350-601: Implementing and Operating Cisco Data Center Core TechnologiesDemo

Question

An engineer configures port security on a Cisco MDS 9000 Series Switch. The MDS switch configuration must satisfy these requirements:

The switch must activate the VSAN 4 port-security database despite any conflicts.
New devices must be added statically to the switch.
VSAN 4 configuration changes must be applied across the fabric, with any fabric locks released.

Which configuration set satisfies these requirements?

A port-security activate vsan 4no port-security auto-learn vsan 4port-security allocateport-security commit vsan 4
B port-security activate vsan 4 forceport-security auto-learn vsan 4port-security distributeport-security commit
C port-security activate vsan 4port-security manual-learn vsan 4port-security allocateport-security commit
D port-security activate vsan 4 forceno port-security auto-learn vsan 4port-security distributeport-security commit vsan 4

Explanation

port-security activate vsan 4 force activates the VSAN 4 database despite conflicts. Disabling auto-learning ensures that newly connected devices are not learned automatically and must instead be configured statically. port-security distribute enables CFS distribution, and port-security commit vsan 4 distributes the pending VSAN 4 configuration throughout the fabric and releases the associated lock.

Learn more

Cisco MDS 9000 NX-OS Security Configuration Guide—Configuring Port Security

350-601: Implementing and Operating Cisco Data Center Core TechnologiesDemo

AstroTutor

Notes

Readiness

QuestionQ244

Community Discussion