QUESTION 1
What are two main use cases for implementing a remote leaf topology in a Cisco Application Centric Infrastructure fabric? (Choose two.)

A. to replace Cisco fabric extenders
B. to enable centralized management
C. to build active/active data centers
D. to enforce consistent policy
E. to provide domain failure isolation

Correct Answer: CD

QUESTION 2
Which set of actions is recommended to upgrade a Cisco ACI fabric from an old to a new software release?

A. Disable All App center on APIC.
Import configuration for backup.
B. Disable AES encryption.
Export configuration for backup.
C. Enable All App center on APIC.
Import configuration for backup.
D. Enable AES encryption.
Export configuration for backup.

Correct Answer: D

QUESTION 3
What are two dependencies of the Inter-Site Network (ISN) to support a Multi-Site deployment?

A. latency of 150 msec or less
MP-BGP route peering on the ISN
B. ISN MTU of 1600 bytes
routed subinterfaces on the ISN
C. ISN MTU of 9000 bytes
DHCP relay on the ISN
D. latency of 50 msec or less
multicast routing over the ISN

Correct Answer: A

QUESTION 4
An EPG is associated with a VMM domain. Which option must be set to allow the bridge domain and the VRF of the EPG to be instantiated on the leaf only when the virtual switch is associated with a hypervisor and a VMNIC connected to the leaf switch?

A. On-Demand Resolution immediacy
B. On-Demand Deployment immediacy
C. Immediate Resolution immediacy
D. Immediate Deployment immediacy

Correct Answer: B

QUESTION 5
A network engineer must configure MCP on Cisco ACI to err-disable port 1/1 on Leaf101 when receiving 5 continuous looped packets. Which configuration accomplishes this goal?

A. Check box of loop protection action.
Set Loop Detect Multiplication Factor to 5.
B. Uncheck box of loop protection action.
Set Transmission Frequency to 5.
C. Check box of loop protection action.
Set Transmission Frequency to 5.
D. Uncheck box of loop protection action.
Set Loop Detect Multiplication Factor to 5.

Correct Answer: A

QUESTION 6
A network engineer is implementing a Layer 3 0ut in the Cisco ACI fabric. The data center core switches must connect to a pair of leaf switches and exchange routes via a routing protocol. ln addition, the implementation must meet these criteria:
1. The external switch interface must use 802.1Q tagging.
2. Access to the internet for the ACI fabric must be the L3Out.
3. The L3Out must use a routing protocol that has rapid convergence time and low CPU usage.

Which configuration set meets these requirements?

A. Implement the IS-IS Protocol policy with the selected Autonomous System number.
Create the Routed Outside object and Node Profile and select IS-IS.
Configure the Interface profile and select the Routed Interface with the appropriate interfaces.
Create the External Network object.
B. Configure the BGP Protocol policy with the appropriate Autonomous System number.
Configure an Interface policy and an External Bridged Domain.
Create an External Bridged Network and use the configured VLAN pool.
Build the Leaf profile and select the Routed sub-interface with the appropriate VLAN.
C. Implement the EIGRP Protocol policy with the selected Autonomous System number.
Create Routed Outside object and Node Profile and select EIGRP as the routing protocol.
Build the Interface profile and select SVI and the appropriate VPC.
Configure the External Network object with a network of 0.0.0.0/0.
D. Configure the OSPF Protocol policy with an area of 0.
Set up the Routed External Network object and Node Profile and select OSPF.
Create the Switch profile and select VPC with the appropriate interfaces.
Create the default network and associate it with the Routed Outside object.

Correct Answer: C

QUESTION 7
What is a remote leaf data plane tunnel endpoint IP address?

A. unique IP address assigned to spine switches when the endpoints are connected with vPC
B. unique IP address assigned to remote leaf switches when the endpoints are connected without vPC
C. unique IP address assigned to spine switches when the endpoints are connected without vPC
D. unique IP address assigned to remote leaf switches when the endpoints are connected with vPC

Correct Answer: D

QUESTION 8
A Cisco ACI fabric must be managed so that all fabric switches belong in subnet 10.43.145.0/26 and have a gateway IP of 10.43.145.63. Additionally, only IP addresses of 192.168.1.9 and 192.168.1.10 must be able to access the fabric from outside. External management network instance profiles named Ext_Mgmt and out-of-band contract OOB_CTR are created. Which two actions must the engineer take to meet these requirements? (Choose two.)

A. Add subnets 192.168.1.8/30 under External network instance profile.
B. Set Gateway IP of switches on In-Bridge domain subnet under Tenant Management.
C. Configure 192.168.1.8/29 on default bridge domain subnet under Tenant Common.
D. Add out-of-band lPv4 address 10.43.145.0/26 under Tenant Management.
E. Consume contract OOB-CTR under management network instance profile Ext_Mgmt.

Correct Answer: DE

QUESTION 9
What is a seed pod in a Cisco Multi-Pod setup?

A. last pod to be brought up using traditional bring-up procedure
B. first pod to be brought up using Automatic procedure
C. first pod to be brought up using traditional bring-up procedure
D. last pod to be brought up using Automatic procedure

Correct Answer: C

QUESTION 10
Which requirement must be met to successfully import a Cisco Application Centric Infrastructure (ACI) backup to a new ACI fabric when the backup was created with global encryption enabled?

A. The new fabric must be configured with global encryption using the same passphrase.
B. The mode selection when importing the configuration must be set to replace.
C. The AES keys must be exported from the old fabric and imported into the new fabric.
D. The passphrase used to encrypt the backup must be specified during the import operation.

Correct Answer: D

QUESTION 11
An engineer configures an L3Out in VRF-1 that was configured for Import Route Control Enforcement. The L3Out uses OSPF to peer with a core switch. The L3Out has one external EPG, and it has been configured with a subnet 10.1.0.0/24. Which scope must be set to force 10.1.0.0/24 to populate in the routing table for VRF-1?

A. Shared Route for External EPG
B. Import Route Control Subnet
C. External Subnet for External EPG
D. Export Route Control Subnet

Correct Answer: B

QUESTION 12
Which protocol must be used to securely export ACI configuration backup to a remote location?

A. SFTP
B. SMB
C. NFS
D. FTPS

Correct Answer: A

QUESTION 13
A retail company must configure an RBAC policy for Cisco ACI that allows its users to perform these tasks:
1. View the status of the switches in the fabric and replace any switch from the fabric, but not allow the user to access any information about services configured on any ports.
2. Create or modify any VLAN pool but not allow the user to associate it to a physical or external domain or change any existing associations.

Which set of privileges must be included in a custom RBAC role to accomplish these tasks?

A. access-protocol
access-equipment
B. tenant-connectivity
fabric-protocol
C. access-equipment
fabric-connectivity
D. fabric-equipment
access-connectivity

Correct Answer: C

QUESTION 14
A company is running a multi-pod environment across two data centers and wants to expand to co-locations. Which solution extends the application centric infrastructure (ACI) policy with minimum investment?

A. new leaf switches to be used in a remote-leaf architecture
B. dedicated equipment to extend the existing multi-pod
C. dedicated equipment for a new site in a multi-site deployment
D. dedicated equipment for a dedicated ACI fabric

Correct Answer: B

QUESTION 15
How does a Cisco ACI fabric update endpoint information when an endpoint transitions between two Cisco ACI leaf switches?

A. The spine switch pushes all endpoint database entries to each leaf switch.
B. COOP creates a bounce entry in the new leaf instead of data plane learning.
C. The new leaf updates the COOP database on spine switches with the new endpoint.
D. The original leaf reports the move to the COOP database on spine switches.

Correct Answer: C

QUESTION 16
A Cisco ACI fabric has detected EP1 with IP address 192.168.1.1 to MAC M1 on interfaceEth1/1. The fabric is designed so that when EP1 is down, a new EP2 receives the same IP address with a different MAC M2 on the same interface Eth1/1. Which two features must be enabled to meet this requirement? (Choose two.)

A. EPG Flood in Encapsulation
B. L3 Unknown Multicast Optimized Flood
C. GARP Based Detection
D. L2 Unknown Unicast Hardware Proxy
E. ARP Flooding

Correct Answer: CE

QUESTION 17
An EPG is associated with a VMM domain. Which option must be set to allow the bridge domain and the VRF of the EPG to be instantiated on all leaf switches that discovered the ESXi host?

A. Immediate Resolution immediacy
B. On-Demand Resolution immediacy
C. Immediate Deployment immediacy
D. On-Demand Deployment immediacy

Correct Answer: C

QUESTION 18
Which function does spine switch perform in the Cisco ACI fabric?

A. It connects to classic Ethernet devices in the multitier topology.
B. It bridges tenant packets for applying network policies.
C. It decapsulates VXLAN packets received from leaf switches.
D. It stores all the entries of endpoints-to-VTEP mapping.

Correct Answer: C

QUESTION 19
On which endpoint type is the host tracking feature performed in the Cisco ACI fabric?

A. remote endpoint
B. local endpoint
C. bounce entry endpoint
D. on-peer endpoint

Correct Answer: B

QUESTION 20
An engineer wants to record the login and configuration change events in a Cisco ACI environment The requirements are to send the records to a syslog server, but to exclude fabric-related or tenant-related events. Which action accomplishes this goal?

A. Configure the forwarding facility of the remote destination in the external data collectors to local7.
B. Configure the default monitoring policy in the access policies to include the audit logs.
C. Configure the syslog source Min Severity to the information level in the access policy.
D. Configure the local file destination severity to debugging level in the external data collectors.

Correct Answer: C