Implementing and Operating Cisco Data Center Core Technologies (DCCOR) — Question 309

An engineer configures a storage environment for a customer with high-security standards. The secure environment is configured in VSAN 50. The customer wants to maintain a configuration and active databases and prevent unauthorized switches from joining the fabric. Additionally, the switches must prevent rogue devices from connecting to their ports by automatically learning the WWPNs of the ports connected to them for the first time. Which two configuration sets must be used to meet these requirements? (Choose two.)

Answer options

• A. fcsp enable fcsp auto-active
• B. port-security enable port-security activate vsan 50
• C. clear fabric-binding activate vsan 50 fabric-binding activate vsan 50
• D. fcsp dhchap hash md5 sha1
• E. fabric-binding activate vsan 50 force

Correct answer: B, E

Explanation

The correct answers are B and E. Option B enables port security, which ensures that only authorized devices can connect to the switch ports in VSAN 50, while option E forces the fabric binding in VSAN 50, further securing the environment against unauthorized devices. Options A, C, and D do not provide the necessary functionalities for preventing rogue devices and maintaining the required security standards.