ExamTopics Logo
Mail Us[email protected]
Menu
Cisco Discussions
exam questions

Exam 350-601 All Questions

View all questions & answers for the 350-601 exam
Go to Exam

Exam 350-601 topic 1 question 268 discussion

Actual exam question from Cisco's 350-601
Question #: 268
Topic #: 1
[All 350-601 Questions]

An engineer must configure the HSRP protocol between two Cisco Nexus 9000 Series Switches. This configuration is present on Nexus A.

The final HSRP configuration must meet these requirements:
* The HSRP communication must be secured on both switches.
* Both switches must support more than 300 groups.
Which two commands must be added to the HSRP configuration on Nexus A to complete these requirements? (Choose two.)

  • A. authentication text 1020
  • B. hsrp version 1
  • C. authenticate md5 key-chain NHRP-KEYS
  • D. hsrp version 2
  • E. authentication text 1010
Show Suggested Answer Hide Answer
Suggested Answer: CD 🗳️
Cisco NX-OS supports HSRP version 1 by default. You can configure an interface to use HSRP version 2.
HSRP version 2 has the following enhancements to HSRP version 1:
✑ Expands the group number range. HSRP version 1 supports group numbers from 0 to 255. HSRP version 2 supports group numbers from 0 to 4095.
✑ For IPv4, uses the IPv4 multicast address 224.0.0.102 or the IPv6 multicast address FF02::66 to send hello packets instead of the multicast address of
224.0.0.2, which is used by HSRP version 1.
✑ Uses the MAC address range from 0000.0C9F.F000 to 0000.0C9F.FFFF for IPv4 and 0005.73A0.0000 through 0005.73A0.0FFF for IPv6 addresses. HSRP version 1 uses the MAC address range 0000.0C07.AC00 to 0000.0C07.ACFF.
✑ Adds support for MD5 authentication.
This example shows how to configure MD5 authentication for HSRP on Ethernet 1/2 after creating the key chain: switch# configure terminal switch(config)# key chain hsrp-keys switch(config-keychain)# key 0 switch(config-keychain-key)# key-string 7 zqdest switch(config-keychain-key) accept-lifetime 00:00:00 Jun 01 2013 23:59:59 Sep 12 2013 switch(config-keychain-key) send-lifetime 00:00:00 Jun 01 2013 23:59:59 Aug 12 2013 switch(config-keychain-key) key 1 switch(config-keychain-key) key-string 7 uaeqdyito switch(config-keychain-key) accept-lifetime 00:00:00 Aug 12 2013 23:59:59 Dec 12 2013 switch(config-keychain-key) send-lifetime 00:00:00 Sep 12 2013 23:59:59 Nov 12 2013 switch(config-keychain-key)# interface ethernet 1/2 switch(config-if)# hsrp 2 switch(config-if-hsrp)# authentication md5 key-chain hsrp-keys switch(config-if-hsrp)# copy running-config startup-config
Reference:
https://www.cisco.com/c/en/us/td/docs/switches/datacenter/nexus9000/sw/6-x/unicast/configuration/guide/l3_cli_nxos/l3_hsrp.html
by GuyThatTakesDumps at Sept. 27, 2022, 5:15 p.m.

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
Submit Cancel
Alexandra200025
1 month ago
Selected Answer: C
C has typo but is correct answer authenticatION md5 key-chain ... and not authenticatE md5 key-chain
upvoted 1 times
...
GuyThatTakesDumps
7 months ago
Selected Answer: CD
answer is correct!
upvoted 1 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago