support@Free-Braindumps.com
Register Login
Cisco
CompTIA
ISC
EC-Council
EXIN
Fortinet
ITIL
Juniper
Microsoft
VMware
Avaya
SAP
Google
NVIDIA
Salesforce
Amazon
Palo Alto Networks
ISC2
CrowdStrike
Anthropic
All Vendors
  1. Home
  2. Exams
  3. Cisco
  4. 350-601

Free 350-601 Exam Braindumps
Implementing and Operating Cisco Data Center Core Technologies (DCCOR) Questions 256–260 (page: 53)

Updated On: 10-Feb-2026
Page 53 of 106
PDF with 584 Questions

Refer to the exhibit.
What is the result of implementing this configuration?

  1. The switch queries the TACACS+ server by using an encrypted text PAP login.
  2. The TACACS+ server uses the type-6 encrypted format.
  3. The switch queries the TACACS+ server by using a clear text PAP login.
  4. The timeout value on the TACACS+ server is 10 seconds.

Answer(s): A


Reference:

https://www.cisco.com/c/en/us/td/docs/switches/datacenter/nexus6000/sw/command/reference/security/7x/n6k-sec-cr/n6k-sec_cmds_t.html



Refer to the exhibit.
Which setting must be configured to prevent the reuse of passwords?

  1. Change Interval
  2. No Change Interval
  3. History Count
  4. Change Count

Answer(s): C

Explanation:

Configuring the Password History Count
You must have admin or aaa privileges to change the password profile properties.


Reference:

https://www.cisco.com/c/en/us/td/docs/unified_computing/ucs/ucs-manager/GUI-User-Guides/Admin-Management/4-1/ b_Cisco_UCS_Admin_Mgmt_Guide_4-1/m_password_management.html



Port security is statically configured on a Cisco Nexus 7700 Series switch and F3 line card. The switch is configured with an Advanced Services license. Which two actions delete secured MAC addresses from the interface? (Choose two.)

  1. The address must be removed from the configuration.
  2. Shutdown and then no shutdown must be run on the interface.
  3. The device must be restarted manually.
  4. The address must reach the age limit that is configured for the interface.
  5. The interface must be converted to a routed port.

Answer(s): A,E

Explanation:

Removing a Static Secure MAC Address on an Interface:
You can remove a static secure MAC address on a Layer 2 interface.
Switched port to routed port:
When you change an interface from a Layer 2 interface to a Layer 3 interface, the device disables port security on the interface and discards all port security configuration for the interface. The device also discards all secure MAC addresses for the interface, regardless of the method used to learn the address.


Reference:

https://www.cisco.com/c/en/us/td/docs/switches/datacenter/sw/6_x/nx-os/security/configuration/guide/b_Cisco_Nexus_7000_NX-
OS_Security_Configuration_Guide__Release_6-x/b_Cisco_Nexus_7000_NX-OS_Security_Configuration_Guide__Release_6-x_chapter_010001.html



An engineer is configuring AAA authentication on a Cisco MDS 9000 Series switch. The LDAP server is located under the IP 10.10.2.2. The data sent to the LDAP server should be encrypted. Which command should be used to meet these requirements?

  1. ldap-server 10.10.2.2 port 443
  2. ldap-server 10.10.2.2 key SSL_KEY
  3. ldap-server host 10.10.2.2 key SSL_KEY
  4. ldap-server host 10.10.2.2 enable-ssl

Answer(s): D


Reference:

https://www.cisco.com/c/en/us/td/docs/switches/datacenter/mds9000/sw/6_2/configuration/guides/security/nx-os/sec_cli_6-x/cradtac1.html



Refer to the exhibit. What is the result of implementing the configuration?

  1. The RADIUS server timeout value is 15 milliseconds.
  2. RADIUS traffic is sourced from the VLAN 200 interface.
  3. Users specify the RADIUS server when they log in.
  4. Only the RADIUS server is used for authentication.

Answer(s): D


Reference:

https://www.cisco.com/c/en/us/support/docs/security-vpn/terminal-access-controller-access-control-system-tacacs-/200606-aaa-authentication-login- default-local.html



  PDF
Viewing page 53 of 106
Viewing questions 261 - 265 out of 584 questions


Post your Comments and Discuss Cisco 350-601 exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!