Cisco 350-601 - Implementing Cisco Data Center Core Technologies v1.1 (350-601 DCCOR)

The correct answers are A and C. In Cisco UCS Manager RBAC, the privilege required to configure NTP providers, date, and time zone settings is Ext LAN Security (ext-lan-security). Cisco’s UCS Manager privileges documentation explicitly states that this privilege allows a user to configure NTP providers and date/time zone settings, which directly matches the second requirement in the question.

To add VLANs in Cisco UCS Manager, the required privilege is Ext LAN Policy (ext-lan-policy). Cisco documents that this privilege allows a user to configure LAN settings on the fabric interconnect, including VLANs and VLAN groups, along with other LAN policies. That maps exactly to the first requirement of adding VLANs into the existing UCS Manager configuration.

The other options are not correct for these tasks. Service Profile Network Policy, Service Profile Compute, and Service Profile Config are service-profile-related privileges and do not grant control over global fabric VLAN creation or NTP/time-zone configuration. Because the question asks for one privilege for VLAN administration and one for NTP/date/time settings, the verified combination is A and C.

The scheduler job shown in the exhibit attempts to copy the configuration to the TFTP server through the management VRF. However, the question states that the TFTP server is reachable through the global routing table. On Cisco NX-OS, routes in the management VRF are isolated from routes in the default VRF. Consequently, specifying vrf management prevents the copy operation from following the global routing table. The job must use the default VRF, which can be achieved by removing the management-VRF specification or explicitly selecting the appropriate default routing context. The scheduler already contains a defined job and execution time, so defining the schedule again does not solve the reachability problem. Authentication is not the issue identified in the scenario, and scheduler log-file sizing has no bearing on the route used to contact the TFTP server.

The correct answer is B. host-reachability protocol bgp.

In Cisco VXLAN EVPN deployments on Nexus 9000 switches, the mechanism used to ensure that MAC and IP address information is learned via the control plane is the host reachability protocol using BGP EVPN. When the command host-reachability protocol bgp is configured under the NVE interface, the switch leverages MP-BGP EVPN to advertise and learn endpoint information such as MAC addresses and associated IP addresses. This enables control-plane learning, eliminating the need for data-plane flooding.

The exhibit shows the NVE interface with multicast groups configured, but the requirement explicitly asks for control-plane learning, which is only achieved with BGP EVPN.

Option A (ingress-replication protocol bgp) relates to how BUM (Broadcast, Unknown unicast, Multicast) traffic is replicated, not how MAC/IP learning occurs. Options C and D refer to static methods, which do not provide dynamic control-plane learning.

Therefore, to enable EVPN-based control-plane learning of MAC and IP addresses, the required command is host-reachability protocol bgp, making option B correct.