350-601 Question #491: Real Exam Question with Answer & Explanation

Question

Refer to the exhibit. An engineer must activate the port-security database on a Cisco MDS 9000 Series Switch for VSAN 100, but receives the error shown. Which command completes the configuration?

Options

• Aport-security config-enable vsan 100
• Bport-security vsan 100 database active
• Cport-security enabled mode vsan 100
• Dport-security activate vsan 100 force

Explanation

{"question_number": 6, "correct_answer": "D", "explanation": "On Cisco MDS 9000 switches, the command to activate the port-security database is 'port-security activate vsan <id>'. When this command fails with an error, it typically means that one or more devices currently logged into the fabric are not listed in the port-security database, creating a conflict. The 'force' keyword - 'port-security activate vsan 100 force' - overrides this conflict and activates the database anyway, allowing the currently logged-in devices to remain connected even if they are not in the database. Without 'force', the activation is blocked to prevent disruption. The other commands ('config-enable', 'vsan 100 database active', 'enabled mode') are not valid MDS port-security syntax.", "generated_by": "claude-sonnet", "llm_judge_score": 4}

No community discussion yet for this question.