implementing cisco data center unified computing (dcuci)€¦ · implementing cisco data center...

Implementing Cisco Data Center Unified Computing (DCUCI)

Number: 642-999Passing Score: 800Time Limit: 90 minFile Version: 3.0

http://www.gratisexam.com/

Implementing Cisco Data Center Unified Computing (DCUCI)5.0

642-999

Exam Topics

Implement C-Series stand alone

Implement UCS C-Series rack servers Implement Firmware updates Configuring CIMC Configuring network and storage connectivity Provision hard drives Installing ESXI on local hard drives Configure logging and monitoring the methods for Cisco UCS

Configure Cisco UCS B-Series Connectivity

Configure B-Series overall connectivity Implement UCS B-Series component installation Configure B-Series LAN connectivity Configure B-Series SAN connectivity

Manage Cisco UCS B-Series

Implement security in a Cisco UCS Identify the steps necessary to manage software and firmware versions and upgrades in a Cisco UCS Implement backup and import for Cisco UCS database Configure logging and monitoring the methods for Cisco UCS Configure the Call Home feature in a Cisco UCS system Describe High Availability for the Fabric interconnect cluster

Provision Cisco UCS compute resources

Provision network connectivity in a Cisco UCS Provision storage sources in a Cisco UCS Provision resource pools in a Cisco UCS Provision resource policies in a Cisco UCS Provision service profiles in a Cisco UCS Provision O/S parameters in a Cisco UCS Provision the base UCS system configuration Provision virtual HBAs

Provision VNICs and VNIC policies in a Cisco UCS Provision C-Series integration

Implement Cisco UCS server virtualization features

Provision UCS integration with Vmware vCenter server Provision UCS vm-fex Provision direct path I/O

Sections1. Questions2. Drag & Drop3. Hot Spot

Exam A

QUESTION 1When upgrading a standalone Cisco UCS C-Series server, which method is correct?

A. direct upgrade on all componentsB. Cisco Hardware Upgrade UtilityC. Cisco Host Upgrade UtilityD. Cisco Server Upgrade Utility

Correct Answer: CSection: QuestionsExplanation

Explanation/Reference:The Cisco Host Upgrade Utility (hereafter referred to as the ""HUU"") is a tool that upgrades the followingfirmware:

Cisco Integrated Management Controller (CIMC)System BIOSLAN on motherboard (LOM)RAID controllers (for any third-party RAID controllers that are installed)Cisco UCS P81E Virtual Interface Card (VIC)Cisco UCS VIC 1225Broadcom PCI adapters- 5709 Dual and Quad port adapters- 57712 Dual port adapter- 57712 10GBaseT adapterThe HUU includes the options to download ISO images for a selected platform on a Windows operatingsystem. The image file for the firmware is embedded in the ISO and the HUU displays a menu that allows youto choose which firmware components to upgrade.

QUESTION 2In a standalone Cisco UCS C-Series server, which recommendations can be used to upgrade the BIOS?

A. Cisco IMCB. Cisco UCS ManagerC. iFlash32 UtilityD. Flash ROM UtilityE. EFI InterfaceF. Cisco Host Upgrade UtilityG. USB Flash Utility

Correct Answer: FSection: QuestionsExplanation

Explanation/Reference:The Cisco Host Upgrade Utility (hereafter referred to as the ""HUU"") is a tool that upgrades the followingfirmware:

Cisco Integrated Management Controller (CIMC)System BIOSLAN on motherboard (LOM)RAID controllers (for any third-party RAID controllers that are installed)Cisco UCS P81E Virtual Interface Card (VIC)Cisco UCS VIC 1225

Broadcom PCI adapters- 5709 Dual and Quad port adapters- 57712 Dual port adapter- 57712 10GBaseT adapterThe HUU includes the options to download ISO images for a selected platform on a Windows operatingsystem. The image file for the firmware is embedded in the ISO and the HUU displays a menu that allows youto choose which firmware components to upgrade.

QUESTION 3What are the default settings of the Cisco IMCCIMC NIC properties on a standalone Cisco UCS C- Seriesserver?

A. 'Shared LOM' NIC mode with 'Active-active' NIC redundancy and DHCP enabledB. 'Shared LOM' NIC mode with 'Active-standby' NIC redundancy and DHCP enabledC. 'Dedicated' NIC mode with 'Active-standby' NIC redundancy DHCP disabledD. 'Dedicated' NIC mode with 'None' NIC redundancy and DHCP enabledE. 'Cisco Card' NIC mode with 'Active-active' NIC redundancy and DHCP enabled

Correct Answer: DSection: QuestionsExplanation

Explanation/Reference:The NIC Mode drop-down list in the NIC Properties area determines which ports can reach the CIMC. Thefollowing mode options are available, depending on your platform:1. Cisco Card—A connection to the CIMC is available through an installed adapter card.2. Dedicated—A connection to the CIMC is available through the management Ethernet port or ports.3. Shared LOM—A connection to the CIMC is available only through the LAN On Motherboard (LOM) Ethernethost ports. Shared LOM EXT mode enables the 1-Gb Ethernet ports and the ports on any installed Cisco virtualinterface card (VIC) to access the Cisco Integrated Management Interface (CIMC). In some platforms, a 10Gigabit Ethernet LOM option is available.4. Shipping (if supported)—A connection to the CIMC is available through the management Ethernet port orports using a limited factory default configuration.

The NIC Redundancy drop-down list in the NIC Properties area determines how NIC redundancy is handled:1. None—Redundancy is not available.2. Active-Active—All Ethernet ports operate simultaneously. This mode provides multiple paths to the CIMC.3. Active-Standby—One port fails over to the other.

QUESTION 4Which ports can access the Cisco IMC if you select Shared LOM NIC mode in the Cisco IMC ConfigurationUtility for a Cisco UCS C-Series server?

A. the ports on an installed Cisco network adapter cardB. the two 1-Gb Ethernet portsC. the two 10/100 management portsD. the two 10/100 management ports, but each port has a default setting

Correct Answer: BSection: QuestionsExplanation

Explanation/Reference:The NIC Mode drop-down list in the NIC Properties area determines which ports can reach the CIMC. Thefollowing mode options are available, depending on your platform:1. Cisco Card—A connection to the CIMC is available through an installed adapter card.2. Dedicated—A connection to the CIMC is available through the management Ethernet port or ports.

3. Shared LOM—A connection to the CIMC is available only through the LAN On Motherboard (LOM) Ethernethost ports. Shared LOM EXT mode enables the 1-Gb Ethernet ports and the ports on any installed Cisco virtualinterface card (VIC) to access the Cisco Integrated Management Interface (CIMC). In some platforms, a 10Gigabit Ethernet LOM option is available.4. Shipping (if supported)—A connection to the CIMC is available through the management Ethernet port orports using a limited factory default configuration.

The NIC Redundancy drop-down list in the NIC Properties area determines how NIC redundancy is handled:1. None—Redundancy is not available.2. Active-Active—All Ethernet ports operate simultaneously. This mode provides multiple paths to the CIMC.3. Active-Standby—One port fails over to the other.

QUESTION 5Which NIC redundancy modes allow the LOMs to be discovered by the operating system or hypervisor?

A. Dedicated modeB. Active/ActiveC. Active/StandbyD. Cisco Card Mode

Correct Answer: ASection: QuestionsExplanation

Explanation/Reference:

QUESTION 6Which two are true with respect to the unified ports on the Cisco Unified Computing System 62XX FabricInterconnect? (Choose two.)


A. The port mode is automatically discovered after plugging in a LAN or Fibre Channel-attached cable.B. By default, unified ports that are changed to Ethernet port mode are set to uplink Ethernet port type.C. Ethernet ports must be grouped together in a block and must start with the first port and end with an odd

numbered port.D. Alternating Ethernet and Fibre Channel ports is supported on the expansion module.E. After making port mode changes on an expansion module, the module will reboot.F. In a standalone configuration, making port mode changes to the fixed module will not cause the fabric

interconnect to reboot.

Correct Answer: BESection: QuestionsExplanation

Explanation/Reference:"Port ModesThe port mode determines whether a unified port on the fabric interconnect is configured to carry Ethernet orFibre Channel traffic. The port mode is not automatically discovered by the fabric interconnect; it is configured

in Cisco UCS Manager

Port TypesThe port type defines the type of traffic carried over a unified port connection.By default, unified ports changed to Ethernet port mode are set to uplink Ethernet port type. Unified portschanged to Fibre Channel port mode are set to the Fibre Channel uplink port type. Fibre Channel ports cannotbe unconfigured.Changing the port type does not require a reboot.

Port Mode PlacementEthernet ports must be grouped together in a block. For each module (fixed or expansion), the Ethernet portblock must start with the first port and end with an even numbered port.Fibre Channel ports must be grouped together in a block. For each module (fixed or expansion), the first port inthe Fibre Channel port block must follow the last Ethernet port and extend to include the rest of the ports in themodule. For configurations that include only Fibre Channel ports, the Fibre Channel block must start with thefirst port on the fixed or expansion module.Alternating Ethernet and Fibre Channel ports is not supported on a single module.

Impact of Port Mode Changes on an Expansion ModuleAfter you make port mode changes on an expansion module, the module reboots. All traffic through ports onthe expansion module is interrupted for approximately one minute while the module reboots.

http://www.cisco.com/en/US/docs/unified_computing/ucs/sw/gui/config/guide/2.0/b_UCSM_GUI_Configuration_Guide_2_0_chapter_0101.html"

QUESTION 7Which two are true with respect to the switching modes on the Cisco Unified Computing System 62XX FabricInterconnect? (Choose two.)

A. End-host mode presents a link to a northbound uplink switch as a host trunk with loop detection that isprovided by STP.

B. For northbound traffic, server MAC addresses are statically pinned to an uplink; the return path is controlledby the unified fabric switches.

C. A fabric interconnect port in Ethernet switching mode appears to the uplink switch as a host with many MACaddresses.

D. Server-to-server traffic on a common VLAN are locally switched by the fabric interconnect and not thenorthbound switches.

E. A MAC forwarding table is not used to forward traffic to the uplink switch.F. A MAC address forwarding table is maintained for server-to-server communications across VLANs.

Correct Answer: DESection: QuestionsExplanation


QUESTION 8What is true statement concerning port personalities on the Cisco Unified Computing System 62XX FabricInterconnect?

A. Fibre Channel uplink ports must operate in Fibre Channel switching mode.B. The fabric interconnects use native FCoE storage ports to directly attach to the SAN infrastructure.C. By default, all Fibre Channel ports are unconfigured.D. The Fibre Channel uplink ports do not support VSAN trunking and Fibre Channel port channels.E. The Fibre Channel storage ports support VSAN trunking and Fibre Channel port channels.



QUESTION 9What is a true statement concerning automatic Fibre Channel pinning on a Cisco Unified Computing System62XX Fabric Interconnect?

A. By default, uplink Fibre Channel interfaces are configured for VSAN trunking.B. Using NPV, each downstream server will be pinned to an uplink port that is based on a PIN group.C. The Fibre Channel pinning process is implemented differently than end-host MAC address pinning.D. With VSAN trunking, the automatic pinning of server traffic to Fibre Channel uplink ports will be based on

the server WWN.



QUESTION 10The Cisco UCS administrator has the chassis discovery policy set to "2-link". The administrator connects a newchassis to the Cisco UCS 6200 Series Fabric Interconnects using four links.Which option about link utilization is true?

A. The Cisco UCS will use two links until the chassis is reacknowledged, after which it will use all four links.B. The Cisco UCS will use all four links for discovery.C. The Cisco UCS will use only two links. The other two links are unusable.D. The Cisco UCS will use only two links. However, the administrator can manually pin traffic to the extra links

by using service profiles.


Explanation/Reference:1 link between IOM and fabric interconnects:1-Link Chassis Discovery Policy - Chassis is discovered by Cisco UCS Manager and added to the Cisco UCSdomain as a chassis wired with 1 link.2-Link Chassis Discovery Policy - Chassis cannot be discovered by Cisco UCS Manager and is not added tothe Cisco UCS domain.4-Link Chassis Discovery Policy - Chassis cannot be discovered by Cisco UCS Manager and is not added tothe Cisco UCS domain.8-Link Chassis Discovery Policy - Chassis cannot be discovered by Cisco UCS Manager and is not added tothe Cisco UCS domain.Platform-Max Discovery Policy - Chassis is discovered by Cisco UCS Manager and added to the Cisco UCSdomain as a chassis wired with 1 link.

2 link between IOM and fabric interconnects:1-Link Chassis Discovery Policy - Chassis is discovered by Cisco UCS Manager and added to the Cisco UCSdomain as a chassis wired with 1 link. After initial discovery, reacknowledge the chassis and Cisco UCSManager recognizes and uses the additional links.2-Link Chassis Discovery Policy - Chassis is discovered by Cisco UCS Manager and added to the Cisco UCS

domain as a chassis wired with 2 link.4-Link Chassis Discovery Policy - Chassis cannot be discovered by Cisco UCS Manager and is not added tothe Cisco UCS domain.8-Link Chassis Discovery Policy - Chassis cannot be discovered by Cisco UCS Manager and is not added tothe Cisco UCS domain.Platform-Max Discovery Policy - Chassis cannot be discovered by Cisco UCS Manager and is not added tothe Cisco UCS domain.

4 link between IOM and fabric interconnects:1-Link Chassis Discovery Policy - Chassis is discovered by Cisco UCS Manager and added to the Cisco UCSdomain as a chassis wired with 1 link. After initial discovery, reacknowledge the chassis and Cisco UCSManager recognizes and uses the additional links.2-Link Chassis Discovery Policy - Chassis is discovered by Cisco UCS Manager and added to the Cisco UCSdomain as a chassis wired with 2 links. After initial discovery, reacknowledge the chassis and Cisco UCSManager recognizes and uses the additional links.4-Link Chassis Discovery Policy - Chassis is discovered by Cisco UCS Manager and added to the Cisco UCSdomain as a chassis wired with 4 link.8-Link Chassis Discovery Policy - Chassis cannot be discovered by Cisco UCS Manager and is not added tothe Cisco UCS domainPlatform-Max Discovery Policy - If the IOM has 4 links, the chassis is discovered by Cisco UCS Managerand added to the Cisco UCS domain as a chassis wired with 4 links. If the IOM has 8 links, the chassis is notfully discovered by Cisco UCS Manager.

8 link between IOM and fabric interconnects:1-Link Chassis Discovery Policy - Chassis is discovered by Cisco UCS Manager and added to the Cisco UCSdomain as a chassis wired with 1 link. After initial discovery, reacknowledge the chassis and Cisco UCSManager recognizes and uses the additional links2-Link Chassis Discovery Policy - Chassis is discovered by Cisco UCS Manager and added to the Cisco UCSdomain as a chassis wired with 2 links. After initial discovery, reacknowledge the chassis and Cisco UCSManager recognizes and uses the additional links.4-Link Chassis Discovery Policy - Chassis is discovered by Cisco UCS Manager and added to the Cisco UCSdomain as a chassis wired with 4 links. After initial discovery, reacknowledge the chassis and Cisco UCSManager recognizes and uses the additional links.8-Link Chassis Discovery Policy - Chassis is discovered by Cisco UCS Manager and added to the Cisco UCSdomain as a chassis wired with 8 links.Platform-Max Discovery Policy - Chassis is discovered by Cisco UCS Manager and added to the Cisco UCSdomain as a chassis wired with 8 links.

http://www.cisco.com/en/US/docs/unified_computing/ucs/sw/cli/config/guide/2.0/b_UCSM_CLI_Configuration_Guide_2_0_chapter_01100.html

QUESTION 11Which policy is used to update adapter firmware?

A. adapter policyB. host firmware policyC. management firmware policyD. network control policy

Correct Answer: BSection: (none)Explanation

Explanation/Reference:You can use firmware packages in service profiles to upgrade the server and adapter firmware, including theBIOS on the server, by defining a host firmware policy and including it in the service profile associated with aserver.:

Host Firmware Package policy enables you to specify a set of firmware versions that make up the host

firmware package (also known as the host firmware pack). The host firmware package includes the followingfirmware for server and adapter endpoints:- Adapter- CIMC- BIOS- Board Controller- FC Adapters- HBA Option ROM- Storage Controller

QUESTION 12Which options are valid port types when configuring fixed 10-Gb LAN interfaces on the Cisco UCS 6200 SeriesFabric Interconnects? (Choose three.)

A. Monitoring portB. Server portC. Uplink Ethernet portD. FEX portE. Fibre Channel storage port

Correct Answer: ABCSection: QuestionsExplanation

Explanation/Reference:When the port mode is set to Ethernet, you can configure the following port types:- Server ports- Ethernet uplink ports- Ethernet port channel members- FCoE ports- Appliance ports- Appliance port channel members- SPAN destination ports- SPAN source ports

When the port mode is set to Fibre Channel, you can configure the following port types:- Fibre Channel uplink ports- Fibre Channel port channel members- Fibre Channel storage ports- SPAN destination ports- SPAN source ports

QUESTION 13When cabling a Cisco UCS 6200 Series Fabric Interconnect to disjoint Layer 2 networks, which option must beconsidered?

A. The fabric interconnect must be in switching mode.B. You must first configure a LAN pin group.C. Each VLAN is allowed across multiple disjoint uplinks.D. Each vNIC can communicate to a single disjoint network.


Explanation/Reference:When you plan your configuration for upstream disjoint L2 networks, consider the following.

Ethernet Switching Mode Must Be End-Host ModeCisco UCS only supports disjoint L2 networks when the Ethernet switching mode of the fabric interconnects isconfigured for end-host mode. You cannot connect to disjoint L2 networks if the Ethernet switching mode of thefabric interconnects is switch mode.

Symmetrical Configuration Is Recommended for High AvailabilityIf a Cisco UCS domain is configured for high availability with two fabric interconnects, we recommend that bothfabric interconnects are configured with the same set of VLANs.

VLAN Validity Criteria Are the Same for Uplink Ethernet Ports and Port ChannelsThe VLAN used for the disjoint L2 networks must be configured and assigned to an uplink Ethernet port oruplink Ethernet port channel. If the port or port channel does not include the VLAN, Cisco UCS Managerconsiders the VLAN invalid and does the following:- Displays a configuration warning in the Status Details area for the server.- Ignores the configuration for the port or port channel and drops all traffic for that VLAN

Overlapping VLANs Are Not SupportedCisco UCS does not support overlapping VLANs in disjoint L2 networks. You must ensure that each VLAN onlyconnects to one upstream disjoint L2 domain.

Each vNIC Can Only Communicate with One Disjoint L2 NetworkA vNIC can only communicate with one disjoint L2 network. If a server needs to communicate with multipledisjoint L2 networks, you must configure a vNIC for each of those networks.To communicate with more than two disjoint L2 networks, a server must have a Cisco VIC adapter thatsupports more than two vNICs.

Appliance Port Must Be Configured with the Same VLAN as Uplink Ethernet Port or Port Channel

Default VLAN 1 Cannot Be Configured Explicitly on an Uplink Ethernet Port or Port Channel

QUESTION 14Which two items represent the features of Call Home on the Cisco Unified Computing System? (Choose two.)

A. syslogB. send fault details to Cisco TACC. SNMP trap receiverD. send email alerts to administratorsE. central repository of normalized fault data

Correct Answer: BDSection: QuestionsExplanation

Explanation/Reference:Call Home provides an email-based notification for critical system policies. A range of message formats areavailable for compatibility with pager services or XML-based automated parsing applications. You can use thisfeature to page a network support engineer, email a Network Operations Center, or use Cisco Smart Call Homeservices to generate a case with the Technical Assistance Center (TAC).The Call Home feature can deliver alert messages containing information about diagnostics and environmentalfaults and events.The Call Home feature can deliver alerts to multiple recipients, referred to as Call Home destination profiles.Each profile includes configurable message formats and content categories. A predefined destination profile isprovided for sending alerts to the Cisco TAC, but you also can define your own destination profiles.

http://www.cisco.com/en/US/docs/unified_computing/ucs/sw/cli/config/guide/2.0/b_UCSM_CLI_Configuration_Guide_2_0.pdf

QUESTION 15Which three items represent message formats that are available to send fault data using Cisco Call Home?

(Choose three.)

A. short textB. long textC. HTMLD. SOAP APIE. XMLF. Java

Correct Answer: ABESection: QuestionsExplanation

Explanation/Reference:Cisco UCS delivers Call Home messages in the following formats:• Short text format which provides a one or two line description of the fault that is suitable for pagers or printedreports.• Full text format which provides fully formatted message with detailed information that is suitable for humanreading.• XML machine readable format that uses Extensible Markup Language (XML) and Adaptive MessagingLanguage (AML) XML schema definition (XSD). The AML XSD is published on the Cisco.com website. TheXML format enables communication with the Cisco Systems Technical Assistance Center.


QUESTION 16Which item describes the failure scenario called a "split-brain" in the Cisco Unified Computing System?

A. failure of the Cisco Unified Computing System L1-L2 networkB. failure of a Cisco Unified Computing System Chassis Management ControllerC. failure of a Cisco Unified Computing System I/O moduleD. failure of a Cisco Unified Computing System Fabric InterconnectE. failure of a Cisco Unified Computing System Chassis Management Switch


Explanation/Reference:Issues in the High Availability Cluster1. Split BrainThis can occur in the cluster when there is a failure in the private network that is responsible for the node tonode communications between the fabric interconnects. The serial EEPROM in the chassis is used to resolvethese issues. The chassis management controller on each half of the fabric handles this issue. Fabric A side ofthe chassis has read access to the EEPROM data, and the same applies to the Fabric B side. It will have read-only access to the A side.2. Partition in SpaceAnother issue that can occur when the private network fails between the cluster components is the partition inspace. Here the issue is the fact that each fabric interconnect might try and declare itself as active. In order toresolve this issue, both nodes are demoted to subordinate, and Cisco begins what is called a quorum race. Thenode that claims the most resources first wins, and becomes the active node. The loser aborts the cluster andcan rejoin as a subordinate once communications are restored.3. Partition in TimeThis condition occurs when a node boots alone in the cluster. The node compares its database version againstthe serial EEPROM and discovers that its version number is lower than the current database version.Obviously, with this condition, there is a risk of applying an old configuration to the Cisco UCS components. As

a result, the node will not become the active management node.

http://blog.ipexpert.com/2012/04/29/managing-high-availability-in-the-cisco-ucs-system/

QUESTION 17Which two are true concerning the role-based access control specifics of a Cisco Unified Computing System?(Choose two.)

A. Disabled local user accounts are deleted from the database.B. A locally authenticated user account is any user account that is authenticated through LDAP, RADIUS, or

TACACS+.C. If a user maintains a local user account and a remote user account simultaneously, the roles that are

defined in the local user account override those that are maintained in the remote user account.D. By default, user accounts expire after 90 days; a warning message will be generated 10 days prior to

expiration.E. A user that is assigned one or more roles will be allowed the privileges that are consistent across all of the

assigned roles.F. All roles include read access to all configuration settings in the Cisco Unified Computing System domain.

Correct Answer: CFSection: QuestionsExplanation

Explanation/Reference:User Accounts for Cisco UCS ManagerUser accounts are used to access the system. Up to 48 user accounts can be configured in each Cisco UCSdomain. Each user account must have a unique username and password.

1. Admin AccountEach Cisco UCS domain has an admin account. The admin account is a default user account and cannot bemodified or deleted. This account is the system administrator or superuser account and has full privileges.There is no default password assigned to the admin account; you must choose the password during the initialsystem setup. The admin account is always active and does not expire. You cannot configure the adminaccount as inactive.2. Locally Authenticated User AccountsA locally authenticated user account is authenticated directly through the fabric interconnect and can beenabled or disabled by anyone with admin or aaa privileges. Once a local user account is disabled, the usercannot log in. Configuration details for disabled local user accounts are not deleted by the database. If you re-enable a disabled local user account, the account becomes active again with the existing configuration,including username and password.3. Remotely Authenticated User AccountsA remotely authenticated user account is any user account that is authenticated through LDAP, RADIUS, orTACACS+. If a user maintains a local user account and a remote user account simultaneously, the rolesdefined in the local user account override those maintained in the remote user account.4. Expiration of User AccountsUser accounts can be configured to expire at a predefined time. When the expiration time is reached, the useraccount is disabled. By default, user accounts do not expire.

User RolesUser roles contain one or more privileges that define the operations allowed for the user who is assigned therole. A user can be assigned one or more roles. A user assigned multiple roles has the combined privileges ofall assigned roles. For example, if Role1 has storage related privileges, and Role2 has server related privileges,users who are assigned to both Role1 and Role2 have storage and server related privileges.

A Cisco UCS domain can contain up to 48 user roles, including the default user roles.

All roles include read access to all configuration settings in the Cisco UCS domain. The difference between theread-only role and other roles is that a user who is only assigned the read-only role cannot modify the system

state. A user assigned another role can modify the system state in that user's assigned area or areas.

Roles can be created, modified to add new or remove existing privileges, or deleted. When a role is modified,the new privileges are applied to all users assigned to that role. Privilege assignment is not restricted to theprivileges defined for the default roles. That is, you can use a custom set of privileges to create a unique role.For example, the default Server Administrator and Storage Administrator roles have different set of privileges,but a new Server and Storage Administrator role can be created that combines the privileges of both roles.

If a role is deleted after it has been assigned to users, it is also deleted from those user accounts.

User profiles on AAA servers (RADIUS or TACACS+) should be modified to add the roles corresponding to theprivileges granted to that user. The attribute is used to store the role information. The AAA servers return thisattribute with the request and parse it to get the roles. LDAP servers return the roles in the user profileattributes.

QUESTION 18Which two are true concerning authorization within a Cisco Unified Computing System? (Choose two.)

A. A role defines a collection of privileges that determines which actions a user can take in Cisco UnifiedComputing System Manager.

B. Authorization consists of three components (roles, password policy, and locales) that are based on whichfeatures and resources the user will not have access to.

C. Customized roles can be configured on and downloaded from remote AAA servers.D. The logical resources, pools and policies, are grouped into roles.E. If the service profile cannot find available resources, it will search in the parent organization for pools and

resources.

Correct Answer: AESection: QuestionsExplanation

Explanation/Reference:User Accounts for Cisco UCS ManagerUser accounts are used to access the system. Up to 48 user accounts can be configured in each Cisco UCSdomain. Each user account must have a unique username and password

User RolesUser roles contain one or more privileges that define the operations allowed for the user who is assigned therole. A user can be assigned one or more roles. A user assigned multiple roles has the combined privileges ofall assigned roles. For example, if Role1 has storage related privileges, and Role2 has server related privileges,users who are assigned to both Role1 and Role2 have storage and server related privileges.A Cisco UCS domain can contain up to 48 user roles, including the default user roles.

In a multi-tenant environment, Cisco UCS uses the hierarchy of an organization to resolve the names of policiesand resource pools. When Cisco UCS Manager searches for details of a policy or a resource assigned to apool, the following occurs:1. Cisco UCS Manager checks for policies and pools with the specified name within the organization assignedto the service profile or policy .2. If a policy is found or an available resource is inside a pool, Cisco UCS Manager uses that policy or resource.If the pool does not have any available resources at the local level, Cisco UCS Manager moves up in thehierarchy to the parent organization and searches for a pool with the same name. Cisco UCS Manager repeatsthis step until the search reaches the root organization.3. If the search reaches the root organization and has not found an available resource or policy , Cisco UCSManager returns to the local organization and begins to search for a default policy or available resource in thedefault pool.4. If an applicable default policy or available resource in a default pool is found, Cisco UCS Manager uses thatpolicy or resource. If the pool does not have any available resources, Cisco UCS Manager moves up in thehierarchy to the parent organization and searches for a default pool. Cisco UCS Manager repeats this step untilthe search reaches the root organization.

5. If Cisco UCS Manager cannot find an applicable policy or available resource in the hierarchy , it returns anallocation error .


QUESTION 19Which two are true with respect to the upgrade process for the Cisco Unified Computing System? (Choosetwo.)

A. For easier manageability, Cisco provides one full bundle that contains the firmware images for all CiscoUnified Computing System components.

B. You can choose from FTP, TFTP, SCP, and HTTP to copy the bundle image from a remote file system.C. When the bundle image is downloaded, it must be transferred to the flash file system of the active fabric

interconnect.D. When the download is successful, Cisco Unified Computing System Manager expands the individual files

from the archive and installs them in the correct flash file system partition.E. It is strongly recommended that you activate all components in all chassis at one time.F. The I/O module, CIMC, and adaptors update process operates strictly on the backup partition of Flash for a

given component.

Correct Answer: CFSection: QuestionsExplanation

Explanation/Reference:Cisco UCS Manager separates the direct upgrade process into two stages to ensure that you can push thefirmware to an endpoint while the system is running without affecting uptime on the server or other endpoints.1. UpdateDuring this stage, the system copies the selected firmware version from the primary fabric interconnect to thebackup partition in the endpoint and verifies that the firmware image is not corrupt. The update process alwaysoverwrites the firmware in the backup slot. The update stage applies only to the following endpoints:- Adapters- CIMCs- I/O modules

2. ActivateDuring this stage, the system sets the specified image version (normally the backup version) as the startupversion and, if you do not specify Set Startup V ersion Only, immediately reboots the endpoint. When theendpoint is rebooted, the backup partition becomes the active partition, and the active partition becomes thebackup partition. The firmware in the new active partition becomes the startup version and the running version.The following endpoints only require activation because the specified firmware image already exists on theendpoint:- Cisco UCS Manager- Fabric interconnects- Board controllers on those servers that support them


QUESTION 20Which Cisco UCS firmware are contained in the Cisco UCS Infrastructure software bundle? (Choose three.)

A. Cisco UCS BIOSB. Cisco UCS fabric interconnects firmwareC. Cisco UCS adaptersD. Cisco UCS Manager

E. Cisco I/O module firmwareF. Cisco IMC

Correct Answer: BDESection: QuestionsExplanation

Explanation/Reference:Cisco delivers all firmware updates to Cisco UCS components in bundles of images. Cisco UCS firmwareupdates are available to be downloaded in the following bundles:

1. Cisco UCS Infrastructure Software BundleThis bundle includes the following firmware images that are required to update the following components:- Cisco UCS Manager software- Kernel and system firmware for the fabric interconnects- I/O module firmware

2. Cisco UCS B-Series Blade Server Software BundleThis bundle includes the following firmware images that are required to update the firmware for the bladeservers in a Cisco UCS domain. In addition to the bundles created for a release, these bundles can also bereleased between infrastructure bundles to enable Cisco UCS Manager to support a blade server that is notincluded in the most recent infrastructure bundle.- CIMC firmware- BIOS firmware- Adapter firmware- Board controller firmware- Third-party firmware images required by the new server

3. Cisco UCS C-Series Rack-Mount Server Software BundleThis bundle includes the following firmware images that are required to update components on rack-mountservers that have been integrated with and are managed by Cisco UCS Manager:- CIMC firmware- BIOS firmware- Adapter firmware- Storage controller firmware

QUESTION 21Which Cisco UCS Manager feature allows you to specify multiple LDAP servers for user authentication?

A. RealmB. LDAP Provider GroupC. Authentication DomainD. Organization


Explanation/Reference:A provider group is a set of providers that will be used by Cisco UCS during the authentication process. CiscoUCS Manager allows you to create a maximum of 16 provider groups, with a maximum of eight providersallowed per group.During authentication, all the providers within a provider group are tried in order . If all of the configured serversare unavailable or unreachable, Cisco UCS Manager automatically falls back to the local authentication methodusing the local username and password.Creating an LDAP provider group allows you to authenticate using multiple LDAP databases. Authenticatingwith a single LDAP database does not require you to set up an LDAP provider group.

QUESTION 22Which UCS components firmware are contained in the UCS Infrastructure software bundle?

A. UCS BIOSB. UCS Fabric InterconnectsC. UCS AdaptersD. UCS ManagerE. IO ModuleF. Cisco IMC

Correct Answer: BDESection: QuestionsExplanation

Explanation/Reference:Cisco delivers all firmware updates to Cisco UCS components in bundles of images. Cisco UCS firmwareupdates are available to be downloaded in the following bundles:

1. Cisco UCS Infrastructure Software BundleThis bundle includes the following firmware images that are required to update the following components:- Cisco UCS Manager software- Kernel and system firmware for the fabric interconnects- I/O module firmware

2. Cisco UCS B-Series Blade Server Software BundleThis bundle includes the following firmware images that are required to update the firmware for the bladeservers in a Cisco UCS domain. In addition to the bundles created for a release, these bundles can also bereleased between infrastructure bundles to enable Cisco UCS Manager to support a blade server that is notincluded in the most recent infrastructure bundle.- CIMC firmware- BIOS firmware- Adapter firmware- Board controller firmware- Third-party firmware images required by the new server

3. Cisco UCS C-Series Rack-Mount Server Software BundleThis bundle includes the following firmware images that are required to update components on rack-mountservers that have been integrated with and are managed by Cisco UCS Manager:- CIMC firmware- BIOS firmware- Adapter firmware- Storage controller firmware

QUESTION 23Which backup option must be used for a system restore?

A. full stateB. all configurationC. system configurationD. logical configurationE. incremental



When you perform a backup through Cisco UCS Manager, you take a snapshot of all or part of the systemconfiguration and export the file to a location on your network. You cannot use Cisco UCS Manager to back updata on the servers.You can perform one or more of the following types of backups through Cisco UCS Manager:- Full state - A binary file that includes a snapshot of the entire system. You can use the file generated from thisbackup to restore the system during disaster recovery . This file can restore or rebuild the configuration on theoriginal fabric interconnect, or recreate the configuration on a different fabric interconnect. You cannot use thisfile for an import.- All configuration - An XML file that includes all system and logical configuration settings. You can use the filegenerated from this backup to import these configuration settings to the original fabric interconnect or to adifferent fabric interconnect. You cannot use this file for a system restore. This file does not include passwordsfor locally authenticated users.- System configuration - An XML file that includes all system configuration settings such as usernames, roles,and locales. You can use the file generated from this backup to import these configuration settings to theoriginal fabric interconnect or to a different fabric interconnect. You cannot use this file for a system restore.- Logical configuration - An XML file that includes all logical configuration settings such as service profiles,VLANs, VSANs, pools, and policies. You can use the file generated from this backup to import theseconfiguration settings to the original fabric interconnect or to a different fabric interconnect. You cannot use thisfile for a system restore.

You can use the restore function for disaster recovery. The restore function is only available for a full statebackup file. You cannot import a full state backup file. You perform a restore through the initial system setup.

QUESTION 24Which protocol is not supported for Cisco UCS backups and imports?

A. FTPB. TFTPC. SCPD. SFTPE. HTTP

Correct Answer: ESection: QuestionsExplanation

Explanation/Reference:Creating a Backup Operation1. UCS-A# scope systemEnters system mode.2. UCS-A /system # create backup URL backup-type {disabled | enabled}Creates a backup operation. Specify the URL for the backup file using one of the following syntax:- ftp:// username@hostname / path- scp:// username@hostname / path- sftp:// username@hostname / path- tftp:// hostname : port-num / path3. UCS-A /system # commit-bufferCommits the transaction.

QUESTION 25Which two items can you provision in a vHBA Template? (Choose two.)

A. Max Data Field SizeB. SCSI I/O QueuesC. FCoE VLAND. vHBA Interrupt ModeE. Stats Threshold Policy

F. FLOGI Timeout

Correct Answer: AESection: QuestionsExplanation

Explanation/Reference:vHBA Template is a policy that defines how a vHBA on a server connects to the SAN. It is also referred to as avHBA SAN connectivity template.1. UCS-A# scope org org-name Enters organization mode for the specified organization. To enter the root organization mode, type / as the org-name .2. UCS-A /org # create vhba-templ vhba-templ-name [fabric {a | b}] [fc-if vsan-name] Creates a vHBA template and enters organization vHBA template mode.3. UCS-A /org/vhba-templ # set descr description (Optional)Provides a description for the vHBA template.4. UCS-A /org/vhba-templ # set fabric {a | b} (Optional)Specifies the fabric to use for the vHBA. If you did not specify the fabric when creating the vHBA template inStep 2, then you have the option to specify it with this command.5. UCS-A /org/vhba-templ # set fc-if vsan-name (Optional)Specifies the Fibre Channel interface (named VSAN) to use for the vHBA template. If you did not specify theFibre Channel interface when creating the vHBA template in Step 2, you have the option to specify it with thiscommand.6. UCS-A /org/vhba-templ # set max-field-size size-num Specifies the maximum size of the Fibre Channel frame payload (in bytes) that the vHBA supports.7. UCS-A /org/vhba-templ # set pin-group group-name Specifies the pin group to use for the vHBA template.8. UCS-A /org/vhba-templ # set qos-policy mac-pool-name Specifies the QoS policy to use for the vHBA template.9. UCS-A /org/vhba-templ # set stats-policy policy-name Specifies the server and server component statistics threshold policy to use for the vHBA template.10. UCS-A /org/vhba-templ # set type {initial-template | updating-template} Specifies the vHBA template update type. If you do not want vHBA instances created from this template to beautomatically updated when the template is updated, use theinitial-template keyword; otherwise, use theupdating-template keyword to ensure that all vHBA instances are updated when the vHBA template is updated.11. UCS-A /org/vhba-templ # set wwpn-pool pool-name Specifies the WWPN pool to use for the vHBA template.12. UCS-A /org/vhba-templ # commit-buffer Commits the transaction to the system configuration.

QUESTION 26Which option describes the possible result of a customer configuring a server pool that contains Cisco UCSB200 M2 and B250 M2 blades?

A. A service profile cannot migrate automatically from one blade to another blade within the server pool due tohardware failure.

B. You must decommission a blade server for the associated service profile to migrate to another blade in theserver pool successfully.

C. You must uncheck the Restrict Migration box in the service profile to allow service profile migration betweenblades in the server pool.

D. After service profile migration, the server fails in boot from SAN due to differences in PCI device IDs.



QUESTION 27Which two options occur when a server discovery policy is invoked? (Choose two.)

A. executes the qualification in the server discovery policy against the serverB. applies the scrub policy to the serverC. analyzes the inventory of the serverD. assigns the server to the selected organization, if configuredE. creates a service profile for the server with the identity burned into the server at time of manufacture

Correct Answer: ACSection: QuestionsExplanation

Explanation/Reference:Server Discovery Policy determines how the system reacts when you add a new server . If you create a serverdiscovery policy , you can control whether the system conducts a deep discovery when a server is added to achassis, or whether a user must first acknowledge the new server . By default, the system conducts a fulldiscovery .If you create a server discovery policy , the following occurs when a new server starts:1. The qualification in the server discovery policy is executed against the server .2. If the server meets the required qualifications, Cisco UCS Manager applies the following to the server:- Depending upon the option selected for the action, either discovers the new server immediately or waits for auser to acknowledge the new server- Applies the scrub policy to the server

QUESTION 28If a customer wants to maximize the capability of server mobility with the Cisco UCS deployment, what twooptions are Cisco recommended? (Choose two.)

A. Configure a server inheritance policy.B. Configure a Virtual Media boot.C. Configure a hardware-based service profile with burned-in addresses and identities.D. Configure boot from SAN.E. Configure service profiles with resource pools.


Explanation/Reference:The Mobile (Relocatable) Logical Server concept allows the same logical server to be booted on differentblades at different times. When a blade is associated with a server profile, it inherits all its identity and bootinformation from the profile. This model works best when the OS is booted off a SAN LUN. Create pools ofidentity information defined within the Logical Server Profile to facilitate the Mobile Logical Server concept:- Create UUID Pools- Create MAC Pools- Create WWN Pools

Once these pools are created, it simplifies blade management within the Cisco UCS environment.

QUESTION 29You have a Cisco UCS B200 M2 server configured with 12 4-GB DDR3 1333-MHz dual-voltage memoryDIMMs. You learned that the server memory speed is running at 1066 MHz instead. How can you configure theserver to run at maximum memory speed?

A. You cannot configure memory speed of 1333 MHz. The maximum memory speed of a Cisco UCS B200 M2

server with 12 4-GB DIMM is 1066 MHz.B. Memory speed of the ESX host is configurable on VMware vCenter.C. Create a BIOS policy. In the RAS Memory BIOS settings, select Performance Mode for LV DDR Mode.D. On the CIMC of the Cisco UCS B200 M2, select 1333 MHz in the Memory Speed option.


Explanation/Reference:Cisco UCS provides two methods for making global modifications to the BIOS settings on servers in an CiscoUCS domain. You can create one or more BIOS policies that include a specific grouping of BIOS settings thatmatch the needs of a server or set of servers, or you can use the default BIOS settings for a specific serverplatform.1. Main BIOS Settings2. Processor BIOS Settings3. Intel Directed I/O BIOS Settings4. RAS Memory BIOS Settings- LV DDR Mode. Whether the system prioritizes low voltage or high frequency memory operations. This can beone of the following: - power-saving-mode—The system prioritizes low voltage memory operations over high frequency memoryoperations. This mode may lower memory frequency in order to keep the voltage low. -performance-mode—The system prioritizes high frequency operations over low voltage operations. -platform-default—The BIOS uses the value for this attribute contained in the BIOS defaults for the servertype and vendor .5. Serial Port BIOS Settings6. PCI Configuration BIOS Settings7. Boot Options BIOS Settings8. Console Redirection Settings

QUESTION 30Your systems engineer has determined all of the firmware versions that the server operating system supports.What steps are taken on Cisco UCS to avoid manual firmware upgrades on the blade servers?

A. Use Cisco UCS Manager firmware management to upgrade all Cisco UCS blade servers to the same targetfirmware versions.

B. Configure host firmware package and management firmware package policies and associate the firmwarepolicies with the service profiles.

C. Create a BIOS policy and define the host firmware package and management firmware package.D. Configure host firmware package and management firmware package policies and associate the firmware

policies with the server pools.



QUESTION 31When you create a vHBA, what will you achieve by enabling persistent binding?

A. This feature allows the binding of the SCSI targets to the vHBA, even across reboots.B. This feature allows the binding of the same WWPN from the pool to the vHBA, even across reboots.C. This feature allows the binding of the same WWNN from the pool to the vHBA, even across reboots.D. This feature allows the binding of the Fibre Channel uplink to the vHBA, even across reboots.


Explanation/Reference:Persistent binding ensures that the system-assigned mapping of Fibre Channel targets is maintained after areboot.

http://www.cisco.com/en/US/docs/unified_computing/ucs/c/sw/gui/config/guide/1.2.1/Cisco_UCS_C-Series_Servers_Integrated_Management_Controller_Configuration_Guide_1_2_1_chapter9.html

QUESTION 32Which two tasks enable jumbo frames on a Cisco UCS system? (Choose two.)

A. In the LAN cloud on Cisco UCS Manager, configure MTU 9000 in the uplink interfaces.B. In the LAN cloud on Cisco UCS Manager, enable jumbo frames in Fabric A and Fabric B.C. In the LAN cloud on Cisco UCS Manager, configure MTU 9000 in the VLAN.D. In the LAN cloud on Cisco UCS Manager, define a QoS system class with MTU 9000.E. In the service profile, configure MTU 9000 in the vNIC.F. In the service profile, configure MTU 9000 in the virtual machine.G. In the service profile, configure MTU 9000 in the uplink interfaces.


Explanation/Reference:This requires the following to accomplish. 1. Creating a UCS QoS System Class with an MTU of 9000 & apply to the iSCSI vNIC(s) by Service Profile ->vNIC2. Enable Jumbo Frames (MTU 9000) on all switches between Initiator (UCS) and iSCSI Target (Equalloqic).3. Enable Jumbo Frames on OS Adapter (Vmkernel port for ESX, Network Adapter Advanced Properties onWindows) As you can see the only UCS-specific task is the QoS policy which allows an MTU size of 9000 Bytes -assuming you're going to use jumbo frames in your environment - highly recommneded especially with 10G

QUESTION 33Which three items represent some of the components to implement Cisco VM-FEX for Cisco UnifiedComputing System Manager B-Series blades? (Choose three.)

A. Cisco VSM VMB. VEM installed on the VMware vCenter serverC. VEM in the VMware ESX or ESXi hostD. Cisco Unified Computing System Manager version 1.2 or higherE. VMware vCenter serverF. Fibre Channel VMFS volume

Correct Answer: CDESection: QuestionsExplanation

Explanation/Reference:A virtualized server implementation consists of one or more VMs that run as guests on a single physical server.The guest VMs are hosted and managed by a software layer called the hypervisor or virtual machine manager

(VMM). Typically, the hypervisor presents a virtual network interface to each VM and performs Layer 2switching of traffic from a VM to other local VMs or to another interface to the external network.Working with a Cisco virtual interface card (VIC) adapter, the Cisco Virtual Machine Fabric Extender (VM-FEX)bypasses software-based switching of VM traffic by the hypervisor for external hardware-based switching in thefabric interconnect. This method reduces the load on the server CPU, provides faster switching, and enablesyou to apply a rich set of network management features to local and remote traffic.At a high level, VM-FEX for VMware requires a hypervisor host, Cisco UCS Manager, and VMware vCentervirtualization management software.

QUESTION 34Which three items represent some of the features that can be defined in a Cisco Unified Computing SystemManager port profile? (Choose three.)

A. QoS policyB. ACLC. NetFlowD. port securityE. network control policyF. VLAN or VLANs

Correct Answer: AEFSection: QuestionsExplanation

Explanation/Reference:The following example creates a port profile client named MyClient that applies the port profile to all DVSes inthe datacenter named MyDatacenter and commits the transaction:UCS-A# scope systemUCS-A /system # scope vm-mgmtUCS-A /system/vm-mgmt # scope vmware UCS-A /system/vm-mgmt/vmware # scope profile-setUCS-A /system/vm-mgmt/vmware/profile-set # create port-profile MyProfileUCS-A /system/vm-mgmt/vmware/profile-set/port-profile* # set descr "This is my port profile"UCS-A /system/vm-mgmt/vmware/profile-set/port-profile* # set max-ports 24UCS-A /system/vm-mgmt/vmware/profile-set/port-profile* # set nw-control-policy ncp5UCS-A /system/vm-mgmt/vmware/profile-set/port-profile* # set pin-group PinGroup54UCS-A /system/vm-mgmt/vmware/profile-set/port-profile* # set qos-policy QosPolicy34UCS-A /system/vm-mgmt/vmware/profile-set/port-profile* # create vlan accounting UCS-A /system/vm-mgmt/vmware/profile-set/port-profile/vlan* # set native noUCS-A /system/vm-mgmt/vmware/profile-set/port-profile* # create client MyClientUCS-A /system/vm-mgmt/vmware/profile-set/port-profile/client* # set descr "This is the client for my port profile"UCS-A /system/vm-mgmt/vmware/profile-set/port-profile/client* # set data-center MyDatacenterUCS-A /system/vm-mgmt/vmware/profile-set/port-profile/client* # commit-bufferUCS-A /system/vm-mgmt/vmware/profile-set/port-profile/client #

QUESTION 35Which three items must be configured in the Port Profile Client in Cisco Unified Computing System Manager?(Choose three.)

A. port profileB. DVSC. data centerD. folderE. VMware vCenter IP addressF. VM port group

Correct Answer: BCD

Section: QuestionsExplanation

Explanation/Reference:The port profile client determines the distributed virtual switches (DVSes) to which a port profile is applied. Bydefault, the port profile client specifies that the associated port profile applies to all DVSes in the vCenter.However, you can configure the client to apply the port profile to all DVSes in a specific datacenter ordatacenter folder, or only to one DVS.

QUESTION 36If there are four I/O module links from the Cisco Unified Computing System 5108 Blade Chassis to the CiscoUnified Computing System 6248UP Fabric Interconnect, which dynamic vNICs can be defined?

A. 9B. 16C. 24D. 48E. 54F. 112



QUESTION 37Which two of the listed BIOS options are required for VM-FEX in high performance mode? (Choose two.)

A. RSSB. interrupt coherencyC. virtualization technologyD. cache validationE. ATS support

Correct Answer: CESection: QuestionsExplanation

Explanation/Reference:For VM-FEX in high performance mode, you must configure specific BIOS settings.We recommend that you name this BIOS policy as VMwarePassThru so that you can identify it as being usedfor VM-FEX in high-performance mode.You must enable these specific parameters in the following BIOS settings:1. Processor—Enable Virtual Technology (VT) and Direct Cache Access.2. Intel Directed IO—Enable the following parameters:- VT for Directed IO- Interrupt Remap- Coherency Support- ATS Support- Pass Through DMA Support- Configure the remaining BIOS settings, as appropriate.

QUESTION 38When adding a VMware ESXi host to the Distributed Virtual Switch, what are two risks of migrating a VMNICthat is associated to vSwitch 0? (Choose two.)

A. loss of access to the management IP interfaceB. duplicate IP address errorC. duplicate MAC address errorD. loss of VMware ESXi communication with VMware vCenterE. DVS port group will not appear in the VM network settingsF. DVS port group will overwrite the port groups in vSwitch 0

Correct Answer: ADSection: QuestionsExplanation


QUESTION 39Which VMware ESXi 5.0 CLI command will validate PassThru interfaces when they are available?

A. vem status -vB. vempassthru-vC. vemintf -vD. vemifconfig -vE. vempts -v


Explanation/Reference:Virtual Ethernet module (VEM)-data plane—Each hypervisor is embedded with one VEM, a lightweight softwarecomponent that effectively replaces the virtual switch by performing the following functions:–Advanced networking and security–Switching between directly attached virtual machines–Uplinking to the rest of the network

Verify that the installation was successful by checking for the “VEM Agent (vemdpa) is running” statement in theoutput of the vem status command. # vem status -v Package vssnet-esxmn-ga-release Version 4.2.1.2.1.1.0-3.0.1 Build 1 Date Mon Jan 30 18:38:49 PST 2012

Number of PassThru NICs are 0 VEM modules are loaded

QUESTION 40Which three items are supported operating systems of the Cisco VM-FEX universal passthrough? (Choosethree.)

A. Oracle Solaris 11B. Red Hat Enterprise Linux 6.0C. Microsoft Windows Server 2003 SP3D. Microsoft Windows Server 2008E. Ubuntu Server 12.2

F. SLES 11

Correct Answer: BDFSection: QuestionsExplanation


QUESTION 41Which two VMware features must be turned off in the data center cluster for Cisco VM-FEX universalpassthrough to operate? (Choose two.)

A. VMCIB. DRSC. FTD. HAE. vMotion

Correct Answer: ACSection: QuestionsExplanation

Explanation/Reference:DirectPath I/O allows virtual machine access to physical PCI functions on platforms with an I/O MemoryManagement Unit.The following features are unavailable for virtual machines configured with DirectPath:- Hot adding and removing of virtual devices- Suspend and resume- Record and replay- Fault tolerance- High availability- DRS (limited availability. The virtual machine can be part of a cluster, but cannot migrate across hosts)- Snapshots

Cisco Unified Computing Systems (UCS) through Cisco Virtual Machine Fabric Extender (VM-FEX) distributedswitches support the following features for migration and resource management of virtual machines which useDirectPath I/O:- vMotion- Hot adding and removing of virtual devices- Suspend and resume- High availability- DRS- Snapshots

QUESTION 42Which two VMware features will not allow an adapter to transition from Cisco VM-FEX standard mode touniversal passthrough mode? (Choose two.)

A. VM SnapshotB. Volume Shadow CopyC. Storage vMotionD. HAE. Resource Reservations

Correct Answer: ACSection: Questions

Explanation

Explanation/Reference:The following VMware vSphere features are only available for virtual machines configured with DirectPath I/Oon the Cisco UCS through Cisco Virtual Machine Fabric Extender (VM-FEX) distributed switches:- vMotion- Hot adding and removing of virtual devices- Suspend and resume- High availability- DRS- Snapshots

The following features are unavailable for virtual machines configured with DirectPath on any server platform:- Record and replay- Fault tolerance

QUESTION 43Which BIOS setting is required for a VMware ESXi 5.0 host to support Cisco VM-FEX universal pasthroughmode?

A. VT for Directed IOB. ACPI 10 SupportC. VEMDPA AgentD. Execute Disabled BitE. Processor C State


Explanation/Reference:In order for Cisco VM-FEX to operate in high-performance mode, you must enable the following settings in theBIOS policy:- Processor—Virtualization Technology (VT) and Direct Cache Access;- Intel Directed IO: - VT for Directed IO - Interrupt Remap - Coherency Support - ATS Support - Pass Through DMA Support

QUESTION 44What are the three main components of the VM-FEX environment? (Choose three.)

A. Red Hat Network Satellite serverB. ESX host with Cisco UCS M81KR VICC. ESX host with Cisco UCS M72KR CAND. VMware vCenterE. VMware Update ManagerF. Cisco UCS ManagerG. Cisco VSG

Correct Answer: BDFSection: QuestionsExplanation

Explanation/Reference:At a high level, VM-FEX for VMware requires1. Hypervisor host. The hypervisor host has these requirements:- You must install a Cisco UCS M81KR Virtual Interface Card in the server you intend to use as the hypervisorhost.- You must install the correct version of VMware ESX or ESXi software on the Cisco UCS Manager host.- You must obtain the Cisco VEM software bundle from the Cisco Download Software page.- You must install the correct version of the Cisco VEM software bundle on the hypervisor host.2. Cisco UCS Manager- VM-FEX for VMware-Related Policies- Extension File for Communicating with VMware vCenter- Extension Key- SSL Certificate- Distributed Virtual Switches (DVSes)- Port Profiles- Port Profile Clients3. VMware vCenter virtualization management software.

QUESTION 45Which two policies can be configured in a port profile for VM-FEX high-performance mode? (Choose two.)

A. QoS policyB. network control policyC. adapter policyD. BIOS policyE. vNIC connection policy

Correct Answer: CDSection: QuestionsExplanation

Explanation/Reference:In high-performance mode, traffic to and from a virtual machine (VM) bypasses the DVS and hypervisor. Traffictravels directly between VMs and the virtual interface card (VIC) adapter .The benefits of high-performance mode are as follows:- Increases I/O performance and throughput.- Decreases I/O latency .- Improves CPU utilization for virualized I/O-intensive applications.

You must modify or create several policies in order for VM-FEX for VMware to function optimally:- VMwarePassThrough Ethernet Adapter Policy (high-performance mode only)- Dynamic vNIC Connection Policies- BIOS Policy (high-performance mode only)- VM Lifecycle Policy

QUESTION 46Which three options are true regarding port profiles in Cisco UCS Manager? (Choose three.)

A. Port profiles define operating-system kernel parameters.B. Port profiles are represented as a port group in vCenter.C. Port profiles can be used by more than one DVS.D. Port profile parameters are visible on vCenter.E. Port profile parameters can be modified from vCenter.F. Port profiles can be modified only from Cisco UCS Manager.

Correct Answer: BCFSection: Questions

Explanation

Explanation/Reference:Port profiles contain the properties and settings used to configure virtual interfaces in Cisco UCS for VN-Link inhardware. The port profiles are created and administered in Cisco UCS Manager. There is no clear visibility intothe properties of a port profile from VMware vCenter.In VMware vCenter, a port profile is represented as a port group. Cisco UCS Manager pushes the port profilenames to vCenter, which displays the names as port groups. None of the specific networking properties orsettings in the port profile are visible in VMware vCenter.After a port profile is created, assigned to, and actively used by one or more DVSes, any changes made to thenetworking properties of the port profile in Cisco UCS Manager are immediately applied to those DVSes.You must configure at least one port profile client for a port profile, if you want Cisco UCS Manager to push theport profile to VMware vCenter.

QUESTION 47Which two options are valid modes for VM-FEX in a Cisco UCS Manager port profile? (Choose two.)

A. transparentB. bypassC. standardD. advancedE. high-performanceF. low-pass

Correct Answer: CESection: QuestionsExplanation

Explanation/Reference:VM-FEX now has two modes, a Standard mode that was the only mode that was available in previous versionsand a new High-Performance mode that leverages DirectPath I/O, sometime also referred to VMDirectPath (i.e. Hypervisor Bypass).

Standard mode utilizes the Nexus 1000V VEM Distributed Virtual Switch to direct the traffic from each VM to it’sassigned UCS vNIC. In High-Performance mode VM-FEX utilizes DirectPath I/O to bypass the hypervisor and the DVS. Asmentioned the selling point of this is improved network performance since it removes layers of software fromthe network path and reduced CPU load on the physical host since it is no longer handling the network traffic.

QUESTION 48Which two elements are defined in a dynamic vNIC connection policy? (Choose two.)

A. adapter policyB. QoS policyC. network control policyD. number of dynamic vNICsE. jumbo frame size

Correct Answer: ADSection: QuestionsExplanation

Explanation/Reference:1. In the Navigation pane of UCSM, click the LAN tab.2. On the LAN tab, expand LAN > Policies.3. Expand the node for the organization where you want to create the policy.4. Right-click the Dynamic vNIC Connection Policies node and select Create Dynamic vNIC Connection Policy.

5. In the Create Dynamic vNIC Connection Policy dialog box, complete the following fields:- Name field. The name of the policy. This name can be between 1 and 16 alphanumeric characters. Youcannot use spaces or any special characters, and you cannot change this name after the object has beensaved.- Description field. A description of the policy. We recommend including information about where and when thepolicy should be used.- Number of Dynamic vNICs field. The number of dynamic vNICs that this policy affects.- Adapter Policy drop-down list. The adapter profile associated with this policy. The profile must already exist tobe included in the drop-down list.- Protection field. This field is always set to "protected" because failover mode is always enabled for virtualNICs.6. Click OK.7. If Cisco UCS Manager GUI displays a confirmation dialog box, click Yes.

QUESTION 49Which adapter is capable of supporting VM-FEX?

A. VIC 1280B. Cisco UCS M61KR-IC. Cisco UCS M72KRD. Cisco UCS M51KR-B


Explanation/Reference:A Cisco VIC adapter, such as the Cisco UCS VIC 1240, VIC 1280, or M81KR Virtual Interface Card, is aconverged network adapterthat is designed for both single-OS and VM-based deployments. The VIC adaptersupports static or dynamic virtualized interfaces, which include up to 256 virtual network interface cards (vNICs)depending on the VIC model in use. VIC adapters support Cisco VM-FEX in order to provide hardware-based switching of traffic to and from virtualmachine interfaces.

QUESTION 50Which item represents a secure method of transmitting fault data with Cisco Call Home?

A. IPsecB. SSL emailC. secure XMLD. Cisco Transport GatewayE. RSA Digital Certificate


Explanation/Reference:Smart Call Home offers proactive diagnostics and real-time alerts on select Cisco devices and provides highernetwork availability and increased operational efficiency. This proactive, support capability is provided at noadditional cost with an active service contract and entitlement for the designated products.The Transport Gateway is an optional software package that can be downloaded and installed to enable theCall Home environment to securely send messages to Smart Call Home via the Transport Gateway.

QUESTION 51Which item is required for communication between Cisco Unified Computing System Manager and VMwarevCenter?

A. VeriSign Digital CertificatesB. RSA Digital CertificatesC. Cisco Unified Computing System Manager Extension KeyD. VeriSign Plug-InE. WMware vCenter Certificate Services


Explanation/Reference:Cisco UCS and VMware vCenter must be connected for management integration and network communicationwith the host.To accomplish this connectivity, Cisco UCS provides an extension key that represents the CiscoUCS identity.The extension key must be registered with the external virtualization manager before the CiscoUCS domain can be acknowledged and management and network connectivity can be established.

QUESTION 52How many certificates does Cisco Unified Computing System Manager have to export to communicate withVMware vCenter server if the VMware ESXi hosts are all running version 5.0 or higher?

A. 1B. 2C. 4D. 8E. 16



QUESTION 53What is the purpose of the maximum ports that are filed in the port profile?

A. determines the maximum number of uplinks that VMs can useB. determines the maximum number of VMs that can use the DVSC. determines the maximum number of DVSs that can use the port profileD. determines the maximum number of dynamic vNICS on the DVS


Explanation/Reference:The maximum number of ports that can be associated with this port profile. The default is 64 ports.The maximum number of ports that can be associated with a single distributed virtual switch (DVS) is 4096. Ifthe DVS has only one associated port profile, that port profile can be configured with up to 4096 ports.However, if the DVS has more than one associated port profile, the total number of ports associated with all ofthose port profiles combined cannot exceed 4096.

QUESTION 54What is the maximum number of ports on a VMware vCenter Distributed Virtual Switch?

A. 64B. 128C. 1024D. 4096E. 8192


Explanation/Reference:The maximum number of ports that can be associated with this port profile. The default is 64 ports.The maximum number of ports that can be associated with a single distributed virtual switch (DVS) is 4096. Ifthe DVS has only one associated port profile, that port profile can be configured with up to 4096 ports.However, if the DVS has more than one associated port profile, the total number of ports associated with all ofthose port profiles combined cannot exceed 4096.

QUESTION 55In the Create Dynamic vNIC Connection Policy dialog box, there is a configurable field titled Protection. What isthe significance of the three choices for Protection?

A. allows reserve vNICs to be allocated out of the spares poolB. enables hardware-based failoverC. enables static binding of the VM port profile to dynamic vNICsD. selects the primary fabric association for dynamic vNICsE. allows dynamic vNICs to be reserved for fabric failover


Explanation/Reference:In the Create Dynamic vNIC Connection Policy dialog box, complete the following fields:- Name field- Description field- Number of Dynamic vNICs field- Adapter Policy drop-down list- Protection field. Dynamic vNICs are always protected in Cisco UCS, but this field allows you to select apreferred fabric, if any. You can choose one of the following: - Protected Pref A—Cisco UCS attempts to use fabric A but fails over to fabric B if necessary - Protected Pref B—Cisco UCS attempts to use fabric B but fails over to fabric A if necessary - Protected—Cisco UCS uses whichever fabric is available

QUESTION 56How does a dynamic vNIC get allocated?

A. Dynamic vNICs are assigned to VMs in VMware vCenter.B. Dynamic vNICs can only be bound to the service profile through an updating template.C. Dynamic vNICs are bound directly to a service profile.D. Dynamic vNICs are assigned by binding a port profile to the service profile.



QUESTION 57After staging a VEM file on a VMware ESXi 5.0 host in the /tmp directory, what is the correct command syntaxto install the VEM?

A. esxcli software vib install d /tmp/VEM500-20110825132140-BG-release.zip -maintenance-modeB. esxcli software vib install v /tmp/VEM500-20110825132140-BG-release.zip -maintenance-modeC. esxupdate software vib install d /tmp/VEM500-20110825132140-BG-release.zip -maintenance-modeD. esxupdate software vib install v /tmp/VEM500-20110825132140-BG-release.vib -maintenance-mode


Explanation/Reference:Installing the VEM Software on an ESXi Stateless Host Using esxcli

1. Display the VMware version and build number.~ # vmware -vVMware ESXi 5.0.0 build-441354~ # vmware -lVMware ESXi 5.0.0 GA2. Log in to the ESXi stateless host. 3. Copy the offline bundle to the host. ~ # esxcli software vib install -d /vmfs/volumes/newnfs/MN-VEM/VEM500-20110728153-BG-release.zip4. Verify that the VIB has installed.~ # esxcli software vib list | grep cisco5. Check that the VEM agent is running. ~ # vem status -v6. Display the VEM version, VSM version, and ESXi version.~ # vemcmd show version7. Display the ESXi version and details about pass-through NICs.~ # vem version -v8. Add the host to the DVS by using the vCenter Server. 9. Enter the show module command on the VSM.switch# show module

Before you perform a VEM upgrade, make sure that there are no active VMs running on the host. When youinstall the VMware patch ESX/ESXi400-201002001 and later on the host, it puts the host in maintenance modewhen you perform a VEM upgrade. If you do not have and also use VMware vCenter Update Manager 4.0Update 1 Patch 2, vCLI build 198790, and VSM Release 4.0(4)SV1(2) or later releases, in order to have anondisruptive upgrade.

QUESTION 58Which network driver is required on a VMware ESXi 5.0 host for a vNIC to enter Cisco VM-FEX universalpassthrough mode?

A. VMXNET3B. VlanceC. FlexibleD. E1000eE. VMXNET5


Explanation/Reference:VM-FEX VMDirectPath (UPT, universal pass-through) is a feature where the network IO bypasses theHypervisor's network kernel and communicates directly with the Cisco VIC adapter. This helps in offloading thehost CPU and Memory cycles to handle VM's networks.1. High Performance OptionVMDirectPath with vMotion (supported with EX 5.0) on VM-FEX is the high performance mode of VM-FEX. Youcan enable this mode by selecting the High Performance radio button in the port profile.After port profile is applied Directpath I/O Gen2 status automatically goes to active state.

2. Virtual Machine Configuration with VMDirectPathThe Virtual Machines using the VMDirectPath Dynamic vNICs should have memory reserved. The memoryreserved must not exceed the physical available memory on ESX Host. The Adapter Type for VM vNICs usingthe VMDirectPath should be VMXNET3.

QUESTION 59Which virtual hardware version is required for a VM to enter the Cisco VM-FEX universal passthrough mode?

A. Version 5B. Version 6C. Version 7D. Version 8E. Version 9


Explanation/Reference:Explanation:

QUESTION 60Which feature must be configured for Linux VMs to be able to transition from Cisco VM-FEX standard mode touniversal passthrough mode?

A. RSSB. MSI Interrupt ModeC. VEMDPA AgentD. Execute Disabled BitE. Processor C State


Explanation/Reference:In a Linux Guest Virtual Machine, you can change the interrupt mode of the vmxnet3 from MSI-X to MSI. TheMSI-X interrupt mode which is the default interrupt mode when VMDirectPath is enabled, consumes fourinterrupts. In comparison, the MSI interrupt mode consumes only one interrupt, but causes the multi-queuefeature to be turned off.

The following formula gives the maximum number of Dynamic vNIC with VMDirectPath mode active when allVirtual Machines run Linux Guest with VMXNET3 emulated driver and MSI Interrupt is turned on.4 * (Static vNICs) + 4 *(vHBAs) + ( Num of Dynamic vNICs) = < 128

You need to ensure that the Guest VMs are shutdown before enabling VMDirectPath and changing the interruptmode from MSI-X to MSI. To change the interrupt mode from MSI-X to MSI, you need to edit the configuration

file (.vmx). All supported UPT Linux Guests vNICs (RHEL 6, SLES 11, SLES 11 SP1) can be forced to use MSIinterrupt by editing *.vmx file and inserting the following line.ethernetX.intrMode = "2"

QUESTION 61Which of the following is true concerning the Global Chassis Discovery policy configuration on the Cisco UnifiedComputing System Manager when using Cisco Unified Computing System 22XX I/O modules with Cisco UCS62XX Fabric Interconnects?

A. The link grouping preference should be set to discrete mode when the number of northbound links are not apower of 2.

B. Set the action policy-count higher than the actual number of uplinks; otherwise, the Cisco UnifiedComputing System servers will not be discovered.

C. For Cisco Unified Computing System implementations that mix I/O modules with different numbers of links,it is best to manually reacknowledge the chassis in order to use all available links.

D. Automatic reacknowledgement due to chassis discovery is never disruptive.


Explanation/Reference:The chassis discovery policy determines how the system reacts when you add a new chassis. Cisco UCSManager uses the settings in the chassis discovery policy to determine the minimum threshold for the numberof links between the chassis and the fabric interconnect and whether to group links from the IOM to the fabricinterconnect in a fabric port channel.

After the initial discovery, you must reacknowledge the chassis that are wired for a greater number of links andCisco UCS Manager configures the chassis to use all available links.

Cisco UCS Manager cannot discover any chassis that is wired for fewer links than are configured in the chassisdiscovery policy. For example, if the chassis discovery policy is configured for 4 links, Cisco UCS Managercannot discover any chassis that is wired for 1 link or 2 links. Reacknowledgement of the chassis does notresolve this issue.

QUESTION 62Which of the following is the most accurate concerning the link configuration between Cisco Unified ComputingSystem 22XX I/O modules and Cisco Unified Computing System 62XX Fabric Interconnects?

A. Port channels are always recommended when using source-dest-mac load balancing.B. The addition of links to a port channel requires a reacknowledgement.C. You cannot mix and match discrete links and port channeling for different chassis when using 22XX.D. Port channels do not require a Global Chassis Discovery policy.


Explanation/Reference:When you configure the links between the Cisco UCS 2200 Series IOM and a Cisco UCS 6200 series fabricinterconnect in fabric port channel mode, the available VIF namespace on the adapter varies depending onwhere the IOM uplinks are connected to the fabric interconnect ports.

Inside the 6248 fabric interconnect there are six sets of eight contiguous ports, with each set of ports managedby a single chip. When uplinks are connected such that all of the uplinks from an IOM are connected to a set ofports managed by a single chip, Cisco UCS Manager maximizes the number of VIFs used in service profilesdeployed on the blades in the chassis. If uplink connections from an IOM are distributed across ports managedby separate chips, the VIF count is decreased.

QUESTION 63Which of the following is not a feature of the Cisco Unified Computing System VIC-1280 adaptor?

A. capable of up to 256 virtual interfacesB. supports FCoEC. supports Cisco VM-FEXD. compatible with the C- or B-Series Cisco Unified Computing System servers


Explanation/Reference:The Cisco UCS Virtual Interface Card (VIC) 1280 (Figure 1) is an eight-port 10 Gigabit Ethernet, Fibre Channelover Ethernet (FCoE)-capable mezzanine card designed exclusively for Cisco UCS B-Series Blade Servers.The card enables a policy-based, stateless, agile server infrastructure that can present up to 256 PCIestandards-compliant interfaces to the host that can be dynamically configured as either network interface cards(NICs) or host bus adapters (HBAs). In addition, the Cisco UCS VIC 1280 supports Cisco Virtual MachineFabric Extender (VM-FEX) technology, which extends the Cisco UCS Fabric Interconnect ports to virtualmachines, simplifying server virtualization deployment.

QUESTION 64Which of the following is true with respect to recovery from failure with automatic pinning that is configured on acluster of Cisco Unified Computing System 62XX Fabric Interconnects?

A. By default, server MAC addresses are pinned to uplink interfaces using PIN groups.B. When a northbound fabric interconnect link goes down, the affected servers will use NIC teaming to re-

establish connectivity on the second fabric interconnect.C. When a northbound fabric interconnect link goes down, the fabric interconnect will send a gratuitous ARP to

the northbound switch to announce the servers on the new port.D. In the event that all uplink ports on the fabric interconnect lose connectivity, the 22XX I/O module shuts

down all of the host ports until at least one uplink is restored.


Explanation/Reference:For unicast traffic failover, the fabric interconnect in the new path sends gratuitous Address ResolutionProtocols (gARPs). This process refreshes the forwarding tables on the upstream switches.

QUESTION 65How does a Cisco Unified Computing System react when configured for disjoint Layer 2 domains?

A. Automatic pinning is disabled; VLAN membership must be statically pinned to the uplink ports.B. VLANs must be divided between the fabric interconnects using PIN groups.C. The VLAN traffic for a disjoint network can only travel along an uplink that is specifically assigned to this

VLAN and is selectively excluded from all other uplinks.D. When you configure disjoint Layer 2 networks, you must assign VLANs to uplink interfaces.



Server links (vNICs on the blades) are associated with a single uplink port (which may also be a PortChannel).This process is called pinning, and the selected external interface is called a pinned uplink port. The process ofpinning can be statically configured (when the vNIC is defined), or dynamically configured by the system.In Cisco UCS Manager Release 2.0, VLAN membership on uplinks is taken into account during the dynamicpinning process. VLANs assigned to a vNIC are used to find a matching uplink. If all associated VLANs of avNIC are not found on an uplink, pinning failure will occur.

QUESTION 66Which of the following is true with respect to hardware failover or NIC teaming within a Cisco UnifiedComputing System?

A. Hardware failover is specified by the operating system.B. An uplink failure when using automatic pinning requires that hardware failover for the server vNIC be

disabled.C. NIC teaming is controlled by the vNIC.D. The hardware failover option that is available for Ethernet does not affect Fibre Channel traffic.



QUESTION 67Which of the following is true concerning Fibre Channel communications on a Cisco Unified ComputingSystem?

A. Each VSAN requires a dedicated VLAN to carry FCoE traffic.B. FCoE VLANs are created like Ethernet VLANs on Cisco Unified Computing System Manager.C. FCoE VLANs may overlap with Ethernet VLANs.D. Cisco Unified Computing System Manager supports a maximum of 128 active VSANs.


Explanation/Reference:Cisco introduced the concept of a virtual storage area network (VSAN), which is to FC what a VLAN is toEthernet. VSANs allow the creation of independent SANs from the same physical SAN infrastructure. Ciscorecommends dedicating a different VLAN for the FCoE traffic of each VSAN. This way, FCoE traffic for theVSAN can be easily identified, and the administrator can control precisely the span of this traffic over theEthernet network. The FCoE VLAN should furthermore be dedicated to FCoE traffic; for example, it should notcarry IP traffic.

QUESTION 68Which of the following are true concerning authentication within a Cisco Unified Computing System?

A. Authentication domains are used to leverage individual authentication systems.B. You can create up to 64 authentication domains, each associated with a provider group and realm in Cisco

Unified Computing System Manager.C. At login, the user can select the authentication domain to be used.D. Cisco Unified Computing System supports LDAP or RADIUS for remote authentication.E. A locally authenticated user account is authenticated directly through the fabric interconnect.

Correct Answer: E

Section: QuestionsExplanation

Explanation/Reference:User Accounts for Cisco UCS ManagerUser accounts are used to access the system. Up to 48 user accounts can be configured in each Cisco UCSdomain. Each user account must have a unique username and password.A user account can be set with a SSH public key. The public key can be set in either of the two formats:OpenSSH and SECSH.

Admin AccountEach Cisco UCS domain has an admin account. The admin account is a default user account and cannot bemodified or deleted. This account is the system administrator or superuser account and has full privileges.There is no default password assigned to the admin account; you must choose the password during the initialsystem setup.The admin account is always active and does not expire. You cannot configure the admin account as inactive.

Locally Authenticated User AccountsA locally authenticated user account is authenticated directly through the fabric interconnect and can beenabled or disabled by anyone with admin or aaa privileges. Once a local user account is disabled, the usercannot log in. Configuration details for disabled local user accounts are not deleted by the database. If you re-enable a disabled local user account, the account becomes active again with the existing configuration,including username and password.

Remotely Authenticated User AccountsA remotely authenticated user account is any user account that is authenticated through LDAP, RADIUS, orTACACS+.If a user maintains a local user account and a remote user account simultaneously, the roles defined in thelocal user account override those maintained in the remote user account.

Expiration of User AccountsUser accounts can be configured to expire at a predefined time. When the expiration time is reached, the useraccount is disabled.By default, user accounts do not expire.

QUESTION 69Which of the following scenarios accurately demonstrate how the Cisco Unified Computing System ensuresthat a firmware upgrade is minimally disruptive to the data center unified fabric?

A. If an I/O module is upgraded to a version that is incompatible with its fabric interconnect, the fabricinterconnect can automatically reactivate the I/O module to a compatible version.

B. If components like server BIOS, HBA, and RAID controller firmware are unsuccessfully updated throughdirect firmware updates, the update process will fall back to a host firmware package that is associated withthe service profile.

C. If an update of the subordinate fabric interconnect leaves it in a nonusable state, the primary fabricinterconnect will automatically be updated to ensure that one fabric interconnect is running the most recentfirmware.

D. After Cisco Unified Computing System Manager upgrades the subordinate node, only then is the activemanagement node automatically synchronized.


Explanation/Reference:When you configure Set Startup Version Only for an I/O module, the I/O module is rebooted when the fabricinterconnect in its data path is rebooted. If you do not configure Set Startup Version Only for an I/O module, theI/O module reboots and disrupts traffic. In addition, if Cisco UCS Manager detects a protocol and firmwareversion mismatch between the fabric interconnect and the I/O module, Cisco UCS Manager automatically

updates the I/O module with the firmware version that matches the firmware in the fabric interconnect and thenactivates the firmware and reboots the I/O module again.

QUESTION 70How many links are there between a second-generation IOM (Cisco UCS 2204 or 2208) and a third-generationhalf-width blade (Cisco UCS B200 M3 or B22 M3) in a Cisco UCS system?

A. 1B. 2C. 4D. 8


Explanation/Reference:Explanation:

QUESTION 71Which policy would you change to form a port channel between a Cisco UCS 6248 and a Cisco UCS 2208?

A. link aggregation policyB. chassis discovery policyC. IOM connection policyD. link discovery policy


Explanation/Reference:Fabric port channels allow you to group several of the physical links from an IOM to a fabric interconnect intoone logical link for redundancy and bandwidth sharing. As long as one link in the fabric port channel remainsactive, the fabric port channel continues to operate.If the correct hardware is connected, fabric port channels are created by Cisco UCS Manager in the followingways:During chassis discovery according to the settings configured in the chassis discovery policy.After chassis discovery according to the settings configured in the chassis connectivity policy for a specificchassis.

Configuring a Fabric Port Channel1. To include all links from the IOM to the fabric interconnect in a fabric port channel during chassis discovery,set the link grouping preference in the chassis discovery policy to port channel.2. To include links from individual chassis in a fabric port channel during chassis discovery, set the linkgrouping preference in the chassis connectivity policy to port channel.3. After chassis discovery, enable or disable additional fabric port channel member ports.

QUESTION 72The Cisco UCS 6200 Series Fabric Interconnects offer a new feature that allows dynamic port allocation for allof the 10 Gigabit Ethernet interfaces. What are these ports called?

A. universal portsB. flex portsC. unified portsD. converged ports


Explanation/Reference:The Cisco UCS 6200 Series Fabric Interconnect offers several key features and benefits that lower the totalcost of ownership (TCO), including:- Additional bandwidth up to 1920 Gbps, increased port density up to 96 ports in two rack units (2 RU)- Reduced port-to-port latency from 3.2 microseconds (ms) to 2 ms- High-performance, flexible unified ports capable of line-rate, low-latency, lossless 1/10 Gigabit Ethernet, FibreChannel over Ethernet (FCoE), and 4/2/1 and 8/4/2 Fibre Channel- Centralized, unified management with Cisco UCS Manager software- Efficient cooling and serviceability including front-to-back cooling, redundant front-plug fans and powersupplies, and rear cabling- Fibre Channel and 10 Gigabit Ethernet uplink connectivity with expansion module options

QUESTION 73In which situation would you be required to change a Cisco UCS system from end-host mode to switchingmode?

A. Design requirements call for the use of fabric failover.B. Fabric interconnect is connecting to disjoint Layer 2 networks upstream.C. HSRP routers are directly connected to the fabric interconnect.D. Upstream Cisco Nexus 5000 is configured for vPC.


Explanation/Reference:In Cisco Unified Computing System™ (Cisco UCS™) environments, two Ethernet switching modes determinethe way that the fabric interconnects behave as switching devices between the servers and the network. In end-host mode, the fabric interconnects appear to the upstream devices as end hosts with multiple links. In end-host mode, the switch does not run Spanning Tree Protocol and avoids loops by following a set of rules fortraffic forwarding. In switch mode, the switch runs Spanning Tree Protocol to avoid loops, and broadcast andmulticast packets are handled in the traditional way. This document describes these two switching modes anddiscusses how and when to implement each mode.

In some commonly deployed LAN topologies, switch mode provides the best network behavior. A typicalexample is a switch directly connected to a pair of Hot Standby Router Protocol (HSRP) routers that are theSpanning Tree Protocol roots on different VLANs. Switch mode provides the optimal path because of the use ofSpanning Tree Protocol. For example, a vNIC belonging to an odd-numbered VLAN can be dynamically pinnedto link X on Fabric Interconnect A. As a result of this process, traffic traverses an extra hop (the Inter-SwitchLink [ISL]) to the HSRP master. When a switch is directly connected to a pair of HRSP routers, the recommended Ethernet switching mode isswitch mode, because it provides the optimal path. End-host mode can be used if static pinning is employed.

QUESTION 74InstructionsOpen the windows by clicking on the minimized title at the bottom of the viewing area. Windows can beminimized by clicking on the [-], repositioned by dragging the title bar, and resized by using the handle at thelower right corner to customize the viewing area.If you are required to access the devices to complete this scenario, the mouse cursor will use a hand symbolwhen moved over device icons. Click the icon to open a device terminal to interact with the hardware.Open the "Questions" window and begin by clicking a question number. When you have completed answeringall questions, click "Done" to continue

ScenarioUse you UCS knowledge on Fabric Interconnect Failover to answer the questions associated with the UCScluster.

Exhibit 1UCS-A# show cluster stateCluster Id: 0xfc436fa8b88511e0-0xa370000573cb6c04

A: UP, PRIMARYB: UP, SUBORDINATE

HA READYUCS-A# connect local-mgmtCisco Nexus Operating System (NX-OS) SoftwareTAC support: http://www.cisco.com/tacCopyright (c) 2002-2011, Cisco Systems, Inc. All rights reserved.The copyrights to certain works contained in this software are owned by other third parties and used anddistributed under license. Certain components of this software are licensed under the GNU General PublicLicense (GPL) version 2.0 or the GNU Lesser General Public License (LGPL) Version 2.1. A copy of each suchlicense is available at http://www.opensource.org/licenses/gpl-2.0.php and http://www.opensource.org/licenses/lgpl-2.1.php

UCS-A(local-mgmt)# cluster lead bUCS-A(local-mgmt)#

QuestionWhich statements is true regarding the Fabric Interconnect Failover configuration changes?

A. High availability is being setup so that cluster a and b can both be subordinate or primary.B. The fabric interconnect b changes from subordinate to primary.C. High availability is setup so that fabric interconnect will keep a to be primary and b will be lead.D. The Fabric interconnect can have two lead states, so that b will switch to primary and a will stay primary.


Explanation/Reference:Forcing a Fabric Interconnect Failover

This operation can only be performed in the Cisco UCS Manager CLI.You must force the failover from the primary fabric interconnect.

ProcedureStep 1. UCS-A# show cluster state Displays the state of fabric interconnects in the cluster and whether the cluser is HA ready. Step 2. UCS-A# connect local-mgmt Enters local management mode for the cluster. Step 3. UCS-A (local-mgmt) # cluster {force primary | lead {a | b}} Changes the subordinate fabric interconnect to primary using one of the following commands:- force. Forces local fabric interconnect to become the primary.- lead. Makes the specified subordinate fabric interconnect the primary.

QUESTION 75InstructionsOpen the windows by clicking on the minimized title at the bottom of the viewing area. Windows can beminimized by clicking on the [-], repositioned by dragging the title bar, and resized by using the handle at the

lower right corner to customize the viewing area.If you are required to access the devices to complete this scenario, the mouse cursor will use a hand symbolwhen moved over device icons. Click the icon to open a device terminal to interact with the hardware.Open the "Questions" window and begin by clicking a question number. When you have completed answeringall questions, click "Done" to continue


Exhibit 1UCS-A# show cluster stateCluster Id: 0xfc436fa8b88511e0-0xa370000573cb6c04




QuestionThe "connect local-mgmt" command is required

A. To allow the fabric interconnect to use force command to be subordinate.B. To allow local management of the cluster to be configured.C. To configure HA on all fabric interconnect.D. To enable the fabric interconnect for a different HA state.




ProcedureStep 1. UCS-A# show cluster state Displays the state of fabric interconnects in the cluster and whether the cluser is HA ready. Step 2. UCS-A# connect local-mgmt Enters local management mode for the cluster. Step 3. UCS-A (local-mgmt) # cluster {force primary | lead {a | b}} Changes the subordinate fabric interconnect to primary using one of the following commands:- force. Forces local fabric interconnect to become the primary.

- lead. Makes the specified subordinate fabric interconnect the primary.



Exhibit 1.UCS-A# show cluster stateCluster Id: 0xfc436fa8b88511e0-0xa370000573cb6c04




QuestionThe "cluster lead b" command represent

A. The cluster will go into a subordinate state.B. The cluster will switch fabric interconnect b from subordinate to lead or primary.C. The cluster will only use fabric interconnect b.D. The cluster will load balance traffic over Fabric interconnects a and b.




ProcedureStep 1. UCS-A# show cluster state Displays the state of fabric interconnects in the cluster and whether the cluser is HA ready.

Step 2. UCS-A# connect local-mgmt Enters local management mode for the cluster. Step 3. UCS-A (local-mgmt) # cluster {force primary | lead {a | b}} Changes the subordinate fabric interconnect to primary using one of the following commands:- force. Forces local fabric interconnect to become the primary.- lead. Makes the specified subordinate fabric interconnect the primary.



Exhibit 1.UCS-A# scope server 1/5UCS-A /chassis/server # show adapter detail

Adapter: Id: 2 Product Name: Cisco UCS 82598KR-CI PID: N20-AI0002 VID: V01 Vendor: Cisco Systems Inc Serial: QCI132300GG Revision: 0 Mfg Date: 2009-06-13T00:00:00.000 Slot: N/A Overall Status: Operable Conn Path: A,B Conn Status: Unknown Managing Instance: B Product Description: PCI Express Dual Port 10 Gigabit Ethernet Server AdapterUCS-A /chassis/server #

QuestionWe are working on which server?

A. 1B. 2C. 3D. 4E. 5


Explanation/Reference:The following example shows how to show adapter details for chassis ID 1, server ID 5:





QuestionWe are working on which Chassis ID?

A. 1B. 2C. 3D. 4E. 5



QUESTION 79InstructionsOpen the windows by clicking on the minimized title at the bottom of the viewing area. Windows can beminimized by clicking on the [-], repositioned by dragging the title bar, and resized by using the handle at thelower right corner to customize the viewing area.If you are required to access the devices to complete this scenario, the mouse cursor will use a hand symbol

when moved over device icons. Click the icon to open a device terminal to interact with the hardware.Open the "Questions" window and begin by clicking a question number. When you have completed answeringall questions, click "Done" to continue




QuestionCurrent Adapter status is?

A. OperableB. DownC. InoperableD. Unknown







QuestionCurrent Adapter Connected Status is?

A. OperableB. DownC. InoperableD. Unknown



QUESTION 81

Select and Place:

Correct Answer:

Section: Drag & DropExplanation


QUESTION 82

Select and Place:

Correct Answer:



QUESTION 83

Select and Place:

Correct Answer:



QUESTION 84

Select and Place:

Correct Answer:



QUESTION 85

DRAG & DROP

Select and Place:

Correct Answer:


Explanation/Reference:Answer:

QUESTION 86

Select and Place:

Correct Answer:



QUESTION 87

Select and Place:

Correct Answer:



QUESTION 88

Select and Place:

Correct Answer:



QUESTION 89

Select and Place:

Correct Answer:

implementing cisco data center unified computing (dcuci)€¦ · implementing cisco data center...

Documents