Cisco 642-997 Online Practice Questions and Exam Preparation

Cisco 642-997 Online Questions & Answers

• Question 31:

  Which three items must be configured in the port profile client in Cisco UCS Manager? (Choose three.)

  A. port profile
  B. DVS
  C. data center
  D. folder
  E. vCenter IP address
  F. VM port group
  B. DVS
  C. data center
  D. folder

  ---

  After associating an ESX host to a DVS, you can migrate existing VMs from the vSwitch to the DVS, and you can create VMs to use the DVS instead of the vSwitch. With the hardware-based VN-Link implementation, when a VM uses the

  DVS, all VM traffic passes through the DVS and ASIC-based switching is performed by the fabric interconnect. In Cisco UCS Manager, DVSes are organized in the following hierarchy:

  vCenter

  Folder (optional)

  Datacenter

  Folder (required)

  DVS

  At the top of the hierarchy is the vCenter, which represents a VMware vCenter instance. Each vCenter contains one or more datacenters, and optionally vCenter folders with which you can organize the datacenters. Each datacenter contains

  one or more required datacenter folders. Datacenter folders contain the DVSes.

  Reference:

  http://www.cisco.com/c/en/us/td/docs/unified_computing/ucs/sw/gui/config/guide/1-3- 1/b_UCSM_GUI_Configuration_Guide_1_3_1/UCSM_GUI_Configuration_Guide_1_3_1_c hapter28.html

• Question 32:

  Drag the network characteristics on the left to the most appropriate design layer on the right.

  Select and Place:

  

  

• Question 33:

  Which command enables NPIV on Cisco Nexus 5000 Series Switches and Cisco MDS switches?

  A. switch(config)# npiv enable
  B. switch(config)# npivon
  C. switch(config)# feature npiv
  D. switch(config)# npiv proxy
  E. switch(config)# np proxy-enable
  C. switch(config)# feature npiv

  ---

  This command enables NPIV for all VSANs on the switch.

  Reference: http://www.cisco.com/c/en/us/td/docs/switches/datacenter/sw/nx- os/san_switching/configuration/guide/b_Cisco_Nexus_7000_NX- OS_SAN_Switching_Configuration_Guide/Cisco_Nexus_7000_NXOS_SAN_Switching_Configuration_Guide_chapter2.html

• Question 34:

  Which GLBP load-balancing algorithm ensures that a client is always mapped to the same VMAC address?

  A. vmac-weighted
  B. dedicated-vmac-mode
  C. shortest-path and weighting
  D. host-dependent
  D. host-dependent

  ---

  Host dependent--GLBP uses the MAC address of the host to determine which virtual MAC address to direct the host to use. This algorithm guarantees that a host gets the same virtual MAC address if the number of virtual forwarders does not change.

  Reference: http://www.cisco.com/c/en/us/td/docs/switches/datacenter/sw/5_x/nx- os/unicast/configuration/guide/l3_cli_nxos/l3_glbp.html

• Question 35:

  What mode is required on a Cisco Nexus 7000 32-port 10-GB module port group to allow equal access to the 10-GB port controller?

  A. dedicated
  B. assigned
  C. shared
  D. community
  C. shared

  ---

  You can share 10 Gb of bandwidth among a group of ports (four ports) on a 32-port 10- Gigabit Ethernet module. To share the bandwidth, you must bring the dedicated port administratively down, specify the ports that are to share the bandwidth, change the rate mode to shared, and then bring the ports administratively up.

  Reference: http://www.cisco.com/c/en/us/td/docs/switches/datacenter/sw/5_x/nx- os/interfaces/configuration/guide/if_cli/if_basic.html#70242

• Question 36:

  Which statement about Cisco FabricPath is true?

  A. It is the best solution for interconnecting multiple data centers.
  B. It optimizes STP throughout the Layer 2 network.
  C. It is a simplified extension of Layer 3 networks across a single data center.
  D. The Cisco FabricPath domain appears as a single STP bridge, where each edge port uses the same MAC address.
  D. The Cisco FabricPath domain appears as a single STP bridge, where each edge port uses the same MAC address.

  ---

  To have a loop-free topology for the CE/FabricPath hybrid network, the FabricPath network automatically displays as a single bridge to all connected CE devices. The STP domains do not cross into the FabricPath network. If multiple STP

  domains are defined, BPDUs and topology change notifications (TCNs) are localized to the domain. If a connected STP domain is multihomed to the FabricPath domain, a TCN must be able to reach to all devices in the STP domain through

  the FabricPath domain. As a result, the TCN is sent to the FabricPath domain through the IS-IS protocol data unit (PDU) by default.

  Reference:

  http://www.cisco.com/en/US/docs/switches/datacenter/nexus5000/sw/mkt_ops_guides/513 _n1_1/n5k_ops_fabricpath.html

• Question 37:

  A Cisco Nexus 2000 Series Fabric Extender is connected to two Cisco Nexus 5000 Series switches via a vPC link. After both Cisco Nexus 5000 Series switches lose power, only one switch is able to power back up. At this time, the Cisco Nexus 2000 Series Fabric Extender is not active and the vPC ports are unavailable to the network.

  Which action will get the Cisco Nexus 2000 Series Fabric Extender active when only one Cisco Nexus 5000 Series switch is up and active?

  A. Move the line from the failed Cisco Nexus 5000 Series switch to the switch that is powered on, so the port channel forms automatically on the switch that is powered on.
  B. Shut down the peer link on the Cisco Nexus 5000 Series switch that is powered on.
  C. Configure reload restore or auto-recovery reload-delay on the Cisco Nexus 5000 Series switch that is powered on.
  D. Power off and on the Cisco Nexus 2000 Series Fabric Extender so that it can detect only one Cisco Nexus 5000 Series switch at power up.
  C. Configure reload restore or auto-recovery reload-delay on the Cisco Nexus 5000 Series switch that is powered on.

  ---

  The vPC consistency check message is sent by the vPC peer link. The vPC consistency check cannot be performed when the peer link is lost. When the vPC peer link is lost, the operational secondary switch suspends all of its vPC member

  ports while the vPC member ports remain on the operational primary switch. If the vPC member ports on the primary switch flaps afterwards (for example, when the switch or server that connects to the vPC primary switch is reloaded), the

  ports remain down due to the vPC consistency check and you cannot add or bring up more vPCs.

  Beginning with Cisco NX-OS Release 5.0(2)N2(1), the auto-recovery feature brings up the vPC links when one peer is down. This feature performs two operations:

  If both switches reload, and only one switch boots up, auto-recovery allows that switch to assume the role of the primary switch. The vPC links come up after a configurable period of time if the vPC peer-link and the peer-keepalive fail to

  become operational within that time. If the peer-link comes up but the peer-keepalive does not come up, both peer switches keep the vPC links down. This feature is similar to the reload restore feature in Cisco NX- OS Release 5.0(2)N1(1)

  and earlier releases. The reload delay period can range from 240 to 3600 seconds.

  When you disable vPCs on a secondary vPC switch because of a peer-link failure and then the primary vPC switch fails, the secondary switch reenables the vPCs. In this scenario, the vPC waits for three consecutive keepalive failures before

  recovering the vPC links.

  Reference:

  http://www.cisco.com/c/en/us/td/docs/switches/datacenter/nexus5000/sw/operations/n5k_v pc_ops.html

• Question 38:

  Which statement about the implementation of Cisco TrustSec on Cisco Nexus 7000 Series Switches is true?

  A. While SGACL enforcement and SGT propagation are supported on the M and F modules, 802.1AE (MACsec) support is available only on the M module.
  B. SGT Exchange Protocol is required to propagate the SGTs across F modules that lack hardware support for Cisco TrustSec.
  C. AAA authentication and authorization is supported using TACACS or RADIUS to a Cisco Secure Access Control Server.
  D. Both Cisco TrustSec and 802.1X can be configured on an F or M module interface.
  A. While SGACL enforcement and SGT propagation are supported on the M and F modules, 802.1AE (MACsec) support is available only on the M module.

  ---

  The M-Series modules on the Nexus 7000 support 802.1AE MACSEC on all ports, including the new M2-series modules. The F2e modules will have this feature enabled in the future.

  It is important to note that because 802.1AE MACSEC is a link-level encryption, the two MACSEC-enabled endpoints, Nexus 7000 devices in our case, must be directly L2 adjacent. This means we direct fiber connection or one facilitated with

  optical gear is required. MACSEC has integrity checks for the frames and intermediate devices, like another switch, even at L2, will cause the integrity checks to fail. In most cases, this means metro-Ethernet services or carrier-provided label

  switched services will not work for a MACSEC connection.

  Reference: http://www.ciscopress.com/articles/article.asp?p=2065720

• Question 39:

  Which statement is true if password-strength checking is enabled?

  A. Short, easy-to-decipher passwords will be rejected.
  B. The strength of existing passwords will be checked.
  C. Special characters, such as the dollar sign ($) or the percent sign (%), will not be allowed.
  D. Passwords become case-sensitive.
  A. Short, easy-to-decipher passwords will be rejected.

  ---

  If a password is trivial (such as a short, easy-to-decipher password), the cisco NX_OS software will reject your password configuration if password-strength checking is enabled. Be sure to configure a strong password. Passwords are case sensitive.

  Reference: http://www.cisco.com/c/en/us/td/docs/switches/datacenter/nexus9000/sw/7- x/security/configuration/guide/b_Cisco_Nexus_9000_Series_NX- OS_Security_Configuration_Guide_7x/b_Cisco_Nexus_9000_Series_NXOS_Security_Configuration_Guide_7x_chapter_01000.pdf

• Question 40:

  Which two items are features that are available in VN-Link in software? (Choose two.)

  A. VM snapshot
  B. NetFlow
  C. ERSPAN
  D. high availability
  E. resource reservations
  B. NetFlow
  C. ERSPAN

  ---

  NetFlow is a feature that was introduced on Cisco routers that provides the ability to collect IP network traffic as it enters or exits an interface. By analyzing the data provided by NetFlow, a network administrator can determine things such as

  the source and destination of traffic, class of service, and the causes of congestion. A typical flow monitoring setup (using NetFlow) consists of three main components:

  Flow exporter: aggregates packets into flows and exports flow records towards one or more flow collectors.

  Flow collector: responsible for reception, storage and pre-processing of flow data received from a flow exporter.

  Analysis application: analyzes received flow data in the context of intrusion detection or traffic profiling,

  This module describes how to configure Encapsulated Remote Switched Port Analyzer (ERSPAN). The Cisco ERSPAN feature allows you to monitor traffic on one or more ports or VLANs and send the monitored traffic to one or more

  destination ports.

  Reference: http://www.cisco.com/c/en/us/td/docs/ios-xml/ios/lanswitch/configuration/xe- 3s/lanswitch-xe-3s-book/lnsw-conf-erspan.html