350-601 Exam Dumps - Cisco CCNP Data Center Questions and Answers

Option A is the correct command sequence to configure HTTPS secure management for Cisco UCS Manager using a key ring named kr2016 and a key size of 1024 bits. The other options have incorrect commands or syntax errors. For example, option B uses the wrong command to set the modulus size, option C uses the wrong command to create the key ring, and option D uses the wrong command to name the key ring. References:

• [Cisco UCS Manager CLI Configuration Guide, Release 4.0 - Configuring Security [Cisco UCS Manager]], Configuring Security, Configuring Key Rings
• [Cisco UCS Manager CLI Configuration Guide, Release 4.0 - Configuring Security [Cisco UCS Manager]], Configuring Security, Configuring HTTPS Secure Management
• [Cisco UCS Manager CLI Configuration Guide, Release 4.0 - Configuring Security [Cisco UCS Manager]], Configuring Security, Configuring the Modulus Size for the Key Ring

To use SaaS to manage Cisco computing, you need to have a Cisco Intersight account and a device/claim ID for each device that you want to manage. Cisco Intersight is a cloud-based platform that provides unified management, automation, and analytics for Cisco data center products. A device/claim ID is a unique identifier that is generated when you register a device with Cisco Intersight. You can use the device/claim ID to claim the device and add it to your Intersight account. Once you claim the device, you can monitor, configure, and troubleshoot it from the Intersight dashboard. References: For more information on how to use SaaS to manage Cisco computing, please refer to the following resources:

• Cisco Intersight Overview
• Cisco Intersight Getting Started Guide
• Cisco Intersight Device Connector

POAP is an automatic provisioning and zero-touch deployment feature that assists device owners in the

initial deployment and configuration of Nexus switches.

The feature works by checking for a local configuration script. If the script has been deleted, the switch has

been reset to factory settings, or this is the first boot-up, the POAP daemon will connect to a preset list of

servers to download an initial configuration file.

To perform this operation, the switch must first obtain an IP address from a local DHCP server. POAP

configuration settings can also be passed through the DHCP response.

Which conditions should be verified, so they need to be TRUE. Like no startup (A) and bootup (B). C means

that it needs to miss a license file and E means it needs to miss an NX-OS image.

The ‘protect’ violation mode in port security is designed to drop packets with unknown source MAC addresses without affecting the interface’s state. This mode ensures that traffic from already learned MAC addresses continues to be forwarded while preventing any new MAC addresses from forwarding traffic until a sufficient number of secure MAC addresses are removed or the maximum count is increased. This configuration aligns with the requirement to not affect already learned MAC addresses.

References := For further reading and detailed understanding, refer to the Cisco Data Center Core Technologies study guide and source documents available on the Cisco Learning Network Store and Cisco’s official solutions page for data center virtualization.

The FCoE uplink port type is designed to carry Fibre Channel over Ethernet traffic, which is typically used for storage server communication. Configuring port E1/31-32 as FCoE uplinks will ensure that only storage server traffic for VLAN 200 is forwarded, aligning with the requirement to dedicate these ports solely for storage traffic

 Increasing the vPC delay restore timer can help prevent packet loss during a vPC peer switch reload. This timer delays the restoration of vPCs after a peer link recovery, allowing enough time for all the systems to stabilize and for routing protocols to converge, thus avoiding potential packet loss1.

 The ‘iqn_pool’ attribute in Ansible is used to apply iSCSI initiator identifiers to all iSCSI vNICs for service profiles derived from a service template. This ensures that each iSCSI vNIC has a unique identifier for storage communication2

1- feature netflow

2- flow exporter

3- flow monitor

4- interface

 For fabric redundancy in NPV mode on a Cisco MDS 9000 Series Switch, the engineer must connect the NPV devices to multiple upstream switches (A). This setup ensures that if one upstream switch fails, the NPV device can still reach the fabric through another upstream switch, maintaining fabric redundancy.

References := Switch Configuration - Configuring N Port Virtualization - Cisco2.

The correct configuration to capture traffic only from the server with the IP address of 198.19.1.19/24 is option C. This configuration uses an IP access list to match packets from the specific IP address with a subnet mask of 255.255.255.255, which indicates a single host. The monitor session command is then used to apply this access list to a SPAN session, ensuring that only traffic from the specified server is captured.