QUESTION 121
An engineer configures a storage environment for a customer with high-security standards. The secure environment is configured in VSAN 50. The customer wants to maintain a configuration and active databases and prevent unauthorized switches from joining the fabric. Additionally, the switches must prevent rogue devices from connecting to their ports by automatically learning the WWPNs of the ports connected to them for the first time. Which two configuration sets must be used to meet these requirements? (Choose two.)

A. fabric-binding activate vsan 50 force
B. fcsp dhchap hash md5 sha1
C. clear fabric-binding activate vsan 50
fabric-binding activate vsan 50
D. port-security enable
port-security activate vsan 50
E. fcsp enable
fcsp auto-active

Correct Answer: AD

QUESTION 122
An engineer modifies the virtual port channel domain on a Cisco Nexus 9000 Series Switch using Session Manager. Which two commands must the engineer use to confirm the configuration is valid and apply the configuration to the switch? (Choose two.)

A. save bootflash:
B. verify
C. checkpoint
D. write memory
E. commit

Correct Answer: BE

QUESTION 123
An engineer must perform an initial configuration of VXLAN and MP-BGP EVPN on the Cisco Nexus 9000 Series platform. The underlay must be OSPF, and the VTEP must run with distributed default gateway on a VLAN interface. Which command set must be applied to meet these requirements?

A. NX9K(config)# feature nv overlay
NX9K(config)# feature bfd
NX9K(config)# feature fabric forwarding
NX9K(config)# feature vn-segment-vlan-based
NX9K(config)# nv overlay-evpn
NX9K(config)# feature ospfv3
B. NX9K(config)# feature nv overlay
NX9K(config)# feature bgp
NX9K(config)# feature bfd
NX9K(config)# feature ngmvpn
NX9K(config)# feature ospf
NX9K(config)# feature interface-vlan
C. NX9K(config)# feature nv overlay
NX9K(config)# feature bfd
NX9K(config)# feature vn-segment-vlan-based
NX9K(config)# nv overlay-evpn
NX9K(config)# feature ngmvpn
NX9K(config)# feature ospf
D. NX9K(config)# feature nv overlay
NX9K(config)# feature vn-segment-vlan-based
NX9K(config)# feature bgp
NX9K(config)# nv overlay-evpn
NX9K(config)# feature ospf
NX9K(config)# feature interface-vlan

Correct Answer: D

QUESTION 124
An engineer configures user authentication on Cisco UCS Manager to ensure that the user and roles can be saved on the external server and secured using authentication. Which set of actions meets these requirements?

A. Deploy an all configuration backup and implement a TFTP protocol.
B. Implement a logical configuration backup and configure the HTTPS protocol.
C. Configure a full state backup and implement an FTP protocol.
D. Perform a system configuration backup and use the SCP protocol.

Correct Answer: D

QUESTION 125
Which event is expected during direct upgrade of Cisco UCS Manager firmware?

A. All users logged in to the UCSM are logged out, and their sessions end.
B. IPMI polling is interrupted.
C. The I/O Module reboots immediately after the firmware is activated.
D. Data traffic is disrupted for a single fabric interconnect setup.

Correct Answer: A

QUESTION 126
An engineer needs to perform a backup of user roles and locales from Cisco UCS Manager to replicate the setting to a different fabric interconnect. The engineer wants to review the file before importing it to a target fabric interconnect Which backup type must be selected to meet these requirements?

A. system configuration
B. full state
C. logical configuration
D. all configuration

Correct Answer: A

QUESTION 127
An engineer must remove the running configuration of a Cisco Nexus 9000 Series Switch and replace it with a backup file without restarting the switch. The backup file is stored on an SFTP server that is reachable via the mgmt interface. Which set of commands accomplishes this task?

A. copy sftp://[email protected]/backup.cfg startup-config vrf mgmt0
copy startup-config running-config
B. copy sftp://[email protected]/backup.cfg startup-config vrf management
reload in 10
C. copy sftp://[email protected]/backup.cfg bootflash:///backup.cfg vrf management
configure replace bootflash:///backup.cfg
D. configure replace sftp://[email protected]/backup.cfg vrf mgmt0
copy running-config bootflash://startup-config

Correct Answer: C

QUESTION 128
An engineer needs a utility to translate traditional Nexus CLI inputs and generate Python code using XML and JSON message formats. The solution needs to be available on a Nexus 7700 series switch. Which utility should be used?

A. NX-OS JSON-RPC
B. NX-API Sandbox
C. Guest Shell for NX-OS
D. Open NX-OS

Correct Answer: B

QUESTION 129
Which component becomes unavailable for a maximum of 80 seconds during a nondisruptive Cisco NX-OS upgrade?

A. supervisor module
B. default VSAN
C. control plane
D. data plane

Correct Answer: C

QUESTION 130
An engineer must export the Cisco UCS Manager configuration for backup purposes. The requirement is to export the configuration that contains the AAA and RBAC configuration. Also, the file must be stored in a human-readable format. Which backup type must be selected to meet these requirements?

A. all configuration
B. full state
C. logical configuration
D. system configuration

Correct Answer: D

QUESTION 131
A storage engineer must configure Cisco TrustSec Fibre Channel by using manual ESP mode on a Cisco MDS 9000 Series Switch. ESP mode must use the default message authentication and encryption method. Which configuration must the engineer apply on the switch to complete the configuration?

A. MDS-01(config)# interface fc 1/11
MDS-01(config-if)# fcsp esp manual
B. MDS-01(config)# interface fc 1/11
MDS-01(config-if)# fcsp esp manual
MDS-01(config-if-fcsp)# mode gcmac
C. MDS-01(config)# interface fc 1/11
MDS-01(config-if)# fcsp mode gcm
D. MDS-01(config)# interface fc 1/11
MDS-01(config-if)# fcsp mode gcm
MDS-01(config-if-fcsp)# fcsp esp manual

Correct Answer: A

QUESTION 132
Which LDAP rule must be used in Cisco UCS Manager to search for a user continuously down the tree hierarchy until the user is found?

A. enable group authorization
B. check box of use primary group
C. disable secure socket layer
D. set group recursion to recursive

Correct Answer: D

QUESTION 133
An engineer must configure a Cisco UCS blade system that is managed by Cisco UCS Manager. All four connected interfaces between the blade system and the fabric interconnects must be used. Additionally, the connectivity must tolerate any link failure between the l/O module and the fabric interconnects. Which action accomplishes these requirements?

A. Configure Link Group Preference to Port Channel.
B. Configure chassis/FEX discovery policy action to four links.
C. Configure port aggregation with LACP policy set to default.
D. Configure Firmware Auto Sync Server policy to Auto Acknowledge.

Correct Answer: B

QUESTION 134
A Cisco IMC on the Cisco UCS C-Series Server must be configured with VLAN ID 110 and a priority value of 20. Which command set meets these requirements?

A. Server# scope cimc
Server /cimc # scope vlan
Server /cimc/network # enable vlan
Server /cimc/network *# set vlan-id 110
Server /cimc/network *# set vlan-priority 20
Server /cimc/network *# commit
B. Server# scope cimc
Server /cimc # scope network
Server /cimc/network # switchport mode access
Server /cimc/network *# switchport access 110
Server /cimc/network *# spanning-tree portfast
Server /cimc/network *# copy run start
C. Server# scope cimc
Server /cimc # scope network
Server /cimc/network # switchport mode trunk
Server /cimc/network *# switchport trunk native vlan 110
Server /cimc/network *# spanning-tree portfast
Server /cimc/network *# copy run start
D. Server# scope cimc
Server /cimc # scope network
Server /cimc/network # set vlan-enabled yes
Server /cimc/network *# set vlan-id 110
Server /cimc/network *# set vlan-priority 20
Server /cimc/network *# commit

Correct Answer: D

QUESTION 135
A company with a small network team purchases 10 Cisco Nexus 9000 Series Switches for a network refresh. Some elements of the existing network infrastructure will be retained, including DHCP and DNS servers. The company wants the network team to use PowerOn Auto Provisioning (POAP) to configure the switches, but the team only has experience with manual configuration. Which two additional network infrastructure components must be configured to use POAP? (Choose two.)

A. SCP file repository
B. NETBOOT host discovery
C. TFTP script server
D. SNMP trap receiver
E. GIT server

Correct Answer: AC

QUESTION 136
A DevOps engineer must design a solution for a Cisco Unified Fabric solution to provision, monitor, and troubleshoot the network infrastructure for a data center based on Cisco Nexus Series Switches. The solution must provide visibility and control of the unified data center. Which solution meets these requirements?

A. Cisco CloudCenter Suite
B. Cisco AppDynamics
C. Cisco DNA Center
D. Nexus Dashboard Fabric Controller

Correct Answer: D

QUESTION 137
A network engineer must configure a power redundancy policy on a Cisco UCS C-Series Rack Server. The power redundancy must support two power sources being used to power the server. Which configuration should be applied to meet the requirement?

A. server# scope org /
server /org # scope psu-policy
server /org/psu-policy # set psu-redundancy-policy grid
server /org/psu-redundancy-policy* # commit-buffer
B. server# scope org /
server /org # scope psu-policy
server /org/psu-policy # set redundancy grid
server /org/psu-policy * # commit-buffer
C. server# scope org /
server /org # scope psu-policy
server /org/psu-policy # set redundancy N+1
server /org/psu-policy * # commit-buffer
D. server# scope org /
server /org # scope psu-policy
server /org/psu-policy # set psu-redundancy-policy N+1
server /org/psu-redundancy-policy * # commit-buffer

Correct Answer: B

QUESTION 138
Which virtualization feature is provided by network-attached storage?

A. VM cluster shared disk
B. raw device passthrough
C. hypervisor host boot LUN
D. ALUA path redirection

Correct Answer: A

QUESTION 139
What is the function of network file storage?

A. It supports block-level system protocol used to access storage blocks.
B. It allows clients to access files stored on a remote server.
C. It uses Fibre Channel switches to store data at the block level.
D. It provides file system access for storage devices.

Correct Answer: B

QUESTION 140
A network engineer must download a firmware image from a remote location to a Cisco UCS Fabric Interconnect. The software bundle is over 232 MB in size. The file transfer must use encryption and authentication. Which protocol must be used to accomplish this goal?

A. HTTPS
B. TFTP
C. SCP
D. RDP

Correct Answer: C