Question 1

Which two statements about Cisco Nexus 7000 line cards are true? (Choose two.)

Accepted Answer

A)  M1, M2, and F1 cards are allowed in the same VDC. 
B)  M line cards are service-oriented and likely face the access layer and provide Layer 2 connectivity. 
C)  F line cards are performance-oriented and likely connect northbound to the core layer for Layer 3 connectivity. 
D)  M line cards support Layer 2, Layer 3, and Layer 4 with large forwarding tables and a rich feature set. 
E)  The F2 line card must reside in the admin VDC. 
A)  M1, M2, and F1 cards are allowed in the same VDC. 
B)  M line cards are service-oriented and likely face the access layer and provide Layer 2 connectivity. 
C)  F line cards are performance-oriented and likely connect northbound to the core layer for Layer 3 connectivity. 
D)  M line cards support Layer 2, Layer 3, and Layer 4 with large forwarding tables and a rich feature set. 
E)  The F2 line card must reside in the admin VDC.

Question 2

On a Cisco Nexus7000 switches what is true regarding Cisco FabricPath requirements?

Accepted Answer

A)  Ensure that you have installed the Enhanced Layer 2 license and that you have installed an F Series module 
B)  Ensure that you have installed the Enhanced Layer 2 license and that you have installed an M Series module 
C)  Ensure that you have installed the Enhanced Layer 3 license and that you have installed an M Series module 
D)  Ensure that you have installed the Scalable Feature License license and that you have installed an F Series module 
A)  Ensure that you have installed the Enhanced Layer 2 license and that you have installed an F Series module 
B)  Ensure that you have installed the Enhanced Layer 2 license and that you have installed an M Series module 
C)  Ensure that you have installed the Enhanced Layer 3 license and that you have installed an M Series module 
D)  Ensure that you have installed the Scalable Feature License license and that you have installed an F Series module

Question 3

Which statement is true if password-strength checking is enabled?

Accepted Answer

A)  Short, easy-to-decipher passwords will be rejected. 
B)  The strength of existing passwords will be checked. 
C)  Special characters, such as the dollar sign ($) or the percent sign (%), will not be allowed. 
D)  Passwords become case-sensitive. 
A)  Short, easy-to-decipher passwords will be rejected. 
B)  The strength of existing passwords will be checked. 
C)  Special characters, such as the dollar sign ($) or the percent sign (%), will not be allowed. 
D)  Passwords become case-sensitive.

Question 4

Which statement about RADIUS configuration distribution using Cisco Fabric Services on a Cisco Nexus 7000 Series Switch is true?

Accepted Answer

A)  Cisco Fabric Services does not distribute the RADIUS server group configuration or server and global keys. 
B)  Enabling Cisco Fabric Services causes the existing RADIUS configuration on your Cisco NX- OS device to be immediately distributed. 
C)  When the RADIUS configuration is being simultaneously changed on more than one device in a Cisco Fabric Services region, the most recent changes will take precedence. 
D)  Only the Cisco NX-OS device with the lowest IP address in the Cisco Fabric Services region can lock the RADIUS configuration. 
A)  Cisco Fabric Services does not distribute the RADIUS server group configuration or server and global keys. 
B)  Enabling Cisco Fabric Services causes the existing RADIUS configuration on your Cisco NX- OS device to be immediately distributed. 
C)  When the RADIUS configuration is being simultaneously changed on more than one device in a Cisco Fabric Services region, the most recent changes will take precedence. 
D)  Only the Cisco NX-OS device with the lowest IP address in the Cisco Fabric Services region can lock the RADIUS configuration.

Question 5

Which command enables NPIV on Cisco Nexus 5000 Series Switches and Cisco MDS switches?

Accepted Answer

A)  switch(config)# npiv enable 
B)  switch(config)# npivon 
C)  switch(config)# feature npiv 
D)  switch(config)# npiv proxy 
E)  switch(config)# np proxy-enable 
A)  switch(config)# npiv enable 
B)  switch(config)# npivon 
C)  switch(config)# feature npiv 
D)  switch(config)# npiv proxy 
E)  switch(config)# np proxy-enable

Question 6

Switch(config)# login block-for 60 attempts 10 within 180 Switch(config)# login quiet-mode access-class acl Refer to the exhibit. Which statement is true about the impact to login requests on a Cisco NX-OS switch that uses this configuration?

Accepted Answer

A)  Hosts in the ACL are denied after 10 failed login attempts occur within 180 seconds. 
B)  Hosts outside the ACL are allowed if more than 10 failed login attempts occur. 
C)  Hosts in the ACL are allowed after 10 failed login attempts occur within 180 seconds. 
D)  All hosts are denied if 10 failed login attempts from hosts in the ACL occur in 180 seconds. 
A)  Hosts in the ACL are denied after 10 failed login attempts occur within 180 seconds. 
B)  Hosts outside the ACL are allowed if more than 10 failed login attempts occur. 
C)  Hosts in the ACL are allowed after 10 failed login attempts occur within 180 seconds. 
D)  All hosts are denied if 10 failed login attempts from hosts in the ACL occur in 180 seconds.

Question 7

Which three VDC resources can be constrained with a resource template? (Choose three.)

Accepted Answer

A)  CLs 
B)  NAT entries 
C)  IPv4 routes 
D)  IPv6 routes 
E)  SPAN sessions
F) RBAC users 
A)  CLs 
B)  NAT entries 
C)  IPv4 routes 
D)  IPv6 routes 
E)  SPAN sessions
F) RBAC users

Question 8

What is the network bootstrap program used by Cisco NX-OS iPXE?

Accepted Answer

A)  NETBOOT 
B)  NX-OS iPXE 
C)  iPXE-POAP 
D)  Mini-OS 
A)  NETBOOT 
B)  NX-OS iPXE 
C)  iPXE-POAP 
D)  Mini-OS

Question 9

What are two capabilities of the DCNM REST API? (Choose two.)

Accepted Answer

A)  uses the dcnm-token header for requests authentication after initial basic authentication 
B)  uses basic authentication without encoding for username and password 
C)  supports HTTP until release 11.0(1) 
D)  uses bearer key authorization 
E)  is separated into Classic LAN, LAN Fabric, Media Controller, and SAN Management categories 
A)  uses the dcnm-token header for requests authentication after initial basic authentication 
B)  uses basic authentication without encoding for username and password 
C)  supports HTTP until release 11.0(1) 
D)  uses bearer key authorization 
E)  is separated into Classic LAN, LAN Fabric, Media Controller, and SAN Management categories

Question 10

Which two statements apply to authentication when using the Cisco Intersight API? (Choose two.)

Accepted Answer

A)  Each API Key can be assigned specific roles but not privileges. 
B)  Secret Key is only available at API Key creation time. 
C)  An API Key is composed of a Key ID and Secret Key. 
D)  The user credentials for the cisco.com accounts are shared with the Cisco Intersight Web Service. 
E)  An API Key is composed of a keyId and sessionCookie. 
A)  Each API Key can be assigned specific roles but not privileges. 
B)  Secret Key is only available at API Key creation time. 
C)  An API Key is composed of a Key ID and Secret Key. 
D)  The user credentials for the cisco.com accounts are shared with the Cisco Intersight Web Service. 
E)  An API Key is composed of a keyId and sessionCookie.

Question 11

When the Cisco bigmuddy-network-telemetry-collector from GitHub is used, which command displays only the message headers?

Accepted Answer

A)  --print 
B)  --all 
C)  --brief 
D)  --print-all 
A)  --print 
B)  --all 
C)  --brief 
D)  --print-all

Question 12

Which two statements about gRPC are true? (Choose two.)

Accepted Answer

A)  It is an IETF draft. 
B)  It is an IETF standard. 
C)  It runs over SSH. 
D)  It is an open source initiative. 
E)  It runs over HTTPS. 
A)  It is an IETF draft. 
B)  It is an IETF standard. 
C)  It runs over SSH. 
D)  It is an open source initiative. 
E)  It runs over HTTPS.

Question 13

When configuring PIM to support an OTV implementation, which PIM configuration is supported in Cisco NX-OS?

Accepted Answer

A)  SwitchA(config-if)# ip pim ssm default 
B)  SwitchA(config-if)# ip pim sparse-mode 
C)  SwitchA(config-if)# ip pim dense-mode 
D)  SwitchA(config-if)# ip pim sparse-dense-mode 
A)  SwitchA(config-if)# ip pim ssm default 
B)  SwitchA(config-if)# ip pim sparse-mode 
C)  SwitchA(config-if)# ip pim dense-mode 
D)  SwitchA(config-if)# ip pim sparse-dense-mode

Question 14

Refer to the exhibit.   The code should create a new tenant named Cisco via the Cobra SDK, which shows up after the execution of this script in the APIC dashboard. Which code must he inserted into the red box to create this tenant?

Accepted Answer

A)  fvTenant = NewTenant(name='Cisco') 
B)  tenant = Tenant(topMo. name='Cisco') 
C)  fvTenant = Tenant(topMo, name='Cisco') 
D)  fvTenant = Tenant('Cisco') 
A)  fvTenant = NewTenant(name='Cisco') 
B)  tenant = Tenant(topMo. name='Cisco') 
C)  fvTenant = Tenant(topMo, name='Cisco') 
D)  fvTenant = Tenant('Cisco')

Question 15

Which statement about SNMP support on Cisco Nexus switches is true?

Accepted Answer

A)  SNMP requires the LAN_ENTERPRISE_SERVICES_PKG license. 
B)  SNMP is not VRF-aware. 
C)  Only users belonging to the network operator RBAC role can assign SNMP groups. 
D)  Cisco NX-OS supports one instance of the SNMP per VDC. 
E)  Cisco NX-OS only supports SNMP over IPv4. 
A)  SNMP requires the LAN_ENTERPRISE_SERVICES_PKG license. 
B)  SNMP is not VRF-aware. 
C)  Only users belonging to the network operator RBAC role can assign SNMP groups. 
D)  Cisco NX-OS supports one instance of the SNMP per VDC. 
E)  Cisco NX-OS only supports SNMP over IPv4.

Question 16

Which command should you ran to distribute NTP configuration changes by using Cisco Fabric Services?

Accepted Answer

A)  ntp distribute 
B)  ntp server 1.2.3.4 
C)  ntp commit 
D)  ntp authenticate 
A)  ntp distribute 
B)  ntp server 1.2.3.4 
C)  ntp commit 
D)  ntp authenticate

Question 17

Refer to the exhibit.   Which Ansible module is needed in line 8 to create a new VLAN 10 on the hosts defined in the "ucs" group?

Accepted Answer

A)  vlan 
B)  ucs_vlans 
C)  vlans 
D)  nxos_vlans 
A)  vlan 
B)  ucs_vlans 
C)  vlans 
D)  nxos_vlans

Question 18

What configuration is required when implementing FCoE?

Accepted Answer

A)  disable LAN traffic on the interface 
B)  configure PortFast on the access port 
C)  permit all VLANs on the interface 
D)  permit all VSANs on the interface 
A)  disable LAN traffic on the interface 
B)  configure PortFast on the access port 
C)  permit all VLANs on the interface 
D)  permit all VSANs on the interface

Question 19

You create a checkpoint on a Cisco Nexus 7700 Series switch. You plan to roll back the running configuration by using the checkpoint. You must ensure that changes are made only if the entire rollback can be applied successfully. Which rollback option should you use?

Accepted Answer

A)  atomic 
B)  stop-at-first-failure 
C)  best-effort 
D)  verbose 
A)  atomic 
B)  stop-at-first-failure 
C)  best-effort 
D)  verbose

Question 20

What are two differences between SNMP and model-driven telemetry? (Choose two.)

Accepted Answer

A)  SNMP uses a continuous stream model. 
B)  SNMP uses a push model. 
C)  SNMP uses a pull model. 
D)  Model-driven telemetry uses a pull model. 
E)  Model-driven telemetry uses a push model. 
A)  SNMP uses a continuous stream model. 
B)  SNMP uses a push model. 
C)  SNMP uses a pull model. 
D)  Model-driven telemetry uses a pull model. 
E)  Model-driven telemetry uses a push model.

Exam 22: Securing Networks with Cisco Firepower (300-710 SNCF)

Which two statements about Cisco Nexus 7000 line cards are true? (Choose two.)

On a Cisco Nexus7000 switches what is true regarding Cisco FabricPath requirements?

Which statement is true if password-strength checking is enabled?

Which statement about RADIUS configuration distribution using Cisco Fabric Services on a Cisco Nexus 7000 Series Switch is true?

Which command enables NPIV on Cisco Nexus 5000 Series Switches and Cisco MDS switches?

Switch(config)# login block-for 60 attempts 10 within 180 Switch(config)# login quiet-mode access-class acl Refer to the exhibit. Which statement is true about the impact to login requests on a Cisco NX-OS switch that uses this configuration?

Which three VDC resources can be constrained with a resource template? (Choose three.)

What is the network bootstrap program used by Cisco NX-OS iPXE?

What are two capabilities of the DCNM REST API? (Choose two.)

Which two statements apply to authentication when using the Cisco Intersight API? (Choose two.)

When the Cisco bigmuddy-network-telemetry-collector from GitHub is used, which command displays only the message headers?

Which two statements about gRPC are true? (Choose two.)

When configuring PIM to support an OTV implementation, which PIM configuration is supported in Cisco NX-OS?

Refer to the exhibit. The code should create a new tenant named Cisco via the Cobra SDK, which shows up after the execution of this script in the APIC dashboard. Which code must he inserted into the red box to create this tenant?

Which statement about SNMP support on Cisco Nexus switches is true?

Which command should you ran to distribute NTP configuration changes by using Cisco Fabric Services?

Refer to the exhibit. Which Ansible module is needed in line 8 to create a new VLAN 10 on the hosts defined in the "ucs" group?

What configuration is required when implementing FCoE?

You create a checkpoint on a Cisco Nexus 7700 Series switch. You plan to roll back the running configuration by using the checkpoint. You must ensure that changes are made only if the entire rollback can be applied successfully. Which rollback option should you use?

What are two differences between SNMP and model-driven telemetry? (Choose two.)

Supporting Cisco Data Center System Devices (DCTECH)

Cisco Certified Technician Routing & Switching (RSTECH)

Understanding Cisco Cybersecurity Operations Fundamentals (CBROPS)

Cisco Certified Network Associate (CCNA)

Managing Industrial Networks with Cisco Networking Technologies (IMINS)

DevNet Associate (DEVASC)

Conducting Forensic Analysis and Incident Response Using Cisco CyberOps Technologies (CBRFIR)

Implementing Cisco Enterprise Advanced Routing and Services (ENARSI)

Implementing Cisco SD-WAN Solutions (ENSDWI)

Designing Cisco Enterprise Networks (ENSLD)

Designing Cisco Enterprise Wireless Networks (300-425 ENWLSD)

Implementing Cisco Enterprise Wireless Networks (300-430 ENWLSI)

Automating Cisco Enterprise Solutions (ENAUTO)

Implementing Cisco Service Provider Advanced Routing Solutions (SPRI)

Implementing Cisco Service Provider VPN Services (SPVI)

Designing Cisco Data Center Infrastructure (DCID)

Troubleshooting Cisco Data Center Infrastructure (DCIT)

Implementing Cisco Application Centric Infrastructure (DCACI)

Configuring Cisco MDS 9000 Series Switches (DCSAN)

Implementing Cisco Application Centric Infrastructure - Advanced

Automating Cisco Data Center Solutions (DCAUTO)

Implementing and Configuring Cisco Identity Services Engine (300-715 SISE)

Securing Email with Cisco Email Security Appliance (300-720 SESA)

Securing the Web with Cisco Web Security Appliance (300-725 SWSA)

Implementing Secure Solutions with Virtual Private Networks (SVPN 300-730)

Automating Cisco Security Solutions (SAUTO)

Implementing Cisco Collaboration Applications (CLICA)

Implementing Cisco Advanced Call Control and Mobility Services (CLASSM)

Implementing Cisco Collaboration Cloud and Edge Solutions

Implementing Cisco Collaboration Conferencing

Automating Cisco Collaboration Solutions (CLAUTO)

Implementing DevOps Solutions and Practices using Cisco Platforms (DEVOPS)

Developing Solutions Using Cisco IoT and Edge Platforms (DEVIOT)

Developing Applications for Cisco Webex and Webex Devices (DEVWBX)

Performing CyberOps Using Core Security Technologies (CBRCOR)

Implementing Cisco Enterprise Network Core Technologies (ENCOR)

Implementing and Operating Cisco Service Provider Network Core Technologies (SPCOR)

Implementing and Operating Cisco Data Center Core Technologies (DCCOR)

Implementing and Operating Cisco Security Core Technologies

Implementing Cisco Collaboration Core Technologies (CLCOR)

Developing Applications using Cisco Core Platforms and APIs (DEVCOR)

CCDE Design Written

Deploying Cisco Unified Contact Center Express

Cisco Meraki Solutions Specialist

Securing Cisco Networks with Sourcefire FireAMP Endpoints

Designing Cisco Unified Contact Center Enterprise (UCCED)

Implementing and Supporting Cisco Unified Contact Center Enterprise (UCCEIS)

Cisco Collaboration SaaS Authorization Exam

Cisco Security Architecture for System Engineers

Adopting The Cisco Business Architecture Approach (DTBAA)

Cisco Customer Success Manager (CSM)

Mastering The Cisco Business Architecture Discipline (DTBAD)

Filters