Cisco CCNP 350-601 Questions & Answers

• Question 411:

  Refer to the exhibit.

  

  What is a characteristic presented in the service profile of the UUID?

  A. based on the hardware

  B. vendor assigned

  C. unique system generated

  D. allocated from a UUID pool

  Correct Answer: A

  There is no parameter for 'set identity dynamic-uuid' to specify a pool name-you can only state "derived" or a 32 hex character string (128-bits, therefore full UUID). ucspe /org/service-profile # set identity dynamic-uuid derived Derived FFFFFFFF-FFFF-FFFF-FFFF-FFFFFFFFFFFF Dynamic UUID The documentation, as usual for Cisco, is poor. Shagua references old v1.4.1 documentation but it's the same in 4.1. It's inaccurate as uuid-pool should now read uuid-suffix- pool. You can use UCSPE to check the CLI with contextual help. ucspe /org/service-profile # set identity dynamic-uuid Dynamic UUID dynamic-wwnn Dynamic WWNN uuid-suffix-pool UUID Suffix Pool wwnn-pool WWNN Pool If set identity dynamic-uuid only gives us the option of a static UUID or the parameter "derived", and set identity uuid-suffix-pool is the option to assign a pool... I would suggest that the most logical answer here is -derived from the hardware. https://www.cisco.com/en/US/docs/unified_computing/ucs/sw/cli/config/guide/1.4.1/CLI_Config_Guide_1_4_1_chapter27.html

• Question 412:

  A Cisco MDS 9000 series storage Switch has reloaded unexpectedly. Where does the engineer look for the latest core dump file?

  A. /mnt/core

  B. /mnt/pss

  C. /mnt/logs

  D. /mnt/recovery

  Correct Answer: B

  

  https://www.cisco.com/c/en/us/td/docs/switches/datacenter/mds9000/sw/6_2/configuration/ guides/system_management/nx-os/sysmgmt_cli_6-x/sys.html https://www.cisco.com/c/en/us/td/docs/switches/datacenter/mds9000/sw/6_2/ configuration/ guides/system_management/nx-os/sysmgmt_cli_6-x/sys.html#37039

• Question 413:

  What is an advantage of using Ansible for automation as compared to puppet and chef?

  A. Ansible automates the enforcement of configuration settings.

  B. Ansible perform automation without installing a software agent on the target node.

  C. Ansible configures a set of CLI commands on a device by using NETCONF.

  D. Ansible abstracts a scenario so that set of configuration setting can be used across multiple operating systems.

  Correct Answer: B

• Question 414:

  What is required for using Ansible with HTTP/HTTPS protocol in a Cisco NX-OS environment?

  A. SSH

  B. Open Agent Container

  C. XML management interface

  D. NX-API

  Correct Answer: D

  https://docs.ansible.com/ansible/2.5/modules/nxos_nxapi_module.html https://docs.ansible.com/ansible/latest/network/user_guide/platform_nxos.html

• Question 415:

  A network engineer is adding a Cisco HyperFlex data platform to the Cisco intersight management portal. Which two components are required for Intersight to claim the Cisco HyperFlex data platform? (Choose two.)

  A. device FQDN

  B. device public IP address

  C. device claim code

  D. device ID

  E. device serial number

  Correct Answer: CD

  

  Text

  

  https://www.cisco.com/c/en/us/td/docs/hyperconverged_systems/HyperFlex_HX_DataPlatf ormSoftware/HyperFlex_Installation_Guide_for_Intersight/b_HyperFlex_Installation_Guide_for_Intersight/ b_HyperFlex_Installation_Guide_for_Intersight_chapter_011.html https://www.cisco.com/c/en/us/support/docs/hyperconverged-infrastructure/hyperflex-hx-dataplatform/214268-cisco-intersight-hyperflex-installatio.html

• Question 416:

  Refer to the exhibit.

  

  What is the result of implementing this configuration?

  A. The TACACS+ server uses the type-6 encrypted format.

  B. The switch queries the TACACS+ server by using a clear text PAP login.

  C. The timeout value on the TACACS+ server is 10 seconds.

  D. The switch queries the TACACS+ server by using an encrypted text PAP login.

  Correct Answer: D

  tacacs-server key To configure a global TACACS+ shared secret key, use the tacacs-server key command. To remove a configured shared secret, use the no form of this command. tacacs-server key [0 | 7] shared-secret Syntax Description 7 (Optional) Configures a preshared key specified in encrypted text to authenticate communication between the TACACS+ client and server.

• Question 417:

  Which two statements describe about modifying Cisco UCS user accounts are true? (Choose two.)

  A. The password of the user account must contain a minimum of 10 characters.

  B. Disabling a user account maintains all of the data in the Cisco UCS Fabric Interconnect.

  C. Local user accounts override the same account on a remote authentication server, such as TACACS, RADIUS, or LDAP.

  D. The password of the user account expires in 30 days.

  E. The admin account can be used to log on by using SSH only.

  Correct Answer: BC

  https://www.cisco.com/c/en/us/td/docs/unified_computing/ucs/ucs-manager/GUI-User-Guides/Admin-Management/31/b_Cisco_UCS_Admin_Mgmt_Guide_3_1/b_UCSM_Admin_Mgmt_Guide_chapter_01.html

• Question 418:

  When the default firmware package is set a new version, which type of policy determines the timing of server reboots during the firmware upgrade?

  A. maintenance

  B. local disk

  C. BIOS

  D. diagnostics

  Correct Answer: A

• Question 419:

  Which two authentication types does Cisco UCS Manager support when configuration authentication? (Choose two.)

  A. local

  B. LDAP

  C. 802.1X

  D. Kerberos

  E. PAM

  Correct Answer: AB

  https://www.cisco.com/c/en/us/td/docs/unified_computing/ucs/ucs-manager/GUI-User-Guides/AdminManagement/3-2/b_Cisco_UCS_Admin_Mgmt_Guide_3_2/ b_Cisco_UCS_Admin_Mgmt_Guide_3_2_chapter_0101.html

• Question 420:

  Host1 is in VLAN100 located in DataCenter1 and Host2 is in VLAN200 located in DataCenter2.

  Which OTV VLAN mapping configuration allows Layer 2 connectivity between these two hosts?

  

  A. Option A

  B. Option B

  C. Option C

  D. Option D

  Correct Answer: A