Implementing and Operating Cisco Data Center Core Technologies (DCCOR) — Question 19

An engineer has a primary fabric that is named UCS-A and a secondary fabric that is named UCS-B. A certificate request that has a subject name of sjc2016 for a keyring that is named kr2016 needs to be created. The cluster IP address is 10.68.68.68.
Which command set creates this certificate request?

Answer options

• A. UCS-A # scope keyring kr2016 UCS-A /keyring # create certreq 10.68.68.68 sjc2016 UCS-A /keyring* # commit-buffer
• B. UCS-B # scope keyring kr2016 UCS-B /keyring # create certreq ip 10.68.68.68 subject-name sjc2016 UCS-B /keyring* # commit-both
• C. UCS-B# scope security UCS-B /security # scope keyring kr2016 UCS-B /security/keyring # set certreq 10.68.68.68 sjc2016 UCS-B /security/keyring* # commit-both
• D. UCS-A# scope security UCS-A /security # scope keyring kr2016 UCS-A /security/keyring # create certreq ip 10.68.68.68 subject-name sjc2016 UCS-A /security/keyring* # commit-buffer

Correct answer: D

Explanation

The correct command set is D because it properly scopes to the UCS-A security context and correctly uses the 'create certreq' command with the appropriate parameters for the specified keyring and subject. Options A and B are incorrect as they do not follow the appropriate context or command structure, while option C incorrectly uses the 'set certreq' command instead of 'create certreq'.