

  B. /mnt/pss

  C. /mnt/logs

  D. /mnt/recovery

  Correct Answer: B

  

  https://www.cisco.com/c/en/us/td/docs/switches/datacenter/mds9000/sw/6_2/configuration/ guides/system_management/nx-os/sysmgmt_cli_6-x/sys.html https://www.cisco.com/c/en/us/td/docs/switches/datacenter/mds9000/sw/6_2/ configuration/ guides/system_management/nx-os/sysmgmt_cli_6-x/sys.html#37039

• Question 483:

  A network engineer is adding a Cisco HyperFlex data platform to the Cisco intersight management portal. Which two components are required for Intersight to claim the Cisco HyperFlex data platform? (Choose two.)

  A. device FQDN

  B. device public IP address

  C. device claim code

  D. device ID

  E. device serial number

  Correct Answer: CD

  

  Text

  

  https://www.cisco.com/c/en/us/td/docs/hyperconverged_systems/HyperFlex_HX_DataPlatf ormSoftware/HyperFlex_Installation_Guide_for_Intersight/b_HyperFlex_Installation_Guide_for_Intersight/ b_HyperFlex_Installation_Guide_for_Intersight_chapter_011.html https://www.cisco.com/c/en/us/support/docs/hyperconverged-infrastructure/hyperflex-hx-dataplatform/214268-cisco-intersight-hyperflex-installatio.html

• Question 484:

  What is required for using Ansible with HTTP/HTTPS protocol in a Cisco NX-OS environment?

  A. SSH

  B. Open Agent Container

  C. XML management interface

  D. NX-API

  Correct Answer: D

  https://docs.ansible.com/ansible/2.5/modules/nxos_nxapi_module.html https://docs.ansible.com/ansible/latest/network/user_guide/platform_nxos.html

• Question 485:

  Which two statements describe about modifying Cisco UCS user accounts are true? (Choose two.)

  A. The password of the user account must contain a minimum of 10 characters.

  B. Disabling a user account maintains all of the data in the Cisco UCS Fabric Interconnect.

  C. Local user accounts override the same account on a remote authentication server, such as TACACS, RADIUS, or LDAP.

  D. The password of the user account expires in 30 days.

  E. The admin account can be used to log on by using SSH only.

  Correct Answer: BC

  https://www.cisco.com/c/en/us/td/docs/unified_computing/ucs/ucs-manager/GUI-User-Guides/Admin-Management/31/b_Cisco_UCS_Admin_Mgmt_Guide_3_1/b_UCSM_Admin_Mgmt_Guide_chapter_01.html

• Question 486:

  When the default firmware package is set a new version, which type of policy determines the timing of server reboots during the firmware upgrade?

  A. maintenance

  B. local disk

  C. BIOS

  D. diagnostics

  Correct Answer: A

• Question 487:

  Refer to the exhibit.

  

  What is the result of implementing this configuration?

  A. The TACACS+ server uses the type-6 encrypted format.

  B. The switch queries the TACACS+ server by using a clear text PAP login.

  C. The timeout value on the TACACS+ server is 10 seconds.

  D. The switch queries the TACACS+ server by using an encrypted text PAP login.

  Correct Answer: D

  tacacs-server key To configure a global TACACS+ shared secret key, use the tacacs-server key command. To remove a configured shared secret, use the no form of this command. tacacs-server key [0 | 7] shared-secret Syntax Description 7 (Optional) Configures a preshared key specified in encrypted text to authenticate communication between the TACACS+ client and server.

• Question 488:

  When a strict CoPP policy is implemented, which statement describes an event during which packets are dropped?

  A. Fifteen SSH sessions remain connected to the switch.

  B. A large system image is copied to a switch by using the default VRF.

  C. A ping sweep is performed on a network that is connected through a switch.

  D. A web server that is connected to a switch is affected by a DDoS attack.

  Correct Answer: B

  A large image upload is more probable to generate that level of traffic. 15 SSH session would mean an average of 200pps per session, and they simply mention that the session remain connected, if there are no inputs in them they have 0pps and even a full config push would probably not require 200 packets total.

  class copp-system-p-class-management set cos 2 police cir 3000 pps bc 32 packets conform transmit violate drop

  https://www.cisco.com/c/en/us/td/docs/switches/datacenter/nexus9000/sw/6-x/security/configuration/guide/b_Cisco_Nexus_9000_Series_NX-OS_Security_Configuration_Guide/ b_Cisco_Nexus_9000_Series_NXOS_Security_Configuration_Guide_chapter_010001.html

• Question 489:

  Host1 is in VLAN100 located in DataCenter1 and Host2 is in VLAN200 located in DataCenter2.

  Which OTV VLAN mapping configuration allows Layer 2 connectivity between these two hosts?

  

  A. Option A

  B. Option B

  C. Option C

  D. Option D

  Correct Answer: A

• Question 490:

  What are two types of FC/FCoE oversubscription ratios? (Choose two.)

  A. server storage to end-node count

  B. port bandwidth to uplink bandwidth

  C. edge ISL bandwidth to core ISL bandwidth

  D. host bandwidth to storage bandwidth

  E. switch processing power to end-node processing power

  Correct Answer: CD

  https://www.ciscolive.com/c/dam/r/ciscolive/us/docs/2017/pdf/BRKDCN-1121.pdf https://www.cisco.com/c/en/us/td/docs/switches/datacenter/nexus5000/sw/operations/n5k_f coe_ops.html