NEW QUESTION 1
Which two statements about SAN zoning on Cisco Nexus switches are true? (Choose two.)

• A. Zoning is enforced by examining the destination ID field.
• B. Devices can only belong to one zone.
• C. Only one zone set can be activated at any time.
• D. A zone can only be a member one zone set.
• E. Zoning must be administered from the primary SAN switch in the fabric.
• F. Zone configuration changes are nondisruptive.

Answer: CF

Explanation: A zone set can be activated or deactivated as a single entity across all switches in the fabric. Only one zone set can be activated at any time. If zoning is not activated, all devices are members of the default zone. If zoning is activated, any device that is not in an active zone (a zone that is part of an active zone set) is a member of the default zone. Zoning can be administered from any switch in the fabric. When you activate a zone (from any switch), all switches in the fabric receive the active zone set. Additionally, full zone sets are distributed to all switches in the fabric, if this feature is enabled in the source switch.
Reference: http://www.cisco.com/en/US/docs/storage/san_switches/mds9000/sw/san-os/quick/guide/qcg_zones.html

NEW QUESTION 2
What is an Overlay Transport Virtualization extended VLAN?

• A. the VLAN used to locate other AEDs
• B. the VLAN used to access the overlay network by the join interface
• C. the user VLAN that exists in multiple sites
• D. the VLAN that must contain the overlay interface

Answer: C

Explanation: Functions of OTV
✑ Maintains a list of overlays
✑ Maintains a list of configured overlay parameters such as name, multicast address, encapsulation type, authentication, and OTV feature sets
✑ Maintains the state of the overlay interface
✑ Maintains the status of OTV VLAN membership from Ethernet infrastructure and the state of the authoritative edge device (AED) from IS-IS
✑ Maintains a database of overlay adjacencies as reported by IS-IS
✑ Maintains IP tunnel information and manages the encapsulation for data sent on the overlay network
✑ Manages delivery groups (DGs) for each overlay by snooping multicast traffic and monitoring traffic streams for active DGs
✑ Configures, starts, and stops the OTV IS-IS instance
✑ Interfaces with IP multicast to join provider multicast groups for each overlay

NEW QUESTION 3
Which task must be done before a zone set takes effect?

• A. Add a member to the zone.
• B. Enter the exit config t command.
• C. Enter the copy running-config startup-config command.
• D. Enter the zoneset activate name <zone-name> vsan <vsan-#> command.

Answer: D

NEW QUESTION 4
How does an FCoE end node acquire its FCoE MAC address?

• A. server-provided MAC address
• B. Fibre Channel name server
• C. fabric-provided MAC address
• D. FIP proxy

Answer: C

Explanation: The VN_Port is assigned a fabric-provided Mac address (FPMA) that is built by concatenating a 24-bit FCoE MAC address prefix (FC-MAP), ranging from 0x0E-FC-00 to 0x0E-FC-FF, to the 24-bit FCID. Being able to build a unique MAC address for the VN_Port
directly from its FCID saves the switch from having to maintain a table that associates FCID and MAC addresses.
Reference: http://www.cisco.com/c/en/us/td/docs/solutions/Enterprise/Data_Center/UF_FCoE_final.ht ml

NEW QUESTION 5
If vPC peer keepalives are used between vPC peers, which VRF is used by default?

• A. management
• B. default
• C. The user must dedicate a VRF for keepalives.
• D. system

Answer: A

NEW QUESTION 6
Which protocol is the foundation for unified fabric as implemented in Cisco NX-OS?

• A. Fibre Channel
• B. Data Center Bridging
• C. Fibre Channel over Ethernet
• D. N proxy virtualization
• E. N Port identifier virtualization

Answer: C

Explanation: Fibre Channel over Ethernet (FCoE) is one of the major components of a Unified Fabric. FCoE is a new technology developed by Cisco that is standardized in the Fibre Channel Backbone 5 (FC-BB-5) working group of Technical Committee T11 of the International Committee for Information Technology Standards (INCITS). Most large data centers have huge installed bases of Fibre Channel and want a technology that maintains the Fibre Channel model. FCoE assumes a lossless Ethernet, in which frames are never dropped (as in Fibre Channel) and that therefore does not use IP and TCP.
Reference: http://www.cisco.com/c/en/us/products/collateral/switches/nexus-5000-series-switches/white_paper_c11-495142.html

Topic 2, Implement Security on Cisco Unified Fabric Products in a Cisco Data Center Architecture

NEW QUESTION 7
Which statement about RADIUS configuration distribution using Cisco Fabric Services on a Cisco Nexus 7000 Series Switch is true?

• A. Cisco Fabric Services does not distribute the RADIUS server group configuration or server and global keys.
• B. Enabling Cisco Fabric Services causes the existing RADIUS configuration on your Cisco NX-OS device to be immediately distributed.
• C. When the RADIUS configuration is being simultaneously changed on more than one device in a Cisco Fabric Services region, the most recent changes will take precedence.
• D. Only the Cisco NX-OS device with the lowest IP address in the Cisco Fabric Services region can lock the RADIUS configuration.

Answer: A

Explanation: CFS does not distribute the RADIUS server group configuration or server and global keys. The keys are unique to the Cisco NX-OS device and are not shared with other Cisco NX- OS devices.
Reference: http://www.cisco.com/c/en/us/td/docs/switches/datacenter/sw/6_x/nx-os/security/configuration/guide/b_Cisco_Nexus_7000_NX- OS_Security_Configuration_Guide Release_6-x/b_Cisco_Nexus_7000_NX- OS_Security_Configuration_Guide Release_6-x_chapter_0101.html

NEW QUESTION 8
Which three attributes encompass a local user account on a Cisco NX-OS device? (Choose three.)

• A. expiration date
• B. cisco-avpair
• C. password
• D. AAA server address
• E. user roles
• F. bind user DN
• G. user privileges

Answer: ACE

NEW QUESTION 9
During Dynamic ARP Inspection, which feature learns the MAC and IP addresses?

• A. ping
• B. NetFlow
• C. FIP snooping
• D. DHCP snooping

Answer: D

NEW QUESTION 10
Which statement about electronic programmable logic device image upgrades is true?

• A. EPLD and ISSU image upgrades are nondisruptive.
• B. An EPLD upgrade must be performed during an ISSU system or kickstart upgrade.
• C. Whether the module being upgraded is online or offline, only the EPLD images that have different current and new versions are upgraded.
• D. You can execute an upgrade or downgrade only from the active supervisor module.

Answer: D

Explanation: You can upgrade (or downgrade) EPLDs using CLI commands on the Nexus 7000 Series device. Follow these guidelines when you upgrade or downgrade EPLDs:
You can execute an upgrade from the active supervisor module only. All the modules, including the active supervisor module, can be updated individually.
•You can individually update each module whether it is online or offline as follows:
If you upgrade EPLD images on an online module, only the EPLD images with version numbers that differ from the new EPLD images are upgraded.
–If you upgrade EPLD images on an offline module, all of the EPLD images are upgraded.
On a system that has two supervisor modules, upgrade the EPLDs for the standby
On a system that has only one supervisor module, you can upgrade the active supervisor, but this will disrupt its operations during the upgrade.
The upgrade process disrupts traffic on the targeted module.
•Do not insert or remove any modules while an EPLD upgrade is in progress.
Reference: http://www.cisco.com/c/en/us/td/docs/switches/datacenter/sw/4_0/epld/release/notes/epld_ rn.html

NEW QUESTION 11
Refer to the exhibit.

This multilayer Cisco Nexus switch had been the active virtual gateway for Group 1 before it became temporarily unavailable. What will happen to GLBP Group 1 when this device
becomes available again?

• A. The currently active router remains active.
• B. It depends on the priority value that is configured active on the router.
• C. The Cisco Nexus switch becomes the active virtual gateway after 600 seconds.
• D. It depends on the weighting values that are configured active on the router.

Answer: A

Explanation: GLBP prioritizes gateways to elect an active virtual gateway (AVG). If multiple gateways have the same priority, the gateway with the highest real IP address becomes the AVG. The AVG assigns a virtual MAC address to each member of the GLBP group. Each member is the active virtual forwarder (AVF) for its assigned virtual MAC address, forwarding packets sent to its assigned virtual MAC address.
The AVG also answers Address Resolution Protocol (ARP) requests for the virtual IP address. Load sharing is achieved when the AVG replies to the ARP requests with different virtual MAC addresses.
Note: Packets received on a routed port destined for the GLBP virtual IP address terminate on the local router, regardless of whether that router is the active GLBP router or a redundant GLBP router. This termination includes ping and Telnet traffic. Packets received on a Layer 2 (VLAN) interface destined for the GLBP virtual IP address terminate on the active router.

NEW QUESTION 12
Which statement about core-edge SAN topology is true?

• A. Converged FCoE links connect the core and edge MDS switches.
• B. The SAN core connects to the network aggregation layer.
• C. Separate links with the same I/O are used for SAN and LAN traffic.
• D. Storage devices are accessed via FCoE over the LAN network.

Answer: B

Explanation: The Aggregation layer of the data center provides connectivity for the Access layer switches in the server farm, an aggregates them into a smaller number of interfaces to be connected into the Core layer. In most data center environments, the Aggregation layer is the transition point between the purely Layer 3 routed Core layer, and the Layer 2-switched Access layer. 802.1Q trunks extend the server farm VLANs between Access and Aggregation layers. The Aggregation layer also provides a common connection point to insert services into the data flows between clients and servers, or between tiers of servers in a multi-tier application.

NEW QUESTION 13
Refer to the exhibit.

Which corrective action is taken to resolve the problem?

• A. Trunk four VLANs on interface ethernet 199/1/1.
• B. Use the shut and no shut interface ethernet 199/1/1so that the VLANs come up.
• C. Place interface ethernet 199/1/1 in VLAN 4 in the N5K-2 configuration.
• D. Prune all but four VLANs from vPC 199.
• E. Add VLAN 4 to vPC 199.

Answer: C

Explanation: Place interface ethernet 199/1/1 in VLAN 4 in the N5K-2 configuration.

NEW QUESTION 14
Which GLBP load-balancing algorithm ensures that a client is always mapped to the same VMAC address?

• A. vmac-weighted
• B. dedicated-vmac-mode
• C. shortest-path and weighting
• D. host-dependent

Answer: D

NEW QUESTION 15
Which FCoE component is responsible for the encapsulation and de-encapsulation of Fibre Channel frames in Ethernet?

• A. distributed FCF
• B. FCoE node
• C. FCoE logical endpoint
• D. Fibre Channel forwarder
• E. FCoE forwarder

Answer: C

Explanation: The FCoE Logical Endpoint (FCoE_LEP) is responsible for the encapsulation and deencapsulation functions of the FCoE traffic. FCoE_LEP has the standard Fibre Channel layers, starting with FC-2 and continuing up the Fibre Channel Protocol stack.
Reference: https://www.safaribooksonline.com/library/view/ccna-data-center/9780133860429/ch11lev3sec5.html

NEW QUESTION 16
Which feature allows routing protocols to remain in the data path during a supervisor failover?

• A. Cisco Nonstop Forwarding
• B. Cisco Stateful Switchover
• C. Cisco Express Forwarding
• D. Cisco Route Processor Redundancy

Answer: A