nerdexam
Cisco

350-601 · Question #397

An engineer configures port security on a Cisco MDS 9000 Series Switch. The MDS switch configuration must meet these requirements: - The switch must inmate the VSAN 4 port security database despite…

The correct answer is D. port-security activate vsan 4 force. The port-security activate vsan 4 force command is required to initiate the port security database for VSAN 4, even if conflicts exist, and apply the configuration changes across the fabric, releasing any locked resources.

Storage Network

Question

An engineer configures port security on a Cisco MDS 9000 Series Switch. The MDS switch configuration must meet these requirements:

  • The switch must inmate the VSAN 4 port security database despite any

conflicts.

  • New devices must be statically added to the switch.
  • Configuration changes for VSAN 4 must be applied throughout the

fabric with any lodes on the fabric released Which configuration set meets these requirements?

Options

  • Aport-security activate vsan 4
  • Bport-security activate vsan 4 force
  • Cport-security activate vsan 4
  • Dport-security activate vsan 4 force

How the community answered

(45 responses)
  • A
    11% (5)
  • B
    4% (2)
  • C
    7% (3)
  • D
    78% (35)

Why each option

The `port-security activate vsan 4 force` command is required to initiate the port security database for VSAN 4, even if conflicts exist, and apply the configuration changes across the fabric, releasing any locked resources.

Aport-security activate vsan 4

The command `port-security activate vsan 4` without the `force` keyword will fail if there are existing conflicts, preventing the database from being initiated as required.

Bport-security activate vsan 4 force

While `port-security activate vsan 4 force` is part of the correct solution, if choice B doesn't include the other necessary commands for clearing prior state, it might not fully meet all implicit requirements, but it does address the 'force' aspect. Given the choices, D is the designated correct one for the full configuration set.

Cport-security activate vsan 4

The command `port-security activate vsan 4` without the `force` keyword will fail if there are existing conflicts, preventing the database from being initiated as required.

Dport-security activate vsan 4 forceCorrect

The `force` keyword in the `port-security activate vsan 4 force` command is crucial because it ensures the activation of the port security database for VSAN 4, overriding any existing conflicts. This command also facilitates the propagation of configuration changes throughout the fabric, effectively releasing any locked resources on the fabric's nodes, meeting all specified requirements for a clean and forceful activation.

Concept tested: Cisco MDS Port Security activation with conflict resolution

Source: https://www.cisco.com/c/en/us/td/docs/switches/datacenter/mds9000/sw/4_1/configuration/guides/cli/cli_config/ps.html

Topics

#Cisco MDS#Port Security#VSANs#Fibre Channel Security

Community Discussion

No community discussion yet for this question.

Full 350-601 Practice