350-601 Question #315: Real Exam Question with Answer & Explanation

Question

An engineer must configure the HSRP protocol between two Cisco Nexus 9000 Series Switches. This configuration is present on Nexus A. The final HSRP configuration must meet these requirements: • The HSRP communication must be secured on both switches. • Both switches must support more than 300 groups. Which two commands must be added to the HSRP configuration on Nexus A to complete these requirements? (Choose two.)

Options

• Aauthentication text 1020
• Bhsrp version 1
• Cauthenticate md5 key-chain NHRP-KEYS
• Dhsrp version 2
• Eauthentication text 1010

Explanation

Cisco NX-OS supports HSRP version 1 by default. You can configure an interface to use HSRP HSRP version 2 has the following enhancements to HSRP version 1: - Expands the group number range. HSRP version 1 supports group numbers from 0 to 255. HSRP version 2 supports group numbers from 0 to 4095. - For IPv4, uses the IPv4 multicast address 224.0.0.102 or the IPv6 multicast address FF02::66 to send hello packets instead of the multicast address of 224.0.0.2, which is used by HSRP version - Uses the MAC address range from 0000.0C9F.F000 to 0000.0C9F.FFFF for IPv4 and 0005.73A0.0000 through 0005.73A0.0FFF for IPv6 addresses. HSRP version 1 uses the MAC address range 0000.0C07.AC00 to 0000.0C07.ACFF. - Adds support for MD5 authentication. This example shows how to configure MD5 authentication for HSRP on Ethernet 1/2 after creating the key chain: switch# configure terminal switch(config)# key chain hsrp-keys switch(config-keychain)# key 0 switch(config-keychain-key)# key-string 7 zqdest switch(config-keychain-key) accept-lifetime 00:00:00 Jun 01 2013 23:59:59 Sep 12 2013 switch(config-keychain-key) send-lifetime 00:00:00 Jun 01 2013 23:59:59 Aug 12 2013 switch(config-keychain-key) key 1 switch(config-keychain-key) key-string 7 uaeqdyito switch(config-keychain-key) accept-lifetime 00:00:00 Aug 12 2013 23:59:59 Dec 12 2013 switch(config-keychain-key) send-lifetime 00:00:00 Sep 12 2013 23:59:59 Nov 12 2013 switch(config-keychain-key)# interface ethernet 1/2 switch(config-if)# hsrp 2 switch(config-if-hsrp)# authentication md5 key-chain hsrp-keys switch(config-if-hsrp)# copy running-config startup-config x/unicast/configuration/guide/l3_cli_nxos/l3_hsrp.html

No community discussion yet for this question.