Question 1

Which two authentication types does Cisco UCS Manager support when configuring authentication? (Choose two.)

Accepted Answer

A)  PAM 
B)  local 
C)  802.1X 
D)  Kerberos 
E)  LDAP 
A)  PAM 
B)  local 
C)  802.1X 
D)  Kerberos 
E)  LDAP

Question 2

Refer to the exhibit.   What is configured as a result of running these commands?

Accepted Answer

A)  loose unicast RPF 
B)  strict unicast RPF 
C)  IP Source Guard 
D)  reverse lookup for outbound packets 
A)  loose unicast RPF 
B)  strict unicast RPF 
C)  IP Source Guard 
D)  reverse lookup for outbound packets

Question 3

A UCS B-Series server located in B5108 chassis 1 slot 1 is currently unavailable. The server needs to be associated with a specific service profile when it becomes available. Which associate service profile option should be selected to accomplish this goal?

Accepted Answer

A)  restrict migration 
B)  server pool 
C)  server 
D)  custom server 
A)  restrict migration 
B)  server pool 
C)  server 
D)  custom server

Question 4

Which two statements describe modifying Cisco UCS user accounts? (Choose two.)

Accepted Answer

A)  Disabling a user account maintains all of the data in the Cisco UCS Fabric Interconnect. 
B)  The admin account is used only to log on by using SSH. 
C)  The password of the user account must contain a minimum of 10 characters. 
D)  Local user accounts override the same account on a remote authentication server, such as TACACS, RADIUS, or LDAP. 
E)  The password of the user account expires in 30 days. 
A)  Disabling a user account maintains all of the data in the Cisco UCS Fabric Interconnect. 
B)  The admin account is used only to log on by using SSH. 
C)  The password of the user account must contain a minimum of 10 characters. 
D)  Local user accounts override the same account on a remote authentication server, such as TACACS, RADIUS, or LDAP. 
E)  The password of the user account expires in 30 days.

Question 5

Which adjacency server configuration makes two OTV edge devices located in the same site bring up the dual-site adjacency?

Accepted Answer

A)    
B)    
C)    
D)    
A)    
B)    
C)    
D)

Question 6

Refer to the exhibit. What is the result of executing this Python code?

Accepted Answer

A)  It sends the switch configuration to Cisco TAC 
B)  It sends a Cisco device backup to a remote destination 
C)  It schedules a backup on a Cisco switch using EEM 
D)  It backs up Cisco switches to Cisco Prime Infrastructure 
A)  It sends the switch configuration to Cisco TAC 
B)  It sends a Cisco device backup to a remote destination 
C)  It schedules a backup on a Cisco switch using EEM 
D)  It backs up Cisco switches to Cisco Prime Infrastructure

Question 7

A customer has a requirement to deploy a cloud service and needs to have full control over the underlying OS, data and applications. Which cloud model meets this requirement?

Accepted Answer

A)  MaaS 
B)  PaaS 
C)  SaaS 
D)  IaaS 
A)  MaaS 
B)  PaaS 
C)  SaaS 
D)  IaaS

Question 8

Which statement is true about upgrading the firmware on a Cisco MDS storage switch with dual supervisors?

Accepted Answer

A)  Supervisors can be upgraded independently to test the new firmware. 
B)  The new firmware is loaded on the standby supervisor first. 
C)  Both supervisors load the new firmware and then the active supervisor reboots. 
D)  The standby supervisor must be offline before the firmware upgrade begins. 
A)  Supervisors can be upgraded independently to test the new firmware. 
B)  The new firmware is loaded on the standby supervisor first. 
C)  Both supervisors load the new firmware and then the active supervisor reboots. 
D)  The standby supervisor must be offline before the firmware upgrade begins.

Question 9

An engineer is implementing an import operation in Cisco UCS Manager. What is the impact of performing this operation?

Accepted Answer

A)  Information can be modified on the management plane only. 
B)  A configuration can be imported from a higher release to a lower release. 
C)  An import operation can be scheduled. 
D)  Only a configuration file that was exported from the same Cisco UCS Manager can be imported. 
A)  Information can be modified on the management plane only. 
B)  A configuration can be imported from a higher release to a lower release. 
C)  An import operation can be scheduled. 
D)  Only a configuration file that was exported from the same Cisco UCS Manager can be imported.

Question 10

A network architect is asked to design and manage geographically distributed data centers across cities and decides to use a Multi-Site Orchestrator deployment. How many orchestrators should be deployed?

Accepted Answer

A)  5 
B)  3 
C)  4 
D)  2 
A)  5 
B)  3 
C)  4 
D)  2

Question 11

In an FCoE environment, for which two sets of data must an interface that implements the PAUSE mechanism always provision sufficient ingress buffer? (Choose two.)

Accepted Answer

A)  frames that were sent with high credit 
B)  frames that were sent on the link but not yet received 
C)  frames that were processed and transmitted by the transmitter after the PAUSE frame left the sender 
D)  frames that were processed and transmitted by the transmitter before the PAUSE frame left the sender 
E)  frames that were sent on the link and received 
A)  frames that were sent with high credit 
B)  frames that were sent on the link but not yet received 
C)  frames that were processed and transmitted by the transmitter after the PAUSE frame left the sender 
D)  frames that were processed and transmitted by the transmitter before the PAUSE frame left the sender 
E)  frames that were sent on the link and received

Question 12

Which statement describes monitoring Fibre Channel traffic on a Cisco UCS 6332 Fabric Interconnect?

Accepted Answer

A)  Fibre Channel traffic is monitored only on one vHBA per server. 
B)  Fibre Channel traffic is capable to be monitored as it is encapsulated as FCoE. 
C)  The monitoring of Fibre Channel traffic is limited to the default VSAN. 
D)  The destination port for monitoring must be an unassigned Fibre Channel port. 
A)  Fibre Channel traffic is monitored only on one vHBA per server. 
B)  Fibre Channel traffic is capable to be monitored as it is encapsulated as FCoE. 
C)  The monitoring of Fibre Channel traffic is limited to the default VSAN. 
D)  The destination port for monitoring must be an unassigned Fibre Channel port.

Question 13

An engineer must implement a Cisco UCS system at a customer site. One of the requirements is to implement SAN boot. The storage system maps the source WWPN to a unique LUN. Which method does Cisco recommend to configure the SAN boot?

Accepted Answer

A)  Define the vHBAs as bootable and leave the boot target definition empty. 
B)  Create a SAN boot policy in which every initiator is mapped to a different target LUN. 
C)  Define the vHBAs as bootable and leave the default values on the boot target definition. 
D)  Create a SAN boot policy in which every initiator is mapped to the same target LUN. 
A)  Define the vHBAs as bootable and leave the boot target definition empty. 
B)  Create a SAN boot policy in which every initiator is mapped to a different target LUN. 
C)  Define the vHBAs as bootable and leave the default values on the boot target definition. 
D)  Create a SAN boot policy in which every initiator is mapped to the same target LUN.

Question 14

Refer to the exhibit.   An engineer is implementing zoning on two Cisco MDS switches. After the implementation is finished, E Ports that connect the two Cisco MDS switches become isolated. What is wrong with the implementation?

Accepted Answer

A)  Zones are local to the MDS switch and name service must be used to activate the connection between E Ports. 
B)  Different zone set names must be configured on both MDS switches. 
C)  Zones must have the same name on both MDS switches for the E Ports to function. 
D)  E Ports on both MDS switches must be configured as F Ports for the zoning to function. 
A)  Zones are local to the MDS switch and name service must be used to activate the connection between E Ports. 
B)  Different zone set names must be configured on both MDS switches. 
C)  Zones must have the same name on both MDS switches for the E Ports to function. 
D)  E Ports on both MDS switches must be configured as F Ports for the zoning to function.

Question 15

An engineer is enabling port security on a Cisco MDS 9000 Series Switch. Which feature of enabling port security on a Cisco MDS 9000 Series Switch must be considered?

Accepted Answer

A)  It can be distributed by using Cisco Fabric Services. 
B)  It authorizes only the configured sWWN to participate in the fabric. 
C)  It always learns about switches that are logging in. 
D)  It binds the fabric at the switch level. 
A)  It can be distributed by using Cisco Fabric Services. 
B)  It authorizes only the configured sWWN to participate in the fabric. 
C)  It always learns about switches that are logging in. 
D)  It binds the fabric at the switch level.

Question 16

A network engineer must configure a power redundancy policy on a Cisco UCS C-Series Rack Server. The power redundancy must support two power sources being used to power the server. Which configuration should be applied to meet the requirement?

Accepted Answer

A)    
B)    
C)    
D)    
A)    
B)    
C)    
D)

Question 17

An engineer is implementing Cisco Intersight in a secure environment. The environment must use LDAP directory service and ensure information integrity and confidentiality. Which two steps must be taken to implement the solution? (Choose two.)

Accepted Answer

A)  Enable Certificate Signing Request in Cisco Intersight 
B)  Add a trusted root LDAP certificate to Cisco Intersight 
C)  Enable Encryption for LDAP 
D)  Add a self-signed LDAP certificate to Cisco Intersight 
E)  Add a trusted OAuth token to Cisco Intersight 
A)  Enable Certificate Signing Request in Cisco Intersight 
B)  Add a trusted root LDAP certificate to Cisco Intersight 
C)  Enable Encryption for LDAP 
D)  Add a self-signed LDAP certificate to Cisco Intersight 
E)  Add a trusted OAuth token to Cisco Intersight

Question 18

Which action must be performed before renumbering a Cisco UCS chassis?

Accepted Answer

A)  Run the shut and no shut command on the connected ports. 
B)  Move the chassis to new ports on fabric interconnect. 
C)  Decommission the chassis. 
D)  Re-acknowledge the chassis. 
A)  Run the shut and no shut command on the connected ports. 
B)  Move the chassis to new ports on fabric interconnect. 
C)  Decommission the chassis. 
D)  Re-acknowledge the chassis.

Question 19

Which service profile is affected if the default host firmware policy in Cisco UCS Manager is changed?

Accepted Answer

A)  any service profile that uses the global-default host firmware policy 
B)  any service profile that uses a user-created host firmware policy 
C)  any service profile that has no host firmware policy defined 
D)  any service profile that is not in the root sub-org 
A)  any service profile that uses the global-default host firmware policy 
B)  any service profile that uses a user-created host firmware policy 
C)  any service profile that has no host firmware policy defined 
D)  any service profile that is not in the root sub-org

Question 20

Refer to the exhibit. VLAN 10 is experiencing delays and packet drops when the traffic is forwarded through the switch. The destination flow analyzer accepts traffic captures of not more than 30 seconds. Which configuration implements the traffic capture that meets the requirements?

Accepted Answer

A)    
B)    
C)    
D)    
A)    
B)    
C)    
D)

Exam 40: Implementing and Operating Cisco Security Core Technologies

Which two authentication types does Cisco UCS Manager support when configuring authentication? (Choose two.)

Refer to the exhibit. What is configured as a result of running these commands?

A UCS B-Series server located in B5108 chassis 1 slot 1 is currently unavailable. The server needs to be associated with a specific service profile when it becomes available. Which associate service profile option should be selected to accomplish this goal?

Which two statements describe modifying Cisco UCS user accounts? (Choose two.)

Which adjacency server configuration makes two OTV edge devices located in the same site bring up the dual-site adjacency?

Refer to the exhibit. What is the result of executing this Python code?

A customer has a requirement to deploy a cloud service and needs to have full control over the underlying OS, data and applications. Which cloud model meets this requirement?

Which statement is true about upgrading the firmware on a Cisco MDS storage switch with dual supervisors?

An engineer is implementing an import operation in Cisco UCS Manager. What is the impact of performing this operation?

A network architect is asked to design and manage geographically distributed data centers across cities and decides to use a Multi-Site Orchestrator deployment. How many orchestrators should be deployed?

In an FCoE environment, for which two sets of data must an interface that implements the PAUSE mechanism always provision sufficient ingress buffer? (Choose two.)

Which statement describes monitoring Fibre Channel traffic on a Cisco UCS 6332 Fabric Interconnect?

An engineer must implement a Cisco UCS system at a customer site. One of the requirements is to implement SAN boot. The storage system maps the source WWPN to a unique LUN. Which method does Cisco recommend to configure the SAN boot?

Refer to the exhibit. An engineer is implementing zoning on two Cisco MDS switches. After the implementation is finished, E Ports that connect the two Cisco MDS switches become isolated. What is wrong with the implementation?

An engineer is enabling port security on a Cisco MDS 9000 Series Switch. Which feature of enabling port security on a Cisco MDS 9000 Series Switch must be considered?

A network engineer must configure a power redundancy policy on a Cisco UCS C-Series Rack Server. The power redundancy must support two power sources being used to power the server. Which configuration should be applied to meet the requirement?

An engineer is implementing Cisco Intersight in a secure environment. The environment must use LDAP directory service and ensure information integrity and confidentiality. Which two steps must be taken to implement the solution? (Choose two.)

Which action must be performed before renumbering a Cisco UCS chassis?

Which service profile is affected if the default host firmware policy in Cisco UCS Manager is changed?

Refer to the exhibit. VLAN 10 is experiencing delays and packet drops when the traffic is forwarded through the switch. The destination flow analyzer accepts traffic captures of not more than 30 seconds. Which configuration implements the traffic capture that meets the requirements?

Supporting Cisco Data Center System Devices (DCTECH)

Cisco Certified Technician Routing & Switching (RSTECH)

Understanding Cisco Cybersecurity Operations Fundamentals (CBROPS)

Cisco Certified Network Associate (CCNA)

Managing Industrial Networks with Cisco Networking Technologies (IMINS)

DevNet Associate (DEVASC)

Conducting Forensic Analysis and Incident Response Using Cisco CyberOps Technologies (CBRFIR)

Implementing Cisco Enterprise Advanced Routing and Services (ENARSI)

Implementing Cisco SD-WAN Solutions (ENSDWI)

Designing Cisco Enterprise Networks (ENSLD)

Designing Cisco Enterprise Wireless Networks (300-425 ENWLSD)

Implementing Cisco Enterprise Wireless Networks (300-430 ENWLSI)

Automating Cisco Enterprise Solutions (ENAUTO)

Implementing Cisco Service Provider Advanced Routing Solutions (SPRI)

Implementing Cisco Service Provider VPN Services (SPVI)

Designing Cisco Data Center Infrastructure (DCID)

Troubleshooting Cisco Data Center Infrastructure (DCIT)

Implementing Cisco Application Centric Infrastructure (DCACI)

Configuring Cisco MDS 9000 Series Switches (DCSAN)

Implementing Cisco Application Centric Infrastructure - Advanced

Automating Cisco Data Center Solutions (DCAUTO)

Securing Networks with Cisco Firepower (300-710 SNCF)

Implementing and Configuring Cisco Identity Services Engine (300-715 SISE)

Securing Email with Cisco Email Security Appliance (300-720 SESA)

Securing the Web with Cisco Web Security Appliance (300-725 SWSA)

Implementing Secure Solutions with Virtual Private Networks (SVPN 300-730)

Automating Cisco Security Solutions (SAUTO)

Implementing Cisco Collaboration Applications (CLICA)

Implementing Cisco Advanced Call Control and Mobility Services (CLASSM)

Implementing Cisco Collaboration Cloud and Edge Solutions

Implementing Cisco Collaboration Conferencing

Automating Cisco Collaboration Solutions (CLAUTO)

Implementing DevOps Solutions and Practices using Cisco Platforms (DEVOPS)

Developing Solutions Using Cisco IoT and Edge Platforms (DEVIOT)

Developing Applications for Cisco Webex and Webex Devices (DEVWBX)

Performing CyberOps Using Core Security Technologies (CBRCOR)

Implementing Cisco Enterprise Network Core Technologies (ENCOR)

Implementing and Operating Cisco Service Provider Network Core Technologies (SPCOR)

Implementing and Operating Cisco Data Center Core Technologies (DCCOR)

Implementing Cisco Collaboration Core Technologies (CLCOR)

Developing Applications using Cisco Core Platforms and APIs (DEVCOR)

CCDE Design Written

Deploying Cisco Unified Contact Center Express

Cisco Meraki Solutions Specialist

Securing Cisco Networks with Sourcefire FireAMP Endpoints

Designing Cisco Unified Contact Center Enterprise (UCCED)

Implementing and Supporting Cisco Unified Contact Center Enterprise (UCCEIS)

Cisco Collaboration SaaS Authorization Exam

Cisco Security Architecture for System Engineers

Adopting The Cisco Business Architecture Approach (DTBAA)

Cisco Customer Success Manager (CSM)

Mastering The Cisco Business Architecture Discipline (DTBAD)

Filters