Question 1

APIC EPG Resolution Immediacy is set to "Immediate". Which statement is true about the Deployment Immediacy for VMM domains associated to EPGs?
A) If "On demand" is selected, the policy is programmed in the hardware only when the first packet is received through the data path.
B) If "Immediate" is selected, the policy is programmed in the hardware as soon as the leaf is booted.
C) The "Immediate" and "On demand" options require a port group to be created on the VDS.
D) If "On demand" is selected, the policy is programmed in the hardware only when the APIC detects a VM created in the EPG.

Accepted Answer

If "On demand" is selected, the policy is programmed in the hardware only when the first packet is received through the data path.

Question 2

A small remote office is set to connect to the regional hub site via NSSA ASBR. Which type of LSA is sent to the remote office OSPF area?
A) type 7 LSA
B) type 1 LSA
C) type 5 LSA
D) type 3 LSA

Accepted Answer

Type 7 LSAs are used in OSPF NSSA (Not-So-Stubby Area) to allow external routes to be advertised within the area. These LSAs are then translated to type 5 LSAs by the NSSA ASBR when they are sent to other areas.

Question 3

Which configuration implements static ingress replication?
A) 
B) 
C) 
D)

Accepted Answer

D

Question 4

Refer to the exhibit.  What is the result of running the command presented?
A) Multicast traffic forwarding is suspended.
B) MRIB is flushed.
C) The PIM database is deleted.
D) PIM join messages are suspended.

Accepted Answer

The answer of Refer to the exhibit.  What is...

Question 5

Due to a major version change, an engineer must perform a software upgrade on a Cisco Nexus Series switch. Which two technologies should be implemented to reduce disruptions to the network during the upgrade? (Choose two.)
A) vPC
B) HSRP
C) VDC
D) MLAG
E) PAgP

Accepted Answer

vPC (Virtual Port Channel) allows links that are physically connected to two different Cisco Nexus switches to appear as a single port channel to a third device, reducing downtime during upgrades. VDC (Virtual Device Context) allows multiple virtual switches to be created within a single physical switch, enabling upgrades with minimal disruption.

Question 6

Refer to the exhibit.  What is configured as a result of running these commands?
A) loose unicast RPF
B) strict unicast RPF
C) IP Source Guard
D) reverse lookup for outbound packets

Accepted Answer

The answer of Refer to the exhibit.  What is...

Question 7

Refer to the exhibit.  Which two statements about the routing table of the leaf switch are true? (Choose two.)
A) 10.20.1.0/24 is a BD subnet in ACI.
B) The next hop 10.0.1.14 for route 172.16.99.0/24 is the TEP address of a border leaf in ACI.
C) 172.16.100.0/24 is a BD subnet in ACI.
D) The next hop 10.1.168.95 for route 172.16.100.0/24 is the TEP address of a border leaf in ACI.
E) The next hop 10.0.8.65 for route 10.20.1.0/24 is the TEP address of a border leaf in ACI.

Accepted Answer

The answer of Refer to the exhibit.  Which two...

Question 8

Which virtual MAC address is the default for HSRP version 2 group 10?
A) 0000.5E00.0110
B) 0000.0C9F.F00A
C) 3784.0898.1C0A
D) 0000.0C9F.F010

Accepted Answer

The answer of Which virtual MAC address is the default...

Question 9

Host1 is in VLAN100 located in DataCenter1 and Host2 is in VLAN200 located in DataCenter2. Which OTV VLAN mapping configuration allows Layer 2 connectivity between these two hosts?
A) 
B) 
C) 
D)

Accepted Answer

The answer of Host1 is in VLAN100 located in DataCenter1...

Question 10

Refer to the exhibit.  The STP priority of N7K-1 and N7K-2 are the lowest in the network. Which statement describes STP on the vPC?
A) N7K-1 and N7K-2 appear as a single STP root.
B) N7K-1 appears as the STP root.
C) N7K-1 preempts N7K-2 as the STP root.
D) N7K-2 appears as the STP root.

Accepted Answer

The answer of Refer to the exhibit.  The STP...

Question 11

Which adjacency server configuration makes two OTV edge devices located in the same site bring up the dual-site adjacency?
A) 
B) 
C) 
D)

Accepted Answer

The answer of Which adjacency server configuration makes two OTV...

Question 12

Refer to the exhibit.  What is the reason the system-fm-vrrp checkpoint was created?
A) The VRRP process crashed and the checkpoint was automatically created.
B) The VRRP service restarted and the checkpoint was automatically created.
C) The network administrator manually created it.
D) The VRRP-enabled feature has been disabled.

Accepted Answer

The answer of Refer to the exhibit.  What is...

Question 13

A network engineer repeatedly saves a configuration on Catalyst switches to NVRAM using the write memory command. Which action should be taken to implement the same action on Nexus switches?
A) Use the alias command to use the write memory command. Use the alias command to use the write memory command.
B) Use the wri command to use the copy running-config startup-config command. wri copy running-config startup-config command.
C) Use the exit command to leave the configuration mode and save the configuration automatically. exit command to leave the configuration mode and save the configuration automatically.
D) Use the write memory command to save the configuration. command to save the configuration.

Accepted Answer

The answer of A network engineer repeatedly saves a configuration...

Question 14

An engineer must configure a Nexus 7000 series switch for HSRP on VLAN 100. When fully functional, the router must be the active master. Which set of commands must be used to implement the scenario?
A) feature hsrp interface vlan100 ip address 10.1.1.2 255.255.255.0 priority 255 preempt hsrp version 2 hsrp 1000 ip 10.1.1.1
B) feature-set hsrp priority 20
C) priority 80
D) priority 240

Accepted Answer

The command set in choice A includes configuring HSRP with a high priority (255) and enabling preemption, ensuring that this router becomes the active master.

Question 15

The engineer must configure SPAN on a Cisco Nexus 5000 Series Switch to get a capture of the traffic from these applications for an in-depth packet analysis. Which two SPAN characteristics must be considered? (Choose two.)
A) SPAN source ports can be monitored in multiple SPAN sessions.
B) The Ethernet, FC, vFC, port channel, SAN port channel can be used as SPAN source ports.
C) A SPAN source port cannot be a destination SPAN port.
D) Only Ethernet, FC, vFC, port channel port types can be used as SPAN source ports.
E) The rx/tx option is available for VLAN or VSAN SPAN sessions.

Accepted Answer

The answer of The engineer must configure SPAN on a...

Question 16

Refer to the exhibit.  A flapping link issue has been reported on the vPC keepalive link. A packet capture has been activated on the Cisco Nexus switch. What is the destination IP address of the vPC keepalive packets that are sent by the switch?
A) 192.168.254.4
B) 192.168.254.1
C) 192.168.254.2
D) 239.255.70.83

Accepted Answer

The answer of Refer to the exhibit.  A flapping...

Question 17

A DNS server with IP address 192.168.1.1 is deployed in a data center. A network engineer must configure a Cisco UCS Fabric Interconnect to use this DNS. Which configuration should be applied?
A) ficl-mgmt-A# scope fabric-interconnect a ficl-mgmt-A /fabric-interconnect # set name 192.168.1.1 ficl-mgmt-A /fabric-interconnect # scope system ficl-mgmt-A /system # commit-buffer
B) ficl-mgmt-A# scope system ficl-mgmt-A /system # create dns 192.168.1.1 ficl-mgmt-A /system* # commit-buffer
C) ficl-mgmt-A /fabric-interconnect* # commit-buffer
D) ficl-mgmt-A /system # scope services ficl-mgmt-A /system/services # create dns 192.168.1.1 ficl-mgmt-A /system/services* # commit-buffer

Accepted Answer

The correct configuration involves scoping to the services section and creating a DNS entry with the specified IP address, followed by committing the changes.

Question 18

Refer to the exhibit.  Which statement about the default gateway configuration of the vPC is true?
A) Either switch can act as the active default gateway.
B) N7K-1 acts as the default gateway for all traffic.
C) N7K-2 forwards traffic that is destined for the default gateway by using the peer link.
D) N7K-2 acts as the default gateway for all traffic.

Accepted Answer

The answer of Refer to the exhibit.  Which statement...

Question 19

A customer has a requirement to deploy a cloud service and needs to have full control over the underlying OS, data and applications. Which cloud model meets this requirement?
A) MaaS
B) PaaS
C) SaaS
D) IaaS

Accepted Answer

Infrastructure as a Service (IaaS) provides the most control over the underlying operating system, data, and applications, allowing the customer to manage and configure the environment as needed.

Question 20

What occurs when running the command install deactivate <filename> while a software maintenance upgrade is performed on a Cisco Nexus 9000 Series switch?
A) The current set of packages is committed.
B) The package features for the line card are disabled.
C) The package is removed from the switch.
D) The current upgrade stops.

Accepted Answer

The "install deactivate" command is used to disable package features, such as those for a line card, without removing the package from the switch.

Exam 40: Implementing and Operating Cisco Security Core Technologies

APIC EPG Resolution Immediacy is set to "Immediate". Which statement is true about the Deployment Immediacy for VMM domains associated to EPGs?

A small remote office is set to connect to the regional hub site via NSSA ASBR. Which type of LSA is sent to the remote office OSPF area?

Which configuration implements static ingress replication?

Refer to the exhibit. What is the result of running the command presented?

Due to a major version change, an engineer must perform a software upgrade on a Cisco Nexus Series switch. Which two technologies should be implemented to reduce disruptions to the network during the upgrade? (Choose two.)

Refer to the exhibit. What is configured as a result of running these commands?

Refer to the exhibit. Which two statements about the routing table of the leaf switch are true? (Choose two.)

Which virtual MAC address is the default for HSRP version 2 group 10?

Host1 is in VLAN100 located in DataCenter1 and Host2 is in VLAN200 located in DataCenter2. Which OTV VLAN mapping configuration allows Layer 2 connectivity between these two hosts?

Refer to the exhibit. The STP priority of N7K-1 and N7K-2 are the lowest in the network. Which statement describes STP on the vPC?

Which adjacency server configuration makes two OTV edge devices located in the same site bring up the dual-site adjacency?

Refer to the exhibit. What is the reason the system-fm-vrrp checkpoint was created?

A network engineer repeatedly saves a configuration on Catalyst switches to NVRAM using the write memory command. Which action should be taken to implement the same action on Nexus switches?

An engineer must configure a Nexus 7000 series switch for HSRP on VLAN 100. When fully functional, the router must be the active master. Which set of commands must be used to implement the scenario?

The engineer must configure SPAN on a Cisco Nexus 5000 Series Switch to get a capture of the traffic from these applications for an in-depth packet analysis. Which two SPAN characteristics must be considered? (Choose two.)

Refer to the exhibit. A flapping link issue has been reported on the vPC keepalive link. A packet capture has been activated on the Cisco Nexus switch. What is the destination IP address of the vPC keepalive packets that are sent by the switch?

A DNS server with IP address 192.168.1.1 is deployed in a data center. A network engineer must configure a Cisco UCS Fabric Interconnect to use this DNS. Which configuration should be applied?

Refer to the exhibit. Which statement about the default gateway configuration of the vPC is true?

A customer has a requirement to deploy a cloud service and needs to have full control over the underlying OS, data and applications. Which cloud model meets this requirement?

What occurs when running the command install deactivate <filename> while a software maintenance upgrade is performed on a Cisco Nexus 9000 Series switch?