Security

A Nexus switch is configured with port security. Which violation action will cause the switch to shut down the interface when a security violation occurs?

Which Nexus security feature validates ARP packets to prevent ARP spoofing attacks?

A network engineer is hardening a Nexus switch. Which two security best practices should be applied? (Choose two.)

A Nexus switch is being hardened. An engineer wants to protect the control plane from CPU-targeted attacks, such as heavy ICMP traffic. Which feature should be configured?

In UCS Manager, which feature provides role-based access control for managing the fabric interconnects?

In ACI, a tenant requires that all traffic between two EPGs is denied except for specific HTTP traffic. Which policy elements must be configured?

An organization requires disk encryption for data at rest in their UCS environment. Which technology should be used?

A Nexus switch is configured with DHCP snooping. Which switchport mode is required for trusted ports to prevent rogue DHCP server attacks?

Which technology provides at-rest encryption for disk drives in UCS servers?

An engineer applies an IPv4 ACL to a Nexus switch interface. The ACL must permit traffic from host 10.1.1.1 to host 10.2.2.2 on TCP port 443 and deny all other traffic. Which configuration is correct?

Which feature on Nexus switches prevents ARP spoofing attacks by validating ARP packets?

An organization wants to encrypt data at rest in a storage array. Which two technologies can be used? (Choose two.)

A network engineer is configuring micro-segmentation in an ACI fabric. Two EPGs, Web and App, must communicate via HTTPS only. Which type of contract should be applied between the EPGs?

An administrator needs to limit the number of MAC addresses learned on a Nexus access port to prevent MAC flooding attacks. Which feature should be configured?

A Nexus switch is experiencing high CPU utilization due to control plane traffic. Which feature should be configured to protect the CPU?

Which authentication protocol is recommended by Cisco for network device administration due to its separation of authentication, authorization, and accounting?

An engineer is deploying Cisco TrustSec in a data center. Which technology uses Security Group Tags (SGTs) to enforce east-west traffic policies without relying on IP addresses?

An engineer is configuring 802.1X for network access control. Which AAA protocol should be used for communication between the authenticator (switch) and the authentication server?

Which encryption technology is used to secure Fibre Channel traffic in flight between storage and switches?

Which Nexus feature dynamically validates ARP packets to prevent man-in-the-middle attacks?

A network engineer is hardening a Nexus 9000 switch. Which action is most effective in reducing the attack surface?

An organization uses Cisco TrustSec to tag traffic. An endpoint is assigned SGT 5 (Developers) and another SGT 10 (Testers). The SGACL on the leaf switch permits traffic from SGT 5 to SGT 10 for HTTP but denies other. Which action is taken by the leaf switch?

Which feature prevents IP spoofing by ensuring that a client uses only the IP address assigned by DHCP?

Which TWO features are commonly used together to prevent IP spoofing on a Nexus switch? (Choose two.)

An engineer needs to protect the control plane of a Nexus 9000 switch from CPU-targeted attacks. Which feature should be configured?

A data center uses self-encrypting drives (SEDs) in UCS servers. Which type of protection does SED provide?

Which security feature on a Nexus switch prevents a rogue DHCP server from assigning invalid IP addresses to clients?

Which AAA protocol is recommended by Cisco for network device administration, as it separates authentication, authorization, and accounting?

An engineer is configuring micro-segmentation in an ACI fabric. Which object defines the whitelist model for communication between EPGs?

A data center architect needs to enforce role-based access control for UCS Manager. What is the correct approach?

Which three features are used on Nexus switches to mitigate Layer 2 attacks? (Choose three.)

Which feature on a Nexus switch uses DHCP snooping binding information to filter IP traffic on a per-port basis?

In Cisco TrustSec, which technology is used to enforce east-west traffic policies based on identity without relying on IP addresses?

A UCS administrator needs to ensure that only the fabric interconnect management plane is accessible from the management network. Which feature should be implemented?

An organization wants to encrypt Fibre Channel traffic in-flight between storage and servers. Which standard should be used?

In a UCS environment, which method provides management plane isolation for the fabric interconnects?

An administrator wants to prevent a rogue DHCP server from assigning IP addresses on a Nexus switch. Which feature should be enabled?

A Nexus administrator wants to apply an IPv4 ACL to filter traffic on a specific VLAN. Which command is correct?

Which Nexus security feature validates the source IP address of packets on a per-port basis and drops packets with invalid source IPs?

A network administrator must enforce security policies for east-west traffic in a Cisco TrustSec-enabled data center without using IP-based ACLs. Which technology should be used?

An engineer wants to enforce security policies in a data center based on user identity rather than IP addresses. Which Cisco technology enables identity-based tagging and policy enforcement?

An engineer is deploying data encryption in a SAN environment. Which two methods provide at-rest encryption? (Choose two.)

A security engineer is deploying IP Source Guard on a Nexus switch. Which two components must be operational for IP Source Guard to function correctly?

In Cisco TrustSec, what is used to tag traffic based on identity or group membership?

In a UCS environment, an administrator needs to restrict access to the UCS Manager so that only specific users can configure server policies. Which feature should be used?

An engineer needs to deny all traffic between two EPGs in ACI while allowing other EPG communications. Which construct should be used?

An engineer is hardening a Nexus switch. Which THREE actions should be taken? (Choose three.)

In an ACI fabric, a security policy requires that traffic from EPG1 to EPG2 be denied, but all other inter-EPG traffic is permitted by default. Which type of contract should be used?

In ACI, which model is used for micro-segmentation to allow traffic between EPGs?

Which protocol is recommended by Cisco for network device administration AAA due to its separation of authentication, authorization, and accounting?