Exam 40: Implementing and Operating Cisco Security Core Technologies

A company is investigating different options for IT automation tools. The IT team has experience with Python programming language and scripting using a declarative language. The proposed tool should be easy to set up and should not require installing an agent on target devices. The team will also need to build custom modules based on the Python programming language to extend the tool's functionality. Which automation tool should be used to meet these requirements?

A network engineer is adding a Cisco HyperFlex data platform to the Cisco Intersight management portal. Which two components are required for Intersight to claim the Cisco HyperFlex data platform? (Choose two.)

What happens to the default host firmware policy after a Cisco UCS Manager upgrade?

A network administrator must perform a system upgrade on a Cisco MDS 9000 Series Switch. Due to the recent changes by the security team: • The AAA server is unreachable. • All TCP communication between the MDS 9000 Series Switch and AAA servers is disabled. Which actions must be used to perform the upgrade?

Which solution provides remote and direct file-level access to users and systems?

Refer to the exhibit. Which setting must be configured to prevent the reuse of passwords?

What is an advantage of NFS as compared to Fibre Channel?

What is a characteristic of the install all command on the Cisco Nexus Series Switch?

Which command reduces the amount of time it takes to complete the ISSU on a Cisco Nexus 7000 Series Switch that has dual supervisor modules and two I/O modules?

An engineer must configure Cisco IMC server management NIC for autonegotiation. Which setting should be selected?

An engineer must use the python module in the guest shell of the Cisco Nexus 9000 Series switch to shutdown port Ethernet 1/4. Which command set will accomplish this?

A network administrator must configure an extra keyring in Cisco UCS Manager. The key must provide a high level of encryption and secure authentication when users use the web interface. Which configuration command set must be applied to meet these requirements?

A network engineer must enable port security on all Cisco MDS Series Switches in the fabric. The requirement is to avoid the extensive manual configuration of the switch ports. Which action must be taken to meet these requirements?

An engineer is configuring AAA authentication on an MDS 9000 switch. The LDAP server is located under the IP 10.10.2.2. The data sent to the LDAP server should be encrypted. Which command should be used to meet these requirements?

When a strict CoPP policy is implemented, which statement describes an event during which packets are dropped?

Refer to the exhibit. An engineer must monitor all LAN traffic on Fabric A from a blade server. Which source should be configured in the test-span monitor session to complete this task?

Refer to the exhibit. An engineer must monitor ingress traffic from SW1 and SW2 port-channel interfaces from SW3. Which configuration must be implemented to accomplish this goal?

What is required for using Ansible with HTTP/HTTPS protocol in a Cisco NX-OS environment?

A Cisco UCS user called "Employee1" accidentally changed the boot policy of the Cisco UCS server at the Cisco UCS Manager root level. This change impacted all service profiles, and their storage connectivity was lost. The system administrator wants to prevent this issue from recurring in the future. The new security policy mandates that access must be restricted up to the organization level and prevent other users from modifying root policies. Which action must be taken to meet these requirements?

Which product includes prebuilt templates that are available to be used to customize fabric deployments?