test-king.350-080.270questions - gratis exam€¦ · 21/5/2015 · overlay transport...

Test-King.350-080.270questions

Number: 350-080Passing Score: 800Time Limit: 120 minFile Version: 22.6

http://www.gratisexam.com/

350-080

CCIE Data Center Written Exam

1. Yesterday I just took the paper and managed to clear it. Although I just managed to score a 88%, however I am still happy to clear it with short time preparation.2. strong concepts are the only key to success and this is best way to strong your concepts…because it contains conceptual questions.3. Nicely written Questions with many corrections inside.4. I believe all that I have achieved is just because of this outstanding dump.

Sections1. Cisco Data Center Architecture2. Cisco Data Center Infrastructure—Cisco NX-OS3. Cisco Storage Networking4. Cisco Data Center Virtualization5. Cisco Unified Computing System

6. Cisco Application Networking Services

Exam A

QUESTION 1Which statement about SAN port channels configured on Cisco Nexus 5000 Series Switches is true?

A. A single SAN port channel can have both Fibre Channel and virtual Fibre Channel interfaces.B. SAN port channels can include up to 16 interfaces.C. SAN port channels distribute traffic across all links in the port channel when source ID and destination ID load balancing are used.D. The links in SAN port channels can be connected to different sets of switches.E. The On mode of operation means ports only operate as part of a SAN port channel or remain inactive.

Correct Answer: ESection: Cisco Data Center Infrastructure—Cisco NX- OSExplanation

Explanation/Reference:Explanation:

You can configure each SAN port channel with a channel group mode parameter to determine the port channel protocol behavior for all member ports in thischannel group. The possible values for a channel group mode are as follows:

References:

QUESTION 2Which capabilities are not supported in DCNM device manager?

A. manage SNMPv3 security access to switchesB. save and copy configuration files and software imagesC. configure VLANs and Ethernet port channelsD. manage 2148T FEX, 2232PP FEX, and 2248TP FEXE. configure FCoE

Correct Answer: CSection: Cisco Data Center Infrastructure—Cisco NX- OSExplanation


Device Manager provides two views: Device View and Summary View. Use Summary View to monitor interfaces on the switch. Use Device View to perform switch-level configurations including the following:

References:

QUESTION 3If the default VDC is configured to limit resources to a specific module type, what happens when a module that does not match the resource type is installed?

A. The module is powered up, and interfaces are in an "admin down" state.B. The module is denied power, and a syslog message is generated.C. The module is powered up, and interfaces are allocated to VDC0.D. The module is powered up, and interfaces are allocated to VDC100.



Starting with Cisco NX-OS Release 6.2(2), there is no need to support the interoperability of F1 and F2 Series modules in any VDC, either in a dedicated mode or ina shared mode. If you have configured F1 and F2 Series modules as supported line cards in a storage VDC during an In-Service Software Upgrade (ISSU) to CiscoNX-OS Release 6.2(2) or later releases, before ISSU, reconfigure your storage VDC by using the limit-resource module-type command to avoid any unnecessarydisruption to the system.References:

QUESTION 4VLAN configuration using DCNM can be completed by which two supported methods? (Choose two.)


A. Copy and paste the VLAN, along with its VLAN ID, name, type, admin state, and admin status, from one device to another.B. Create a single VLAN or a range of VLANs.C. A VLAN is created only after choosing File > Deploy to apply changes.

D. After a VLAN is created, it requires the state to be enabled.E. Modify the existing VLAN by choosing Interface > VLAN > VLAN Settings.

Correct Answer: ABSection: Cisco Data Center Infrastructure—Cisco NX- OSExplanation


You can copy and paste the VLAN, along with its VLAN ID, name, type, admin stat, and admin status, from one device to another.ProcedureStep 1 From the Feature Selector pane, choose Switching > VLAN to open the VLAN pane.Step 2 In the Summary pane, click the Device View tab.Step 3 Click the device from which you want to copy the VLAN. Step 4 Expand the view for the device. The system lists the VLANs configured on that device.Step 5 Highlight the VLAN that you want to copy.Step 6 From the menu bar, choose Actions > Copy.Step 7 In the Summary pane, click the device to which you want to paste the VLAN.Step 8 From the menu bar, choose Actions > Paste.Step 9 (Optional) From the menu bar, choose File > Deploy to apply your changes to the device.References:

QUESTION 5DCNM device discovery is done by connecting to Cisco NX-OS devices and doing which three of these? (Choose three.)

A. Collecting the running configurationB. Raising the logging level to meet the minimum requirementC. Discovering all devices by defaultD. Discovering devices using multiple user accounts as long as they are administrator-level accountsE. Using LLDP to discover network adaptors

Correct Answer: ABESection: Cisco Data Center Infrastructure—Cisco NX- OSExplanation


Discovering an unmanaged device changes its status to Managed. During the discovery, DCNM retrieves the running configuration of the device.

If you are rediscovering a device, the configuration data that DCNM retrieves replaces any existing configuration data for the device. Whenever the configurationdata that DCNM has for the device is not accurate, such as when a device administrator has used the command-line interface to change the running configuration,you can use this procedure to update the configuration data that DCNM has for the device. This feature is particularly useful when the device is a VDC whoseresource allocation was changed, such as changes to the interfaces assigned to the VDC.References:

QUESTION 6Cisco DCNM-LAN supports the configuration and monitoring of many Cisco NX-OS features, including which two of these Ethernet protocols? (Choose two.)

A. GLBPB. HSRPC. IRDPD. VRRP


Explanation/Reference:

QUESTION 7The vPC peer-gateway capability allows a vPC switch to act as the active gateway for packets that are addressed to the router MAC address of the vPC peer. Thisfeature enables local forwarding of such packets without the need to cross the vPC peer link.Which statements are true about the vPC peer-gateway? (Choose two.)

A. The vPC peer-gateway feature is enabled by default.B. The vPC peer-gateway feature can be configured globally under the vPC domain submode.C. Enabling the peer-gateway feature automatically disables IP redirects on all interface VLANs mapped over a vPC VLAN to avoid generation of IP redirect

messages for packets switched through the peer gateway router.D. The vPC peer-gateway feature only works with HSRP protocol.

Correct Answer: BCSection: Cisco Data Center Infrastructure—Cisco NX- OSExplanation


QUESTION 8

Overlay Transport Virtualization (OTV) overlay interface is a logical multi access and multicast- capable interface that must be explicitly defined by the user andwhere the entire OTV configuration is applied.

Which statements are true about OTV overlay interface? (Choose two.)

A. When an OTV edge device receives a Layer 2 frame destined for a remote data center site, the frame is logically forwarded to the overlay interface.B. The OTV edge device performs the dynamic OTV encapsulation on the Layer 2 packet and sends it to the join interface toward the routed domain.C. When the OTV edge device receives a Layer 2 frame destined for a remote data center site, the frame is logically forwarded to the join interface.D. The OTV edge device performs the dynamic OTV encapsulation on the Layer 2 packet and sends it to the overlay interface toward the routed domain.



Every time the OTV edge device receives a Layer 2 frame destined for a remote data center site, the frame is logically forwarded to the Overlay interface. Thisinstructs the edge device to perform the dynamic OTV encapsulation on the Layer 2 packet and send it to the Join interface toward the routed domain.

References:

QUESTION 9

Overlay Transport Virtualization (OTV) join interface is used to source the OTV encapsulated traffic and send it to the Layer 3 domain of the data center network.Which statements are true about OTV join interface? (Choose three.)

A. Join interface is a Layer 3 entity, and with the Cisco NX-OS release 6.0, it can only be defined as a physical interface, physical subinterface, Layer 3 portchannel, or Layer 3 port channel subinterface.

B. A single join interface can be defined and associated with a given OTV overlay.C. Multiple overlays can also share the same join interface.D. Join interface can be a loopback interface.E. The join interface is a Layer 3 entity that can be defined as a physical interface but not as a logical one.

Correct Answer: ABCSection: Cisco Data Center Infrastructure—Cisco NX- OSExplanation


The Join interface is a Layer 3 entity and with the current NX-OS release can only be defined as a physical interface (or subinterface) or as a logical one (i.e. Layer3 port channel or Layer 3 port channel subinterface). A single Join interface can be defined and associated with a given OTV overlay. Multiple overlays can alsoshare the same Join interface.

References:

QUESTION 10Cisco NX-OS Software supports SNMPv1, SNMPv2c, and SNMPv3. Both SNMPv1 and SNMPv2c use a community-based form of security. SNMPv3 providessecure access to devices by a combination of authenticating and encrypting frames over the network. Which security features are provided in Cisco NX-OSSNMPv3? (Choose three.)

A. encryption--scrambles the packet contents to prevent them from being seen by unauthorized sourcesB. password--a password (community string) sent in clear text between a manager and agent for added protectionC. authentication--determines that the message is from a valid sourceD. message integrity--ensures that a packet has not been tampered with while it was in transitE. user--to determine if user authentication is used instead of community strings

Correct Answer: ACDSection: Cisco Data Center Infrastructure—Cisco NX- OSExplanation


SNMPv3 provides secure access to devices by a combination of authenticating and encrypting frames over the network. The security features provided in SNMPv3are the following:SNMPv3 provides for both security models and security levels. A security model is an authentication strategy that is set up for a user and the role in which the userresides. A security level is the permitted level of security within a security model. A combination of a security model and a security level determines which securitymechanism is employed when handling an SNMP packet.References:

QUESTION 11The hardware and software configurations for vPC+ are similar to that of traditional vPC. What are the differences in the configuration of vPC+? (Choose three.)

A. FabricPath switch ID must be configured under the vPC domain.B. Virtual switch ID of vPC+ must be configured under FabricPath domain.C. On Cisco Nexus 7000 Series Switch, F1 interfaces must be used as the vPC+ peer links.D. The vPC+ peer link must be configured as a Cisco FabricPath core port (switchport mode fabricpath).E. FabricPath subswitch ID must be configured under the vPC domain.



Explanation:

A vPC+ must still provide active-active Layer 2 paths for dual-homed CE switches or clouds, even though the FabricPath network allows only 1-to-1 mappingbetween the MAC address and the switch ID. vPC+ provides the solution by creating a unique virtual switch to the FabricPath network.

The FabricPath switch ID for the virtual switch becomes the outer source MAC address (OSA) in the FabricPath encapsulation header. Each vPC+ domain musthave its own virtual switch ID.

Layer 2 multipathing is achieved by emulating a single virtual switch. Packets forwarded from host A to host B are sent to the MAC address of the virtual switch asthe transit source, and traffic from host B to host A is now load balanced.

The vPC+ downstream links are FabricPath edge interfaces that connect to the CE hosts.

The First Hop Routing Protocols (FHRPs), which include the Hot Standby Routing Protocol (HSRP) and the Virtual Router Redundancy Protocol (VRRP),interoperate with a vPC+. You should dual- attach all Layer 3 switches to both vPC+ peer switches.References:

QUESTION 12: 23Smart Call Home provides an email-based notification for critical system policies. A range of message formats are available for compatibility with pager services,

standard email, or XML-based automated parsing applications. Destination profiles are used by Smart Call Home when sending notifications. Which of these arepredefined destination profiles supported by Cisco NX-OS Software? (Choose three.)

A. short-text-destinationB. prerecorded audio alertsC. CiscoTAC-1D. dial911E. full-text-destination

Correct Answer: ACESection: Cisco Data Center Infrastructure—Cisco NX- OSExplanation


Cisco UCS delivers Call Home messages in the following formats:The XML format enables communication with the Cisco Systems Technical Assistance Center.

References:

QUESTION 13Which two are benefits of using remote AAA services for Cisco Nexus products? (Choose two.)

A. They make it easier to manage user logins and passwords across devices.B. They enable automated configuration backup for devices.C. They centrally manage user attributes and permissions.D. Local console access is never included in AAA and can be used for access when the AAA servers are down.

Correct Answer: ACSection: Cisco Data Center Infrastructure—Cisco NX- OSExplanation


Remote AAA services provided through RADIUS and TACACS+ protocols have the following advantages over local AAA services:

References:

QUESTION 14What does the mac packet-classify command do when applied to an interface configuration?

A. It enables MAC ACLs to be applied to only IP packets that enter the interface.B. It enables MAC ACLs to be applied to only non-IP packets that enter the interface.C. It enables MAC ACLs to be applied to all packets that enter the interface.D. It enables MAC ACLs to be used for QoS settings.



To enable VLAN-based quality of service (QoS) filtering in the MAC access control lists (ACLs), use the mac packet-classify use vlan command in globalconfiguration mode. To return to the default settings, use the no form of this command.

References:

QUESTION 15On Cisco Nexus 7000 Series Switch Cisco FabricPath domain, one switch becomes the root for the multidestination tree. Cisco FabricPath IS-IS will automaticallyselect root switches for each multidestination tree. One of the parameters used to select the root is system ID. Which statements are true about system ID?(Choose two.)

A. System ID is a unique 12-bit SID.B. System ID is a 48-bit value composed of the VDC MAC address.C. Higher system ID is preferred.D. Lower system ID is preferred.



Within the FabricPath domain, one switch becomes the root for the first multidestination tree in the topology ("Tree 1"). FabricPath switches compare threeparameters in order to elect the root for Tree 1 in each topology, with higher values being better in all cases. The parameters, in order of preference, are:

Once a switch becomes the root for Tree 1 in a toplogy, it selects a root for each additional multidestination tree in the topology (based on the above parameters)and assigns each multidestination tree a unique FTAG value.

References:

QUESTION 16After configuring FabricPath, the following appears in the syslog:

%STP-2-L2GW_BACKBONE_BLOCK: L2 Gateway Backbone port inconsistency blocking port port- channel100 on VLAN0010.What is the cause of this message?

A. STP must be disabled; message indicates that STP is enabled.B. STP is misconfigured; root guard must be disabled.C. An inferior BPDU is received on a Cisco FabricPath edge port.D. A superior BPDU is received on a Cisco FabricPath edge port.

Correct Answer: DSection: Cisco Data Center Infrastructure—Cisco NX- OSExplanation

Explanation/Reference:Explanation:The devices that are in both the FabricPath domain and CE domain are considered to be edge devices or gateway devices. Edge ports have a FabricPath rootguard-like function enabled implicitly. If a superior BPDU is received on an edge port, the port is placed in the Layer 2 Gateway inconsistent state until the conditionis cleared.%STP-2-L2GW_BACKBONE_BLOCK: L2 Gateway Backbone port inconsistency blocking port port- channel100 on VLAN0010.

As a best practice, you should configure all edge devices with the lowest STP priority of all devices in the STP domain to which they are attached. By setting all ofthe edge devices to be the root bridge, the entire FabricPath domain looks like one virtual bridge to the CE domain. The same recommendation applies to a virtualport channel+ (vPC+) domain; you must configure each device (primary and secondary) as the root.You configure all FabricPath edge devices by manually setting the bridge priority lower than any STP bridge or by entering these commands.Sw7-vpc(config)# spanning-tree vlan <x> root primarysw7-vpc(config)# spanning-tree vlan 1-50 root primary

To have a loop-free topology for the CE/FabricPath hybrid network, the FabricPath network automatically displays as a single bridge to all connected CE devices.The STP domains do not cross into the FabricPath network. If multiple STP domains are defined, BPDUs and topology change notifications (TCNs) are localized tothe domain. If a connected STP domain is multihomed to the FabricPath domain, a TCN must be able to reach to all devices in the STP domain through theFabricPath domain. As a result, the TCN is sent to the FabricPath domain through the IS-IS protocol data unit (PDU) by default.

References:

QUESTION 17On the Cisco Nexus 7000 Series Switch, Control Plane Policing is enforced on which component?

A. The supervisor module enforces CoPP before out-of-policy traffic reaches the CPUB. The fabric modules enforce CoPP in the fabric before out-of-policy traffic reaches the CPUC. The linecards enforce CoPP locally before out-of-policy traffic reaches the CPUD. The egress virtual output queue enforces CoPP locally before out-of-policy traffic reaches the CPU



Only the traffic sent through the Inband interface is subject to CoPP, because this is the only traffic that reaches the Supervisor module through the forwardingengines (Fes) on the line cards. The Nexus 7000 Series Switch implementation of CoPP is hardware-based only, which means that CoPP is not performed insoftware by the Supervisor module. CoPP functionality (policing) is implemented on each FE independently. When the various rates are configured for CoPP policy-map, consideration must be taken in regard to the number of line cards in the system. The total traffic received by the Supervisor is N times X, where N is thenumber of Fes on the Nexus 7000 system, and X is the rate allowed for the particular class. The configured policer values apply on a per FE basis, and theaggregate traffic prone to hit the CPU is the sum of the conformed and transmitted traffic on all of the Fes. In other words, traffic that hits the CPU equals theconfigured conform rate multiplied by the number of Fes.CoPP configuration is only implemented in the default virtual device context (VDC); however, the CoPP policies are applicable for all VDCs. The same global policyis applied for all line cards. CoPP applies resource sharing between VDCs if ports of the same Fes belong to different VDCs (M1 Series or M2 Series LC). Forexample, ports of one FE, even in different VDCs, count against the same threshold for CoPP.If the same FE is shared between different VDCs and a given class of control plane traffic exceeds the threshold, this affects all VDCs on the same FE. It isrecommended to dedicate one FE per VDC in order to isolate CoPP enforcement, if possible.References:

QUESTION 182012 Feb 23 23:00:08.676710 pim: [16132] (default-base) Received unauthenticated hello-message from 10.1.1.2 on Ethernet1/18, message discarded2012 Feb 23 23:00:12.528763 pim: [16132] (default-base) Send Hello with AH on Ethernet1/18 from 10.1.1.1, holdtimE. 105 secs, dr-priority: 1You are troubleshooting a PIM neighbor adjacency that is not coming up. You issued the command show ip pim neighbor e1/18 and confirmed there is no PIMneighbor on the interface.

What is the problem based on the debug output?

A. The peer router 10.1.1.2 has PIM disabled on its interface connecting to Ethernet1/18.B. The peer router 10.1.1.2 has the wrong PIM password configured on its interface connecting to Ethernet1/18.C. The local router 10.1.1.1 has the wrong PIM password configured on Ethernet1/18.

D. The peer router 10.1.1.2 does not have PIM hello authentication enabled on its interface connecting to Ethernet1/18.E. The local router 10.1.1.1 does not have PIM hello authentication enabled for Ethernet1/18.



This command enables PIM feature on Nexus 7000.Feature pimThis command configures Static PIM RP for specific multicast group ranges.Ip pim rp-address 10.1.255.101 group-list 239.1.0.0/16ip pim rp-address 10.1.255.101 group-list 239.5.0.0/16ip pim rp-address 10.1.255.101 group-list 239.7.0.0/16ip pim rp-address 10.1.255.101 group-list 239.100.0.0/16 PIM sparse mode is enabled on Global server VLANs.DR Priority decides the PIM designated router for a VLAN. The priority is alternating between even andodd VLANs so each AGG will be the DR for half of the VLANs.PIM hello timer is 5000msec on the global SVIs.Ip pim ssm range noneip pim pre-build-sptinterface Vlan201ip pim sparse-modeip pim dr-priority 2ip pim hello-interval 5000interface Vlan202ip pim sparse-modeip pim hello-interval 5000

interface Vlan815ip pim sparse-modeip pim dr-priority 2ip pim hello-interval 5000interface Vlan816ip pim sparse-modeip pim hello-interval 5000

The Layer 3 port channels are configured with default hello timer.

Interface Vlan1001ip pim sparse-mode

ip pim hello-interval 5000interface port-channel101ip pim sparse-modeinterface port-channel102ip pim sparse-modeReferences:

QUESTION 19What is the benefit of using Anycast RP via RFC 4610 for IP multicast RP redundancy?

A. Improves convergence of the multicast network due to enhanced RPF checksB. Simplifies the number of control plane protocols over other RP redundancy methodsC. Eliminates the use of Protocol Independent Multicast (PIM) in the topologyD. Increases the administrative distances in Multicast Source Discovery Protocol (MSDP) configuration

Correct Answer: BSection: Cisco Data Center Infrastructure—Cisco NX- OSExplanation


Anycast-RP has two implementations: one uses Multicast Source Discovery Protocol (MSDP) and the other is based on RFC 4610, Anycast-RP Using ProtocolIndependent Multicast (PIM). This section describes how to configure PIM Anycast-RP.

You can use PIM Anycast-RP to assign a group of routers, called the Anycast-RP set, to a single RP address that is configured on multiple routers. The set ofrouters that you configure as Anycast-RPs is called the Anycast-RP set. This method is the only RP method that supports more than one RP per multicast group,which allows you to load balance across all RPs in the set. The Anycast RP supports all multicast groups.

PIM register messages are sent to the closest RP and PIM join-prune messages are sent in the direction of the closest RP as determined by the unicast routingprotocols. If one of the RPs goes down, unicast routing ensures these message will be sent in the direction of the next-closest RP. You must 33thernet33 PIM onthe loopback interface that is used for the PIM Anycast RP.References:

QUESTION 20Which statement best describes ACL configuration using configuration session mode on Cisco Nexus switches?

A. The verify command will validate commands entered for syntax errors.B. The save command will save the commands entered to the startup configuration.C. The network administrator can perform a dry-run ACL configuration by verifying the configuration against the hardware and software resources available before

applying it.D. Configuration sessions can be saved and resumed at any time, even after upgrading NX-OS Software on the switch with ISSU.E. Configuration sessions are global for all VDCs on the Nexus 7000.



To configure the Dry Run support, perform this task:

CommandPurposeStep 1Router(config)# configure session session_nameCreates a configuration session and enters the dry run mode Step 2Router(dry-run-config)# {default | exit | ip | no | validate} Choose the option to configure the dry run sessionStep 3Router(dry-run-config)# ip access-list {extended | standard} acl_name Choose the type of ACL

References:

QUESTION 21Overlay Transport Virtualization (OTV) uses the Authoritative Edge Device (AED) to perform which tasks?

A. The AED is responsible for sending all unicast traffic in a site, while either node in a site can transmit multicast and broadcast.B. The AED is responsible for load balancing all traffic for all VLANs across the transport network.C. The AED is responsible for handling all unicast, broadcast, and multicast traffic for a given VLAN within a site.D. The AED is responsible for MAC address dispute contention for a given VLAN.



The OTV control plane uses IS-IS Link State Packets (LSPs) to propagate MAC address to IP address mappings to all edge devices in the overly network. These

address mappings contain the MAC address, VLAN ID, and associated IP address of the edge device that the MAC address is reachable from.

The authoritative edge device uses IGMP snooping to learn all multicast MAC addresses in the local site. OTV includes these MAC addresses in a special group-membership LSP (GM-LSP) that is sent to remote edge devices on the overlay network.References:

QUESTION 22Which three statements describe user authentication in Cisco DCNM-LAN? (Choose three.)

A. Cisco DCNM-LAN server users are local to the Cisco DCNM-LAN server. Creating, changing, and removing Cisco DCNM-LAN server users has no effect onuser accounts on managed devices.

B. A Cisco DCNM-LAN server user that has Administrator privileges can push out changes to managed devices even if the Cisco NX-OS role that is used on thediscovered device has the network operator role.

C. Cisco DCNM-LAN user roles restrict the ability of users to make changes to Cisco DCNM-LAN server settings. Cisco NX-OS user roles enforce read/writeprivileges on the discovered devices.

D. Cisco DCNM-LAN allows you to configure unique credentials for each discovered device or use default credentials when you do not configure unique credentialsfor a device.

E. Cisco DCNM-LAN can use AAA servers to authenticate users. Only TACACS servers are supported.



DCNM-LAN implements user-based access to allow you to control who can access a DCNM-LAN server by using the DCNM-LAN client. User access is secured bya password. DCNM-LAN supports strong passwords.

When you ensure that each person who accesses DCNM-LAN has a unique user account, user-based access allows you to determine what actions are taken byeach user. In addition, DCNM-LAN allows you to assign a role to each user. Roles determine what actions a user can take in the DCNM-LAN client.

References:

QUESTION 23Which three statements describe the configuration change management feature in DCNM LAN? (Choose three.)

A. Switch profiles allow configurations to be synchronized between switches and are supported with any Cisco NX-OS Software managed device.B. DCNM LAN can archive configurations from devices even if they are not managed by the DCNM server, and the administrator can supply the device

management IP address and credentials.C. You can archive a maximum of 50 configuration versions per managed device.D. Managed devices must be licensed in DCNM LAN before they can be used with configuration change management.E. Device-running configuration will be archived only if it differs from the last archived version.

Correct Answer: CDESection: Cisco Data Center Infrastructure—Cisco NX- OSExplanation


Configuration Change Management has the following configuration guidelines and limitations:· You can archive a maximum of 50 configuration versions per managed device.

· Configure archival jobs and archival settings based upon the needs of your organization.

· We recommend enabling the Default archival job and configuring the job to run at the lowest

frequency that your backup policy tolerates.

References:

QUESTION 24Which statement describes SNMP functionality in Cisco NX-OS Software?

A. NX-OS Software supports one instance of SNMP globally for all VDCs; however, MIB counters are collected and reported individually per VDC.B. SNMP must be enabled with the feature snmp command before any SNMP configuration is possible.C. SNMP is always enabled by default in NX-OS Software and cannot be disabled.D. NX-OS Software supports 3DES and AES for SNMPv3 message encryption.E. SNMP always uses the default VRF on the Cisco Nexus 7000 Series Switches.



Layer 3 interfaces support Virtual Routing and Forwarding instances (VRFs). VRFs exist within virtual device contexts (VDCs). By default, Cisco NX-OS places youin the default VDC and default VRF unless you specifically configure another VDC and VRF. A Layer 3 logical interface (VLAN interface, loopback) configured inone VDC is isolated from a Layer 3 logical interface with the same number configured in another VDC. For examplI, loopback 0 in VDC 1 is independent ofloopback 0 in VDC 2 References:

QUESTION 25Which statement describes the XML management interface in Cisco NX-OS Software?

A. The following XML-based NETCONF operations are supported in NX-OS SoftwarE. Close- session, copy-config, delete-config, and edit-config.B. The following XML-based NETCONF operations are supported in NX-OS SoftwarE. Close-session, copy-config, edit-config, and kill-session.C. NX-OS Software supports up to a maximum of 16 concurrent XML sessions.D. Only show commands are supported via the XML management interface in NX-OS Software.E. The NX-OS implementation of the XML-based NETCONF requires SSH to be used for communication with the device.

Correct Answer: ESection: Cisco Data Center Infrastructure—Cisco NX- OS

Explanation


QUESTION 26Cisco FabricPath uses what as a common bridge ID to connected Spanning Tree Protocol bridges?

A. C84C.75FA.6000B. 0100.5E11.02FDC. C84C.76FA.6000D. 4000.0000.0001

Correct Answer: ASection: Cisco Data Center Infrastructure—Cisco NX- OSExplanation


Layer 2 Gateway Spanning Tree Protocol (L2G-STP) builds a loop-free tree topology. However, it has some limitations. One limitation is that the STP root mustalways (virtually) be in the FabricPath cloud. For example, it is not possible to have two FabricPath networks connected through a CE cloud. A bridge ID for STPconsists of a MAC address and bridge priority. When running in FabricPath mode, the system automatically assigns the edge devices with the MAC addressc84c.75fa.6000 from a pool of reserved MAC addresses. As a result, each device has the same MAC address used for the Bridge ID.References:

QUESTION 27How are IP multicast IGMP entries synchronized between vPC peers?

A. IGMP is not synchronized between vPC peersB. Cisco Fabric Service carries IGMP entries across the vPC peer linkC. IP ARP synchronization under the vPC domain configuration also synchronizes IGMPD. IGMP is flooded to the L2 domain, and there is no need to synchronize it between vPC peers



The IGMP vPC Incremental Sync feature sends incremental updates to the peer link using Cisco Fabric Service (CFS), instead of sending all Join and Leavemessages. The routes between peers are synced while the peer link is being set up.

References:

QUESTION 28Nexus# 42ther igmp snooping vlan 120IGMP Snooping information for vlan 120IGMP snooping disabledOptimised Multicast Flood (OMF) disabledIGMP querier noneSwitch-querier enabled, address 1.1.1.1, currently not running IGMPv3 Explicit tracking enabledIGMPv2 Fast leave disabledIGMPv1/v2 Report suppression enabledIGMPv3 Report suppression disabledLink Local Groups suppression enabledRouter port detection using PIM Hellos, IGMP QueriesNumber of router-ports: 0Number of groups: 0Active ports:Po100 Po111

Which statement best describes what is depicted in the show command output?

A. IGMP snooping is not active for VLAN 120 because the IGMP feature has not been enabled on the switch with the feature igmp command.B. The IGMP snooping querier for VLAN 120 is not in a running state because the Loopback interface configured with 1.1.1.1/32 is currently in a down state.

C. IGMP snooping has been disabled on the VLAN 120 SVI.D. IGMP snooping has been disabled for VLAN 120 in VLAN configuration mode.E. IGMP snooping is not active for VLAN 120 because VLAN 120 does not exist in the VLAN database.



If IGMP snooping is enabled on one device but not on the other, the device on which snooping is disabled floods all multicast trafficReferences:

QUESTION 29Assuming the local peer is 10.0.0.1 and the remote peer (configuration not shown) is 10.0.0.2, which of these is used to configure PIM Anycast-RP on a Nexus7000 switch?

!interface loopback1ip address 10.0.0.1/32ip router ospf 10 area 0.0.0.0ip pim sparse-mode!interface loopback2ip address 2.2.2.2/32ip router ospf 10 area 0.0.0.0ip pim sparse-mode!ip pim anycast-rp 2.2.2.2 10.0.0.1ip pim anycast-rp 2.2.2.2 10.0.0.2ip pim rp-address 2.2.2.2 group-list 224.0.0.0/4

A. feature pim!interface loopback1ip address 10.0.0.1/32ip router ospf 10 area 0.0.0.0ip pim sparse-mode!interface loopback2

ip address 2.2.2.2/32ip router ospf 10 area 0.0.0.0ip pim sparse-mode!ip pim anycast-rp 10.0.0.1 2.2.2.2ip pim anycast-rp 10.0.0.2 2.2.2.2ip pim rp-address 2.2.2.2 group-list 224.0.0.0/4

B. interface loopback1ip address 10.0.0.1/32ip router ospf 10 area 0.0.0.0ip pim sparse-mode!interface loopback2ip address 2.2.2.2/32ip router ospf 10 area 0.0.0.0ip pim sparse-mode!ip pim anycast-rp 2.2.2.2 10.0.0.1ip pim anycast-rp 2.2.2.2 10.0.0.2ip pim rp-address 2.2.2.2 group-list 224.0.0.0/4

C. feature pimfeature msdp!interface loopback1ip address 10.0.0.1/32ip router ospf 10 area 0.0.0.0ip pim sparse-mode!interface loopback2ip address 2.2.2.2/32ip router ospf 10 area 0.0.0.0ip pim sparse-mode!ip msdp originator-id loopback1ip msdp peer 10.0.0.2 connect-source loopback1ip msdp description 10.0.0.2 To 7010-2ip msdp password 10.0.0.2 mypassword!ip pim rp-address 2.2.2.2 group-list 224.0.0.0/4

D.



Now you need to define something called the RP set. This is the set of all the routers which would act as RP. You need to have a loopback on each prospective RProuter, which is different than the loopback that is being used as the RP addressReferences:

QUESTION 30When using Overlay Transport Virtualization (OTV), how do L2 multicast frames traverse the overlay?

A. The L2 multicast frames are encapsulated in an OTV packet using the configured control-group multicast address for transportB. The L2 multicast frames are dropped because multicast cannot be carried across the overlayC. The L2 multicast frames are encapsulated in an OTV packet using the configured data-group multicast address for transportD. The L2 multicast frames are forwarded natively across the overlay based on their multicast IDs



The OTV internal interfaces carry the VLANs to be extended and the OTV site VLAN (used within the data center to provide multihoming). They behave as regularLayer 2 switch port trunk interfaces; in fact, they send, receive, and process the Spanning Tree Protocol BPDUs as they would on a regular LAN bridge device.

The overlay interfaces encapsulate Layer 2 frames in IP unicast or multicast packets and are logical 46thernet46ess, multicast-capable interfaces.

The join interfaces are point-to-point routed interfaces that are used by the OTV edge devices to join the overlay network. Currently, the OTV implementation usesthe IP address of the physical join interface to advertise reachability of MAC-addresses present in the site. In a future release, the plan is to use the loopbackaddress for this purpose.

The same OTV VDCs can be used by multiple VDCs deployed at the aggregation tier, as well as by other Layer 2 switches connected to the OTV VDCs. This isdone by configuring multiple OTV overlays. It's important to note that the extended VLANs within these multiple overlays should not overlap.References:

QUESTION 31Which three statements best describe multicast operation on Cisco Nexus switches in a data center? (Choose three.)

A. Cisco NX-OS Software does not support PIM dense mode.B. The command ip multicast-routing must be enabled in Cisco NX-OS Software before any multicast configuration is possible on the switch.C. PIM CLI configuration and verification commands are not available until you enable the PIM feature with the feature pim command.D. Cisco NX-OS Software supports multicast routing per Layer 3 VRF instance.E. The default PIM operational mode on the Cisco Nexus 7000 switch is SSM.



PIM version 2 Sparse Mode is supported. Cisco NX-OS does not support PIM version 1 Sparse Mode or Dense Mode. The NX-OS cannot fallback to Dense Modeoperation. PIM command-line interface (CLI) configuration and verification commands are not available until you enable the PIM feature with the feature pimcommand.References:

QUESTION 32On a Cisco Nexus 7000 Series Switch, what is the purpose of this command?

Switch# config terminalswitch(config)# mac address-table learning-mode conversational vlan 1-10 switch(config)#

A. Enable conversational learning on FabricPath vlans 1-10 for F-Series moduleB. Enable FabricPath protocol on VLANs 110C. No need for this command as conversational learning is enabled by default for all VLANs.D. Enable conversational learning on Classical Ethernet VLAN for F-Series module



switch(config)# mac address-table learning-mode conversational vlan vlan-id configures the specified CE VLAN(s) on F Series modules for conversational MAClearning. Enter the no form of the command to return to traditional (or nonconversational learning) MAC learning mode. The default MAC learning mode for CE

VLANs is traditional.References:

QUESTION 33Where is a typical request in the Cisco UCS XML API placed in the data management engine, and, after the request is confirmed, what is updated?

A. The request is placed in the transactor queue in FIFO order and the management information tree is updated.B. The request is placed in the replicator and persistifier and the store is updated.C. The request is placed in the data management engine and the application gateway is updated.D. The request is placed in the buffer queue and the commit buffer queue is updated.


Explanation/Reference:Explanation:A typical request comes into the data management engine (DME) and is placed in the transactor queue in FIFO order. The transactor gets the request from thequeue, interprets the request, and performs an authorization check. After the request is confirmed, the transactor updates the management information tree. Thisoperation is done in a single transaction.References:

QUESTION 34In the Cisco FabricPath domain, one switch becomes the root for the multidestination tree. Cisco FabricPath switches compares which three parameters to selectthe root? (Choose three.)

A. Root priorityB. System IDC. Bridge IDD. Switch IDE. Port IDF. Subswitch ID

Correct Answer: ABDSection: Cisco Data Center Infrastructure—Cisco NX- OSExplanation


Within the FabricPath domain, one switch becomes the root for the first multidestination tree in the topology ("Tree 1"). FabricPath switches compare threeparameters in order to elect the root for Tree 1 in each topology, with higher values being better in all cases. The parameters, in order of preference, are:References:

QUESTION 35By default, what type of SSH server key is generated by Cisco NX-OS Software?

A. DSA key generated with 512 bitsB. RSA key generated with 768 bitsC. RSA key generated with 1024 bitsD. DSA key generated with 1024 bitsE. RSA key generated with 2048 bits



You can generate an SSH server key based on your security requirements. The default SSH server key is an RSA key generated using 1024 bits. To generate SSHserver keys, perform this task:

CommandPurposeStep 1switch# configure terminalEnters configuration mode.Step 2switch(config)# ssh key {dsa[force] | rsa [bits [force]]} Generates the SSH server key.The bits argument is the number of bits used to generate the key. The range is 768 to 2048 and the default value is 1024.Use the force keyword to replace an existing key.Step 3switch(config)# exitExits global configuration mode.Step 4switch# show ssh key(Optional) Displays the SSH server keys.Step 5switch# copy running-config startup-config

(Optional) Copies the running configuration to the startup configuration.References:

QUESTION 36Refer to the exhibit.

Which statements are true about the subswitch ID that is filled in the header? (Choose three.)

A. FabricPath switches running vPC use this field to identify the specific virtual switch.B. FabricPath switches running vPC+ use this field to identify the specific vPC+ PortChannel on which traffic is to be forwarded.C. The subswitch ID field is locally significant to each vPC+ switch pair.D. The subswitch ID field must be unique within the FabricPath domain.E. In the absence of vPC+, this field is set to 0.

Correct Answer: BCESection: Cisco Data Center Infrastructure—Cisco NX- OSExplanation


In releases prior to NX-OS 6.1(2), the sub-switch ID (sSID) field identifies the source or destination VPC+ port-channel interface associated with a particular VPC+switch pair. FabricPath switches running VPC+ use this field to identify the specific VPC+ port-channel on which traffic is to be forwarded. The sSID value is locallysignificant to each VPC+ switch pair. Note that, because this field is 8 bits, using the sSID to identify VPC+ port-channels imposes a limit of roughly 250 VPC+ port-channels per VPC+ switch pair (244 to be precise).References:

QUESTION 37In a Cisco Nexus 7000 platform configured with GLBP, which GLBP timer can be tuned to prevent unnecessary GLBP state changes during a switchover or ISSU?

A. GLBP redirect timerB. GLBP forwarder pre-empt delay minimum timerC. GLBP hold timerD. GLBP pre-empt delay minimum timerE. GLBP extended hold timerF. GLBP nonstop forwarding timer



GLBP supports high availability through stateful restarts and stateful switchovers. A stateful restart occurs when the GLBP process fails and is restarted. A statefulswitchover occurs when the active supervisor switches to the standby supervisor. Cisco NX-OS applies the run-time configuration after the switchover.

If GLBP hold timers are configured for short time periods, these timers might expire during a controlled switchover or in-service software upgrade (ISSU). GLBPsupports extended non-stop forwarding (NSF) to temporarily extend these GLBP hold timers during a controlled switchover or ISSU.

With extended NSF configured, GLBP sends hello messages with the extended timers. GLBP peers update their hold timers with these new values. The extendedtimers prevent unnecessary GLBP state changes during the switchover or ISSU. After the switchover or ISSU event, GLBP restores the hold timers to their originalconfigured values. If the switchover fails, GLBP restores the hold timers after the extended hold timer values expire.References:


vPC+ is configured between which switches?

A. Switch-ID 13 and Switch-ID 23B. Switch-ID 11 and Switch-ID 12C. Switch-ID 100 onlyD. Switch-ID 13 and Switch-ID 100



FabricPath implements a resource-allocation protocol called DRAP that automatically provisions key parts of the FabricPath namespace, specifically Switch IDs andFTAGs.

When a FabricPath switch brings up its FabricPath interfaces, the system forms an IS-IS adjacency to the connected FabricPath switch and the switches begin anegotiation process that ensures that all FabricPath switches have a unique Switch ID, and that the type and number of FTAG values in use are consistent. Whilethis negotiation occurs, the FabricPath interfaces are brought up but the interfaces are not added to the FabricPath topology and no data-plane traffic is passed on

the interfaces.

Every switch must have a unique Switch ID in order to participate in the FabricPath domain. A new switch initially selects a random Switch ID and checks to see ifthat value is already in use. If a conflict is detected, DRAP allocates a different value until no conflict exists. While the FabricPath network automatically ensureseach switch has a unique Switch ID, a configuration command is provided for the network administrator to statically assign a Switch ID to a FabricPath switch. If youchoose to manually configure Switch IDs, be certain that each switch has a unique value any switch with a conflicting ID will suspend data-plane forwarding onFabricPath interfaces as long as a conflict exists.References:

QUESTION 39SNMPv3 authorizes management operations only by configured users and encrypts SNMP messages. Which authentication protocols does Cisco NX-OS Softwareuse for SNMPv3? (Choose two.)

A. NMAC-SHA-96 authentication protocolB. HMAC-MD5-96 authentication protocolC. Community String Match protocolD. NMAC-MD5-96 authentication protocolE. HMAC-SHA-96 authentication protocol

Correct Answer: BESection: Cisco Data Center Infrastructure—Cisco NX- OSExplanation


Cisco NX-OS uses two authentication protocols for SNMPv3:Cisco NX-OS uses Advanced Encryption Standard (AES) as one of the privacy protocols for SNMPv3 message encryption and conforms with RFC 3826.References:

QUESTION 40Overlay Transport Virtualization (OTV) provides an overlay that enables Layer 2 connectivity between separate Layer 2 domains, while keeping these domainsindependent and preserving the fault isolation, resiliency, and load-balancing benefits of an IP-based interconnection. Which statements are true about OTVAdjacency Server? (Choose two.)

A. Adjacency Server is required when OTV is deployed with unicast-only transport.B. Adjacency Server is required when OTV is deployed with multicast-enabled transport.C. Each OTV device wishing to join a specific OTV logical overlay needs to first register with the Adjacency Server.D. Each OTV device trying to join a specific OTV logical overlay needs to be configured as an Adjacency Server.


Explanation/Reference:Explanation:Starting with NX-OS 5.2(1) release, OTV can be deployed with unicast-only transport. As previously described, a multicast enabled transport infrastructure lets asingle OTV update or Hello packet reach all other OTV devices by virtue of leveraging a specific multicast control group address.

The OTV control plane over a unicast-only transport works exactly the same way as OTV with multicast mode. The only difference is that each OTV devices wouldneed to create multiple copies of each control plane packet and unicast them to each remote OTV device part of the same logical overlay. Because of this head-endreplication behavior, leveraging a multicast enabled transport remains the recommended way of deploying OTV in cases where several DC sites are involved. At thesame time, the operational simplification brought by the unicast-only model (removing the need for multicast deployment) can make this deployment option veryappealing in scenarios where LAN extension connectivity is required only between few (2-3) DC sites.

To be able to communicate with all the remote OTV devices, each OTV node needs to know a list of neighbors to replicate the control packets to. Rather thanstatically configuring in each OTV node the list of all neighbors, a simple dynamic means is used to provide this information. This is achieved by designating one (ormore) OTV Edge device to perform a specific role, named Adjacency Server. Every OTV device wishing to join a specific OTV logical overlay, needs to first"register" with the Adjacency Server (by start sending OTV Hello messages to it). All other OTV neighbor addresses are discovered dynamically through theAdjacency Server. Thereby, when the OTV service needs to be extended to a new DC site, only the OTV edge devices for the new site need to be configured withthe Adjacency Server addresses. No other sites need additional configuration.References:

QUESTION 41Which two statements about VACLs on Cisco Nexus 7000 Series Switches are true? (Choose two.)

A. A single VACL can be shared across two or more VDCs.B. Use of VACLs requires no special license to be installed.C. VACLs make use of IP or MAC ACLs.D. Only options drop and forward are permitted.



VACLs use access maps to link an IP ACL or a MAC ACL to an action. The device takes the configured action on packets permitted by the VACL.References:

QUESTION 42Which two statements about a "Virtual PortChannel graceful consistent check" are true?

A. Graceful consistency check is enabled by default.B. When graceful consistency check is enabled, only the links on the secondary peer device are suspended.C. Graceful consistency check is disabled by default, so to enable this feature, use graceful consistencycheck command under VPC domain configuration mode.D. When graceful consistency check is enabled, only the inconsistent VLANs on the secondary peer device are suspended.



Beginning with Cisco NX-OS Release 5.0(2)N2(1) and later releases, when a Type 1 mismatch occurs, by default, the primary vPC links are not suspended.Instead, the vPC remains up on the primary switch and the Cisco Nexus 5000 Series switch performs Type 1 configurations without completely disrupting the trafficflow. The secondary switch brings down its vPC until the inconsistency is cleared.

However, in Cisco NX-OS Release 5.0(2)N2(1) and earlier releases, this feature is not enabled for dual-homed FEX ports. When Type-1 mismatches occur in thistopology, the VLANs are suspended on both switches. The traffic is disrupted on these ports for the duration of the inconsistency.

To minimize disruption, we recommend that you use the configuration synchronization feature for making configuration changes on these ports.

To enable a graceful consistency check, use the graceful consistency-check command. Use the no form of this command to disable the feature. The gracefulconsistency check feature is enabled by default.References:

QUESTION 43Which attribute is used to pass the user role back to the Nexus when remote AAA is enabled?

A. Cisco AV-pairB. TACACS+ or RADIUS ack frame role attributeC. DH-CHAP challenge attributeD. privilege level attribute



AAA authorization is the process of assembling a set of attributes that describe what the user is authorized to perform. Authorization in the Cisco NX-OS software isprovided by attributes that are downloaded from AAA servers. Remote security servers, such as RADIUS and TACACS+, authorize users for specific rights byassociating attribute-value (AV) pairs, which define those rights with the appropriate user.References:

QUESTION 44Each port that is configured to use LACP has an LACP port priority. Which statements are true about LACP port priority? (Choose three.)

A. Port priority value can be configured between 1 and 65535.B. A higher port priority value means a higher priority of LACP.C. Port priority can be configured so that specific links can be chosen as active links rather than the hot standby links within the port channel.D. LACP uses the port priority with the port number to form the port identifier.E. LACP Port priority default value should always be changed



LACP uses the following parameters:

References:

QUESTION 45Nexus7000# config tNexus700(config)# interface 56thernet 2/11Nexus700(config-if)# switchport mode private-vlan hostNexus700(config-if)# switchport private-vlan host-association 14 50 Nexus700(config-if)# exitNexus700(config)#

What will this command sequence achieve?

A. associate interface E2/11 to community VLANs 14 and 50B. associate interface E2/11 to secondary VLANs 14 and 50C. associate interface E2/11 to primary VLAN 50 and secondary VLAN 14

D. associate interface E2/11 to primary VLAN 14 and secondary VLAN 50


Explanation/Reference:Explanation:In private VLANs, host ports are part of the secondary VLANs, which are either community VLANs or isolated VLANs. Configuring a private VLAN host port involvestwo steps. First, you define the port as a private VLAN host port and then you configure a host association between the primary and secondary VLANs.

References:

QUESTION 46With Cisco NX-OS on a Cisco Nexus platform, which command shows memory usage, total processes, and CPU state?

A. show memory detailedB. show process cpu sortedC. show system resourcesD. show hardware capacity



You can use this command to display system-related CPU and memory statistics. Switch#show system resourcesLoad average: 1 minute: 0.36 5 minutes: 0.39 15minutes: 0.44Processes : 1068 total, 1 runningCPU states : 0.5% user, 5.5% kernel, 94.0% idleMemory usage: 8245436K total, 3289920K used, 4955516KfreeCurrent memory status: OKFieldDescriptionLoadNumber of processes that are running. The average reflects the system load over the past 1, 5, and 15 minutes.ProcessesNumber of processes in the system and how many processes are actually running when the command is issued.CPU statusCPU usage percentage in user mode, kernel mode, and idle time in the last one second. For a dual-core Supervisor, CPU is averaged across both cores.Memory usageTotal memory, used memory, free memory, memory used for buffers, and memory used for cache in kilobytes. Buffers and the cache are included in the used

memory statistics.

References:


During troubleshooting of Virtual PortChannel (vPC), it is observed that Virtual PortChannel 2 is in a down state. What's the cause of this issue?

A. Virtual PortChannel is down because LACP is not enabled on the remote switch.B. Virtual PortChannel is down because of a VLAN mismatch.C. Virtual PortChannel is down because of an MTU mismatch.D. Virtual PortChannel is down because of VLAN and MTU mismatch.



Virtual Port Channels are actually a big part of the Networkers presentation I have done for the last 2 years, so I am familiar with a lot of the issues people have withthem.

I have heard issues you raise discussed before, and we are working on making it better. I think some of the newer features would help your reader.

The consistency checker exists to keep bad things from happening on your vPC port-channel (like "unexplained" packet drops). There are two types of consistencycheck failures. The ones that will bring down the entire port-channel (these are type 1s) and the ones that will only cause an error, or keep a single or group ofVLANs from becoming active on the port-channel (type 2).

Decisions for what a type 1 and 2 are were made by the engineering team.

For example the MTU mismatch will bring your vPC port-channel down, and it does so in a non vPC port-channel as well. I am sure that you can see the types ofissues that having a link with a MTU of 9000 and one of 1500 can cause for a port-channel.References:

QUESTION 48What is the difference between the Ethanalyzer and the SPAN feature in Cisco NX-OS?

A. The Ethanalyzer captures control-plane traffic, while SPAN captures all traffic.

B. The Ethanalyzer captures all traffic including control-plane traffic, while SPAN captures only the control-plane traffic.C. The Ethanalyzer captures only data traffic, while SPAN captures all traffic.D. The Ethanalyzer captures only control traffic, while SPAN captures data traffic.



Ethanalyzer is a tool that collects frames that are destined to, or originate from, the Nexus 5000 control plane. Node to switch or switch to switch traffic can be seenwith this tool. SPAN is a feature whereby frames that are transient to the switch are copied to a second port for analysis. Node to switch or node to node traffic canbe seen via this method. The main difference between the Ethanalyzer and SPAN feature is that the Ethanalyzer captures control-plane traffic, while SPAN capturesall traffic.Of course for remote span (across layer3), we use ERSPAN.References:

QUESTION 49Virtual PortChannels (vPCs) allow links that are physically connected to two different Cisco switches to appear to a third downstream device as coming from asingle device and as part of a single port channel. Which of the following are components of a Virtual PortChannel system? (Choose four)

A. Two peer devices: the vPC peers of which one is primary and one is secondary and are part of a vPC domain.B. A Layer 3 Gigabit Ethernet link called peer-keepalive link to resolve dual-active scenariosC. A redundant 10 Gigabit Ethernet PortChannel called a peer link to carry traffic from one system to the other when neededD. vPC member ports forming the PortChannelE. A dot1q trunk between the vPC peersF. A management port that can be used as peer-keepalive link to resolve dual-active scenarios.

Correct Answer: ABCDSection: Cisco Data Center Infrastructure—Cisco NX- OSExplanation


To summarize, a vPC system consists of the following components:

References:

QUESTION 50Which statement about the Adapter FEX feature on the Cisco Nexus 5000 Series Switches is true?

A. Adapter FEX is a software feature that can be configured on any CNA as long as the Nexus 5000 is running a version of code that supports Adapter FEX.B. Adapter FEX can be thought of as a way to divide a single physical link into multiple virtual links or channels.C. Packets on each channel are tagged with an 801.Q header that has a specific source VIF.D. When using a dual-homed NIC on the server, active/standby is not supported. Only active/active is supported.



Adapter-FEX can be thought of as a way to divide a single physical link into multiple virtual links or channels. Each channel is identified by a unique channel numberand its scope is limited to the physical link.

The physical link connects a port on a server network adapter with an Ethernet port on the switch. This allows the channel to connect a vNIC on the server with aVethernet interface on the switch.

Packets on each channel are tagged with a VNTag that has a specific source virtual interface identifier (VIF). The VIF allows the receiver to identify the channel thatthe source used to transmit the packet.

References:

QUESTION 51Which statement describes the below output from an MDS switch?

Flow ID. 44Initiator VSAN: 200Initiator WWN: 50:06:04:8a: cc: 19:12: dbTarget VSAN: 200Target WWN: 50:06:04:8c: de: ad: be: efTarget LUN: ALL LUNsFlow Verification Status:Initiator Verification Status: successTarget Verification Status: WWN was not found in name server Initiator Linecard Status: successTarget Linecard Status: Status not yet checkedFeature Status:Write-Acceleration enabledWrite-Acceleration Buffers: 1024Configuration Status: flow verification failed

A. The zone containing both the initiator and target does not existB. The zone set has not been activatedC. The target is not logged into the fabricD. The pWWN used for the target is invalid



For SCSI flow statistics, the initiator must connect to an SSM on a Cisco MDS switch while the target can connect to any other switch in the fabric. The SCSI flowinitiator and target cannot connect to the same switch.

QUESTION 52Which mechanism do the CNA and the Cisco Nexus 5000 Series Switches use to provide a lossless class of Ethernet traffic?

A. LLDPB. LACPC. PFCD. FIP



The priority flow control (PFC) feature applies pause functionality to specific classes of traffic on the Ethernet link. For example, PFC can provide lossless servicefor the FcoE traffic and best-effort service for the standard Ethernet traffic. PFC can provide different levels of service to specific classes of Ethernet traffic (usingIEEE 802.1p traffic classes).References:

QUESTION 53On a Nexus 5000 Series Switch, when a VFC is not online, what are the causes? (Choose three.)

A. LLDP transmit and receive are disabledB. The initiator server has no connectivity to the target storageC. FIP negotiation timingD. Peer does not support LLDPE. VSAN trunk protocol has been enabled



switch# show lldp interface ethernet 1/4Interface Information:Enable (tx/rx63thernetY/Y/Y Port Mac address: 00:0d:ec:d5:a3:8b Peer's LLDP TLVs:Type Length Value---- ------ -----0'1 007 0400c0dd 145486002 007 0300c0dd 145486003 002 0078128 061 001b2102 020a0000 00000002 00000001 04110000 c0000001 00003232 00000000 00000206 060000c0 00080108 100000c0 00890600 1b21088914001b21 08000 000

If LLDP is disabled, the VFC will not come online. You can enable LLDP transmit and receive with the interface ethernet 1/4 command:switch(config)# interface eth64thernet4switch(config-if)# lldp ?receive Enab64thernetreception on interfacetransmit Enable LLDP transmission on interface

Example:switch# show lldp in64thernetethernet 1/4Interface Information:Enable (tx/rx/d64thernetY/Y Port Mac address: 00:0d:ec:d5:a3:8b Peer's LLDP TLVs:Type Length Value---- ------ -----0'1 007 0400c0dd 145486002 007 0300c0dd 145486003 002 0078128 061 001b2102 020a0000 00000002 00000001 04110000 c0000001 00003232 00000000 00000206 060000c0 00080108 100000c0 00890600 1b210889

14001b21 08

References:

QUESTION 54When configuring unified ports on a 5548 switch, which port ordering must be respected? (Choose two.)

A. Fibre Channel ports must be configured from the first port in the module.B. Ethernet ports must be configured from the last port in the module.C. Fibre Channel ports must be configured from the last port in the module.D. Ethernet ports must be configured from the first port in the module.

Correct Answer: CDSection: Cisco Data Center Infrastructure—Cisco NX- OSExplanation


You must configure Ethernet ports and FC ports in a specified order:If the order is not followed, the following errors are displayed:ERROR: Ethernet range starts from first port of the module ERROR: FC range should end on last port of the module

References:

QUESTION 55When configuring vPC-HM CDP with multiple links to the same switch, are port-channels required?

A. Each link between the upstream switch and the VEM is an individual subgroup.B. Connections that go to the same upstream switch must be configured with the command channel- group <number> mode active.C. Connections that go to the same upstream switch must be configured with the command channel- group <number> mode passive.D. With vPC-HM CDP, the user can pin traffic from a specific VM to a specific uplink.E. Connections that go to the same upstream switch must be configured with the command channel- group <number> mode on.



channel-groupchannel-number[mode {on |active |passive}] Configures the port in a channel group and sets the mode. The channel-number range is from 1 to 4096.The port channel associated with this channel group is automatically created if the port channel does not already exist. All static port channel interfaces are set tomode on.

References:

QUESTION 56Cisco IOS NetFlow gathers data that can be used in which three of these? (Choose three.)

A. accountingB. authenticationC. authorization

D. network monitoringE. network planning

Correct Answer: ADESection: Cisco Data Center Infrastructure—Cisco NX- OSExplanation


NetFlow captures a rich set of traffic statistics. These traffic statistics include user, protocol, port, and type of service (ToS) information that can be used for a widevariety of purposes such as network application and user monitoring, network analysis and planning, security analysis, accounting and billing, traffic engineering,and NetFlow data warehousing and data mining.

Network Application and User MonitoringNetFlow data enables you to view detailed, time- and application-based usage of a network. This information allows you to plan and allocate network and applicationresources, and provides for extensive near real-time network monitoring capabilities. It can be used to display traffic patterns and application-based views. NetFlowprovides proactive problem detection and efficient troubleshooting, and it facilitates rapid problem resolution. You can use NetFlow information to efficiently allocatenetwork resources and to detect and resolve potential security and policy violations.

Network PlanningNetFlow can capture data over a long period of time, which enables you to track and anticipate network growth and plan upgrades. NetFlow service data can beused to optimize network planning, which includes peering, backbone upgrade planning, and routing policy planning. It also enables you to minimize the total cost ofnetwork operations while maximizing network performance, capacity, and reliability. NetFlow detects unwanted WAN traffic, validates bandwidth and quality ofservice (QoS) usage, and enables the analysis of new network applications. NetFlow offers valuable information that you can use to reduce the cost of operating thenetwork.

Denial of Service and Security AnalysisYou can use NetFlow data to identify and classify denial of service (DoS) attacks, viruses, and worms in real-time. Changes in network behavior indicate anomaliesthat are clearly reflected in NetFlow data. The data is also a valuable forensic tool that you can use to understand and replay the history of security incidents.

Accounting and BillingNetFlow data provides fine-grained metering for highly flexible and detailed resource utilization accounting. For example, flow data includes details such as IPaddresses, packet and byte counts, timestamps, type-of-service, and application ports. Service providers might utilize the information for billing based on time-of-day, bandwidth usage, application usage, or quality of service. Enterprise customers might utilize the information for departmental chargeback or cost allocation forresource utilization.References:

QUESTION 57A customer would like to monitor traffic that is being sent to a specific virtual machine named VM001 using SPAN. The customer has another virtual machineconfigured as a sniffer host called VM002. What configuration is required, and what other changes will need to be made? (Choose two.)

VSM-PRI-188# 67thern vethernet 5Vethernet5 is upPort description is VM001, Network Adapter 2HardwarE. Virtual, address: 0050.56b0.001e (bia 0050.56b0.001e) Owner is VM "VM001", adapter is Network Adapter 2Active on module 5Vmware DVS port 484Port-Profile is VM-vlan-10Port mode is access

VSM-PRI-188# 68thern vethernet 6Vethernet6 is upPort description is VM002, Network Adapter 1HardwarE. Virtual, address: 0050.56b0.0020 (bia 0050.56b0.0020) Owner is VM "VM002", adapter is Network Adapter 1Active on module 5Vmware DVS port 485Port-Profile is VM-vlan-10Port mode is access

A. Monitor session 1 type spanSource interface veth5 bothDestination interface veth6No shutB. monitor session 1source vlan 10destination interface veth6no shutC. monitor session 1 type er-spansource interface vlan 10destination ip 10.1.1.10no shutD. VM002 must be removed from the Nk1VE. Move VM002 to Module 5F. Restart the VEM on module 5

Correct Answer: AESection: Cisco Data Center Infrastructure—Cisco NX- OSExplanation


QUESTION 58Which statements are valid for a local SPAN configuration? (Choose two.)

A. Source and destination interface must be on the same hostB. Source and destination interfaces can be on different hostsC. Destination vEthernet interface can be on a different VLAN than the sourceD. Destination interface can be a physical port

E. Destination interface cannot be a physical port

Correct Answer: ADSection: Cisco Data Center Infrastructure—Cisco NX- OSExplanation


Each local SPAN session must have at least one destination port (also called a monitoring port) that receives a copy of traffic from the source ports or VLANs. Adestination port has these characteristics:

References:


Fabric Interconnect A, operating in end-host mode, receives an ingress frame with source MAC address 0025.b500.0035 on uplink Eth1/19.Which statements are true? (Choose two.)

A. The frame will be accepted. Fabric Interconnect A will update its MAC address table to show that 0025.b500.0035 is dynamically learned on Eth1/19 and no

longer dynamically learned on Eth5/1/6.B. Fabric Interconnect A will transmit a Gratuitous ARP for 0025.b500.0035 since it has moved ports, and the upstream network needs to be notified of the new

location.C. Fabric Interconnect A will drop the frame.D. The MAC address table will not be updated as a result of receiving this frame on an uplink.E. Reverse Path Forwarding will determine whether or not this frame is dropped by Fabric InterconnectF.G. Deja vu will determine whether or not this frame is dropped by Fabric Interconnect A.

Correct Answer: CDSection: Cisco Data Center Infrastructure—Cisco NX- OSExplanation


Another difference in end-host mode is that MAC address learning occurs only on server ports, not on uplink ports. The fabric interconnect learns and stores onlyMAC addresses that are located within the system, such as the addresses of the physical servers in the blade chassis and any virtual servers the physical serversmay be hosting. When the fabric interconnect receives a frame from a server destined for a MAC address that cannot be found in its local MAC address table, itassumes that the destination must be outside the system and will send the frame to the server's pinned uplink. End-host mode has a scalability advantage as well.In end-host mode, the fabric interconnect's MAC address table will grow proportionally to the size of the Cisco Unified Computing System, not to the size of theentire data center, enabling better long-term scalability References:


You create a service profile within ORG C with two vNICs. Each vNIC is assigned to the MAC pool named "vmware". Which two possible MAC addresses could be

assigned to the vNICs? (Choose two.)

A. 00:25:B5:FF:00:01B. 00:25:B5:EE:00:01C. 00:25:B5:DD:00:01D. 00:25:B5:BB:00:01E. 00:25:B5:AA:00:01


Explanation/Reference:Explanation:Cisco UCS Management domains can coexist along with many other UCSM domains and with servers other than Cisco UCS servers, all of which can have theirown sets of unique hardware identifiers and pools. The presentation of duplicate WWNs and MAC addresses to the LAN or SAN could naturally be a major sourceof complications.To avoid these issues, adopt an enumeration scheme for domains, such that domain ID's are embedded in the high-order byte range of all pools, including MAC,WWNN, WWPN and UUID. Best practices are to embed either a simple domain ID, or a site/domain pair, along with a fabric side indicator to guarantee uniquenessand identify fabric source. For example, a MAC pool block would take the form00:25:B5:23:BX:YY, where 00:25:B5 designates Cisco UCS, 23 indicates site 2, domain 3, and B indicates the B-side fabric. Smaller environments could shortenthe encoding to just domain and fabric side, as in 00:25:B5:1A:XX:YY.

References:

QUESTION 61What are two benefits of a FabricPath network? (Choose two.)

A. Simplicity of configurationB. Automatic OSPF routingC. ScalabilityD. Dynamic link selectionE. Spanning tree loop prioritization.



Explanation:

Simplified network, reducing operating expenses - FabricPath is extremely simpe to configure. The only necessary configuration consists of distinguishing the coreports, which link the switches, from the edge ports, where end devices are attached. No parameters need to be tuned to achieve an optimal configuration, andswitch addresses are assigned automatically.

Cisco® FabricPath is an innovation in Cisco NX-OS Software that brings the stability and scalability of routing to Layer 2. The switched domain does not have to besegmented anymore, providing data centerwide workload mobility. Because traffic is no longer forwarded along a spanning tree, the bisectional bandwidth of thenetwork is not limited, and massive scalability is now possible. Figure 1 shows some of the advantages of a network that uses Cisco FabricPath.

References:


The interface remains in a down state after entering the command that is shown in the exhibit. What is the cause of the problem?

A. The feature interface-vlan command must be configured.B. The VDC contains only F1 interfaces.C. There are IP address conflicts.D. The VDC is "type OTV."E. The command copy run start was not entered.



Starting with Cisco NX-OS Release 6.2(2), we do not support the interoperability of F1 and F2 Series modules in any VDC, either in a dedicated mode or in ashared mode. If you have configured F1 and F2 Series modules as supported line cards in a storage VDC during an In-Service Software Upgrade (ISSU) to CiscoNX-OS Release 6.2(2) or later releases, before ISSU, reconfigure your storage VDC by using the limit-resource module-type command to avoid any unnecessarydisruption to the system.References:

QUESTION 63Consistency checks and compatibility checks are performed before a vPC is created. During a compatibility check, one vPC peer conveys configuration informationto the other vPC peer to verify that vPC member ports can actually form a port channel. Which two statements about virtual port channel graceful consistencychecks are true? (Choose two.)

A. Graceful consistency check is enabled by default.B. When graceful consistency check is enabled, only the links on the secondary peer device are suspended.C. Graceful consistency check is disabled by default. To enable this feature, use the graceful consistency-check command under the vPC domain configuration

mode.D. When graceful consistency check is enabled, only the inconsistent VLANs on the secondary peer device are suspended.E. Graceful consistency check is disabled by default.



Beginning with Cisco NX-OS Release 5.0(2)N2(1) and later releases, when a Type 1 mismatch occurs, by default, the primary vPC links are not suspended.Instead, the vPC remains up on the primary switch and the Cisco Nexus 5000 Series switch performs Type 1 configurations without completely disrupting the trafficflow. The secondary switch brings down its vPC until the inconsistency is cleared.

However, in Cisco NX-OS Release 5.0(2)N2(1) and earlier releases, this feature is not enabled for dual-homed FEX ports. When Type-1 mismatches occur in thistopology, the VLANs are suspended on both switches. The traffic is disrupted on these ports for the duration of the inconsistency.References:

QUESTION 64Consistency checks and compatibility checks are performed before a vPC is created. During a compatibility check, one vPC peer conveys configuration informationto the other vPC peer to verify that vPC member ports can actually form a port channel. Which option is considered as a Type-2 misconfiguration?

A. port MTU mismatchB. native VLAN mismatch

C. STP interface settingsD. VLAN mismatch



If the PortChannel ports are suspended, a mismatch occurred in the PortChannel ports between the switches that are supposed to bring up the PortChannel. Forexample, a vPC on the Cisco Nexus 7000 Series is configured with ports that individually connect to two different PortChannels on the Cisco Nexus 5000 Series.

Alternatively, if the access-layer ports are not configured for a channel, the Cisco Nexus 7000 and 5000 Series will operate normally with spanning tree. If the portson the Cisco Nexus 5000 Series are configured in passive channel-group mode and the Cisco Nexus 7000 Series ports are not configured for PortChannels, theCisco Nexus 7000 and 5000 Series run spanning tree again on those ports.References:

QUESTION 65Which three statements about Cisco FabricPath are correct? (Choose three.)

A. Only F1 or F2 ports can be used as FabricPath core ports.B. Only F1 or F2 ports can be used as edge ports to connect a legacy spanning tree domain (to switch traffic over the FabricPath domain).C. A FabricPath VLAN can exist on F1 or F2 ports only.D. Only M1 or M2 ports can be used as FabricPath core ports.E. Only F2 ports can be used as edge ports to connect a legacy spanning tree domain (to switch traffic over the FabricPath domain).F. A FabricPath VLAN can exist on F1 ports only.



References:

QUESTION 66Which PIM mode is supported in Cisco NX-OS?

A. sparse modeB. dense modeC. sparse-dense modeD. dense-sparse mode



Cisco NX-OS supports multicasting with Protocol Independent Multicast (PIM) sparse mode. PIM is IP routing protocol independent and can leverage whicheverunicast routing protocols are used to populate the unicast routing table. In PIM sparse mode, multicast traffic is sent only to locations of the network that specificallyrequest it. PIM dense mode is not supported by Cisco NX-OS.

To access multicast commands, you must enable the PIM or PIM6 feature. Multicast is enabled only after you enable PIM or PIM6 on an interface of each router ina domain. You configure PIM for an IPv4 network and PIM6 for an IPv6 network. By default, iGMP and MLD are running on the system.

PIM, which is used between multicast-capable routers, advertises group membership across a routing domain by constructing multicast distribution trees. PIMbuilds shared distribution trees on which packets from multiple sources are forwarded, as well as source distribution trees, on which packets from a single sourceare forwarded.The distribution trees change automatically to reflect the topology changes due to link or router failures. PIM dynamically tracks both multicast-capable sources andreceivers, although the source state is not created in Bidir mode.

References:


Which configuration command (or commands) will produce the output that is shown in the exhibit?

A. no feature igmpB. no feature igmp snoopingC. vlan 201no ip igmp snoopingD. vlan configuration 201no ip igmp snoopingE. interface vlan 201no ip igmp snooping


Explanation/Reference:Explanation:Global IGMP snooping overrides the VLAN IGMP snooping. If global snooping is disabled, you cannot enable VLAN snooping. If global snooping is enabled, youcan enable or disable VLAN snooping.

References:


The following message output was displayed while configuring PIM on Nexus 7000. Which command should be configured on the Cisco Nexus 7000 Series switchto allow the desired configuration?

A. feature multicastB. feature pimC. ip multicast-routingD. ip pim routing

Correct Answer: B

Section: Cisco Data Center Infrastructure—Cisco NX- OSExplanation


Feature PIM enables PIM. By default PIM is disabled.References:


When the engineer tried to check CoPP on the switch, the engineer observed the error that is shown in the exhibit. Which option describes the reason for thedisplayed output?

A. The Cisco NX-OS version that is running does not support CoPP.B. The CoPP feature is not enabled on this switch.C. The CoPP CLI is available from the default VDC.D. CoPP is enabled by default but not configured.



The copp-system-p-policy policy has optimized values suitable for basic device operations. You must add specific class and access-control list (ACL) rules thatmeet your DoS protection requirements. The default CoPP policy does not change when you upgrade the Cisco NX-OS software.References:

QUESTION 70How many ACL capture sessions can be configured on a Cisco Nexus 7000 switch?

A. ACL capture is not supported on the Cisco Nexus 7000 switch.

B. Only one ACL capture session can be active at any given time in the system across virtual device contexts.C. Only one ACL capture session can be active in each virtual device context.D. The number of ACL capture sessions depends on the space that is available within the ACL Ternary Content Addressable Memory.E. Only one ACL capture session is supported per VLAN.



QUESTION 71On a Cisco Nexus 7000 device, on which port type can port security be configured?

A. Access portsB. SPAN destination portC. trunk portsD. public VLAN-enabled ports



You can configure port security on interfaces that you have configured as Layer 2 access ports. On an access port, port security applies only to the access VLAN.VLAN maximums are not useful for access ports.

References:

QUESTION 72Which statement is true about DHCP snooping on the Cisco Nexus 7000 platform?

A. DHCP snooping cannot be enabled globally and on a per-VLAN basis.B. By default, DHCP snooping is disabled globally and on all VLANs.C. You can enable DHCP snooping on a single VLAN only.D. For DHCP snooping to function properly, all DHCP servers must be connected to the device through untrusted interfaces.



When you use the feature dhcp command to enable the DHCP snooping feature, there is a delay of approximately 30 seconds before the I/O modules receiveDHCP snooping or DAI configuration. This delay occurs regardless of the method that you use to change from a configuration with DHCP snooping disabled to aconfiguration with DHCP snooping enabled. For example, if you use the Rollback feature to revert to a configuration that enables DHCP snooping, the I/O modulesreceive DHCP snooping and DAI configuration approximately 30 seconds after you complete the rollback.

References:

QUESTION 73Which two statements about VDC configuration and limitations are true? (Choose two.)

A. Standard VDCs cannot share interfaces, VLANs, or VRF tables.B. Any user can create VDCs.C. Only the network administrator role can use the switchto vdc command.D. After a network administrator uses the switchto vdc command, the network administrator becomes a VDC administrator for the new VDC.E. There is no CLI command to return to the original VDC.


Explanation/Reference:Explanation:VDCs have the following configuration guidelines and limitations:

References:


You configured a port on a Cisco Nexus 7000 switch as a trunk port. Which VLANs are allowed on the trunk port based on the port configuration in the exhibit?

A. No VLANs are allowed by default. Use the switchport trunk allowed vlan 1-4094 command to allow all VLANs.B. Only Native VLAN 1 will be allowed.C. VLANs 1 to 3967, and 4048 to 4094 are allowed.D. VLANs 1 to 3900, and 4048 to 4094 are allowed.E. VLANs 1 to 4094 are allowed.



Sets the allowed VLANs for the trunk interface. The default is to allow all VLANs on the trunk interface: 1 to 3967 and 4048 to 4094. VLANs 3968 to 4047 are thedefault VLANs reserved for internal use by default; this group of VLANs is configurable. By default, all VLANs are allowed on all trunk interfaces.

You cannot add internally allocated VLANs as allowed VLANs on trunk ports. The system returns a message if you attempt to list an internally allocated VLAn as anallowed VLAN.References:

QUESTION 75Which three prerequisites must be met before configuring FabricPath on a Cisco Nexus 7000 switch? (Choose three.)

A. Ensure that the Enhanced Layer 2 license is installed on the switch.B. The FabricPath feature set must be installed on the default and non-default VDCs.C. Spanning tree must be disabled on the switch.D. Ensure that you are working on the F Series module.E. Ensure that you are working on the M Series module.F. The FabricPath feature set must be installed only on the default VDC.

Correct Answer: ABD

Section: Cisco Data Center Infrastructure—Cisco NX- OSExplanation


FabricPath forwarding has the following prerequisites:

References:

QUESTION 76Which two types of multicast trees are supported by Cisco NX-OS? (Choose two.)

A. private treesB. shared treesC. unicast treesD. anycast treesE. unidirectional treesF. bidirectional trees

Correct Answer: BFSection: Cisco Data Center Infrastructure—Cisco NX- OSExplanation


A shared tree represents the shared distribution path that the multicast traffic takes through the network from a shared root or rendezvous point (RP) to eachreceiver. (The RP creates an SPT to each source.) A shared tree is also called an RP tree (RPT)

A bidirectional shared tree represents the shared distribution path that the multicast traffic takes through the network from a shared root, or rendezvous point (RP),to each receiver. Multicast data is forwarded to receivers encountered on the way to the RP.

References:


The engineer needs to check if keepalive messages between two servers in the address range 9.9.9.0/24 arrive from the device that is directly connected via thetrunk interface. Which two configurations should be applied on the switch port to achieve displayed output? (Choose two.)

A. ip access-list LO_FILTERstatistics per-entry10 permit ip 9.9.9.0 0.0.0.255 any20 permit ip any anyB. ip access-list LO_FILTER10 permit ip 9.9.9.0 0.0.0.255 any20 permit ip any anyC. ip access-list LO_FILTER10 permit ip 9.9.9.0 0.0.0.255 any20 deny ip any anyD. Nexus5K(config)# interface Ethernet1/1Nexus5K(config-if)# ip access-group LO-FILTER inE. Nexus5K(config)# interface Ethernet1/1Nexus5K(config-if)# ip port access-list LO-FILTER inF. Nexus5K(config)# interface Ethernet1/1Nexus5K(config-if)# ip port access-group LO-FILTER out

Correct Answer: AESection: Cisco Data Center Infrastructure—Cisco NX- OSExplanation


Command or ActionPurposeStep 1switch# configure terminalEnters configuration mode.

Step 2switch(config)# interface {85thernet[chassis/]slot/port | port-channel channel-number} Enters interface configuration mode for the specified interface.

Step 3switch(config-if)# {ip port access-group |ipv6 port traffic-filter} access-list in Applies an Ipv4 or Ipv6 ACL to the interface or EtherChannel. Only inbound filtering issupported with port ACLs. You can apply one port ACL to an interface.

Step 4

switch# show running-config(Optional)Displays ACL configuration.

Step 5switch# copy running-config startup-config(Optional)Copies the running configuration to the startup configuration.

References:

QUESTION 78Which three options describe the key management control parameters that Cisco Prime DCNM provides? (Choose three.)

A. configuration of change controlB. single shared database for LAN and SAN configuration dataC. single point for integration with third-party test toolsD. ability to manage vPCsE. autodiscovery of storage controllersF. host driver managementG. support for script automation



FeatureBenefitProvisioningAutomated discovery· Using automated network discovery, provides up-to-date physical and logical inventory information · Tracks inventory and performance information in real time;information can be used as a source of truth for asset tracking or as a data source for a configuration management database (CMDB) Provisioning GUI, tools andwizards· Prebuilt GUI, tools and wizards for provisioning SAN services such as zone assignment and access control list (ACL) assignment· Prebuilt GUI, tools and wizards for provisioning LAN services such as OTV · Template- and wizard-based provisioning of FcoE connectivity based on link type andplatform Provisioning templates· Prebuilt templates for provisioning LAN and SAN components · Prebuilt template deployment scheduler and rollback mechanism · Customizable templates with

conditional statements· Create new templates using template editor· Import configuration script and turn it into template Configuration and change management· Provides predeployment validation of configuration changes, reducing opportunities for human error · Using historical configuration archive coupled withconfiguration comparison, enables you to identify the last-known good state if configuration problems occur · Provides capability to back up configuration files fromall switches One-command multiswitch CLI access· Enables user to use the global command line as the interface for multiple switches at the same time and view output on those switches

References:

QUESTION 79OTV is a MAC-in-IP method that extends Layer 2 connectivity across a transport network infrastructure. Which three options are high-availability features? (Choosethree.)

A. OTV fast convergenceB. fast failure detectionC. added the track-adjacency-nexthop command to enable overlay route trackingD. added support for unicast cores using an adjacency serverE. added support for Ipv6 unicast forwarding and multicast flooding across the OTV overlay



The overlay network maps MAC addresses to IP addresses of the edge devices. Once OTV identifies the correct edge device to send a Layer 2 frame to, OTVencapsulates the frame and sends the resulting IP packet using the transport network routing protocols.

OTV supports one or more separate overlay networks running Ipv4 or Ipv6 unicast forwarding or multicast flooding. Each overlay network supports one or moreVLANs.References:

QUESTION 80Which three statements about FabricPath are true? (Choose three.)

A. Only FabricPath VLANs can cross a FabricPath domain.B. A vPC+ peer link can be formed out of F1 or F2 ports only.C. With FabricPath, vPC must be changed to vPC+.

D. F1 ports must be placed into a separate VDCs.E. A vPC+ peer link can be formed out of F2 ports only.



After you enable FabricPath on the switches that you are using, you can configure an Ethernet interface or a port-channel interface as a FabricPath interface. If onemember of the port channel is in FabricPath mode, all the other members will be in FabricPath mode. After you configure the interface as a FabricPath interface, itautomatically becomes a trunk port, capable of carrying traffic for multiple VLANs. You can also configure all the ports on the switch as FabricPath interfacessimultaneously. The following interface modes carry traffic for the following types of VLANs:· Interfaces on the switch that are configured as FabricPath interfaces can carry traffic only for

FabricPath VLANs.· Interfaces on the switch that are not configured as FabricPath interfaces carry traffic for the

following: FabricPath VLANs

Classical Ethernet (CE) VLANS

References:


What is the purpose of this command on the Cisco Nexus 7000 switch?

A. The command enables conversational learning on FabricPath VLANs 1 through 10 for the F Series module.

B. The command enables the FabricPath protocol on VLANs 1 through 10.C. There is no need for this command because conversational learning is enabled by default for all VLANs.D. The command enables conversational learning on a classic Ethernet VLAN for the F Series module.



With conversational MAC learning, the interface learns only the source MAC address of an ingressing frame if that interface already has the destination MACaddress present in the MAC address table. If the source MAC address interface does not already know the destination MAC address, it does not learn that MACaddress. Each interface learns only those MAC addresses that are actively speaking with the interface. In this way, conversational MAC learning consists of a three-way handshake. The interface learns the MAC address only if that interface is having a bidirectional conversation with the corresponding interface. Unknown MACaddress are forwarded, or flooded, throughout the network. This combination of conversational MAC address learning and multiple FEs on each F Series moduleproduces greatly reduced mAC address tables on each F Series module. For CE VLANs, you can configure conversational learning per VLAN on the F Seriesmodule using the command-line interface (CLI). CE VLANs use traditional MAC address learning by default. Traditional MAC learning is not supported onFabricPath VLANs with Cisco Release NX-OS 5.1 or higher.

References:


Which three statements describe the use of the vPC peer link in this topology? (Choose three.)

A. The peer link is used for synchronizing MAC addresses between SW1 and SW2.B. The peer link is used for control plane traffic only.C. The peer link provides necessary transport for multicast traffic.D. The peer link is used for the communication of orphaned ports.E. The peer link does not prevents the loops in the topology.F. The peer link always consists of two 10GB ports in a port-channel.



The peer link, also known as the multichassis EtherChannel trunk (MCT), connects the vPC peer switches. The peer link is always forwarding. The bridge protocoldata units (BPDUs) or Link Aggregation Control Protocol (LACP) packets that are received by the secondary vPC peer on a vPC port are forwarded to the primaryvPC peer through the peer link for processing.

The peer link is used to synchronize the MAC addresses of the vPC peer switches to provide the necessary transport for multicast traffic. It is also used forforwarding traffic that originates at, or is destined for, orphan ports (that is, a non-vPC port).

References:

QUESTION 83What is the default vPC peer-keepalive timeout on the Cisco Nexus 7000 Series switch?

A. 5 secondsB. 256 millisecondsC. 500 millisecondsD. 1 second



If one of the vPC peer devices fails, the vPC peer device on the other side of the vPC peer link senses the failure by not receiving any peer-keepalive messages.The default interval time for the vPC peer- keepalive message is 1 second, and you can configure the interval between 400 milliseconds and 10 seconds.References:

QUESTION 84On the Cisco Nexus 7000 switch, ACL capture sessions are supported on which two modules? (Choose two.)

A. M1 modules

B. M2 modulesC. F1 modulesD. F2 modulesE. M3 modules



QUESTION 85Which three configurations for ACL capture are valid? (Choose three.)

A. on a VLAN interfaceB. in the ingress direction on all interfacesC. in the ingress direction only on the M2 moduleD. in the egress direction on all interfacesE. in the egress direction on all Layer 3 interfacesF. in the ingress direction only on M1 module



Access Control List (ACL) capture provides you the ability to selectively capture traffic on an interface or virtual local area network (VLAN) When you enable thecapture option for an ACL rule, packets that match this rule are either forwarded or dropped based on the specified permit or deny action and can also be copied toan alternate destination port for further analysis. An ACL rule with the capture option can be applied:

References:


A new Nexus device, Router-B, was recently added to the network. The engineer wants to make Router-B the designated IGMP querier for this network. Which twoconfigurations should be applied to the devices on the network to accomplish this goal? (Choose two.)

A. Router-B(config)# interface Ethernet1/1Router-B(config-if)# ip address 10.1.1.251 255.255.255.0B. Router-B(config)# interface Ethernet1/1Router-B(config-if)# ip address 10.1.1.249 255.255.255.0Router-B(config)# feature igmpC. Router-B(config)# interface Ethernet1/1Router-B(config-if)# ip igmp version 2Router-B(config)# feature igmpD. Router-B(config)# interface Ethernet1/1Router-B(config-if)# ip igmp querierRouter-B(config)# feature pimE. Router-B(config)# interface Ethernet1/1Router-B(config-if)# ip pim sparse-mode

Correct Answer: BESection: Cisco Data Center Infrastructure—Cisco NX- OSExplanation


Both IGMPv1 and IGMPv2 support membership report suppression, which means that if two hosts on the same subnet want to receive multicast data for the samegroup, then the host that receives a member report from the other host suppresses sending its report. Membership report suppression occurs for hosts that share aport.

If no more than one host is attached to each VLAN switch port, then you can configure the fast leave feature in IGMPv2. The fast leave feature does not send lastmember query messages to hosts. As soon as the software receives an IGMP leave message, the software stops forwarding multicast data to that port.

IGMPv1 does not provide an explicit IGMP leave message, so the software must rely on the membership message timeout to indicate that no hosts remain thatwant to receive multicast data for a particular group.References:


The customer is trying to configure a rendezvous point, but for some reason it is failing. Which configuration should be applied on both Nexus devices to configurethe rendezvous point?

A. RT-2(config)#ip pim send-rp-discovery loopback10RT-2(config)#interface lo0

B. RT-2(config-if)#ip pim-sparseRT-2(config)#ip pim send-rp-announce lo10 group-list 239.0.0.0/24RT-2(config)#interface lo0RT-2(config-if)#ip pim-sparseC. RT-2(config)#ip pim send-rp-discovery loopback10RT-2(config)#interface lo0RT-2(config-if)#ip pim-sparseD. RT-1(config)#interface Vlan106RT-1(config-if)#no ip pim borderRT-2(config)# ip pim send-rp- announce lo10 group-list 239.0.0.0/24RT-2(config)#interface

lo0RT-2(config-if)#ip pim-sparseE. RT-1(config)#interface Vlan106F. RT-1(config-if)#no ip pim borderRT-2(config)# ip pim send-rp-discovery loopback10G. RT-1(config)#interface Vlan106RT-1(config-if)#no ip pim border


Explanation/Reference:References:

QUESTION 88Which of the following is a feature of Fabric Extender?

A. The Fabric Extender provides two user queues for its QoS support, one for all no-drop classes and one for all drop classes.B. The class-all-flood and class-ip-multicast class maps are used on the Fabric Extender.C. The Fabric Extender inherits the CoS configured on the upstream switch.D. For a Cisco Nexus 2248PQ 10GE Fabric Extender, all fabric interfaces can be bundled into a single fabric port channel.



The problem is that the remote routers are announcing themselves with PIM Hello messages from their own IP addresses and my router registers these addressesas PIM neighbours.

The gateway in the routing table however contains the HSRP virtual address. When the router wants to join the multicast group, it looks for the route to theRendezvous Point which has the HSRP virtual address as the next hop. Because this next-hop HSRP address is not one of the known PIM neighbours, the PIM-SMRFC specifies no Join should be sent.

Changing the static route to use an actual IP address of one of the HSRP routers makes the multicast work, but of course this makes the HSRP useless.

I have not tested VRRP because the other side did not want to change the network. VRRP would probably not have this problem since it does not use a virtualrouter IP, but uses the real IP address of the master router.

QUESTION 89Basic zoning changes are accomplished through the use of four SW_ILS frames. Which option identifies these frames in the correct order?

A. RCA, UFC, SFC, ACAB. ACA, RCA, SFC, UFCC. SFC, UFC, ACA, RCAD. ACA, SFC, UFC, RCAE. UFC, SFC, RCA, ACA



QUESTION 90Which two options describe devices as they operate in FabricPath topologies? (Choose two.)

A. Edge (or leaf) devices: These devices have ports that are connected to classic Ethernet devices (servers, firewalls, router ports, and so on) and ports that areconnected to the FabricPath cloud (or FabricPath ports). Edge devices are able to map a MAC address to the destination switch ID.

B. Spine devices: These devices exclusively interconnect edge devices. Spine devices switch exclusively based on the destination switch ID.C. Edge (or leaf) devices: These devices have ports that are connected to classic Ethernet devices (servers, firewalls, router ports, and so on) and ports that are

connected to the FabricPath cloud (or FabricPath ports). Edge devices are able to map a source address to the destination switch ID.D. Spine devices: These devices exclusively interconnect edge devices. Spine devices switch exclusively based on the source switch ID.



In FabricPath topologies, there are two types of "functions" (which can be performed by all FabricPath hardware):References:

QUESTION 91In a FabricPath topology, each device is identified by a switch ID, and all Layer 2 forwarding tables are built based on the reachability of the switch ID. Whichprotocol is used to assign the switch ID?

A. No protocol is used. The switch ID is always assigned manually.B. The Dynamic Resource Allocation Protocol is used to assign the switch ID.C. The Switch ID Assignment Protocol is used to assign the switch ID.D. The switch ID is assigned based on the system ID of the device.



Each device in the topology is identified by a switch-id and all Layer 2 forwarding tables are built based on reachability to each switch-id (as opposed to reachabilityto a MAC address). The switch-id is dynamically assigned via the Dynamic Resource Allocation Protocol (DRAP), so no manual allocation of switch-ids is required.However, it is possible to manually assign a SW-ID while a dynamic check for misconfiguration is performed.References:


The network topology that is shown in the exhibit has two aggregation switches (SW1 and SW2). The access layer switch connects to both aggregation switches.On SW1 and SW2, ports connecting to the access layer switches are configured as vPC member ports. SW1 and SW2 are also connected using a port channelthat is configured as a vPC peer link. Which statement describes the use of the vPC peer- keepalive link in this topology?

A. The peer-keepalive link is used for synchronizing MAC addresses between Agg1 and Agg2.B. The peer-keepalive link is used for control plane traffic. The peer link is used for the data plane.C. The peer-keepalive link is used to resolve dual-active scenarios, where the peer link connectivity is lost.D. The peer-keepalive link is used for the communication of orphaned ports.


Explanation/Reference:Explanation:A routed "link" (it is more accurate to say "path") is used to resolve dual-active scenarios in which the peer link connectivity is lost. This link is referred to as a vPCpeer-keepalive or fault-tolerant link. The peer-keepalive traffic is often transported over the management network through the management 0 port of the CiscoNexus 5000 Series Switch or the management 0 ports on each Cisco Nexus 7000 Series supervisor. The peer-keepalive traffic is typically routed over a dedicatedVirtual Routing and Forwarding (VRF) instance (which could be the management VRF, for example). The keepalive can be carried over a routed infrastructure; itdoes not need to be a direct point-to-point link, and, in fact, it is desirable to carry the peer-keepalive traffic on a different network instead of on a straight point-to-point link.References:

QUESTION 93Refer to the exhibit.During troubleshooting of vPCs, it is observed that virtual port channel 2 is in the down state. Based on the show command output, what is a possible cause of thisissue?

A. The virtual port channel is down because LACP is not enabled on the remote switch.B. The virtual port channel is down because of a VLAN mismatch.C. The virtual port channel is down because of an MTU mismatch.D. The virtual port channel is down because of a VLAN and MTU mismatch.



The consistency checker exists to keep bad things from happening on your vPC port-channel (like "unexplaine"" packet dr"ps). There are two types of consistencycheck failures. The ones that will bring down the entire port-channel (these are type 1s) and the ones that will only cause an error, or keep a single or group ofVLANs from becoming active on the port-channel (type 2).

Decisions for what a type 1 and 2 are were made by the engineering team.

For example the MTU mismatch will bring your vPC port-channel down, and it does so in a non vPC port-channel as well. I am sure that you can see the types ofissues that having a link with a MTU of 9000 and one of 1500 can cause for a port-channel.

References:

QUESTION 94Which three options are valid SPAN sources? (Choose three.)

A. VLANs, because when a VLAN is specified as a SPAN source, all supported interfaces in the VLAN are SPAN sourcesB. fabric port channels connected to the Cisco Nexus 2000 Series Fabric ExtenderC. Layer 2 subinterfacesD. satellite ports and host interface port channels on the Cisco Nexus 2000 Series Fabric ExtenderE. Layer 3 subinterfacesF. Remote Span Ethernet Ports



The interfaces from which traffic can be monitored are called SPAN sources. These include Ethernet, virtual Ethernet, port-channel, and VLAN. When a VLAN isspecified as a SPAN source, all supported interfaces in the VLAN are SPAN sources. Traffic can be monitored in the receive direction, the transmit direction, orboth directions for Ethernet and virtual Ethernet source interfaces.

References:

QUESTION 95Which four statements about SNMP implementation on the Cisco Nexus 7000 Series switch are true? (Choose four.)

A. Cisco NX-OS supports one instance of the SNMP per virtual device context.B. By default, Cisco NX-OS uses the default VDC for SNMP.C. SNMP supports multiple MIB module instances and maps them to logical network entities.D. SNMP is VRF aware. You can configure SNMP to use a particular VRF to reach the SNMP notification host receiver.E. Only SNMP version 3 is supported on NX-OS.F. Cisco NX-OS supports one instance of the SNMP per switch.G. Each VDC can have multiple SNMP sessions configured in it.

Correct Answer: ABCDSection: Cisco Data Center Infrastructure—Cisco NX- OS

Explanation


The Simple Network Management Protocol (SNMP) is an application-layer protocol that provides a message format for communication between SNMP managersand agents. SNMP provides a standardized framework and a common language used for the monitoring and management of devices in a network.SNMP has different versions such as SNMPv1, v2, and v3. Each SNMP version has different security models or levels. Most Enterprise customers are looking toimplement SNMPv3 because it offers encryption to pass management information (or traffic) across the network. The security level determines if an SNMPmessage needs to be protected and authenticated. Various security levels exist within a security model:Cisco NX-OS supports the following SNMP standards:As NX-OS is truly modular and highly available, the NX-OS implementation of SNMP supports stateless restarts for SNMP. NX-OS has also implementedvirtualization support for SNMP; NX-OS supports one instance of SNMP per virtual device context (VDC). SNMP is also VRF-aware, which allows you to configureSNMP to use a particular VRF to reach the network management host.

References:

QUESTION 96Which three statements about the configuration of vPC+ are true? (Choose three.)

A. The FabricPath switch ID must be configured under the vPC domain.B. The virtual switch ID of vPC+ must be configured under the FabricPath domain.C. On the Cisco Nexus 7000 switch, F1 interfaces must be used as the vPC+ peer links.D. The vPC+ peer link must be configured as a Cisco FabricPath core port.E. The FabricPath subswitch ID must be configured under the vPC domain.F. There has to be atleast 4 virtual switches in the FabricPath domain.


Explanation/Reference:Explanation:A vPC+ domain enables Cisco Nexus 7000 Series enabled with FabricPath devices to form a single vPC+, which is a unique virtual switch to the rest of theFabricPath network. You configure the same domain on each device to enable the peers to identify each other and to form the vPC+. Each vPC+ has its own virtualswitch ID.

Enabling the vPC peer switch feature is not necessary when you are using vPC+. All FabricPath edge switches use a common reserved bridge ID (BIDc84c.75fa.6000) when sending BPDUs on CE edge ports.

A vPC+ must still provide active-active Layer 2 paths for dual-homed CE devices or clouds, even though the FabricPath network allows only 1-to-1 mappingbetween the MAC address and the switch ID. vPC+ creates a unique virtual switch to the FabricPath network (see the figure below).

The FabricPath switch ID for the virtual switch becomes the outer source MAC address (OSA) in the FabricPath encapsulation header. Each vPC+ domain musthave its own virtual switch ID.

Layer 2 multipathing is achieved by emulating a single virtual switch. Packets forwarded from host A to host B are tagged with the MAC address of the virtual switchas the transit source, and traffic from host B to host A is now load balanced.

You must have all interfaces in the vPC+ peer link as well as all the downstream vPC+ links on an F Series module with FabricPath enabled. The vPC+downstream links will be FabricPath edge interfaces, which connect to the CE hosts.The vPC+ virtual switch ID is used to assign the FabricPath Outer Source Address (OSA) to the FabricPath vPC+ peer devices (see "Configuring FabricPathSwitching," for information about FabricPath encapsulation). You must assign the same switch ID to each of the two vPC+ peer devices so the peer link can form.

The F1 Series modules have only Layer 2 interfaces. To use routing with a vPC+, you must have an M Series module inserted into the same Cisco Nexus 7000Series chassis. The system then performs proxy routing using both the N7K-F132-15 module and the M Series modules in the chassis (see the Cisco Nexus 7000Series NX-OS Unicast Routing Configuration Guide for information on proxy routing with the F1 Series modules).

References:

QUESTION 97Which statement describes multihop FCoE function when an FCoE switch receives an FCoE frame from the directly connected FCoE host?

A. The switch receives the FCoE frame and forwards it to another switch over its VE port.B. The switch receives the FCoE frame, deapsulates it, and sends the Fibre Channel frame to the fabric over its Fibre Channel uplink port.C. The switch receives the FCoE frame, deapsulates it, and sends the Fibre Channel frame to the Fibre Channel target over its Fibre Channel port.D. The switch receives the FCoE frame and forwards it to another FCoE device over its VN port.

Correct Answer: ASection: Cisco Storage NetworkingExplanation


When FCoE switch receives an FCoE frame from the FCoE it is forwarded to another switch over its VE port.

References:


QUESTION 98A Host connected to an NPV switch is not able to see the storage connected to the core switch. Given the output of the show command below, what is the reason ofthis issue?

switch# show npv statusnpiv is enabledExternal Interfaces:===============InterfacE. fc1/1, VSAN: 1, FCID. 0x000000, StatE. Other Number of External Interfaces: 4

A. NPV is not enabled on the core switch?

B. The interface connected to the Core switch is in admin down stateC. The local host interface belongs to the wrong VSAN?D. The local host interface is not able to login

Correct Answer: BSection: Cisco Storage NetworkingExplanation


To display the status and VSAN membership of the different servers and external interfaces, and to verify that NPIV is enabled on the switch, enter the show npvstatus command.

switch# show npv statusnpiv is enabledExternal Interfaces:====================Interface: fc1/1, VSAN: 1, FCID: 0xee0006, State: UpInterface: fc1/9, VSAN: 1, FCID: 0xee0007, State: UpNumber of External Interfaces: 2Server Interfaces:==================Interface: fc1/19, VSAN: 1, NPIV: Yes, State: UpNumber of Server Interfaces: 1

References:

QUESTION 99What are the two parallel SCSI specifications? (Choose two.)

A. Up to 25 m bus lengthB. Only one device per SCSI busC. Up to 16 devices per SCSI busD. Half-duplex operationE. Full-duplex operation

Correct Answer: ACSection: Cisco Storage NetworkingExplanation

Explanation/Reference:Explanation:There are several revisions of the SPI document. SPI includes Fast SCSI data transfer speeds up to 10 Megatransfers (20 Mbytes/sec for 16-bit). The Ultra SCSI(Fast-20) modification of SPI includes doubling the data throughput to 20 Megatransfers/sec (40 Mbytes/sec for 16-bit). Ultra SCSI speeds reduce the maximumsingle-ended cable length to 1.5 m (5 ft) with 5 or more devices and 3 m (10 ft) for systems having up to 4 devices. The maximum recommended differential cablelength remains at 25 m (82 ft).References:

QUESTION 100Which Ethernet field is used to differentiate between the FCoE frame and the FIP frame?

A. Ethernet FCSB. Source addressC. Destination addressD. EtherTypeE. Protocol type

Correct Answer: DSection: Cisco Storage NetworkingExplanation


FIP is encapsulated in an Ethernet packet with a dedicated EtherType, 0x8914. The packet has a 4-bit version field. Along with the source and destination MACaddresses, the FIP packet also contains a FIP operation code and a FIP operation subcode. The following table describes the FIP operation codes.References:

QUESTION 101Which statement describes the FIP function of the FCoE Initiation Protocol?

A. It is required to establish the point-to-point FCoE links with the first switch in the path.B. It is required to establish the point-to-point FCoE links with any switch across multiple Ethernet segments.C. It is not used to build the FCoE links.D. It is used to ensure lossless transport.

Correct Answer: BSection: Cisco Storage Networking

Explanation


The Cisco Nexus 5000 Series FCoE implementation could establish point-to-point FCoE links to first- generation converged network adapters (CNAs) without FIP,but FIP is required to build more complex topologies in which FCoE links can map to an Ethernet path that consists of more than one Ethernet link segment. Thefinal revision of FC-BB-5 completed the definition of FIP and was soon followed by Cisco ® NX-OS Software Release 4.1(3)N1(1), the first software release for theCisco Nexus 5000 Series that offers FIP capabilities.

References:

QUESTION 102Which command is used to determine if a host has logged in to the Fibre Channel fabric?

A. show flogi databaseB. show system fc loginC. show npv flogi-tableD. show npv fcns databaseE. show interface vfc X flogiF. show interface flogi


Explanation/Reference:Explanation:In a Fibre Channel fabric, each host or disk requires an FCID. Use the show flogi database command to verify if a storage device is displayed in the Fabric login(FLOGI) table as in the examples below. If the required device is displayed in the FLOGI table, the fabric login is successful. Examine the FLOGI database on aswitch that is directly connected to the host HBA and connected ports.ExamplesThe following example displays details on the FLOGI database.switch# show flogi database--------------------------------------------------------------------------- INTERFACE VSAN FCID PORT NAME NODE NAME--------------------------------------------------------------------------- sup-fc0 2 0xb30100 10:00:00:05:30:00:49:63 20:00:00:05:30:00:49:5e fc9/13 1 0xb200e221:00:00:04:cf:27:25:2c 20:00:00:04:cf:27:25:2c fc9/13 1 0xb200e1 21:00:00:04:cf:4c:18:61 20:00:00:04:cf:4c:18:61 fc9/13 1 0xb200d1 21:00:00:04:cf:4c:18:6420:00:00:04:cf:4c:18:64 fc9/13 1 0xb200ce 21:00:00:04:cf:4c:16:fb 20:00:00:04:cf:4c:16:fb fc9/13 1 0xb200cd 21:00:00:04:cf:4c:18:f7 20:00:00:04:cf:4c:18:f7

Total number of flogi = 6.

Reference. http://www.cisco.com/en/US/docs/storage/san_switches/mds9000/sw/rel_2_x/san- os/command/reference/CR02_sh.html#wp1248139

QUESTION 103Traffic drop for FCoE is experienced across a Nexus 5548 switch. What is a possible cause?

A. Server's CNA does not support DCBX and PFC TLV was not negotiated.B. A "no-drop" class has not been configured for FCoE.C. The system is running with the default QOS policies.D. The link is oversubscribed.



Priority flow control (PFC) is not negotiated with FCOE-capable adapters (CNA). This causes packet drop to be noticed on FCoE traffic from the servers.

References:

QUESTION 104Lossless Ethernet for FCoE is achieved through the use of which features? (Choose two.)

A. Priority flow controlB. Buffer-to-buffer creditsC. TCP retransmissionD. Ethernet checksumE. QoS policies

Correct Answer: AESection: Cisco Storage NetworkingExplanation


Lossless behavior on Ethernet is provided by using a priority flow control (PFC) mechanism that prevents packet loss during congestion conditions.

References:

QUESTION 105Which statement is true about The QoS Class Fibre Channel?

A. Cannot be disabledB. Cannot have the QoS changedC. Can have "Packet Drop" enabledD. Is multicast optimized?E. Can have the MTU changed



A system class that sets the quality of service for the lane reserved for basic Ethernet traffic. Some properties of this system class are preset and cannot bemodified. For example, this class has a drop policy that allows it to drop data packets if required. You cannot disable this system class.

References:

QUESTION 106When building a NIC team (virtual port channel) between a host and a pair of Cisco Nexus 5000 Series Switches that will carry FCoE traffic, what is the maximumnumber of physical links that can exist in the team?

A. 1B. 2C. 4D. 5E. 16



Explanation:

The maximum number of physical links allowed is 2.References:

QUESTION 107Which statement is correct about the number of available QoS system classes in FCoE?

A. It's hard-set and cannot be disabledB. It's configurable, with an upper limit of 16C. It's hard-set but cannot disable best-effort and Fibre ChannelD. It's hard-set but can disable all but one classE. It's configurable with an upper limit of eight

Correct Answer: CSection: Cisco Storage NetworkingExplanation


By default, the software classifies all unicast and multicast Ethernet traffic into the default drop system class. This class is identified by qos-group 0.This class is created automatically when the system starts up (the class is named class-default in the CLI). You cannot delete this class and you cannot change thematch criteria associated with the default class.References:

QUESTION 108Which statement about Cisco Unified Fabric switches is correct?

A. The Nexus 5000 family of switches does not support vPC when running in either NPV or FCoE NPV mode.B. The MDS 9100 family of switches is an excellent design choice as a Unified Fabric edge switch.C. The Nexus 7000 Series Switches can support the NPIV mode of operation, but cannot function as a complete Fibre Channel Forwarder.D. The Nexus 7000 Series Switches cannot support advanced Cisco Fibre Channel features such as IVR.E. The MDS family of Cisco Unified Fabric switches supports both the Fibre Channel Forwarder and Fibre Channel Bridge functions.

Correct Answer: ESection: Cisco Storage NetworkingExplanation


Not only does the Cisco MDS 9000 10-Gbps 8-Port FCoE Module take advantage of migration of FCoE into the core layer, but it extends enterprise-class FibreChannel services to Cisco Nexus 7000 and 5000 Series Switches and FCoE initiators. This capability:

References:

QUESTION 109DCNM is capable of monitoring the network performance of a SAN. What are the three primary areas of this operation?

A. Analyze traffic, device management, and network monitoringB. DCNM-SAN, DCNM-LAN, and device managerC. Definition of flows, information collection, and data presentationD. SNMP poll data, MIB analysis, and report generation



The primary areas of monitoring network performance of SAN is as follows:References:

QUESTION 110Which two Fibre Channel features are not supported in Cisco Nexus 5500 and Nexus 5000 platforms? (Choose two.)

A. port securityB. fabric bindingC. IVRD. port trackingE. FICON

Correct Answer: CESection: Cisco Storage NetworkingExplanation


The Fibre Channel features supported in Cisco Nexus 5500 and Nexus 5000 are related to Port security, fabric binding, and port tracking.

References:


Given this FCoE topology, host VFC interface and FC storage are in the same VSAN (VSAN 10). The VSAN is in the allow list for both ISLs. Both ISLs are up at 4GB.

Which command can be issued on the N5K command line to confirm that SCSI traffic from the host to the storage will flow across both links, as opposed to usingonly one link?

A. show fspf traffic vsan 10B. show vsan 10C. show trunk protocolD. show fcroute unicast vsan 10



The following example shows how to display information about a specific VSAN:

switch# show vsan 100

References:

QUESTION 112What is the correct order for FIP virtual establishment?

A. VLAN discovery, FCF discovery, FLOGI and FDISC, FC commandB. FCF discovery, VLAN discovery, FLOGI and FDISC, FC commandC. VLAN discovery, FCF discovery, FLOGI and FDISCD. FCF discovery, solicitation and advertisement, FLOGI and FDISC, FC command



References:

QUESTION 113Given a host with two NICs assigned to an N1k profile, which topologies are suitable for this type of configuration (Choose three.)

port-profile type Ethernet name VM-Datavmware port-groupswitchport mode trunkswitchport allowed vlan 400-410channel-group auto mode activeno shutstate enabled

A. Cisco UCS fabric interconnectsB. Pair of N5K's in VPC.C. Standalone N5KD. Pair of N5K's in non-VPCE. Cisco Catalyst 6000 Switch in VSS

Correct Answer: BCESection: Cisco Storage NetworkingExplanation


N5k-1(config)# int mgmt 0N5k-1(config-if)# ip address 172.25.182.51/24N5k-1(config-if)# vrf context managementN5k-1(config-vrf)# ip route 0.0.0.0/0 172.25.182.1

References:

QUESTION 114NPV and NPIV are features that are used to overcome resource limitations in which Fibre Channel field?

A. FCIDB. Domain IDC. WWPN

D. LUN IDE. VSAN



Fibre Channel protocol-related timer values can be configured for distributed services, error detection, and resource allocation. You must uniquely associate theWWN to a single switch. The principal switch selection and the allocation of domain IDs rely on the WWN. Cisco Nexus 5000 Series switches support three networkaddress authority (NAA) address formats The configured domain ID can be preferred or static. By default, the configured domain ID is 0 (zero) and the configuredtype is preferred.References:

QUESTION 115Given the following output:

San-port-channel 12 is upHardware is Fibre ChannelPort WWN is 24:0c:00:0d: ec :d3 :5c:00Admin port mode is NP, trunk mode is onPort mode is NPPort vsan is 1Speed is 8 GbpsMember [1]: fc2/3Member [2]: fc2/4

What does "Speed is 8 Gbps" indicate?

A. The speed of the slowest interface in the port channelB. The combined speed of all interfaces configured in the port channelC. The combined speed of all interfaces in the port channel that are upD. The speed that can be achieved if all buffers are used



speed { 10 | 100 | 1000 | auto } Sets the speed for the port-channel interface. The default is auto for autonegotiation.

References:

QUESTION 116Which three technologies enable lossless Ethernet? (Choose three.)

A. Priority Flow ControlB. Enhanced Transmission SelectionC. Ethernet CreditsD. Congestion NotificationE. VLAN-Aware TransmissionF. IP Type of Server Field

Correct Answer: ABDSection: Cisco Storage NetworkingExplanation


Currently, the distinct interconnect technologies transport different traffic from different applications.The primary Ethernet extensions are as follows:References:


Which of these technologies is illustrated by the topology in the exhibit?

A. vPC+B. standard vPCC. enhanced vPCD. express vPCE. fabric vPC



Explanation:

Enhanced vPC enables you to support server connectivity with one topology and address requirement for both high availability and high bandwidth. Enhanced vPCis technology that supports the topology, where a Cisco Nexus 2000 Fabric Extender (FEX) is dual-homed to a pair of Cisco Nexus 5500 Series devices while thehosts are also dual homed to a pair of FEXs using a vPC.

References:

QUESTION 118What are the three prerequisites for enabling FCoE on a Cisco Nexus 7000? (Choose three.)

A. M Series moduleB. F Series moduleC. no-drop QoS policyD. NPIV featureE. FCoE module licenseF. Fabric Extender configured

Correct Answer: BCESection: Cisco Storage NetworkingExplanation


ProductLicenseCisco Nexus 7000 SeriesEach F Series module that runs FCoE requires an FCoE license. FCoE enabled in a nondefault VDC does not require the Advanced Services License. For acomplete explanation of the Cisco NX-OS licensing scheme and how to obtain and apply licenses, see the Cisco NX-OS Licensing Guide.Cisco MDS 9500 SeriesFCoE does not require a license. For a complete explanation of the Cisco NX-OS licensing scheme and how to obtain and apply licenses, see the Cisco NX-OSLicensing Guide.

References:

QUESTION 119Which two statements about Fibre Channel Class 2 are true? (Choose two.)

A. Fibre Channel Class 2 provides a connection-oriented class of service.

B. The F_BSY frame is part of Class 2.C. Class 2 acknowledges frame delivery.D. BB_Credits do not exist in Class 2.E. Dedicated bandwidth is allocated when using Class 2.

Correct Answer: BCSection: Cisco Storage NetworkingExplanation


An issue exists in that if an Enc_Header is added to a frame and a Class 2 F_RJT or F_BSY is generated by a legacy switch within the Inter-Fabric, the Inter-FabricRouter that receives the Class 2 F_RJT or F_BSY does not have the proper addressing information needed to return the frame to the device that originated theClass 2 frame that was rejected or busied.

References:

QUESTION 120Which two options describe the results of a switch sending an RCF SW_ILS frame to neighbor switches? (Choose two.)

A. All traffic in all VSANs is suspended.B. Zone merging is reinitiated.C. The principal switch remains the same.D. New Fibre Channel domains can be allocated.E. The switch name is changed.

Correct Answer: BDSection: Cisco Storage NetworkingExplanation


You can choose to reject RCF request frames on a per-interface, per-VSAN basis. By default, the RCF reject option is disabled (that is, RCF request frames are notautomatically rejected).The RCF reject option takes effect immediately.References:

QUESTION 121Which three parameters are carried by an iSCSI TCP session? (Choose three.)

A. control messagesB. SCSI commandsC. parameters that specify redundant pathsD. iSCSI PDUsE. primitive signals

Correct Answer: ABDSection: Cisco Storage NetworkingExplanation


A connection is a TCP connection. Communication between the initiator and target occurs over one or more TCP connections. The TCP connections carry controlmessages, SCSI commands, parameters, and data within iSCSI Protocol Data Units (iSCSI PDUs).

References:

QUESTION 122Which statement about ESS SW_ILS frames is true?

A. ESS SW_ILS frames are addressed from the management server of a requesting switch to the Management Server of a responding switch.B. ESS SW_ILS frames are addressed from the name server of a requesting switch to the Name Server of a responding switch.C. ESS SW_ILS frames are addressed from the domain controller of a requesting switch to the Domain Controller of a responding switch.D. ESS SW_ILS frames are addressed from the alias server of a requesting switch to the Alias Server of a responding switch.E. ESS SW_ILS frames are addressed from the time server of a requesting switch to the Time Server of a responding switch.



switch(config)# fcan lo bri dis fc.type==0x22&&((fc.d_id==\"ff.fc.ef\"\|\|fc.s_id==\"ff.fc.ef\")) Warning:Couldn't obtain netmask info (eth2:no IPv4 address assigned).Capturing on eth2

9.472181 ff.fc.ef -> ff.fc.61 0x5e0a 0xffff SW_ILS ACA9.472777 ff.fc.61 -> ff.fc.ef 0x5e0a 0x5e09 SW_ILS SW_ACC (ACA) 9.474551 ff.fc.ef -> ff.fc.61 0x5e0b 0xffff SW_ILS SFC9.475706 ff.fc.61 -> ff.fc.ef 0x5e0b 0x5e0a SW_ILS SW_ACC (SFC) 9.476694 ff.fc.ef -> ff.fc.61 0x5e0c 0xffff SW_ILS UFC9.483612 ff.fc.61 -> ff.fc.ef 0x5e0c 0x5e0b SW_ILS SW_ACC (UFC) 9.488187 ff.fc.ef -> ff.fc.61 0x5e0d 0xffff SW_ILS RCA9.493703 ff.fc.61 -> ff.fc.ef 0x5e0d 0x5e0c SW_ILS SW_ACC (RCA)

References:

QUESTION 123Which two statements about Fibre Channel over TCP/IP are true? (Choose two.)

A. A connection request is made to Port 3225 or configured port.B. A connection request is made to Port 3260 or configured port.C. Fibre Channel over TCP/IP uses the TCP window management and sliding window for flow control.D. A special frame is always used to identify peers.



The basic FCIP configuration uses the peer's IP address to configure the peer information. You can also specify the peer's port number to configure the peerinformation. If you do not specify a port, the default 3225 port number is used to establish connection.

References:

QUESTION 124Which two statements about Fibre Channel over IP are true? (Choose two.)

A. FCIP links consist of a maximum of one TCP connection between two FCIP link endpoints.B. Each FCIP link carries encapsulated FCoE frames.C. The FCIP link is established between two peers, and the VE Port initialization behavior is identical to a normal E Port.D. The FCIP profile contains information about the local IP address and TCP parameters.E. The local IP address of the FCIP profile is the IP address of the management interface of the Cisco MDS switch.

Correct Answer: CDSection: Cisco Storage NetworkingExplanation


The FCIP profile contains information about local IP address and TCP parameters. The profile defines the following information:

References:


How is the VLAN configuration accomplished in the Device Manager?

A. This configuration is done under the IP selection.B. This configuration is done under Interface selection.C. This configuration cannot be done in Device Manager.

D. This configuration is done by clicking the VSAN drop-down list and choosing VLAN All.



Cisco Network Assistant gives you the option to check the total power usage of the Cisco IP phones and access points connected to the Power over Ethernet (PoE)Cisco Catalyst ® switches. This allows you to supervise power budgeting and displays information about whether you have enough power to connect additionalpowered devices to the switch.

References:

QUESTION 126What is the default FSPF cost of a port channel that consists of four 2-Gb/s links, with one link down because of an error?

A. 500B. 166C. 250D. 125E. 1000



FSPF tracks the state of links on all switches in the fabric, associates a cost with each link in its database, and then chooses the path with a minimal cost. The costassociated with an interface can be administratively changed to implement the FSPF route selection. The integer value to specify cost can range from 1 to 65,535.The default cost for 1 Gbps is 1000 and for 2 Gbps is 500.

References:


Which two options describe possible causes of the failure shown in the exhibit? (Choose two.)

A. Two switches have the same zone set name, but different zone names and different zone members.B. Two switches have the same zone set name and zone name, but different zone members.C. The zoneset export interface command is used for the wrong interface.D. The zoneset merge command can only be executed for VSAN 1.E. The adjacent switch is down at the point of the zone merge.

Correct Answer: ABSection: Cisco Storage NetworkingExplanation


When merging switch fabrics, you must ensure that the zones in both active zone sets have unique names, or that any zones with the same name have exactly thesame members. If either of these conditions is violated the E port connecting the two fabrics will appear in an isolated state.

For example, two switches may have the same zone set name, and the same zone names, but different zone members. As a result, the VSAN is isolated on the TEport that connects the two switches.

This issue can be resolved by doing one of the following:References:

QUESTION 128Which three options describe information that can be captured with the show iscsi stats iscsi x/y detail command? (Choose three.)

A. PDU or frame drop occurrencesB. speed of the iSCSI interfaceC. data CRC error

D. buffer creditsE. TMF-REQ and TMF-RESPF. duplex of the iSCSI interface

Correct Answer: ACESection: Cisco Storage NetworkingExplanation


Along with the traffic rate and the number of each iSCSI PDU types, it shows the number of FCP frames received and forwarded, the number of iSCSI loginattempt, succeed, and failure. It also shows the number of different types of iSCSI PDUs sent and received that are noncritical or occur less frequently, such asNOP in and out (NOP-In and NOP-Out), text request and response (Text-REQ and Text-RESP), and task management request and response (TMF-REQ andTMF-RESP).

Various types of errors and PDU or frame drop occurrences are also counted and displayed. For example, Bad header digest shows the number of iSCSI PDUsreceived that have a header digest that fails CRC verification. The iSCSI Drop section shows the number of PDUs that were dropped due to reasons such as targetdown, LUN mapping fail, Data CRC error, or unexpected Immediate or Unsolicited data. These statistics are helpful for debugging purposes when the feature is notworking as expected.References:

QUESTION 129Given an E3 WAN link, which mode of compression would be the most appropriate choice?

A. Mode highB. Mode mediumC. Mode lowD. Mode 1E. Mode 2


Explanation/Reference:Explanation:In SAN-OS 2.0, three compression modes are available per FCIP interface on the IPS-4, IPS-8, and MPS-14/2:

References:


When a CNA host connects to the virtual interface of the switch, what will happen?

A. The switch will not initialize because it is in the wrong mode.B. The host will negotiate using DCBX and connect properly.C. The host will negotiate using DCBX and will change parameters as required, but a shut/no shut is needed on the interface.D. The host will not connect. The vFC port number does not match the Ethernet interface.



In expansion port (E port) mode, an interface functions as a fabric expansion port. This port may be connected to another E port to create an Inter-Switch Link (ISL)between two switches. E ports carry frames between switches for configuration and fabric management. They serve as a conduit between switches for framesdestined to remote N ports. E ports support class 3 and class F service.

An E port connected to another switch may also be configured to form a SAN port channel.

References:


What action must be taken to make fc1/1 capable of being an ISL port channel member operating at 4 GB?

A. One of the interfaces between fc1/2 and fc1/6 must be placed in out-of-service mode to free up bandwidth in the port group so that fc1/1 can use that bandwidth.B. Interface fc1/1 must be placed into dedicated rate mode.C. The B2B credit value of interface fc1/1 must be raised to a minimum of 100.D. No action is necessary because shared rate mode ports are fine for ISLs.E. No action is possible because module 1 is oversubscribed and will only support ISLs if the ports operate at 2GBs.



To add an interface to a PortChannel, follow these steps:

CommandPurposeStep 1switch# config tswitch(config)#Enters configuration mode.Step 2switch(config)# interface fc1/15switch(config-if)#Configures the specified port interface (fc1/15).Step 3switch(config-if)#channel-group 15Adds physical Fibre Channel port 1/15 to channel group 15. If channel group 15 does not exist, it is created. The port is shut down.To add a range of ports to a PortChannel, follow these steps:

CommandPurposeStep 1switch# config tswitch(config)#Enters configuration mode.Step 2switch(config)# interface fc1/1 - 5switch(config-if)#Configures the specified range of interfaces. In this example, interfaces from 1/1 to 1/5 are configured.Step 3switch(config-if)#channel-group 2Adds physical interfaces 1/1, 1/2, 1/3, 1/4, and 1/5 to channel group 2. If channel group 2 does not exist, it is created.If the compatibility check is successful, the interfaces are operational and the corresponding states apply to these interfaces.

References:

QUESTION 132Which two statements about the FCIP Write Acceleration feature are true? (Choose two.)

A. WAN throughput is maximized by minimizing the impact of WAN latency for write operations.B. The Write Acceleration feature does not have to be enabled on both sides of the FCIP link.C. The FCIP Write Acceleration feature can only be used with multilink port channels if they are constructed with port channel protocol.D. The Write Acceleration feature cannot be used across FSPF equal cost paths in FCIP deployments.E. The Write Acceleration feature works by immediately returning the SCSI status on the initiator side of the FCIP link.

Correct Answer: ADSection: Cisco Storage NetworkingExplanation


The SCSI write acceleration feature enables you to significantly improve application write performance when storage traffic is routed over wide area networks usingFCIP or Fibre Channel. When write acceleration is enabled, WAN throughput is maximized by minimizing the impact of WAN latency for write operations.

References:


Based on the output, what is the most likely reason for the failure of the iSCSI boot?

A. There is no gateway configured on the iSCSI vNIC.B. The LUN is not masked correctly on the storage array.C. CHAP authentication is not configured correctly.D. The latency between the imitator and target is too high.



Provision a special LUN with the correct size to install the OS image. This LUN must be LUN 0 and will be used by the server to obtain the OS image. In addition,configure LUN masking so that the server has access to the LUN. This configuration is typically performed using the pWWN of the server:the corresponding vHBA's pWWN. The LUN masking procedure is specific to the storage array and is usually performed using the array's device manager orcommand-line interface (CLI).References:

QUESTION 134Which SCSI action returns a list of logical unit numbers to which additional commands may be issued?

A. Read CapacityB. Test Unit ReadC. Report LUNsD. ReadE. Inquiry



The REPORT LUNS command (see table 119) requests that the peripheral device logical unit inventory accessible to the I_T nexus be sent to the application client.The logical unit inventory is a list that shall include the logical unit numbers of all logical units having a PERIPHERAL QUALIFIER value of 000b. Logical unitnumbers for logical units with PERIPHERAL QUALIFIER values other than 000b and 011b may be included in the logical unit inventory. Logical unit numbers forlogical units with a PERIPHERAL QUALIFIER value of 011b shall not be included in the logical unit inventory

References:

QUESTION 135Which statement about the FCIP Tape Acceleration feature is true?

A. Cisco MDS SAN-OS provides only tape write acceleration.B. After receiving all the data, the host-side MDS FCIP Tape Acceleration-enabled switch proxies the successful completion of the SCSI WRITE operation.C. Cisco SAN-OS provides increased performance of data delivery to the remote FCIP connected tape drives by using UDP over the WAN.D. The FCIP Tape Acceleration feature can be used with multilink port channels if the port channels are constructed with a port channel protocol.

E. WRITE FILEMARKS operations are proxied by the host-side MDS FCIP Tape Acceleration- enabled switch.



Tapes are storage devices that store and retrieve user data sequentially. Cisco MDS NX-OS provides both tape write and read acceleration.Applications that access tape drives normally have only one SCSI WRITE or READ operation outstanding to it. This single command process limits the benefit ofthe tape acceleration feature when using an FCIP or FC tunnel over a long-distance WAN link. It impacts backup, restore, and restore performance because eachSCSI WRITE or READ operation does not complete until the host receives a good status response from the tape drive. The SCSI tape acceleration feature helpssolve this problem. It improves tape backup, archive, and restore operations by allowing faster data streaming between the host and tape drive over the WAN link.

In an example of tape acceleration for write operations, the backup server in the following figure issues write operations to a drive in the tape library. Acting as aproxy for the remote tape drives, the local Cisco MDS switch proxies a transfer ready to signal the host to start sending data. After receiving all the data, the localCisco MDS switch proxies the successful completion of the SCSI WRITE operation. This response allows the host to start the next SCSI WRITE operation. Thisproxy method results in more data being sent over the FCIP or Fibre Channel tunnel in the same time period compared to the time taken to send data withoutproxying. The proxy method improves the performance on WAN links.

References:

QUESTION 136Which two statements about FCIP Tape Acceleration are true? (Choose two.)

A. FCIP Tape Acceleration enables time stamp control on an FCIP interface.B. The Cisco MDS switch proxies a transfer ready to signal the host to start receiving data.C. FCIP Tape Acceleration uses TCP window management and a sliding window for flow control.D. FCIP Tape Acceleration reduces each I/O processing time by two RTT.E. FCIP Tape Acceleration only supports the read acceleration.

Correct Answer: BDSection: Cisco Storage NetworkingExplanation


Tapes are storage devices that store and retrieve user data sequentially. Cisco MDS NX-OS provides both tape write and read acceleration.

Applications that access tape drives normally have only one SCSI WRITE or READ operation outstanding to it. This single command process limits the benefit ofthe tape acceleration feature when using an FCIP tunnel over a long-distance WAN link. It impacts backup, restore, and restore performance because each SCSIWRITE or READ operation does not complete until the host receives a good status response from the tape drive. The FCIP tape acceleration feature helps solvethis problem. It improves tape backup, archive, and restore operations by allowing faster data streaming between the host and tape drive over the WAN link.

References:

QUESTION 137Which statement about the SAN Extension Tuner is true?

A. The SET configuration is persistent across reboots.B. The virtual N Ports that are created will register the FC4 features that are supported with the name server.C. Only SCSI read and write commands are implemented.D. SET cannot be used if iSCSI is enabled.E. The data pattern that is used for the data that is generated between the virtual N Ports can be an all- zero pattern or an all-ones pattern. No other data patterns

can be used.



Before tuning the SAN fabric, be aware of the following guidelines:

References:

QUESTION 138What is the benefit of the Priority-Based Flow control feature in Data Center Bridging?

A. provides the capability to manage a bursty, single traffic source on a multiprotocol linkB. enables bandwidth management between traffic types for multiprotocol linksC. addresses the problem of sustained congestion by moving corrective action to the network edgeD. allows autoexchange of Ethernet parameters between switches and endpoints

Correct Answer: ASection: Cisco Storage Networking

Explanation

Explanation/Reference:Explanation:Link sharing is critical to I/O consolidation. For link sharing to succeed, large bursts from one traffic type must not affect other traffic types, large queues of trafficfrom one traffic type must not starve other traffic types' resources, and optimization for one traffic type must not create high latency for small messages of othertraffic types. The Ethernet pause mechanism can be used to control the effects of one traffic type on another. PFC is an enhancement to the pause mechanism.PFC enables pause based on user priorities or classes of service. A physical link divided into eight virtual links (Figure 1) with PFC provides the capability to usepause on a single virtual link without affecting traffic on the other virtual links. Enabling pause based on user priority allows administrators to create lossless links fortraffic requiring no-drop service, such as Fibre Channel over Ethernet (FCoE), while retaining packet-drop congestion management for IP traffic.

The current Ethernet pause option stops all traffic on a link; essentially, it is a link pause for the entire link. However, PFC creates eight separate virtual links on thephysical link and allows any of these links to be paused and restarted independently. This approach enables the network to create a no-drop class of service for anindividual virtual link that can\ coexist with other traffic types on the same interface. PFC allows differentiated quality-of-service (QoS) policies for the eight uniquevirtual links. PFC also plays a primary role when used with an arbiter for intraswitch fabrics, linking ingress ports to egress port resources.

References:


Which statement about the interface that is connected to the NPV core switch is true?

A. The switch that connects to the hosts is identified in the design as an NPV edge switch, and the port that connects to the core is an NP port.B. The interface that is connected to the NPV switch will need to be configured as an N-Port.C. The interface that is connected to the NPV core will become an FP port.D. The link between the NPV core switch and edge will come up as an E port.



N Port virtualization (NPV) reduces the number of Fibre Channel domain IDs in SANs. Switches operating in the NPV mode do not join a fabric; rather, they passtraffic between NPV core switch links and end devices, which eliminates the domain IDs for these edge switches.

References:

QUESTION 140When an NP port becomes operational, the NP switch first logs itself into the core switch by sending a FLOGI request (using the port WWN of the NP port). Whatwill occur next?

A. The switch registers with the fabric name server.B. The switch will perform a PLOGI to the port login server.C. The switch will register parameters using FDISC.D. The NPV switch will perform a PLOGI using FDISC to register with the fabric name server.



After completing the FLOGI request, the switch registers itself with the fabric name server on the core switch (using the symbolic port name of the NP port and theIP address of the edge switch).References:


Which option describes the capability that the FCoE setting allows?

A. configures the FEX to send FCoE traffic only to this switchB. allows mapped VLAN-VSAN traffic to reach the FEXC. configures FEX for A-B SAN capabilitiesD. allows interface Ethernet 101/1/1 to exchange DCBX information



Although Ethernet traffic is dual homed between a FEX and a switch pair in an enhanced vPC topology, FCoE traffic must be single-homed to maintain SANisolation. Therefore, while enhanced vPC supports FCoE, a single homed FEX topology can be a better choice when SAN isolation and high FCoE bandwidth arerequired.

References:


What is the most likely reason that VSAN 88 is initializing?

A. VSAN 88 is not mapped to a FCoE VLAN.B. No host has logged into the VSAN.C. The VSAN is shut down.D. VSAN 88 is not part of the trunk yet.


Explanation/Reference:Explanation:So you can see that the host has logged in, and that the VSAN is up and ready to go!

References:

QUESTION 143What is the main function of the device-alias distribute command?

A. This command distributes the device alias configuration on the existing switch to all the other switches in the Cisco Fabric Services region.B. This command enables distribution and will send the configuration after a commit is executed.C. This command changes the distribution mode for device aliases.D. There is no such command.


Explanation/Reference:Explanation:Disabling and Enabling Device Alias DistributionTo disable or enable the device alias distribution, follow these steps:

CommandPurposeStep 1switch# config tswitch(config)#Enters configuration mode.Step 2switch(config)# no device-alias distributeDisables the distribution.switch(config)# device-alias distributeEnables the distribution (default).

References:

QUESTION 144When a switch that supports enhanced zoning joins a fabric, which SW_ILS command does it use to determine the enhanced zoning capabilities of the otherswitches in the fabric?

A. MRB. ESSC. ELPD. EFPE. none of the above

Correct Answer: CSection: Cisco Storage Networking

Explanation


If the device at the other end of the link is another switch, it will start a different initialization procedure. The switches will exchange data about their parameters andcapabilities (allowed classes of service, timeout values, supported protocols, etc.) by means of an SW ILS called "Exchange Link Parameters" (ELP) and anoptional one called "Exchange Switch Capabilities" (ESC). If the parameters are mutually accepted, switches proceed with further operations References:


Which three statements about the exhibit output related to Cisco Fabric Services are true? (Choose three.)

A. The lock can only be released only by the operations manager user on the 10.1.1.11 switch.B. The admin user on the 10.1.1.11 switch must clear the lock.C. The tacacs+ commit command is the only command that can be used to clear the lock.D. Any network-admin user can release the lock with the command clear tacacs+ session.E. The operations manager user has started, but not committed, a configuration change for the feature tacacs+ command.F. If committed, the changes are automatically saved to the startup configuration on all switches.

Correct Answer: DEFSection: Cisco Storage NetworkingExplanation


When you configure an application that uses the CFS infrastructure, that application starts a CFS session and locks the network. When a network is locked, thedevice software allows configuration changes to this application only from the device holding the lock. If you make configuration changes to the application fromanother device, the device issues a message to inform the user about the locked status. The configuration changes are held in a pending database by thatapplication. If you start a CFS session that requires a network lock but forget to end the session, an administrator can clear the session. If you lock a network at anytime, your user name is remembered across restarts and switchovers. If another user (on the same machine) tries to perform configuration tasks, that user'sattempts are rejected.References:


Given the displays from N5K-1 and N5K-2, what is the expected result if the zone mode enhanced vsan 1 command is issued on N5K-1?

A. The mode change will complete with a warning that the zone database from N5K-1 will be distributed throughout the fabric.B. The mode change will not complete due to the mismatch in the default zone mode.

C. The mode change prompts the administrator to override the default zone mismatch and make them the same.D. The mode change completes, and the default zone setting remains unchanged in N5K-1 and N5K-2.E. The default zone setting is set to deny in both switches because it is more secure.



When the zone moe enhanced vsan 1 command is issued on N5k-1, the mode change will complete with a warning that the zone database from N5k- has beendistributed throughout the fabric.

References:

QUESTION 147In DCBX feature negotiation, the switch and CNA exchange capability information and configuration values. Which three capabilities are supported in Cisco Nexus5000 Series Switches? (Choose three.)

A. PFCB. support for logical link up or downC. FCoED. multicastE. speedF. duplex

Correct Answer: ABCSection: Cisco Storage NetworkingExplanation


The switch and CNA exchange capability information and configuration values. The Cisco Nexus devices support the following capabilities:

References:

QUESTION 148

Which statement about the iSCSI initiator task tag is true?

A. The initiator assigns a task tag to each task it issues.B. The target assigns a task tag on behalf of the initiator.C. During the life of the task, this tag does not have to be unique.D. SCSI may not use this tag as part of the SCSI task identifier.



The initiator assigns a Task Id (or tag) to each SCSI task that it issues. (Recall that a task is a linked set of SCSI commands.) This Tag is an initiator-wide uniqueidentifier that can be used to uniquely identify the Task.

References:

QUESTION 149Which three management tools are available with DCNM-SAN Manager, Device Manager, and Performance Manager? (Choose three.)

A. Cisco Traffic AnalyzerB. Cisco Protocol AnalyzerC. Cisco Port Analyzer Adapter 2D. Cisco Prime LMSE. Cisco Prime NCSF. Cisco Prime NMS

Correct Answer: ABCSection: Cisco Storage NetworkingExplanation


You can use DCNM-SAN, Device Manager, and Performance Manager with these management tools:

References:


Which two options describe information that can be determined from this output? (Choose two.)

A. the uplink interface that is operating as the designated receiver for broadcast trafficB. the uplink interface that is operating as the designated sender for broadcast trafficC. the switching mode for which the Fabric Interconnect is configuredD. the uplink interface from which multicast traffic will be sourcedE. whether the last respond code was accepted or not



Cisco UCS Manager Release 2.0 enables the following functions in end-host mode:

References:


You have associated a newly created service profile to a blade. When you examine the configured boot order and actual boot order, they do not match. Which twostatements describe reasons for this mismatch? (Choose two.)

A. Having a single iSCSI boot target would prevent the profile from associating, and would generate a configuration error.B. The server must complete a POST cycle before Cisco UCS Manager will update this information.C. The blade needs to be reacknowledged.

D. The server is in the process of a firmware upgrade.E. There may be a configuration error in the service profile.

Correct Answer: BESection: Cisco Storage NetworkingExplanation


There are two possible scenarios for this problem. First the server might have to complete a Power on Self Test cycle before UCS can update the information. Theother scenario might be that there is a configuration error in the service profile.References:


You are configuring a UCS C-Series server for SAN boot over FCoE. The server fails to boot after the HBA option ROM loads. Which option describes the mostlikely solution for this problem?

A. Decrease the vNIC MTU.B. Set the vNIC Class of Service to a nonzero value.C. Set the default VLAN to FCOE VLAN.D. Set the vHBA Class of Service to 2.E. Uncheck the PXE Boot option.F. Disable Persistent LUN Binding.



To set up FC interfaces and FCoE VLAN interfaces:

References:


You are connecting a Cisco Nexus 2000 to an existing Cisco UCS Fabric Interconnect domain for C- Series integration. Which option describes the next CiscoNexus 2000 that will be discovered?

A. FEX0101B. FEX0003C. FEX0102D. FEX1000E. FEX1001

Correct Answer: BSection: Cisco Storage Networking

Explanation


References:



What is the most likely reason for the output that is shown in bold in the exhibit?

A. One or more of the VLANs that are assigned to the vNIC have been deleted from Cisco UCS Manager.B. One or more of the VLANs that are assigned to the vNIC are assigned to different disjoint Layer 2 uplinks.C. There are no Ethernet uplinks that are enabled.D. The host to which the vNIC belongs is currently powered off.E. The vNIC is currently active and uses the fabric failover peer vNIC.



If you remove all port or port channel interfaces from a VLAN, the VLAN returns to the default behavior and data traffic on that VLAN flows on all uplink ports andport channels. Depending upon the configuration in the Cisco UCS domain, this default behavior can cause Cisco UCS Manager to drop traffic for that VLAN. Toavoid this occurrence, we recommend that you either assign at least one interface to the VLAN or delete the VLAN.

References:


What is the most likely reason for the error?

A. There are not enough local hard drives to satisfy the local disk configuration policy.B. One of the resource pools is depleted (WWN, MAC, UUID).C. The destination blade is equipped with an M61KR-B adapter.D. The server is not equipped with adequate memory.E. A User Ack maintenance policy has been applied.



iSCSI boot is supported on the following Cisco UCS hardware:

Cisco UCS VIC 1225 Virtual Interface CardReferences:


You are setting up a service profile to iSCSI boot using a Cisco UCS VIC 1240. The service profile returns a configuration error when you attempt to associate it.

What is the problem, based on the exhibit?

A. The iSCSI adapter policy is not set.B. iSCSI boot will not work with the default VLAN.C. The default VLAN should not be set as native on the overlay vNIC.D. The MAC address assignment is invalid.



References:

QUESTION 157A Cisco switch has this configuration for a port channel connecting to an ESXi using dual NICs and is intended for use with an N1Kv.

Interface fastethernet 1/10Switchport mode trunkSwitchport trunk allowed vlan allChannel-group 10 mode onNo shut

Interface fastethernet 1/11Switchport mode trunkSwitchport trunk allowed vlan allChannel-group 10 mode onNo shut

Interface port-channel10Switchport mode trunkSwitchport allowed vlan allNo shut

Which Port Channel configuration must be used on the Nexus 1000v port-profile?

A. MAC pinningB. Cisco Discovery Protocol pinningC. Mode OnD. Mode ActiveE. No port channel configuration

Correct Answer: CSection: Cisco Data Center VirtualizationExplanation


When multiple uplinks are attached to the same subgroup, the upstream switch must be configured in a port channel, the links bundled together. The port channelmust also be configured with the channel- group auto mode on (active and passive modes use LACP).

References:

QUESTION 158What are the four vPath packet flow steps? (Choose four.)

A. perform flow lookupsB. intercept packets on service enabled portsC. run packets through the vPath flow managerD. classify the packets

E. flow manager emits an action for the packetsF. enforce the action determined by the flow manager

Correct Answer: BCEFSection: Cisco Data Center VirtualizationExplanation


vPath provides the forwarding plane abstraction and programmability required to implement the Layer 2 to Layer 7 network services such as segmentation firewalls,edge firewalls, load balancers, WAN optimization, and others. It is embedded in the Cisco Nexus 1000V Series switch Virtual Ethernet Module (VEM). It interceptsthe traffic whether external to the virtual machine or traffic from virtual machine to virtual machine and then redirects the traffic to the appropriate virtual servicenode (VSN) such as Cisco Virtual Security Gateway (VSG), Cisco ASA 1000V, Cisco Virtual Wide Area Application Services (vWAAS) for processing. vPath usesoverlay tunnels to steer the traffic to the virtual service node and the virtual service node can be either Layer 2 or Layer 3 adjacent.

The Cisco network virtual service (vService) is supported by the Cisco Nexus 1000V using the vPath. It provides trusted multitenant access and supports the VMmobility across physical servers for workload balancing, availability, or scale.

The basic functions of vPath includes traffic redirection to a virtual service node (VSN) and service chaining. Apart from the basic functions, vPath also includesadvanced functions such as traffic off load, accleration and others.

vPath steers traffic, whether external to the virtual machine or from a virtual machine to a virtual machine, to the virtual service node. Initial packet processingoccurs in the VSN for policy evaluation and enforcement. Once the policy decision is made, the virtual service node may off-load the policy enforcement ofremaining packets to vPath.References:

QUESTION 159Given the following configuration, what command can be used to determine the physical path that traffic will be sent out upon?

Port-profile type Ethernet name vm-dataSwitchport mode trunkSwitchport trunk allowed vlan 200-210Channel-group auto mode on mac-pinningState enabledVmware port-groupNo shut

Port-profile type vethernet name vlan-200Switchport mode accessSwitchport vlan 200State enabled

Vmware port-groupNo shut

A. module vem X execute vemcmd show trunkB. show module 3 internal pinningC. module vem X execute vemcmd show portD. show module vem mappingE. show interface vethX pinning



To verify a connection between two veth ports on a VEM, follow these steps:

Step 1 On the VSM, enter the show vlan command to view the state of the VLANs associated with the

port. If the VLAN associated with a port is not active, then the port may be down. In this case, you must create the VLAN and activate it.Step 2 To see the state of the port on the VSM, enter a show interface brief command.

Step 3 Enter the module vem module-number execute vemcmd show port command to display the

ports that are present on the VEM, their local interface indices, VLAN, type (physical or virtual), CBL state, port mode, and port name.The key things to look for in the output are:· State of the port.

· CBL.

· Mode.

· Attached device name.

· The LTL of the port you are trying to troubleshoot. It will help you identify the interface quickly in

other VEM commands where the interface name is not displayed. · Make sure the state of the port is up. If not, verify the configuration of the port on the VSM.

Step 4 To view the VLANs and their port lists on a particular VEM, use the module vem module-

number execute vemcmd show bd command:n1000V# module vem 5 execute vemcmd show bd

References:

QUESTION 160When using VSD, traffic flow goes from the virtual machine to which of these?

A. Upstream switchB. Virtual Supervisor ModuleC. VMware distributed switchD. VMware vSwitchE. Service virtual machine

Correct Answer: ESection: Cisco Data Center VirtualizationExplanation


A service VM (SVM) provides the specialized service like firewall, deep packet inspection (application aware networking), or monitoring. Each Service VM has threevirtual interfaces:InterfaceDescriptionManagementA regular interface that manages the SVMShould have Layer 2 or Layer 3 connectivity, depending on its use.

IncomingGuards the traffic coming into the VSDAny packet coming into the VSD must go through this interface.OutgoingGuards the traffic going out of the VSD.Any packet that originates in the VSD and goes out must go through the SVM and out through the outgoing interface.

References:

QUESTION 161The Cisco Nexus 1000V Series Switches are virtual machine access switches that are an intelligent software switch implementation for VMware vSphereenvironments running the Cisco NX-OS Software operating system. Together with the VMware ESX hypervisor, the Nexus 1000V supports Cisco VN-Link servervirtualization technology, which provides mobile virtual machine security and network policy for VMware View components, including the DHCP snooping feature.DHCP snooping is disabled on the Nexus 1000V by default.

When the DHCP snooping feature is enabled on the Nexus 1000V, what are the default trust settings for the vEthernet and uplink ports?

A. All vEthernet ports are trusted, and all Ethernet ports such as uplinks and port channels are trusted.B. All vEthernet ports are not trusted, and all Ethernet ports such as uplinks and port channels are not trusted.C. All vEthernet ports are trusted and all Ethernet ports such as uplinks and port channels are not trusted.D. All vEthernet ports are not trusted and all Ethernet ports such as uplinks and port channels are trusted.

Correct Answer: DSection: Cisco Data Center VirtualizationExplanation


DHCP snooping identifies ports as trusted or untrusted. When you enable DHCP snooping, by default all vEthernet ports are untrusted and all ethernet ports(uplinks), port channels, special vEthernet ports (used by other features, such as VSD, for their operation) are trusted.You can configure whether DHCP truststraffic sources.

In an enterprise network, a trusted source is a device that is under your administrative control. Any device beyond the firewall or outside the network is an untrustedsource. Generally, host ports are treated as untrusted sources.

In a service provider environment, any device that is not in the service provider network is an untrusted source (such as a customer switch). Host ports areuntrusted sources.

In the Cisco Nexus 1000V, you indicate that a source is trusted by configuring the trust state of its connecting interface. Uplink ports, as defined with the uplinkcapability on port profiles, are trusted and cannot be configured to be untrusted. This restriction prevents the uplink from being shut down for not conforming to rate

limits or DHCP responses.

You can also configure other interfaces as trusted if they connect to devices (such as switches or routers) inside your network or if the administrator is running theDHCP server in a VM. You usually do not configure host port interfaces as trusted.References:

QUESTION 162n1kv-l3(config)# show lacp offload statusCurrent Status : EnabledRunning Config Status : EnabledSaved Config Status : Disabled

What two facts does the output signify? (Choose two.)

A. LACP is enabled on the Nexus 1000v.B. LACP will be offloaded to the upstream switch.C. LACP will be negotiated to the VM.D. LACP is negotiated by the VSM.E. LACP is negotiated by the VEM in all instances.

Correct Answer: AESection: Cisco Data Center VirtualizationExplanation

Explanation/Reference:Explanation:Link Aggregation Control Protocol (LACP) lets you configure up to 16 interfaces into a port channel. A maximum of eight interfaces can be active, and a maximumof eight interfaces can be placed in a standby state. Figure 5-The following figure as well as function as individual links.

For the Cisco Nexus 1000V, LACP is enabled globally by default.

References:

QUESTION 163vPath is a critical component in the VNS architecture. Which two are functions of vPath? (Choose two.)

A. intelligent traffic steering to the VSGB. offloading the processing from the VSG to the VEMC. intelligent traffic steering to the VNMCD. offloading the processing from the VSG to the flow managerE. deep packet inspection

Correct Answer: ABSection: Cisco Data Center VirtualizationExplanation


Cisco vPath technology steers traffic, whether inbound or traveling from virtual machine to virtual machine, to the designated Cisco VSGs. A split-processing modelis applied in which initial packet processing occurs in the Cisco VSG for policy evaluation and enforcement. Subsequent policy enforcement for packets is offloadeddirectly to Cisco vPath. Cisco vPath provides:Intelligent traffic steering: Flow classification and redirection to associated Cisco VSGs Fast path offload: Policy enforcement of flows offloaded by Cisco VSG toCisco vPath Service chaining: Insertion of Cisco VSG along with other network services in the traffic path

References:

QUESTION 164Which port channel command is recommended for N1KV on Cisco UCS?

A. channel-group auto mode onB. channel-group auto mode activeC. channel-group auto mode on sub-group cdpD. channel-group auto mode on sub-group manualE. channel-group auto mode on mac-pinning

Correct Answer: ESection: Cisco Data Center VirtualizationExplanation


SUMMARY STEPS1. config t

2. port-profile [type {ethernet | vethernet}] name

3. channel-group auto mode on [sub-group {cdp | manual}] [mac-pinning]

4. show port-profile [brief | expand-interface | usage] [name profile-name]

5. copy running-config startup-config

DETAILED STEPS

CommandDescription

Step 1config t

Example:n1000v# config tn1000v(config)#Enters global configuration mode.Step 2port-profile [type {ethernet | vethernet}] name

Example:n1000v(config)# port-profile uplinkProfn1000v(config-port-prof)#Creates an Ethernet type port profile (the default) and enters port profile configuration mode for that port profile.· name--Specifies the port profile name, which can be up to 80 characters and must be unique for each

port profile on the Cisco Nexus 1000V.· type--An Ethernet type port profile can be used for physical ports, and in the vCenter Server, the

corresponding port group can be selected and assigned to physical ports (PNICs). Note If a port profile is configured as an Ethernet type, then it cannot be used toconfigure VMware

virtual ports.Note Once a port profile is created, you cannot change its type (Ethernet or vEthernet).

Step 3channel-group auto mode on [sub-group {cdp |manual}] [mac-pinning]

Example--CDP is configured on the upstream switches:n1000v(config-port-prof)# channel-group auto mode on sub-group cdp n1000v(config-port-prof)#

Example--CDP is not configured on the upstream switches:n1000v(config-port-prof)# channel-group auto mode on manual n1000v(config-port-prof)#

Example--Upstream switches do not support port channels:n1000v(config-port-prof)# channel-group auto mode on mac-pinning n1000v(config-port-prof)#

Creates a unique asymmetric port channel (also known as vPC-HM) and automatically assigns it when the port profile is assigned to the first interface.Each additional interface that belongs to the same module is added to the same port channel. In VMware environments, a different port channel is created for eachmodule.The following options are also defined:· mode--Sets the port channel mode toon (active and passive use LACP).

· sub-group--Identifies this channel group as asymmetric, or connected to more than one switch.

cdp--Specifies that CDP information is used to automatically create subgroups for managing the

traffic flow. manual--Specifies that subgroups are configured manually. This option is used if CDP is not

configured on the upstream switches.· mac-pinning--Specifies that Ethernet member ports are assigned to subgroups automatically, one

subgroup per member port. This option is used if the upstream switch does not support port channels.Step 4show port-profile [brief | expand-interface |usage] [name profile-name]

Example:n1000v(config-port-prof)# show port-profile name AccessProf (Optional) Displays the configuration for verification.Step 5copy running-config startup-config

Example:n1000v(config-port-prof)# copy running-config startup-config (Optional) Saves the running configuration persistently through reboots and restarts by copying it to thestartup configuration.

References:

QUESTION 165How many VSM modes are there in a Cisco Nexus 1000V environment?

A. 0

B. 1C. 2D. 3E. 4F. 5



VSM and VEM no longer need to share VLAN, and can even be multiple Layer 3 hops apart. Compared to Layer 2 mode, the three VLANs are used as follows.

References:

QUESTION 166A VSM is actually a virtual machine that requires how many vNICs for functioning?

A. 0B. 1C. 2D. 3E. 4



VSM is a virtual machine and require 3 vNICs which should be Intel 1000e driver.References:

QUESTION 167Which three statements about the DHCP snooping feature on Cisco Nexus switches are true? (Choose three.)

A. DHCP snooping commands are not available until the feature is enabled with the feature dhcpsnooping command.B. When you enable the DHCP snooping feature, the switch begins building and maintaining the DHCP snooping binding database.C. The switch will not validate DHCP messages received or use the DHCP snooping binding database to validate subsequent requests from untrusted hosts until

DHCP snooping is enabled globally and for each specific VLAN.D. Globally disabling DHCP snooping removes all DHCP snooping configuration on the switch.E. Globally disabling DHCP snooping does not remove any DHCP snooping configuration or the configuration of other features that are dependent upon the DHCP

snooping feature.

Correct Answer: BCESection: Cisco Data Center VirtualizationExplanation


The DHCP snooping feature is disabled by default. When the DHCP snooping feature is disabled, you cannot configure it or any of the featuresthat depend onDHCPsnooping. The commandsto configure DHCPsnooping and its dependent features are unavailable when DHCP snooping is disabled.

When you enable the DHCPsnooping feature, the switch begins building and maintaining the DHCPsnooping binding database. Features dependent on the DHCPsnooping binding database can now make use of it and can therefore also be configured.

Enabling the DHCPsnooping feature does not globally enable it. You must separately enable DHCPsnooping globally.

Disabling the DHCP snooping feature removes all DHCP snooping configuration from the switch. If you want to disable DHCP snooping and preserve theconfiguration, globally disable DHCP snooping but do not disable the DHCP snooping feature.References:

QUESTION 168DHCP snooping on Cisco Nexus 1000V Series Switches acts like a firewall between untrusted hosts and trusted DHCP servers by doing which of these? (Choosethree.)

A. validates DHCP messages received from untrusted sources and filters out invalid response messages from DHCP serversB. intercepts all ARP requests and responses on untrusted portsC. builds and maintains the DHCP snooping binding database, which contains information about untrusted hosts with leased IP addressesD. uses the DHCP snooping binding database to validate subsequent requests from untrusted hostsE. limits IP traffic on an interface to only those sources that have an IP-MAC address binding table entry or static IP source entry

Correct Answer: ACDSection: Cisco Data Center Virtualization

Explanation


DHCP snooping acts like a firewall between untrusted hosts and trusted DHCP servers. DHCP snooping performs the following activities:

References:

QUESTION 169What is the use of ERSPAN on N1kv?

A. Send monitored traffic to a VLANB. Send monitored traffic to a remote VEM over L2C. Receive monitored traffic on a vEthernet interfaceD. Send monitored traffic to an IP destination



The destination probe is connected to Nexus 7000. We'd want monitored traffic originating from Nexus 1000v, to be forwarded to the probe.

The destination 10.2.0.1 specified by ERSPAN session (on N1kv) has an ARP entry in vlan 3000. There is also a corresponding static MAC address entry pointingto the port which the probe is connected. As a result, the ERSPAN traffic destined for 10.2.0.1 will be forwarded to the probe.

interface Vlan2000...ip address 10.1.0.2/24hsrp 2000ip 10.1.0.1

interface Vlan3001...ip address 10.2.0.1/24ip arp 10.2.0.88 00AA.BBCC.DD66

interface Ethernet2/2

switchportswitchport access vlan 3000no shutdown

mac address-table static 00AA.BBCC.DD66 vlan 3000 interface Ethernet2/2

References:

QUESTION 170Given the following configuration:

port-profile type ethernet DATA-UPLINKvmware port-groupswitchport trunk allowed vlan 1-3967,4048-4093channel-group auto mode onno shutdownstate enabled

port-profile type ethernet MGMT-UPLINKvmware port-groupswitchport trunk allowed vlan 10-12channel-group auto mode onno shutdownstate enabled

VEMs are seen to be joining and then are lost from the Cisco VSM. How would you resolve this issue?

A. Remove second NIC from each port profileB. Remove VEM from VSM (no vem X), remove NICs, and reinsertC. Ensure that VLANs on uplink profiles are not overlappingD. Reinstall VEME. Issue the command "module vem X execute vemcmd set pinning module vsm 1"


Explanation/Reference:Explanation:UCS is only a layer 2 device with no concept of VDC (or even vrfs from a usable perspective) as such VLAN 10 is VLAN 10 globally and should only be given to asingle tenant, Tenants could of course share a common VLAN and be seperated by a context based gateway like VSG which can filter on much more than just IP's

for example all VMs prefixed by TenantAxxxxx cannot talk to any VMs prefixed by TenantB

References:

QUESTION 171The network administrator is adding a new N1Kv to the vCenter, however, the administrator does not see the new switch under the networking tab of vCenter. Theadministrator issues the following command on the VSM to troubleshoot:

VSM# show svs connectionsconnection VC:ip address: 10.10.10.30remote port: 80protocol: vmware-vim httpscertificatE. defaultdatacenter namE. DC1DVS uuiD. 67 32 30 50 a6 d2 49 64-9e 1c 5f 49 e3 af 55 99 config status: Disabledoperational status: Disconnectedsync status: -version: -

When attempting to fix the issue, the following error is seen:

VSM-PRI-188# confVSM-PRI-188(config)# svs connection VCVSM-PRI-188(config-svs-conn)# connectERROR: [VMWARE-VIM] Extension key was not registered before its use

What is the cause of the error?

A. Missing control VLAN in VSM configurationB. Missing packet VLAN in VSM configurationC. VSM has no network connection to vCenterD. VSM extension key is not installed on vCenterE. vCenter extension key is not installed on VSM



During the installation of VSM we should enable HTTP server. Why? Because we need to register something called "Extension Key" as a vSphere plugin. This XMLfile based key contains, among some unimportant things, a certificate required for encrypted communication between vCenter and VSM. This XML file can bedownloaded from HTTP site: https://VSM-Mgmt-Interface-IPAddress

References:


An ESX host is added to a distributed switch but is never seen as a module in VSM. Given below configuration from VSM, what is the cause of this issue? (Choosetwo.)

VSM# show svs domainSVS domain config:Domain iD. 111Control vlan: 500Packet vlan: 501L2/L3 Control modE. L2L3 control interfacE. NAStatus: Config push to VC successful.

A. Missing VLAN 500 on Switch1 trunk to Switch2B. Missing VLAN 501 on Switch1 trunk to Switch 2C. VLAN 500 is not created on Switch2D. Interface VLAN 500 is missing on Switch1E. Interface VLAN 501 is missing on Switch1F. VLAN 111 is missing on all switches

Correct Answer: ACSection: Cisco Data Center VirtualizationExplanation


QUESTION 173When creating a QoS policy dialog box in Cisco UCSM, which four fields can be modified? (Choose four.)

A. nameB. best-effortC. burstD. rateE. host control

Correct Answer: ACDESection: Cisco Data Center VirtualizationExplanation


NameDescriptionName fieldThe name of the policy.This name can be between 1 and 16 alphanumeric characters. You cannot use spaces or any special characters other than - (hyphen), _ (underscore), : (colon),and . (period), and you cannot change this name after the object has been saved.Priority drop-down listThe priority assigned to this QoS definition. This can be one of the following:`Burst fieldThe normal burst size for servers which use this policy. This field determines how large traffic bursts can be before some traffic is considered to exceed the ratelimit. The default is 10240. The minimum value is 0, and the maximum value is 65535.This setting is not applicable to all adapters.Rate fieldThe expected average rate of traffic. Traffic that falls under this rate will always conform. The default is line-rate, which equals a value of 0 and specifies no ratelimiting. The minimum value is 8, and the maximum value is 40,000,000.The granularity for rate limiting on a Cisco UCS M81KR Virtual Interface Card adapter is 1Mbps. These adapters treat the requested rate as a "not-to-exceed" rate.Therefore, a value of 4.5Mbps is interpreted as 4Mbps. Any requested rate of more than 0 and less than 1Mbps is interpreted as 1Mbps, which is the lowest

supported hardware rate limit.Rate limiting is not applicable to all adapters. For example, this setting is not supported on the Cisco UCS M82-8P Virtual Interface Card.Host Control fieldWhether Cisco UCS controls the class of service (CoS). This can be one of the following:This setting is not applicable to all adapters.

References:

QUESTION 174Which statement best describes the Cisco Nexus 1000V Series?

A. The Cisco Nexus 1000V Series provides Layer 2 switching, advanced networking functions, and a common network management model in a virtualized serverenvironment.

B. The Cisco Nexus 1000V Series provides Layer 3 switching, advanced networking functions, and a common network management model in a virtualized serverenvironment.

C. The Cisco Nexus 1000V Series provides Layer 2 and Layer 3 switching, advanced networking functions, and a common network management model in avirtualized server environment.

D. The Cisco Nexus 1000V Series provides Layer 2 and Layer 3 switching but does not provide advanced networking functions or a common network managementmodel in a virtualized server environment.

Correct Answer: ASection: Cisco Data Center VirtualizationExplanation


The Cisco Nexus 1000V Series provides Layer 2 switching, advanced networking functions, and a common network management model in a virtualized serverenvironment by replacing the virtual switch in VMware vSphere. The Cisco Nexus 1000V Series manages a data center as defined in VMware vCenter Server. Eachserver in the data center is represented as a line card in the Cisco Nexus 1000V Series Switch and can be managed as if it were a line card in a physical Ciscoswitch.

References:

QUESTION 175Which two statements about Cisco Nexus 1000V Series Switches are correct? (Choose two.)

A. When VSM interfaces are created for a virtual machine, the VMware vSwitch port-group configuration is used initially, which requires the creation of a port-groupname for these interfaces and an appropriate VLAN. The simplest configuration is to create a single port group (for example, VSM- Interfaces), that includes allthe interfaces that use this port group and the same VLAN.

B. The mgmt0 interface on the VSM does not necessarily require its own VLAN. In fact, you can use the same VLAN to which the VMware vCenter Server belongs.The VSM management VLAN is really no different from any other virtual machine data VLAN. Alternatively, network administrators can designate a specialVLAN for network device management.

C. Always deploy the Cisco Nexus 1000V Series VSM in pairs, with one VSM that is defined as the primary module and the other that is defined as the secondarymodule on two separate hosts.

D. The service console is a critical interface that resides on every logical server.

Correct Answer: BCSection: Cisco Data Center VirtualizationExplanation


Always deploy the Cisco Nexus 1000V Series VSM in pairs, with one VSM defined as the primary module and the other defined as the secondary module on twoseparate hosts. The two VSMs will run as an active-standby pair similar to supervisors in a physical chassis, offering high-availability switch management. TheCisco Nexus 1000V Series VSM is not in the data path, so even if both VSMs are powered down, the VEM will not be affected and will continue to forward traffic.

Each VSM in an active-standby pair is required to run on a separate VMware ESX host. This requirement helps ensure high availability even if one of the VMwareESX servers fails. You can also use the anti-affinity option in VMware ESX to help keep the VSMs on different servers. This option does not prevent the VSMs fromending up on the same server; anti-affinity prevents VMware Distributed Resource Scheduler (DRS) from moving the virtual machines to new machines. If theVSMs end up on the same host due to VMware High Availability, VMware DRS will post a five-star recommendation to move one of the VSMs.

References:

QUESTION 176Which two methods can be used to install the Cisco Nexus 1000V VEM on an ESXi host? (Choose two.)

A. Installation using VMware Update ManagerB. Installation via the esxupdate/esxcli command with a tar.gz fileC. Installation via the esxupdate/esxcli command with a .vib fileD. Copying VEM executable files to ESXi host /binE. Installation from the VSM using the vem install host commandF. Installation from the VSM using FTP and the vem auto-install command



Explanation:

SourceDescriptionVUMIf you are using VMware Update Manager (VUM), then VUM obtains the VEM software from the VSM through the web server hosted on the VSM. Then VUMinstalls the VEM software either during the VSM Add Host operation on the Cisco Nexus 1000V DVS, or after the VEM software is updated on the VSM.1Cisco VEM CDCopy the file containing the VEM software from the Cisco Nexus 1000V CD to the host where you installed the vCLI or to the ESX 4.0 host /tmp directory.VSMCopy the file containing the VEM software from the following url after the VSM has been installed as a VM:http://<VSM-IP-ADDR>/VMwareDownload the VEM software from the VMware web site.Click Download Vmware vSphere 4 Enterprise Plus > Download CiscoDownload the VEM software from the Cisco web site.

References:

QUESTION 177Which two methods can be used in communications between the Cisco Nexus 1000V VEM and the VSM? (Choose two.)

A. routed TCP traffic using HTTPSB. routed UDP traffic using port 4785C. routed UDP traffic using port 7845D. Layer 2 direct traffic using MAC addressesE. Layer 2 broadcast trafficF. routed TCP traffic using port 4785G. routed TCP traffic using port 7845

Correct Answer: BDSection: Cisco Data Center VirtualizationExplanation


The VSM utilizes three network interfaces that provide separate functions. They are the following:Network Adapter 1 - control interface: This interface is used to communicate to and from the VSM to VEM. The communication between the VSM and VEM is donethrough Layer 2 as the default, which requires the VSM Control Interface and also that all of the VEMs are on the same Layer 2 domain (same VLAN). Layer3

support is available as well.Network Adapter 2 - management interface: This interface is used for administrative connectivity to the VSM, which is the management 0 interface. Layer 3 supportis available on this interface for VSM to VEM communication and is the recommended interface to be used. Network Adapter 3 - packet interface: This interface isused for the Cisco Nexus 1000V protocols, such as Cisco Discovery Protocol (CDP) and multicast traffic. Communication on this interface occurs only betweenVSM and VEM.References:


An administrator is setting up the VSM and VEM in Layer 3 mode. The administrator adds a host to the distributed switch in VMware, but does not see the modulejoin the VSM. Given the configuration in the exhibit, which three configuration items must be included in the configuration? (Choose three.)

A. The vEthernet Port Profile parameter must be set to Capability I3control.B. The vEthernet Port Profile parameter must be set to VSM l3control.C. The Ethernet Port Profile parameter must be set to System VLAN 1400.D. The Ethernet Port Profile parameter must be set to VLAN 1400 in the allowed trunk.E. The Ethernet Port Profile parameter must be set to Capability l3control.F. The vEthernet Port Profile parameter must be set to Mode Trunk.G. The vEthernet Port Profile parameter must be set to VEM l3control.

Correct Answer: ACDSection: Cisco Data Center VirtualizationExplanation


attachment suppress interfaceDisplays attachment suppress interfaces.capabilityDisplays switch capabilities including the supported services and subservices.notification intervalDisplays the notification intervals of the supported services.statisticsDisplays the NMSP statistics information.connectionDisplays the message counters on each connection.summaryDisplays the global counters.statusDisplays information about the NMSP connections.subscriptionDisplays the subscription information on each NMSP connection.detailDisplays all services and subservices subscribed on each connection.summaryDisplays all services subscribed on each connection.

References:


An administrator is setting up the VSM and VEM in Layer 3 mode. The administrator adds a host to the distributed switch in VMware, but does not see the modulejoin the VSM. Given the configuration in the exhibit, which configuration needs to be included?

A. ip route 0.0.0.0 0.0.0.0 10.10.10.1

B. vrf context controlip route 0.0.0.0 0.0.0.0 10.10.10.1C. vrf context managementip route 0.0.0.0 0.0.0.0 10.10.10.1D. ip route vrf management 0.0.0.0 0.0.0.0 10.10.10.1


Explanation/Reference:Explanation:You have to include ip route 0.0.0.0 0.0.0.0 10.10.10.1 to see the module join the VSM. This IP route specifies the IP addresses needed for the module join withVSM References:

QUESTION 180Where can port profiles be created for the Cisco Nexus 1000V?

A. on the VSM onlyB. on vCenter onlyC. on VSM and vCenterD. on VSM and VEME. on VSM, VEM, and vCenter



Before beginning this procedure, you must know or do the following:· You are logged in to the CLI in EXEC mode.

· You know which users or groups should have access to the role you are creating.

· You have already created the users and groups to be assigned to this role in vCenter and have access

to the Cisco Nexus 1000V DVS folder where the VSM resides. See the "Defining DVS Access in vSphere Client" procedure.· You have enabled the port profile role feature using the "Enabling the Port Profile Role Feature"

procedure.· You have identified the characteristics needed for this role:

role name

role description

users to assign

groups to assign

port profile to assign

SUMMARY STEPS1. config t

2. port-profile-role role-name

3. (Optional) description role-description

4. (Optional) show port profile role users

5. (Optional) user user-name

(Optional) group group-name6. exit

7. port-profile [type {ethernet | vethernet}] profile-name

8. assign port-profile-role role-name

9. (Optional) show port-profile-role [name role-name]

10. copy running-config startup-config

References:

QUESTION 181Where can port profiles be applied to a virtual machine?

A. on the VSM onlyB. on vCenter onlyC. on VSM and vCenterD. on VSM and VEME. on VSM, VEM, and vCenter

Correct Answer: BSection: Cisco Data Center VirtualizationExplanation


The port group is updated in vCenter Server and the user or group assigned to this role is granted access. The user or group can assign the port group to a vNIC ina virtual machine or vSWIF or vMKNIC on a host.

References:

QUESTION 182The Cisco Nexus 1000V Series implementation has two main components. Which two components together make up the Cisco Nexus 1000V Series Switch?(Choose two.)

A. virtual supervisor moduleB. virtual Ethernet moduleC. virtual machine NICsD. virtual machine kernel NICs

Correct Answer: ABSection: Cisco Data Center VirtualizationExplanation


The Cisco Nexus 1000V Series provides Layer 2 switching, advanced networking functions, and a common network management model in a virtualized serverenvironment by replacing the virtual switch in VMware vSphere. The Cisco Nexus 1000V Series manages a data center as defined in VMware vCenter Server. Eachserver in the data center is represented as a line card in the Cisco Nexus 1000V Series Switch and can be managed as if it were a line card in a physical Ciscoswitch. The Cisco Nexus 1000V Series implementation has two main components:Virtual supervisor module (VSM)Virtual Ethernet module (VEM)These two components together make up the Cisco Nexus 1000V Series Switch, with the VSM providing the management plane and the VEM providing the dataplane

References:


A port profile is created in the VSM, but it is not seen in vCenter and cannot be assigned to a virtual machine. Given the configuration in the exhibit, which VSMcommand will resolve this issue?

A. vmware port-group

B. vmware port-activeC. profile-activeD. port-group activeE. shutdown / no shutdown



StateBehaviorDisabled (the default)When disabled, a port profile behaves as follows:· Its configuration is not applied to assigned ports.

· If exporting policies to a VMware port group, the port group is not created on the vCenter Server.

EnabledWhen enabled, a port profile behaves as follows:· Its configuration is applied to assigned ports.

· If configured with the VMware port-group attribute, the port group is created on the vCenter Server.

References:

QUESTION 184Which two statements about dynamic port binding are true? (Choose two.)

A. The port is connected when the VM is powered on and disconnected when the VM is powered off.B. The port is created when the VM is powered on and destroyed when the VM is powered off.C. The max-port limits are enforced.D. The max-port limits are not enforced.

E. The port is always connected.



Port-binding dynamic (specifies dynamic port binding. the port is connected when the vm is powered on and disconnected when the vm is powered off. max-portlimits are enforced. the default is static port binding.)References:


The network administrator is adding a new Cisco Nexus 1000V Switch to vCenter, but does not see the new switch under the vCenter networking tab. Theadministrator issues the command that is shown in the exhibit on VSM to troubleshoot this problem. When the administrator attempts to fix the issue, the error that

is shown in the exhibit is seen. Which option describes the most correct cause of this error?

A. There is a missing control VLAN in the VSM configuration.B. There is a missing packet VLAN in the VSM configuration.C. VSM has no network connection to vCenter.D. The VSM extension key is not installed on vCenter.E. The vCenter extension key is not installed on VSM.



The VSM uses the extension key when communicating with the vCenter Server. Each VSM has its own unique extension key, such asCisco_Nexus_1000V_32943215

Use the show vmware vc extension-key command to find the extension key of the VSM. It is also listed in the .xml file.

The extension key registered on the vCenter Server can be found through the MOB.

The same extension key cannot be used to create more than one DVS on the vCenter Server.

References:

QUESTION 186Which two items have an impact on the maximum number of virtual interfaces that can be created on a virtual interface card? (Choose two.)

A. number of blades in the chassisB. number of acknowledged links between the Fabric Interconnect and the I/O moduleC. number of connected uplinksD. number of Fabric Interconnect port ASICs used by uplinksE. number of Fabric InterconnectsF. number of VIC

Correct Answer: BDSection: Cisco Data Center VirtualizationExplanation


When you configure Set Startup Version Only for an I/O module, the I/O module is rebooted when the fabric interconnect in its data path is rebooted. If you do notconfigure Set Startup Version Only for an I/O module, the I/O module reboots and disrupts traffic. In addition, if Cisco UCS Manager detects a protocol and firmwareversion mismatch between the fabric interconnect and the I/O module, Cisco UCS Manager automatically updates the I/O module with the firmware version thatmatches the firmware in the fabric interconnect and then activates the firmware and reboots the I/O module again.References:

QUESTION 187Which of the following is an advanced networking function performed by VEM?

A. QOS.B. Snooping.C. VSAN creation.D. VLAN pruning.



The Cisco Nexus 1000V Series VEM runs as part of the VMware ESX or ESXi kernel and replaces the VMware virtual switch (vSwitch). This level of integrationhelps ensure that the Cisco Nexus 1000V Series is fully aware of all server virtualization events, such as VMware vMotion and Distributed Resource Scheduler(DRS). The VEM takes configuration information from the VSM and provides advanced networking functions:quality of service (QoS), security features, and monitoring features.

References:



Which three statements about the exhibit are true? (Choose three.)

A. The differentiating characteristic of the Cisco Nexus 1000V Series is that it does not run Spanning Tree Protocol. This characteristic may seem to be asignificant departure from other Ethernet switches, which might potentially cause catastrophic network loops. However, in reality, the Cisco Nexus 1000V Seriesimplements a simple and effective loop-prevention strategy that does not require Spanning Tree Protocol.

B. Because the Cisco Nexus 1000V Series does not participate in Spanning Tree Protocol, it does not respond to BPDU packets, nor does it generate them. BPDUpackets that are received by Cisco Nexus 1000V Series Switches are dropped.

C. The Cisco Nexus 1000V Series uses a simple technique to prevent loops. Like a physical Ethernet switch, the Cisco Nexus 1000V Series Switch performssource and destination MAC address lookups to make forwarding decisions. The VEM applies loop-prevention logic to every incoming packet on Ethernetinterfaces.

D. The Cisco Nexus 1000V Series uses a simple technique to prevent loops. Like any logical Ethernet switch, the Cisco Nexus 1000V Series Switch performssource and destination MAC address lookups to make forwarding decisions. The VEM applies loop-prevention logic to every incoming packet on Ethernetinterfaces.

E. Because the Cisco Nexus 1000V Series participates in Spanning Tree Protocol, it responds to BPDU packets, and it generate them. BPDU packets that arereceived by Cisco Nexus 1000V Series Switches are dropped.

Correct Answer: ABCSection: Cisco Data Center VirtualizationExplanation

Explanation/Reference:Explanation:Another differentiating characteristic of the Cisco Nexus 1000V Series is that it does not run Spanning Tree Protocol. Although this may seem to be a significantdeparture from other Ethernet switches, potentially causing catastrophic network loops, in reality the Cisco Nexus 1000V Series implements a simple and effectiveloop-prevention strategy that does not require Spanning Tree Protocol.

Because the Cisco Nexus 1000V Series does not participate in Spanning Tree Protocol, it does not respond to Bridge Protocol Data Unit (BPDU) packets, nor doesit generate them. BPDU packets that are received by Cisco Nexus 1000V Series Switches are dropped.

The Cisco Nexus 1000V Series uses a simple technique to prevent loops. Like a physical Ethernet switch, the Cisco Nexus 1000V Series Switch performs sourceand destination MAC address lookups to make forwarding decisions. The VEM applies loop-prevention logic to every incoming packet on Ethernet interfaces. Thislogic is used to identify potential loops. Every ingress packet on a physical Ethernet interface is inspected to help ensure that the destination MAC address isinternal to the VEM. If the source MAC address is internal to the VEM, the Cisco Nexus 1000V Series Switch will drop the packet. If the destination MAC address isexternal, the switch will drop the packet, preventing a loop back to the physical network.

References:

QUESTION 189What is the use of NPV in Cisco Unified Computing Systems? (Choose two.)

A. Compatibility with third-party Fibre Channel switchesB. Faster throughput

C. Reduce domain IDs in a Fibre Channel environmentD. Support for increased number of VSANsE. Support for SAN port channels

Correct Answer: ACSection: Cisco Unified Computing SystemExplanation


N Port virtualization (NPV) reduces the number of Fibre Channel domain IDs in SANs. Switches operating in the NPV mode do not join a fabric; rather, they passtraffic between NPV core switch links and end devices, which eliminates the domain IDs for these edge switches.

References:

QUESTION 190Which option describes the default roles available to RBAC on Cisco Nexus switches?

A. admin, operator, network-admin, and network-operatorB. admin, read-only, network-admin, and network-operatorC. vdc-admin, vdc-operator, network-admin, and network-operatorD. vdc-admin, vdc-operator, network-admin, and network-operator (for Nexus 7000) and network- admin and network-operator (for other Nexus switches)E. admin and read-only

Correct Answer: ASection: Cisco Unified Computing SystemExplanation


User roles contain rules that define the operations allowed for the user who is assigned the role. Each user role can contain multiple rules and each user can havemultiple roles. For example, if role1 allows access only to configuration operations, and role2 allows access only to debug operations, then users who belong to bothrole1 and role2 can access configuration and debug operations. You can also limit access to specific VSANs, VLANs and interfaces.The Nexus 5000 Series switch provides the following default user roles:

References:

QUESTION 191

Which command will allow you to display the configured QoS group and the ingress buffer allocated to each QoS group?

A. show interface priority-flow-controlB. show interface queuingC. show queuing interfaceD. show policy-map system type queuingE. show policy-map interface ethernet <x/y> type queuing

Correct Answer: CSection: Cisco Unified Computing SystemExplanation


The show queuing interface command displays the configured qos-group and the ingress buffer allocated for each qos-group.References:

QUESTION 192Which three are valid methods to monitor and trend SAN port channels with DCNM? (Choose three.)

A. use summary view in the device managerB. from the DCNM-SAN client, view ISLs in real time from the Performance drop-down listC. for each port channel, select Monitor ContinuallyD. configure traps for each port channel to utilize RMONE. set up flows with the DCNM-SAN client and use the Performance Manager web client for performance collections

Correct Answer: ABESection: Cisco Unified Computing SystemExplanation


Device Manager provides two views: Device View and Summary View. Use Summary View to monitor interfaces on the switch. Use Device View to perform switch-level configurations including the following configurations:

DCNM-SAN Web Client

With DCNM-SAN Web Client you can monitor Cisco MDS switch events, performance, and inventory from a remote location using a web browser.

Performance Manager

The primary purpose of DCNM-SAN is to manage the network. A key management capability is network performance monitoring. Performance Manager gathersnetwork device statistics historically and provides this information graphically using a web browser. Performance Manager presents recent statistics in detail andolder statistics in summary. Performance Manager also integrates with external tools such as Cisco Traffic Analyzer.Performance Manager has three operational stages:

Performance Manager can collect statistics for ISLs, hosts, storage elements, and configured flows. Flows are defined based on a host-to-storage (or storage-to-host) link. Performance Manager gathers statistics from across the fabric based on collection configuration files. These files determine which SAN elements andSAN links Performance Manager gathers statistics for. Based on this configuration, Performance Manager communicates with the appropriate devices (switches,hosts, or storage elements) and collects the appropriate information at fixed five-minute intervals.References:

QUESTION 193Why is a Cisco UCS B250 server unable to support 16-GB DIMMs?

A. Dual-rank DIMMs are not supported.B. 16-GB DIMMs are too slow.C. The largest DIMM an Intel 55xx or 56xx CPU can address is 32 GB.D. The memory bus would be too long.E. The blade would run too hot.



Cisco UCS B250 doesn't support 16 GB DIMMs because the largest DIMM an Intel CPU can support is 32 GB.References:

QUESTION 194On a Cisco UCS B250 M2 server that is fully populated with 1333-MHz memory and an E5640 CPU, what is the fastest speed the memory can run at?

A. 800 MHzB. 900 MHzC. 1066 MHz

D. 1333 MHzE. 1666 MHz



References:

QUESTION 195Which two servers support memory extension technology and give list? (Choose two.)

A. B200B. C210C. B250

D. C260E. C460

Correct Answer: CDSection: Cisco Unified Computing SystemExplanation


Cisco® Extended Memory Technology is available on the Cisco UCS B250 M1 and UCS B250 M2 Extended Memory Blade Servers and the Cisco UCS C250 M1and UCS 250 M2 Extended Memory Rack-Mount Servers. The technology maps four physically distinct DIMMs to a single logical DIMM as seen on the processor'smemory channel (Figure 1). This mapping supports extended memory servers with 48 DIMM slots in which traditional servers and blade systems using the sameprocessors can have only up to 12 slots at full performance, or 18 slots at reduced performance.

References:

QUESTION 196Which two statements about NPIV are true? (Choose two.)

A. After enabling NPIV, switch interfaces can only be placed into NP, F, or SD modes of operation.B. NPV devices log in to NPIV devices.C. NPIV requires the Enterprise License Package.D. NPIV is supported on the Cisco MDS, N7K, and N5K families of switches.E. A director class switch should not be placed into NPIV mode.

Correct Answer: BDSection: Cisco Unified Computing SystemExplanation


N port virtualization (NPV) reduces the number of Fibre Channel domain IDs in SANs. Switches operating in the NPV mode do not join a fabric. They pass trafficbetween NPV core switch links and end devices, which eliminates the domain IDs for these edge switches.

NPV is supported by the following Cisco MDS 9000 switches and Cisco Nexus 5000 Series switches only:

References:

QUESTION 197On a Cisco UCS B250 server, how many physical DIMM slots make up one logical DIMM?

A. 2B. 3C. 4D. 6E. 12



References:

QUESTION 198Which statement about NPIV is true?

A. NPIV provides a means to assign multiple Fibre Channel IDs to a single N-port.B. NPIV can be enabled on a per-VSAN basis.C. NPIV requires a "write erase" and then reload the switch in order to come up into NPIV mode.D. NPIV is a Cisco proprietary feature and as such works only between two Cisco switches.E. NPIV must not be enabled on a switch that is also running N-port virtualization.


Explanation/Reference:Explanation:N port identifier virtualization (NPIV) provides a means to assign multiple FC IDs to a single N port. This feature allows multiple applications on the N port to usedifferent identifiers and allows access control, zoning, and port security to be implemented at the application level.

References:

QUESTION 199When it comes to creating pooled WWN objects, it is important to understand that a Cisco UCS WWN pool can include only WWNNs or WWPNs from which valueof ranges?

A. from 10:00:00:00:00:00:00:00 to 10:FF:FF:FF:FF:FF:FF:FFB. from 20:00:00:00:00:00:00:00 to 20:FF:FF:FF:FF:FF:FF:FFC. from 30:00:00:00:00:00:00:00 to 30:FF:FF:FF:FF:FF:FF:FFD. from 40:00:00:00:00:00:00:00 to 40:FF:FF:FF:FF:FF:FF:FF

Correct Answer: BSection: Cisco Unified Computing SystemExplanation


A WWN pool can include only WWNNs or WWPNs in the ranges from 20:00:00:00:00:00:00:00 to20:FF:FF:FF:FF:FF:FF:FF or from 50:00:00:00:00:00:00:00 to 5F:FF:FF:FF:FF:FF:FF:FF. All other WWN ranges are reserved. To ensure the uniqueness of theCisco UCS WWNNs and WWPNs in the SAN fabric, we recommend that you use the following WWN prefix for all blocks in a pool:20:00:00:25:B5:XX:XX:XX

References:

QUESTION 200Cisco UCS Manager provides the ability to manage power utilization to the blades. Which two statements about UCS Manager power policies are true? (Choosetwo.)

A. Power capping helps mainly in reducing data center footprint.

B. Power capping helps reduce data center cooling.C. A single power cap group policy allows you to set power limits across multiple UCS domains.D. You can have multiple power cap groups per UCS domain.E. Each blade within a UCS 5108 chassis can belong to a separate power cap group.



Power capping is one of the main differentiators of the Cisco Unified Computing System. This feature provides increasing benefits as each individual Cisco UCSinstance scales. Power capping is the capability to limit the power consumption of a system, be it a blade server or a rack server, to some threshold that is less thanor equal to the system's maximum rated power. For example, if the maximum power rating of a blade server is 340 watts (W), but the power available to the chassisis only 3334W AC, which is sufficient to supply an average of 300W per blade, plus the chassis, in the Cisco UCS chassis, each blade can be capped at amaximum of 300W per blade to avoid exceeding the capacity of the power supply. This type of capping is known as static power capping. Although it helps ensurethat the chassis will never draw more power than allowed, it does not take into account that the various blades may have varying loads, and at any given time oneblade may not be using its full allotment of power while another may require more. Another type of capping, dynamic power capping, allows the power managementsystem to allocate the total pool of power across multiple blades in a chassis. With dynamic power capping, the system as a whole can conform to a specific powerbudget, but power can be steered to the blades that have higher load and require additional power.To date, dynamic power capping offerings on the market have been limited to a single blade chassis or chassis as their managed power domain, as discussedpreviously. The following sections describe how Cisco has extended dynamic power capping across multiple blade chassis and implemented it in a fashion that ismore useful to operations management than the other, traditional alternatives.References:

QUESTION 201Regarding disk scrub, which two of these occur to the data on any local drives upon disassociation? (Choose two.)

A. If disk scrub is enabled, all BIOS settings for the server are erased.B. If disk scrub is enabled, all the data access on any local drives is destroyed.C. If disk scrub is enabled, the LSI active RAID is destroyed but data is still preserved.D. If disk scrub is disabled, all data on any local drives is preserved, including the local storage configuration.E. If disk scrub is enabled, all data on any local drives is preserved, including the local storage configuration.



Explanation:

This policy determines what happens to local data and to the BIOS settings on a server during the discovery process and when the server is disassociated from aservice profile. Depending upon how you configure a scrub policy, the following can occur at those times:

Disk ScrubOne of the following occurs to the data on any local drives on disassociation:

References:

QUESTION 202In the event of a catastrophic disaster, after which you need to replace the entire UCS blade system (that is, new fabric interconnects, new IOMs, new chassis, andnew blades), what type of backup would provide the most complete set of information?

A. logical configurationB. all configurationC. full stateD. system configuration



You can perform one or more of the following types of backups through Cisco UCS Manager:

References:

QUESTION 203Which policy determines what happens to local data and to the BIOS settings on a server during the discovery process and when the server is disassociated from aservice profile?

A. boot policy and BIOS policyB. disk scrub and boot policyC. BIOS setting scrub, boot policy, and BIOS policyD. disk scrub and BIOS setting scrub

Correct Answer: D

Section: Cisco Unified Computing SystemExplanation

Explanation/Reference:Explanation:This policy determines what happens to local data and to the BIOS settings on a server during the discovery process and when the server is disassociated from aservice profile. Depending upon how you configure a scrub policy, the following can occur at those times:

Disk ScrubOne of the following occurs to the data on any local drives on disassociation:

References:

QUESTION 204Which of these commands will allow you to set end-host mode for SAN connectivity?

A. UCS-A # scope fc-uplinkUCS-A /fc-uplink # set mode end-hostUCS-A /fc-uplink* # commit-bufferB. UCS-A# scope eth-uplinkUCS-A /eth-uplink # set mode end-hostWarninG. When committed, this change will cause the switch to rebootUCS-A /eth-uplink* #

commit-bufferC. UCS-A# scope fabric-interconnect aUCS-A /fabric-interconnect # set mode end-hostUCS-A /fabricinterconnect* # commit-bufferD. UCS-A# scope systemUCS-A /system* # set mode end-hostUCS-A /system* # commit-buffer



When you change the Fibre Channel switching mode, Cisco UCS Manager logs you out and restarts the fabric interconnect. For a cluster configuration, Cisco UCSManager restarts both fabric interconnects sequentially. The second fabric interconnect can take several minutes to complete the change in Fibre Channelswitching mode and become system ready.

References:

QUESTION 205Which two statements about QoS options in a Cisco UCS environment are true? (Choose two.)

A. The QoS policy assigns a system class to the outgoing traffic for a vNIC or vHBA.B. Flow-control policies determine whether the uplink Ethernet ports in a Cisco UCS environment send and receive IEEE 802.3x pause frames when the send

buffer for a port fills.C. If no system class is configured as CoS 0, the Fibre Channel system class is used.D. The user can configure QoS for these system classes: platinum, gold, silver, best effort, Fibre Channel.E. When configuring a system class, the type of adapter in a server may limit the maximum MTU supported.

Correct Answer: AESection: Cisco Unified Computing SystemExplanation


QoS policies assign a system class to the outgoing traffic for a vNIC or vHBA. You must include a QoS policy in a vNIC policy or vHBA policy and then include thatpolicy in a service profile to configure the vNIC or vHBA.

References:

QUESTION 206Where is Cisco UCS vNICs created?

A. In the blade BIOSB. In the operating systemC. In the service profileD. In the card option ROM



vNIC TemplateThis policy defines how a vNIC on a server connects to the LAN. This policy is also referred to as a vNIC LAN connectivity policy.

Beginning in Cisco UCS, Release 2.0(2), Cisco UCS Manager does not automatically create a VM- FEX port profile with the correct settings when you create avNIC template. If you want to create a VM-FEX port profile, you must configure the target of the vNIC template as a VM.

You need to include this policy in a service profile for it to take effect.

References:


QUESTION 207Which two statements about end-host mode in SAN connectivity in a Cisco UCS environment are true? (Choose two.)

A. End-host mode is synonymous with NPV mode.B. In end-host mode, only hard pinning of vHBAs to Fibre Channel uplink ports is allowed.C. Making configuration changes between Fibre Channel switching mode and end-host mode is nondisruptive.D. End-host mode is the default Fibre Channel switching mode.

Correct Answer: ADSection: Cisco Unified Computing SystemExplanation


End-host mode allows the fabric interconnect to act as an end host to the network, representing all server (hosts) connected to it through vNICs. This is achieved bypinning (either dynamically pinned or hard pinned) vNICs to uplink ports, which provides redundancy toward the network, and makes the uplink ports appear asserver ports to the rest of the fabric. When in end-host mode, the fabric interconnect does not run the Spanning Tree Protocol (STP) and avoids loops by denyinguplink ports from forwarding traffic to each other, and by denying egress server traffic on more than one uplink port at a time. End-host mode is the default Ethernetswitching mode and should be used if either of the following are used upstream:

References:

QUESTION 208What is the appliance port used to connect to in a Cisco Unified Computing System?

A. Fibre Channel storageB. UCS C-Series serversC. NFS storage

D. UCS chassisE. Other fabric interconnect



Traditional appliance ports for UCS Release 2.1(1a) and earlier can only pass Ethernet-based traffic, such as Network File System (NFS) and Internet SmallComputer System Interface (iSCSI). Unified Storage ports introduced in UCS Manager Release 2.1(1a) can pass both Fibre Channel over Ethernet (FCoE) andEthernet traffic over the same link. In order to use this feature, the storage controller must have a converged network adapter (CNA) capable of FCoE andtraditional Ethernet on the same port.

References:

QUESTION 209Which are valid statements about Cisco Virtual Interface Card (VIC)? (Choose two.)

A. The Cisco VIC can create an unlimited number of Virtual NICs.B. The number of vNICs on the Cisco VIC that can be created is determined by the number of chassis uplinks.C. vNICs are created using software on the host operating system.D. The host operating system sees a vNIC as a physical PCIe device.E. The host operating system sees a vNIC as a sub-interface of a primary NIC.F. The Cisco VIC can create 1024 vNICs.



While this ASIC is capable of PCIe single-root I/O virtualization (SR-IOV), that functionality is not in play on these servers, as shown in Figure 9. The key to Ciscointerface virtualization technology, as it has been since the first generation, is that the vNIC and sNIC are represented as PCIe physical functions (devices), notvirtual functions (devices) created on the PCIe tree for the individual server. This allows the OS to see each vNIC as a uniquely configurable and manageableEthernet interface and each storage controller as a specific device capable of communicating with mapped virtual drives within the infrastructure. In contrast, SR-IOV devices are virtual functions (devices) within a physical function (device). A virtual function is not a full-featured resource, as it relies on the physical function forall configuration resources. An SR-IOV device also requires software support in the OS. Within Cisco virtualization technologies, the sNIC and vNIC are presented

to the OS as fully configurable physical functions that require no SR-IOV support.

References:

QUESTION 210In a Cisco Unified Computing System, What is the "designated receiver" port in end-host mode used for?

A. Sending all broadcastsB. Receiving all traffic from upstream switchesC. Receiving broadcast trafficD. Negotiating spanning tree with upstream switchesE. Learning MAC addres?ses from upstream switch?es



UCS uses the concept of a "designated receiver" (DR) port that is the single port (or port channel) chosen by UCSM to receive all multicast and broadcast traffic forall VLANs defined on the Fabric Interconnect (FI). To make this clear, UCS receives all multicast/broadcast traffic on this port only and drops broadcast/multicasttraffic received on all other ports. Unless you have DJL2, this method works really well. If you do have DJL2, this would lead to a problem if you defined the aboveVLAN configuration and plugged it into pre-2.0 UCS (in EHM). In this situation, UCS would choose a designated receiver port for ALL VLANs (10-60) and assign itto one of the available uplinks. Let's say the system chose port 1 (VLANs 10, 20, and 30) for the DR. In that situation, those networks (10, 20, 30) would workcorrectly, but VLANs 40, 50, and 60 (plugged into port 2) would not receive any broadcast and multicast traffic at all. The FI will learn the MAC addresses of thedestinations on port 2 for 40, 50 and 60, but necessary protocols like ARP, PXE, DHCP (just to name a few) would be broken for these networks. In case you'rewondering, pin groups do not solve this problem so don't waste your time. Instead, you need UCS 2.0+ and DJL2 which allows specific VLANs to be pinned tospecific uplink ports. In addition, you now have a DR port for each defined VLAN as opposed to globally for the each FI.

References:

QUESTION 211Given a Cisco Unified Computing System, which is a valid port type in end-host mode?

A. ServerB. End deviceC. NodeD. Host

E. Virtual



In end-host mode, Cisco UCS presents an end host to an external Ethernet network. The external LAN sees the Cisco UCS fabric interconnect as an end host withmultiple adapters.

References:

QUESTION 212Given a Cisco Unified Computing System, which is a valid port type in end-host mode?

A. TrunkB. PhysicalC. Uplink

D. SwitchE. End host



QUESTION 213Where SAN Port Channel is created in UCS Manager?

A. Under the Admin tab on the FIB. Under the Server tab in the service profileC. Under the SAN tab on each VSAND. Under the Admin tab on the chassisE. Under the SAN tab on the Fabric Interconnect

Correct Answer: ESection: Cisco Unified Computing SystemExplanation

Explanation/Reference:Explanation:Step 1 - In the Navigation pane, click the SAN tab.Step 2 - On the SAN tab, expand SAN > SAN Cloud.Step 3 - Expand the node for the fabric where you want to create the port channel. Step 4 - Right-click the FC Port Channels node and choose Create Port Channel.

References:

QUESTION 214In a Cisco Unified Computing System, where are SAN port channels connected to?

A. Only to Cisco Fibre Channel switchesB. Only to Cisco Fibre Channel switches in NPIV modeC. To any Fibre Channel switchD. Directly to storage arraysE. Only to Nexus Switches



Before configuring a SAN port channel, consider the following guidelines:

References:

QUESTION 215When will an "all configuration" backup be imported into the Cisco UCS Manager?

A. During the initial configuration from the consoleB. Once the basic configuration has been appliedC. To restore the configuration on a secondary fabric interconnectD. To upgrade the firmware on a replacement fabric interconnect



The import function is available for all configuration, system configuration, and logical configuration files. You can perform an import while the system is up andrunning. An import operation modifies information on the management plane only. Some modifications caused by an import operation, such as a change to a vNICassigned to a server, can cause a server reboot or other operations that disrupt traffic.You cannot schedule an import operation. You can, however, create an import operation in advance and leave the admin state disabled until you are ready to runthe import. Cisco UCS Manager will not run the import operation on the configuration file until you set the admin state to enabled.

You can maintain only one import operation for each location where you saved a configuration backup file.

References:

QUESTION 216Which statement is true regarding Backup tasks in Cisco UCS?

A. They are created automatically and stored on the FIB. They are created manually and exported to a remote serverC. They are automatically scheduled to run every 24 hoursD. They are manually scheduled and stored on the FI



QUESTION 217What is the use of an "all configurations" backup in Cisco UCS?

A. Can be used to migrate from a 6120 to a 6140 and retain the same service profilesB. Can only be used on the fabric interconnect on which it was createdC. Can be used to migrate from a 6120 to 6140 and retain system IP addresses and cluster informationD. Can be used to match firmware versions between 6120 and 6140 during a migration



In Cisco UCS, you can use all configurations backup to migrate from cisco 6120 to Cisco 6140 while retaining the same service profiles.

References:

QUESTION 218Which statement is true about "full state backup" in a Cisco Unified Computing System?

A. An XML file containing all details of the system, including IP address and cluster detailsB. A binary file containing only service profiles, pools, and other items configured after initial configurationC. A binary file containing all details of the system, including IP address and cluster detailsD. An XML file containing only service profiles, pools, and other items configured after initial configuration

E. A text file with the NX-OS running configuration



You can perform one or more of the following types of backups through Cisco UCS Manager:

References:

QUESTION 219An administrator creates a vNIC and assigns it to Fabric A with the fabric failover feature enabled.Which statement is true?

A. A unique vEthernet interface will be created on Fabric A and Fabric BB. A vEthernet interface will be created only on Fabric AC. A vEthernet interface will be created on Fabric A, and move across to Fabric B in the event of failureD. Fabric B will learn the vEthernet interface from Fabric A through a GARPE. The same vEthernet interface will be created on Fabric A and Fabric B



Network Control PolicyThis policy configures the network control settings for the Cisco UCS domain, including the following:References:

QUESTION 220An administrator is creating a service profile but receives an error when applying to a blade. The administrator checks the faults tab of the service profile and findsthe following error (Refer to the exhibit).

What is the cause of this error?

A. vNIC has a Fibre Channel QoS policy assignedB. vHBA is assigned to a "best-effort" QoS policyC. vHBA has no QoS policy assignedD. vHBA is assigned to an incorrect VSANE. vNIC has been assigned to an FCoE VLAN



System ClassDescriptionPlatinumGoldSilverBronzeA configurable set of system classes that you can include in the QoS policy for a service profile. Each system class manages one lane of traffic.All properties of these system classes are available for you to assign custom settings and policies.Best EffortA system class that sets the quality of service for the lane reserved for basic Ethernet traffic. Some properties of this system class are preset and cannot bemodified. For example, this class has a drop policy that allows it to drop data packets if required. You cannot disable this system class.Fibre ChannelA system class that sets the quality of service for the lane reserved for Fibre Channel over Ethernet traffic.Some properties of this system class are preset and cannot be modified. For example, this class has a no-drop policy that ensures it never drops data packets. Youcannot disable this system class.NoteFCoE traffic has a reserved QoS system class that should not be used by any other type of traffic. If any other type of traffic has a CoS value that is used by FCoE,the value is remarked to 0.

References:

QUESTION 221What would be the cause for the following fault in UCS Manager? "ether VIF x / xxx down, reason: ENM source pinning failed"

A. The associated VLANs of a vNIC are not found on an uplink.B. Overlapping VLAN IDs exist on upstream disjoint networks.C. The vNIC was not configured for fabric failover.D. The vNIC is pinned to the wrong fabric.E. Overlapping VSAN IDs exist on upstream SAN switches.F. The vHBA was not configured for failover.



The most probable reason for VIF down ENM source pinning failed is that the associated VLANs of a vNIC are not found on the uplink.

References:

QUESTION 222Which three statements are possible causes for the "fltAdaptorHostIfLink-down" fault in UCS Manager? (Choose three.)

A. The fabric interconnect is in the end-host mode, and all uplink ports have failed.B. The server port to which the adapter is pinned has failed.C. A transient error has caused the link to fail.D. The fabric interconnect is in the switch mode, and all uplink ports have failed.E. The link for a network-facing host interface is missing.

Correct Answer: ABCSection: Cisco Unified Computing SystemExplanation


Message

Adapter [transport] host interface [id]/[id]/[id] link state: [linkState]Adapter [transport] host interface [chassisId]/[slotId]/[id]/[id] link state: [linkState]ExplanationThis fault typically occurs as a result of one of the following issues:· The fabric interconnect is in the End-Host mode, and all uplink ports failed.

· The server port to which the adapter is pinned failed.

· A transient error that caused the link to fail.

References:

QUESTION 223On a Cisco Unified Computing System (UCS), which two statements regarding Ethanalyzer are true? (Choose two.)

A. Interface inbound-low handles Rx and Tx of low-priority control packetB. Interface inbound-lo handles Rx and Tx of high-priority control packetC. Interface inbound-low maps to internal interface eth3D. Interface inbound-low maps to internal interface eth4



Ethanalyzer terminology, internal ethernet interfaces are used:eth3 = inbound-loeth4 = inbound-hieth3 handles Rx and Tx of low priority control pktsIGMP, CDPTCP/UDP/IP/ARP (for management purpose only)eth4 handles Rx and Tx of high priority control pktsFC (FC packets come to Switch CPU as FCoE packets) and FCoE STP (spanning-tree) , LACP, DCBX (Data Center Bridging)

References:

QUESTION 224Which statements are true regarding the Cisco UCS fabric failover feature? (Choose three.)

A. FabricSync is used to synchronize MAC addresses to an adjacent fabric interconnect after a server interface failover.B. Gratuitous ARPs are sent on fabric interconnect uplinks after a server interface failover.C. Fabric failover can be used on vNICs and vHBAs.D. Fabric failover is configured as part of the service profile.E. Fabric interconnects in end-host mode use fabric failover instead of spanning tree to provide redundancy on uplink ports.

Correct Answer: ABDSection: Cisco Unified Computing SystemExplanation


When Fabric Failover is enabled, the implicit MAC address of the adapter is synchronized with the second fabric switch in preparation for a failure. This capabilityhas been present since UCS Manager version 1.0. Below is an example of a Windows or Linux OS loaded on the bare metal server with Fabric Failover enabled.The OS has a simple redundant connection to the network with a single adapter and no requirement for a NIC Teaming configuration.

After the dynamic re-pinning process, the Fabric Interconnect will send Gratuitous ARP messages for all of the MAC address that were previously using the faileduplink. This GARP process aids the upstream network in quickly learning the new location of the affected MAC address now using the new uplink.

References:


If uplink 1 fails, to which addresses will Fabric Interconnect B transmit a GARP on Uplink 2?

A. AA and BB onlyB. C1 and C2 onlyC. A1, B1, AA, and BBD. AA, BB, C1, and C2E. No GARPs will be transmitted

Correct Answer: DSection: Cisco Unified Computing SystemExplanation


The Fabric Interconnect B transmit a Garp through MAC AA, MAC BB, MAC C1 and MAC C2 on Uplink 2.

References:

QUESTION 226A Cisco UCS fabric interconnects in end-host mode learns MAC addresses on which port types? (Choose four.)

A. Uplink Ethernet ports or border portsB. Appliance portsC. Server portsD. Fabric portsE. Backplane portsF. vEth interfacesG. A Fabric Interconnect doesn't learn MAC addresses in End Host mode. Pinning is used instead.

Correct Answer: BCEFSection: Cisco Unified Computing SystemExplanation


End-host mode offers these main features:

References:

QUESTION 227Your company wants Server 1/eth0 (vNIC 1) configured so that it always uses Fabric Interconnect A Port Channel 1 (Po1) when it communicates with anythingoutside of the Cisco UCS domain. However, if vNIC 1 fails over to Fabric Interconnect B using fabric failover, then vNIC 1 can use any uplink port on FabricInterconnect B.

Which statements are true? (Choose two.)

A. The fabric interconnects must be in end-host mode.B. A pin group must be configured on the server tab in Cisco UCS Manager.C. In the service profile for Server 1, vNIC 1 must be explicitly assigned to a pin group.D. Server 1 cannot be configured to meet the requirement. A server can only be manually pinned to a single physical interface and not a port channel because of

the LACP load-balancing algorithm.E. Server 1 cannot be configured to meet the requirement. A server is either manually pinned to an uplink on both fabric interconnects or the server is automatically

pinned, but not both.



This type of service profile provides the maximum amount of flexibility and control. This profile allows you to override the identity values that are on the server at thetime of association and use the resource pools and policies set up in Cisco UCS Manager to automate some administration tasks. You can disassociate this serviceprofile from one server and then associate it with another server. This re- association can be done either manually or through an automated server pool policy. Theburned-in settings, such as UUID and MAC address, on the new server are overwritten with the configuration in the service profile. As a result, the change in serveris transparent to your network. You do not need to reconfigure any component or application on your network to begin using the new server.

References:


All Ethernet ports are trunked with VLANs 2 thru 10. The Cisco UCS domain is in end-host mode.Host A transmits a single broadcast frame on VLAN 4.Which statements are true? (Choose two.)

A. Nexus 5548 A and Nexus 5548 B send a copy of the broadcast frame down all six ports to Fabric Interconnect A and Fabric Interconnect B.B. The deja vu mechanism on the fabric interconnects prevents the fabric interconnects from receiving multiple copies of the broadcast frame.C. All four vNICs receive a single copy of the broadcast frame.D. All four vNICs receive multiple copies of the broadcast frame on VLAN 4 but no broadcasts on any other VLAN.E. The spanning tree process prevents the vNICs from receiving multiple copies of the broadcast frame.F. The Reverse Path Forwarding mechanism prevents the vNICs from receiving multiple copies of the broadcast frame.


Explanation/Reference:Explanation:When the Cisco UCS fabric interconnect is in end-host mode, it assumes that all uplinks are connected to the same, common Layer 2 domain. The fabricinterconnects will each randomly choose a designated single uplink to receive all broadcast frames entering the system. As a result, a portion of the broadcastmessages will be lost because broadcasts received on all other uplinks will be ignored and dropped.

If the fabric interconnect in end-host mode is connected to multiple isolated networks. it will not be able to process all broadcast messages from each isolatednetwork because it does not receive broadcasts coming in on other links. It will process broadcasts from the network containing the chosen uplink only (shown inblue in Figure 16).

From the example in Figure 16, fabric interconnect 6100-A chose an uplink connected to DMZ 1 as the broadcast link, but 6100-A is not receiving any broadcastmessages from DMZ 2, and therefore DMZ 2 server vNICs connected to 6100-A will not be able to see any important broadcast messages from DMZ 2, such asARP requests.

References:

QUESTION 229What is required for Cisco UCS C-Series rack server integration with Cisco UCS Manager? (Choose three.)

A. Cisco UCS Manager 1.3(xx) or later and a pair of Nexus 2248 FEXesB. Cisco UCS Manager 2.0(2xx) or later and a pair of Nexus 2232 FEXesC. Two Cisco UCS 6100 Series or 6200 Series fabric interconnectsD. Two RJ45 Ethernet cables

E. The fabric interconnects must be in end-host mode

Correct Answer: BCDSection: Cisco Unified Computing SystemExplanation


The following table describes maximum configurable vNICs/vHBAs on a VIC adapter based on the number of FEX uplinks:Table 2 Cisco UCS 6100 Fabric InterconnectAcknowledged link between FEX and FIMaximum configurable vNICs/vHBA on a VIC adapter for the VIC adapter 1225, 1225T, 1227, 1227T Maximum configurable vNICs/vHBA on a VIC adapter for theadapter VIC P81E Not supportedNot supportedTable 3 Cisco UCS 6200 Fabric InterconnectAcknowledged link between FEX and FIMaximum configurable vNICs/vHBA on a VIC adapter for the VIC adapter 1225, 1225T, 1227, 1227T Maximum configurable vNICs/vHBA on a VIC adapter for theVIC adapter P81E References:


Your company requires a Cisco UCS configuration that will, at a minimum, allow the configuration in the provided exhibit.Which Cisco UCS components will meet the requirement? (Choose three.)

A. Cisco UCS 6148, Cisco UCS 6248UP, or the Cisco UCS 6296UP fabric interconnectsB. Cisco UCS 2104XP Fabric ExtenderC. Cisco UCS 2204XP or 2208XP Fabric ExtendersD. Cisco UCS M81KR Virtual Interface CardE. Cisco UCS Virtual Interface Card 1280F. Cisco UCS Virtual Interface Card 1240 with a port expander

Correct Answer: AEFSection: Cisco Unified Computing SystemExplanation


The Cisco UCS 6248UP 48-Port Fabric Interconnect is a core part of the Cisco Unified Computing System. Typically deployed in redundant pairs, the Cisco UCS6248UP Fabric Interconnects provide uniform access to both networks and storage.

References:


According to the equipment tab in Cisco UCS Manager, which is true?

A. A is an uplink port, B is a fabric port, C is a server port, D is a backplane port, E is a DCE interface, and F is a vNICB. A is an uplink port, B is a server port, C is a fabric port, D is a backplane port, E is a DCE interface, and F is a vNICC. A is an uplink port, B is a fabric port, C is a backplane port, D is a server port, E is a DCE interface, and F is a vNICD. A is an uplink port, B is a server port, C is a fabric port, D is a DCE interface, E is a backplane port, and F is a vNIC

E. A is an fabric port, B is a downlink port, C is an uplink port, D is a server port, E is a VIC interface, and F is a vNIC



A is an uplink port, B is a server port, C is a fabric port, D is a backplane port, E is a DCE interface, and F is a vNIC.


The Cisco UCS domain is operating in switching mode. A network administrator notices that no traffic is traversing the uplinks on Fabric Interconnect B (Path C).Which actions might be used to change this behavior?

A. Fix the port channel configuration between Fabric Interconnect B and Nexus 5548 B as the port channel IDs do not match.B. Modify the bridge priority on the fabric interconnects so that one of the Nexus 5548s will always be the root bridge.C. Modify the bridge priority on the Nexus 5548s so that one of them will always be the root bridge.

D. Modify the port priorities on the fabric interconnect uplinks (Paths B and C) so that they are a higher priority than ports Eth1/4 and Eth1/9 (Path D).E. This is an invalid configuration as Cisco UCS fabric interconnects cannot be directly connected.



To change the behavior, modify the bridge priority on the Nexus 5548s so that one of them will always be the root bridgeReferences:


On which of the interfaces can VLANs be configured or modified within this Cisco UCS domain?

A. VLANs can be configured or modified on all ports.B. A, D, E, and F. Ports B and C are automatically configured by the fabric interconnect.C. A, E, and F. Ports B, C, and D are automatically configured by the fabric interconnect.D. A and F only. No other ports may have their VLAN configurations modified manually.E. A only. VLANs are configured on uplinks and are automatically available on any other port with no configuration necessary.F. F only. VLANs are only modified in the service profile.



VLANs can be configured or modified within this cisco UCS domain through A and F only. No other ports may have their VLAN configurations modified manually.References:

QUESTION 234From the Cisco UCS CLI, how do you verify which uplink ports a blade server is using for its network connectivity?

A. UCS-A# show pinning border-interfacesB. UCS-B# show service-profile circuitC. UCS-B(nxos)# show pinning server-interfacesD. You must statically configure which uplink the blades should use, or you will not have connectivity.



UCS-A(nxos)# show pinning border-interfacesUCS-A(nxos)# show pinning server-interfacesUCS-A(nxos)# show port-channel summaryUCS-A(nxos)# show interface port-channel 1countersUCS-A(nxos)# show hardware internal gatos porteth 1/19UCS-A(nxos)# show spanning-tree vlan <vlanid>

References:

QUESTION 235How many concurrent GUI logins are possible per user account on Cisco UCS Manager?

A. 128B. 96C. 64D. 32



FeatureCisco UCS 6100 SeriesCisco UCS 6200 SeriesChassis per Cisco UCS domainMaximum combined number of blade and rack servers per Cisco UCS domain Maximum number of 2232PP Fabric Extenders per Cisco UCS domain 20 (10 perfabric interconnect)20 (10 per fabric interconnect)Local user accounts per Cisco UCS domainConcurrent logins per user accountThis total includes a maximum of 32 concurrent GUI logins and 32 concurrent CLI logins per user account.This value is the same for both local and remote user accounts. This total includes a maximum of 32 concurrent GUI logins and 32 concurrent CLI logins per useraccount.This value is the same for both local and remote user accounts.Active KVM sessions per individual CIMCConcurrent CLI logins per Cisco UCS ManagerConcurrent GUI logins per Cisco UCS ManagerNumber of LDAP groups per Cisco UCS ManagerNumber of adapter end points per Cisco UCS ManagerReferences:



While attempting to modify a management firmware package, you receive the error that is shown in the exhibit. Which two statements explain this error? (Choosetwo.)

A. The management firmware package that is referenced by the service profile has been deleted.B. The Cisco UCS Manager version is 2.1 or later.C. Cisco Integrated Management Controller firmware should be managed via the host firmware policy.D. You cannot modify the management firmware directly when a policy has been assigned.

E. The user that is logged into Cisco UCS Manager does not have sufficient privileges.

Correct Answer: BCSection: Cisco Unified Computing SystemExplanation


Cisco UCS uses firmware obtained from and certified by Cisco to support the endpoints in a Cisco UCS domain. Each endpoint is a component in the Cisco UCSdomain that requires firmware to function. The upgrade order for the endpoints in a Cisco UCS domain depends upon the upgrade path, but includes the following:

References:

QUESTION 237How many virtual interfaces do the Cisco UCS 1280, 1240, and 1225 Virtual Interface Cards support?

A. 128B. 64C. 256D. 1024E. 100



ModelsCisco UCS Virtual Interface Card 1280Cisco UCS Virtual Interface Card 1240Cisco UCS Virtual Interface Card 1225Maximum Interfaces (vNIC or vHBA)Interface TypeDynamicDynamicDynamicVM-FEX

HardwareHardwareHardwareFailover HandlingHardware, no driver neededHardware, no driver neededHardware, no driver neededForm FactorMezzanineModular LOMPCIExpress(half height)Network Thoughput80 GB40-80* GB20 GBUCS Server CompatibilityUCS M2 (B200, B230, B440) and M3 BladesUCS M3 BladesUCS M2 (C260, C240) and M3 Rack Servers* With use of Port Expander Card for the VIC 1240 in the optional mezzanine slot

References:

QUESTION 238When you connect two Cisco devices through 802.1Q trunks, the devices exchange spanning tree BPDUs on each VLAN that is allowed on the trunks. Which twostatements are correct about the BPDUs that are sent on the native VLAN of the trunk? (Choose two.)

A. BPDUs are sent to the reserved IEEE 802.1D spanning tree multicast MAC address (01-80-C2-00- 00-00).B. BPDUs are sent to the reserved IEEE 802.1q spanning tree multicast MAC address (01-80-C2-00- 00-00).C. BPDUs are sent to the reserved SSTP multicast MAC address (01-00-0c-cc-cc-cd).D. BPDUs are tagged with the VLAN number when they are sent.E. BPDUs are untagged when they are sent.

Correct Answer: AESection: Cisco Unified Computing SystemExplanation

Explanation/Reference:Explanation:The following configuration guidelines and restrictions apply when using 802.1Q trunks and impose some limitations on the trunking strategy for a network.Consider these restrictions when using 802.1Q trunks:

· A port can be either a Layer 2 or a Layer 3 interface; it cannot be both simultaneously.

· When you change a Layer 3 port to a Layer 2 port or a Layer 2 port to a Layer 3 port, all layer-

dependent configuration is lost. When you change an access or trunk port to a Layer 3 port, all information about the access VLAN, native VLAN, allowed VLANs,and so forth, is lost. · Do not connect devices with access links because access links may partition a VLAN.

· When connecting Cisco devices through an 802.1Q trunk, make sure that the native VLAN for an

802.1Q trunk is the same on both ends of the trunk link. If the native VLAN on one end of the trunk is different from the native VLAN on the other end, spanning treeloops might result. · Disabling spanning tree on the native VLAN of an 802.1Q trunk without disabling spanning tree on

every VLAN in the network can cause spanning tree loops. You must leave spanning tree enabled on the native VLAN of an 802.1Q trunk. If you cannot leavespanning tree enabled, you must disable spanning tree on every VLAN in the network. Make sure that your network has no physical loops before you disablespanning tree.· When you connect two Cisco devices through 802.1Q trunks, the devices exchange spanning tree

bridge protocol data units (BPDUs) on each VLAN allowed on the trunks. The BPDUs on the native VLAN of the trunk are sent untagged to the reserved IEEE802.1D spanning tree multicast MAC address (01-80-C2-00-00-00). The BPDUs on all other VLANs on the trunk are sent tagged to the reserved Cisco SharedSpanning Tree (SSTP) multicast MAC address (01-00-0c-cc-cc-cd). · Non-Cisco 802.1Q devices maintain only a single instance of spanning tree (the MonoSpanning

Tree) that defines the spanning tree topology for all VLANs. When you connect a Cisco switch to a non-Cisco switch through an 802.1Q trunk, the Mono SpanningTree of the non-Cisco switch and the native VLAN spanning tree of the Cisco switch combine to form a single spanning tree topology known as the CommonSpanning Tree (CST).· Because Cisco devices transmit BPDUs to the SSTP multicast MAC address on VLANs other than

the native VLAN of the trunk, non-Cisco devices do not recognize these frames as BPDUs and flood them on all ports in the corresponding VLAN. Other Ciscodevices connected to the non-Cisco 802.1Q cloud receive these flooded BPDUs. This BPDU reception allows Cisco switches to maintain a per- VLAN spanningtree topology across a cloud of non-Cisco 802.1Q devices. The non-Cisco 802.1Q cloud that separates the Cisco devices is treated as a single broadcast segmentbetween all devices connected to the non-Cisco 802.1Q cloud through 802.1Q trunks. · Make certain that the native VLAN is the same on all of the 802.1Q trunksthat connect the Cisco

devices to the non-Cisco 802.1Q cloud.· If you are connecting multiple Cisco devices to a non-Cisco 802.1Q cloud, all of the connections

must be through 802.1Q trunks. You cannot connect Cisco devices to a non-Cisco 802.1Q cloud through access ports because doing so places the access port onthe Cisco device into the spanning tree "port inconsistent" state and no traffic will pass through the port. · You can group trunk ports into port-channel groups, but alltrunks in the group must have the same

configuration. When a group is first created, all ports follow the parameters set for the first port to be added to the group. If you change the configuration of one ofthese parameters, the device propagates that setting to all ports in the group, such as the allowed VLANs and the trunk status. For example, if one port in a portgroup ceases to be a trunk, all ports cease to be trunks. · If you try to enable 802.1X on a trunk port, an error message appears, and 802.1X is not enabled. If

you try to change the mode of an 802.1X-enabled port to trunk, the port mode is not changed.

References:

QUESTION 239Which option describes how you would guarantee 30 percent of available bandwidth on interface 1/4?

A. Issue the bandwidth percent 30 command after the interface ethernet1/4 command.B. Issue the bandwidth percent 30 command after the class best-effort-drop-class command.C. Issue the bandwidth percentage 30 command after the policy-map policy1-egress command.D. Issue the bandwidth percentage 30 command after the class best-effort-drop-class command.E. Bandwidth guarantees are not permitted on output policies.



The switch provides two default system classes: a no-drop class for lossless service and a drop class for best-effort service. You can define up to four additionalsystem classes for Ethernet traffic.References:

QUESTION 240Which two server models support single-wire management for Cisco UCS C-Series integration with Cisco UCS Manager? (Choose two.)

A. Cisco UCS C200 M2 serverB. Cisco UCS C250 M2 serverC. Cisco UCS C260 M2 serverD. Cisco UCS C240 M3 serverE. Cisco UCS C240 M2 server

Correct Answer: CDSection: Cisco Unified Computing SystemExplanation


ServersSingle-wire ManagementDual-wire ManagementCisco UCS C22 M3 ServerYesYesCisco UCS C24 M3 ServerYesYesCisco UCS C200 M2 ServerNoYesCisco UCS C210 M2 ServerNoYesCisco UCS C220 M3 ServerYesYesCisco UCS C240 M3 ServerYesYesCisco UCS C250 M2 ServerNoYesCisco UCS C260 M2 Server

YesYesCisco UCS C420 M3 ServerYesYesCisco UCS C460 M2 ServerYesYes

References:


Assume that the Cisco UCS 6200 Series Fabric Interconnects are equipped with 16 port expansion modules. What is the impact of the last command in the exhibit?

A. Fabric interconnect B will reboot.B. The expansion module on fabric interconnect B will reload.C. The command will generate an error.D. Both fabric A and B expansion modules will reload.E. The expansion module on fabric interconnect B will reload according to the maintenance policy that is set by Cisco UCS Manager.



The commit-buffer command will generate an error because its creating interface 2 1 on eth-uplink.

References:

QUESTION 242

You have configured a Cisco UCS C460 M2 Rack-Mount Server with two VIC 1225 adapters for single-wire management with Cisco UCS Manager. Whichstatement correctly describes the operation of these adapters?

A. One VIC is designated to carry management, and the other VIC is designated to carry data traffic.B. Both VICs will be used for management and data traffic.C. One VIC will carry management, and both VICs will carry data traffic.D. The Cisco UCS C460 M2 does not support two VIC 1225 adapters simultaneously.



Using Network Controller Sideband Interface (NC-SI), Cisco UCS VIC 1225 Virtual Interface Card (VIC) connects one cable that can carry both data traffic andmanagement traffic. This feature is referred to as SingleConnect.

References:


Which option describes the output that is shown in bold in the exhibit?

A. This output represents a standby VIF.B. This output indicates that fabric failover has been enabled on vNIC 3.C. This output represents a reserved system VIF.D. This output represents an unpinned interface.



In addition, a cluster configuration actively enhances failover recovery time for redundant virtual interface (VIF) connections. When an adapter has an active VIFconnection to one fabric interconnect and a standby VIF connection to the second, the learned MAC addresses of the active VIF are replicated but not installed onthe second fabric interconnect. If the active VIF fails, the second fabric interconnect installs the replicated MAC addresses and broadcasts them to the networkthrough gratuitous ARP messages, shortening the switchover time.References:

QUESTION 244Which two FEX connection modes are correct? (Choose two.)

A. hard-pinning modeB. soft-pinning modeC. port channel modeD. physical-pinning modeE. vlan pinning mode


Explanation/Reference:Explanation:You can connect the FEX to the FI in two ways. Cisco UCS Manager FI discovers the FEX based on the FEX/Chassis discovery mode. The FEX connection modesare:

References:

QUESTION 245

Which four port types are included in the VLAN port count? (Choose four.)

A. border uplink Ethernet portsB. border uplink EtherChannel member portsC. FCoE ports in a SAN cloudD. static and dynamic vNICs created through service profilesE. VLANsF. VSANsG. Private VSANsH. Private VLANs

Correct Answer: ABCDSection: Cisco Unified Computing SystemExplanation


The following types of ports are counted in the VLAN port calculation:

Based on the number of VLANs configured for these ports, Cisco UCS Manager keepstrack of the cumulative count of VLAN port instances and enforces the VLANport limit during validation. Cisco UCS Manager reserves some pre-defined VLAN port resources for control traffic. These include management VLANs configuredunder HIF and NIF ports.

References:

QUESTION 246What is the default MTU for Fibre Channel on Cisco UCS Manager?

A. 2112B. 2240C. 2000D. 9216



Explanation:MTU drop-down list The maximum transmission unit for the channel. This can be:

This field is always set to fc for Fibre Channel.

References:


How many additional chassis equipped with Cisco UCS 2204XP I/O Modules could be connected at maximum bandwidth without exceeding the existing portlicenses?

A. 1B. 2C. 3D. 4E. 5



Explanation:

The maximum bandwidth that can be connected without exceeding existing port licenses is 2.

QUESTION 248Which feature must be enabled on the upstream Fibre Channel switch if the fabric interconnects is configured in end-host mode?

A. NPVB. NPIVC. ZoningD. Smart Zoning



NPV, or N_Port Virtualization, allows an N_port to proxy other N_ports on the NPV-enabled switch in order to request FCIDs from the connected NPIV-enabledswitch. When the Fibre Channel switch is running in NPV mode, the Fibre Channel services are running remotely on the NPIV-enabled switch rather than locally onthe NPV-enabled switch. The NPV N_port looks like a host to the NPIV-enabled switch, rather than another switch in the Fibre Channel SAN fabric. NPV mode onCisco UCS is called End-Host mode. For Cisco UCS to connect to a Brocade Fibre Channel switch, End-Host mode (NPV mode) is required on the Cisco UCSfabric interconnects.

References:


Which two statements about the output and diagram are true? (Choose two.)

A. FI-A is configured in FC switch mode.B. VSAN trunking is enabled on FI-A.C. The native VSAN should be VSAN 1.D. Cisco UCS will allow all VSANs by default when FC trunking is enabled.E. FI-A requires VSAN pruning.F. Interface fc1/8 on MDS-A should be configured as a TE Port.



References:

QUESTION 250You are about to assign a static UUID to a service profile. This particular UUID is also defined within the range of a UUID pool. The duplicate UUID in the pool hasnot yet been allocated. What will be the result of applying the static UUID?

A. Applying the static UUID will fail with an error stating that the UUID exists within a defined resource pool.B. Applying the static UUID will succeed with no warnings.C. Applying the static UUID will succeed and a minor fault will be raised.D. Applying the static UUID will succeed and an information fault will be raised.E. Applying the static UUID will fail with an error stating that the UUID is a duplicate UUID.



UUID suffix pool is a collection of SMBIOS UUIDs that are available to be assigned to servers. The first number of digits that constitute the prefix of the UUID arefixed. The remaining digits, the UUID suffix, are variable. A UUID suffix pool ensures that these variable values are unique for each server associated with a serviceprofile which uses that particular pool to avoid conflicts.

If you use UUID suffix pools in service profiles, you do not have to manually configure the UUID of the server associated with the service profile.References:

QUESTION 251What is the purpose of the management interface monitoring policy?

A. to monitor the management interface counters for errors and dropsB. to prevent VM traffic from being black-holed during a cluster switchoverC. to sync MAC address tables between peer fabric interconnectsD. to ensure that the management interface of the managing fabric interconnect can reach the gateway



Explanation:

This policy defines how the mgmt0 Ethernet interface on the fabric interconnect should be monitored. If Cisco UCS detects a management interface failure, a failurereport is generated. If the configured number of failure reports is reached, the system assumes that the management interface is unavailable and generates a fault.By default, the management interfaces monitoring policy is disabled.

If the affected management interface belongs to a fabric interconnect which is the managing instance, Cisco UCS confirms that the subordinate fabricinterconnect's status is up, that there are no current failure reports logged against it, and then modifies the managing instance for the end-points.

If the affected fabric interconnect is currently the primary inside of a high availability setup, a failover of the management plane is triggered. The data plane is notaffected by this failover.

References:

QUESTION 252How many traffic monitoring sessions can you create on Cisco UCS Manager?

A. 16B. 8C. 24D. 32



You can create upto 16 traffic monitoring sessions on UCS manager.

References:

QUESTION 253Fault suppression allows you to suppress SNMP trap and Call Home notifications during a planned maintenance period. Which three commands are necessary toactivate this suppression polices in Cisco UCS Manager? (Choose three.)

A. default-chassis-all-maintB. default-chassis-phys-maintC. default-fex-all-maint

D. default-FI-phys-maintE. default-blade-phys-maintF. default-vic-phys-maint

Correct Answer: ABCSection: Cisco Unified Computing SystemExplanation


These policies define which causes and types of faults you want to suppress. Only one policy can be assigned to a task. The following policies are defined byCiscoUCS Manager:This policy applies only to chassis.This policy applies only to chassis.This policy applies only to FEXes.This policy applies only to FEXes.This policy applies to chassis, organizations, and service profiles.

References:


Assume that there is no disjoint Layer 2 configuration. Based on the output, what will happen if uplink eth1/7 on FI-A fails?

A. The host will lose Ethernet uplink connectivity on FI-A.B. Fabric failover will force the vNIC that is bound to FI-A to use uplink eth1/7 on FI-B.C. Cisco UCS Manager will disable the host vNIC that is connected to FI-A.D. Traffic from any hosts using this pin group will use e1/8 on FI-A.


Explanation/Reference:Explanation:D SR is high. There are two possible reasons for this:

QUESTION 255You have a customer with an MDS fabric that is experiencing a performance problem. You suspect that the problem is due to a BB credit starvation issue with a

host HBA. The customer has both a DS-PAA- 2 and a Fibre Channel Analyzer on location. You want to collect a trace and look at the R_RDY flows between theMDS and the host. Which of the following actions is the best way to start troubleshooting this problem?

A. Collect a Fibre Channel Analyzer local brief trace on the MDS and look for missing R_RDYs.B. Collect a Fibre Channel Analyzer local trace with full detail on the MDS, because the detail is needed to examine the R_RDY flow.C. Use the DS-PAA-2 and the MDS span feature to capture a trace and examine the R_RDY flow between the host and MDS.D. Use the Finisar and the MDS span feature to capture a trace because the DS-PAA-2 cannot decode R_RDYs.E. Break the physical connection between the host and MDS and insert the Fibre Channel Analyzer inline.

Correct Answer: ESection: Cisco Unified Computing SystemExplanation


To use a protocol analyzer, you must insert the analyzer in-line with the device under analysis, which disrupts input and output (I/O) to and from the device. Thisproblem is worse when the point of analysis is on an Inter-Switch Link (ISL) link between two switches. In this case, the disruption may be significant depending onwhat devices are downstream from the severed ISL link. In Ethernet networks, this problem can be solved using the SPAN utility, which is provided with the CiscoCatalyst Family of Ethernet switches. SPAN has also been implemented with the Cisco MDS 9000 Family switches for use in Fibre Channel networks. SPAN letsyou take a copy of all traffic and direct it to another port within the switch. The process is non-disruptive to any connected devices and is facilitated in hardware,which prevents any unnecessary CPU load. Using Fibre Channel SPAN, you can connect a Fibre Channel analyzer, such as a Finisar analyzer, to an unused porton the switch and then SPAN a copy of the traffic from a port under analysis to the analyzer in a non-disruptive fashion.

References:

QUESTION 256DRAG DROP

A.B.C.D.

Correct Answer: Section: Cisco Unified Computing SystemExplanation

Explanation/Reference:Answer: <map><m x1=3 x2=505 y1=43 y2=77/><m x1=4 x2=505 y1=90 y2=120/><m x1=7 x2=504 y1=132 y2=162/><m x1=5 x2=506 y1=173 y2=206/><m x1=4x2=506 y1=217 y2=250/><m x1=5 x2=505 y1=260 y2=293/><m x1=518 x2=1018 y1=75 y2=109/><m x1=517 x2=1018 y1=120 y2=152/><m x1=517 x2=1017y1=164 y2=197/><m x1=516 x2=1017 y1=209 y2=240/></map> Explanation:

QUESTION 257Which switch is not a valid Cisco Nexus 7000 Series model?

A. Cisco Nexus 7000 4-slot switchB. Cisco Nexus 7000 8-slot switchC. Cisco Nexus 7000 9-slot switchD. Cisco Nexus 7000 10-slot switchE. Cisco Nexus 7000 18-slot switch



The Cisco Nexus 7000 9-Slot Switch provides:References:

QUESTION 258Which two actions must occur to disable the LAN traffic on an FCoE link to a host? (Choose two.)

A. interface Ethernet 1/1shutdown lanB. The switch sends a LAN logical link status message to the CNA host.C. interface vfc11shutdown lan

D. The switch send a PFC command to the CNA host.E. interface Ethernet 1/1vlan 10 disable

Correct Answer: ABSection: Cisco Unified Computing SystemExplanation

Explanation/Reference:Explanation:Host Interfaces (HIFs) on fabric extender connections to servers in a port channel are supported in the regular non-vPC fabric extender topology and both the fabricextender straight-through and fabric extender active-active (A-A) topologies.

Cisco NX-OS supports FCOE only on straight-through topologies. The following figure shows the two fabric extenders in a straight-through topology. Cisco NX-OSdoes not support FCoE over A-A fabric extender HIFs.

Host CNAs can be dually homed in A-A mode to fabric extender HIFs, and the fabric extender should be in straight-through mode.

Only vPCs are supported across the HIFs to host CNAs . Cisco NX-OS does not support downlink server vPCs to host CNAs and fabric extender vPCs in A-Amode together.References:

QUESTION 259How many licenses are provided with the purchase of the Cisco UCS 6296 fabric interconnect?

A. 18B. 16C. 12D. 8



Each Cisco UCS fabric interconnect comes with several port licenses that are factory installed and shipped with the hardware. Fabric interconnects can bepurchased fully licensed or partially licensed. Additional licenses can also be purchased after delivery. At a minimum, each fabric interconnect ships with thefollowing counted licenses pre-installed:

References:

QUESTION 260Cisco UCS provides integration interfaces and protocols to support heterogeneous data center environments and supports standard monitoring and eventnotification systems, providing data to standard enterprise-management tools.

Which two of these lists the primary Cisco UCS interfaces and industry standard-based read-only interfaces? (Choose two.)

A. UCS Manager XML API and UCS CLIB. SNMP, SMASH CLP, and CIM-XMLC. UCS Manager, DCOS, and Local-mgmtD. SoL and NX-OSE. debug-plugin and UCS Manager GUI

Correct Answer: ABSection: Cisco Unified Computing SystemExplanation


Supported Cisco UCS interfaces and protocols include the following:References:

QUESTION 261Server load balancing (SLB) is the process of deciding to which server a load-balancing device should send a client request for service.

Which predictors are supported on ACE in order to select the best server to fulfill a client request? (Choose three.)

A. Hash address: Selects the server by using a hash value based on either the source or destination IP address, or bothB. Hash URL: Selects the server by using a hash value based on the requested URLC. Hash MAC. Selects the server by using a hash value based on either the source or destination MAC address, or bothD. Hash header: Selects the server by using a hash value based on the HTTP header nameE. Hash IP: Selects the server using a hash value based on the IP address

Correct Answer: ABDSection: Cisco Application Networking Services

Explanation


Cisco ACE performs a series of checks and calculations to determine the server that can best service each client request according to the load-balancing algorithmor predictor. Cisco ACE uses the following predictors to select the best server to satisfy a client request:

References:

QUESTION 262Application Control Engine (ACE) can check the health of servers and server farms by configuring health probes (which are sometimes referred to as keepalives). Aprobe can be one of many types.Which are valid ACE probes? (Choose three.)

A. HTTPB. Java scriptingC. TCL scriptingD. RADIUSE. TACACS

Correct Answer: ACDSection: Cisco Application Networking ServicesExplanation


You can instruct the ACE to check the health of servers and server farms by configuring health probes (sometimes referred to as keepalives). After you create aprobe, you assign it to a real server or a server farm. A probe can be one of many types, including TCP, ICMP, Telnet, HTTP, and so on. You can also configurescripted probes using the TCL scripting language.

The ACE sends out probes periodically to determine the status of a server, verifies the server response, and checks for other network problems that may prevent aclient from reaching a server. Based on the server response, the ACE can place the server in or out of service, and, based on the status of the servers in the serverfarm, can make reliable load-balancing decisions.

References:

QUESTION 263When testing ICMP access to a functional load-balancing ACE VIP, it fails. What is the reason of this problem? (Choose two.)

A. The interface is shut downB. An access list is denying ICMPC. Routing is not configured properlyD. vip icmp-reply is inactive

Correct Answer: BDSection: Cisco Application Networking ServicesExplanation


When you edit an ACL, it requires special attention. For example, if you intend to delete a specific line from a numbered ACL that exists as shown here, the entireACL is deleted.

!--- The access-list 101 denies icmp from any to any network !--- but permits IP traffic from any to any network.

router#configure terminalEnter configuration commands, one per line. End with CNTL/Z.router(config)#access-list 101 deny icmp any anyrouter(config)#access-list 101 permit ip any anyrouter(config)#^Z

router#show access-listExtended IP access list 101deny icmp any anypermit ip any anyrouter#*Mar 9 00:43:12.784: %SYS-5-CONFIG_I: Configured from console by console

router#configure terminalEnter configuration commands, one per line. End with CNTL/Z.router(config)#no access-list 101 deny icmp any anyrouter(config)#^Z

router#show access-listrouter#*Mar 9 00:43:29.832: %SYS-5-CONFIG_I: Configured from console by console

References:

QUESTION 264Which is true when describing a connection replication in Cisco ACE?

A. It is not supported for SSL connections.B. It is not supported for non-SSL connections.C. It can only be configured manually.D. It has a maximum limit of 50,000 replicated connections.

Correct Answer: ASection: Cisco Application Networking ServicesExplanation


The ACE does not replicate SSL and other terminated (proxied) connections from the active context to the standby context.

References:

QUESTION 265Which of the following are supported in Cisco Global Site Selector? (Choose three.)

A. Full DNS functionality as a replacement of a DNSB. Responds to a DNS query with A-recordC. Forwards queries to a name serverD. Multiple A-recordsE. DHCP functionality for the local hosts

Correct Answer: BCDSection: Cisco Application Networking ServicesExplanation


With the CRA answer, requests received from a particular D-proxy are served by the content server that responds first to the request. Response time is measuredusing a DNS race, coordinated by the GSS and content routing agents running on each content server. In the DNS race, multiple hosts respond simultaneously toan A-record request. The server with the fastest response time (the shortest network delay between itself and the client's D-proxy) is chosen to serve the content.References:

QUESTION 266What is the purpose of this command in a Cisco Application Control Engine? switch/Admin# show np 1 me-stats "-F0 v"

A. It displays the status of the internal SSL proxy structure associated with a vserver.B. It displays the crypto-related statistics for a single NP.C. It is the same output of a "show stats crypto" client/server.D. It shows details on HTTP session entries.

Correct Answer: ASection: Cisco Application Networking ServicesExplanation


To monitor the Fastpath processing queues, use the show np <1|2|3|4> me-stats "-s fp" command and verify that FastQ Transmit Backpressure, SlowQ TransmitBackpressure, Drop: Transmit Backpressure, and Drop: Next-Hop queue full are not incrementing. ACE/Admin# show np 1 me-stats "-s fp -v" | includeBackpressure FastQ Transmit Backpressure: 0 0SlowQ Transmit Backpressure: 0 0Hyperion Transmit Backpressure: 0 0Drop: Transmit Backpressure: 0 0ACE/Admin# show np 1 me-stats "-s fp -v" | include queue Drop: Next-Hop queue full: 0 0

References:


Which command would produce this output?

A. show stats HTTPB. show stats load balanceC. show stats probe typeD. show parameter map

Correct Answer: BSection: Cisco Application Networking ServicesExplanation


If the timeout is too short, the client-side connection and resulting pmap entry might be removed before the radius response message is received by the ACE. In thiscase, the response is dropped and "Total Layer7 rejections" counter will be incremented under show stats loadbalance radius.

References:

QUESTION 268Which option describes the default predictor on ACE to select the best server to fulfill a client request?

A. the hash cookie, which selects the server by using a hash value that is based on a cookie nameB. least bandwidth, which selects the server that processed the least amount of network trafficC. round robin, which selects the next server in the list of real servers

D. the hash DNS, which selects the server using a hash value that is based on FQDN

Correct Answer: CSection: Cisco Application Networking ServicesExplanation


Round Robin selects the next server in the list of real servers based on the server weight (weighted round-robin). Servers with a higher weight value receive ahigher percentage of the connections. This is the default predictor.References:

QUESTION 269Refer to the exhibit.Which type of SSL offload configuration is shown in the output?

A. SSL terminationB. SSL initiationC. end-to-end SSLD. SSL testing

Correct Answer: BSection: Cisco Data Center ArchitectureExplanation


SSL initiation refers to configuring an ACE context for a back-end application in which the ACE operates as a client that communicates with an SSL server. Whenyou create a Layer 7 policy map to define the flow between an ACE and an SSL server, the ACE operates as a client and initiates the SSL session between theACE and the server. SSL initiation enables the ACE to receive clear text from a client and then to establish an SSL session with an SSL server and join the clientconnection with the SSL server connection. The ACE encrypts the clear text that it receives from the client and sends the data as ciphertext to an SSL server. TheSSL server can either be an ACE configured for SSL termination (virtual SSL server) or a real SSL server (web server).

On the outbound flow from the SSL server, the ACE decrypts the ciphertext from the server and sends clear text back to the client.

References:

QUESTION 270Which three capabilities make the Cisco Nexus 7010 switch an effective solution for the data center core? (Choose three.)

A. virtualizationB. unified I/OC. support for 48-port Gb/s line cardD. support for Data Center Service ModulesE. high performanceF. high availability

Correct Answer: BEFSection: Cisco Data Center ArchitectureExplanation


The Cisco Nexus 7000 F2-Series Module also delivers integrated FCoE, greatly simplifying the network infrastructure and reducing costs by enabling thedeployment of unified data center fabrics to consolidate data center traffic onto a single, general-purpose, high-performance, highly available network. With theCisco Nexus 7000 F2-Series Module, FCoE can be deployed in director-class modular platforms for the access and core of converged networks. In addition toFCoE host and target support, the module provides virtual expansion port (VE-port) support, allowing creation of FCoE Inter-Switch Links (ISLs) and enablingscalable, multi-hop FCoE topologies.


test-king.350-080.270questions - gratis exam€¦ · 21/5/2015 · overlay transport...

Documents