Cisco 350-601 - Implementing Cisco Data Center Core Technologies v1.1 (350-601 DCCOR)

The correct answer is B. In Cisco UCS Manager, a user’s effective access is determined by the combination of role and locale. The role defines what the user is allowed to do, while the locale defines where in the organizational hierarchy those permissions apply. Cisco UCS organizations are hierarchical, with root at the top. When a locale includes the root organization, the permissions associated with the user’s role extend throughout the organizational tree beneath root, which provides consistent access across all UCS domain organizations.

That is why adding root to the relevant locale is the correct action to ensure the network-admin account has the same privileges everywhere. Changing the role to admin is unnecessary and would grant broader privileges than required. Removing the dev locale would reduce scope, not standardize access across all organizations. Assigning the operations role changes the privilege set rather than extending the existing network-admin permissions consistently.

So the required fix is not to change the role, but to make the locale apply at the root level, which is exactly what option B accomplishes.

Fibre Channel port security restricts access by validating device identities, such as pWWNs and nWWNs, against the port-security database. Auto-learning works with port security to capture devices that are already successfully logged in and dynamically add their identities to the active port-security database. This establishes a trusted baseline without requiring the administrator to enter every existing device manually. After the valid devices are learned, auto-learning can be disabled and the database activated or enforced so that subsequent login attempts from unauthorized identities are rejected. Enhanced zoning controls permitted communication between members of Fibre Channel zones, but it does not automatically populate the port-security database from logged-in devices. Device aliases provide readable names for Fibre Channel identifiers and simplify configuration; they do not authenticate logins or learn trusted devices for port-security enforcement. Therefore, both auto-learning and port security are required.

The correct answer is C. standby supervisor.

From the exhibit, the command output clearly shows:

Module 6 SUP Yes disruptive Module Upgradable and later confirms:

Module 6 EPLD upgrade is successful and 6 SUP Success.

This indicates that the EPLD upgrade was performed on a Supervisor (SUP) module, specifically module 6. In Cisco MDS 9700 architecture, supervisor modules operate in a redundant pair (active and standby). When EPLD upgrades are performed, Cisco best practice and system behavior typically upgrade the standby supervisor first, because it allows the system to maintain control-plane continuity and minimizes disruption.

The output does not mention PSU, fan, or fabric modules, eliminating options A, B, and D. The explicit reference to SUP confirms that the upgrade applies to a supervisor module.

Thus, based on the module type shown in the output and standard Cisco upgrade behavior, the EPLD upgrade is applied to the standby supervisor, making C the correct answer.

The correct answer is A. Enhanced LACP.

In a Cisco ACI VMware VMM domain, the policy used for host uplink connectivity depends on how the ESXi hosts connect to the ACI leaf switches. The question states that vPC must connect to the leafs and the environment uses VMware Distributed Virtual Switch (DVS) 6.6. When hosts are dual-homed to ACI leaves using vPC, Cisco ACI uses Enhanced LACP as the preferred uplink policy because it provides active-active link utilization, fast convergence, and consistent forwarding behavior across both leaf switches.

MAC pinning is typically used when LACP is not available or not desired, but it does not provide the same standards-based port-channel negotiation and is not the best match when the requirement explicitly calls for vPC connectivity. Tag collection is related to VM attribute collection for policy mapping, not uplink formation. LLDP transmit helps with discovery and visibility, but it does not establish the host-to-leaf port-channel behavior.

Because the design specifically requires vPC attachment of VMware hosts through a supported DVS, the required ACI policy is Enhanced LACP.