I85PREP
⌘ K
Extreme Data Center (VOSS/VSP) study materials
Extreme Data Center (VOSS/VSP) study resources

Extreme Data Center (VOSS/VSP) practice questions

One question at a time. Build your Extreme Data Center (VOSS/VSP) understanding.

First 50 of 200 questions. Each one lists the choices, the correct answer, and an explanation. The checker at the top of this page saves progress in this browser when it is available.

Continue in the practice tool above to load more questions, 50 at a time.

Question 1Extreme Data Center Fabric Architecture and VOSS/VSP Fundamentals

In the Extreme Data Center fabric, which component is responsible for the control plane while the VSP switches forward traffic in the data plane?

  1. The VOSS instance running on the fabric's management/control nodes Correct answer.
  2. The edge router that peers with the WAN
  3. The individual VSP access switches that host server-facing ports
  4. The storage array's embedded controller

Explanation

Extreme's fabric separates the control plane from the data plane: VOSS provides the distributed control logic and fabric services, while VSP switches perform high-rate forwarding. This separation lets the fabric scale without every device running full control-plane state.

Question 2Extreme Data Center Fabric Architecture and VOSS/VSP Fundamentals

Which statement best describes the role of SPB (Shortest Path Bridging) in an Extreme Data Center fabric?

  1. It provides a loop-free, multipath Layer 2 fabric using IS-IS as the control protocol Correct answer.
  2. It provides Layer 3 NAT between tenants
  3. It tunnels all traffic through a single designated root switch
  4. It replaces IP routing entirely with static MAC forwarding tables

Explanation

SPB uses an IS-IS-based link-state control plane to compute equal-cost multipath forwarding over a Layer 2 fabric, eliminating the need for Spanning Tree blocking. It is the core fabric technology in VSP-based designs.

Question 3Extreme Data Center Fabric Architecture and VOSS/VSP Fundamentals

A VSP switch is being deployed as an edge device connecting servers to the SPB fabric. What must be configured for it to participate in the fabric?

  1. An OSPF area ID matching the core
  2. A static default route pointing to the WAN edge
  3. A unique system ID and a fabric-wide IS-IS instance on its fabric-facing ports Correct answer.
  4. A spanning-tree root priority higher than all core switches

Explanation

VSP edge nodes join the SPB fabric by running IS-IS with a unique system ID on the fabric (NNI) ports. This lets them exchange topology and service information with the rest of the fabric.

Question 4Extreme Data Center Fabric Architecture and VOSS/VSP Fundamentals

Which term describes a VSP port that connects to another fabric switch rather than to an endpoint device?

  1. UNI (user-to-network interface) port
  2. Mirror destination port
  3. Access port
  4. NNI (network-to-network interface) port Correct answer.

Explanation

In an SPB fabric, NNI ports interconnect fabric switches and carry IS-IS and encapsulated traffic, while UNI ports face endpoints such as servers. Distinguishing the two is fundamental to VSP configuration.

Question 5Extreme Data Center Fabric Architecture and VOSS/VSP Fundamentals

What is the primary purpose of the VOSS management interface in an Extreme Data Center deployment?

  1. To carry all inter-switch data traffic between VSP nodes
  2. To perform hardware packet buffering
  3. To provide configuration, monitoring, and orchestration access to the fabric control plane Correct answer.
  4. To terminate tenant Layer 3 VPNs

Explanation

The VOSS management interface is used for administrative access, configuration, and integration with orchestration systems. Data-plane traffic between switches travels over fabric NNI links, not the management interface.

Question 6Extreme Data Center Fabric Architecture and VOSS/VSP Fundamentals

Which benefit does the SPB fabric provide compared with a traditional Spanning Tree topology?

  1. All links can actively forward traffic using equal-cost multipath Correct answer.
  2. Loop prevention requires disabling redundant links
  3. Each VLAN must be manually mapped to a single uplink
  4. Broadcast traffic is flooded to every port in the fabric

Explanation

SPB computes shortest-path trees with equal-cost multipath, so redundant links forward traffic instead of being blocked. This increases usable bandwidth and reduces convergence reliance on STP.

Question 7Extreme Data Center Fabric Architecture and VOSS/VSP Fundamentals

What does a VSN (Virtual Services Network) provide in an Extreme Data Center fabric?

  1. An isolated Layer 2/Layer 3 service instance carried across the SPB fabric Correct answer.
  2. A physical cable path dedicated to one server
  3. A routing protocol used only on WAN links
  4. A hardware module for storage compression

Explanation

A VSN is a service instance that provides isolated Layer 2 and Layer 3 connectivity across the SPB fabric, allowing multi-tenant separation. Each VSN is identified by an I-SID.

Question 8Extreme Data Center Fabric Architecture and VOSS/VSP Fundamentals

Which identifier uniquely scopes a service instance across an SPB fabric?

  1. AS number
  2. VLAN ID
  3. I-SID Correct answer.
  4. Area ID

Explanation

The I-SID (service instance identifier) is a 24-bit value that globally identifies a service instance within the SPB fabric. VLAN IDs are locally significant and are mapped to I-SIDs at the fabric edge.

Question 9Extreme Data Center Fabric Architecture and VOSS/VSP Fundamentals

An administrator maps VLAN 100 on an edge VSP to I-SID 10100. What is the effect of this mapping?

  1. The I-SID is converted into a routable IP subnet
  2. The mapping disables IS-IS on the edge port
  3. Traffic in VLAN 100 is carried across the fabric as service instance 10100 Correct answer.
  4. VLAN 100 is renamed to VLAN 10100 on all switches

Explanation

Mapping a local VLAN to an I-SID associates that VLAN's traffic with a fabric-wide service instance. The VLAN tag stays local; the I-SID provides fabric-wide scope.

Question 10Extreme Data Center Fabric Architecture and VOSS/VSP Fundamentals

Which protocol does the VSP fabric use to distribute topology and service information between nodes?

  1. OSPFv2
  2. IS-IS with SPB extensions Correct answer.
  3. RIPv2
  4. EIGRP

Explanation

SPB relies on IS-IS with SPB extensions to distribute link-state topology and service (I-SID) information. This lets every node compute consistent shortest-path forwarding.

Question 11Extreme Data Center Fabric Architecture and VOSS/VSP Fundamentals

A design requires Layer 3 gateways for tenant subnets to be distributed across multiple edge switches. Which VOSS/VSP capability supports this?

  1. Distributed anycast Layer 3 gateway (IP anycast) with a shared virtual IP/MAC Correct answer.
  2. Static routes on every server
  3. Proxy ARP disabled on all UNIs
  4. A single centralized gateway on one core switch

Explanation

VOSS supports distributed Layer 3 gateway services where multiple edge switches share a virtual IP and MAC for a subnet, providing anycast first-hop routing. This avoids tromboning traffic to a single centralized gateway.

Question 12Extreme Data Center Fabric Architecture and VOSS/VSP Fundamentals

What is the purpose of an IP shortcut (IP multicast shortcut) in an SPB fabric?

  1. To compress IP headers at the edge
  2. To convert multicast into broadcast
  3. To forward IP multicast traffic over SPB using shortest-path trees instead of per-VLAN flooding Correct answer.
  4. To bypass the fabric and send traffic directly to the WAN

Explanation

SPB supports IP multicast shortcuts so multicast groups are distributed via IS-IS and forwarded along shortest-path trees. This avoids flooding multicast to every port in the service instance.

Question 13Extreme Data Center Fabric Architecture and VOSS/VSP Fundamentals

Which statement about SPB multi-homing (SMLT/RSMLT) is accurate?

  1. It only works with Layer 3 routing protocols
  2. It allows a server or switch to connect to two VSP edge switches that act as a single logical node Correct answer.
  3. It requires the two edge switches to run different I-SIDs
  4. It disables one uplink to prevent loops

Explanation

Split Multi-Link Trunking (SMLT) and its variants let a device dual-home to two edge switches that coordinate to appear as one logical node. This provides link redundancy and active-active bandwidth without STP blocking.

Question 14Extreme Data Center Fabric Architecture and VOSS/VSP Fundamentals

An engineer needs to verify that an edge VSP has formed IS-IS adjacencies with its fabric neighbors. Which command output is most directly relevant?

  1. show vlan brief
  2. show mac-address-table
  3. show logging buffer
  4. show isis adjacencies Correct answer.

Explanation

The IS-IS adjacency table shows which neighbors have completed the handshake and are exchanging link-state information. This is the direct check for fabric control-plane connectivity.

Question 15Extreme Data Center Fabric Architecture and VOSS/VSP Fundamentals

What does the VOSS fabric's use of a shortest-path tree per I-SID (or group of I-SIDs) enable?

  1. Global flooding of all unknown traffic to every fabric port
  2. Efficient multicast and broadcast delivery scoped to the service instance Correct answer.
  3. Automatic conversion of Layer 2 to Layer 3
  4. Per-packet load balancing across all I-SIDs

Explanation

SPB builds a shortest-path tree per service instance (or shared tree group), so broadcast, unknown unicast, and multicast traffic is delivered only along the tree for that I-SID. This scopes flooding and improves efficiency.

Question 16Extreme Data Center Fabric Architecture and VOSS/VSP Fundamentals

Which VOSS feature allows automation platforms to configure the fabric programmatically?

  1. A REST API and CLI-based automation interfaces Correct answer.
  2. A proprietary binary protocol with no documentation
  3. Only SNMPv1 traps
  4. Manual console access exclusively

Explanation

VOSS exposes REST APIs and structured CLI output that automation and orchestration platforms can use to configure and monitor the fabric. This supports infrastructure-as-code workflows.

Question 17Extreme Data Center Fabric Architecture and VOSS/VSP Fundamentals

In an SPB fabric, what is the function of the B-VLAN (backbone VLAN)?

  1. It identifies the transport VLAN used to carry encapsulated traffic between BEBs across the backbone Correct answer.
  2. It is the VLAN used for IS-IS hellos only
  3. It is the server-facing access VLAN on UNI ports
  4. It is the management VLAN for VOSS

Explanation

B-VLANs carry SPB-encapsulated frames across the backbone between backbone edge bridges. They are distinct from the customer/service VLANs seen at the edge.

Question 18Extreme Data Center Fabric Architecture and VOSS/VSP Fundamentals

A tenant requires Layer 3 isolation from other tenants while sharing the same physical fabric. Which approach fits VOSS/VSP?

  1. Disable IS-IS between tenant edge switches
  2. Place all tenants in VLAN 1 on shared ports
  3. Use a single global routing table for all tenants
  4. Assign each tenant a distinct VSN with its own I-SID and virtual router instance Correct answer.

Explanation

Each tenant can be given a separate VSN with its own I-SID and virtual router (VRF-like) instance, providing Layer 2 and Layer 3 isolation over shared physical infrastructure.

Question 19Extreme Data Center Fabric Architecture and VOSS/VSP Fundamentals

Which statement correctly contrasts a VSN Layer 2 service with a VSN Layer 3 service in VOSS?

  1. A Layer 3 VSN operates only on UNI ports
  2. A Layer 2 VSN bridges a subnet across the fabric, while a Layer 3 VSN provides routed connectivity between subnets Correct answer.
  3. A Layer 2 VSN cannot use I-SIDs
  4. A Layer 2 VSN requires OSPF, while a Layer 3 VSN requires IS-IS

Explanation

A Layer 2 VSN extends a bridged domain across the fabric, whereas a Layer 3 VSN provides IP routing between subnets using virtual router instances. Both rely on I-SIDs for fabric scope.

Question 20Extreme Data Center Fabric Architecture and VOSS/VSP Fundamentals

What happens when an edge VSP receives a frame for an unknown unicast destination within a Layer 2 VSN?

  1. It drops the frame immediately
  2. It forwards the frame along the service instance's shortest-path tree to reach potential destinations Correct answer.
  3. It converts the frame to a broadcast on all B-VLANs
  4. It sends the frame only back out the ingress port

Explanation

Unknown unicast frames in an SPB Layer 2 service are forwarded along the I-SID's shortest-path tree so they can reach the destination wherever it resides. This scopes the flooding to the service instance.

Question 21Extreme Data Center Fabric Architecture and VOSS/VSP Fundamentals

An engineer observes that traffic between two servers in the same VSN takes a suboptimal path through a core switch. Which SPB property explains the expected behavior?

  1. SPB requires all traffic to traverse the management plane
  2. SPB forwards along the shortest-path tree for the I-SID, which may not be the absolute lowest-latency path for every pair Correct answer.
  3. SPB uses only one link per I-SID by design
  4. SPB always forwards through the designated root bridge

Explanation

SPB uses shortest-path trees computed per service instance, so a given pair may share a tree path that is not the unique minimum for that pair. Equal-cost multipath still improves overall utilization.

Question 22Extreme Data Center Fabric Architecture and VOSS/VSP Fundamentals

Which consideration is most important when planning I-SID allocation across a large multi-tenant VOSS fabric?

  1. Mapping every VLAN to I-SID 0
  2. Assigning I-SIDs randomly per switch to maximize uniqueness
  3. Using a consistent, documented I-SID numbering scheme to avoid collisions and ease troubleshooting Correct answer.
  4. Reusing the same I-SID for all tenants to simplify configuration

Explanation

I-SIDs are fabric-wide identifiers, so a consistent numbering plan prevents collisions between tenants and simplifies operations. Random or shared allocation undermines isolation and troubleshooting.

Question 23Extreme Data Center Fabric Architecture and VOSS/VSP Fundamentals

A design team wants to reduce the scope of broadcast domains while keeping Layer 2 adjacency for a clustered application. Which VOSS/VSP design choice best meets both goals?

  1. Place the cluster in the default VLAN shared with all servers
  2. Create a dedicated Layer 2 VSN for the cluster with its own I-SID, separate from other subnets Correct answer.
  3. Use a single flat I-SID for the entire data center
  4. Convert the cluster to Layer 3 routing between every node

Explanation

A dedicated Layer 2 VSN with its own I-SID confines the broadcast domain to the cluster while preserving Layer 2 adjacency. Other subnets remain in separate service instances.

Question 24Extreme Data Center Fabric Architecture and VOSS/VSP Fundamentals

Which failure scenario is mitigated by dual-homing an edge VSP to two core VSP switches using SMLT?

  1. Simultaneous failure of both core switches
  2. Failure of the server's NIC teaming software
  3. Corruption of the IS-IS database on all nodes
  4. Loss of a single core switch or link while preserving active-active forwarding Correct answer.

Explanation

SMLT lets an edge device connect to two core switches that act as one logical node, so a single core switch or link failure does not isolate the edge. Both paths remain active under normal operation.

Question 25Extreme Data Center Fabric Architecture and VOSS/VSP Fundamentals

Which statement best explains why SPB avoids the blocked-link inefficiency of Spanning Tree in a VSP fabric?

  1. All redundant links are administratively disabled at deployment
  2. Traffic is load-balanced only by static MAC entries
  3. IS-IS computes multiple equal-cost paths and installs them, so redundant links forward traffic Correct answer.
  4. STP is still run but with a lower priority on core switches

Explanation

Because IS-IS has a complete link-state view, SPB can compute and install multiple equal-cost paths, allowing redundant links to carry traffic concurrently. STP instead blocks redundant links to guarantee a loop-free tree.

Question 26Extreme Data Center Fabric Architecture and VOSS/VSP Fundamentals

In VOSS, which construct is used to assign a nickname and a system ID to a VSP switch so that it can participate in the SPB backbone?

  1. The VLAN interface IP address configured on the management port
  2. The I-SID value applied to the access port
  3. The SPBM global configuration with a unique nickname and a B-VLAN associated with an IS-IS instance Correct answer.
  4. The SMLT cluster ID configured under the MLT interface

Explanation

A VSP node participates in the SPB backbone by running an IS-IS SPBM instance that carries a unique nickname and the B-VLAN that transports encapsulated frames. The nickname is the fabric-wide address used in the SPB header, so it must be unique per node. Management IP addressing and SMLT cluster IDs serve other purposes and do not enable backbone forwarding.

Question 27Extreme Data Center Fabric Architecture and VOSS/VSP Fundamentals

Which statement describes how an I-SID is carried across the SPB backbone in a VOSS fabric?

  1. The I-SID is translated into a VLAN tag that all core switches must have provisioned
  2. The I-SID is carried only in IS-IS advertisements and never appears in data-plane frames
  3. The I-SID is inserted into the SPB MAC-in-MAC header so core nodes forward without learning tenant MACs Correct answer.
  4. The I-SID is written into the customer Ethernet header before the frame leaves the edge VSP

Explanation

SPB encapsulates the original customer frame inside a backbone MAC-in-MAC header, and the I-SID in that header identifies the service instance. Core nodes forward on the backbone header, so they do not need to learn tenant MAC addresses. The customer frame itself is unchanged inside the encapsulation, and the I-SID is a data-plane field, not only a control-plane attribute.

Question 28Extreme Data Center Fabric Architecture and VOSS/VSP Fundamentals

An engineer wants an edge VSP to advertise a locally defined Layer 2 VSN into the fabric so remote edge nodes can join it. Which combination must be consistent for the service to come up end to end?

  1. The local VLAN-to-I-SID mapping plus an OSPF area covering the backbone links
  2. The local VLAN-to-I-SID mapping plus an IS-IS advertisement of that I-SID with the correct B-VLAN Correct answer.
  3. The local VLAN-to-I-SID mapping plus a static route pointing to the remote edge node
  4. The local VLAN-to-I-SID mapping plus an SMLT cluster shared with every remote edge node

Explanation

For a Layer 2 VSN to extend across the fabric, the edge node maps the access VLAN to an I-SID and advertises that I-SID in IS-IS so other nodes know the service exists and which B-VLAN carries it. Without the advertisement, remote nodes have no path to join the service. Static routes and OSPF are IP mechanisms unrelated to Layer 2 service membership.

Question 29Extreme Data Center Fabric Architecture and VOSS/VSP Fundamentals

A fabric uses SPB with equal-cost paths between two core VSP switches. How is traffic for a given I-SID distributed across those paths?

  1. Each I-SID is assigned to one of the equal-cost trees, so different services can use different paths Correct answer.
  2. Traffic is load-shared per packet across all equal-cost links regardless of I-SID
  3. Only one path is installed and the others remain in a blocking state as with Spanning Tree
  4. All I-SID traffic is pinned to the lowest-numbered nickname path for stability

Explanation

SPB builds shortest-path trees and, where equal-cost paths exist, different I-SIDs can be mapped to different trees so the fabric uses multiple paths simultaneously. Forwarding within a service remains consistent, which preserves ordering for that service. No links are blocked as they would be under Spanning Tree, and distribution is not done per packet.

Question 30Extreme Data Center Fabric Architecture and VOSS/VSP Fundamentals

An operator plans a large multi-tenant VOSS fabric and must decide how to scope Layer 2 VSNs so that tenant broadcast domains stay small while still allowing a tenant to stretch a subnet between two racks. Which design approach best meets both goals?

  1. Map every VLAN in the fabric to a single I-SID so that all subnets share one broadcast domain
  2. Assign one shared I-SID to all tenants and separate them using VLAN translation at each edge port
  3. Create a dedicated I-SID per tenant segment and map only the required VLANs at each edge, leaving unrelated VLANs local Correct answer.
  4. Use a separate IS-IS instance per tenant so that each tenant gets its own backbone topology

Explanation

I-SIDs define broadcast domains in an SPB fabric, so giving each tenant segment its own I-SID keeps flooding scoped to that service while still allowing the service to span racks where needed. Only the VLANs that must be stretched are mapped at each edge, and other VLANs stay local. Sharing one I-SID across tenants merges their broadcast domains, which defeats isolation.

Question 31VOSS/VSP Installation, Initial Configuration, and Management Access

When installing VOSS (VSP Operating System Software) on a VSP 8000 series switch, which statement correctly describes the relationship between the primary and secondary software images stored in flash?

  1. The primary image holds the OS while the secondary image holds only the configuration file.
  2. The secondary image is used only during factory reset and is otherwise ignored.
  3. Both images must always be the same version for the switch to boot.
  4. The switch boots from the primary image by default, and the secondary image provides a fallback if the primary fails to load. Correct answer.

Explanation

VOSS stores two software images in flash. The switch attempts to boot from the primary image first, and if that image is missing or fails integrity checks, it falls back to the secondary image. Keeping both images at compatible versions preserves this recovery path.

Question 32VOSS/VSP Installation, Initial Configuration, and Management Access

A technician needs to reach the VSP switch CLI for the first time using a directly connected laptop before any IP address is configured. Which management interface should be used?

  1. The first front-panel data port with DHCP enabled
  2. The console port using a serial connection with the correct terminal settings Correct answer.
  3. The out-of-band Ethernet Management port with a default IP of 192.168.1.1
  4. The USB port formatted as a mass storage device

Explanation

Before IP addressing exists, the console port provides local serial CLI access. The terminal must match the switch's serial settings (typically 9600 baud, 8 data bits, no parity, 1 stop bit, no flow control) for the CLI to display correctly.

Question 33VOSS/VSP Installation, Initial Configuration, and Management Access

After logging in to a factory-default VSP switch, an administrator is placed in a specific CLI mode. Which statement describes the default command mode and how to reach privileged configuration?

  1. The user starts in Global Configuration mode and must exit to reach User EXEC.
  2. The user starts in User EXEC mode and must enter enable, then configure terminal, to reach Global Configuration. Correct answer.
  3. The user starts in Interface Configuration mode and must run end to reach Global Configuration.
  4. The user starts in Privileged EXEC mode and can immediately run configure terminal.

Explanation

VOSS follows a hierarchical CLI. A session opens in User EXEC mode (prompt with a greater-than sign), enable moves to Privileged EXEC, and configure terminal enters Global Configuration mode for device-wide changes.

Question 34VOSS/VSP Installation, Initial Configuration, and Management Access

Which protocol and default port combination is used by VOSS for secure remote CLI management over the network?

  1. SSH on TCP 22 Correct answer.
  2. HTTP on TCP 80
  3. SNMP on UDP 161
  4. Telnet on TCP 23

Explanation

Secure Shell provides encrypted remote CLI sessions to a VSP switch and listens on TCP port 22 by default. Telnet and HTTP are cleartext and SNMP is used for monitoring and polling rather than interactive CLI.

Question 35VOSS/VSP Installation, Initial Configuration, and Management Access

During initial configuration, an administrator wants the switch management interface to obtain an address automatically. Which command enables this behavior on the management port?

  1. bootp relay enable
  2. dhcp-server enable
  3. ip address dhcp
  4. interface mgmt ip dhcp-client enable Correct answer.

Explanation

In VOSS the management port is configured under its interface context, where ip dhcp-client enable makes the port request an address from a DHCP server. The other commands either belong to different features or are not valid VOSS management-port syntax.

Question 36VOSS/VSP Installation, Initial Configuration, and Management Access

An engineer must save the running configuration so it survives a reload of the VSP switch. Which action accomplishes this in VOSS?

  1. Rely on automatic persistence of the running configuration
  2. Copy the running configuration to the config file using the save config command Correct answer.
  3. Reboot the switch, which commits the running configuration automatically
  4. Issue the write memory command to copy startup to running

Explanation

VOSS keeps changes in the running configuration until they are explicitly saved with save config, which writes them to the configuration file used at boot. Without this step, changes are lost on reload.

Question 37VOSS/VSP Installation, Initial Configuration, and Management Access

Which VOSS command displays the current software version, build, and image information on a VSP switch?

  1. show running-config
  2. show sys software
  3. show boot config
  4. show version Correct answer.

Explanation

The show version command reports the loaded software release, build details, and image information. It is the standard first check after installation or upgrade to confirm the intended VOSS release is running.

Question 38VOSS/VSP Installation, Initial Configuration, and Management Access

An administrator wants to restrict management access so that only hosts on the 10.10.0.0/24 subnet can open SSH sessions to the switch. Which VOSS feature should be configured?

  1. A DHCP relay entry for the management subnet
  2. An ACL applied to the management interface that permits the subnet and denies other sources Correct answer.
  3. A QoS policy that classifies SSH traffic
  4. A VLAN spanning-tree change on the management VLAN

Explanation

VOSS ACLs can be applied to the management interface to filter which source addresses reach management services such as SSH. Permitting the trusted subnet and denying other sources enforces the restriction at the packet level.

Question 39VOSS/VSP Installation, Initial Configuration, and Management Access

Which statement about the VOSS default user account on a newly installed VSP switch is correct?

  1. The default account is read-only and cannot be modified
  2. No accounts exist until one is created at the console during first boot
  3. A default read-write account named admin with password password exists and should be changed or replaced immediately Correct answer.
  4. Default credentials are random and printed only on the shipping label

Explanation

Factory-default VOSS configurations include a well-known administrative account with a default password. Best practice is to change that password or create named accounts with appropriate roles and remove or disable the default.

Question 40VOSS/VSP Installation, Initial Configuration, and Management Access

A VSP switch must be managed from a remote subnet, but the management port is on a different subnet than the administrator's workstation. What must be configured so the workstation can reach the management IP?

  1. A default gateway on the management interface pointing to the next-hop router Correct answer.
  2. An OSPF area on the management port
  3. A second management IP in the workstation's subnet only
  4. A static ARP entry for the workstation

Explanation

When the management client is on a different subnet, the switch needs a default gateway so replies can be routed back. The gateway is configured in the management interface context and should point at the router on the management segment.

Question 41VOSS/VSP Installation, Initial Configuration, and Management Access

Which VOSS command is used to create a new local user with a specific role and password?

  1. aaa local-user <name>
  2. cli user create <name>
  3. username <name> level <role> password <password> Correct answer.
  4. user add <name> role <role>

Explanation

In VOSS local accounts are created with the username command, specifying the privilege level (role) and password. The role determines which commands the account can execute.

Question 42VOSS/VSP Installation, Initial Configuration, and Management Access

An administrator wants to back up the switch configuration to a TFTP server before an upgrade. Which VOSS command accomplishes this?

  1. save config tftp://<server-ip>/<filename>
  2. copy config tftp <server-ip> <filename> Correct answer.
  3. upload config <server-ip>
  4. backup running-config tftp <server-ip>

Explanation

VOSS uses the copy command to transfer configuration files to a remote server, including TFTP. The source is the config file and the destination specifies the server address and filename.

Question 43VOSS/VSP Installation, Initial Configuration, and Management Access

After configuring an IP address on the management port, an administrator cannot ping the switch from a connected host. Which troubleshooting step is most appropriate first?

  1. Disable SSH to free the management port
  2. Reset all VLANs to factory defaults
  3. Verify the management interface is enabled and the IP is in the same subnet as the host Correct answer.
  4. Reinstall the VOSS software image

Explanation

The most common cause of an unreachable management IP is that the interface is administratively disabled or the address is outside the host's subnet. Confirming interface status and address alignment is the fastest first check.

Question 44VOSS/VSP Installation, Initial Configuration, and Management Access

Which VOSS command shows the current IP configuration and link status of the management port?

  1. show ip interface mgmt Correct answer.
  2. show port mgmt status
  3. show mgmt config
  4. show interfaces mgmt

Explanation

The show ip interface command with the management interface displays the assigned address, mask, and related IP settings. Link-level status is also visible in interface output, but the IP configuration is reported here.

Question 45VOSS/VSP Installation, Initial Configuration, and Management Access

An administrator wants to enable SSH version 2 only and disable Telnet on the VSP switch. Which approach is correct in VOSS?

  1. Enable the SSH server and disable the Telnet server in the global configuration Correct answer.
  2. Apply an ACL that denies TCP 23 on the data ports only
  3. Disable the management interface
  4. Change the console baud rate to block Telnet users

Explanation

VOSS provides server toggles for remote access protocols. Enabling the SSH server and disabling the Telnet server removes cleartext CLI access while keeping encrypted sessions available.

Question 46VOSS/VSP Installation, Initial Configuration, and Management Access

Which statement correctly describes the VOSS boot process when the configuration file is missing or corrupt at startup?

  1. The switch loads a factory-default configuration and continues to boot Correct answer.
  2. The switch boots into ROM monitor mode indefinitely
  3. The switch halts and requires a software reinstall
  4. The switch automatically restores the last saved configuration from the secondary image

Explanation

If the startup configuration cannot be read, VOSS proceeds with factory-default settings so the device remains accessible. The administrator can then restore a backup configuration.

Question 47VOSS/VSP Installation, Initial Configuration, and Management Access

A security policy requires that management access be logged. Which VOSS capability supports auditing of configuration changes made by administrators?

  1. Syslog forwarding of CLI command logging to a remote server Correct answer.
  2. Spanning-tree root guard
  3. DHCP snooping on the management VLAN
  4. SNMP trap for link state changes

Explanation

VOSS can log CLI command activity and forward those messages to a remote syslog server, giving an audit trail of administrative actions. Link-state traps, snooping, and root guard serve unrelated purposes.

Question 48VOSS/VSP Installation, Initial Configuration, and Management Access

An engineer must confirm that the running configuration matches the saved configuration after a series of changes. Which comparison approach is appropriate in VOSS?

  1. Compare the output of show running-config with the saved config file contents Correct answer.
  2. Run show version twice
  3. Reboot the switch and observe whether changes persist
  4. Disable the management interface and re-enable it

Explanation

Displaying the running configuration and comparing it against the saved configuration file reveals unsaved differences. This avoids relying on a disruptive reboot to discover whether changes were persisted.

Question 49VOSS/VSP Installation, Initial Configuration, and Management Access

During initial setup, an administrator needs to set the switch hostname and the management default gateway. In which CLI context are these device-wide settings applied?

  1. Privileged EXEC mode
  2. Global Configuration mode Correct answer.
  3. Interface Configuration mode for the management port
  4. User EXEC mode

Explanation

Hostname is a device-wide setting applied in Global Configuration mode. The default gateway is configured within the management interface context, but both are reached only after entering configuration mode from Privileged EXEC.

Question 50VOSS/VSP Installation, Initial Configuration, and Management Access

An administrator observes that after upgrading VOSS, the switch boots the previous image. Which is the most likely explanation?

  1. The management IP changed during the upgrade
  2. The new image was loaded but the boot flag still points to the old image Correct answer.
  3. The configuration file was not saved before the upgrade
  4. The secondary image overwrote the primary automatically

Explanation

VOSS boots the image designated by the boot flag. If the new image was copied to flash but the boot configuration was not updated to select it, the switch continues to load the previous image.