Pre-Summer Sale - Special 70% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: 70dumps

350-601 Questions and Answers

Question # 6

Refer to the exhibit. The router R1 and N9K1 establish EIGRP neighborship. R1 is advertising network 10.1.1.15/32 to N9K1 and N9K2 and N9K3 are forming the OSPF neighborship over area 1 Which configuration prevents N9K3 from receiving external LSA for network 10.1.1.15/32?

A)

B)

C)

D)

A.

Option A

B.

Option B

C.

Option C

D.

Option D

Full Access
Question # 7

An engineer must configure Protocol Independent Multicast on two Cisco Nexus 9000 Series Switches. The engineer must ensure that the chosen rendezvous point (RP) uses a mapping agent and only supports one RP per multicast group. Which type of RP must be used on both switches to meet these requirements?

A.

bootstrap router

B.

static

C.

Auto-RP

D.

Anycast-RP

Full Access
Question # 8

An engineer must configure a Cisco MDS 9000 Series Switch to store generated log messages to a file. The tile must store logs of the severity of ' warning " and above, and the file size must not exceed 20.000 bytes. Which command accomplishes this task?

A.

logging logfile Local 4 size 20000

B.

logging logfile Logs 3 size 160000

C.

logging logfile messages 2 size 2500

D.

logging logfile LogFile S size 2000

Full Access
Question # 9

Refer to the exhibit. Which value must be added to the LDAP provider to complete the LDAP group map configuration in Cisco UCS Manager?

A.

CN=ucsbind.OU=UCS,DC=Sigtranlab.DC=com

B.

LDAP_Sigtran

C.

sAMAccountName=$userid

D.

DC=Sigtranlab.DC=com

Full Access
Question # 10

A network architect must redesign a data center network based on OSPFv2. The network must perform fast reconvergence between directly connected switches. Which two actions must be taken to meet the requirements? (Choose two.)

A.

implement a virtual link between the switches.

B.

Set low OSPF hello and DEAD timers.

C.

Enable BFD for failure detection 0.

D.

Configure an links on AREA 0.

E.

Use OSPF point-to point links only.

Full Access
Question # 11

A company provides applications and database hosting services to multiple customers using isolated infrastructure-as-a-service services within the same data center environment. The environment is based on Cisco MDS 9000 Series Switches. The requirement is to manage the environment by using Fibre Channel Security Protocol and to enable user authentication when the centralized AAA server is unreachable. All communication between the MDS switches and the remote servers must be encrypted. Which command set must be used to meet these requirements?

A.

aaa group server tacacs+ TacacsServerlaaa authentication login console TacacsServerl

B.

aaa group server tacacs+ TacacsServerl _aaa authentication dhchap default group Tacattserveii

C.

aaa group server radius RadiusServeMaaa authentication login default RadiusServeM

D.

aaa group server radius RadiusServeMaaa authentication dhchap default group RadiusServeM

Full Access
Question # 12

company is running a pair of cisco Nexus 7706 series switches as part of a data center segment. All network engineers have restricted read-Write access to the core switches. A network engineer must a new FCoE VLAN to allow traffic from services toward FCoE storage. Which set of actions must be taken to meet these requirements?

A.

1. Create a user-defined role and add the required privileges.2. Assign a role to a user.

B.

1. Add the required privilege to the VDC-admin role.2. Commit the changes to the active user database.

C.

1. Modify a network-operator role and add the required privileges.2. Assign a VDC-operator role to a user.

D.

1. Assign the network-admin role to a user.2. Commit the role to the switch to the active user database.

Full Access
Question # 13

A customer data center experiences bandwidth contention that affects the servers connected to the NPV enabled switch The NPV switch is connected to the NPIV switch using two 10 Gb uplinks but the traffic originating front the connected hosts to the core switch exceeds the available bandwidth The engineers decided to add a third uplink to the NPV server to increase the available bandwidth Which set of commands must be used to provision the new uplink?

A.

switch2(config)# npv auto-load-balance disruptive! uplink to NPV Coreswitch2(config-if)# switchport mode np

B.

switch2(config)# port-channel load-balance ethernet source-dest-port! uplink to NPV Coreswitch2(config-if)# switchport mode np

C.

switch2(config)# npv traffic-map server-interface! uplink to NPV Coreswitch2(config-if)# switchport mode npiv

D.

! uplink to NPV Coreswitch2(config-if)# switchport mode npiv

Full Access
Question # 14

An engineer must deploy a UCS-X platform to a customer that requires an air gap between their management systems and the internet Which Intersight deployment option must be used to accomplish this goal?

A.

Intersight Secure Appliance

B.

Intersight Connected Appliance

C.

Intersight Private Appliance

D.

Intersight Assistant

Full Access
Question # 15

Refer to the exhibit. In a bidirectional PIM network using Phantom RP as an RP redundancy mechanism, two Cisco NX-OS routers have these requirements:

•R1 must be the active RP.

•R2 must be the backup RP that is used only if R1 is not reachable

Drag and drop the configuration steps to complete the configuration for Router 2 Not all configuration steps are used.

Full Access
Question # 16

A customer has a requirement to deploy a cloud service and needs to have full control over the underlying OS, data and application. Which cloud model meets this requirement?

A.

PaaS

B.

MaaS

C.

IaaS

D.

SaaS

Full Access
Question # 17

Refer to the exhibit The communication between the web server and the application server experiences poor performance The network engineer must collect the traffic between the two servers, including the payload for more investigation The collected data must be sent from the remote site to the headquarters. Which action accomplishes this goal?

A.

Configure an ERSPAN session between N5K-1 and N5K-2.

B.

Configure a SPAN session between N5K-1 and N5K-2.

C.

Configure SNMP on N5K-1 to send the data to the monitor server.

D.

Configure NetFlow on N5K-1 to send the data to the monitor server

Full Access
Question # 18

Which LDAP rule must be used in Cisco UCS Manager to search for a user continuously down the tree hierarchy until the user is found?

A.

disable secure socket layer

B.

enable group authorization

C.

set group recursion to recursive

D.

Check box of use primary group

Full Access
Question # 19

Refer to the exhibit An engineer must capture fiber channel traffic from the

server and the supervisory to the Cisco MDS 9000 Series Switch Fabric.

The traffic must be forwarded to the analyzer. Drag and drop the

code snippets from the right onto the blanks in the code on the

left to complete the configuration. Not all code snippets are used

Full Access
Question # 20

An engineer must create a scheduler configuration to create two backup jobs per day. The backup file must be copied to a server in the operations VRF. Which configuration accomplishes this task?

A.

scheduler schedule name CNFGBACKUP job name BACKUP-JOB copy running-config tftp:/10.19.11.12/$(SWITCHNAME)-$(TIMESTAMP).cfg vrf operations time start now repeat 12:00

B.

scheduler schedule name CNFGBACKUP job name BACKUP-JOB show tech-support | redirect vrf operations tftp:/10.19.11.12/S(SWITCHNAME)-S(TIMESTAMP).cfg time start daily 12:30 0:30

C.

scheduler schedule name CNFGBACKUP job name BACKUP-JOB copy startup-config tftp:/10.19.11.12/$(SWITCHNAME)-S(TIMESTAMP).cfg time daily 12:30 0:30

D.

scheduler schedule name CNFGBACKUP Job name BACKUP-JOB copy vrf operations config tftp:/10.19.11.12/$(SWITCHNAME)-S(TIMESTAMP).cfg time start 12:30 repeat 12

Full Access
Question # 21

Which virtualization feature is provided by network-attached storage?

A.

ALUA path redirection

B.

hypervisor host boot LUN

C.

VM cluster shared disk

D.

raw device passthrough

Full Access
Question # 22

Refer to the exhibit. All switches are configured with the default OSPF piority.Which configuration should be applied to ensure that the SW2 Cisco Nexus switch controls the LSA floods and advertises the network to the remaining nodes m the OSPFv2 area?

A.

Option A

B.

Option B

C.

Option C

D.

Option D

Full Access
Question # 23

Refer to the exhibit. The MDS-EDGE-Switch and MDS-Core-Switch are configured with NPV and NPIV features The FLOGI from Cisco UCS is received by the MDS-Core-Switch on interface fc1/2. An engineer tried to move all traffic between the MDS-EDGE-Switch and MOS-Core-Switch from interface fc 1/2 to fc1/3, but the attempt failed. Which set of actions completes the configuration?

A.

Disable the NPV feature in the MDS-EDGE-Switch.Re-enable the NPV feature.Disable interface fc1/1.

B.

Disable the NPIV feature in the MDS-EDGE-Switch.Re-enable the NPIV feature.Disable interface fc1/3.

C.

Shut down fc1/1 in the MDS-EDGE-Switch.Re-apply the command.Enable interface fc1/1.

D.

Shutdown fc1/3 in the MDS-EDGE-Switch.Re-apply the command.Enable interface fc1/3.

Full Access
Question # 24

Refer to the exhibit. The network management system that is located at 192.168.10.10 and port 2000 must receive traps from the Cisco UCS Manager called UCSM. The community name is Cisco123! and the SNMP version must be the most secure.

These two commands have already been configured on Cisco UCSM.

UCS-A# scope monitoring

UCS-A/monitoring # enable snmp

Which command set completes the SNMP configu

A.

Option A

B.

Option B

C.

Option C

D.

Option D

Full Access
Question # 25

Refer to the exhibit.

Which type of backup is required to restore a Cisco UCS configuration?

A.

full state

B.

system configuration

C.

logical configuration

D.

all configuration

Full Access
Question # 26

Which service profile is affected if the default host firmware policy in Cisco UCS Manager is changed?

A.

any service profile that has no host firmware policy defined

B.

any service profile that uses a user-created host firmware policy

C.

any service profile that is not in the root sub-org

D.

any service profile that uses the global-default host firmware policy

Full Access
Question # 27

An engineer must optimize ARP responses and reduce unnecessary ARP broadcasts over the VXLAN/EVPN fabric. Which action accomplishes these tasks?

A.

Configure ip proxy-arp under the VLAN SVI associated with the VXLAN VNI.

B.

Configure ip proxy-arp within the VXLAN VNI configuration under the VTEP NVE interface.

C.

Configure suppress-arp within the VXLAN VNI configuration under the VTEP NVE interface

D.

Configure suppress-arp under the VLAN SVI associated with the VXLAN VNI.

Full Access
Question # 28

The Cisco UCS blade chassis must send SNMPv3 traps to a network monitoring system. The SNMP trap messages should be authenticated and have protection from closure. Which SNMP security privileged level should be configured?

A.

noPriv

B.

auth

C.

noAuth

D.

priv

Full Access
Question # 29

Refer to the exhibit.

Two Cisco Nexus Series Switches use EIGRP between their Eth1/1 interfaces. The switches are configured to support EIGRP authentication. Which set of CLI

commands must be used to establish EIGRP neighborship?

A.

interface Ethernet1/1 ip router eigrp Pallini ip authentication mode md5 Pallini EIGRP

B.

Interface Ethernet1/1 ip router eigrp 10 ip authentication mode eigrp Pallini EIGRP

C.

interface Ethernet1/1 ip router eigrp 10 ip authentication mode EIGRP Paliini md5

D.

interface Ethernet1/1 ip router eigrp Pallini ip authentication mode eigrp Pallini md5

Full Access
Question # 30

Which Cisco Nexus Dashboard service distributes Cisco ACI network configuration policies and templates to different data centers?

A.

Nexus Orchestrator

B.

Nexus Insight

C.

Nexus Fabric Controller

D.

Nexus Data Broker

Full Access
Question # 31

An engineer must configure a Cisco MDS 9000 Series Switch for traffic analysis from the storage array. The storage array is connected to the interface fc2/1 in VSAN 10 and the traffic analyzer to fc4/2. The capture file must include ingress and egress traffic between the switch and the storage array. Also, only traffic in VSAN 10 must be captured. Which configuration set meets these requirements?

A.

interface fc4/2switchport mode SD no shutdown!span session 1 source interface fc2/1 destination interface fc4/2 source filter vsan 10

B.

Interface fc4/2switchport mode trunk switchport trunk allow vsan 10 no shutdown!span session 1 source interface fc2/1 tx destination Interface fc4 ' 2 rx no suspend

C.

Interface fc4/2switchport mode auto no shutdown!span session 1 source interface fc2/1 rx destination interface fc4/2 source filter vsan 10 no suspend

D.

interface fc4/2 switchport mode STno shutdown!span session 1 source interface fc2/1 destination interface fc4/2 source filter vsan 10

Full Access
Question # 32

Refer to the exhibit. A network engineer must implement a micro-segmentation solution to allow communication between client and server EPGs but restrict traffic between endpoints located on the same EPG In the current deployment, all EPGs are members of the preferred group Which configuration meets these requirements?

A.

Implement a contract exception TAG on the EPGs.

B.

Deploy the EPGs in different bridge domains.

C.

Set the client EPG isolation flag as Enforced.

D.

Configure a taboo contract on the client EPG.

Full Access
Question # 33

Refer to the exhibit. The list of RPM packages was installed in a Bash shell of a Cisco Nexus 9000 Series Switch. Which action must be used to install and enable a BGP feature on the switch?

A.

bash-4.2# feature bgp9K(config)# sudo yum -y install bgp

B.

bash-4.2$ sudo yum -y install bgp9K(config)# feature bgp

C.

bash-4.2$ feature bgpbash-4.2$ sudo yum -y install bgp

D.

9K(config)# sudo yum -y install bgp9K(config)# feature bgp

Full Access
Question # 34

Refer for the exhibit. A network administrator is creating a JSON payload to provision multiple EPGs within an application profite. All EPGs must be created in a single HTTP POST. Which data structure must be used after the " children " parameter to create.

A.

whitespace

B.

object

C.

string

D.

array

Full Access
Question # 35

An engineer must implement a disaster recovery policy for the Cisco UCS infrastructure. The solution must meet these criteria

    The Recovery Point Objective must be 48 hours

    The backup must use encrypted transmission

    The Recovery Time Objective must be 4 hours

Which configuration set must be used in the scheduled backup to meet these requirements?

A.

Protocol TFTP Schedule BI-Weekly

B.

Protocol SFTPSchedule Weekly

C.

Protocol FTP Schedule Bi-Weekly

D.

Protocol SCP Schedule Daily

Full Access
Question # 36

An engineer implements an ACI fabric and must implement microsegmentation of endpoints within the same IP subnet using a network-based attribute. The attribute mapping must allow IP subnet independence. Which attribute must be selected?

A.

MAC address

B.

Custom

C.

Tag

D.

IP

Full Access
Question # 37

A server engineer must create a backup operation that will be used for the entire restore of the Cisco UCS system using a binary that includes a snapshot of the entre system. Which Backup type must be configured to achieve the objective?

A.

Logical

B.

System

C.

AJI Configuration

D.

Full State

Full Access
Question # 38

An engineer must configure OSPFv2 connectivity between a pair of Cisco Nexus switches. The connection between the switches must meet these requirements:

    Use unicast for updates.

    Use decentralized communication of updates.

    Full adjacency between switches.

Which configuration is needed to meet these requirements?

A.

filter list between the neighbors

B.

virtual link between the neighbors

C.

interface with a type of p2p network

D.

stub area between the neighbors

Full Access
Question # 39

Which configuration statically assigns VSAN membership to a virtual Fibre Channel interface?

A.

Switch(config-vsan-db)# vsan 100 bind interface fc 3/1

B.

Switch(config-vsan-db)# vsan 100 bind interface vfc 31

C.

Switch(config-vsan-db)# vsan 100 fc 3/1

D.

Switch(config-vsan-db)# vsan 100 interface vfc 31

Full Access
Question # 40

Drag and drop the network assurance concepts from the left onto the corresponding benefits on the right.

Full Access
Question # 41

What is a benefit of using the Cisco UCS Lightweight upgrade feature?

A.

The firmware version of a component e updated only when it has boon modified.

B.

A sod reboot is available for the fabric interconnects

C.

Security updates are scheduled with the next reboot d the fabric interconnects.

D.

All servers are rebooted to push the latest updates.

Full Access
Question # 42

What is the effect of enabling Skip Validation in the Cisco UCS Auto Install process?

A.

The firmware image of Cisco UCS is not installed.

B.

The upgrade process of Cisco UCS fails to complete.

C.

Cisco UCS Manager does not report issues with the upgrade.

D.

Users that are logged in to Cisco UCS Manager are logged out.

Full Access
Question # 43

What is a characteristic of a nondisruptive upgrade using a Cisco MDS 9000 Series Switch with dual supervisor modules?

A.

The data plane is down for more than 60 seconds.

B.

Layer 2 forwarding stops during the upgrade.

C.

The new software version is first downloaded on the standby supervisor.

D.

The control plane continues forwarding Fibre Channel traffic.

Full Access
Question # 44

What is a benefit of independent resource scaling in Cisco

HyperFlex hybrid architecture?

A.

flexible expansion of compute, caching, and capacity

B.

remote booting of converged servers

C.

multivendor converged node hardware support

D.

support for compute nodes with third-party storage

Full Access
Question # 45

An engineer must create an EPG called " Test* The configuration request should succeed it the Tenant called " Tenant " and the application profile called " Test " exist The firewall policy allows only the HTTP connectivity lo APIC from the user ' s computer. Which action accomplishes this goal?

A.

Send < fvAEPg dn= " uniMn-TesU/ap-Test/ ' epg-Tenant " status= " created " / > to APIC payload using HTTP PUT to the Cisco APIC.

B.

Send < tvAEPg dn " " unl/tn-Tenant/ap-Test/epg-Test " status- " created " / > to APIC payload using HTTP POST to the Cisco APIC.

C.

Send < fvAEPg dn " unl//tn-Tenanl//epg-Test//ap-TBsf ' status-,,created " r > to APIC payload using HTTP PUT to the Cisco APIC

D.

Send < fvAEPg dn " unl/tn-Test/ap-Test ' epg-Tenant " status- " created " /^ to APIC payload using HTTP POST to the Cisco APIC.

Full Access
Question # 46

A network administrator attempts to automate the provisioning of several new Cisco Nexus switches. The administrator prepares a bootstrap configuration script for the task Due to the number of switches a zero-touch provisioning solution is preferred Additionally, some switches arrive with outdated software and should be automatically upgraded as part of the provisioning workflow Which solution meets the requirements?

A.

DHCP

B.

Ansible

C.

NX-API

D.

POAP

Full Access
Question # 47

An engineer musí create a new Cisco UCS user account to perform these actions:

    Modify systems logs, faults, and power management settings

    View access to all other configuration in the UCS domain.

Which two roles must be assigned to the user to permit these actions? (Choose two.)

A.

Administrator

B.

Server Compute

C.

Facility Manager

D.

Read-Only

E.

Operations

Full Access
Question # 48

An engineer must assign a device alias of Marketing to a Fibre Channel port that has a worldwide name of 21:00:00:00:11:11:22:22 on a Cisco MDS 9000 Series Switch. Which two commands accomplish this goal? (Choose two.)

A.

vsan database

B.

device-alias database

C.

device-alias name Marketing pwwn 21:00:00:00:11:11:22:22

D.

device-alias name Marketing wwn 21:00:00:00:11:11:22:22

E.

device-alias rename wwn Marketing

Full Access
Question # 49

Which technology enables RDMA functionality over Ethernet between multiple broadcast domains?

A.

RoCEv1

B.

iWARP

C.

NVMe-oF

D.

RoCEv2

Full Access
Question # 50

An engineer is configuring a vHBA template in Cisco UCS Manager. The engineer needs to specify the logical addresses used by the vHBA and the path through which the SAU Traffic flows. Which two resources must be specified in the vHBA template? (Choose two)

A.

WWNN

B.

VLAN ID

C.

Fabric ID

D.

MAC addresses

E.

WWPN Pod

Full Access
Question # 51

Refer to the exhibit. Which command set must be used to complete the configuration that configures a Cisco Nexus 9000 Series server scheduler to perform the backup of It’s configuration every Wednesday at 8:00 am?

A.

Option A

B.

Option B

C.

Option C

D.

Option D

Full Access
Question # 52

Refer to the exhibit. A Cisco data center environment is implemented with vPC. The web server replies using the SVI MAC address as the Layer 2 header instead of the HSRP MAC address on VLAN 23. This behavior causes packet drops on the Cisco Nexus 9000 Series Switches due to the vPC loop prevention mechanism The requirement is for the vPC feature to allow N9K_1 and N9K_2 to forward traffic between the NAS server and the web server, even if the HSRP ' s MAC address is not used on Layer 2 headers for VLAN 23. Which feature must be used to accomplish this goal?

A.

Peer Gateway

B.

ARP Sync

C.

L3 Peer Router

D.

Object Tracking

Full Access
Question # 53

Refer to the exhibit During a vPC peer switch reload, there is packet loss between the server and the router Which action must be taken to prevent this behavior during future reloads?

A.

Set the routed uplink ports of the Cisco Nexus peers as orphans.

B.

Increase the vPC delay restore timer.

C.

Decrease the OSPF hello and dead interval timers.

D.

Disable vPC ARP synchronize on the vPC peers.

Full Access
Question # 54

A network engineer must roll back a configuration change made on a Cisco Nexus 9300 Series Switch. Before the change, the network engineer created a checkpoint named pre-config. The rollback abort if any errors occur. Which command must be used to accomplish these objectives?

A.

Option A

B.

Option B

C.

Option C

D.

Option D

Full Access
Question # 55

A company with a small network team purchases 10 Cisco Nexus 9000 Series Switches for a network refresh. Some elements of the existing network infrastructure will be retained, including DHCP and DNS servers. The company wants the network team to use PowerOn Auto Provisioning (POAP) to configure the switches, but the team only has experience with manual configuration. Which two additional network infrastructure components must be configured to use POAP? (Choose two.)

A.

GIT server

B.

SNMP trap receiver

C.

NETBOOT host discovery

D.

SCP file repository

E.

TFTP script server

Full Access
Question # 56

What is the impact of a nondisruptive upgrade on fabric and modular switches?

A.

During the upgrade. new devices cannot log in to the fabric.

B.

When the installation is complete, the system BIOS must be updated.

C.

If a zone server merge is in progress, the upgrade continues without interruption.

D.

The upgrade disrupts the control plane for more than 120 seconds.

Full Access
Question # 57

A network engineer must download a firmware image from a remote location to a Cisco UCS Fabric Interconnect. The software bundle is over 232 MB in size. The file transfer must use encryption and authentication Which protocol must be used to accomplish this goal?

A.

RDP

B.

HTTPS

C.

SCP

D.

TFTP

Full Access
Question # 58

A network engineer needs a tool to automate the provisioning of Cisco UCS Service Profiles. The administrator has limited programming knowledge but is skilled with scripting tools. The tool must include existing support for Cisco UCS configuration. Additionally, the administrator will eventually use the solution to manage Cisco UCS C-Series Rack Servers. Which tool meets these requirements?

A.

Osco DCNM

B.

Python scripts

C.

PowerShell

D.

Bash scripts

Full Access
Question # 59

Which two protocols are used by the NFSv4 protocol? (Choose two.)

A.

FCP

B.

TCP

C.

UDP

D.

Ethernet

E.

IP

Full Access
Question # 60

Which feature of Cisco Nexus Dashboard permits users to switch between site controllers of Cisco ACI?

A.

air-gap support

B.

multifactor authentication

C.

single sign-on

D.

cloud-site onboarding

Full Access
Question # 61

Refer to the exhibit. A traffic collector virtual machine is installed inside the Cisco UCS server. The collector must monitor traffic that is received on G1/2 with ERSPAN. Which set of

actions must be taken to send the traffic to the traffic collector?

A.

Configure ERSPAN. Configure a source session on Cisco UCS Manager.

B.

Configure SPAN. Configure a source session on the SW1 switch.

C.

Configure ERSPAN. Configure a source session on the SW1 switch.

D.

Configure SPAN. Configure a source session on Cisco UCS Manager.

Full Access
Question # 62

A customer asks an engineer to develop a framework that will be used to replace the process of the manual device configuration of Cisco NX-OS devices The engineer plans to use the programmatic

interface that meets these requirements:

    The development team is familiar with Windows-based scripting environment using PowerShell.

    The customer’s secunty requirements mandate the use of HTTPS transport.

Which solution must be used to meet these requirements?

A.

Open Agent Container

B.

VISORE

C.

NETCONF-YANG

D.

NX-API

Full Access
Question # 63

The network engineer configured NetFlow to identify the issues affecting the communication between the two hosts. The network capture must meet these criteria:

•source IP 10.0.0.17

•destination IP 10.0.200.150

•Export to 10.100.1.15.

Drag and drop the code snippets from the right onto the blanks in the code to complete the NetFlow configuration.

Full Access
Question # 64

An online retailer uses 200 cloud-hosted virtual machines (VMs). Currently, the configuration of each VM is performed manually. To support the growth strategy of the retailer, the retailer starts to automatically scale the VMs to meet demand and uses Ansible for configuration management. Which action must be performed in Ansible to meet the requirements before automation is performed?

A.

Configure a dynamic inventory plug-in.

B.

Set up and configure Ansible Tower.

C.

Add each VM to the .ini inventory file.

D.

Register each VM in Ansible

Full Access
Question # 65

Refer to the exhibit. A network engineer must configure an authentication solution for Cisco UCS with these conditions:

    Two-factor authentication must be enabled for all UCS user authentication.

    All AAA packets must be encrypted and use TCP port 49 to establish communication.

Which set of actions needs these requirements?

A.

Option A

B.

Option B

C.

Option C

D.

Option D

Full Access
Question # 66

Refer to the exhibit. An engineer is troubleshooting a connection issue from the virtual machine that is located on the Webserver 1 blade. The application team requested a packet capture for all traffic that is transferred to and from Webserver 1. The engineer confirmed that the host server vNIC1 has VLAN 300 assigned to It. Which action must be taken to capture the traffic?

A.

Configure a span session that Is sourced from Eth1/1 with a destination that is set to port channel 1.

B.

Configure a span session that Is sourced from Eth1/3 with a destination that Is set to Ethl/2.

C.

Configure a span session that Is sourced from port channel 1 with a destination that Is set to port channel 2.

D.

Configure a span session that Is sourced from service profile vNlCi with a destination that is set to Ethl/3.

Full Access
Question # 67

Which command must be run before downgrading a Cisco Nexus 9300 Series Switch?

A.

Option A

B.

Option B

C.

Option C

D.

Option D

Full Access
Question # 68

An engineer must perform a backup and restore in Cisco UCS to rebuild the system in a disaster recovery scenario. The backup file must be encrypted to prevent the passwords from being

stored as cleartext. Which backup configuration meets these requirements?

A.

Full state backup over TFTP

B.

All configuration backup over SFTP

C.

System configuration backup over FTP

D.

Logical configuration backup over SCP

Full Access
Question # 69

An engineer uses Nexus API to get the output of the running configuration of a Cisco Nexus 9000 Series Switch. The engineer must create the request using JSON-RPC format. Which request code must be used to accomplish this goal?

A.

B.

C.

D.

Full Access
Question # 70

Refer to the exhibit. An engineer must create a scheduler task on a Cisco Nexus 9000 Series Switch at 06:00 AM. The task must save the running configuration to a file in the bootflash, then transfer the file from the bootflash to a TFTP server Which command must the scheduler task run after the running configuration is copied to the bootflash?

A.

scheduler job name backup-cfg

B.

copy bootflash:/$(TIMESTAMP)-cfg.$(SWITCHNAME) tftp://192.168.2.1/

C.

scheduler schedule name daylydbackup

D.

cli var name timestamp $(TIMESTAMP)

Full Access
Question # 71

An engineer needs to perform a backup of user roles and locales from Cisco UCS Manager to replicate the setting to a different fabric interconnect. The engineer wants to review the file before importing it to a target fabric intercon- nect. Which backup type must be selected to meet these requirements?

A.

all configuration

B.

system configuration

C.

logical configuration

D.

fullstate

Full Access
Question # 72

Refer to the exhibit. Which action completes the vPC domain implementation?

A.

Allow VLANs on the vPC peer link member interfaces.

B.

Include the VRF management on the vPC domain.

C.

Configure the system MAC on the vPC domain.

D.

Add the vPC member ports to the vPC channel group.

Full Access
Question # 73

Refer to the exhibit. An engineer is configuring Cisco Data Center Network Manager to automate the provisioning of Cisco Nexus 9000 Series Switches. The engineer must configure user access for network engineers to permit device operations in Interface Manager. The solution must hide Admin and Config Menu items in Interface Manager Which two roles must be assigned to the network engineers to meet these requirements? (Choose two.)

A.

San-admin

B.

network-operator

C.

network-admin

D.

access-admin

E.

global-admin

Full Access
Question # 74

What is an advantage of NAS compared to SAN?

A.

It provides lossless throughput

B.

It functions in an existing IP environment

C.

It offers enhanced NFS features

D.

It offers enhanced security features.

Full Access
Question # 75

Several production and development database servers exist in the same EPG and IP subnet. The IT security policy is to prevent connections between production and development. Which attribute must be used to assign me servers to different microsegments?

A.

VM name

B.

data center

C.

VMM domain

D.

IP address

Full Access
Question # 76

A network engineer must configure a vPC on a pair of Cisco Nexus switches connected to a third-party load balancer. The connection must meet these requirements:

* The port channel must be negotiated with the load balancer via an open standards protocol.

* Traffic that is sent directly to the physical MAC address of the other peer switch must be forwarded locally by the receiving switch.

Which command set accomplishes these goals?

A.

vpe domain 10 peer-gateway interface Eth1/1 channel-group 1 mode on

B.

vpe domain 10 peer-switch interface Eth1/1 channel-group 1 mode on

C.

vpe domain 10 peer-switch interface Eth1/1 channel-group 1 mode active

D.

vpc domain 10peer-gateway interface Eth1/1 channel-group 1 mode active

Full Access
Question # 77

A customer deploys a media server to distribute streaming videos to network clients. The requirement is to allow the video feed to reach only requesting clients. The shared trees must not

propagate the video feed if no clients from that tree request it. To reduce configuration touchpoints, the solution must support the automatic discovery and announcement of RP-set

information. Each router in the network is responsible for selecting the RP. Which configuration set meets these requirements?

A.

router(config-if)# ip pim sparse-sense mode router(config}# ip pim auto-rp router(config)# ip pim send-rp-announce

B.

router(config-if}# ip pim dense-mode router(config)# ip pim rp-address 1.1.1.1 router(config}# ip pim rp listener

C.

router(config-if}# ip pim bidir-enable router(config}# ip pim ssm default router(config}# ip igmp version 3

D.

router(config-if}# ip pim sparse mode router(config)# ip pim bsr-candidate Lo0 router(config)}# ip pim rp-candidate Lo0

Full Access
Question # 78

An engineer must Implement a Python script to manage Cisco Application Centric Infrastructure (ACI) and endpoint groups. Which Python llorarles must be used to parse responses and send requests to Cisco ACI?

A.

Element Tree and SSL

B.

JSON and EtementTree

C.

JSON and requests

D.

socket and JSON

Full Access
Question # 79

A company plans to migrate some of its services to the cloud. The company does not want to manage or control the underlying cloud infrastructure. It also wants to maintain control over the deployment of its applications and configuration settings of the application-hosting environment. Which cloud service model meets these requirements?

A.

Platform as a Service

B.

Function as a Service

C.

Infrastructure as a Service

D.

Software as a Service

Full Access
Question # 80

Refer to the exhibit An engineer must configure fabric binding on a Cisco MDS 9000 Series Switch to match the output Which fabric database configuration accomplishes this goal?

A.

Option A

B.

Option B

C.

Option C

D.

Option D

Full Access
Question # 81

Which feature of the Cisco Nexus Dashboard Insights uses Duo to reduce the risk of static passwords?

A.

single sign-on

B.

cloud-site onboarding

C.

multifactor authentication

D.

air-gap support

Full Access
Question # 82

A network engineer must restore the configuration of a Cisco Nexus 9300 Series Switch The backup file is stored on an external server The current configuration must be replaced without having to reload the switch Which command must be used to accomplish this goal?

A.

Option A

B.

Option B

C.

Option C

D.

Option D

Full Access
Question # 83

Refer to the exhibit. A network engineer must retrieve the network interface name from a JSON object. The engineer loads the JSON into a Python dictionary named json_object. Which code snippet completes the Python script?

A.

Option A

B.

Option B

C.

Option C

D.

Option D

Full Access
Question # 84

An engineer builds a new Cisco ACI fabric Which VLAN must be configured as the infrastructure VLAN during the Cisco APIC setup script?

A.

a unique in-band management VLAN

B.

a unique native VLAN

C.

a unique VLAN within the network

D.

a unique 006 management VLAN

Full Access
Question # 85

Refer to me exhibit An engineer is troubleshooting a connectivity issue for a VM with MAC address 00:50:56:88:10:14 running on me cisco UCS-8 Series blade in VLAN 10. Cisco DCS Manager is connected to a Cisco nexus 9000 Series switch over port channel 10. Currently, the VM Is unreachable from any source that Is outside of me Cisco UCS domain. Which action musí be takenlo allow me VM to be readable?

A.

Allow VLAN 10 In the VPC peer link between the Cisco Nexus switches

B.

Allow VLAN 10 In the vSwitch at the hypervisor level.

C.

Allow VLAN 10 In a trunk between the Fabric interconnects and the Cisco Nexus snitches.

D.

Allow VLAN 10 In a trunk between the IOM and the Fabric Interconnects.

Full Access
Question # 86

What is the impact of a nondisruptive update on a Cisco MOS 9000 Series Modular Switch?

A.

If any CFS commits are pending in the fabric, the upgrade is aborted.

B.

The process continues uninterrupted when a zone server merge is in progress.

C.

After the installation is completed, the system BIOS must be updated.

D.

The system dynamically allocates space to load the new images.

Full Access
Question # 87

Refer to the exhibit. A network engineer is using tcpdump to capture a

snapshot of OSPF-related traffic on a specific Cisco NX-OS switch port. For security reasons, the capture must be taken using an embedded container that is already deployed on the Cisco Nexus device. Which command completes the script?

A.

Guestshell

B.

Guestshell-bash

C.

Run guestshell

D.

Run bash

Full Access
Question # 88

Refer to the exhibit The VSAN 4041 and 4042 are exchanged between two Cisco MDS 9000 Series Switches called MDS-1 and MDS-2 The objective is to deploy a security mechanism on MDS-1 to allow MDS-2 to join the fabric exclusively Drag and drop the code snippets from the bottom onto the boxes in the code to complete the MDS-1 configuration Not all code snippets are used.

Full Access
Question # 89

Refer to the exhibit.

An engineer must enable interlace Eth1/2 when the interface Ethi/1 is shut down using EEM on a Cisco Nexus 9000 Series Switch. Which command set accomplishes this goal?

A.

event syslog pattern Down_lnterfaceevent manager applet " Interface Ethernetl/2. changed state to administratively down "

B.

event syslog pattern Down_lnteriaceevent manager applet " Interface Ethemetl/1, changed state to administratively down "

C.

event manager applet Down_lnterfaceevent syslog pattern " Interface Ethernet 1 ' 1. changed state to administratively down "

D.

event manager applet Down interfaceevent syslog pattern " Interface Ethernet 1/2, changed state to administratively down "

Full Access
Question # 90

Refer to the exhibit. In a Cisco ACI fabric, the status of interface Eth1/1 changes frequently. Which set of actions configures the fabric to disable Eth1/1 when the port flaps more than 10 times within 1 minute?

A.

From fabric policies, set the time allowed for max flaps to 60.

B.

From fabric policies set link debounce interval to 60.

C.

From access policies, set the time allowed for max flaps to 60.

D.

From access policies, set link debounce interval to 1.

Full Access
Question # 91

Refer to the exhibit.

Cisco Fabric Services is enabled in the network. Which type of IP address is used by the Cisco Fabric Services protocol?

A.

IPv4 unicast address

B.

IPv4 multicast address

C.

IPv4 gateway address

D.

IPv4 anycast address

Full Access
Question # 92

Refer to the exhibit. An administrator must complete the unified fabric configuration between Server1 and a pair of Cisco Nexus 9000 Series Switches Drag and drop the code snippets from the right onto the blanks in the code on the left to complete the N9K-1 configuration Snippets are used more than once.

Full Access
Question # 93

An engineer upgrades the bash on the Cisco Nexus 9000 Series Switch.

Which command must be used to complete the task?

A.

rpm -qa

B.

rpm -Uhv

C.

upgrade -U

D.

update -vh

Full Access
Question # 94

Refer to the exhibit An engineer must access a Cisco UCS C-Series server KVM from a remote location. The engineer must use the out-of-band interface to access the KVM Which configuration set meets these requirements?

A.

NIC mode: Dedicated VLAN ID: 101

B.

NIC mode: Shared LOM vlan state: Disabled

C.

NIC mode Shared LOM VLAN ID 100

D.

NIC mode Dedicated VLAN state Disabled

Full Access
Question # 95

An engineer is implementing VSANs on a Cisco MDS 9000 Series Switch with a native Fibre Channel. The deployment must meet these requirements:

    The host on port fc1/1 must be assigned to VSAN 10.

    The port channel 10 ISL must pass multiple VSANs. including VSAN 10.

Which configuration set meets these requirements?

A.

Create VSAN 10 in the YSAN database.Bind VSAN 10 to interface fd/1 in the VSAN database.Enable VSAN trunkinO on the ISLAlow VSAN 10 on the ISL

B.

Activate VSAN 10 in the vFC interface.Associate VSAN 10 to interface vie 1/1.Enable vsan F-port-channel-trunk on the ISL.Set encapsulation EISL on the switch port

C.

Disable VSAN 1 in the VSAN databaseAssign VSAN 10 to the ISLEnable VSAN trunking on the port channel membersPermit VSAN 10 in the FLOGI database.

D.

Configure VSAN 10 In the interface configuration.Attach VSAN 10 to the VSAN database.Enable VSAN trunking on fd/1.Filter all VSAN on the ISL

Full Access
Question # 96

A network engineer implements a Python script on a Cisco Nexus 9000 Series Switch with redundant supervisors. The script is located on a built-in container that runs as part of the Cisco NX-OS system. The requirement is to automate the periodic transfer of the Python script to a redundant supervisor. In addition, the script must be transferred to an external server using encryption and authentication. Which configuration set meets these requirements?

A.

Enable the checkpoint feature. Configure an EEM job to transfer the script to the SCP server.

B.

Implement the guest shell synchronization feature. Configure a scheduler job to transfer the script to the TFTP server.

C.

Enable the checkpoint feature. Configure a scheduler job to transfer the script to the HTTP server.

D.

Implement the guest shell synchronization feature Configure a CRON job to transfer the script to the SCP server.

Full Access
Question # 97

How does a modular Cisco Nexus 9000 Series Switch handle an in-service software (ISSU) upgrade as compared to a nonmodular switch?

A.

Nonmodular switches support rolling upgrades, and modular switches do not.

B.

Modular switches require a complete halt of traffic on all modules during an ISSU.

C.

Modular switches need manual intervention for an ISSU, and nonmodular switches upgrade automatically.

D.

An ISSU on modular switches can be done without traffic disruption due to dual supervisor engines.

Full Access
Question # 98

An engineer must configure device aliases for a Cisco MDS 9000 Series Switches-based SAN fabric. The configuration must meet these requirements:

    The engineer must be prompted before the changes are committed to the database

    Pending changes must be explicitly displayed on the console.

Which command accomplishes this task?

A.

device-alias distribute diffs-only

B.

device-alias enhanced

C.

device-alias commit

D.

device-alias confirm-commit

Full Access
Question # 99

A network engineer repeatedly saves a configuration on Catalyst switches to NVRAM using the write memory command. What action should be taken to implement the same action on Nexus switches?

A.

Use the exit command to leave the configuration mode and save the configuration automatically.

B.

Use the write memory command to save the configuration.

C.

Use the alias command to use the write memory command.

D.

Use the wri command to use the copy running-config startup-config command.

Full Access
Question # 100

An engineer must upgrade the server firmware for which the service profile is configured with a host firmware package. Which action must be taken to accomplish this goal?

A.

Change the maintenance policy to user-ack and upgrade.

B.

Perform a direct upgrade on the server using Auto Install.

C.

Disassociate the service profile from the server and upgrade.

D.

Upgrade the server through the host firmware package.

Full Access
Question # 101

Which API standard is used to manage the UCS-X in Intersight Managed Mode?

A.

Blowfish

B.

XML

C.

WebRTC

D.

Redfish

Full Access
Question # 102

Which set of actions must be taken to backup service profiles, MAC pools, and VLANs and transfer the back up file to the external server using authentication?

A.

Option A

B.

Option B

C.

Option C

D.

Option D

Full Access
Question # 103

What is the impact of upgrading an EPLD of a fabric switching module on the Cisco MDS 9700 Series Switch?

A.

The standby supervisor becomes an active supervisor with no impact.

B.

The traffic flow in the module is interrupted due to the restart power cycle.

C.

The control plane is reloaded and no data plane disruption occurs on the active supervisor.

D.

The FAN module power cycle is not restarted.

Full Access
Question # 104

Refer to the exhibit. An engineer must configure NX-I to accept only packets that exist in the routing table with the 9.9.9.2/32 source IP address and that are reachable via interface Eth 1/1. Which attribute

to the ip verify unicast source command is needed to meet these requirements?

A.

interlace Elh1/2 with rx keyword

B.

interface Eth1/2 with allow-default keyword

C.

interface Eth1/1 with allow-default keyword

D.

interface Eth1/1 with rx keyword

Full Access
Question # 105

An engineer is implementing the Cisco ACI fabric and must create two different vPCs from leaf switches A and B. The vPCs are deployed as follows:

    vPC 1 encompasses ports Eth 1 /1 on leaf A and B and connects to server 1.

    vPC 2 encompasses port Eth1/2 on leaf A and B and connects to server 2.

A leaf switch profile listing leaves A and B is already configured Which ACI object must be created to meet these requirements?

A.

two vPC interface policy groups

B.

one access port interface policy group

C.

two PortChannel interface policy groups

D.

one vPC interface policy group

Full Access
Question # 106

Which two configuration settings are available in the in the cisco UCS firmware Auto sync server policy?

A.

User Notification

B.

User Acknowledge

C.

No Action

D.

Delayed Action

E.

Immediate action

Full Access
Question # 107

A SAN administrator receives reports about latency and response-time issues that impact various applications. The incidents have gradually increased in frequency and seventy and have reached a critical state Which DCNM configuration set identifies the source of the issues?

A.

Option A

B.

Option B

C.

Option C

D.

Option D

Full Access
Question # 108

An engineer must integrate Cisco ACI with VMware vCenter The visualization team configured the necessary port groups and assigned them to virtual machines through VMware vCenter The final port group configuration must be protected from being changed by Cisco APIC Which action accomplishes these goals ' ?

A.

Create the VMM domain with switch mode set to AVE

B.

Set the VMM domain access mode to Read Only Mode.

C.

Activate CDP and LLDP m the VMM domain

D.

Configure the VMM domain with tag collection.

Full Access
Question # 109

Refer to the exhibit An engineer must build the VXLAN for a new customer

BGP is configured for Layer 3 connectivity and is confirmed to work as

expected The deployment must meet these entena:

•All VNI IDs must contain the VLAN that they represent

•Multicast must be used to transport ARP messages between the pods

Drag and drop the code snippets from the bottom onto the boxes in the code to complete the remaining Layer 2 connectivity.

Not all code snippets are used.

Full Access
Question # 110

Refer to the exhibit. Server1 is connected to a Cisco Nexus 9000 Series Switch via a 1-Gb pod channel. The storm control is applied to the Eth0 device with a zero percent value What does the switch do to traffic that traverses the switch interfaces during the streaming window that exceeds the bandwidth of the interfaces?

A.

forwards half of the traffic

B.

suppresses all traffic

C.

forwards all traffic

D.

drops all of the excess traffic

Full Access
Question # 111

An engineer must apply AAA configuration on a Cisco MDS 9000 Series Switch The solution must meet these conditions :

    It must use a challenge-response authenticator protocol that uses MD5 hashing with an incrementally changing identifier

    The RADIUS configuration must be automatically shared with other MDS switches in the environment

The RADIUS server is already defined. Which command set completes the configuration?

A)user naed

B)

C)

D)

A.

Option A

B.

Option B

C.

Option C

D.

Option D

Full Access
Question # 112

Refer to the exhibit. VLAN 10 Is experiencing delays and packet drops when the traffic is forwarded through the switch. The destination flow analyzer accepts traffic captures of not more than 30 seconds. Which configuration implements the traffic capture that meets the requirements?

A.

Option A

B.

Option B

C.

Option C

D.

Option D

Full Access
Question # 113

Which two Cisco UCS components are upgraded when using Install Infrastructure Firmware? (Choose two.)

A.

Cisco UCS Manager

B.

board controller

C.

I/O modules

D.

storage adapters

E.

BIOS

Full Access
Question # 114

Refer to the exhibit An engineer must resolve a connectivity issue on a Cisco 9000 Senes Switch that was configured by using Ansible The switch must be configured to meet these requirements •Interface G*gabitethemet0/1 must be a member of VLAN 10 in access mode •Interface G*gabetethernet0/2 must allow VLANs 10 and 20 in trunk mode, with native VLAN 20

Which set of actions must be taken to meet these criteria?

A.

Configure interface G»gabitethernet0/2 in trunk mode Assign interface GigabitethernetO/1 to VLAN 10

B.

Configure interface Gigabitethernet0/1 in access mode Assign interface GigabitethernetO/1 to VLAN 10

C.

Configure interface GigabttethemetOV 1 in trunk mode Assign interface GigabitethernetO/2 to VLAN 20

D.

Configure interface GigabitethernetQ/2 in access mode Assign interface G»gabitethernet0/2 to VLAN 20

Full Access