350-601: Implementing and Operating Cisco Data Center Core TechnologiesDemo

By Cisco · Question Mode

QuestionQ57

Security

A company must harden the security of its Cisco UCS C-Series servers. Its security policy requires all out-of-band management to meet these requirements:

  • Encrypt all traffic.
  • Use nondefault ports.
  • Provide private administrative sessions.

Which Cisco IMC configuration satisfies these requirements?

  • A data1# scope soldata1 /sol # set enabled yesdata1 /sol *# set encrypted tls1.2data1 /sol *# set port 3389data1 /sol *# set session max 2data1 /sol *# set deny-local yes
  • B data1# scope cimcdata1 /cimc # set enabled yesdata1 /cimc *# set encrypted tlsdata1 /cimc *# set kvm-port 1972data1 /cimc *# set max-sessions 1data1 /cimc *# set local-session deny
  • C data1# scope oobdata1 /oob # set enabled nodata1 /oob *# set encrypted yesdata1 /oob *# set kvm-port 2068data1 /oob *# set max-sessions 1data1 /oob *# set local-access no
  • D data1# scope kvmdata1 /kvm # set enabled yesdata1 /kvm *# set encrypted yesdata1 /kvm *# set kvm-port 3168data1 /kvm *# set max-sessions 1data1 /kvm *# set local-video no
Explanation

Cisco IMC virtual KVM configuration uses the kvm scope. Enabling encryption protects KVM traffic, kvm-port 3168 uses a nondefault port, max-sessions 1 restricts concurrent access to a single session, and local-video no prevents the KVM session from being displayed on a monitor attached to the server. Cisco documents 2068 as the example/default KVM port and specifies these KVM configuration commands.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!