Latest Cisco CCNP Data Center 300-165 exam Dumps Practice Test – Examthings
Implementing Cisco Data Center Infrastructure (DCII): 300-165 exam. Share the latest 300-165 dumps and Practice test questions for free. Real and effective exam questions and answers. 300-165 pdf online Download, 300-165 YouTube video online learning to improve skills! Examthings share 22 Practice test questions for FREE! Get the full 300-165 exam dumps: https://www.leads4pass.com/300-165.html (Total questions:281 Q&A)
[PDF] Free Cisco 300-165 pdf dumps download from Google Drive: https://drive.google.com/open?id=1KZD6eDPlmL4obEBSreeEf5IK7TMoVtZF
[PDF] Free Full Cisco pdf dumps download from Google Drive: https://drive.google.com/open?id=1CMo2G21nPLf7ZmI-3_hBpr4GDKRQWrGx
300-165 DCII – Cisco: https://www.cisco.com/c/en/us/training-events/training-certifications/exams/current-list/dcii.html
Latest effective Cisco 300-165 Exam Practice Tests
QUESTION 1
Which two security features are only supported on the Cisco Nexus 7000 Series Switches? (Choose two.)
A. IP source guard
B. traffic storm control
C. CoPP
D. DHCP snooping
E. Dynamic ARP Inspection
F. NAC
Correct Answer: BF
A traffic storm occurs when packets flood the LAN, creating excessive traffic and degrading network performance. You
can use the traffic storm control feature to prevent disruptions on Layer 2 ports by a broadcast, multicast, or unicast
traffic storm on physical interfaces. Traffic storm control (also called traffic suppression) allows you to monitor the levels
of the incoming broadcast, multicast, and unicast traffic over a 10-millisecond interval. During this interval, the traffic
level, which is a percentage of the total available bandwidth of the port, is compared with the traffic storm control level
that you configured. When the ingress traffic reaches the traffic storm control level that is configured on the port, traffic
storm control drops the traffic until the interval ends.
Reference: http://www.cisco.com/c/en/us/td/docs/switches/datacenter/sw/5_x/dcnm/security/configurati
on/guide/b_Cisco_DCNM_Security_Configuration_Guide__Release_5-
x/Cisco_DCNM_Security_Configuration_Guide__Release_5x_chapter17.html
And http://www.cisco.com/c/en/us/td/docs/switches/datacenter/sw/5_x/dcnm/security/configurati
on/guide/b_Cisco_DCNM_Security_Configuration_Guide__Release_5-
x/Cisco_DCNM_Security_Configuration_Guide__Release_5-x_chapter1.html
QUESTION 2
Which statement about the implementation of Cisco TrustSec on Cisco Nexus 7000 Series Switches is true?
A. While SGACL enforcement and SGT propagation are supported on the M and F modules, 802.1AE (MACsec)
support is available only on the M module.
B. SGT Exchange Protocol is required to propagate the SGTs across F modules that lack hardware support for Cisco
TrustSec.
C. AAA authentication and authorization is supported using TACACS or RADIUS to a Cisco Secure Access Control
Server.
D. Both Cisco TrustSec and 802.1X can be configured on an F or M module interface.
Correct Answer: A
The M-Series modules on the Nexus 7000 support 802.1AE MACSEC on all ports, including the new M2-series
modules. The F2e modules will have this feature enabled in the future.
It is important to note that because 802.1AE MACSEC is a link-level encryption, the two MACSEC-enabled endpoints,
» Read more about: Latest Cisco CCNP Data Center 300-165 exam Dumps Practice Test – Examthings »