Cisco 300-165 Online Practice Questions and Exam Preparation

Cisco 300-165 Online Questions & Answers

• Question 121:

  DRAG DROP

  Drag and drop the LISP infrastructure device names on the left to the correct descriptions on the right.

  Select and Place:

  

  

• Question 122:

  Refer to the exhibit.

  

  You must configure zones on a Cisco MDS 9000 Series SAN switch. Host_A must be able to communicate with target_A and with target_B in the Zoneset_10 active zone set in VSAN 10. Which command set should you use?

  

  A. Option A
  B. Option B
  C. Option C
  D. Option D
  D. Option D

• Question 123:

  Which three VDC resources can be constrained with a resource template? (Choose three.)

  A. CLs
  B. NAT entries
  C. IPv4 routes
  D. IPv6 routes
  E. SPAN sessions
  F. RBAC users
  C. IPv4 routes
  D. IPv6 routes
  E. SPAN sessions

  ---

  VDC resource templates set the minimum and maximum limits for shared physical device resources when you create the VDC. The Cisco NX-OS software reserves the minimum limit for the resource to the VDC. Any resources allocated to the VDC beyond the minimum are based on the maximum limit and availability on the device.

  You can explicitly specify a VDC resource template, or you can use the default VDC template provided by the Cisco NX-OS software. VDC templates set limits on the following resources: IPv4 multicast route memory IPv6 multicast route memory IPv4 unicast route memory IPv6 unicast route memory Port channels Switch Port Analyzer (SPAN) sessions VLANs Virtual routing and forwarding instances (VRFs)

  http://www.cisco.com/c/en/us/td/docs/switches/datacenter/sw/nx-os/virtual_device_context/configuration/guide/b-7k-Cisco-Nexus-7000-Series-NX-OS-Virtual-Device-Context-Configuration-Guide/vdc-res-template.html

• Question 124:

  

  Refer to the exhibit. Which statement regarding the outcome of the command is true?

  A. The switch enforces SNMP message encryption for all users.
  B. The switch enforces SNMP message encryption for the users all.
  C. SNMP requires encryption for all incoming requests.
  D. The switch responds with an authorization error for any SNMPv3 PDU requests that use a security level parameter of authNoPriv.
  C. SNMP requires encryption for all incoming requests.

• Question 125:

  Which statement is true if password-strength checking is enabled?

  A. Short, easy-to-decipher passwords will be rejected.
  B. The strength of existing passwords will be checked.
  C. Special characters, such as the dollar sign ($) or the percent sign (%), will not be allowed.
  D. Passwords become case-sensitive.
  A. Short, easy-to-decipher passwords will be rejected.

  ---

  If a password is trivial (such as a short, easy-to-decipher password), the cisco NX_OS software will reject your password configuration if password-strength checking is enabled. Be sure to configure a strong password. Passwords are case sensitive. http://www.cisco.com/c/en/us/td/docs/switches/datacenter/nexus9000/sw/7-x/security/configuration/guide/b_Cisco_Nexus_9000_Series_NX-OS_Security_Configuration_Guide_7x/b_Cisco_Nexus_9000_Series_NXOS_Security_Configuration_Guide_7x_chapter_01000.pdf

• Question 126:

  Which statement about the implementation of Cisco TrustSec on Cisco Nexus 7000 Series Switches is true?

  A. While SGACL enforcement and SGT propagation are supported on the M and F modules, 802.1AE (MACsec) support is available only on the M module.
  B. SGT Exchange Protocol is required to propagate the SGTs across F modules that lack hardware support for Cisco TrustSec.
  C. AAA authentication and authorization is supported using TACACS or RADIUS to a Cisco Secure Access Control Server.
  D. Both Cisco TrustSec and 802.1X can be configured on an F or M module interface.
  A. While SGACL enforcement and SGT propagation are supported on the M and F modules, 802.1AE (MACsec) support is available only on the M module.

  ---

  The M -Series modules on the Nexus 7000 support 802.1AE MACSEC on all ports, including the new M2-series modules. The F2e modules will have this feature enabled in the future. It is important to note that because 802.1AE MACSEC is

  a link-level encryption, the two MACSEC-enabled endpoints, Nexus 7000 devices in our case, must be directly L2 adjacent.

  This means we direct fiber connection or one facilitated with optical gear is required. MACSEC has integrity checks for the frames and intermediate devices, like another switch, even at L2, will cause the integrity checks to fail. In most cases,

  this means metro-Ethernet services or carrier-provided label switched services will not work for a MACSEC connection.

  http://www.ciscopress.com/articles/article.asp?p=2065720

• Question 127:

  Within the vPC configuration of the 7K's, the command peer-switch is configured. What is the result of enabling the command?

  A. Both vPC peers use the same STP root ID.
  B. The vPC primary switch (7K-4 in this case) also serves as the STP root to improve vPC convergence.
  C. The vPC secondary switch (7K-3 in this case) server as the STP root to improve vPC performance
  D. Allow 7K-3 to act as the active HSRP gateway for packets that are addressed to the MAC address of 7K-4
  E. Automatically disables IP redirects on all interface VLANs mapped over a vPC VLAN to avoid generation of IP redirect messages for packets switched though the vPC peer gateway router
  F. Enable faster convergence of ARP tables after the vPC peer link flaps.
  B. The vPC primary switch (7K-4 in this case) also serves as the STP root to improve vPC convergence.

• Question 128:

  Which situation must you consider when you add a remote RADIUS server to a Cisco Nexus device?

  A. If RADIUS authentication fails, the device falls back to local authentication automatically.
  B. If RADIUS authentication fails, the user is denied access with no further authentication checks.
  C. If the RADIUS server is unreachable, users are unable to log in.
  D. If the RADIUS server is unreachable, all users are given access with the default role.
  B. If RADIUS authentication fails, the user is denied access with no further authentication checks.

• Question 129:

  You have a Cisco MDS 9000 Series Switch that uses port channels. You must ensure that frames between the source and the destination follow the same links for a specific flow. Subsequent flows can use a different link. Which load balancing method do you use?

  A. source-destination-port
  B. source-destination-ip
  C. flow
  D. source id-destination id-oxid
  C. flow

• Question 130:

  

  Refer to the exhibit. Which impact of the configuration on VLAN 100 is true?

  A. The spanning tree cost value for VLAN 200 is 4.
  B. The maximum number of hops between hosts is 3.
  C. The maximum number of hops between hosts is 4.
  D. The spanning tree cost value for VLAN 100 is 65535.
  B. The maximum number of hops between hosts is 3.