Question 1

An engineer changed a configuration and must perform a rollback. Which statement applies to a Cisco Nexus 5600 Series Switch?

Accepted Answer

A)  The configuration rollback functionality is disabled when FCoE is enabled. 
B)  A system checkpoint is generated automatically when the running configuration is saved to NVRAM. 
C)  A user who is assigned to the network-operator user role can perform a rollback. 
D)  Errors are skipped when an atomic rollback type is triggered. 
A)  The configuration rollback functionality is disabled when FCoE is enabled. 
B)  A system checkpoint is generated automatically when the running configuration is saved to NVRAM. 
C)  A user who is assigned to the network-operator user role can perform a rollback. 
D)  Errors are skipped when an atomic rollback type is triggered.

Question 2

An engineer is running an ACI fabric, has VMM integration with VMware vCenter, and wants to enable microsegmentation based on vCenter VM attributes. Which statement about microsegmentation is true?

Accepted Answer

A)  ACI does not support microsegmentation based on vCenter VM attributes. You should use network attributes for microsegmentation. 
B)  When enabled, microsegmentation performs distributed switching and routing on the ESXi hosts. 
C)  Microsegmentation is supported only using AVE or AVS. 
D)  An ACI microsegmented EPG automatically creates a port group with a private VLAN configured on a VMware vCenter distributed virtual switch. 
A)  ACI does not support microsegmentation based on vCenter VM attributes. You should use network attributes for microsegmentation. 
B)  When enabled, microsegmentation performs distributed switching and routing on the ESXi hosts. 
C)  Microsegmentation is supported only using AVE or AVS. 
D)  An ACI microsegmented EPG automatically creates a port group with a private VLAN configured on a VMware vCenter distributed virtual switch.

Question 3

Which two hypervisors does Cisco HyperFlex support? (Choose two.)

Accepted Answer

A)  OpenStack 
B)  Citrix XenServer 
C)  VMware vSphere 
D)  RedHat KVM 
E)  Microsoft Hyper-V 
A)  OpenStack 
B)  Citrix XenServer 
C)  VMware vSphere 
D)  RedHat KVM 
E)  Microsoft Hyper-V

Question 4

Refer to the exhibit.   Which two Cisco UCS components are upgraded as a result of the configuration? (Choose two.)

Accepted Answer

A)  IOMs 
B)  Cisco UCS Manager 
C)  board controller 
D)  adapters 
E)  BIOS 
A)  IOMs 
B)  Cisco UCS Manager 
C)  board controller 
D)  adapters 
E)  BIOS

Question 5

An engineer must configure RBAC in Cisco UCS Manager in an existing data center environment. Which two roles can be used to configure LAN connectivity policies? (Choose two.)

Accepted Answer

A)  server-profile 
B)  network-admin 
C)  operations 
D)  enable 
E)  admin 
A)  server-profile 
B)  network-admin 
C)  operations 
D)  enable 
E)  admin

Question 6

APIC EPG Resolution Immediacy is set to "Immediate". Which statement is true about the Deployment Immediacy for VMM domains associated to EPGs?

Accepted Answer

A)  If "On demand" is selected, the policy is programmed in the hardware only when the first packet is received through the data path. 
B)  It "Immediate" is selected, the policy is programmed in the hardware as soon as the leaf is booted. 
C)  The "Immediate" and "On demand" options require a port group to be created on the VDS. 
D)  If "On demand" is selected, the policy is programmed in the hardware only when the APIC detects a VM created in the EPG. 
A)  If "On demand" is selected, the policy is programmed in the hardware only when the first packet is received through the data path. 
B)  It "Immediate" is selected, the policy is programmed in the hardware as soon as the leaf is booted. 
C)  The "Immediate" and "On demand" options require a port group to be created on the VDS. 
D)  If "On demand" is selected, the policy is programmed in the hardware only when the APIC detects a VM created in the EPG.

Question 7

Refer to the exhibit.   Which two statements about the routing table of the leaf switch are true? (Choose two.)

Accepted Answer

A)  10.20.1.0/24 is a BD subnet in ACI. 
B)  The next hop 10.0.1.14 for route 172.16.99.0/24 is the TEP address of a border leaf in ACI. 
C)  172.16.100.0/24 is a BD subnet in ACI. 
D)  The next hop 10.1.168.95 for route 172.16.100.0/24 is the TEP address of a border leaf in ACI. 
E)  The next hop 10.0.8.65 for route 10.20.1.0/24 is the TEP address of a border leaf in ACI. 
A)  10.20.1.0/24 is a BD subnet in ACI. 
B)  The next hop 10.0.1.14 for route 172.16.99.0/24 is the TEP address of a border leaf in ACI. 
C)  172.16.100.0/24 is a BD subnet in ACI. 
D)  The next hop 10.1.168.95 for route 172.16.100.0/24 is the TEP address of a border leaf in ACI. 
E)  The next hop 10.0.8.65 for route 10.20.1.0/24 is the TEP address of a border leaf in ACI.

Question 8

An engineer configured an environment that contains the vPC and non-vPC switches. However, it was noticed that the downstream non-vPC switches do not receive the same STP bridge ID from the upstream vPC switch peers. Which vPC feature must be implemented to ensure that vPC and non-vPC switches receive the same STP bridge ID from the upstream vPC switch peers?

Accepted Answer

A)  vpc local role-priority 4000 
B)  peer-switch 
C)  system-mac 0123.4567.89ab 
D)  peer-gateway 
A)  vpc local role-priority 4000 
B)  peer-switch 
C)  system-mac 0123.4567.89ab 
D)  peer-gateway

Question 9

Refer to the exhibit. Which type of backup is required to restore a Cisco UCS configuration?

Accepted Answer

A)  system configuration 
B)  all configuration 
C)  full state 
D)  logical configuration 
A)  system configuration 
B)  all configuration 
C)  full state 
D)  logical configuration

Question 10

When the default firmware package is set to a new version, which type of policy determines the liming of server reboots during the firmware upgrade?

Accepted Answer

A)  diagnostics 
B)  maintenance 
C)  local disk 
D)  BIOS 
A)  diagnostics 
B)  maintenance 
C)  local disk 
D)  BIOS

Question 11

Several production and development database servers exist in the same EPG and IP subnet. The IT security policy is to prevent connections between production and development. Which attribute must be used to assign the servers to different microsegments?

Accepted Answer

A)  data center 
B)  VM name 
C)  IP address 
D)  VMM domain 
A)  data center 
B)  VM name 
C)  IP address 
D)  VMM domain

Question 12

Refer to the exhibit.   What is the outcome of this command when the EPLD is updated on a Cisco Nexus 9000 Series Switch?

Accepted Answer

A)  displays the compatibility of the EPLD upgrade and the image in the bootflash 
B)  shows a simulated upgrade of the EPLD 
C)  upgrades the EPLD on the switch disruptively 
D)  displays the impact of the upgrade on the operation of the switch 
A)  displays the compatibility of the EPLD upgrade and the image in the bootflash 
B)  shows a simulated upgrade of the EPLD 
C)  upgrades the EPLD on the switch disruptively 
D)  displays the impact of the upgrade on the operation of the switch

Question 13

An administrator needs to configure an automated policy to shut down a link when a given threshold is exceeded on MDS switch. Which feature needs to be used?

Accepted Answer

A)  RMON 
B)  EEM 
C)  Call Home 
D)  Scheduler 
A)  RMON 
B)  EEM 
C)  Call Home 
D)  Scheduler

Question 14

An engineer is enabling port security on a Cisco MDS 9000 Series Switch. Which feature of enabling port security on a Cisco MDS 9000 Series Switch must be considered?

Accepted Answer

A)  It is distributed by using Cisco Fabric Services. 
B)  It authorizes only the configured sWWN to participate in the fabric. 
C)  It always learns about switches that are logging in. 
D)  It binds the fabric at the switch level. 
A)  It is distributed by using Cisco Fabric Services. 
B)  It authorizes only the configured sWWN to participate in the fabric. 
C)  It always learns about switches that are logging in. 
D)  It binds the fabric at the switch level.

Question 15

An engineer configures the properties of a Cisco UCS Cisco Integrated Management Controller network adapter for a standalone Cisco C-Series Server. The Failback Timeout in the vNIC was set to 600. When the failure occurs, the secondary interfaces must be used and then failback when the primary interface becomes available again. Which action must be taken to meet these requirements?

Accepted Answer

A)  Set default VLAN on the adapters. 
B)  Increase CoS to 6. 
C)  Enable Uplink Failover. 
D)  Disable VNTAG mode. 
A)  Set default VLAN on the adapters. 
B)  Increase CoS to 6. 
C)  Enable Uplink Failover. 
D)  Disable VNTAG mode.

Question 16

Which two actions should be taken before an upgrade is started on a Cisco MDS switch? (Choose two.)

Accepted Answer

A)  disable Cisco Fabric Services 
B)  check the impact of the upgrade using the show install all impact command check the impact of the upgrade using the show install all impact command 
C)  free up space on the USB3 device by deleting old Cisco NX-OS image files 
D)  make the primary supervisor the active supervisor 
E)  back up the configuration 
A)  disable Cisco Fabric Services 
B)  check the impact of the upgrade using the show install all impact command check the impact of the upgrade using the show install all impact command 
C)  free up space on the USB3 device by deleting old Cisco NX-OS image files 
D)  make the primary supervisor the active supervisor 
E)  back up the configuration

Question 17

Which two settings must be configured before enabling a Cisco UCS Manager domain for Cisco Intersight connectivity? (Choose two.)

Accepted Answer

A)  SMTP servers 
B)  SMTP reply-to address 
C)  NTP servers 
D)  syslog redirection 
E)  DNS servers 
A)  SMTP servers 
B)  SMTP reply-to address 
C)  NTP servers 
D)  syslog redirection 
E)  DNS servers

Question 18

An engineer must configure a Nexus 7000 series switch for HSRP on VLAN 100. When fully functional, the router must be the active master. Which set of commands must be used to implement the scenario?

Accepted Answer

A)  feature hsrp interface vlan100 ip address 10.1.1.2 255.255.255.0 priority 255 preempt hsrp version 2 hsrp 1000 ip 10.1.1.1 
B)  feature-set hsrp priority 20 
C)  priority 80 
D)  priority 240 
A)  feature hsrp interface vlan100 ip address 10.1.1.2 255.255.255.0 priority 255 preempt hsrp version 2 hsrp 1000 ip 10.1.1.1 
B)  feature-set hsrp priority 20 
C)  priority 80 
D)  priority 240

Question 19

A new employee must be granted access to add VLANs into an existing Cisco UCS Manager and configure NTP synchronization with date and time zone settings. Which two privileges must be granted to the employee to complete the task? (Choose two.)

Accepted Answer

A)  Service Profile Compute (ls-compute) 
B)  Ext LAN Policy (ext-lan-policy) 
C)  Service Profile Network Policy (ls-network-policy) 
D)  Service Profile Config (ls-config) 
E)  Ext LAN Config (ext-lan-security) 
A)  Service Profile Compute (ls-compute) 
B)  Ext LAN Policy (ext-lan-policy) 
C)  Service Profile Network Policy (ls-network-policy) 
D)  Service Profile Config (ls-config) 
E)  Ext LAN Config (ext-lan-security)

Question 20

Refer to the exhibit. Which action is taken to ensure that the relay agent forwards the DHCP BOOTREQUEST packet to a DHCP server?

Accepted Answer

A)  Configure the IP address of the DHCP server. 
B)  Verify the DHCP snooping bindings. 
C)  Configure the interface of the DHCP server as untrusted. 
D)  Enable the DHCP relay agent. 
A)  Configure the IP address of the DHCP server. 
B)  Verify the DHCP snooping bindings. 
C)  Configure the interface of the DHCP server as untrusted. 
D)  Enable the DHCP relay agent.

Exam 40: Implementing and Operating Cisco Security Core Technologies

An engineer changed a configuration and must perform a rollback. Which statement applies to a Cisco Nexus 5600 Series Switch?

An engineer is running an ACI fabric, has VMM integration with VMware vCenter, and wants to enable microsegmentation based on vCenter VM attributes. Which statement about microsegmentation is true?

Which two hypervisors does Cisco HyperFlex support? (Choose two.)

Refer to the exhibit. Which two Cisco UCS components are upgraded as a result of the configuration? (Choose two.)

An engineer must configure RBAC in Cisco UCS Manager in an existing data center environment. Which two roles can be used to configure LAN connectivity policies? (Choose two.)

APIC EPG Resolution Immediacy is set to "Immediate". Which statement is true about the Deployment Immediacy for VMM domains associated to EPGs?

Refer to the exhibit. Which two statements about the routing table of the leaf switch are true? (Choose two.)

Refer to the exhibit. Which type of backup is required to restore a Cisco UCS configuration?

When the default firmware package is set to a new version, which type of policy determines the liming of server reboots during the firmware upgrade?

Several production and development database servers exist in the same EPG and IP subnet. The IT security policy is to prevent connections between production and development. Which attribute must be used to assign the servers to different microsegments?

Refer to the exhibit. What is the outcome of this command when the EPLD is updated on a Cisco Nexus 9000 Series Switch?

An administrator needs to configure an automated policy to shut down a link when a given threshold is exceeded on MDS switch. Which feature needs to be used?

An engineer is enabling port security on a Cisco MDS 9000 Series Switch. Which feature of enabling port security on a Cisco MDS 9000 Series Switch must be considered?

Which two actions should be taken before an upgrade is started on a Cisco MDS switch? (Choose two.)

Which two settings must be configured before enabling a Cisco UCS Manager domain for Cisco Intersight connectivity? (Choose two.)

An engineer must configure a Nexus 7000 series switch for HSRP on VLAN 100. When fully functional, the router must be the active master. Which set of commands must be used to implement the scenario?

A new employee must be granted access to add VLANs into an existing Cisco UCS Manager and configure NTP synchronization with date and time zone settings. Which two privileges must be granted to the employee to complete the task? (Choose two.)

Refer to the exhibit. Which action is taken to ensure that the relay agent forwards the DHCP BOOTREQUEST packet to a DHCP server?

Supporting Cisco Data Center System Devices (DCTECH)

Cisco Certified Technician Routing & Switching (RSTECH)

Understanding Cisco Cybersecurity Operations Fundamentals (CBROPS)

Cisco Certified Network Associate (CCNA)

Managing Industrial Networks with Cisco Networking Technologies (IMINS)

DevNet Associate (DEVASC)

Conducting Forensic Analysis and Incident Response Using Cisco CyberOps Technologies (CBRFIR)

Implementing Cisco Enterprise Advanced Routing and Services (ENARSI)

Implementing Cisco SD-WAN Solutions (ENSDWI)

Designing Cisco Enterprise Networks (ENSLD)

Designing Cisco Enterprise Wireless Networks (300-425 ENWLSD)

Implementing Cisco Enterprise Wireless Networks (300-430 ENWLSI)

Automating Cisco Enterprise Solutions (ENAUTO)

Implementing Cisco Service Provider Advanced Routing Solutions (SPRI)

Implementing Cisco Service Provider VPN Services (SPVI)

Designing Cisco Data Center Infrastructure (DCID)

Troubleshooting Cisco Data Center Infrastructure (DCIT)

Implementing Cisco Application Centric Infrastructure (DCACI)

Configuring Cisco MDS 9000 Series Switches (DCSAN)

Implementing Cisco Application Centric Infrastructure - Advanced

Automating Cisco Data Center Solutions (DCAUTO)

Securing Networks with Cisco Firepower (300-710 SNCF)

Implementing and Configuring Cisco Identity Services Engine (300-715 SISE)

Securing Email with Cisco Email Security Appliance (300-720 SESA)

Securing the Web with Cisco Web Security Appliance (300-725 SWSA)

Implementing Secure Solutions with Virtual Private Networks (SVPN 300-730)

Automating Cisco Security Solutions (SAUTO)

Implementing Cisco Collaboration Applications (CLICA)

Implementing Cisco Advanced Call Control and Mobility Services (CLASSM)

Implementing Cisco Collaboration Cloud and Edge Solutions

Implementing Cisco Collaboration Conferencing

Automating Cisco Collaboration Solutions (CLAUTO)

Implementing DevOps Solutions and Practices using Cisco Platforms (DEVOPS)

Developing Solutions Using Cisco IoT and Edge Platforms (DEVIOT)

Developing Applications for Cisco Webex and Webex Devices (DEVWBX)

Performing CyberOps Using Core Security Technologies (CBRCOR)

Implementing Cisco Enterprise Network Core Technologies (ENCOR)

Implementing and Operating Cisco Service Provider Network Core Technologies (SPCOR)

Implementing and Operating Cisco Data Center Core Technologies (DCCOR)

Implementing Cisco Collaboration Core Technologies (CLCOR)

Developing Applications using Cisco Core Platforms and APIs (DEVCOR)

CCDE Design Written

Deploying Cisco Unified Contact Center Express

Cisco Meraki Solutions Specialist

Securing Cisco Networks with Sourcefire FireAMP Endpoints

Designing Cisco Unified Contact Center Enterprise (UCCED)

Implementing and Supporting Cisco Unified Contact Center Enterprise (UCCEIS)

Cisco Collaboration SaaS Authorization Exam

Cisco Security Architecture for System Engineers

Adopting The Cisco Business Architecture Approach (DTBAA)

Cisco Customer Success Manager (CSM)

Mastering The Cisco Business Architecture Discipline (DTBAD)

Filters