A company provides applications and database hosting services to multiple customers using isolated infrastructure-as-a-service services within the same data center environment. The environment is based on Cisco MDS 9000 Series Switches. The requirement is to manage the environment by using Fibre ChannelSecurity Protocol and to enable user authentication when the centralized AAA server is unreachable. All communication between the MDS switches and the remote servers must be encrypted. Which command set must be used to meet these requirements?
Answer(s): B
FC-SP uses the DHCHAP protocol for authenticating authentication between MDS9000 and other devices could potentially use both tacacs and radius. However, since it tells us all communication between them should be encrypted, only TACACS provides full AAA encryption.
https://www.cisco.com/c/en/us/td/docs/switches/datacenter/mds9000/sw/8_x/config/security/cisco_mds9000_security_config_guide_8x/ configuring_fcsp_dhchap.html#con_1247118
A customer undergoes an IT security review assessment. The auditor must have read-only access to the Cisco Nexus 9000 Series Switch to perform the configuration review. The customer implements this security role for the auditor: role name audit rule 1 permit command * rule 2 - Output omitted -- username auditor password C4SAFF1B05EB1968$c0 role auditWhich configuration snippet must complete the configuration?
Answer(s): A
https://www.cisco.com/c/en/us/td/docs/switches/datacenter/nexus9000/sw/6-x/security/configuration/guide/b_Cisco_Nexus_9000_Series_NX-OS_Security_Configuration_Guide/b_Cisco_Nexus_9000_Series_NX-OS_Security_Configuration_Guide_chapter_01001.html
An engineer must implement a solution that prevents untrusted DHCP servers from compromising the network. The feature must be configured on a Cisco Nexus7000 Series Switch and applied to VLAN 10. The legitimate DHCP servers are connected to interface Ethernet 2/4. Which configuration set must be used to meet these requirements?
Answer(s): C
https://www.cisco.com/c/en/us/td/docs/switches/datacenter/nexus9000/sw/7-x/security/configuration/guide/b_Cisco_Nexus_9000_Series_NX-OS_Security_Configuration_Guide_7x/b_Cisco_Nexus_9000_Series_NX-OS_Security_Configuration_Guide_7x_chapter_01100.html
An engineer implements a Cisco UCS C-Series Server that must adhere to these security requirements:-Unencrypted communication must be disabled.-The session timeout must not exceed 15 minutes.-Unencrypted traffic must be automatically diverted.-CLI-based management must use nondefault ports.Which configuration set meets these requirements?
Only choice B meets all the requirements given of timing out in 15 minutes (900 seconds). Redirecting HTTP to HTTPS, and using a non-default SSH port.
An engineer must apply AAA configuration on a Cisco MDS 9000 Series Switch. The solution must meet these conditions:-It must use a challenge-response authentication protocol that uses MD5 hashing with an incrementally changing identifier.-The RADIUS configuration must be automatically shared with other MDS switches in the environment.The RADIUS server is already defined. Which command set completes the configuration?
https://www.cisco.com/c/en/us/td/docs/switches/datacenter/mds9000/sw/8_x/config/security/cisco_mds9000_security_config_guide_8x/ configuring_security_features_on_external_aaa_server.html#con_2054570
Post your Comments and Discuss Cisco 350-601 exam prep with other Community members:
Our website is free, but we have to fight against AI bots and content theft. We're sorry for the inconvenience caused by these security measures. You can access the rest of the 350-601 content, but please register or login to continue.