Question 1

Which MAC address is an HSRP version 2?

Accepted Answer

A)  3842.4250.0000 
B)  0000.0C07.AC1H 
C)  0000.0C9F.F0C8 
D)  0100.5E7F.FFFF 
A)  3842.4250.0000 
B)  0000.0C07.AC1H 
C)  0000.0C9F.F0C8 
D)  0100.5E7F.FFFF

Question 2

A network engineer plans to upgrade the firmware of a Cisco UCS B-Series chassis by using the Auto Install feature. Which component is upgraded during the infrastructure firmware upgrade stage?

Accepted Answer

A)  Adapter 
B)  Cisco IMC 
C)  I/O Modules 
D)  BIOS 
A)  Adapter 
B)  Cisco IMC 
C)  I/O Modules 
D)  BIOS

Question 3

Refer to the exhibit. An engineer needs to implement a monitoring session that should meet the following requirements: Monitor traffic from leaf to leaf switches on a Cisco ACI network Support filtering traffic from Bridge Domain or VRF Which configuration must be added to meet these requirements?

Accepted Answer

A)  interface eth 1/2 leaf 101 
B)  application epg epg1 app1 
C)  interface eth 1/2 switch 101 
D)  application app1 epg epg1 
A)  interface eth 1/2 leaf 101 
B)  application epg epg1 app1 
C)  interface eth 1/2 switch 101 
D)  application app1 epg epg1

Question 4

An engineer is implementing FCoE. Which aspect of DCBXP on a Cisco Nexus switch affects this implementation?

Accepted Answer

A)  It requires that LLDP transmit and LLDP receive are enabled on the FCoE interface. 
B)  It uses the Cisco Fabric Services protocol to exchange parameters between two peer links. 
C)  It provides the authentication of peers on the Cisco Nexus switch. 
D)  It always is enabled on 10/100-Mbps native Ethernet ports. 
A)  It requires that LLDP transmit and LLDP receive are enabled on the FCoE interface. 
B)  It uses the Cisco Fabric Services protocol to exchange parameters between two peer links. 
C)  It provides the authentication of peers on the Cisco Nexus switch. 
D)  It always is enabled on 10/100-Mbps native Ethernet ports.

Question 5

Which statement about the MAC address that the FCoE Initialization Protocol chooses for use by an E-Node in an FCoE implementation is true?

Accepted Answer

A)  The FCoE Initialization Protocol uses a 24-bit FC-MAP and concatenates a 24-bit Fibre Channel ID to create a fabric-provided MAC address. 
B)  The FCoE Initialization Protocol uses the burned-in MAC address of the converged network adapter for all FCoE operations. 
C)  FCoE does not use a MAC address. The FCoE Initialization Protocol is used to acquire a Fibre Channel ID, and the address is used for all FCoE communications in the same way as Fibre Channel Protocol. 
D)  The FCoE Initialization Protocol uses 01.00.0C as the first 24 bits of the MAC address and appends a 24-bit Fibre Channel ID to derive a full 48- bit FCoE MAC address. 
A)  The FCoE Initialization Protocol uses a 24-bit FC-MAP and concatenates a 24-bit Fibre Channel ID to create a fabric-provided MAC address. 
B)  The FCoE Initialization Protocol uses the burned-in MAC address of the converged network adapter for all FCoE operations. 
C)  FCoE does not use a MAC address. The FCoE Initialization Protocol is used to acquire a Fibre Channel ID, and the address is used for all FCoE communications in the same way as Fibre Channel Protocol. 
D)  The FCoE Initialization Protocol uses 01.00.0C as the first 24 bits of the MAC address and appends a 24-bit Fibre Channel ID to derive a full 48- bit FCoE MAC address.

Question 6

An engineer needs to create a new user in the local user database on Cisco UCS Fabric Interconnect. The user needs permissions to change the following configuration inside UCS Manager version 3.1: vNIC and vHBA profiles Fan speed and power redundancy profile of UCS Manager Which two roles must be assigned to a user to achieve this goal? (Choose two.)

Accepted Answer

A)  facility-manager 
B)  server-equipment 
C)  operations 
D)  server-profile 
E)  server-compute 
A)  facility-manager 
B)  server-equipment 
C)  operations 
D)  server-profile 
E)  server-compute

Question 7

Refer to the exhibit. Service degradation is reported on a VM that is deployed on a Cisco UCS B-Series Server. The traffic from the vNIC is required to SPAN in both directions to a packet analyzer that is connected to UCS-A slot 2 port 12. Which two commands are needed to complete the configuration? (Choose two.)

Accepted Answer

A)  UCS-A /org/service-profile/vnic/mon-src* # set direction receive transmit 
B)  UCS-A /eth-traffic-mon/fabric/eth-mon-session* # create dest-interface 2 12 
C)  UCS-A /eth-traffic-mon/fabric/eth-mon-session # activate 
D)  UCS-A /eth-traffic-mon/fabric/eth-mon-session* # create eth-mon-session/dest-interface 2 12 
E)  UCS-A /org/service-profile/vnic/mon-src* # set direction both 
A)  UCS-A /org/service-profile/vnic/mon-src* # set direction receive transmit 
B)  UCS-A /eth-traffic-mon/fabric/eth-mon-session* # create dest-interface 2 12 
C)  UCS-A /eth-traffic-mon/fabric/eth-mon-session # activate 
D)  UCS-A /eth-traffic-mon/fabric/eth-mon-session* # create eth-mon-session/dest-interface 2 12 
E)  UCS-A /org/service-profile/vnic/mon-src* # set direction both

Question 8

Multiple roles are applied to a user on the Cisco MDS 9000 Series Switch. Which statement describes the result of this configuration?

Accepted Answer

A)  The last role assigned takes precedence over previous roles. 
B)  Access to a command takes priority over being denied access to a command. 
C)  Any commands that have conflicting settings between roles are denied. 
D)  The first role assigned takes precedence over subsequent roles. 
A)  The last role assigned takes precedence over previous roles. 
B)  Access to a command takes priority over being denied access to a command. 
C)  Any commands that have conflicting settings between roles are denied. 
D)  The first role assigned takes precedence over subsequent roles.

Question 9

Refer to the exhibit. Which command needs to be added to the line starting with the "file" keyword to have the generated running-config file with the name 'fusion-config_' and current date?

Accepted Answer

A)  str.('fusion-config_') + date 
B)  ('fusion-config_') + date 
C)  ('fusion-config_ + date') 
D)  string(('fusion-config_') + date 
A)  str.('fusion-config_') + date 
B)  ('fusion-config_') + date 
C)  ('fusion-config_ + date') 
D)  string(('fusion-config_') + date

Question 10

Refer to the exhibit. An engineer implements SPAN configuration on an Nexus 5000 series switch. Which two commands are necessary to complete the SPAN session configuration?

Accepted Answer

A)  Configure switchport speed 4000 under interface fc2/2. 
B)  Configure the switchport monitor under interface fc2/2. 
C)  Configure session type fc under monitor session 1. 
D)  Configure the switchport mode SD under interface fc2/1. 
E)  Configure the switchport mode SD under interface fc2/2. 
A)  Configure switchport speed 4000 under interface fc2/2. 
B)  Configure the switchport monitor under interface fc2/2. 
C)  Configure session type fc under monitor session 1. 
D)  Configure the switchport mode SD under interface fc2/1. 
E)  Configure the switchport mode SD under interface fc2/2.

Question 11

An engineer has a primary fabric that is named UCS-A and a secondary fabric that is named UCS-B. A certificate request that has a subject name of sjc2016 for a keyring that is named kr2016 needs to be created. The cluster IP address is 10.68.68.68. Which command set creates this certificate request?

Accepted Answer

A)  UCS-A # scope keyring kr2016 UCS-A /keyring # create certreq 10.68.68.68 sjc2016 UCS-A /keyring* # commit-buffer UCS-A # scope keyring kr2016 UCS-A /keyring # create certreq 10.68.68.68 sjc2016 UCS-A /keyring* # commit-buffer 
B)  UCS-B # scope keyring kr2016 UCS-B /keyring # create certreq ip 10.68.68.68 subject-name sjc2016 UCS-B /keyring* # commit-both UCS-B UCS-B /keyring # create certreq ip 10.68.68.68 subject-name sjc2016 UCS-B /keyring* # commit-both 
C)  UCS-B # scope security UCS-B /security # scope keyring kr2016 UCS-B /security/keyring # set certreq 10.68.68.68 sjc2016 UCS-B /security/keyring* # commit-both UCS-B # scope security UCS-B /security UCS-B /security/keyring # set certreq 10.68.68.68 sjc2016 UCS-B /security/keyring* 
D)  UCS-A # scope security UCS-A /security # scope keyring kr2016 UCS-A /security/keyring # create certreq ip 10.68.68.68 subject-name sjc2016 UCS-A /security/keyring* # commit-buffer UCS-A UCS-A /security UCS-A /security/keyring UCS-A /security/keyring* 
A)  UCS-A # scope keyring kr2016 UCS-A /keyring # create certreq 10.68.68.68 sjc2016 UCS-A /keyring* # commit-buffer UCS-A # scope keyring kr2016 UCS-A /keyring # create certreq 10.68.68.68 sjc2016 UCS-A /keyring* # commit-buffer 
B)  UCS-B # scope keyring kr2016 UCS-B /keyring # create certreq ip 10.68.68.68 subject-name sjc2016 UCS-B /keyring* # commit-both UCS-B UCS-B /keyring # create certreq ip 10.68.68.68 subject-name sjc2016 UCS-B /keyring* # commit-both 
C)  UCS-B # scope security UCS-B /security # scope keyring kr2016 UCS-B /security/keyring # set certreq 10.68.68.68 sjc2016 UCS-B /security/keyring* # commit-both UCS-B # scope security UCS-B /security UCS-B /security/keyring # set certreq 10.68.68.68 sjc2016 UCS-B /security/keyring* 
D)  UCS-A # scope security UCS-A /security # scope keyring kr2016 UCS-A /security/keyring # create certreq ip 10.68.68.68 subject-name sjc2016 UCS-A /security/keyring* # commit-buffer UCS-A UCS-A /security UCS-A /security/keyring UCS-A /security/keyring*

Question 12

Which configuration generates a syslog message when CPU utilization is higher than 60%?

Accepted Answer

A)  event manager applet HIGH-CPU event snmp oid 1.3.6.1.4.1.9.9.109.1.1.1.1.6.1 get-type exact entry-op gt 60 poll-interval 5 action 1.0 syslog priority notifications msg "cpu high" 
B)  event snmp oid 1.3.6.1.4.1.9.9.109.1.1.1.1.6.1 get-type exact entry-op lt 60 poll-interval 5 
C)  event snmp oid 1.3.6.1.4.1.9.9.109.1.1.1.1.6.1 get-type next entry-op gt 60 poll-interval 5 
D)  event snmp oid 1.3.6.1.4.1.9.9.109.1.1.1.1.6.1 get-type next entry-op lt 60 poll-interval 5 
A)  event manager applet HIGH-CPU event snmp oid 1.3.6.1.4.1.9.9.109.1.1.1.1.6.1 get-type exact entry-op gt 60 poll-interval 5 action 1.0 syslog priority notifications msg "cpu high" 
B)  event snmp oid 1.3.6.1.4.1.9.9.109.1.1.1.1.6.1 get-type exact entry-op lt 60 poll-interval 5 
C)  event snmp oid 1.3.6.1.4.1.9.9.109.1.1.1.1.6.1 get-type next entry-op gt 60 poll-interval 5 
D)  event snmp oid 1.3.6.1.4.1.9.9.109.1.1.1.1.6.1 get-type next entry-op lt 60 poll-interval 5

Question 13

An engineer needs a utility to translate traditional Nexus CLI inputs and generate Python code using XML and JSON message formats. The solution needs to be available on a Nexus 7700 series switch. Which utility should be used?

Accepted Answer

A)  NX-API Sandbox 
B)  NX-OS JSON-RPC 
C)  Guest Shell for NX-OS 
D)  Open NX-OS 
A)  NX-API Sandbox 
B)  NX-OS JSON-RPC 
C)  Guest Shell for NX-OS 
D)  Open NX-OS

Question 14

Which statement describes the rolling EPLD upgrade on a Cisco MDS 9000 Series Switch?

Accepted Answer

A)  The standby supervisor module is capable of performing the upgrade. 
B)  Only the modules that are being upgraded are disrupted. 
C)  All modules on the switch are disrupted. 
D)  An EPLD upgrade is nondisruptive. 
A)  The standby supervisor module is capable of performing the upgrade. 
B)  Only the modules that are being upgraded are disrupted. 
C)  All modules on the switch are disrupted. 
D)  An EPLD upgrade is nondisruptive.

Question 15

Due to a major version change, an engineer must perform a software upgrade on a Cisco Nexus Series switch. Which two technologies can be implemented to reduce disruptions to the network during the upgrade? (Choose two.)

Accepted Answer

A)  vPC 
B)  HSRP 
C)  VDC 
D)  MLAG 
E)  PAgP 
A)  vPC 
B)  HSRP 
C)  VDC 
D)  MLAG 
E)  PAgP

Question 16

An engineer wants to create a backup of Cisco UCS Manager for disaster recovery purposes. What are two characteristics of a full state backup of a Cisco UCS Manager database? (Choose two.)

Accepted Answer

A)  contains all of the runtime states and statuses but not the configurations 
B)  performs a complete binary dump of the database as a .bin file 
C)  performs a complete binary dump of the database as a .sql file 
D)  performs a complete binary dump of the database as a .txz file 
E)  contains all of the configurations 
A)  contains all of the runtime states and statuses but not the configurations 
B)  performs a complete binary dump of the database as a .bin file 
C)  performs a complete binary dump of the database as a .sql file 
D)  performs a complete binary dump of the database as a .txz file 
E)  contains all of the configurations

Question 17

Which two methods are available to manage an ACI REST API session authentication when a user is unauthenticated? (Choose two.)

Accepted Answer

A)  POST to aaaUserLogin 
B)  GET to aaaListDomains 
C)  GET aaaRefresh 
D)  DELETE to aaaLogout 
E)  POST to aaaLogin 
A)  POST to aaaUserLogin 
B)  GET to aaaListDomains 
C)  GET aaaRefresh 
D)  DELETE to aaaLogout 
E)  POST to aaaLogin

Question 18

A DNS server with IP address 192.168.1.1 is deployed in a data center. A network engineer must configure a Cisco UCS Fabric Interconnect to use this DNS. Which configuration should be applied?

Accepted Answer

A)  ficl-mgmt-A# scope fabric-interconnect a ficl-mgmt-A /fabric-interconnect # set name 192.168.1.1 ficl-mgmt-A /fabric-interconnect # scope system ficl-mgmt-A /system # commit-buffer 
B)  ficl-mgmt-A# scope system ficl-mgmt-A /system # create dns 192.168.1.1 ficl-mgmt-A /system* # commit-buffer 
C)  ficl-mgmt-A /fabric-interconnect* # commit-buffer 
D)  ficl-mgmt-A /system # scope services ficl-mgmt-A /system/services # create dns 192.168.1.1 ficl-mgmt-A /system/services* # commit-buffer 
A)  ficl-mgmt-A# scope fabric-interconnect a ficl-mgmt-A /fabric-interconnect # set name 192.168.1.1 ficl-mgmt-A /fabric-interconnect # scope system ficl-mgmt-A /system # commit-buffer 
B)  ficl-mgmt-A# scope system ficl-mgmt-A /system # create dns 192.168.1.1 ficl-mgmt-A /system* # commit-buffer 
C)  ficl-mgmt-A /fabric-interconnect* # commit-buffer 
D)  ficl-mgmt-A /system # scope services ficl-mgmt-A /system/services # create dns 192.168.1.1 ficl-mgmt-A /system/services* # commit-buffer

Question 19

An environment consists of a Cisco MDS 9000 Series Switch that uses port channels. An engineer must ensure that frames between the source and the destination follow the same links for a specific flow. Subsequent flows are allowed to use a different link. Which load balancing method should be used to accomplish this goal?

Accepted Answer

A)  src-id/dst-id 
B)  src-dst-oui 
C)  src-dst-port 
D)  src-id/dst-id/oxid 
A)  src-id/dst-id 
B)  src-dst-oui 
C)  src-dst-port 
D)  src-id/dst-id/oxid

Question 20

An engineer must start a software upgrade on a Cisco Nexus 5000 Series Switch during a zone merge. What is the result of this action?

Accepted Answer

A)  The upgrade stops 
B)  The zone merge pauses until the upgrade completes 
C)  The zone merge stops 
D)  The zone merge executes and then the upgrade completes 
A)  The upgrade stops 
B)  The zone merge pauses until the upgrade completes 
C)  The zone merge stops 
D)  The zone merge executes and then the upgrade completes

Exam 40: Implementing and Operating Cisco Security Core Technologies

Which MAC address is an HSRP version 2?

A network engineer plans to upgrade the firmware of a Cisco UCS B-Series chassis by using the Auto Install feature. Which component is upgraded during the infrastructure firmware upgrade stage?

Refer to the exhibit. An engineer needs to implement a monitoring session that should meet the following requirements: Monitor traffic from leaf to leaf switches on a Cisco ACI network Support filtering traffic from Bridge Domain or VRF Which configuration must be added to meet these requirements?

An engineer is implementing FCoE. Which aspect of DCBXP on a Cisco Nexus switch affects this implementation?

Which statement about the MAC address that the FCoE Initialization Protocol chooses for use by an E-Node in an FCoE implementation is true?

Multiple roles are applied to a user on the Cisco MDS 9000 Series Switch. Which statement describes the result of this configuration?

Refer to the exhibit. Which command needs to be added to the line starting with the "file" keyword to have the generated running-config file with the name 'fusion-config_' and current date?

Refer to the exhibit. An engineer implements SPAN configuration on an Nexus 5000 series switch. Which two commands are necessary to complete the SPAN session configuration?

Which configuration generates a syslog message when CPU utilization is higher than 60%?

An engineer needs a utility to translate traditional Nexus CLI inputs and generate Python code using XML and JSON message formats. The solution needs to be available on a Nexus 7700 series switch. Which utility should be used?

Which statement describes the rolling EPLD upgrade on a Cisco MDS 9000 Series Switch?

Due to a major version change, an engineer must perform a software upgrade on a Cisco Nexus Series switch. Which two technologies can be implemented to reduce disruptions to the network during the upgrade? (Choose two.)

An engineer wants to create a backup of Cisco UCS Manager for disaster recovery purposes. What are two characteristics of a full state backup of a Cisco UCS Manager database? (Choose two.)

Which two methods are available to manage an ACI REST API session authentication when a user is unauthenticated? (Choose two.)

A DNS server with IP address 192.168.1.1 is deployed in a data center. A network engineer must configure a Cisco UCS Fabric Interconnect to use this DNS. Which configuration should be applied?

An engineer must start a software upgrade on a Cisco Nexus 5000 Series Switch during a zone merge. What is the result of this action?

Supporting Cisco Data Center System Devices (DCTECH)

Cisco Certified Technician Routing & Switching (RSTECH)

Understanding Cisco Cybersecurity Operations Fundamentals (CBROPS)

Cisco Certified Network Associate (CCNA)

Managing Industrial Networks with Cisco Networking Technologies (IMINS)

DevNet Associate (DEVASC)

Conducting Forensic Analysis and Incident Response Using Cisco CyberOps Technologies (CBRFIR)

Implementing Cisco Enterprise Advanced Routing and Services (ENARSI)

Implementing Cisco SD-WAN Solutions (ENSDWI)

Designing Cisco Enterprise Networks (ENSLD)

Designing Cisco Enterprise Wireless Networks (300-425 ENWLSD)

Implementing Cisco Enterprise Wireless Networks (300-430 ENWLSI)

Automating Cisco Enterprise Solutions (ENAUTO)

Implementing Cisco Service Provider Advanced Routing Solutions (SPRI)

Implementing Cisco Service Provider VPN Services (SPVI)

Designing Cisco Data Center Infrastructure (DCID)

Troubleshooting Cisco Data Center Infrastructure (DCIT)

Implementing Cisco Application Centric Infrastructure (DCACI)

Configuring Cisco MDS 9000 Series Switches (DCSAN)

Implementing Cisco Application Centric Infrastructure - Advanced

Automating Cisco Data Center Solutions (DCAUTO)

Securing Networks with Cisco Firepower (300-710 SNCF)

Implementing and Configuring Cisco Identity Services Engine (300-715 SISE)

Securing Email with Cisco Email Security Appliance (300-720 SESA)

Securing the Web with Cisco Web Security Appliance (300-725 SWSA)

Implementing Secure Solutions with Virtual Private Networks (SVPN 300-730)

Automating Cisco Security Solutions (SAUTO)

Implementing Cisco Collaboration Applications (CLICA)

Implementing Cisco Advanced Call Control and Mobility Services (CLASSM)

Implementing Cisco Collaboration Cloud and Edge Solutions

Implementing Cisco Collaboration Conferencing

Automating Cisco Collaboration Solutions (CLAUTO)

Implementing DevOps Solutions and Practices using Cisco Platforms (DEVOPS)

Developing Solutions Using Cisco IoT and Edge Platforms (DEVIOT)

Developing Applications for Cisco Webex and Webex Devices (DEVWBX)

Performing CyberOps Using Core Security Technologies (CBRCOR)

Implementing Cisco Enterprise Network Core Technologies (ENCOR)

Implementing and Operating Cisco Service Provider Network Core Technologies (SPCOR)

Implementing and Operating Cisco Data Center Core Technologies (DCCOR)

Implementing Cisco Collaboration Core Technologies (CLCOR)

Developing Applications using Cisco Core Platforms and APIs (DEVCOR)

CCDE Design Written

Deploying Cisco Unified Contact Center Express

Cisco Meraki Solutions Specialist

Securing Cisco Networks with Sourcefire FireAMP Endpoints

Designing Cisco Unified Contact Center Enterprise (UCCED)

Implementing and Supporting Cisco Unified Contact Center Enterprise (UCCEIS)

Cisco Collaboration SaaS Authorization Exam

Cisco Security Architecture for System Engineers

Adopting The Cisco Business Architecture Approach (DTBAA)

Cisco Customer Success Manager (CSM)

Mastering The Cisco Business Architecture Discipline (DTBAD)

Filters