Exam 350-601 topic 1 question 355 discussion

Actual exam question from Cisco's 350-601

Question #: 355
Topic #: 1

A company must security harden its Cisco UCS C-Series servers. The security policy requires all out-of-band management to meet these requirements:

• It must encrypt all traffic
• It must use nondefault ports
• It must provide private administrative sessions.

Which Cisco IMC configuration meets the requirements?

A. data1# scope sol
data1 /sol # set enabled yes
data1 /sol *# set encrypted tls1.2
data1 /sol *# set port 3389
data1 /sol *# set session max 2
data1 /sol *# set deny-local yes
B. data1# scope cimc
data1 /cimc # set enabled yes
data1 /cimc *# set encrypted tls
data1 /cimc *# set kvm-port 1972
data1 /cimc *# set max-sessions 1
data1 /cimc *# set local-session deny
C. data1# scope oob
data1 /oob # set enabled no
data1 /oob *# set encrypted yes
data1 /oob *# set kvm-port 2068
data1 /oob *# set max-sessions 1
data1 /oob *# set local-access no
D. data1# scope kvm
data1 /kvm # set enabled yes
data1 /kvm *# set encrypted yes
data1 /kvm *# set kvm-port 3168
data1 /kvm *# set max-sessions 1
data1 /kvm *# set local-video no

Show Suggested Answer

Suggested Answer: D 🗳️

by JGBARRIO at Feb. 19, 2023, 7:24 p.m.

Comments

Submit Cancel

Daimon336

7 months, 1 week ago

Selected Answer: D

I agree with niteg34

upvoted 1 times

...

niteg34

1 year, 7 months ago

D is the only one that makes sense: https://www.cisco.com/c/en/us/td/docs/unified_computing/ucs/c/sw/cli/config/guide/131/b_Cisco_UCS_C-Series_CLI_Configuration_Guide_131/Cisco_UCS_C-Series_CLI_Configuration_Guide_131_chapter5.html

upvoted 2 times

...

JGBARRIO

1 year, 9 months ago

It´s correct

upvoted 1 times

...