ExamGecko
Home Home / Cisco / 350-601

Cisco 350-601 Practice Test - Questions Answers, Page 48

Question list
Search
Search

List of questions

Search

Related questions











Refer to the exhibit.

A Cisco MDS 9000 Series Switch is configured with RBAC. The default role applies to all users. User A is also assigned to the role Custom-Role-B. Which set of features will user A be authorized to configure?

A.

NTP - SSH - DPVM

A.

NTP - SSH - DPVM

Answers
B.

SSH - DPVM - TACACS+ NTP

B.

SSH - DPVM - TACACS+ NTP

Answers
C.

DPVM - NTP - SSH - hardware

C.

DPVM - NTP - SSH - hardware

Answers
D.

hardware environment TACACS+

D.

hardware environment TACACS+

Answers
Suggested answer: A

Explanation:

User A, having both the default role and Custom-Role-B, will be authorized to configure NTP, SSH, and DPVM. The default role allows configuration of NTP and SSH, while Custom-Role-B specifically permits DPVM configuration and denies TACACS+.

DRAG DROP

Drag and drop the NAS and NFS concepts from the left onto the definitions on the right.


Question 472
Correct answer: Question 472

DRAG DROP

An engineer must authenticate OSPF on interfaces of the Cisco Nexus 9000 Series Switch so that:

* ethl/1 uses clear text password.

* ethl/2 uses encrypted md5 password.

Drag and drop the commands from the bottom onto the boxes in the code to complete the configuration. Not all commands are used.


Question 473
Correct answer: Question 473

DRAG DROP

All logins to a Cisco Nexus 9000 Series Switch must pass through the TACACS+ server at IP address 192.168.10.10. The configuration must meet these requirements:

* The TACACS+ server must be used for SSH and Telnet.

* The TACACS+ server key must be Cisco123!.

* Management VRF must be used for connectivity.

* The deployment must fail back to local credentials if the TACACS+ server fails to respond within 30 seconds.

Drag and drop the code snippets from the right onto the blanks in the code on the left to complete the configuration. Not all code snippets are used.


Question 474
Correct answer: Question 474

The Cisco TACACS+ on a Cisco Nexus Series Switch must authenticate any user attempting to access the device and fail over to the local account if the TACACS+ sever becomes unavailable.

Which command accomplishes these goals?

A.

aaa authentication login default fallback error local

A.

aaa authentication login default fallback error local

Answers
B.

aaa authentication login console group local

B.

aaa authentication login console group local

Answers
C.

aaa authentication login default local

C.

aaa authentication login default local

Answers
D.

aaa authentication login default group ISE local

D.

aaa authentication login default group ISE local

Answers
Suggested answer: D

Explanation:

The commandaaa authentication login default group ISE localconfigures the Cisco Nexus Series Switch to use TACACS+ for authentication by default and specifies a fallback to local authentication if the TACACS+ server becomes unavailable.This ensures that users are authenticated against the TACACS+ server when it is available, but allows them to use local switch credentials if the server cannot be reached, meeting the requirement for failover to local account1.

Cisco documentation on configuring TACACS+ for Cisco Nexus Series Switches provides detailed steps and explanations for setting up authentication and ensuring failover to local accounts

Refer to the exhibit.

An engineer must access a Cisco UCS C-Series server KVM from a remote location. The engineer must use the out-of-band interface to access the KYM. Which configuration set meets these requirements?

A.

NIC mode: Shared LOM - VLAN ID: 100

A.

NIC mode: Shared LOM - VLAN ID: 100

Answers
B.

NIC mode: Dedicated - VLAN ID: 101

B.

NIC mode: Dedicated - VLAN ID: 101

Answers
C.

NIC mode: Dedicated - VLAN state: Disabled

C.

NIC mode: Dedicated - VLAN state: Disabled

Answers
D.

NIC mode: Shared LOM - VLAN state: Disabled

D.

NIC mode: Shared LOM - VLAN state: Disabled

Answers
Suggested answer: C

Explanation:

Dedicated---A connection to the CIMC is available through the management Ethernet port or ports.

Shared LOM---A connection to the CIMC is available only through the LAN On Motherboard (LOM) Ethernet host ports.

https://www.cisco.com/c/en/us/td/docs/unified_computing/ucs/c/sw/gui/config/guide/1-1-1/b_Cisco_UCS_C-Series_Servers_Integrated_Management_Controller_Configuration_Guide_1_1_1/Cisco_UCS_C-Series_Servers_Integrated_Management_Controller_Configuration_Guide_1_1_1_chapter1.html

A Cisco IMC on the Cisco UCS C-Series Server must be configured with VLAN ID 110 and a priority value of 20. Which command set meets these requirements?

A.

Server# scope cimc - Server /cimc # scope vlan - Server /cimc/network # enable vlan Server /cimc/network *# set vlan-id 110 Server /cimc/network *# set vlan-priority 20 Server /cimc/network *# commit

A.

Server# scope cimc - Server /cimc # scope vlan - Server /cimc/network # enable vlan Server /cimc/network *# set vlan-id 110 Server /cimc/network *# set vlan-priority 20 Server /cimc/network *# commit

Answers
B.

Server# scope cimc - Server /cimc # scope network - Server /cimc/network # set vlan-enabled yes Server /cimc/network *# set vlan-id 110 Server /cimc/network *# set vlan-priority 20 Server /cimc/network *# commit

B.

Server# scope cimc - Server /cimc # scope network - Server /cimc/network # set vlan-enabled yes Server /cimc/network *# set vlan-id 110 Server /cimc/network *# set vlan-priority 20 Server /cimc/network *# commit

Answers
C.

Server# scope cimc - Server /cimc # scope network - Server /cimc/network # switchport mode trunk Server /cimc/network *# switchport trunk native vlan 110 Server /cimc/network *# spanning-tree portfast Server /cimc/network *# copy run start

C.

Server# scope cimc - Server /cimc # scope network - Server /cimc/network # switchport mode trunk Server /cimc/network *# switchport trunk native vlan 110 Server /cimc/network *# spanning-tree portfast Server /cimc/network *# copy run start

Answers
D.

Server# scope cimc - Server /cimc # scope network - Server /cimc/network # switchport mode access Server /cimc/network *# switchport access 110 Server /cimc/network *# spanning-tree portfast Server /cimc/network *# copy run start

D.

Server# scope cimc - Server /cimc # scope network - Server /cimc/network # switchport mode access Server /cimc/network *# switchport access 110 Server /cimc/network *# spanning-tree portfast Server /cimc/network *# copy run start

Answers
Suggested answer: B

Explanation:

Server# scope cimc

Server /cimc # scope network

Server /cimc/network # set vlan-enabled yes

Server /cimc/network *# set vlan-id 10

Server /cimc/network *# set vlan-priority 32

Server /cimc/network *# commit

Server /cimc/network # show detail

https://www.cisco.com/c/en/us/td/docs/unified_computing/ucs/c/sw/cli/config/guide/1-4-1/b_Cisco_UCS_C-Series_CLI_Configuration_Guide_141/b_Cisco_UCS_C-Series_CLI_Configuration_Guide_141_chapter_01000.html#task_F1A505AA52BE41C2A0CE089FCAE4F9D2

An engineer must upgrade the server firmware for which the service profile is configured with a host firmware package. Which action must be taken to accomplish this goal?

A.

Disassociate the service profile from the server and upgrade.

A.

Disassociate the service profile from the server and upgrade.

Answers
B.

Change the maintenance policy to user-ack and upgrade.

B.

Change the maintenance policy to user-ack and upgrade.

Answers
C.

Upgrade the server through the host firmware package.

C.

Upgrade the server through the host firmware package.

Answers
D.

Perform a direct upgrade on the server using Auto Install.

D.

Perform a direct upgrade on the server using Auto Install.

Answers
Suggested answer: C

Explanation:

You can use firmware packages in service profiles to upgrade the server and adapter firmware, including the BIOS on the server, by defining a host firmware policy and including it in the service profile associated with a server.

An engineer configures user authentication on Cisco UCS Manager to ensure that the user and roles can be saved on the external server and secured using authentication. Which set of actions meets these requirements?

A.

Implement a logical configuration backup and configure the HTTPS protocol.

A.

Implement a logical configuration backup and configure the HTTPS protocol.

Answers
B.

Configure a full state backup and implement an FTP protocol.

B.

Configure a full state backup and implement an FTP protocol.

Answers
C.

Perform a system configuration backup and use the SCP protocol.

C.

Perform a system configuration backup and use the SCP protocol.

Answers
D.

Deploy an all configuration backup and implement a TFTP protocol.

D.

Deploy an all configuration backup and implement a TFTP protocol.

Answers
Suggested answer: C

Which Cisco UCS firmware reboot policy must be used in the maintenance policy to prevent the server firmware from upgrading automatically and wait for user input before proceeding?

A.

scheduled

A.

scheduled

Answers
B.

timer-automatic

B.

timer-automatic

Answers
C.

immediate

C.

immediate

Answers
D.

user-ack

D.

user-ack

Answers
Suggested answer: D
Total 491 questions
Go to page: of 50