An engineer must automate the provisioning of Cisco ACI objects using the Terraform tool. The engineer must ensure that APIC counts the authentication login requests against the threshold to avoid a DOS attack. Which configuration must be used in Terraform to accomplish these goals?

provider with signature-based authentication

resources with user ID and password

resources with signature-based authentication

provider with user ID and password

provider with signature-based authentication

A network automation engineer must configure a Cisco NX-OS REST API on a Cisco 9000 Series Switch with these requirements:* NX-API REST and the DME database must be enabled.* The NX-API REST must listen for HTTP traffic on port 83.* The HTTPS certificate must be uploaded.Which configuration set must be used to accomplish these goals?

feature nxapi nxapi (tcp) port 83 nxapi certificate {httpscrt} nxapi certificate enable

feature nxapi nxapi (tcp) port 83 nxapi certificate {httpscrt}

feature nxapi nxapi (tcp) port 83 nxapi certificate {httpscrt} nxapi certificate enable

feature nxapi nxapi (http) port 83 nxapi certificate {httpscrt}

feature nxapi nxapi {http} port 83 nxapi certificate {httpscrt | httpskey} nxapi certificate enable

Refer to the exhibit. An engineer reported suspicious behaviour in a server farm that is deployed on the 198.19.1.0/24 subnet. The traffic must be captured only from the server with the IP address of 198.19.1.19/24. The traffic analyzer is connected to the same switch as the server farm. Which configuration set captures the traffic?

switch(config)# ip access-lisl match_Server_pkts switch(config-acl)# permit ip 198.19.1.19 255.255.255.255 any switch(config)# monitor session 1 switch(config-monitor)# filter access-group span.filter

switch(config)# ip access-list match_Server_pkts switch(config-acl)# permit ip 198.19.1.19 0.0.0.0 any switch(config)# monitor session 1 switch {config-m on itor)# filter access-group span.filter

switch(config)# ip access-list match_Server_pkts Switch{config-acl)# permit ip 198.19.1.19 0.0.0.0 any switch(config)# monitor session 1 switch (config-m on itor)# filter access-group 5

switch(config)# ip access-lisl match_Server_pkts switch(config-acl)# permit ip 198.19.1.19 255.255.255.255 any switch(config)# monitor session 1 switch(config-monitor)# filter access-group span.filter

switch(config)# ip access-list match_Server_pkts switch(config-acl)# permit ip 198.19.1.19 255.255.255.0 any switch(config)# monitor session 1 switch (config-m on itor)# filter access-group span_filter

A QoS policy on Cisco UCS must meet these requirements:* No-drop class must be configured.* Jumbo frames must be enabled without fragmentation.Which configuration must be implemented to mast these conditions?

Create a QoS system class and specify an MTU value of 9216 bytes.

Configure slow-drain timers and specify an MTU value of 9100 bytes.

Create a Flow Control Policy and specify an MTU value of 9000 bytes.

Create a QoS system class and specify an MTU value of 9216 bytes.

Configure Platinum system class and specify an MTU value of 9100 bytes.

Refer to the exhibit. A source is sending a multicast traffic stream to the receiver. How is the multicast traffic expected to flow through the network when it reaches a vPC peer?

* The multicast traffic is replicated to the ports that joined a given multicast group and the peer link. * The multicast traffic stream flows over the peer link to ensure that orphan ports receive the multicast stream in failure scenarios.

* The multicast traffic is not replicated to the ports that joined a multicast group (224.0.0.13) or the peer link. * The multicast traffic stream flows over the vPC link to ensure that orphan ports get the multicast stream in failure scenarios.

* The multicast traffic is replicated to the ports that joined a given multicast group and the peer link. * The multicast traffic stream flows from Agg-1 to Agg-2 over the M1-to-M2 peer link and forwards the traffic over Layer 4 to Access-2.

* The multicast traffic is replicated to the ports that joined a given multicast group and the peer link. * The multicast traffic stream flows over the peer link to ensure that orphan ports receive the multicast stream in failure scenarios.

* The multicast traffic is not replicated to the ports that joined a multicast group (224.0.0.13) or the peer link. * The multicast traffic stream flows from Agg-1 to Agg-2 over the M1-to-M2 peer link and forwards the traffic over Layer 4 to Access-2.

Refer to the exhibit. An engineer runs a Python script from a newly enabled guest shell on a Cisco Nexus 93108 Series Switch. The script needs an additional package called 'Markdown' installed from the Python package manager. Which set of tasks must the engineer perform to install the required package?

Add nameserver configuration to /etc/resolv.conf. Run sudo chvrf management pip install Markdown.

Set the NAMESERVER variable in /etc/sysconfig/network. Clone the Markdown repository with the git clone command.

Add nameserver configuration to /etc/resolv.conf. Run sudo chvrf management pip install Markdown.

Enable ip domain-lookup in startup-config. Enter python install Markdown as root.

Configure ip name-server in configuration mode. Execute sudo yum -y install Markdown.

Refer to the exhibit. An engineer is performing a Cisco Nexus 3000 Series Switch configuration backup with a TFTP server that is reachable in the global routing table. Which action completes the scheduler configuration?

Use the default VRF for the scheduler job.

Configure the scheduler authentication password.

Define the scheduler start time as required.

Make the size of the job output lower than the size of the log file.

Refer to the exhibit. An engineer configures FCoE in a newly installed data center. Which configuration must be applied to activate VSAN 100 on VFC100?

Allow VSAN 100 on interface eth1/12.

Issue the shutdown Ian command on VFC 100.

An engineer must configure port aggregation between two Cisco MDS 9000 Series Switches. The solution must meet these requirements:* Suspend member interface if parameters mismatch.* Load-balance traffic on multiple ports.* Support traffic from multiple VSANs.Which port channel configuration must be used?

Port type: E Port - Port channel mode: Active

Port type: FT Port - Port channel mode: Active

Port type: F Port - Port channel mode: On

Port type: E Port - Port channel mode: Active

Port type: TE Port - Port channel mode: On

An engineer implements an environment with multiple traffic types on a consolidated I/O link between Cisco Nexus 9000 Series Switch and MDS9000 Series Switch. The configuration must meet these requirements:* The unified I/O link must support LAN and SAN traffic.* A single, multipurpose Ethernet transport must be used.* The configuration must discard MAC addresses that are not part of the current fabric.* The QoS markings must be preserved.Which configuration set meets the requirements?

N9K-2(config)# interface Eth2 - N9K-2(config-if)# switchport mode trunk N9K-2(config-if)# auto qos trust dscp

MDS-A(config)# interface fcip4 - MDS-A(config-if)# use-profile 8 - MDS-A(config-if)# peer-info ipaddr 200.200.100.7

N9K-2(config)# interface Eth2 - N9K-2(config-if)# switchport mode trunk N9K-2(config-if)# auto qos trust dscp

MDS-B(config)# interface fc3 - MDS-B(config-if)# switchport trunk mode on MDS-B(config-if)# switchport trunk allowed vsan 2-5

N9K-1(config)# fcoe fcmap 0e.fc.1d N9K-1(config)# int vfc 1 - N9K-1(config-if)# bind interface e1/3

Refer to the exhibit. A VXLAN data center fabric consists of three hosts mapped to different VLANs. Ingress VTEPs perform Layer 2 bridging and Layer 3 routing. Egress VTEPs only perform a Layer 2 bridging lookup. Which VNI values must be set to allow inter-VNI communication?

VLAN 100 to Layer 2 VNI 2020 - Test_Telco_VRF to Layer 3 VNI 1010

VLAN 100 to Layer 2 VNI 2020 - Test_Telco_VRF to Layer 3 VNI 5050

VLAN 100 to Layer 2 VNI 2020 - VLAN 200 to Layer 2 VNI 5050

VLAN 100 to Layer 2 VNI 2020 - Test_Telco_VRF to Layer 3 VNI 1010

VLAN 100 to Layer 2 VNI 1010 - VLAN 200 to Layer 2 VNI 1010

An engineer is implementing VSANs on a Cisco MDS 9000 Series Switch with a native Fibre Channel. The deployment must meet these requirements:* The host on port fc1/1 must be assigned to VSAN 10.* The port channel 10 ISL must pass multiple VSANs, including VSAN 10.Which configuration set meets these requirements?

Create VSAN 10 in the VSAN database. Bind VSAN 10 to interface fc1/1 in the VSAN database. Enable VSAN trunking on the ISL. Allow VSAN 10 on the ISL.

Activate VSAN 10 in the vFC interface. Associate VSAN 10 to interface vfc 1/1. Enable vsan F-port-channel-trunk on the ISL. Set encapsulation EISL on the switch port.

Create VSAN 10 in the VSAN database. Bind VSAN 10 to interface fc1/1 in the VSAN database. Enable VSAN trunking on the ISL. Allow VSAN 10 on the ISL.

Configure VSAN 10 in the interface configuration. Attach VSAN 10 to the VSAN database. Enable VSAN trunking on fc1/1. Filter all VSAN on the ISL.

Disable VSAN 1 in the VSAN database. Assign VSAN 10 to the ISL. Enable VSAN trunking on the port channel members. Permit VSAN 10 in the FLOGI database.

An engineer must perform a backup and restore in Cisco UCS to rebuild the system in a disaster recovery scenario. The backup file must be encrypted to prevent the passwords from being stored as clear text. Which backup configuration meets these requirements?

Logical configuration backup over SCP

System configuration backup over FTP

All configuration backup over SFTP

The Cisco TACACS+ on a Cisco Nexus Series Switch must authenticate any user attempting to access the device and fail over to the local account if the TACACS+ sever becomes unavailable.Which command accomplishes these goals?

aaa authentication login default group ISE local

aaa authentication login default fallback error local

aaa authentication login console group local

aaa authentication login default local

aaa authentication login default group ISE local

Refer to the exhibit. An engineer must access a Cisco UCS C-Series server KVM from a remote location. The engineer must use the out-of-band interface to access the KYM. Which configuration set meets these requirements?

NIC mode: Dedicated - VLAN state: Disabled

NIC mode: Shared LOM - VLAN ID: 100

NIC mode: Dedicated - VLAN ID: 101

NIC mode: Dedicated - VLAN state: Disabled

NIC mode: Shared LOM - VLAN state: Disabled

A Cisco IMC on the Cisco UCS C-Series Server must be configured with VLAN ID 110 and a priority value of 20. Which command set meets these requirements?

Server# scope cimc - Server /cimc # scope network - Server /cimc/network # set vlan-enabled yes Server /cimc/network *# set vlan-id 110 Server /cimc/network *# set vlan-priority 20 Server /cimc/network *# commit

Server# scope cimc - Server /cimc # scope vlan - Server /cimc/network # enable vlan Server /cimc/network *# set vlan-id 110 Server /cimc/network *# set vlan-priority 20 Server /cimc/network *# commit

Server# scope cimc - Server /cimc # scope network - Server /cimc/network # set vlan-enabled yes Server /cimc/network *# set vlan-id 110 Server /cimc/network *# set vlan-priority 20 Server /cimc/network *# commit

Server# scope cimc - Server /cimc # scope network - Server /cimc/network # switchport mode trunk Server /cimc/network *# switchport trunk native vlan 110 Server /cimc/network *# spanning-tree portfast Server /cimc/network *# copy run start

Server# scope cimc - Server /cimc # scope network - Server /cimc/network # switchport mode access Server /cimc/network *# switchport access 110 Server /cimc/network *# spanning-tree portfast Server /cimc/network *# copy run start