Question 1

Refer to the exhibit.   Which statement about the default gateway configuration of the vPC is true?

Accepted Answer

A)  Either switch can act as the active default gateway. 
B)  N7K-1 acts as the default gateway for all traffic. 
C)  N7K-2 forwards traffic that is destined for the default gateway by using the peer link. 
D)  N7K-2 acts as the default gateway for all traffic. 
A)  Either switch can act as the active default gateway. 
B)  N7K-1 acts as the default gateway for all traffic. 
C)  N7K-2 forwards traffic that is destined for the default gateway by using the peer link. 
D)  N7K-2 acts as the default gateway for all traffic.

Question 2

Refer to the exhibit. An engineer must distribute all the host ports to use all eight configured FEX uplinks. The solution must minimize disruption if an uplink fails. Which action accomplishes this objective?

Accepted Answer

A)  Set the pinning max-links value to 8 
B)  Configure the eight uplinks in a port channel 
C)  Change the supported FEX type 
D)  Statically assign each host interface to a fabric uplink 
A)  Set the pinning max-links value to 8 
B)  Configure the eight uplinks in a port channel 
C)  Change the supported FEX type 
D)  Statically assign each host interface to a fabric uplink

Question 3

What occurs when running the command install deactivate <filename> while a software maintenance upgrade is performed on a Cisco Nexus 9000 Series switch?

Accepted Answer

A)  The current set of packages is committed. 
B)  The package features for the line card are disabled. 
C)  The package is removed from the switch. 
D)  The current upgrade stops. 
A)  The current set of packages is committed. 
B)  The package features for the line card are disabled. 
C)  The package is removed from the switch. 
D)  The current upgrade stops.

Question 4

Refer to the exhibit. An engineer must configure FCoE on a Cisco Nexus switch. Which two command sets complete this configuration? (Choose two.)

Accepted Answer

A)  vsan database     vsan 10 interface vfc 10 
B)  interface vfc 10     bind interface ethernet 1/3     no shut 
C)      vsan 10 interface ethernet 1/3 
D)      bind interface fcoe-vfc 1/3 
E)  interface fcoe 10 
A)  vsan database     vsan 10 interface vfc 10 
B)  interface vfc 10     bind interface ethernet 1/3     no shut 
C)      vsan 10 interface ethernet 1/3 
D)      bind interface fcoe-vfc 1/3 
E)  interface fcoe 10

Question 5

Multiple roles are applied to a user on the Cisco MDS 9000 Series Switch. Which statement is true?

Accepted Answer

A)  The last role assigned takes precedence over previous roles. 
B)  Access to a command takes priority over being denied access to a command. 
C)  Any commands that have conflicting settings between roles are denied. 
D)  The first role assigned takes precedence over subsequent roles. 
A)  The last role assigned takes precedence over previous roles. 
B)  Access to a command takes priority over being denied access to a command. 
C)  Any commands that have conflicting settings between roles are denied. 
D)  The first role assigned takes precedence over subsequent roles.

Question 6

A customer needs a tool to take advantage of the CI/CD model to streamline its operations and optimize cost. The customer wants to integrate the solution with the Cisco products it currently uses, including Cisco ACI networking and Cisco UCS servers. The solution should also provide on-premises Kubernetes and AppDynamics performance monitoring. Because of the security requirements, the solution should not install a local client on products under management. Which orchestration solution meets these requirements?

Accepted Answer

A)  Cisco UCS Director 
B)  Cisco CloudCenter 
C)  Cisco APIC 
D)  Cisco DCNM 
A)  Cisco UCS Director 
B)  Cisco CloudCenter 
C)  Cisco APIC 
D)  Cisco DCNM

Question 7

What is an advantage of streaming telemetry over SNMP?

Accepted Answer

A)  on-change traps sent to a receiver 
B)  periodic push-based subscription messages 
C)  periodic polling of the device status 
D)  MD5-based authentication on polling 
A)  on-change traps sent to a receiver 
B)  periodic push-based subscription messages 
C)  periodic polling of the device status 
D)  MD5-based authentication on polling

Question 8

A customer has a requirement for an automation solution that supports periodically acquiring configuration from a centralized server and aligning UCS servers to their desired state. Which open-source tool meets this requirement?

Accepted Answer

A)  SaltStack 
B)  Kubernetes 
C)  Puppet 
D)  Terraform 
A)  SaltStack 
B)  Kubernetes 
C)  Puppet 
D)  Terraform

Question 9

An engineer needs to perform a backup of user roles and locales from Cisco UCS Manager to replicate the setting to a different fabric interconnect. The engineer wants to review the file before importing it to a target fabric interconnect. Which backup type must be selected to meet these requirements?

Accepted Answer

A)  logical configuration 
B)  full state 
C)  system configuration 
D)  all configuration 
A)  logical configuration 
B)  full state 
C)  system configuration 
D)  all configuration

Question 10

When the default firmware package is set to a new version, which type of policy determines the timing of server reboots during the firmware upgrade?

Accepted Answer

A)  diagnostics 
B)  maintenance 
C)  local disk 
D)  BIOS 
A)  diagnostics 
B)  maintenance 
C)  local disk 
D)  BIOS

Question 11

Refer to the exhibit.   Which result of running the command is true?

Accepted Answer

A)  Multicast traffic forwarding is suspended. 
B)  MRIB is flushed. 
C)  The PIM database is deleted. 
D)  PIM join messages are suspended. 
A)  Multicast traffic forwarding is suspended. 
B)  MRIB is flushed. 
C)  The PIM database is deleted. 
D)  PIM join messages are suspended.

Question 12

An engineer must configure a VXLAN routing on a Cisco Nexus 9000 Series Switch. The engineer requires a solution where all the leaf switches have the same gateway MAC and IP addresses. Which configuration set accomplishes this task?

Accepted Answer

A)  NX9K(config)# fabric forwarding anycast-gateway-mac AA:BB:AA:BB:AA:BB NX9K(config)# interface VLAN-interface-name NX9K(config-if)# vrf member vrf-name NX9K(config-if)# fabric forwarding mode anycast-gateway NX9K(config)# fabric forwarding anycast-gateway-mac AA:BB:AA:BB:AA:BB interface VLAN-interface-name NX9K(config-if)# vrf member vrf-name fabric forwarding mode anycast-gateway 
B)  NX9K(config)# install feature-set fabric NX9K(config)# feature-set fabric install feature-set fabric feature-set fabric 
C)  NX9K(config)# install feature-set fabric NX9K(config)# fabric forwarding anycast-gateway-mac AA:BB:AA:BB:AA:BB NX9K(config)# interface VLAN-interface-name install feature-set fabric 
D)  interface VLAN-interface-name 
A)  NX9K(config)# fabric forwarding anycast-gateway-mac AA:BB:AA:BB:AA:BB NX9K(config)# interface VLAN-interface-name NX9K(config-if)# vrf member vrf-name NX9K(config-if)# fabric forwarding mode anycast-gateway NX9K(config)# fabric forwarding anycast-gateway-mac AA:BB:AA:BB:AA:BB interface VLAN-interface-name NX9K(config-if)# vrf member vrf-name fabric forwarding mode anycast-gateway 
B)  NX9K(config)# install feature-set fabric NX9K(config)# feature-set fabric install feature-set fabric feature-set fabric 
C)  NX9K(config)# install feature-set fabric NX9K(config)# fabric forwarding anycast-gateway-mac AA:BB:AA:BB:AA:BB NX9K(config)# interface VLAN-interface-name install feature-set fabric 
D)  interface VLAN-interface-name

Question 13

Port security is enabled on a Cisco MDS 9000 Series Switch. Which statement is true?

Accepted Answer

A)  Port security can be enabled only globally and affects all VSANs. 
B)  Any devices currently logged in must be added manually to the device database. 
C)  Auto-learning is always enabled automatically when port security is enabled. 
D)  Cisco Fabric Services must be disabled before enabling port security. 
A)  Port security can be enabled only globally and affects all VSANs. 
B)  Any devices currently logged in must be added manually to the device database. 
C)  Auto-learning is always enabled automatically when port security is enabled. 
D)  Cisco Fabric Services must be disabled before enabling port security.

Question 14

An engineer is duplicating an existing Cisco UCS setup at a new site. What are two characteristics of a logical configuration backup of a Cisco UCS Manager database? (Choose two.)

Accepted Answer

A)  contains the configured organizations and locales 
B)  contains the VLAN and VSAN configurations 
C)  contains the AAA and RBAC configurations 
D)  contains all of the configurations 
E)  contains a file with an extension.tgz that stores all of the configurations 
A)  contains the configured organizations and locales 
B)  contains the VLAN and VSAN configurations 
C)  contains the AAA and RBAC configurations 
D)  contains all of the configurations 
E)  contains a file with an extension.tgz that stores all of the configurations

Question 15

Which method must a network engineer use to upgrade the BIOS firmware or a Cisco UCS standalone C-Series rack-mount server?

Accepted Answer

A)  Use the U-ACPI Interface. 
B)  Use the Cisco host upgrade utility. 
C)  Use the Cisco hardware upgrade utility. 
D)  Use the Cisco host firmware policy. 
A)  Use the U-ACPI Interface. 
B)  Use the Cisco host upgrade utility. 
C)  Use the Cisco hardware upgrade utility. 
D)  Use the Cisco host firmware policy.

Question 16

Refer to the exhibit. Service degradation is reported on a VM that is deployed on a Cisco UCS blade server. The traffic from the vNIC is required to SPAN in both directions to a packet analyzer that is connected to UCS-A slot 2 port 12. Which two commands are needed to complete the configuration? (Choose two.)

Accepted Answer

A)  UCS-A /org/service-profile/vnic/mon-src* # set direction receive transmit 
B)  UCS-A /eth-traffic-mon/fabric/eth-mon-session* # create dest-interface 2 12 
C)  UCS-A /eth-traffic-mon/fabric/eth-mon-session # activate 
D)  UCS-A /eth-traffic-mon/fabric/eth-mon-session* # create eth-mon-session/dest-interface 2 12 
E)  UCS-A /org/service-profile/vnic/mon-src* # set direction both 
A)  UCS-A /org/service-profile/vnic/mon-src* # set direction receive transmit 
B)  UCS-A /eth-traffic-mon/fabric/eth-mon-session* # create dest-interface 2 12 
C)  UCS-A /eth-traffic-mon/fabric/eth-mon-session # activate 
D)  UCS-A /eth-traffic-mon/fabric/eth-mon-session* # create eth-mon-session/dest-interface 2 12 
E)  UCS-A /org/service-profile/vnic/mon-src* # set direction both

Question 17

An engineer must use the Embedded Event Manager to monitor events that occur on a Cisco Nexus 9000 Series Switch. An environment variable needs to be created so that several policies use the monitored events in their actions. The external email server is represented by IP address 10.10.10.10. Which command sets the environment variable?

Accepted Answer

A)  n9k2# event manager environment mailserver "10.10.10.10" n9k2# event manager environment mailserver "10.10.10.10" 
B)  n9k2(config)# event manager environment mailserver "10.10.10.10" n9k2(config)# 
C)  n9k2(config-applet)# environment mailserver "10.10.10.10" n9k2(config-applet)# environment mailserver "10.10.10.10" 
D)  n9k2(config)# event manager policy environment mailserver "10.10.10.10" event manager policy environment mailserver "10.10.10.10" 
A)  n9k2# event manager environment mailserver "10.10.10.10" n9k2# event manager environment mailserver "10.10.10.10" 
B)  n9k2(config)# event manager environment mailserver "10.10.10.10" n9k2(config)# 
C)  n9k2(config-applet)# environment mailserver "10.10.10.10" n9k2(config-applet)# environment mailserver "10.10.10.10" 
D)  n9k2(config)# event manager policy environment mailserver "10.10.10.10" event manager policy environment mailserver "10.10.10.10"

Question 18

Refer to the exhibit.   A network engineer is setting up a multihomed OTV network. The first site has been set up with a primary and secondary adjacency server. Which configuration must be added on the remote OTV AEDs site?

Accepted Answer

A)    
B)    
C)    
D)    
A)    
B)    
C)    
D)

Question 19

An engineer is running an ACI fabric, has VMM integration with VMware vCenter, and wants to enable microsegmentation based on vCenter VM attributes. Which statement describes microsegmentation in this scenario?

Accepted Answer

A)  ACI does not support microsegmentation based on vCenter VM attributes. The network attributes should be used for microsegmentation. 
B)  When enabled, microsegmentation performs distributed switching and routing on the ESXi hosts. 
C)  Microsegmentation is supported only using AVE or AVS. 
D)  An ACI microsegmented EPG automatically creates a port group with a private VLAN configured on a VMware vCenter distributed virtual switch. 
A)  ACI does not support microsegmentation based on vCenter VM attributes. The network attributes should be used for microsegmentation. 
B)  When enabled, microsegmentation performs distributed switching and routing on the ESXi hosts. 
C)  Microsegmentation is supported only using AVE or AVS. 
D)  An ACI microsegmented EPG automatically creates a port group with a private VLAN configured on a VMware vCenter distributed virtual switch.

Question 20

What are two requirements when planning a Cisco HyperFlex All Flash standard cluster installation using three HX240c M5 servers? (Choose two.)

Accepted Answer

A)  If the Jumbo MTU option in the HyperFlex installer is enabled, then jumbo frames do not have to be enabled on the upstream switches. 
B)  This cluster deployment type must support a mix of HDD and SSD. 
C)  The servers must be discovered, unassociated, and connected to each fabric interconnect. 
D)  If the Jumbo MTU option in the HyperFlex installer is enabled, then jumbo frames must also be enabled on the upstream switches. 
E)  The hypervisors must be installed to Cisco FlexFlash SD cards. 
A)  If the Jumbo MTU option in the HyperFlex installer is enabled, then jumbo frames do not have to be enabled on the upstream switches. 
B)  This cluster deployment type must support a mix of HDD and SSD. 
C)  The servers must be discovered, unassociated, and connected to each fabric interconnect. 
D)  If the Jumbo MTU option in the HyperFlex installer is enabled, then jumbo frames must also be enabled on the upstream switches. 
E)  The hypervisors must be installed to Cisco FlexFlash SD cards.

Exam 40: Implementing and Operating Cisco Security Core Technologies

Refer to the exhibit. Which statement about the default gateway configuration of the vPC is true?

Refer to the exhibit. An engineer must distribute all the host ports to use all eight configured FEX uplinks. The solution must minimize disruption if an uplink fails. Which action accomplishes this objective?

What occurs when running the command install deactivate <filename> while a software maintenance upgrade is performed on a Cisco Nexus 9000 Series switch?

Refer to the exhibit. An engineer must configure FCoE on a Cisco Nexus switch. Which two command sets complete this configuration? (Choose two.)

Multiple roles are applied to a user on the Cisco MDS 9000 Series Switch. Which statement is true?

What is an advantage of streaming telemetry over SNMP?

A customer has a requirement for an automation solution that supports periodically acquiring configuration from a centralized server and aligning UCS servers to their desired state. Which open-source tool meets this requirement?

When the default firmware package is set to a new version, which type of policy determines the timing of server reboots during the firmware upgrade?

Refer to the exhibit. Which result of running the command is true?

An engineer must configure a VXLAN routing on a Cisco Nexus 9000 Series Switch. The engineer requires a solution where all the leaf switches have the same gateway MAC and IP addresses. Which configuration set accomplishes this task?

Port security is enabled on a Cisco MDS 9000 Series Switch. Which statement is true?

An engineer is duplicating an existing Cisco UCS setup at a new site. What are two characteristics of a logical configuration backup of a Cisco UCS Manager database? (Choose two.)

Which method must a network engineer use to upgrade the BIOS firmware or a Cisco UCS standalone C-Series rack-mount server?

Refer to the exhibit. A network engineer is setting up a multihomed OTV network. The first site has been set up with a primary and secondary adjacency server. Which configuration must be added on the remote OTV AEDs site?

An engineer is running an ACI fabric, has VMM integration with VMware vCenter, and wants to enable microsegmentation based on vCenter VM attributes. Which statement describes microsegmentation in this scenario?

What are two requirements when planning a Cisco HyperFlex All Flash standard cluster installation using three HX240c M5 servers? (Choose two.)

Supporting Cisco Data Center System Devices (DCTECH)

Cisco Certified Technician Routing & Switching (RSTECH)

Understanding Cisco Cybersecurity Operations Fundamentals (CBROPS)

Cisco Certified Network Associate (CCNA)

Managing Industrial Networks with Cisco Networking Technologies (IMINS)

DevNet Associate (DEVASC)

Conducting Forensic Analysis and Incident Response Using Cisco CyberOps Technologies (CBRFIR)

Implementing Cisco Enterprise Advanced Routing and Services (ENARSI)

Implementing Cisco SD-WAN Solutions (ENSDWI)

Designing Cisco Enterprise Networks (ENSLD)

Designing Cisco Enterprise Wireless Networks (300-425 ENWLSD)

Implementing Cisco Enterprise Wireless Networks (300-430 ENWLSI)

Automating Cisco Enterprise Solutions (ENAUTO)

Implementing Cisco Service Provider Advanced Routing Solutions (SPRI)

Implementing Cisco Service Provider VPN Services (SPVI)

Designing Cisco Data Center Infrastructure (DCID)

Troubleshooting Cisco Data Center Infrastructure (DCIT)

Implementing Cisco Application Centric Infrastructure (DCACI)

Configuring Cisco MDS 9000 Series Switches (DCSAN)

Implementing Cisco Application Centric Infrastructure - Advanced

Automating Cisco Data Center Solutions (DCAUTO)

Securing Networks with Cisco Firepower (300-710 SNCF)

Implementing and Configuring Cisco Identity Services Engine (300-715 SISE)

Securing Email with Cisco Email Security Appliance (300-720 SESA)

Securing the Web with Cisco Web Security Appliance (300-725 SWSA)

Implementing Secure Solutions with Virtual Private Networks (SVPN 300-730)

Automating Cisco Security Solutions (SAUTO)

Implementing Cisco Collaboration Applications (CLICA)

Implementing Cisco Advanced Call Control and Mobility Services (CLASSM)

Implementing Cisco Collaboration Cloud and Edge Solutions

Implementing Cisco Collaboration Conferencing

Automating Cisco Collaboration Solutions (CLAUTO)

Implementing DevOps Solutions and Practices using Cisco Platforms (DEVOPS)

Developing Solutions Using Cisco IoT and Edge Platforms (DEVIOT)

Developing Applications for Cisco Webex and Webex Devices (DEVWBX)

Performing CyberOps Using Core Security Technologies (CBRCOR)

Implementing Cisco Enterprise Network Core Technologies (ENCOR)

Implementing and Operating Cisco Service Provider Network Core Technologies (SPCOR)

Implementing and Operating Cisco Data Center Core Technologies (DCCOR)

Implementing Cisco Collaboration Core Technologies (CLCOR)

Developing Applications using Cisco Core Platforms and APIs (DEVCOR)

CCDE Design Written

Deploying Cisco Unified Contact Center Express

Cisco Meraki Solutions Specialist

Securing Cisco Networks with Sourcefire FireAMP Endpoints

Designing Cisco Unified Contact Center Enterprise (UCCED)

Implementing and Supporting Cisco Unified Contact Center Enterprise (UCCEIS)

Cisco Collaboration SaaS Authorization Exam

Cisco Security Architecture for System Engineers

Adopting The Cisco Business Architecture Approach (DTBAA)

Cisco Customer Success Manager (CSM)

Mastering The Cisco Business Architecture Discipline (DTBAD)

Filters