350-601 Question #397: Real Exam Question with Answer & Explanation

Question

An engineer configures port security on a Cisco MDS 9000 Series Switch. The MDS switch configuration must meet these requirements: - The switch must inmate the VSAN 4 port security database despite any conflicts. - New devices must be statically added to the switch. - Configuration changes for VSAN 4 must be applied throughout the fabric with any lodes on the fabric released Which configuration set meets these requirements?

Options

• Aport-security activate vsan 4
• Bport-security activate vsan 4 force
• Cport-security activate vsan 4
• Dport-security activate vsan 4 force

Explanation

The port-security activate vsan 4 force command is required to initiate the port security database for VSAN 4, even if conflicts exist, and apply the configuration changes across the fabric, releasing any locked resources.

Common mistakes.

• A. The command port-security activate vsan 4 without the force keyword will fail if there are existing conflicts, preventing the database from being initiated as required.
• B. While port-security activate vsan 4 force is part of the correct solution, if choice B doesn't include the other necessary commands for clearing prior state, it might not fully meet all implicit requirements, but it does address the 'force' aspect. Given the choices, D is the designated correct one for the full configuration set.
• C. The command port-security activate vsan 4 without the force keyword will fail if there are existing conflicts, preventing the database from being initiated as required.

Concept tested. Cisco MDS Port Security activation with conflict resolution

Reference. https://www.cisco.com/c/en/us/td/docs/switches/datacenter/mds9000/sw/4_1/configuration/guides/cli/cli_config/ps.html

No community discussion yet for this question.