Discuss Cisco 300-615 Exam Topic 12 Question 126

Refer to the exhibit.

An engineer must strictly enforce the port security configuration database in the Fibre Channel fabric. A new device has been connected to the Fibre Channel storage interface that was configured for port security. The port security was enabled for the VSAN that the port belongs to. Despite the configuration, the rogue devices can log into the fabric. Which action resolves the issue?

ACommit the active database with the port-security database copy vsan 1 command

BDisable auto learn in VSAN 1 with the no port-security auto-learn vsan 1 command

CDisable CFS distribution with the no port-security distribute vsan 1 command

DCommit the changes with the port-security commit copy vsan 1 command

Suggested Answer: B

Get Premium 300-615 Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test

17 comments · newest first

Ernie 1 month ago

Right, we need a balance between security and performance.

Glendora 1 month ago

B could be a quick fix, but it might not be long-term.

Renea 1 month ago

I feel like A or D are safer bets. We need to ensure the database is current.

Keshia 2 months ago

True, but we need to prioritize security over convenience.

Micheline 2 months ago

But if we disable CFS distribution, we might lose some functionality.

Art 2 months ago

I'm leaning towards B. Disabling auto-learn could prevent rogue access.

Leanna 2 months ago

I agree, but option D seems solid too. Committing changes is crucial.

Ernie 2 months ago

I think option A is the best choice. It commits the active database.

Martha 2 months ago

D) is definitely the way to go, commit those changes!

Rosendo 3 months ago

C) won't help, you need to commit the changes.

Tarra 3 months ago

Surprised that rogue devices can still connect with port security on!

Marica 3 months ago

I disagree, B) seems more effective for rogue devices.

Chauncey 3 months ago

A) is the right move to enforce the config!

Roxane 3 months ago

I’m leaning towards option D because I remember the importance of committing changes in configurations. It seems like the most logical step to take.

Ronna 3 months ago

I think I read that disabling CFS distribution could help, but I’m not confident. I might be mixing it up with another topic.

Luke 4 months ago

This question feels familiar! I practiced something similar where we had to disable auto-learn. I wonder if that’s the right approach here too.

Layla 4 months ago

I remember studying port security, but I'm not entirely sure about the specific commands. I think committing the database might be important, but I can't recall which option does that.

Cisco 300-615 Exam - Topic 12 Question 126 Discussion