Cisco Updated 350-601 Exam Questions and Answers by jay

 To meet the high-security standards, the engineer should configure port security and fabric binding on VSAN 50. Port security prevents unauthorized devices from logging into the fabric by automatically learning and securing the World Wide Port Names (WWPNs) of devices connected to the switch ports. Fabric binding allows only authorized switches to join the fabric by creating a list of switch WWNs that are permitted to join a specific VSAN.

In the ERSPAN configuration provided, Host B is connected to Switch A and is configured as the source of the ERSPAN spanned traffic. This is indicated by the configuration on Switch A, which includes the command monitor session 48 type erspan-source, specifying that it is sending ERSPAN traffic to a destination. The destination IP address for this traffic is set to 10.11.11.2, which corresponds to Host A’s interface VLAN12 IP address. Therefore, Host A, connected to Switch B, is the traffic analyzer, receiving the spanned traffic from Host B.

References := The explanation is based on the standard ERSPAN configuration practices where the source switch is configured with a session type of ‘erspan-source’ and the destination switch with ‘erspan-destination’. This information is typically covered in Cisco’s documentation on ERSPAN configurations and the Cisco Data Center Core Technologies (DCCOR) course materials.

To schedule the firmware upgrade of the Red1 and Red2 leaf switches with the requirements of minimal upgrade time, no service impact, and parallel upgrade, SchedulerPolicy1 and SchedulerPolicy2 with a one-time window trigger that has maximum concurrent nodes 2 should be used. This allows both Red1 and Red2 to upgrade simultaneously within the same maintenance window, thus minimizing the time and avoiding any service disruption.

References := Further details can be found in the Cisco Data Center Core Technologies documentation

Diagram Description automatically generated