NEW QUESTION 1
You have two Cisco Nexus 7700 Series switches named SwitchA and SwitchB. You use the Rapid PVST+ protocol. You must configure the switches as the STP root switches for VLANs 100 to 200. Which command set should you run?

• A. SwitchA(config-if)#spanning-tree cost 100 SwitchB(config-if)#spanning-tree cost 100
• B. SwitchA(config-if)#spanning-tree guard root SwitchB(config-if)#spanning-tree guard root
• C. SwitchA(config)#spanning-tree vlan 100-200 priority 61440SwitchB(config)#spanning-tree vlan 100-200 priority 61440
• D. SwitchA(config)#spanning-tree vlan 100-200 root primary SwitchB(config)#spanning-tree vlan 100-200 root secondary

Answer: D

NEW QUESTION 2
Which option accurately describes the implementation of Fibre Channel domain IDs?

• A. Are assigned on a peer-switch basis
• B. Are assigned on a per-line card basis
• C. Must be the dame on all on the Fabre Channel switch in the fabric
• D. Must be unique on all the Fibre Channel switches in the fabric

Answer: A

NEW QUESTION 3
Assuming hello PDU authentication has been disabled, which command re-enables the feature on a FabricPath interface?

• A. switch (config-if) # fabricpath isis authentication-type cleartext
• B. switch (config-if) # fabricpath isis authentication-type md5
• C. switch (config-if) # fabricpath isis authentication check
• D. switch (config-if) # fabricpath isis hello-interval

Answer: C

NEW QUESTION 4
Which technology is required in the underlay to facilitate remote VTEP discovery?

• A. multicast
• B. VXLAN
• C. OSPF
• D. BGR

Answer: A

NEW QUESTION 5
What is effect of the command “fabricpath load-balance unicast Iayer3”?

• A. It configures F2 VDC FabricPath unicast load balancing
• B. The command automatically load balances broadcast traffic
• C. It configures F1/MI VDC FabricPath unicast load balancing
• D. It configures M1 VDC FabricPath unicast load balancing

Answer: C

Explanation:
The F1 cards are complemented by M1 card for routing purposes. When using M1 cards in the same virtual device context (VDC) as the F1 card, routing is offloaded to the M1 cards, and more routing capacity is added to the F1 card by putting more M1 ports into the same VDC as the F1 card.

NEW QUESTION 6
Which feature must be configured before you can implement a dynamic ARP inspection to validate an ARP packet?

• A. unicast RPF
• B. DHCP snooping
• C. IP Source Guard
• D. MACsec encryption

Answer: B

NEW QUESTION 7
When configuring PIM on a Cisco Nexus 7000 Series switch, which mode requires you to configure an RP?

• A. SDM
• B. SSM
• C. DM
• D. ASM

Answer: D

NEW QUESTION 8
Refer to the exhibit.

Which option is the result of the command?

• A. A file named LOGFILES is created and is applied to LDCs.
• B. A file named LOGFILES is created with the default logging level.
• C. A file named LOGFILES is created on a remote server.
• D. A file named LOGFILES is created and logs all severity level

Answer: B

NEW QUESTION 9
Which four options are capabilities of the Cisco Nexus 5000 and 5500 Series Switch? (Choose four.)

• A. line rate
• B. managed by a parent switch
• C. lossless 10 Gigabit Ethernet
• D. lossless 100 Gigabit Ethernet
• E. low latency
• F. extremely low latency
• G. hosts a virtual supervisor module

Answer: ACEG

NEW QUESTION 10
What is the Overlay Transport Virtualization site VLAN used for?

• A. to allow the join interfaces at different sites to communicate
• B. to detect devices at the site that are not capable of OTV
• C. to allow multiple site AEDs to communicate with each other
• D. to detect other OTV edge devices in the site

Answer: D

Explanation:
The edge device performs OTV functions: it receives the Layer 2 traffic for all VLANs that need to be extended to remote locations and dynamically encapsulates the Ethernet frames into IP packets that are then sent across the transport infrastructure. It is expected that at least two OTV edge devices are deployed at each data center site to improve the resiliency.
Reference: http://www.cisco.com/c/en/us/td/docs/solutions/Enterprise/Data_Center/DCI/whitepaper/DCI3_O TV_Intro/DCI_1.html

NEW QUESTION 11
Which two options are limitations of NetFlow Version 5? (Choose two.)

• A. no support for IPv6, Layer 2, or MPLS fields
• B. fixed field specifications
• C. excessive network utilization
• D. analyzes all packets on the interface

Answer: AB

NEW QUESTION 12
Within the vPC configuration of the 7K's, the command peer switch is configured. What is the result of enabling the command?

• A. Both vPC peers use the same STP root ID.
• B. The Vpc primary switch (7k-4 in this case) also serves as the STP root to improve vPC convergence.
• C. The vPC secondary switch (7k-3 in this case) server as the STP root to improve vPC performance
• D. Allow 7k-3 to act as the active HSRP gateway for packets that are addressed to the MAC address of7K-4
• E. Automatically disable IP redirects on all interface VLANs mapped over a vPC VLAN to avoid generation of IP redirect messages for packets switched though the vPC peer gateway router
• F. Enable faster convergence of ARP tables after the vPC peer link flap
• G. 9999

Answer: A

NEW QUESTION 13
Refer to the exhibit.

Which result does the configuration show?

• A. border spine
• B. tenant interface
• C. SVI configuration
• D. border leaf

Answer: D

NEW QUESTION 14
What are two prerequisite to running the Smart Call Home feature on a Cisco nexus 6000 series switch? (Select two)

• A. The switch must have SMTP access to an email server
• B. The switch must have public management IP address
• C. The switch must have SMTP access to a Cisco.com email server
• D. The switch must have an active service contract
• E. The switch must be configured to use an email address from the @cisco.com

Answer: AD

Explanation:
Prerequisites for Smart Call Home
You must have e-mail server connectivity.
You must have access to contact name (SNMP server contact), phone, and street address information.
You must have IP connectivity between the switch and the e-mail server.
You must have an active service contract for the device that you are configuring. https://www.cisco.com/c/en/us/td/docs/switches/datacenter/nexus6000/sw/system_management/ 6x/b_6k_System_Mgmt_Config_6x/b_6k_System_Mgmt_Config_602N11_chapter_01010.html#con_ 1058068

NEW QUESTION 15
Which situation must you consider when you add a remote RADIUS server to a Cisco Nexus device?

• A. If RADIUS authentication fails, the device falls back to local authentication automatically.
• B. If RADIUS authentication fails, the user is denied access with no further authentication checks.
• C. If the RADIUS server is unreachable, users are unable to log in.
• D. If the RADIUS server is unreachable, all users are given access with the default rol

Answer: B

NEW QUESTION 16
Scenario:
The following four questions concern the Nexus 7010’ s which are configured as a vPC pair at the core of a Data Center network. You can utilize all the available show commands to answer the Questions Access to the running-configuration is not allowed.
Instructions:
Enter NX-OS commands on 7K-3 and 7K-4 to verity network operation and answer four multiplechoice questions
THIS TASK DOES NOT REQUIRE DEVICE CONFIGURATION.
Click on the switch to gain access to the console of the switch. No console or enable passwords are required.
To access the multiple-choice questions, click on the numbered boxes on the loft of the top panel. There are four multiple-choice questions with this task Be sure to answer all four questions before selecting the Next button
Topology:



Which interface is used for the vPC peer keepalive on both 7000' s?

• A. port-channel 1
• B. port-channel 2
• C. port-channel 100
• D. mgmt 0
• E. Ethernet 2/1
• F. Ethernet 2/3

Answer: D

NEW QUESTION 17
If you are using NAT in your data center, which load balancing would you be likely to use within your GLBP configuration?

• A. none
• B. round-robin
• C. host dependent
• D. weighted

Answer: C

NEW QUESTION 18
Which of the following Cisco Nexus features is best managed with DCNM-LAN?

• A. VSS
• B. Domain parameters
• C. Virtual switches
• D. AAA

Answer: C

Explanation:
DCNM-LAN supports the following platforms:
• Cisco Nexus 1000V switches
• Cisco Nexus 2000 Fabric Extenders
• Cisco Nexus 3000 Series switches
• Cisco Nexus 4000 Series switches
• Cisco Nexus 5000 Series switches
• Catalyst 6500
DCNM-LAN provides limited support for the Catalyst 6500 Series switches that runs classic IOS version 12.2(33)SXI or higher.
– DCNM-LAN supports the viewing of the current configuration attributes of the device.
– DCNM-LAN does not support changing the configuration of the device.
– DCNM-LAN supports the Firewall Service Module (FWSM) version 4.0 or higher for the Catalyst 6500 Series switches.
• Cisco Nexus 7000 Series switches Reference:
http://www.cisco.com/c/en/us/td/docs/switches/datacenter/mds9000/sw/5_2/configuration/guides
/fund/DCNM-SAN-LAN_5_2/DCNM_Fundamentals/fund_overview.html

NEW QUESTION 19
You are connecting a Cisco Nexus 2300 Series FEX to a Cisco Nexus 5600 Series parent switch. Which command should you use to configure the interfaces on the Nexus switch that connects to the FEX?

• A. switch(config-if)# switchport mode f
• B. switch(config-if)# switchport mode fex-fabric
• C. switch(config-if)# switchport mode fabricpath
• D. switch(config-if)# switchport mode vntag

Answer: B

NEW QUESTION 20
DRAG DROP
Drag the description on the left to the most appropriate FCoE protocol or feature on the right.

• A. Mastered
• B. Not Mastered

Answer: A

Explanation:
ENODES: During FLOGI or FDISC, the ENode advertises the addressing modes it supports. If the FC switch supports an addressing mode that the ENode uses, the virtual link can be established, and the devices can communicate.
FIP: FIP is the set of control plane functions that enable discovery of FCoE-capable devices across FCoE passthrough switches and establishment of legal combinations of virtual links.
FCF: FCoE Initialization Protocol (FIP) is the FCoE control protocol responsible for establishing and maintaining Fibre Channel virtual links between pairs of FCoE devices (ENodes or FCFs). During the virtual link establishment phase, FIP first discovers FCoE VLANs and remote virtual FC interfaces; then it performs virtual link initialization functions (fabric login [FLOGI] and fabric discovery [FDISC], or exchange link parameters [ELP]) similar to their native Fibre Channel equivalents. After the virtual link is established, Fibre Channel payloads can be exchanged on the virtual link, and FIP remains in
the background to perform virtual link maintenance functions; it continuously verifies reachability between the two virtual FC interfaces on the Ethernet network, and it offers primitives to delete the virtual link in response to administrative actions to that effect. This document does not describe the virtual link maintenance functions of FIP.

NEW QUESTION 21
Which description of a MAC ACL is true?

• A. It filters based on the DSCP value.
• B. It is applied to egress traffic only.
• C. It is applied when DHCP snooping is enabled.
• D. It is applied to ingress traffic onl

Answer: A

NEW QUESTION 22
Which technology relies on STP as a failsafe mechanism?

• A. vPC
• B. VXLAN
• C. FabricPath
• D. MPLS

Answer: A

NEW QUESTION 23
Which statement about implementation of Cisco TrustSec on Cisco Nexus 5546 or 5548 switches are true?

• A. Cisco TrustSec support varies depending on Cisco Nexus 5500 Series Switch model.
• B. The hardware is not able to support MACsec switch-port-level encryption based on IEEE 802.1AE.
• C. The maximum number of RBACL TCAM user configurable entries is 128k.
• D. The SGT Exchange Protocol must use the management (mgmt 0) interface.

Answer: B

Explanation:
Reference:
https://scadahacker.com/library/Documents/Manuals/Cisco%20-%20TrustSec%20Solution%20Overview.pdf

NEW QUESTION 24
Which two reasons explain why a server on VLAN 10 is unable to join a multicast stream that originates on VLAN 20? (Choose two.)

• A. IGMP snooping and mrouter are not enabled on VLAN 10.
• B. VLAN 20 has no IGMP snooping querier defined and VLAN 10 has no mrouter.
• C. The mrouter on VLAN 20 does not see the PIM join.
• D. The mrouter must be on VLAN 10 and VLAN 20.

Answer: AC

Explanation:
IGMP snooping is a mechanism to constrain multicast traffic to only the ports that have receivers attached. The mechanism adds efficiency because it enables a Layer 2 switch to selectively send out multicast packets on only the ports that need them. Without IGMP snooping, the switch floods the packets on every port. The switch "listens" for the exchange of IGMP messages by the router and the end hosts. In this way, the switch builds an IGMP snooping table that has a list of all the ports that have requested a particular multicast group.
The mrouter port is simply the port from the switch point of view that connects to a multicast router. The presence of at least one mrouter port is absolutely essential for the IGMP snooping operation to work across switches.
All Catalyst platforms have the ability to dynamically learn about the mrouter port. The switches passively listen to either the Protocol Independent Multicast (PIM) hellos or the IGMP query messages that a multicast router sends out periodically.
Reference:
http://www.cisco.com/c/en/us/support/docs/switches/catalyst-6500-series-switches/68131-catmulticast- prob.html

NEW QUESTION 25
You experience an issue on a Cisco Nexus 7700 Series switch. You must gather detailed information about the system state and the configuration of the switch. Which command should you run?

• A. switch# show logging > bootflash:Log.txt
• B. switch# show tech-support > bootflash:Log.txt
• C. switch# show running-config > bootflash:Log.txt
• D. switch# show system > bootflash:Log.txt

Answer: B

NEW QUESTION 26
Refer to the exhibit,

Which description of the output is true?

• A. The default map-cache limit is used.
• B. PETR is disable
• C. The table output apply to the default VRF
• D. The switch acts as an IPv4 LISP ETR

Answer: A

NEW QUESTION 27
......