350-601 Question #493: Real Exam Question with Answer & Explanation

Question

Refer to the exhibit. An engineer must configure port security on the Cisco Nexus 5000 Series Switch that meets these requirements: - Port security must be applied on VSAN 10 only. - NWWN 20:10:10:10:10:10:10:10 to log in through SAN port-channel 2. - Any WWN must be allowed to log in through interfaces fc1/1, fc1/2, fc1/3. - Auto learning must be disabled. Which command set satisfies these conditions?

Options

• ANexus5K(config)# port-security database vsan 10
• BNexus5K(config)# port-security activate vsan 10 no auto-learn
• CNexus5K(config)# port-security database vsan 10
• DNexus5K(config)# port-security database vsan 10

Explanation

{"question_number": 7, "correct_answer": "A", "explanation": "The requirements call for port-security limited to VSAN 10, a specific NWWN (Node WWN) bound to SAN port-channel 2, any WWN permitted on fc1/1–fc1/3, and auto-learning disabled. Answer A correctly uses 'port-security database vsan 10' to scope the configuration to VSAN 10, and includes the NWWN binding to the SAN port-channel. Wildcard entries for fc1/1, fc1/2, and fc1/3 allow any WWN on those interfaces. The 'no auto-learn' setting is applied in a subsequent activation command. Answer B applies activation without first building the database. Answers C and D either use incorrect syntax or apply incorrect configurations for the stated requirements.", "generated_by": "claude-sonnet", "llm_judge_score": 4}

No community discussion yet for this question.