Deck 40: Implementing and Operating Cisco Security Core Technologies

Question 1

APIC EPG Resolution Immediacy is set to "Immediate". Which statement is true about the Deployment Immediacy for VMM domains associated to EPGs?

A) If "On demand" is selected, the policy is programmed in the hardware only when the first packet is received through the data path.
B) If "Immediate" is selected, the policy is programmed in the hardware as soon as the leaf is booted.
C) The "Immediate" and "On demand" options require a port group to be created on the VDS.
D) If "On demand" is selected, the policy is programmed in the hardware only when the APIC detects a VM created in the EPG.

Answer 1

If "On demand" is selected, the policy is programmed in the hardware only when the first packet is received through the data path.

Question 2

A small remote office is set to connect to the regional hub site via NSSA ASBR. Which type of LSA is sent to the remote office OSPF area?

A) type 7 LSA
B) type 1 LSA
C) type 5 LSA
D) type 3 LSA

Answer 2

type 7 LSA

Question 3

Which configuration implements static ingress replication?

A)
B)
C)
D)

Answer 3

Question 4

Refer to the exhibit. What is the result of running the command presented?

A) Multicast traffic forwarding is suspended.
B) MRIB is flushed.
C) The PIM database is deleted.
D) PIM join messages are suspended.

Question 5

Due to a major version change, an engineer must perform a software upgrade on a Cisco Nexus Series switch. Which two technologies should be implemented to reduce disruptions to the network during the upgrade? (Choose two.)

A) vPC
B) HSRP
C) VDC
D) MLAG
E) PAgP

Question 6

Refer to the exhibit. What is configured as a result of running these commands?

A) loose unicast RPF
B) strict unicast RPF
C) IP Source Guard
D) reverse lookup for outbound packets

Question 7

Refer to the exhibit. Which two statements about the routing table of the leaf switch are true? (Choose two.)

A) 10.20.1.0/24 is a BD subnet in ACI.
B) The next hop 10.0.1.14 for route 172.16.99.0/24 is the TEP address of a border leaf in ACI.
C) 172.16.100.0/24 is a BD subnet in ACI.
D) The next hop 10.1.168.95 for route 172.16.100.0/24 is the TEP address of a border leaf in ACI.
E) The next hop 10.0.8.65 for route 10.20.1.0/24 is the TEP address of a border leaf in ACI.

Question 8

Which virtual MAC address is the default for HSRP version 2 group 10?

A) 0000.5E00.0110
B) 0000.0C9F.F00A
C) 3784.0898.1C0A
D) 0000.0C9F.F010

Question 9

Host1 is in VLAN100 located in DataCenter1 and Host2 is in VLAN200 located in DataCenter2. Which OTV VLAN mapping configuration allows Layer 2 connectivity between these two hosts?

A)
B)
C)
D)

Question 10

Refer to the exhibit. The STP priority of N7K-1 and N7K-2 are the lowest in the network. Which statement describes STP on the vPC?

A) N7K-1 and N7K-2 appear as a single STP root.
B) N7K-1 appears as the STP root.
C) N7K-1 preempts N7K-2 as the STP root.
D) N7K-2 appears as the STP root.

Question 11

Which adjacency server configuration makes two OTV edge devices located in the same site bring up the dual-site adjacency?

A)
B)
C)
D)

Question 12

Refer to the exhibit. What is the reason the system-fm-vrrp checkpoint was created?

A) The VRRP process crashed and the checkpoint was automatically created.
B) The VRRP service restarted and the checkpoint was automatically created.
C) The network administrator manually created it.
D) The VRRP-enabled feature has been disabled.

Question 13

A network engineer repeatedly saves a configuration on Catalyst switches to NVRAM using the write memory command. Which action should be taken to implement the same action on Nexus switches?

A) Use the alias command to use the write memory command. Use the alias command to use the write memory command.
B) Use the wri command to use the copy running-config startup-config command. wri copy running-config startup-config command.
C) Use the exit command to leave the configuration mode and save the configuration automatically. exit command to leave the configuration mode and save the configuration automatically.
D) Use the write memory command to save the configuration. command to save the configuration.

Question 14

An engineer must configure a Nexus 7000 series switch for HSRP on VLAN 100. When fully functional, the router must be the active master. Which set of commands must be used to implement the scenario?

A) feature hsrp interface vlan100 ip address 10.1.1.2 255.255.255.0 priority 255 preempt hsrp version 2 hsrp 1000 ip 10.1.1.1
B) feature-set hsrp priority 20
C) priority 80
D) priority 240

Question 15

The engineer must configure SPAN on a Cisco Nexus 5000 Series Switch to get a capture of the traffic from these applications for an in-depth packet analysis. Which two SPAN characteristics must be considered? (Choose two.)

A) SPAN source ports can be monitored in multiple SPAN sessions.
B) The Ethernet, FC, vFC, port channel, SAN port channel can be used as SPAN source ports.
C) A SPAN source port cannot be a destination SPAN port.
D) Only Ethernet, FC, vFC, port channel port types can be used as SPAN source ports.
E) The rx/tx option is available for VLAN or VSAN SPAN sessions.

Question 16

Refer to the exhibit. A flapping link issue has been reported on the vPC keepalive link. A packet capture has been activated on the Cisco Nexus switch. What is the destination IP address of the vPC keepalive packets that are sent by the switch?

A) 192.168.254.4
B) 192.168.254.1
C) 192.168.254.2
D) 239.255.70.83

Question 17

A DNS server with IP address 192.168.1.1 is deployed in a data center. A network engineer must configure a Cisco UCS Fabric Interconnect to use this DNS. Which configuration should be applied?

A) ficl-mgmt-A# scope fabric-interconnect a ficl-mgmt-A /fabric-interconnect # set name 192.168.1.1 ficl-mgmt-A /fabric-interconnect # scope system ficl-mgmt-A /system # commit-buffer
B) ficl-mgmt-A# scope system ficl-mgmt-A /system # create dns 192.168.1.1 ficl-mgmt-A /system* # commit-buffer
C) ficl-mgmt-A /fabric-interconnect* # commit-buffer
D) ficl-mgmt-A /system # scope services ficl-mgmt-A /system/services # create dns 192.168.1.1 ficl-mgmt-A /system/services* # commit-buffer

Question 18

Refer to the exhibit. Which statement about the default gateway configuration of the vPC is true?

A) Either switch can act as the active default gateway.
B) N7K-1 acts as the default gateway for all traffic.
C) N7K-2 forwards traffic that is destined for the default gateway by using the peer link.
D) N7K-2 acts as the default gateway for all traffic.

Question 19

A customer has a requirement to deploy a cloud service and needs to have full control over the underlying OS, data and applications. Which cloud model meets this requirement?

A) MaaS
B) PaaS
C) SaaS
D) IaaS

Question 20

What occurs when running the command install deactivate while a software maintenance upgrade is performed on a Cisco Nexus 9000 Series switch?

A) The current set of packages is committed.
B) The package features for the line card are disabled.
C) The package is removed from the switch.
D) The current upgrade stops.

Question 21

An engineer is implementing an import operation in Cisco UCS Manager. What is the impact of performing this operation?

A) Information is modified on the management plane only.
B) A configuration is imported from a higher release to a lower release.
C) It is possible to schedule an import operation.
D) Only a configuration file that was exported from the same Cisco UCS Manager is allowed to be imported.

Question 22

Refer to the exhibit. An engineer needs to implement a monitoring session that should meet the following requirements: Monitor traffic from leaf to leaf switches on a Cisco ACI network Support filtering traffic from Bridge Domain or VRF Which configuration must be added to meet these requirements?

A) interface eth 1/2 leaf 101
B) application epg epg1 app1
C) interface eth 1/2 switch 101
D) application app1 epg epg1

Question 23

A customer needs a tool to take advantage of the CI/CD model to streamline its operations and optimize cost. The customer wants to integrate the solution with the Cisco products it currently uses, including Cisco ACI networking and Cisco UCS servers. The solution should also provide on-premises Kubernetes and AppDynamics performance monitoring. Because of the security requirements, the solution should not install a local client on products under management. Which orchestration solution meets these requirements?

A) Cisco UCS Director
B) Cisco CloudCenter
C) Cisco APIC
D) Cisco DCNM

Question 24

A network engineer must perform a backup and restore of the Cisco Nexus 5000 Series Switch configuration. The backup must be made to an external backup server. The only protocol permitted between the Cisco Nexus switch and the backup server is UDP. The backup must be used when the current working configuration of the switch gets corrupted. Which set of steps must be taken to meet these requirements?

A) 1. Perform a running-config backup to an SFTP server. 2. Copy backup-config from the SFTP server to the running-config file.
B) 1. Perform a startup-config backup to a TFTP server. 2. Copy backup-config from the backup server to the running-config file.
C) 1. Perform a running-config backup to an SCP server. 2. Copy running-config in the boot flash to the running-config file.
D) 1. Perform a startup-config backup to an FTP server. 2. Copy startup-config in the boot flash to the running-config file.

Question 25

An engineer is seeking the most optimal on demand CPU performance while configuring the BIOS settings of a UCS C-series rack mount server. What setting will accomplish this goal?

A) C6 Retention
B) C6 non-Retention
C) C2 state
D) C0/C1 state

Question 26

An engineer is asked to use SaaS to manage Cisco computing. Which two items are needed to accomplish the task? (Choose two.)

A) Intersight
B) UCS Central
C) Device/Claim ID
D) Node name/Serial Number
E) UCS Manager

Question 27

Refer to the exhibit. Which command is run from the Guest Shell to set the description on the first five interfaces of the Cisco Nexus switch?

A) [guestshell@guestshell ~]$ for x in {1..5}; dohost "conf t ; interface eth1/$x ; description Server$x";
B) [guestshell@guestshell ~]$ for x in {1..5}; do dohost "conf t ; interface eth1/$x ; description Server$x"; done
C) [guestshell@guestshell ~]$ for x in (1..5); do dohost "conf t"; "interface eth1/$x" ; "description Server$x"; done
D) [guestshell@guestshell ~]$ for x in (1..5); dohost "conf t ; interface eth1/$x ; description Server$x";

Question 28

Several production and development database servers exist in the same EPG and IP subnet. The IT security policy is to prevent connections between production and development. Which attribute must be used to assign the servers to different microsegments?

A) data center
B) VM name
C) IP address
D) VMM domain

Question 29

A customer wants to offload some of its order processing to a public cloud environment. The customer environment is based on Cisco ACI and uses Puppet with containerized applications. The operations team requires a solution to orchestrate and optimize the cost of the new solution. Which product must be used to meet these requirements?

A) Cisco Workload Optimization Manager
B) Cisco CloudCenter
C) Cisco Intersight
D) Cisco Data Center Network Manager

Question 30

A Cisco MDS 9000 Series Switch is configured for SAN Analytics and SAN Telemetry Streaming. An engineer must enable analytics for NVMe on interfaces in the range of fc1/1-12. Due to a large amount of traffic generated in the SAN environment, the data must be collected at regular intervals of 60 seconds from ports fc1/1-12 and then for ports fc1/13-24 for the next 60 seconds. Ports in the range fc1/13-24 were already enabled for analytics. Which set of commands must be used to meet these requirements?

A)
B)
C)
D)

Question 31

Which method must a network engineer use to upgrade the BIOS firmware or a Cisco UCS standalone C-Series rack-mount server?

A) Use the U-ACPI Interface.
B) Use the Cisco host upgrade utility.
C) Use the Cisco hardware upgrade utility.
D) Use the Cisco host firmware policy.

Question 32

An engineer needs to create a new user in the local user database on Cisco UCS Fabric Interconnect. The user needs permissions to change the following configuration inside UCS Manager version 3.1: vNIC and vHBA profiles Fan speed and power redundancy profile of UCS Manager Which two roles must be assigned to a user to achieve this goal? (Choose two.)

A) facility-manager
B) server-equipment
C) operations
D) server-profile
E) server-compute

Question 33

An engineer is implementing OTV on a transport that supports multicast. The solution needs to meet the following requirements: Establish adjacency to the remote peer by using multicast. Enable OTV advertisements for VLAN 100 to the other site. Which two commands should be configured to meet these requirements? (Choose two.)

A) otv extend-vlan 100
B) otv site-vlan 100
C) otv use-adjacency-server 172.27.255.94
D) otv data-group 232.2.2.0/28
E) otv control-group 232.1.1.1

Question 34

An environment consists of a Cisco MDS 9000 Series Switch that uses port channels. An engineer must ensure that frames between the source and the destination follow the same links for a specific flow. Subsequent flows are allowed to use a different link. Which load balancing method should be used to accomplish this goal?

A) src-id/dst-id
B) src-dst-oui
C) src-dst-port
D) src-id/dst-id/oxid

Question 35

Refer to the exhibit. A network engineer plans to upgrade the current software images of a Cisco Nexus switch. What is the impact of starting the EPLD upgrade?

A) The switch reboots one time for the new EPLD versions to take effect.
B) The switch reboots multiple times for the new EPLD versions to take effect.
C) The switch skips the EPLD upgrade for each EPLD device of the switch.
D) The switch skips the EPLD upgrade for MIFPGA and proceeds with the other EPLD devices.

Question 36

Refer to the exhibit. An engineer must monitor all LAN traffic on Fabric A from a blade server. Which source should be configured in the test-span monitor session to complete this task?

A) all uplink FCoE ports
B) all vNICs from the service profile that correspond to this server
C) all uplink Ethernet ports
D) all vHBAs from the service profile that correspond to this server

Question 37

An engineer must configure multiple EPGs on a single access port in a large Cisco ACI fabric without using VMM integration. The relevant access policies and tenant policies have been created. A single AAEP is used to configure the access ports in the fabric. Which two additional steps must be taken to complete the configuration? (Choose two.)

A) The EPGs must link directly to the corresponding AAEP
B) A contract must be defined between the EPGs
C) The EPGs must be configured as static ports
D) The corresponding bridge domains must be configured in legacy mode
E) The EPGs must be linked to the correct physical domain

Question 38

An engineer wants to create a backup of Cisco UCS Manager for disaster recovery purposes. What are two characteristics of a full state backup of a Cisco UCS Manager database? (Choose two.)

A) contains all of the runtime states and statuses but not the configurations
B) performs a complete binary dump of the database as a .bin file
C) performs a complete binary dump of the database as a .sql file
D) performs a complete binary dump of the database as a .txz file
E) contains all of the configurations

Question 39

A network architect wants to propose a scalable network monitoring solution in which data is repeatedly acquired from network devices. The solution must use a push model and provide close to real-time access to operational data. Which technology must be used to meet these requirements?

A) CLI-based scripting
B) logging
C) SNMPv3
D) streaming telemetry

Question 40

An engineer configured an environment that contains the vPC and non-vPC switches. However, it was noticed that the downstream non-vPC switches do not receive the same STP bridge ID from the upstream vPC switch peers. Which vPC feature must be implemented to ensure that vPC and non-vPC switches receive the same STP bridge ID from the upstream vPC switch peers?

A) vpc local role-priority 4000
B) peer-switch
C) system-mac 0123.4567.89ab
D) peer-gateway

Question 41

Refer to the exhibit. Service degradation is reported on a VM that is deployed on a Cisco UCS blade server. The traffic from the vNIC is required to SPAN in both directions to a packet analyzer that is connected to UCS-A slot 2 port 12. Which two commands are needed to complete the configuration? (Choose two.)

A) UCS-A /org/service-profile/vnic/mon-src* # set direction receive transmit
B) UCS-A /eth-traffic-mon/fabric/eth-mon-session* # create dest-interface 2 12
C) UCS-A /eth-traffic-mon/fabric/eth-mon-session # activate
D) UCS-A /eth-traffic-mon/fabric/eth-mon-session* # create eth-mon-session/dest-interface 2 12
E) UCS-A /org/service-profile/vnic/mon-src* # set direction both

Question 42

What is the benefit of adding Cisco HyperFlex Hardware Acceleration Cards to a HyperFlex deployment?

A) increased compression efficiency
B) increased network throughput
C) GPU acceleration
D) offline encryption acceleration

Question 43

An engineer must configure Cisco IMC server management NIC for autonegotiation. Which setting should be selected?

A) shared LOM
B) Cisco card
C) dedicated
D) shared LOM EXT

Question 44

Which command reduces the amount of time it takes to complete the ISSU on a Cisco Nexus 7000 Series Switch that has dual supervisor modules and two I/O modules?

A) insinstall all epld bootflash: parallel insinstall all epld bootflash: parallel
B) install all kickstart system parallel install all kickstart system
C) install all kickstart system
D) install all epld bootflash: install all epld bootflash:

Question 45

Which two statements describe the process of upgrading an EPLD on a Cisco MDS 9000 Series Switch? (Choose two.)

A) EPLDs are only capable to be upgraded to the latest EPLD image.
B) EPLD upgrades are capable to be completed without powering down the module during the upgrade.
C) An upgrade verification identifies the impact of each EPLD upgrade.
D) The EPLDs for all the modules on a switch must be upgraded at the same time.
E) EPLDs are capable to be upgraded without replacing the hardware.

Question 46

Refer to the exhibit. Which action must be taken before the maintenance policy can be committed?

A) Specify a maintenance time by selecting a schedule.
B) Associate a service profile to the maintenance policy.
C) Set the soft shutdown timer to a specific time.
D) Set the policy to apply the changes on the next reboot.

Question 47

What are two requirements when planning a Cisco HyperFlex All Flash standard cluster installation using three HX240c M5 servers? (Choose two.)

A) If the Jumbo MTU option in the HyperFlex installer is enabled, then jumbo frames do not have to be enabled on the upstream switches.
B) This cluster deployment type must support a mix of HDD and SSD.
C) The servers must be discovered, unassociated, and connected to each fabric interconnect.
D) If the Jumbo MTU option in the HyperFlex installer is enabled, then jumbo frames must also be enabled on the upstream switches.
E) The hypervisors must be installed to Cisco FlexFlash SD cards.

Question 48

Which two settings must be configured before enabling a Cisco UCS Manager domain for Cisco Intersight connectivity? (Choose two.)

A) SMTP servers
B) SMTP reply-to address
C) NTP servers
D) syslog redirection
E) DNS servers

Question 49

Which two firmware packages are included in the Cisco UCS C-Series Rack-Mount UCS-Managed Server Software bundle? (Choose two.)

A) CIMC
B) BIOS
C) PSU
D) system
E) third-party

Question 50

Refer to the exhibit. What is the outcome of this command when the EPLD is updated on a Cisco Nexus 9000 Series Switch?

A) displays the compatibility of the EPLD upgrade and the image in the bootflash
B) shows a simulated upgrade of the EPLD
C) upgrades the EPLD on the switch disruptively
D) displays the impact of the upgrade on the operation of the switch

Question 51

Multiple roles are applied to a user on the Cisco MDS 9000 Series Switch. Which statement describes the result of this configuration?

A) The last role assigned takes precedence over previous roles.
B) Access to a command takes priority over being denied access to a command.
C) Any commands that have conflicting settings between roles are denied.
D) The first role assigned takes precedence over subsequent roles.

Question 52

Due to a domain name change at a customer site, a Cisco UCS cluster must be renamed. An engineer must recommend a solution to ensure that the Cisco UCS Manager is available over HTTPS. Which action accomplishes this goal?

A) Regenerate the default key ring certificate manually
B) Reinstall the cluster to generate the default key ring certificate
C) Reboot the SSO component of the Cisco UCS Manager
D) Generate a new default key ring certificate from the Cisco UCS Manager

Question 53

An engineer is implementing Cisco Intersight in a secure environment. The environment must use LDAP directory service and ensure information integrity and confidentiality. Which two steps must be taken to implement the solution? (Choose two.)

A) Enable Certificate Signing Request in Cisco Intersight
B) Add a trusted root LDAP certificate to Cisco Intersight
C) Enable Encryption for LDAP
D) Add a self-signed LDAP certificate to Cisco Intersight
E) Add a trusted OAuth token to Cisco Intersight

Question 54

Where is the witness deployed in a two-node Cisco HyperFlex Edge deployment?

A) to the HyperFlex Edge two-node cluster
B) to Cisco Intersight
C) to a third-party cloud provider
D) to an additional server with network access to HyperFlex Edge

Question 55

Refer to the exhibit. What is the result of this series of commands?

A) It reboots the server immediately.
B) It activates the firmware on the next adapter boot.
C) It updates the firmware on adapter 1/1/1 immediately.
D) It verifies the firmware update on the server.

Question 56

Which statement describes the rolling EPLD upgrade on a Cisco MDS 9000 Series Switch?

A) The standby supervisor module is capable of performing the upgrade.
B) Only the modules that are being upgraded are disrupted.
C) All modules on the switch are disrupted.
D) An EPLD upgrade is nondisruptive.

Question 57

An engineer updated firmware on Fabric Interconnects and activates it. However, the endpoint fails to boot from the new firmware image. What is expected to occur in this case?

A) The system defaults to and boots into kickstart image
B) The system defaults to and boots into GOLD firmware image
C) The system defaults to the GOLD firmware image
D) The system defaults to the backup image version

Question 58

Which two statements describe the process of performing an EPLD upgrade on a Cisco MDS 9000 Series Switch? (Choose two.)

A) The upgrade is performed from the standby supervisor module.
B) The upgrade process disrupts only the module that is being upgraded.
C) The upgrade is performed on the active supervisor.
D) If an upgrade is interrupted, the upgrade continues after a connection is restored.
E) Modules must be online to be upgraded.

Question 59

Refer to the exhibit. What is a characteristic presented in the service profile of the UUID?

A) unique system generated
B) allocated from a UUID pool
C) vendor assigned
D) based on the hardware

Question 60

An engineer is duplicating an existing Cisco UCS setup at a new site. What are two characteristics of a logical configuration backup of a Cisco UCS Manager database? (Choose two.)

A) contains the configured organizations and locales
B) contains the VLAN and VSAN configurations
C) contains the AAA and RBAC configurations
D) contains all of the configurations
E) contains a file with an extension.tgz that stores all of the configurations

Question 61

Which two statements describe modifying Cisco UCS user accounts? (Choose two.)

A) Disabling a user account maintains all of the data in the Cisco UCS Fabric Interconnect.
B) The admin account is used only to log on by using SSH.
C) The password of the user account must contain a minimum of 10 characters.
D) Local user accounts override the same account on a remote authentication server, such as TACACS, RADIUS, or LDAP.
E) The password of the user account expires in 30 days.

Question 62

Refer to the exhibit. An engineer is configuring a VSAN on the network. Which option must be selected to create the VSAN?

A) Common/Global
B) Fabric B
C) FC Zoning Enabled
D) Fabric A

Question 63

The Cisco Nexus 5600 Series Switch experiences occasional packet drops on interface ethernet 1/16. An engineer wants to implement a SPAN session to investigate the issue further. The network analyzer to which the packets must be directed is located on interface 1/3. The analyzer is limited on disk space available for traffic capture, so the Nexus switch should send only the relevant data. Which two command sets configure the SPAN session that meets these requirements? (Choose two.)

A)
B)
C)
D)
E)

Question 64

What are two types of FC/FCoE oversubscription ratios? (Choose two.)

A) switch processing power to end-node processing power
B) port bandwidth to uplink bandwidth
C) server storage to end-node count
D) edge ISL bandwidth to core ISL bandwidth
E) host bandwidth to storage bandwidth

Question 65

Which statement describes the MAC address that the FCoE Initialization Protocol chooses for use by an E-Node in an FCoE implementation?

A) The FCoE Initialization Protocol uses a 24-bit FC-MAP and concatenates a 24-bit Fibre Channel ID to create a fabric-provided MAC address.
B) The FCoE Initialization Protocol uses the burned-in MAC address of the converged network adapter for all FCoE operations.
C) FCoE does not use a MAC address. The FCoE Initialization Protocol is used to acquire a Fibre Channel ID, and the address is used for all FCoE communications in the same way as Fibre Channel Protocol.
D) The FCoE Initialization Protocol uses 01.00.0C as the first 24 bits of the MAC address and appends a 24-bit Fibre Channel ID to derive a full 48-bit FCoE MAC address.

Question 66

Which statement is true about upgrading the firmware on a Cisco MDS storage switch with dual supervisors?

A) Supervisors can be upgraded independently to test the new firmware.
B) The new firmware is loaded on the standby supervisor first.
C) Both supervisors load the new firmware and then the active supervisor reboots.
D) The standby supervisor must be offline before the firmware upgrade begins.

Question 67

An engineer needs to monitor ingress traffic that arrives at interface Ethernet 1/3 that belongs to a Cisco Nexus 5600 Series Switch. The traffic analyzer machine located at interface Ethernet 1/5 is already monitoring other production, and the traffic analyzer must not be impacted by the traffic captured from the interface Eth1/3. The operations team allocated a traffic budget for the new monitoring session of 1 Gbps to meet this requirement. Which set of commands configures the SPAN session?

A)
B)
C)
D)

Question 68

An engineer needs to make an XML backup of Cisco UCS Manager. The backup should be transferred using an authenticated and encrypted tunnel, and it should contain all system and service profiles configuration. Which command must be implemented to meet these requirements?

A) copy running-config scp:// user@host35/backups/all-config9.bak all-configuration
B) create backup scp:// user@host35/backups/all-config9.bak all-configuration
C) create file scp:// user@host35/backups/all-config9.bak all-configuration
D) copy startup-config scp:// user@host35/backups/all-config9.bak all-configuration

Question 69

A network engineer must configure a power redundancy policy on a Cisco UCS C-Series Rack Server. The power redundancy must support two power sources being used to power the server. Which configuration should be applied to meet the requirement?

A)
B)
C)
D)

Question 70

An engineer needs to perform a backup of user roles and locales from Cisco UCS Manager to replicate the setting to a different fabric interconnect. The engineer wants to review the file before importing it to a target fabric interconnect. Which backup type must be selected to meet these requirements?

A) logical configuration
B) full state
C) system configuration
D) all configuration

Question 71

A Cisco UCS user called "Employee1" accidentally changed the boot policy of the Cisco UCS server at the Cisco UCS Manager root level. This change impacted all service profiles, and their storage connectivity was lost. The system administrator wants to prevent this issue from recurring in the future. The new security policy mandates that access must be restricted up to the organization level and prevent other users from modifying root policies. Which action must be taken to meet these requirements?

A) Modify the privilege level assigned to the user
B) Assign users to a specific Cisco UCS locale
C) Assign the user "Employee1" the network-operator role
D) Define a custom user role and assign it to users

Question 72

Refer to the exhibit. An engineer is implementing zoning on two Cisco MDS switches. After the implementation is finished, E Ports that connect the two Cisco MDS switches become isolated. What is wrong with the implementation?

A) Zones are local to the MDS switch and name service must be used to activate the connection between E Ports.
B) Different zone set names must be configured on both MDS switches.
C) Zones must have the same name on both MDS switches for the E Ports to function.
D) E Ports on both MDS switches must be configured as F Ports for the zoning to function.

Question 73

A network engineer plans to upgrade the firmware of a Cisco UCS B-Series chassis by using the Auto Install feature. Which component is upgraded during the infrastructure firmware upgrade stage?

A) Adapter
B) Cisco IMC
C) I/O Modules
D) BIOS

Question 74

Which product includes prebuilt templates that are available to be used to customize fabric deployments?

A) Cisco Tetration
B) Cisco Data Center Network Manager
C) Cisco ACI
D) Cisco UCS Manager

Question 75

Which configuration statically assigns VSAN membership to a virtual Fibre Channel interface?

A) switch(config-vsan-db)# vsan 100 interface vfc 31
B) switch(config-vsan-db)# vsan 100 fc 3/1
C) switch(config-vsan-db)# vsan 100 bind interface fc 3/1
D) switch(config-vsan-db)# vsan 100 bind interface vfc 31

Question 76

An engineer is implementing FCoE. Which aspect of DCBXP on a Cisco Nexus switch affects this implementation?

A) It requires that LLDP transmit and LLDP receive are enabled on the FCoE interface.
B) It uses the Cisco Fabric Services protocol to exchange parameters between two peer links.
C) It provides the authentication of peers on the Cisco Nexus switch.
D) It always is enabled on 10/100-Mbps native Ethernet ports.

Question 77

An engineer is converting a Cisco MDS switch to support NPIV mode. What should be considered when implementing the solution?

A) It requires mapping of external interface traffic.
B) It must be enabled on VSAN 1 only.
C) It must be enabled globally on all VSANs.
D) It requires the FLOGI database to be disabled.

Question 78

An engineer is implementing NPV mode on a Cisco MDS 9000 Series Switch. Which action must be taken?

A) NPIV must be enabled on the upstream switch.
B) The FCNS database must be disabled in the fabric.
C) A port channel must be configured to the upstream switch.
D) All switches in the fabric must be Cisco MDS switches.

Question 79

In an FCoE environment, for which two sets of data must an interface that implements the PAUSE mechanism always provision sufficient ingress buffer? (Choose two.)

A) frames that were sent with high credit
B) frames that were sent on the link but not yet received
C) frames that were processed and transmitted by the transmitter after the PAUSE frame left the sender
D) frames that were processed and transmitted by the transmitter before the PAUSE frame left the sender
E) frames that were sent on the link and received

Question 80

Refer to the exhibit. An engineer must configure FCoE on a Cisco Nexus switch. Which two command sets complete this configuration? (Choose two.)

A) vsan database     vsan 10 interface vfc 10
B) interface vfc 10     bind interface ethernet 1/3     no shut
C)     vsan 10 interface ethernet 1/3
D)     bind interface fcoe-vfc 1/3
E) interface fcoe 10