350-601 · Question #373
A company must security harden its Cisco UCS C-Series servers. The security policy requires all out-of-band management to meet these requirements: - It must encrypt all traffic - It must use…
The correct answer is D. data1# scope kvm. To meet security requirements for out-of-band management on Cisco UCS C-Series servers, including encryption, non-default ports, and private sessions, the configuration must be performed within the KVM scope.
Question
A company must security harden its Cisco UCS C-Series servers. The security policy requires all out-of-band management to meet these requirements:
- It must encrypt all traffic
- It must use nondefault ports
- It must provide private administrative sessions.
Which Cisco IMC configuration meets the requirements?
Options
- Adata1# scope sol
- Bdata1# scope cimc
- Cdata1# scope oob
- Ddata1# scope kvm
How the community answered
(60 responses)- A12% (7)
- B3% (2)
- C7% (4)
- D78% (47)
Why each option
To meet security requirements for out-of-band management on Cisco UCS C-Series servers, including encryption, non-default ports, and private sessions, the configuration must be performed within the KVM scope.
scope sol configures Serial Over LAN, which is typically text-based and less feature-rich than KVM for full GUI interaction and might not inherently meet all encryption and private session requirements.
scope cimc is the top-level scope for configuring the Cisco Integrated Management Controller (CIMC) itself, but it does not directly configure the KVM service settings for meeting the requirements.
scope oob is not a standard or recognized command scope in Cisco IMC CLI for configuring specific out-of-band management features with all the specified requirements.
The scope kvm command allows configuration of the Keyboard, Video, Mouse (KVM) over IP service, which is a key component of out-of-band management for UCS C-Series servers, providing inherently private, encrypted sessions and configurable non-default ports.
Concept tested: Cisco IMC KVM, out-of-band management security
Source: https://www.cisco.com/c/en/us/td/docs/unified_computing/ucs/c-series_integration/ucsm3-0/b_C-Series_Integration_3-0/b_C-Series_Integration_3-0_chapter_0100.html#concept_D8E5BF137936417BB411215B4C252281
Topics
Community Discussion
No community discussion yet for this question.