350-601 Exam Dumps - Cisco CCNP Data Center Questions and Answers

The attribute that must be selected to implement microsegmentation of endpoints within the same IP subnet using a network-based attribute that allows IP subnet independence is the Tag attribute. The Tag attribute is a user-defined attribute that can be assigned to endpoints based on any criteria, such as location, function, or security level. The Tag attribute can be used to create microsegmentation policies in ACI, which define the rules for communication between endpoints within the same or different bridge domains. The Tag attribute enables IP subnet independence, which means that the microsegmentation policies are not tied to the IP subnet of the endpoints, and can be applied across different subnets or even different fabrics. The Tag attribute also simplifies the management and scalability of microsegmentation policies, as it does not require the use of IP addresses or MAC addresses to identify endpoints. References :=

• Implementing and Operating Cisco Data Center Core Technologies (DCCOR) v1.2, Module 6: Data Center Network Connectivity Design, Lesson 6.2: Cisco ACI Overview and Concepts
• Cisco Application Centric Infrastructure Fundamentals, Chapter: Endpoint Groups and Microsegmentation, Section: Microsegmentation Using Tags

Dedicated—A connection to the CIMC is available through the management Ethernet port or ports.

Shared LOM—A connection to the CIMC is available only through the LAN On Motherboard (LOM) Ethernet host ports.

https://www.cisco.com/c/en/us/td/docs/unified_computing/ucs/c/sw/gui/config/guide/1-1-1/b_Cisco_UCS_C-Series_Servers_Integrated_Management_Controller_Configuration_Guide_1_1_1/Cisco_UCS_C-Series_Servers_Integrated_Management_Controller_Configuration_Guide_1_1_1_chapter1.html

NFS (Network File System) is a distributed file system protocol that allows users on client computers to access files over a network in a manner similar to how local storage is accessed. NFS uses a Kerberos-based security model to provide authentication, integrity, and confidentiality of data. It ensures that unauthorized users do not have access and protects the data from eavesdropping and tampering as it moves across the network. The other options are not features of NFS. Role-based access control is a method of restricting access to resources based on the roles of users. Block-based file access is a type of storage access that transfers data in fixed-sized blocks. Zone-based access control is a feature of Fibre Channel SANs that allows traffic isolation within a VSAN. References:

• Cisco Nexus 9000 Series NX-OS Interfaces Configuration Guide, Release 9.3(x) - Configuring NFS [Cisco Nexus 9000 Series Switches], Configuring NFS, NFS Overview
• Cisco Nexus 9000 Series NX-OS Interfaces Configuration Guide, Release 9.3(x) - Configuring NFS [Cisco Nexus 9000 Series Switches], Configuring NFS, Configuring NFS Security
• Cisco Nexus 9000 Series NX-OS Interfaces Configuration Guide, Release 9.3(x) - Configuring iSCSI [Cisco Nexus 9000 Series Switches], Configuring iSCSI, iSCSI Overview
• Cisco Nexus 9000 Series NX-OS SAN Switching Configuration Guide, Release 9.3(x) - Configuring VSANs [Cisco Nexus 9000 Series Switches], Configuring VSANs, Configuring Zone-Based Access Control