300-465 実際試験問題と解答 - 模擬練習 - 受験自信を増やす

Question No : 1
Which option describes the foundation of automated cloud design?

A.Start small, automate infrastructure, and define success criteria.
B.Automate interaction with all application services before moving on to infrastructure.
C.Contact your local cloud provider.
D.Not all cloud designs are subject to automation.

正解:

Question No : 2
ABC Company offers services that are tailored for different vertical markets. They want to use Software-asa-Service but they are concerned abort security.
Which cloud type is best for them?

A.private cloud
B.hybrid cloud
C.public cloud
D.community cloud

正解:

Question No : 3
A cloud administrator is attempting to reduce risks when accessing the data center.
Which feature will control access?

A.unencrypted connections
B.RBAC
C.access switches
D.accessing devices using HTTP

正解:
Explanation:
To reduce security risks when accessing the data center, we recommend implementing RBAC to control access so that administrators have access only to systems for which they have administrative responsibilities. Reference: http://www.cisco.com/c/en/us/td/docs/solutions/Enterprise/Data_Center/VMDC/ Cloud_Security/1-0/DG/ICSecurity/ICSecurity2.pdf

Question No : 4
A system administrator must do a hot migration.
Which three resources are required on the destination host for a successful migration? (Choose three.)

A.VLAN
B.vNIC speeds
C.CPU type
D.same server manufacturer
E.version compatibility
F.shared datastore

正解:

Question No : 5
Which describes the best option when beginning a cloud design?

A.Outline every challenge in the data center in a business justification document.
B.Switch to a single hypervisor provider.
C.Leverage automation as a foundational concept.
D.Hire enough resources to maintain a 5-to-1 relationship with managed devices.

正解:

Question No : 6
A Cisco UCS Director administrator is setting up policies to provision VMs.
Which wizard will help accomplish this task?

A.Initial System Configuration
B.FlexPod Configuration
C.vDC Creation
D.Device Discovery

正解:

Question No : 7
Service providers can use multi tenant data centers to efficiently and economically provide cloud services using shared hardware and network infrastructures.
Which two options does this approach require? (Choose two)

A.partial segregation of network components by tenant
B.complete separation of network traffic by tenant
C.strict access control policies
D.complete separation of hardware infrastructure per tenant

正解:
Explanation:
complete separation of network traffic by tenant, along with strict access control policies Reference: http://www.cisco.com/c/en/us/td/docs/solutions/Enterprise/Data_Center/VMDC/ Cloud_Security/1-0/DG/ICSecurity/ICSecurity1.pdf

Question No : 8
A cloud administrator is designing security policies for a hybrid cloud using Cisco Intercloud Fabric.
Which two security capabilities does Intercloud Fabric provide for hybrid clouds? (Choose two.)

A.open access cloud VMs
B.Encrypted VM to VM communication
C.open access site-to-site communication
D.role-based access control on cloud resources

正解:

Question No : 9
A Cisco UCS Director administrator has added vCenter to the virtual data center.
Which two vCenter functionalities are not available in Cisco UCS Director? (Choose two.)

A.create a VM
B.assign a VM
C.delete a VM
D.use Stack View
E.clone a VM

正解:

Question No : 10
Which three features are provided by the Cisco Secure Cloud Extension? (Choose three.)

A.new model for mapping applications to the network
B.advanced switching features for applications that tun in the provider cloud
C.web portals that generate revenue
D.support for services such as zone-base firewall and routing in the provider cloud
E.designed to abstract the instantiation of network policy and forwarding from basic network constructs (VLANs and subnets)
F.secure Layer 2 network extension from a private cloud to a provider cloud

正解:

Question No : 11
Which three options are benefits of Cisco Intercloud Fabric? (Choose three.)

A.integration of third-party solutions into the Cisco UCS Director management platform with a publicly available software development kit
B.provides a choice of cloud providers such as Amazon Web Service, Microsoft Azure, and Cisco Intercloud services
C.provides a single point of management and control for virtual workloads across multiple provider clouds
D.enables workload mobility to and from service provider clouds for virtual workloads
E.extensive enhancements for VMware, VCE, and EMC solution components
F.support for Hewlett Packard Onboard Administrator to install bare-metal blades and manage them using Cisco UCS Director's task library

正解:
Explanation:
Provides a choice of cloud providers, such as Amazon, Azure, and Cisco Intercloud Services Provides a single point of management and control for virtual workloads across multiple public clouds Enables workload mobility to and from service provider clouds for virtual workloads Reference: http://www.cisco.com/c/en/us/td/docs/cloud-systems-management/cisco-intercloud-fabric/ cisco-intercloud-fabric-for-business/2-3-1/release-notes/ b_Cisco_Intercloud_Fabric_Release_Notes_Release_2_3_1.pdf

Question No : 12
Which three statements about thick provisioning are true? (Choose three.)

A.Unused space is available for use by other virtual machines.
B.Disk has all space allocated at creation time.
C.Before writing to a new block, a zero must be written.
D.The entire disk space is reserved and is unavailable for use by other virtual machines.
E.The size of the VMDK, at any point in time, is as much as the amount of data written out from the V
F.Operates by allocating disk storage space in a flexible manner among multiple users, based on the minimum space required by each user at any given time.

正解:
Explanation:
A thick disk has all space allocated at creation time. This space may contain stale data on the physical media. Before writing to a new block a zero has to be written, increasing the IOPS on new blocks compare to Eager disks. The entire disk space is reserved and unavailable for use by other virtual machines. Reference: http://blogs.vmware.com/vsphere/2014/05/thick-vs-thin-disks-flash-arrays.html

Question No : 13
Which three options are the primary security architectural principles for VMDC data center security? (Choose three.)

A.threat defense
B.resiliency
C.automation
D.secure separation
E.isolation
F.orchestration

正解:
Explanation:
The primary security architectural principles for VMDC data center security are secure separation, visibility, isolation, resiliency, Reference: http://www.cisco.com/c/en/us/td/docs/solutions/Enterprise/Data_Center/VMDC/ Cloud_Security/1-0/DG/ICSecurity/ICSecurity2.html

Question No : 14
A cloud administrator is designing security policies for the control plane of a private Cloud.
Which two statements about control plane Cloud Security are true? (Choose two.)

A.The dynamic control plane is not required to have visibility to all traffic between the user and the applications.
B.The dynamic control plane does not require visibility into the data plane and all components that operate within the data plane.
C.A dynamic control plane must be able to intercept traffic as it traverses the cloud, interpret the data, and instruct the cloud architecture on how to efficiently connect the user to the appropriate application instance.
D.Dynamic control plane elements are a requirement at every layer of the cloud architecture for cloud environments to be operationally efficient and on demand.

正解:

Question No : 15
Which two ports are used by Intercloud fabric tunnel ports? (Choose two.)

A.TCP 6644 and 6646
B.TCP 6000 and 7010
C.UDP 6644 and 6646
D.TCP 7000 and 7010

正解:
Explanation:
Reference: http://www.cisco.com/c/en/us/td/docs/cloud-systems-management/cisco-intercloud-fabric/
cisco-intercloud-fabric-for-business/2-3-1/deployment-requirements/ Cisco_Intercloud_Fabric_Deployment_Requirement_Release_2_3_1.html

Cisco 300-465 CLDDES 問題練習