350-601 · Question #397
An engineer configures port security on a Cisco MDS 9000 Series Switch. The MDS switch configuration must meet these requirements: - The switch must inmate the VSAN 4 port security database despite…
The correct answer is D. port-security activate vsan 4 force. The port-security activate vsan 4 force command is required to initiate the port security database for VSAN 4, even if conflicts exist, and apply the configuration changes across the fabric, releasing any locked resources.
Question
An engineer configures port security on a Cisco MDS 9000 Series Switch. The MDS switch configuration must meet these requirements:
- The switch must inmate the VSAN 4 port security database despite any
conflicts.
- New devices must be statically added to the switch.
- Configuration changes for VSAN 4 must be applied throughout the
fabric with any lodes on the fabric released Which configuration set meets these requirements?
Options
- Aport-security activate vsan 4
- Bport-security activate vsan 4 force
- Cport-security activate vsan 4
- Dport-security activate vsan 4 force
How the community answered
(45 responses)- A11% (5)
- B4% (2)
- C7% (3)
- D78% (35)
Why each option
The `port-security activate vsan 4 force` command is required to initiate the port security database for VSAN 4, even if conflicts exist, and apply the configuration changes across the fabric, releasing any locked resources.
The command `port-security activate vsan 4` without the `force` keyword will fail if there are existing conflicts, preventing the database from being initiated as required.
While `port-security activate vsan 4 force` is part of the correct solution, if choice B doesn't include the other necessary commands for clearing prior state, it might not fully meet all implicit requirements, but it does address the 'force' aspect. Given the choices, D is the designated correct one for the full configuration set.
The command `port-security activate vsan 4` without the `force` keyword will fail if there are existing conflicts, preventing the database from being initiated as required.
The `force` keyword in the `port-security activate vsan 4 force` command is crucial because it ensures the activation of the port security database for VSAN 4, overriding any existing conflicts. This command also facilitates the propagation of configuration changes throughout the fabric, effectively releasing any locked resources on the fabric's nodes, meeting all specified requirements for a clean and forceful activation.
Concept tested: Cisco MDS Port Security activation with conflict resolution
Source: https://www.cisco.com/c/en/us/td/docs/switches/datacenter/mds9000/sw/4_1/configuration/guides/cli/cli_config/ps.html
Topics
Community Discussion
No community discussion yet for this question.