5.3 Apply Storage Security 350-601 Practice Questions (Page 5)

Questions 21–25

1. 21application · medium

   A Cisco MDS switch is configured with AAA authentication using a RADIUS server. A user attempts to log in, but the RADIUS server is temporarily unreachable. The switch has a local user account configured with the same username and password. The administrator wants the user to be able to log in using the local account when the RADIUS server is unavailable. What must be configured to allow this fallback?

   • AAdd 'local' as the second method in the AAA authentication login method list.
   • BCreate a new user account on the switch with the same username and password.
   • CEnable local authentication as the primary method and RADIUS as the fallback.
   • DConfigure the RADIUS server with a longer timeout and retry count.
   Reveal Solution Discussion Select an answer first
2. 22foundation · easy

   Which command displays the port security configuration and status for all interfaces on a Cisco switch?

   • Ashow port-security
   • Bshow security port
   • Cshow interfaces port-security
   • Dshow running-config port-security
   Reveal Solution Discussion Select an answer first
4. 23foundation · easy

   Which command configures port security on a Cisco switch interface?

   • Aenable port-security
   • Bswitchport security on
   • Cport-security enable
   • Dswitchport port-security
   Reveal Solution Discussion Select an answer first
5. 24foundation · easy

   Which command displays the fabric binding configuration and status on a Cisco MDS switch?

   • Ashow fcns database
   • Bshow port-security
   • Cshow fabric info
   • Dshow fabric-binding
   Reveal Solution Discussion Select an answer first
6. 25expert · hard

   A network engineer is troubleshooting a port security issue on a Cisco Nexus switch. The port is configured with a maximum of 10 MAC addresses, violation mode of restrict, and sticky learning enabled. The port is currently in the 'up' state, but the engineer notices that some devices on the port are not able to communicate. The 'show port-security' output shows that the port has 10 secure MAC addresses and the violation count is increasing. What is the most likely cause of the connectivity issue?

   • AThe port security feature is not enabled on the port, so all MAC addresses are being dropped.
   • BThe port has reached its maximum MAC address limit, and new devices are being dropped by the restrict violation mode.
   • CThe violation mode of restrict is causing the port to be placed in the err-disabled state.
   • DThe sticky MAC addresses are not being saved to the running configuration, so they are lost on reboot.
   Reveal Solution Discussion Select an answer first