350-601: Implementing and Operating Cisco Data Center Core TechnologiesDemo

Question

An engineer configures a storage environment for a customer with stringent security standards. The secure environment is configured in VSAN 50. The customer wants to maintain a configuration database and an active database, and prevent unauthorized switches from joining the fabric. In addition, the switches must stop rogue devices from connecting to their ports by automatically learning the WWPNs of ports connected to them for the first time. Which two configuration sets must be used?

Choose two

A fcsp enablefcsp auto-active
B port-security enableport-security activate vsan 50
C clear fabric-binding activate vsan 50fabric-binding activate vsan 50
D fcsp dhchap hash md5 sha1
E fabric-binding activate vsan 50 force

Explanation

Cisco MDS port security blocks unauthorized device logins on switch ports. Activating port security for VSAN 50 enables auto-learning, which learns initially connected device identities into the active database. Fabric binding maintains separate configuration and active databases of authorized switch WWNs and safeguards the fabric against unauthorized switches; fabric-binding activate vsan 50 force activates that database when conflicts would otherwise prevent activation.

Learn more

350-601: Implementing and Operating Cisco Data Center Core TechnologiesDemo

AstroTutor

Notes

Readiness

QuestionQ487

Community Discussion