Designing and Implementing Cisco Service Provider Cloud Network Infrastructure (SPCNI v1.0) 300-540 Exam Questions with Experts Answers Updated Recently

Phase 1 of an IPsec tunnel (ISAKMP/IKE) must havematching proposalson both peers for:

Encryption algorithm

Hash (integrity) algorithm

Authentication method

DH group

The requirement states thatAESandSHA-256must be used. The current configuration uses:

encryption 3des → incorrect (must be AES)

hash md5 → incorrect (must be SHA-256)

To meet the requirement, we must modify the ISAKMP policy:

crypto isakmp policy 10

encryption aes ← change 3DES to AES

hash sha256 ← change MD5 to SHA-256

authentication pre-share

group 12

Therefore, the necessary commands on PE1 are:

encryption aes→ optionB

hash sha256→ optionE

Options C and D are invalid syntax (encryption sha256 and hash aes are not supported). Changing the DH group (A) is not required by the problem statement and would not by itself fix the mismatch related to encryption and hash algorithms.

From the RAID controller output:

TheRAID1virtual drive is shown as“Dgrd” (degraded)with a note:“RAID 1 in degraded state.”

In thePD LIST, one disk (slot 2) is marked“UGood – active disk in slot 2 disconnected from drive group 0”, while the other (slot 3) is“Onln 0”(online and part of drive group 0).

This means:

In aRAID 1mirror, onlyone diskmay fail while the array remains available.

Here,one disk has failed/disconnected, the other is still online → the array isdegraded but operational.

Therefore:

B. One RAID 1 disk failed– correct.

C. The node is still functional– correct; RAID1 can tolerate a single disk failure.

The other options are incorrect:

A and Esuggest two disk failures, which is not indicated.

Dwould be true only if both disks failed; with one disk still online, the node continues to function, though in a degraded state.