Question 1

Which configuration is needed to enable manual ESP mode for Fibre Channel TrustSec on Cisco MDS switches?

Accepted Answer

A)  MDS(config)# interface fc 1/1 MDS(config-if)# fcsp esp manual MDS(config)# interface fc 1/1 MDS(config-if)# fcsp esp manual 
B)  MDS(config)# fcsp esp manual 
C)  MDS(config-if)# fcsp mode gcm MDS(config-if-fcsp)# fcsp esp manual fcsp mode gcm MDS(config-if-fcsp)# 
D)  MDS(config-if-fcsp)# mode gcm MDS(config-if-fcsp)# mode gcm 
A)  MDS(config)# interface fc 1/1 MDS(config-if)# fcsp esp manual MDS(config)# interface fc 1/1 MDS(config-if)# fcsp esp manual 
B)  MDS(config)# fcsp esp manual 
C)  MDS(config-if)# fcsp mode gcm MDS(config-if-fcsp)# fcsp esp manual fcsp mode gcm MDS(config-if-fcsp)# 
D)  MDS(config-if-fcsp)# mode gcm MDS(config-if-fcsp)# mode gcm A

Question 2

A storage administrator is upgrading Cisco NX-OS on a Cisco MDS switch. The administrator performs an ISSU upgrade following the configuration guide. While the install is proceeding, the administrator connects a new server to the switch, which cannot access storage. The existing servers continue to operate properly through the switch. Why is the new server failing to connect?

Accepted Answer

A)  The fabric data plane resets as part of the upgrade process. 
B)  The new server is unable to log in to the fabric to receive an FC-ID. 
C)  The upgrade process disables any currently unused ports. 
D)  The zoning database is locked during the upgrade process. 
A)  The fabric data plane resets as part of the upgrade process. 
B)  The new server is unable to log in to the fabric to receive an FC-ID. 
C)  The upgrade process disables any currently unused ports. 
D)  The zoning database is locked during the upgrade process. D

Question 3

Refer to the exhibit.   What is the result of the configuration?

Accepted Answer

A)  No-drop CoS values are advertised by the DCBX. 
B)  LFC is prioritized over PFC on Ethernet 1/10. 
C)  PFC operates on Ethernet 1/10 regardless of the capability of the peer. 
D)  PFC fails to operate properly unless LFC is disabled on Ethernet 1/10. 
A)  No-drop CoS values are advertised by the DCBX. 
B)  LFC is prioritized over PFC on Ethernet 1/10. 
C)  PFC operates on Ethernet 1/10 regardless of the capability of the peer. 
D)  PFC fails to operate properly unless LFC is disabled on Ethernet 1/10. A

Question 4

A storage administrator is enabling DH-CHAP for the first time on a Fibre Channel fabric. Which condition must the administrator consider while configuring this feature?

Accepted Answer

A)  NTP must be configured on all devices or the configuration fails. 
B)  The MD5 hash must be used if TACACS+ or RADIUS authentication for FCSP is enabled. 
C)  All switches on the fabric must be configured for the same password. 
D)  Enabling DH-CHAP protocol feature is unsupported on FCIP interfaces. 
A)  NTP must be configured on all devices or the configuration fails. 
B)  The MD5 hash must be used if TACACS+ or RADIUS authentication for FCSP is enabled. 
C)  All switches on the fabric must be configured for the same password. 
D)  Enabling DH-CHAP protocol feature is unsupported on FCIP interfaces.

Question 5

Refer to the exhibit.   A user who is logged in as an operator cannot update the zoneset. What is the cause of this issue?

Accepted Answer

A)  The fabric is locked by admin on switch-2. 
B)  Hard zoning is enabled. 
C)  Merge control is disabled. 
D)  The switch has a conflicting domain ID. 
E)  The fabric is locked by admin on another switch. 
A)  The fabric is locked by admin on switch-2. 
B)  Hard zoning is enabled. 
C)  Merge control is disabled. 
D)  The switch has a conflicting domain ID. 
E)  The fabric is locked by admin on another switch.

Question 6

An engineer is configuring a SAN environment and attempts to activate a zoneset, but a lock is held by another user. Which argument does the engineer use to clear the lock from the zoning database configuration?

Accepted Answer

A)  commit 
B)  abort 
C)  clear 
D)  force 
A)  commit 
B)  abort 
C)  clear 
D)  force

Question 7

A storage administrator wants to enable NPV in a Fibre Channel edge switch. Which configuration is supported in this mode?

Accepted Answer

A)  Cisco Fabric Services distribution over Fibre Channel 
B)  E Port connectivity to the core switch 
C)  local switching of east-west traffic 
D)  Dynamic Port VSAN Membership 
A)  Cisco Fabric Services distribution over Fibre Channel 
B)  E Port connectivity to the core switch 
C)  local switching of east-west traffic 
D)  Dynamic Port VSAN Membership

Question 8

A storage administrator is connecting two previously configured switches to make a single fabric. When the E Ports are connected, the administrator sees a ZONE MERGE FAILURE message referring to the zoneset for VSAN 10 on each switch. Which command should the administrator use to allow these switches to work together?

Accepted Answer

A)  zoneset import interface fc1/1 vsan 10 
B)  zoneset distribute full vsan 10 
C)  zoneset overwrite-control vsan 10 
D)  zoneset copy active-zoneset full-zoneset 
A)  zoneset import interface fc1/1 vsan 10 
B)  zoneset distribute full vsan 10 
C)  zoneset overwrite-control vsan 10 
D)  zoneset copy active-zoneset full-zoneset

Question 9

A storage network engineer is implementing disk-array data replication between two SAN environments in two different data centers not connected via Fibre Channel. Which SAN switch feature must be implemented?

Accepted Answer

A)  FCIP 
B)  zoning merge over LAN 
C)  VSAN scoping 
D)  IVR 
A)  FCIP 
B)  zoning merge over LAN 
C)  VSAN scoping 
D)  IVR

Question 10

Refer to the exhibit.   What is the result of merging the fabric?

Accepted Answer

A)  The merged fabric IVR VSAN topology is set to activate. 
B)  The merged fabric has NAT enabled. 
C)  The merge is invalid. 
D)  The merged fabric contains only service group Group1. 
A)  The merged fabric IVR VSAN topology is set to activate. 
B)  The merged fabric has NAT enabled. 
C)  The merge is invalid. 
D)  The merged fabric contains only service group Group1.

Question 11

Refer to the exhibit.   The san-user must configure FSPF on the VSAN 500, but fails. An operator with network administrative rights must authorize the san-user to perform this work. Which configuration must the operator apply?

Accepted Answer

A)  MDS-A(config)# role name sangroup MDS-A(config-role)# no rule 2 MDS-A(config)# role name sangroup MDS-A(config-role)# no rule 2 
B)  MDS-A(config-role)# rule 4 permit config feature fspf rule 4 permit config feature fspf 
C)  MDS-A(config-role)# rule 2 permit config feature vsan rule 2 permit config feature vsan 
D)  MDS-A(config-role)# vsan policy deny MDS-A(config-role-vsan)# permit vsan 500 vsan policy deny MDS-A(config-role-vsan)# permit vsan 500 
A)  MDS-A(config)# role name sangroup MDS-A(config-role)# no rule 2 MDS-A(config)# role name sangroup MDS-A(config-role)# no rule 2 
B)  MDS-A(config-role)# rule 4 permit config feature fspf rule 4 permit config feature fspf 
C)  MDS-A(config-role)# rule 2 permit config feature vsan rule 2 permit config feature vsan 
D)  MDS-A(config-role)# vsan policy deny MDS-A(config-role-vsan)# permit vsan 500 vsan policy deny MDS-A(config-role-vsan)# permit vsan 500

Question 12

Which condition requires using a device alias rather than a Fibre Channel alias?

Accepted Answer

A)  The zone database must be distributed over the fabric. 
B)  The same alias must be used in zoning as well as DPVM. 
C)  All aliases being used are being configured in the same VSAN. 
D)  Aliases must be saved within a central database on the fabric. 
A)  The zone database must be distributed over the fabric. 
B)  The same alias must be used in zoning as well as DPVM. 
C)  All aliases being used are being configured in the same VSAN. 
D)  Aliases must be saved within a central database on the fabric.

Question 13

Refer to the exhibit.   Which configuration change improves the ability of the link to recover from frame loss?

Accepted Answer

A)  Increase the reset timeout. 
B)  Enable selective acknowledgment. 
C)  Increase the send buffer size to 15000 KB. 
D)  Disable PMTU discovery. 
A)  Increase the reset timeout. 
B)  Enable selective acknowledgment. 
C)  Increase the send buffer size to 15000 KB. 
D)  Disable PMTU discovery.

Question 14

A storage administrator manually configures a storage switch to use a new static domain ID. After issuing an fcdomain restart vsan 1 command, the administrator sees that the switch is still using the existing domain ID. What is the reason why the configuration is not working?

Accepted Answer

A)  Static domain IDs apply only after a switch is rebooted. 
B)  The disruptive keyword was not used on the command. 
C)  Build fabric notifications were not sent to the other switches. 
D)  Domain manager fast restart is not enabled on the switch. 
A)  Static domain IDs apply only after a switch is rebooted. 
B)  The disruptive keyword was not used on the command. 
C)  Build fabric notifications were not sent to the other switches. 
D)  Domain manager fast restart is not enabled on the switch.

Question 15

A Cisco MDS Series Switch with the POAP feature boots and does not find the startup configuration. Which location is checked first when the switch enters POAP mode?

Accepted Answer

A)  USB device that contains the software image files and the switch configuration file 
B)  DHCP server to bootstrap the interface IP address, gateway, DNS server, and TFTP IP addresses 
C)  TFTP server where the necessary configuration files are downloaded 
D)  HTTP server where the URL is used to download the software image 
A)  USB device that contains the software image files and the switch configuration file 
B)  DHCP server to bootstrap the interface IP address, gateway, DNS server, and TFTP IP addresses 
C)  TFTP server where the necessary configuration files are downloaded 
D)  HTTP server where the URL is used to download the software image

Question 16

What is the effect of a non-graceful virtual machine shutdown on a virtualized server that is connected to a SAN with Fibre Channel interfaces?

Accepted Answer

A)  NP Port reload connected to the upstream SAN switch 
B)  out-of-service Fibre Channel interfaces on the SAN switch 
C)  frames stuck in the storage system 
D)  frames stuck in the HBA buffer of the server 
A)  NP Port reload connected to the upstream SAN switch 
B)  out-of-service Fibre Channel interfaces on the SAN switch 
C)  frames stuck in the storage system 
D)  frames stuck in the HBA buffer of the server

Question 17

Refer to the exhibit.   A network engineer must configure the SAN telemetry streaming feature to stream statistics form a Cisco MDS 9000 Series Switch to two external receivers with the IP addresses 192.168.1.4 and 192.168.1.5. Which two configurations accomplish this configuration? (Choose two.)

Accepted Answer

A)  Add IP address 192.168.1.5 port 50005 protocol gRPC encoding GPB under destination-group 100. 
B)  Add IP address 192.168.1.5 port 50005 protocol gRPC encoding GPB under destination-group 300. 
C)  Add dst-grp 200 under subscription 100. 
D)  Add dst-grp 300 under subscription 200. 
E)  Add dst-grp 100 under subscription 200. 
A)  Add IP address 192.168.1.5 port 50005 protocol gRPC encoding GPB under destination-group 100. 
B)  Add IP address 192.168.1.5 port 50005 protocol gRPC encoding GPB under destination-group 300. 
C)  Add dst-grp 200 under subscription 100. 
D)  Add dst-grp 300 under subscription 200. 
E)  Add dst-grp 100 under subscription 200.

Question 18

A network engineer is configuring a Cisco MDS switch for FCoE. Which two conditions must be considered during the implementation phase? (Choose two.)

Accepted Answer

A)  On Cisco MDS switches, system-defined class maps for class-FCoE and class-default are enabled but can be deleted. 
B)  The QoS policy must be identical to other Cisco FCoE switches in the network. 
C)  On the Cisco MDS, the MTU is set equal to 2112. 
D)  VLAN 1 or the native VLAN can be mapped to an FCoE VSAN. 
E)  FCoE is already enabled on a Cisco MDS switch. 
A)  On Cisco MDS switches, system-defined class maps for class-FCoE and class-default are enabled but can be deleted. 
B)  The QoS policy must be identical to other Cisco FCoE switches in the network. 
C)  On the Cisco MDS, the MTU is set equal to 2112. 
D)  VLAN 1 or the native VLAN can be mapped to an FCoE VSAN. 
E)  FCoE is already enabled on a Cisco MDS switch.

Question 19

Which two steps are mutual between Cisco secure boot and UEFI secure boot? (Choose two.)

Accepted Answer

A)  bootloader 
B)  operating system 
C)  microloader 
D)  kemel 
E)  hardware anchor 
A)  bootloader 
B)  operating system 
C)  microloader 
D)  kemel 
E)  hardware anchor

Question 20

Which feature on MDS platforms ensures that the code that is running on the hardware platform is authentic and unmodified, while also validating the BIOS to eliminate any rootkits.

Accepted Answer

A)  Cisco Secure Boot 
B)  UEFI Secure Boot 
C)  Secure Unique Device Identifier 
D)  BIOS Secure Boot 
A)  Cisco Secure Boot 
B)  UEFI Secure Boot 
C)  Secure Unique Device Identifier 
D)  BIOS Secure Boot

Exam 20: Implementing Cisco Application Centric Infrastructure - Advanced

Which configuration is needed to enable manual ESP mode for Fibre Channel TrustSec on Cisco MDS switches?

Refer to the exhibit. What is the result of the configuration?

A storage administrator is enabling DH-CHAP for the first time on a Fibre Channel fabric. Which condition must the administrator consider while configuring this feature?

Refer to the exhibit. A user who is logged in as an operator cannot update the zoneset. What is the cause of this issue?

An engineer is configuring a SAN environment and attempts to activate a zoneset, but a lock is held by another user. Which argument does the engineer use to clear the lock from the zoning database configuration?

A storage administrator wants to enable NPV in a Fibre Channel edge switch. Which configuration is supported in this mode?

A storage network engineer is implementing disk-array data replication between two SAN environments in two different data centers not connected via Fibre Channel. Which SAN switch feature must be implemented?

Refer to the exhibit. What is the result of merging the fabric?

Refer to the exhibit. The san-user must configure FSPF on the VSAN 500, but fails. An operator with network administrative rights must authorize the san-user to perform this work. Which configuration must the operator apply?

Which condition requires using a device alias rather than a Fibre Channel alias?

Refer to the exhibit. Which configuration change improves the ability of the link to recover from frame loss?

A storage administrator manually configures a storage switch to use a new static domain ID. After issuing an fcdomain restart vsan 1 command, the administrator sees that the switch is still using the existing domain ID. What is the reason why the configuration is not working?

A Cisco MDS Series Switch with the POAP feature boots and does not find the startup configuration. Which location is checked first when the switch enters POAP mode?

What is the effect of a non-graceful virtual machine shutdown on a virtualized server that is connected to a SAN with Fibre Channel interfaces?

Refer to the exhibit. A network engineer must configure the SAN telemetry streaming feature to stream statistics form a Cisco MDS 9000 Series Switch to two external receivers with the IP addresses 192.168.1.4 and 192.168.1.5. Which two configurations accomplish this configuration? (Choose two.)

A network engineer is configuring a Cisco MDS switch for FCoE. Which two conditions must be considered during the implementation phase? (Choose two.)

Which two steps are mutual between Cisco secure boot and UEFI secure boot? (Choose two.)

Which feature on MDS platforms ensures that the code that is running on the hardware platform is authentic and unmodified, while also validating the BIOS to eliminate any rootkits.

Supporting Cisco Data Center System Devices (DCTECH)

Cisco Certified Technician Routing & Switching (RSTECH)

Understanding Cisco Cybersecurity Operations Fundamentals (CBROPS)

Cisco Certified Network Associate (CCNA)

Managing Industrial Networks with Cisco Networking Technologies (IMINS)

DevNet Associate (DEVASC)

Conducting Forensic Analysis and Incident Response Using Cisco CyberOps Technologies (CBRFIR)

Implementing Cisco Enterprise Advanced Routing and Services (ENARSI)

Implementing Cisco SD-WAN Solutions (ENSDWI)

Designing Cisco Enterprise Networks (ENSLD)

Designing Cisco Enterprise Wireless Networks (300-425 ENWLSD)

Implementing Cisco Enterprise Wireless Networks (300-430 ENWLSI)

Automating Cisco Enterprise Solutions (ENAUTO)

Implementing Cisco Service Provider Advanced Routing Solutions (SPRI)

Implementing Cisco Service Provider VPN Services (SPVI)

Designing Cisco Data Center Infrastructure (DCID)

Troubleshooting Cisco Data Center Infrastructure (DCIT)

Implementing Cisco Application Centric Infrastructure (DCACI)

Configuring Cisco MDS 9000 Series Switches (DCSAN)

Automating Cisco Data Center Solutions (DCAUTO)

Securing Networks with Cisco Firepower (300-710 SNCF)

Implementing and Configuring Cisco Identity Services Engine (300-715 SISE)

Securing Email with Cisco Email Security Appliance (300-720 SESA)

Securing the Web with Cisco Web Security Appliance (300-725 SWSA)

Implementing Secure Solutions with Virtual Private Networks (SVPN 300-730)

Automating Cisco Security Solutions (SAUTO)

Implementing Cisco Collaboration Applications (CLICA)

Implementing Cisco Advanced Call Control and Mobility Services (CLASSM)

Implementing Cisco Collaboration Cloud and Edge Solutions

Implementing Cisco Collaboration Conferencing

Automating Cisco Collaboration Solutions (CLAUTO)

Implementing DevOps Solutions and Practices using Cisco Platforms (DEVOPS)

Developing Solutions Using Cisco IoT and Edge Platforms (DEVIOT)

Developing Applications for Cisco Webex and Webex Devices (DEVWBX)

Performing CyberOps Using Core Security Technologies (CBRCOR)

Implementing Cisco Enterprise Network Core Technologies (ENCOR)

Implementing and Operating Cisco Service Provider Network Core Technologies (SPCOR)

Implementing and Operating Cisco Data Center Core Technologies (DCCOR)

Implementing and Operating Cisco Security Core Technologies

Implementing Cisco Collaboration Core Technologies (CLCOR)

Developing Applications using Cisco Core Platforms and APIs (DEVCOR)

CCDE Design Written

Deploying Cisco Unified Contact Center Express

Cisco Meraki Solutions Specialist

Securing Cisco Networks with Sourcefire FireAMP Endpoints

Designing Cisco Unified Contact Center Enterprise (UCCED)

Implementing and Supporting Cisco Unified Contact Center Enterprise (UCCEIS)

Cisco Collaboration SaaS Authorization Exam

Cisco Security Architecture for System Engineers

Adopting The Cisco Business Architecture Approach (DTBAA)

Cisco Customer Success Manager (CSM)

Mastering The Cisco Business Architecture Discipline (DTBAD)

Filters