Guarantee your career with 350-601 Practice Test and cram 350-601 Question Bank offers each of you that you have to take the Certified exam. We offer 100% free 350-601 braindumps to download and evaluate. Our Cisco 350-601 Exam will give you exam questions with valid answers that reflect the real exam. We at are made game plans to draw in you to finish your 350-601 test with good grades.

350-601 Implementing Cisco Data Center Core Technologies (DCCOR) test |

350-601 test - Implementing Cisco Data Center Core Technologies (DCCOR) Updated: 2024

Pass4sure 350-601 Dumps and practice tests with Real Questions
Exam Code: 350-601 Implementing Cisco Data Center Core Technologies (DCCOR) test January 2024 by team

350-601 Implementing Cisco Data Center Core Technologies (DCCOR)

350-601 DCCOR

Certifications: CCNP Data Center, CCIE Data Center, Cisco Certified Specialist - Data Center Core

Duration: 120 minutes

This test tests your knowledge of implementing core data center technologies, including:

- Network

- Compute

- Storage network

- Automation

- Security

Exam Description

The Implementing and Operating Cisco Data Center Core Technologies v1.0 (DCCOR 350-601) test is a 120-minute test associated with the CCNP Data Center, Cisco Certified Specialist - Data Center Core, and CCIE Data Center certifications. This test tests a candidate's knowledge of implementing core data center technologies including network, compute, storage network, automation, and security. The course, Implementing and Operating Cisco Data Center Core Technologies, helps candidates to prepare for this exam.

25% 1.0 Network

1.1 Apply routing protocols

1.1.a OSPFv2, OSPFv3

1.1.b MP-BGP

1.1.c PIM

1.1.d FHRP

1.2 Apply switching protocols such as RSTP+, LACP and vPC

1.3 Apply overlay protocols such as VXLAN EVPN and OTV

1.4 Apply ACI concepts

1.4.a Fabric setup

1.4.b Access policies

1.4.c VMM

1.4.d Tenant policies

1.5 Analyze packet flow (unicast, multicast, and broadcast)

1.6 Analyze Cloud service and deployment models (NIST 800-145)

1.7 Describe software updates and their impacts

1.7.a Disruptive / nondisruptive

1.7.b EPLD

1.7.c Patches

1.8 Implement network configuration management

1.9 Implement infrastructure monitoring such as NetFlow and SPAN

1.10 Explain network assurance concepts such as streaming telemetry

25% 2.0 Compute

2.1 Implement Cisco Unified Compute System Rack Servers

2.2 Implement Cisco Unified Compute System Blade Chassis

2.2.a Initial setup

2.2.b Infrastructure management

2.2.c Network management (VLANs, pools and policies, templates, QoS)

2.2.d Storage management (SAN connectivity, Fibre Channel zoning, VSANs, WWN pools, SAN policies, templates)

2.2.e Server management (Server pools and boot policies)

2.3 Explain HyperFlex Infrastructure Concepts and benefits (Edge and Hybrid Architecture vs all-flash)

2.4 Describe firmware and software updates and their impacts on B-Series and C-Series servers

2.5 Implement compute configuration management (Backup and restore)

2.6 Implement infrastructure monitoring such as SPAN and Intersight

20% 3.0 Storage Network

3.1 Implement Fibre Channel

3.1.a Switch fabric initialization

3.1.b Port channels

3.1.c FCID

3.1.d CFS

3.1.e Zoning

3.1.f FCNS

3.1.g Device alias

3.1.h NPV and NPIV

3.1.i VSAN

3.2 Implement FCoE Unified Fabric (FIP and DCB)

3.3 Describe NFS and NAS concepts

3.4 Describe software updates and their impacts (Disruptive/nondisruptive and EPLD)

3.5 Implement infrastructure monitoring

15% 4.0 Automation

4.1 Implement automation and scripting tools

4.1.a EEM

4.1.b Scheduler

4.1.c Bash Shell and Guest Shell for NX-OS

4.1.d REST API

4.1.e JSON and XML encodings

4.2 Evaluate automation and orchestration technologies

4.2.a Ansible

4.2.b Puppet

4.2.c Python

4.2.d POAP

4.2.e DCNM

4.2.f UCSD

4.2.g PowerShell

15% 5.0 Security

5.1 Apply network security

5.1.a AAA and RBAC

5.1.b ACI contracts and microsegmentation

5.1.c First-hop security features such as dynamic ARP inspection (DAI), DHCP snooping, and port security

5.1.d CoPP

5.2 Apply compute security

5.2.a AAA and RBAC

5.2.b Keychain authentication

5.3 Apply storage security

5.3.a AAA and RBAC

5.3.b Port security

5.3.c Fabric binding
Implementing Cisco Data Center Core Technologies (DCCOR)
Cisco Implementing test

Other Cisco exams

010-151 Cisco Certified Technician (CCT) for Data Center
500-275 Securing Cisco Networks with Sourcefire FireAMP Endpoints
CICSP Cisco IronPort Certified Security Professional
600-455 Deploying Cisco Unified Contact Center Enterprise (DUCCE)
500-210 SP Optical Technology Field Engineer Representative
500-052 Deploying Cisco Unified Contact Center Express (UCCXD)
500-651 Security Architecture for Systems Engineer (SASE)
500-701 Cisco Video Infrastructure Design (VID)
500-301 Cisco Cloud Collaboration Solutions
500-551 Cisco Networking: On-Premise and Cloud Solutions
700-020 Cisco Video Sales Essentials
500-710 Cisco Video Infrastructure Implementation
700-105 Cisco Midsize Collaboration Solutions for Account Managers
500-325 Cisco Collaboration Servers and Appliances
500-490 Designing Cisco Enterprise Networks
500-470 Cisco Enterprise Networks SDA, SDWAN and ISE test for System Engineers
500-901 Cisco Data Center Unified Computing Infrastructure Design
500-230 Cisco Service Provider Routing Field Engineer
700-150 Introduction to Cisco Sales
700-651 Cisco Collaboration Architecture Sales Essentials
700-751 Cisco SMB Product and Positioning Technical Overview (SMBSE)
300-410 Implementing Cisco Enterprise Advanced Routing and Services (ENARSI)
300-415 Implementing Cisco SD-WAN Solutions (ENSDWI)
300-420 Designing Cisco Enterprise Networks (ENSLD)
300-425 Designing Cisco Enterprise Wireless Networks (ENWLSD)
300-430 Implementing Cisco Enterprise Wireless Networks (ENWLSI) 2023
300-435 Automating Cisco Enterprise Solutions (ENAUTO)
300-510 Implementing Cisco Service Provider Advanced Routing Solutions (SPRI)
300-610 Designing Cisco Data Center Infrastructure (DCID)
300-615 Troubleshooting Cisco Data Center Infrastructure (DCIT)
300-620 Implementing Cisco Application Centric Infrastructure (DCACI)
300-635 Automating Cisco Data Center Solutions (DCAUTO)
300-810 Implementing Cisco Collaboration Applications (CLICA)
300-815 Implementing Cisco Advanced Call Control and Mobility Services (CLACCM) - CCNP
300-910 Implementing DevOps Solutions and Practices using Cisco Platforms (DEVOPS)
300-920 Developing Applications for Cisco Webex and Webex Devices (DEVWBX)
350-401 Implementing Cisco Enterprise Network Core Technologies (ENCOR)
350-501 Implementing and Operating Cisco Service Provider Network Core Technologies (SPCOR)
350-601 Implementing Cisco Data Center Core Technologies (DCCOR)
350-701 Implementing and Operating Cisco Security Core Technologies (SCOR)
350-801 Implementing Cisco Collaboration Core Technologies (CLCOR)
350-901 Developing Applications using Cisco Core Platforms and APIs (DEVCOR)
500-215 SP Mobility Technology Systems Engineer Representative
200-301 Cisco Certified Network Associate - CCNA 2023
100-490 Cisco Certified Technician Routing & Switching (RSTECH)
200-201 Understanding Cisco Cybersecurity Operations Fundamentals (CBROPS)
200-901 DevNet Associate (DEVASC)
300-535 Automating Cisco Service Provider Solutions (SPAUTO)
300-710 Securing Networks with Cisco Firepower
300-715 Implementing and Configuring Cisco Identity Services Engine
300-720 Securing Email with Cisco Email Security Appliance
300-725 Securing the Web with Cisco Web Security Appliance (SWSA)
300-730 Implementing Secure Solutions with Virtual Private Networks
300-735 Automating Cisco Security Solutions (SAUTO)
300-820 Implementing Cisco Collaboration Cloud and Edge Solutions
300-835 Automating Cisco Collaboration Solutions (CLAUTO)
500-440 Designing Cisco Unified Contact Center Enterprise (UCCED)
600-660 Implementing Cisco Application Centric Infrastructure - Advanced
300-515 Implementing Cisco Service Provider VPN Services (SPVI)
300-915 Developing Solutions Using Cisco IoT and Edge Platforms (DEVIOT)
300-215 Conducting Forensic Analysis and Incident Response Using Cisco CyberOps Technologies (CBRFIR)
350-201 Performing CyberOps Using Core Security Technologies (CBRCOR)
500-240 Cisco Mobile Backhaul for Field Engineers (CMBFE)
700-765 Cisco Security Architecture for System Engineers
820-605 Cisco Customer Success Manager (CSM)
700-805 Cisco Renewals Manager (CRM)
500-452 Cisco Enterprise Networks Core and WAN (ENCWE)
700-760 Cisco Security Architecture for Account Managers
700-680 Cisco Collaboration SaaS Authorization (CSaaS)
700-846 Cisco IoT Advantage for Account Managers (IOTAAM)?
500-451 Cisco Enterprise Networks Unified Access test (ENUAE)
500-920 Cisco Data Center Unified Computing Infrastructure Troubleshooting (DCITUC)
500-220 Cisco Meraki Solutions Specialist (ECMS)
500-560 Cisco Networking: On-Premise and Cloud Solutions
500-445 Cisco Contact Center Enterprise Chat and Email (CCECE)
500-442 Administering Cisco Contact Center Enterprise (CCEA)
500-265 Cisco Advanced Security Architecture System Engineer (ASASE)
700-755 Small Business Technical Overview (SBTO)
500-444 Cisco Contact Center Enterprise Implementation and Troubleshooting (CCEIT)
500-443 Advanced Administration and Reporting of Contact Center Enterprise (CCEAAR) 350-601 test PDF contains Complete Pool of Dumps and Dumps checked and Verified including references and explanations (where applicable). Our target to assemble the Dumps is not only to pass the test at first attempt but Really Excellerate Your Knowledge about the 350-601 test topics
Implementing Cisco Data Center Core Technologies (DCCOR)
Question: 73
The Cisco Nexus switch Generic Online Diagnostics policy for a PortLoopback test requires 10 consecutive failures to error disable the port. The customer wants to change it to 5 consecutive failures.
Which configuration applies the changes for module 1 only?
A. Option A
B. Option B
C. Option C
D. Option D
Answer: D
mod all is incorrect. mod 1test is incorrect. publish event is incorrect.
mod 1 test is correct. It is with policy-default.
Question: 74
An engineer is configuring a backup operation on the existing Cisco UCS environment using a logical configuration.
Which configuration is expected to be saved by using this backup type?
A. systems
B. roles
C. service profiles
D. servers
Answer: C
Question: 75
A Cisco UCS C-Series server is installed at a data center. The server should be managed by the Cisco UCS Manager by using a single cable for management and data traffic.
Which configuration should be applied after the Physical connection is established?
A. UCS-A# scope server 1
UCS-A /server# scope cimc
UCS-A /server/cimc # scope mgmt-conn sideband
UCS-A /server/cimc # mgmt-conn-state enabled
UCS-A /server/cimc/mgmt-conn* # commit-buffer
B. UCS-A# scope chassis 1
UCS-A /chassis# scope cimc
UCS-A /chassis/cimc # scope mgmt-conn sideband
UCS-A /chassis/cimc/mgmt-conn # mgmt-conn-state enabled
UCS-A /chassis/cimc/mgmt-conn* # commit-buffer
C. UCS-A# scope chassis 1
UCS-A /chassis# scope cimc
UCS-A /chassis /cimc # set mgmt-conn-state enabled
UCS-A /chassis /cimc/mgmt-conn* # commit-buffer
D. UCS-A# scope server 1
UCS-A /server# scope cimc
UCS-A /server/cimc # scope mgmt-conn sideband
UCS-A /server/cimc/mgmt-conn #set mgmt-conn-state enabled
UCS-A /server/cimc/mgmt-conn* # commit-buffer
Answer: D
UCS-A# scope server 1
UCS-A /server # scope cimc
UCS-A /server/cimc # scope mgm
UCS-A /server/cimc # scope mgmt-conn
UCS-A /server/cimc # scope mgmt-conn sideband
UCS-A /server/cimc/mgmt-conn # set mgmt-conn-state enabled
UCS-A /server/cimc/mgmt-conn* # commit-buffer
UCS-A /server/cimc/mgmt-conn
Question: 76
The Cisco Nexus 5600 Series Switch experiences occasional packet drops on interface ethernet 1/16. An engineer wants to implement a SPAN session to investigate the issue further. The network
analyzer to which the packets must be directed is located on interface 1/3. The analyzer is limited on disk space available for traffic capture, so the Nexus switch should send only the relevant data.
Which two command sets configure the SPAN session that meets these requirements? (Choose two.)
A. Option A
B. Option B
C. Option C
D. Option D
E. Option E
Answer: A,E
The information to be sent is regarding dropped packets only.
Question: 77
An engineer performs a set of configuration changes for the vPC domain using Session Manager.
Which two commands are used to verify the configuration and apply the device changes when no errors are returned? (Choose two)
A. write
B. verify
C. commit
D. checkpoint
E. apply
Answer: BC
Question: 78
Question: 79
An engineer must shut down the Ethernet 1/2 interface when the Ethernet 4/5 interface state is down.
Drag and drop the CLI commands from the bottom onto the blanks in the exhibit to implement this EEM. Not all commands are used.
Question: 80
A host EPG Client wants to talk to a webserver in EGP Web. A contract with default settings is defined between EPG Client and EPG Web, which allows TCP communication initiated by the client
toward the webserver with TCP destination port 80.
Which statement is true?
A. If EPG Web is made a preferred group member, a contract between EPG Client and EPG Web is no longer required for the host in EPG Client to reach the webserver in EPG Web.
B. If vzAny is configured to consume and provide a "deny all" contract, traffic between EPG Client and EPG Web is no longer allowed.
C. The host in EPG Client is allowed to connect to TCP destination port 80 on the webserver in EPG Web.
The webserver will not be allowed to initiate a separate TCP connection to a host port with TCP source port 80.
D. The host in EPG Client is allowed to connect to TCP destination port 80 on the webserver in EPG Web.
The webserver is allowed to initiate a separate TCP connection to a host port with TCP source port 80.
Answer: D
Apply Both Direction and Reverse Filter Port in the subject for the filter. These two options are by default enabledThis means that if the provider EPG initiates traffic toward the consumer EPG, the
Cisco ACI fabric allows it for any destination ports if the source port is 80.
Reverse filter and apply in both directions is default.
If a filter allows traffic from any consumer port to a provider port (e.g. 8888), if reverse port filtering is enabled and the contract is applied both directions (say for TCP traffic), either the consumer or
the provider can initiate communication. The provider could open up a TCP socket to the consumer using port 8888, whether the provider or consumer sent traffic first.
Question: 81
A network engineer needs to configure system logging on the MDS switch. The messages must be displayed with the severity level of "warning and above. For security reasons the users must be
logged out of the console after 5 minutes of inactivity.
Which configuration must be applied to meet these requirements?
A. Option A
B. Option B
C. Option C
D. Option D
Answer: B
Question: 82
A new employee must be granted access to add VLANs into an existing Cisco UCS Manager and configure NTP synchronization with date and time zone settings.
Which two privileges must be granted to the employee to complete the task? (Choose two.)
A. Service Profile Compute (Is-compute)
B. Ext LAN Config (ext-lan-security)
C. Service Profile Network Policy (Is-network-policy)
D. Service Profile Config (Is-config)
E. Ext LAN Policy (ext-lan-policy)
Answer: B,E
NTP can be configured only with EXT LAN Security.
VLAN can be added using the following privileges:
Ext Lan Config (ext-lan-config)
Ext Lan Policy (ext-lan-policy)
service profiles will add VLANs to vNICs only if they are configured to UCS manager. So service profile is not valid solution.
Question: 83
Which storage protocol reduces file locks by using leasing?
B. NFS 4
C. NFS 3
Answer: D
Question: 84
An engineer creates a service profile in Cisco UCS Manager and must assign a policy that reboots blades when changes are applied. The changes must be applied only after user acknowledgment.
Which two policies must be configured to meet these requirements? (Choose two.)
A. Boot Policy
B. Global Policy
C. Power Control Policy
D. Maintenance Policy
E. Reboot Policy
Answer: D, E
For More exams visit

Cisco Implementing test - BingNews Search results Cisco Implementing test - BingNews Best IT Certifications for 2024

Earning specialized certifications is a surefire way to advance your career in the IT field, regardless of industry or current career level. The right certification validates your skills and knowledge, which makes you more desirable to future employers who want to attract and retain the best employees. Below, we’ll explore the top IT certifications and share how to examine your goals to choose the right path forward. 

We’ve narrowed IT certifications into specific categories to help IT professionals assess what’s available and pursue the best certifications to show their willingness to learn and develop the in-demand career skills employers want.

Best database certifications 

Database platforms have changed greatly over the years, but database technology remains important for various applications and computing tasks. Available certifications for IT professionals include those for database administrators (DBAs), database developers, data analysts and architects, business intelligence, and data warehousing specialists, and other data professionals.

Obtaining database certifications demonstrates an understanding of database concepts, design, implementation, administration and security. This can boost your credibility in the job market and show potential employers that you have the skills needed to work with databases. The best database certifications include the following:

Best SAS certifications 

SAS is one of the world’s leading firms for business analytics, data warehousing and data mining. Today, the SAS Global Certification Program offers 23 credentials across categories including foundation tools, advanced analytics, business intelligence, data management and administration.

SAS programmers remain in high demand, with a quick search of job boards showing thousands of open positions. Obtaining SAS certification shows employers that you are proficient in the company’s popular suite of tools. Some of SAS’s certification programs include the following: 

Many professionals earn certifications to help navigate their career paths. According to the IT Salary Report, 92 percent of information technology professionals have at least one certification.

Best Cisco certifications 

Cisco Systems is a market leader not only in networking and communications products, but also storage networking and solutions for data centers. Cisco offers a variety of certifications for IT professionals, ranging from entry level credentials to expert-level exams. 

These certifications prepare professionals for Cisco-related careers. A search of job boards reveals thousands of open positions for Cisco experts, underscoring the continued relevance of these skills. Some of Cisco’s certifications include the following:

Best Dell certifications 

Dell Technologies remains one of the world’s leading computing companies. In addition to its well-known hardware lineup, Dell also offers solutions for networks, storage, servers, gateways and embedded computing, as well as a broad range of IT and business services.

Becoming certified in Dell products can help make IT professionals competitive in engineering roles for server, virtualization, networking, systems, integration and data security. Additional roles include consultants, account executives, system administrators, IT managers and deployment managers.

Best mobility certifications 

In the mobile era, it has become increasingly important for network engineers to support local, remote and mobile users, as well as provide proper infrastructure. The focus on application and app development now leans more toward mobile environments, requiring security professionals to thoroughly address mobility from all perspectives.

Due to the fast-changing nature of mobile technology, not many mobility certifications have become widely adopted. However, a few of the top mobility certifications can help IT professionals stand out in this rapidly evolving field. 

If part of your job includes selling and implementing an IT solution, you may want to pursue the best sales certifications. You’ll show your organization that you’re willing to go above and beyond to reach sales targets.

Best computer hardware certifications 

As remote and computer-based work has become more common, it’s more important than ever that businesses and individuals be able to maintain their hardware. While discussions about potential computer-related jobs often revolve around software work and coding, jumping into the IT field by becoming a computer technician is an excellent starting point.

Today, thousands of hardware technician jobs are available across the country. Entering this industry becomes more accessible for those who acquire computer hardware certifications. These certifications can showcase your expertise and proficiency in the upkeep of computers, mobile devices, printers and other hardware components.

Best Google Cloud certifications 

IT pros with solid cloud computing skills continue to be in high demand as more companies adopt cloud technologies. Today, Google Cloud is one of the market leaders in the cloud computing space. 

Regardless of where you are in your IT career, engaging with certification programs can demonstrate your willingness to keep on top of rapidly evolving cloud technologies. To that end, Google has introduced a host of certifications for its cloud platform, including the following: 

Best evergreen IT certifications

In the fast-changing world of technology, it can help to focus on certifications that have stood the test of time. “Evergreen” refers to certifications that remain popular year after year. 

The top evergreen certifications are based on exact pay surveys in IT, reports from IT professionals about certifications they want or pursue the most, and those that appear most frequently in online job postings. Obtaining these credentials is one step toward ensuring that your skills remain relevant for a long time: 

Best IT governance certifications 

IT governance provides structure for aligning a company’s IT with its business strategies. Organizations faced with compliance rigors always need experienced IT pros who can see the big picture and understand technology risks. This means certified IT governance professionals are likely to remain in high demand.

Earning one of the following certifications proves a commitment to understanding the role of IT governance and its position in a company’s current and future success. Getting certified can validate your expert knowledge and lead to advanced career opportunities.

Best system administrator certifications 

An IT system administrator is responsible for managing and maintaining the information technology infrastructure within an organization. The position demands sought-after career skills, ranging from configuring and maintaining servers and clients to managing access controls, network services, and addressing application resource requirements.

If you’re in charge of managing modern servers, there’s a long list of tools and technologies that system administrators must master. Obtaining some of the most prominent system administrator certifications can demonstrate your mastery to potential employers. 

Best ITIL certifications 

ITIL, or Information Technology Infrastructure Library, was developed to establish standardized best practices for IT services within government agencies. Over the ensuing four decades, businesses of all types embraced, modified, and extended ITIL, shaping it into a comprehensive framework for managing IT service delivery. 

The ITIL framework remains the benchmark for best practices in IT service and delivery management, offering certification programs that cater to IT professionals at all levels. These training and certification courses ensure that IT professionals stay well-prepared for the ongoing evolution in IT service delivery management. There are four certifications in the ITIL certification program:

Best enterprise architect certifications 

An IT enterprise architect is responsible for designing and managing the overall structure and framework of an organization’s information technology system. Enterprise architect certifications are among the highest that an IT professional can achieve; fewer than 1 percent ultimately reach this level. 

Enterprise architects are among the highest-paid employees and consultants in the tech industry. These certifications can put IT professionals on a path to many lucrative positions. The average worker earns over six figures annually. Some top enterprise architect certifications are listed below:

To become an enterprise IT architect, you’ll need knowledge of systems deployment, design and architecture, as well as a strong business foundation.

Best CompTIA certifications

CompTIA is a nonprofit trade association made up of more than 2,000 member organizations and 3,000 business partners. The organization’s vendor-neutral certification program is one of the best recognized in the IT industry. Since CompTIA developed its A+ credential in 1993, it has issued more than two million certifications.

CompTIA certifications are grouped by skill set and focus on the real-world skills IT professionals need. Armed with these credentials, you can demonstrate that you know how to manage and support IT infrastructure. 

Best Oracle certifications 

A longtime leader in database software, Oracle also offers cloud solutions, servers, engineered systems, storage, and more. The company has more than 430,000 customers in 175 countries. 

Today, Oracle’s training program offers six certification levels that span 16 product categories with more than 200 individual credentials. Considering the depth and breadth of this program — and the number of Oracle customers — it’s no surprise that Oracle certifications are highly sought after. 

Vendor-specific certifications address a particular vendor’s hardware and software. For example, you can pursue Oracle certifications and Dell certifications to become an expert in those companies’ environments.

Best business continuity and disaster recovery certifications

Business continuity and disaster recovery keep systems running and data available in the event of interruptions or faults. These programs bring systems back to normal operation after a disaster has occurred.

Business continuity and disaster recovery certifications are seeing a healthy uptrend as new cloud-based tools grow in popularity. While business continuity planning and disaster recovery planning have always been essential, they’re becoming more critical than ever — and IT certifications are following suit.

Tue, 02 Jan 2024 09:59:00 -0600 en text/html
Partnering for Sustainability: Cisco's Collaborative Approach

NORTHAMPTON, MA / ACCESSWIRE / January 3, 2024 / Cisco Systems Inc.
By Stacy Betts

Embracing sustainability and reducing our environmental footprint has been a longstanding priority at Cisco. For almost two decades, Cisco has set transparent, publicly declared objectives as benchmarks, diligently tracking our progress and holding ourselves accountable. Additionally, we've developed comprehensive programs to empower customers to achieve their sustainability goals.

We understand that sustainability is a collaborative effort, and success requires leveraging our extensive partner network. Collaboration is essential, and it's through working with our partners that we foster innovation and gain support across the value chain. To this end, Cisco has developed several sustainability-focused programs that enable partners to offer customers end-to-end solutions designed with sustainability in mind, while also enhancing deal profitability.

Net zero by 2040

Cisco has embarked on an ambitious journey towards sustainability, aiming to achieve net-zero status by the year 2040. This goal has not been mere words but supported by continuous improvement and innovation across our entire business landscape. Our primary focus has been on delivering tangible, data-validated advancements that lead us closer to the realization of all our sustainability goals, ultimately culminating in our net-zero goal.

These efforts have not gone unnoticed. The approval of our net-zero goal by Science Based Targets initiative (SBTi) stands as a testament to the robustness of our plan, the allocation of resources, and the soundness of our strategic approach. This validation confirms our determination to truly meet these targets, helping to forge a path towards a more sustainable future.

As for our partners, whether you are just starting this journey or already investing, there are four key Cisco programs to consider, through which we work together to meet our sustainability objectives.

Earn Your Cisco Environmental Sustainability Specialization

Launched in 2022, the Environmental Sustainability Specialization (ESS) equips partners with Cisco-specific sustainability knowledge. It covers key sustainability terms, the technology behind our Sustainable Solutions, Cisco's commitment to a circular economy, and supporting programs. Only one person in the company needs to complete this training and exam. For others in the partner organization, we have additional efforts to educate partner sellers on these topics. If you're not the one going through formal training, we'll summarize the partner programs you should leverage in this blog.

Leverage the Cisco Takeback & Reuse Program Plus Incentive

Cisco's Takeback and Reuse program is integral to CEO Chuck Robbins' commitment to reclaim 100% of customer gear at no cost while providing partners with discount incentives. This program is an important step towards a circular economy, ensuring the responsible end-of-life management of returned equipment, with a remarkable 99.9% material recycling or reuse success rate.

Partners benefit from this initiative through a stackable discount of up to 7% on Refresh deals, applied to new equipment when replacing older gear. To learn more, visit our Takeback and Reuse Program page. Please note that this incentive is exclusively available to partners with ESS certification and program enrollment, so ensure your company is specialized to take advantage of it.

Strategically Position Cisco Refresh

With Takeback products, we seize the opportunity to remanufacture gear based on their life stage, making them available through the Cisco Refresh program. This refurbished gear supports the circular economy, meeting rigorous quality and performance standards, and is readily available with no lead times. It's cost-effective and environmentally friendly, and has a lower carbon impact than purchasing newly manufactured products. Explore available products on the Cisco Refresh list - the more we take back, the more we can offer!

Utilize Cisco Green Pay

Cisco Green Pay, through Cisco Capital, offers a flexible payment plan for solutions designed with sustainability in mind, covering hardware, software, and services with a set contract term. At term's end, Cisco reclaims the hardware to support the circular economy, helping support a more sustainable lifecycle. Cisco's ownership guarantees gear return, providing a consistent refresh cycle and benefits akin to the Takeback program. All of this is offered to the customer, requiring minimal effort from partners. Plus, customers receive a 5% discount when opting for Green Pay.

Let's Get Started Helping the Planet Together!

Ready to begin? First, become specialized under the ESS and enroll in the Takeback Program. Inform your Cisco team of your interest. We have partner sustainability specialists to assist you in integrating sustainability into your sales approach and boosting your confidence in discussing your customers' sustainability goals. Prepare for these conversations by researching your customers' public sustainability goals on their websites.

Although we've made progress in reaching our sustainability goals, we recognize that much more work needs to be done to ensure that people and ecosystems can thrive together on a livable planet. There's no time like the present to get started.

For further information, visit our Environmental Sustainability Products and Solutions webpage or consult your Cisco team for specialist guidance.

View original content here.

View additional multimedia and more ESG storytelling from Cisco Systems Inc. on

Contact Info:
Spokesperson: Cisco Systems Inc.

SOURCE: Cisco Systems Inc.

View the original press release on

Tue, 02 Jan 2024 23:15:00 -0600 en-US text/html
Millions still haven’t patched Terrapin SSH protocol vulnerability
Millions still haven’t patched Terrapin SSH protocol vulnerability
Getty Images

Roughly 11 million Internet-exposed servers remain susceptible to a recently discovered vulnerability that allows attackers with a foothold inside affected networks. Once they're in, attackers compromise the integrity of SSH sessions that form the lynchpin for admins to securely connect to computers inside the cloud and other sensitive environments.

Terrapin, as the vulnerability has been named, came to light two weeks ago in a research paper published by academic researchers. Tracked as CVE-2023-48795, the attack the researchers devised works when attackers have an adversary-in-the-middle attack (also abbreviated as AitM and known as man-in-the-middle or MitM), such as when they’re positioned on the same local network and can secretly intercept communications and assume the identity of both the recipient and the sender.

In those instances, Terrapin allows attackers to alter or corrupt information transmitted in the SSH data stream during the handshake—the earliest connection stage, when the two parties negotiate the encryption parameters they will use to establish a secure connection. As such, Terrapin represents the first practical cryptographic attack targeting the integrity of the SSH protocol itself. It works by targeting BPP (Binary Packet Protocol), which is designed to ensure AitMs can’t add or drop messages exchanged during the handshake. This prefix truncation attack works when implementations support either the "ChaCha20-Poly1305" or "CBC with Encrypt-then-MAC," cipher modes, which, at the time the paper was published, was found in 77 percent of SSH servers.

Internet-wide scans performed Tuesday, the last day such data was available at the time of reporting, revealed that more than 11 million IP addresses exposing an SSH server remained vulnerable to Terrapin. Nearly a third of those addresses, 3.3 million, resided in the US, followed by China, Russia, Germany, Russia and Singapore. All of the unpatched implementations tracked by Shadowserver supported the required cipher modes.

Tree map for CVE-2023-48795.
Enlarge / Tree map for CVE-2023-48795.
World map of countries unpatched against CVE-2023-48795.
Enlarge / World map of countries unpatched against CVE-2023-48795.

Only 53 of the vulnerable instances relied on implementations of AsyncSSH, the only app currently known to be seriously affected by Terrapin. Two vulnerabilities the researchers discovered in AsyncSSH allowed Terrapin to (1) downgrade security extensions that organizations to replace the extension information message sent by the server, letting the attacker control its content or (2) control the remote end of an SSH client session by either injecting or removing packets or emulating the shell established. AsyncSSH has patched those two vulnerabilities, tracked as CVE-2023-46445 and CVE-2023-46446, in addition to CVE-2023-48795, the Terrapin vulnerability affecting the SSH protocol. It appears the overwhelming majority of AsyncSSH users have installed the patches.

The requirement of an AitM position and the lack of currently known practical attacks made possible by Terrapin are important mitigating factors that some critics say have been lost in some news coverage. That said, at this stage, there are few good reasons not to have patched the protocol flaw by now, since patches became widely available about one to two weeks ago.

“The attack requires quite a bit of complexity in that MitM is necessary, so that will limit practical application to more targeted attacks in our view,” Piotr Kijewski, a Shadowserer researcher, wrote in an email to Ars. “So unlikely to have this mass-exploited. Still, the sheer mass of vulnerable instances suggests this vulnerability will be with us for years to come and that in itself makes it attractive in some specific cases.”