Q 391-441

Q391 A network administrator must back up a Cisco Unified Computing System domain to prepare for a system upgrade. The backup must only include system and logical configuration settings. Which backup type must be used?. A. full state. B. all configuration. C. logical configuration. D. system configuration.

Q392 What is the impact of performing an electronic programmable logic device upgrade on a single module in a Cisco MDS 9000 Series Fabric Switch?. A. The switch must be rebooted for the upgrade to take effect. B. The upgrade is nondisruptive and does not require a switch reboot. C. Traffic is disrupted on all ports of the module being upgraded. D. The upgrade can be executed only from the active supervisor module.

Q393 Which LDAP rule must be used in Cisco UCS Manager to search for a user continuously down the tree hierarchy until the user is found?. A. enable group authorization. B. check box of use primary group. C. set group recursion to recursive. D. disable secure socket layer.

Q394 Refer to the exhibit. A user must be granted management access to the Cisco Nexus 9000 Series Switch using AAA servers. The RADIUS servers are configured to accept login requests from the same Layer 2 subnet of the switch. The user must be permitted to log in with these requirements: RADIUS Server 1 must be used to log in via a console. RADIUS Server 2 must be used to log in via SSH. Which two actions meet these requirements? (Choose two.). A. Configure the authentication login to use group RAO1 for console and group RAO2 for remote access. B. Configure AAA to send the accounting traffic to RAO1 and RAO2. C. Enable command authorization to RAO1 and RAO2 for all successful logins. D. Change the deadtime for RAO1 and RAO2 to 1 minute. E. Set the RADIUS source interface to be mgmt0 for group RAO1 and VLAN 22 for group RAO2.

Q395 A Cisco ACI engineer must configure an access port on a Cisco ACI leaf switch. The access policy should be configured so that it supports L3Out connectivity concurrently with several EPGs that are mapped to this interface with the static port method. How should the access policy be configured?. A. by mapping a single physical domain, mapped to the L3Out and EPG interfaces. B. with a single Attachable Access Entity Profile that is linked to the corresponding routed domain and physical domain. C. by linking the interface policy group to multiple Attachable Access Entity Profiles. D. with two interface policy groups that are linked to the same interface profile port selector.

Q396 An engineer implements a Python script inside a Cisco Bash shell. The script contains this dictionary object: Python switch_id_list = { "N9K-Spine-1": "12345", "N9K-Leaf-1": "126784690", "N9K-Leaf-2": "56556473" } Which command must be used to add the "N9K-Spine-2": "00000" element to the switch_id_list dictionary?. A. switch_id_list += {"N9K-Spine-2": "00000"}. B. switch_id_list.append({"N9K-Spine-2": "00000"}). C. switch_id_list.update({"N9K-Spine-2": "00000"}). D. switch_id_list = {"N9K-Spine-2": "00000"}.

Q397 Refer to the exhibit. The MDS-EDGE-SWITCH and MDS-core-switch are configured with NPV features. The FLOGI From cisco UCS is received by the MDS-Core-switch on interface fc1/2. An engineer tried to move all traffic between the MDS-EDGE-SWITCH and MDS-CORE-SWITCH from interface fc1/2 to fc1/3, but the attempt failed. which set of actions completes the configuration?. A. Shutdown fc1/3 in the MDS-EDGE-Switch. Re-apply the command. Enable interface fc1/3. B. Disable the NPV feature in the MDS-EDGE-Switch. Re-enable the NPV feature. Disable interface fc1/1. C. Disable the NPIV feature in the MDS-EDGE-Switch. Re-enable the NPIV feature. Disable interface fc1/3. D. Shut down fc1/1 in the MDS-EDGE-Switch. Re-apply the command. Enable interface fc1/1.

Q398 An engineer must allow in-band Cisco IMC profile configuration and deploy local storage policies for disks and LUNs. Which set of permissions must be used for a user profile to permit these actions?. A. pn-equipment power-mgmt. B. operations org-management. C. ls-network fault. D. ext-lan-config ls-compute.

Q399 Which file service protocol allows the files to appear locally mapped to the client and provides view, store, and update capabilities on a remote Linux-based storage repository that also serves as a distributed file system standard for NAS?. A. CIFS. B. iSCSI. C. FTP. D. NFS.

Q400 Refer to the exhibit. User 1 and user 2 are connected to the VTEP1 switch. The users can reach the WEB server. A monitoring tool shows degrading network performance that consumes the interface bandwidth between VTEP1 and the spine switch. An engineer noticed that user 1 sends many ARP requests. Which command set on VTEP1 mitigates the issue without preventing user 1 from sending ARP requests?. A. interface eth1/1 storm-control multicast level 40. B. interface eth1/1 storm-control broadcast level 40. C. interface eth1/3 storm-control multicast level 40. D. interface eth1/3 storm-control broadcast level 0.

Q401 Refer to the exhibit. A Cisco vXLAN data center deployed using Cisco Nexus 9000 Series Switches must meet these requirements: VTEP1 must learn the MAC addresses of User1 and User2 on interfaces Eth1/1 and Eth1/2. VTEP2 must never age the MAC address of the WEB server. Learned MAC addresses on interfaces of VTEP1 must persist after the device or the interfaces are restarted. Which configuration accomplishes these goals?. A. interface eth1/2 switchport port-security mac-address B interface eth1/3 switchport port-security aging time 0 interface eth1/1 switchport port-security mac-address A. B. interface eth1/2 switchport port-security mac address sticky interface eth1/3 switchport port-security aging type absolute interface eth1/1 switchport port-security. C. interface eth1/2 switchport port-security interface eth1/3 no switchport port-security interface eth1/1 switchport port-security. D. interface eth1/2 switchport port-security mac-address static interface eth1/3 switchport port-security aging type inactivity interface eth1/1 switchport port-security mac-address A.

Q402 user1 must have access to the Marketing sub-organization. user1 must be allowed to create vNIC/HBA. user1 must be allowed to associate and disassociate service profiles. Which configuration must be used for user1 to have these permissions?. A. Role: operations Locale: locale4. B. Role: server-equipment Locale: locale2. C. Role: server-compute Locale: locale3. D. Role: server-profile Locale: locale 1.

Q403 Refer to the exhibit. The Cisco Router must be configured using Cisco Nexus Dashboard Fabric Controller, but the configuration failed to be applied. Which action applies the configuration to the router?. A. Use the create fabric option. B. Use the add policy group option. C. Choose the add switches option. D. Choose the deploy option.

Q404 An engineer is configuring a Switched Port Analyzer (SPAN) session on a Cisco Unified Computing System to monitor traffic from the network adapter of a UCS chassis and send the monitored traffic to an external network analyzer. Which set of actions must be taken to accomplish the goal?. A. Configure the Ethernet port channel associated with the chassis adapter as the SPAN source, select the virtual host bus adapter of a service profile as the destination, and specify management traffic only. B. Configure the network adapter as the SPAN source, configure an unconfigured physical Ethernet port as the destination, and enable traffic monitoring session. C. Configure the virtual network interface card of a service profile as the SPAN source, direct the session to a Fibre Channel storage port, and filter for all traffic. D. Configure the unified uplink port as the SPAN source, configure an unconfigured physical Ethernet port as the destination, and filter for admin speed traffic.

Q405 Which Intersight component must be deployed to the customer's environment to enable connectivity from an Intersight SaaS instance to an on-premises instance of VMware vCenter?. A. Intersight Cloud Proxy. B. Intersight Connected Appliance. C. Intersight Assist. D. Intersight Device Connector.

Q406 Which event takes place when upgrading a Cisco Nexus MDS 9000 Series Switch with dual supervisor modules?. A. The new code is loaded on the standby supervisor then on the active. B. The old code is removed from the backup supervisor then from the primary. C. The old code is removed from the primary supervisor module then from the standby. D. The new code is loaded on the active supervisor then on the secondary.

Q407 What is an advantage of using Network File System (NFS) rather than Storage Area Network (SAN)?. A. NFS supports booting the operating system. B. NFS allows direct file access. C. NFS supports more types of file systems. D. NFS has lower latency than SAN.

Q408 A network engineer deploys a Cisco Unified Computing System C-Series Server in standalone mode. The engineer must ensure that the secondary vNIC is used as a fallback if a failure occurs on the primary vNIC. The server must then revert to using the primary vNIC if the failure is resolved in less than five minutes. Which two actions must be taken on the server? (Choose two.). A. Disable WITAG mode. B. Configure Class of Service. C. Enable uplink failover. D. Set the default VLAN on the vNICs. E. Set Fallback Timeout.

Q409 A Cisco Unified Computing System environment must be configured for a server that requires access to VLAN 30 for data and VLAN 40 for management. The server must have failover capabilities. The upstream connectivity will be provided by using a Cisco Nexus 9000 Series Switch. Which action must be taken to meet these requirements?. A. Create a virtual network interface card for each VLAN and configure the host to use load balancing. B. Use a single virtual network interface card for both VLANs and apply a network control policy for prioritization. C. Create a virtual network interface cards for each VLAN and enable vNIC fabric failover. D. Use a single virtual network interface card for both VLANs and assign the vNIC to a dynamic LAN pin group.

Q410 In a data center based on Cisco Nexus 9000 Series Switches, all endpoints support explicit congestion notifications. How does the Nexus switch respond when the ECN-enabled queue reaches the maximum WRED threshold?. A. A congestion notification packet is sent to the sender. B. Low-priority incoming packets are dropped. C. A pause frame is sent to the source. D. All the outgoing packets are marked.

Q411 What is the effect of enabling Skip Validation in the Cisco UCS Auto Install process?. A. The firmware image of Cisco UCS is not installed. B. Users that are logged in to Cisco UCS Manager are logged out. C. Cisco UCS Manager does not report issues with the upgrade. D. The upgrade process of Cisco UCS fails to complete.

Q412 An engineer must implement a Python script to manage Cisco Application Centric Infrastructure (ACI) and endpoint groups. Which Python libraries must be used to parse responses and send requests to Cisco ACI?. A. socket and JSON. B. ElementTree and SSL. C. JSON and requests. D. JSON and ElementTree.

Q413 What is a disadvantage of deploying network-attached storage (NAS) versus Fibre Channel for storage?. A. NAS is more complex and expensive to implement. B. NAS lacks the scalability and performance of Fibre Channel. C. NAS operates independently of an organization's operating system. D. NAS centralizes storage devices, which makes them easier to manage.

Q414 What is the effect of using firmware auto sync server policy in Cisco UCS Manager?. A. The Cisco UCS domain activates without need for a complete firmware upgrade. B. UCS Manager does not report issues with the upgrade process. C. The firmware is automatically upgraded after administrator acknowledgment. D. The server automatically reboots when the upgrade completes.

Q415 An administrator in UCS Manager must enable its users to reboot and decommission the servers and perform backup jobs. Which set of user privileges permits these activities?. A. ls-storage ls-config. B. operations pn-maintenance. C. ls-server-oper ls-security. D. ls-network ext-lan-security.

Q416 What is the primary purpose of a UCS Domain Profile in Intersight Managed Mode?. A. It manages individual service profiles for UCS servers. B. It orchestrates data center operations across multiple domains. C. It creates the common configuration for a group of fabric interconnects. D. It provides a centralized repository for US Manager backups.

Q417 Which feature differentiates Intersight Managed Mode from UCSM Managed Mode when configuring and managing a Cisco UCS-X Series Modular System?. A. It supports up to 200 servers in the same UCS domain. B. It provides full visibility of the UCS chassis components. C. It consolidates all the events and alerts from the fabric interconnects. D. It decouples the management software from the infrastructure.

Q418 An engineer must configure Protocol Independent Multicast (PIM) on two Cisco Nexus 9000 Series Switches. The network already has a bootstrap router PIM configuration to be used on the switches. The configuration must support multiple different rendezvous points (RPs) and use RFC 4610. Which type of RP must be used to accomplish these goals?. A. MSDP-RP. B. static. C. Auto-RP. D. Anycast-RP.

Q419 What is the primary benefit of using Intersight Managed Mode (IMM) in Cisco UCS deployments?. A. It enables centralized, cloud-based management of UCS infrastructure. B. It provides direct hardware access for BIOS configuration. C. It replaces UCS Manager with a physical appliance. D. It eliminates the need for UCS fabric interconnects.

Q420 An architect must select a scripting language for automating Cisco Nexus Series Switches and Cisco Ucs Manager. The language must comply with these requirements: Can run in interactive mode for testing Can be run from different operating systems without changing code. Extensible with a diverse set of libraries Which scripting language meets these requirements?. A. Python. B. Bash. C. JavaScript. D. TCL.

Q421 What is the impact of an electronic programmable logic device upgrade on a Cisco MDS 9000 Series Director Switch with dual supervisors?. A. A manual reboot is required for each supervisor. B. Nondisruptive upgrades without traffic interruptions can be performed. C. A complete system reboot is triggered. D. The upgrade is aborted if any module is unsupported.

Q422 Which protocol is used by a Cisco NX-OS device to send telemetry data that is encoded by GPB?. A. gRPC. B. JSON. C. OPENSSL. D. HTTP.

Q423 Refer to the exhibit. The router R1 and N9K1 establish EIGRP neighborship. R1 is advertising network 10.1.1.15/32 to N9K1 and N9K2 and N9K3 are forming the OSPF neighborship over area 1. Which configuration prevents N9K3 from receiving external LSA for network 10.1.1.15/32?. A. N9K2(config-router)# area 1 stub no-summary N9K3(config-router)# area 1 stub. B. N9K2(config-router)# area 0 stub no-summary N9K3(config-router)# area 1 stub. C. N9K3(config-router)# area 1 stub no-summary N9K2(config-router)# area 0 stub. D. N9K3(config-router)# area 1 stub no-summary N9K2(config-router)# area 1 stub.

Q424 Refer to the exhibit. A company had a security incident where several nodes from the data center were compromised. The engineer must configure the Cisco MDS 9000 devices so that unauthorized devices cannot log in to the fabric. The template must also ensure that Nx ports are allowed only for manually configured device-alias addresses. XE ports are allowed for any address, and all switches are manually configured. Which configuration must the engineer apply on MDS-9000-A1 to accomplish these goals?. A. zone name Storage_A vsan 11 member device-alias Storage_A zoneset name ZONES vsan 11 member Storage_A zoneset activate name ZONES vsan 11. B. vsan database vsan 11 interface fc1/1 vsan 11 interface fc1/24 port-security activate vsan 11 no-auto-learn. C. port-security database vsan 11 device-alias Storage A interface fc1/1 any-wwn interface fc1/24 port-security activate vsan 11. D. port-security database vsan 11 device-alias Storage_A interface fc1/124 any-wwn interface fc1/1 port-security activate vsan 11 no-auto-learn.

Q425 Which technology provides the capability to transfer data into the memory of another device without involving the CPU?. A. RDMA. B. DWDM. C. InfiniBand. D. NVMe-oF.

Q426 An engineer must deploy a UCS-X platform to a customer that requires an air gap between their management systems and the internet. Which Intersight deployment option must be used to accomplish this goal?. A. Intersight Private Appliance. B. Intersight Connected Appliance. C. Intersight Assistant. D. Intersight Secure Appliance.

Q427 Which feature of the Cisco Nexus Dashboard Insights uses Duo to reduce the risk of static passwords?. A. single sign-on. B. cloud-site onboarding. C. multifactor authentication. D. air-gap support.

Q428 What is the function of network file storage?. A. It allows clients to access files stored on a remote server. B. It supports block-level system protocol used to access storage blocks. C. It uses Fibre Channel switches to store data at the block level. D. It provides file system access for storage devices.

Q429 An engineer implements a Cisco UCSC-Series Server that must adhere to these security requirements: Unencrypted communication must be disabled The session timeout must not exceed 15 minutes. Unencrypted traffic must be automatically diverted. CLI-based management must use nondefault ports. Which configuration set meets these requirements?. A. XML API Enabled HTTP Port: 8080 / HTTPS Port: 8443 IPMI over LAN Enabled Randomized Encryption Key. B. Redfish Enabled checked Redfish Port: 443 SSH Enabled checked HTTPS Port: 8443. C. HTTP Port: 80 / HTTPS Port: 443 Session Timeout: 900 Redirect HTTP to HTTPS Enabled SSH Port: 2022. D. SSH Enabled SSH Port: 8022 SSH Timeout: 1200 IPMI over LAN Enabled.

Q430 Refer to the exhibit. A storage engineer must monitor the traffic from the file server to the FC analyzer. The file server and the database use the same storage array. Which configuration must be applied to the cisco MDS 9000 series switch to accomplish this goal?. A. MDS-9000(config)# span session 1 MDS-9000(config-span)# destination interface vsan 100 MDS-9000(config-span)# source interface port-channel 1. B. MDS-9000(config)# span session 1 MDS-9000(config-span)# destination interface fc1/3 MDS-9000(config-span)# source interface port-channel 1. C. MDS-9000(config-span)# span session 1 MDS-9000(config-span)# destination interface port-channel 2 MDS-9000(config-span)# source interface vsan 100. D. MDS-9000(config)# span session 1 MDS-9000(config-span)# destination interface vsan 100 MDS-9000(config-span)# source interface port-channel 1.

Q431 A network engineer must download a firmware image from a remote location to a Cisco UCS Fabric Interconnect. The software bundle is over 200 MB in size. The file transfer must use encryption and authentication. Which protocol must be used to accomplish this goal?. A. SCP. B. RDP. C. TFTP. D. HTTPS.

Q432 A Cisco ACI fabric is created with a single L3Out with R1 and R2. The requirement is to prevent all received subnets from R1 and R2 from communicating. Which configuration accomplishes this goal?. A. Intra EPG isolation as Unenforced. B. Intra Ext-EPG isolation as Unenforced. C. Intra Ext-EPG isolation as Enforced. D. Intra EPG isolation as Enforced.

Q433 Which Fibre Channel service has its status shown in this output? switch# show fcns database FCID TYPE PWWN (VENDOR) FC4-TYPE:FEATURE 0x010000 N scsi-fcp fc-gs 0x010001 N (Cisco) ipfc 0x010002 N (Company 1) scsi-fcp 250 0x010100 N (Company A) scsi-fcp 0x020000 N (Company A) 0x020100 N (Cisco) ipfc 0x020200 N (Company A) scsi-fcp. A. management server. B. fabric controller. C. fabric service. D. name service.

Q434 Refer to the exhibit. Which command must be used to configure a VXLAN rve tunnel interface such that MAC and IP address information are learned in the control Plane?. A. host-reachability protocol static. B. host-reachability protocol bgp. C. ingress-replication protocol bgp. D. ingress-replication protocol static.

Q435 Refer to the exhibit. The PowerShell script uses cmdlet to create the MAC pool resource on the Cisco UCS Manager. Which command resolves the issue?. A. Complete-Ucs Transaction. B. Get-UcsOrg-Level admin. C. Add-UcsComputePooledRackUnit. D. Add-UcsWwnMemberBlock.

Q436 Which upgrade type must be used to patch a known hardware problem or improve the functionality of modular Cisco Nexus 9000 Series Switches?. A. SMU. B. EPLD. C. POAP. D. GIR.

Q437 An engineer is configuring a traffic monitoring session on a Cisco Unified Computing System system to analyze Fibre Channel over Ethernet traffic for performance tuning. The session must monitor traffic from a VSAN associated with the vHBA of a service profile. Which set of actions accomplishes this goal?. A. Configure the FC port associated with the vHBA as the SPAN source, route the destination to an Ethernet uplink port, and filter for native FCoE traffic. B. Configure an Ethernet port channel as the SPAN source, point the destination to the vNIC of a service profile, and select encapsulated FCoE as the traffic type. C. Configure the vHBA as the SPAN source, direct the destination to a Fibre Channel (FC) uplink port, and set the traffic type to FCoE control packets. D. Designate the VSAN as the Switched Port Analyzer (SPAN) source, set an unconfigured physical Ethernet port on the destination, and activate the session for all traffic monitoring.

Q438 What is the purpose of using explicit congestion notification and priority flow control in an AI/ML data center?. A. to prevent packet loss in the network. B. to build a non-blocking infrastructure. C. to drop only selected packets. D. to reserve per-application bandwidth.

Q439 Refer to the exhibit. An engineer analyzes a Wireshark packet flow between a PC and a DHCP server. What occurs in the packet flow?. A. The PC sends an anycast asking for an IP address. B. The PC sets its IP address to 0.0.0.0 because no DHCP server is available. C. The PC sends a broadcast asking for an IP address. D. The PC receives IP address 10.53.58.3 from the DHCP server.

Q440 A network engineer must configure a backup job that stores the VLAN and VSAN configurations of a Cisco UCS system. The engineer wants to be able to parse the configuration using the XML data type. The backup job must be stored on a remote server using a secure method that authenticates with the remote server and transfers the files to prevent eavesdropping. Which Cisco UCS backup job configuration must be used?. A. Backup type: Logical configuration Backup protocol: HTTP. B. Backup type: System configuration Backup protocol: FTP. C. Backup type: All configuration Backup protocol: TFTP. D. Backup type: Logical configuration Backup protocol: SFTP.

Q441 Which action does Cisco UCS Manager perform during the firmware Auto-Install process?. A. It upgrades firmware and reboots necessary components. B. It checks compatibility with third-party software. C. It sends email notifications to administrators. D. It downloads new firmware versions automatically.