QUESTION 21
Three application endpoint groups (EPGs) must be trunked using VLAN 1501 on leaf 101. Which set of actions completes the configuration?
A. Deploy the three EPGs on the same port on leaf 101.
Associate the three EPGs to the same bridge domains.
Set port scope to local.
Map the three EPGs to different physical domain.
B. Deploy the three EPGs on different ports on leaf 101.
Associate the three EPGs to different bridge domains.
Set port scope to local.
Map the three EPGs to the same physical domain.
C. Deploy the three EPGs on different ports on leaf 101.
Associate the three EPGs to different bridge domains.
Set port scope to global.
Map the three EPGs to the same physical domain.
D. Deploy the three EPGs on different ports on leaf 101.
Associate the three EPGs to different bridge domains.
Set port scope to local.
Map the three EPGs to different physical domain.
Correct Answer: B
QUESTION 22
Which type of MP-BGP address family is used to exchange MAC and IP address endpoint information between spines in two separate pods?
A. VNPv4
B. L2VPN
C. NSAP
D. IPv4
Correct Answer: B
QUESTION 23
Which two objects are part of a Cisco ACI contract? (Choose two.)
A. version
B. constraint
C. filter
D. subject
E. policy
Correct Answer: CD
QUESTION 24
Which service graph feature prevents redirection of traffic to a PBR node that is down?
A. node tracking
B. resilient hashing
C. health group
D. threshold
Correct Answer: C
QUESTION 25
Which IP address pool must be reachable across the backbone from the physical pod to the remote leaf?
A. seed pod external tunnel endpoint pool
B. seed pod tunnel endpoint pool
C. remote leaf external tunnel endpoint pool
D. remote leaf tunnel endpoint pool
Correct Answer: D
QUESTION 26
A company’s virtualization is hosted on a Nutanix infrastructure. The company has an Application Centric Infrastructure e virtual machine manager (VMM) integration with a Nutanix cluster. The existing mapping uses IP address management (IPAM) settings to enable the DHCP within Nutanix to allocate IP addresses. The company wants to change the settings of the EPG-10 VMM to EPG association and remove the DHCP functionality as it is not required. Which process accomplishes this goal?
A. Shutdown remaining VMs in the EPG-10.
Remove subnet association with the VMs NIC on the Nutanix cluster.
Remove VMM association from EPG-10.
Re-associate VMM to EPG-10 with IPAM option disabled.
Re-attach the VMs NIC back to the subnet EPG-10 on the Nutanix cluster.
Power on the VMs.
B. Shutdown remaining VMs in the EPG-10.
Disable IPAM functionality on VMM to EPG association.
Remove subnet association with the VMs NIC on the Nutanix cluster.
Re-attach the VMs NIC back to the subnet EPG-10 on the Nutanix cluster.
Power on the VMs.
C. Shutdown remaining VMs in the EPG-10.
Remove DHCP server override option from VMM to EPG association.
Remove subnet association with the VMs NIC on the Nutanix cluster.
Re-attach the VMs NIC back to the subnet EPG-10 on the Nutanix cluster.
Power on the VMs.
D. Shutdown remaining VMs in the EPG-10.
Remove subnet association with the VMs NIC on the Nutanix cluster.
Remove VMM association from EPG-10.
Re-associate VMM to EPG-10 with IPAM enabled and DHCP server override.
Re-attach the VMs NIC back to the subnet EPG-10 on the Nutanix cluster.
Power on the VMs.
Correct Answer: A
QUESTION 27
Which ACI import mode processes each managed object individually and skips the invalid MO?
A. replace
B. best-effort
C. merge
D. atomic
Correct Answer: B
QUESTION 28
An engineer configures two Cisco ACI objects:
1. Security domain Dom_1
2. Local user called User1
Which role privilege must be assigned to security domains so that User1 can access only policies for interface selectors?
A. nw-svc-devshare
B. fabric-connectivity-l1
C. access-connectivity-util
D. tenant-ext-protocol-l3
Correct Answer: B
QUESTION 29
A Cisco ACI fabric is built to monitor and manage APIC devices using SNMMP. Which action allows SNMP to receive traps from APIC controllers?
A. Permit UDP port 162 on the filter entry of the default subject.
B. Consume out-of-band contract from the common tenant.
C. Provide a standard contract under the management tenant.
D. Add a deny any rule under out-of-band contract.
Correct Answer: B
QUESTION 30
A Cisco ACI fabric must be integrated with the VMware environment. An ESXi host is not attached to the Distributed Virtual Switch (DVS). Two EPGs were created and associated with the VMM domain. An engineer was asked to configure the ACI environment to meet these requirements:
1. The EPG contract is pushed to ACI leafs after the ESXi host is attached to the DVs.
2. The EPG contract is pushed to the TCAMs only when two EPGs start to communicate.
Which immediacy settings accomplish these goals?
A. Resolution immediacy: Immediate
Deployment immediacy: Immediate
B. Resolution immediacy: Immediate
Deployment immediacy: On-Demand
C. Resolution immediacy: On-Demand
Deployment immediacy: On-Demand
D. Resolution immediacy: On-Demand
Deployment immediacy: Immediate
Correct Answer: C
QUESTION 31
A 200-node Cisco ACI fabric with dual-homed servers is being affected by a newly discovered vulnerability and must be upgraded within 15 days with minimum downtime. Which two actions accomplish this goal? (Choose two.)
A. Configure multiple schedulers to upgrade two update groups per evening.
B. Deregister the Cisco Nexus switches from the APIC and upgrade.
C. Automate the upgrade by upgrading the leaf switches directly bypassing the APIC.
D. Set the concurrent capacity of the update/maintenance group to 0.
E. Divide the ACI nodes into multiple odd/even update groups that contain no more than 10 nodes
Correct Answer: AE
QUESTION 32
A network engineer implements an L30ut inside the Cisco ACI fabric. The engineer plans to connect a Cisco ACI leaf switch to a switch outside of the Cisco ACI fabric to exchange routes via a routing protocol. The external switch interface is configured with IP address 192.168.15.1/30. The ACI engineer wants to use a routing protocol that uses a hierarchical network design. The Cisco ACI fabric should use the L3Out to access the Internet. Which set of steps must be taken to meet these requirements?
A. Set up the EIGRP Protocol policy with the selected Autonomous System number.
Configure an Interface policy and an External Bridged Domain.
Create an External Bridged Network using the configured VLAN pool.
Build the Leaf profile, selecting Routed Sub-Interface and the appropriate VLAN.
B. Set up the EIGRP Protocol policy with the selected Autonomous System number.
Set up the Routed External Network object and Node profile, selecting EIGRP.
Create the Switch profile, selecting VPC and the appropriate interfaces.
Create the default network and associate it with the Routed Outside object.
C. Set up the BGP Protocol policy with the appropriate Autonomous System number.
Create the Routed Outside object and Node profile, selecting BGP as the routing protocol.
Build the Interface profile, selecting SV and the appropriate VPC.
Configure the 0.0.0.0/32 network as part of the External Network object.
D. Configure the OSPF Protocol policy with an area of 0.
Create the Routed Outside object and Node profile, selecting OSPF as the routing protocol.
Build the Interface profiles, selecting Routed Interface and the appropriate interface.
Set up the External Network object with a network of 0.0.0.0/0.
Correct Answer: D
QUESTION 33
An engineer needs to avoid loops in the ACI network and needs an ACI leaf switch to error-disable an interface if the interface receives an ACI-generated packet. Which action meets these requirements?
A. Change the default administrative state of the global MCP Instance Policy.
B. Set Rogue EP Control in the Endpoint Controls Policy.
C. Uncheck the Loop Protection Action check box in MCP Instance Policy.
D. Enable the Loop Indication by MCP event in the Error Disabled Recovery Policy.
Correct Answer: A
QUESTION 34
A Cisco ACI fabric contains a tenant called Prod. User_1 must have write access to tenant Prod and full access to the fabric access policy. Which set of actions must be taken to meet these requirements?
A. Associate User 1 to tenant Prod.
Associate the security domain to the distinguished name of the fabric access policy.
Create RBAC for the distinguished name of security domain.
B. Associate User 1 to the fabric access policy.
Associate the security domain to the fabric access policy.
Create RBAC for the distinguished name of tenant Prod
C. Associate User 1 to the security domain.
Associate the security domain to tenant Prod.
Create RBAC for the distinguished name of fabric access policy.
D. Associate User_1 to the distinguished name of the fabric access policy.
Associate the security domain to RBAC
Create RBAC for the distinguished name of User 1.
Correct Answer: C
QUESTION 35
An engineer created a monitoring policy called Test in a Cisco ACI fabric and had to change the severity level of the monitored object Call home source. Which set of actions prevent the event from appearing in event reports?
A. Select Event Severity Assignment Policies.
Set severity level to squelched.
B. Select Event Severity Assignment Policies.
Set severity level to cleared.
C. Select Faults Severity Assignment Policies.
Set severity level to squelched.
D. Select Faults Severity Assignment Policies.
Set severity level to cleared.
Correct Answer: A
QUESTION 36
A Cisco ACI endpoint group must have its gateway address migrated out of the ACI fabric. An engineer configures EPG-TEST with a static port binding and configures the encap VLAN with the required VLAN. Which configuration set must be used on the bridge domain to meet these requirements?
A. L2 Unknown Unicast: Hardware Proxy
Unicast Routing: Disabled
ARP Flooding: Disabled
B. L2 Unknown Unicast: Hardware Proxy
Unicast Routing: Disabled
ARP Flooding: Enabled
C. L2 Unknown Unicast: Flood
Unicast Routing: Disabled
ARP Flooding: Enabled
D. L2 Unknown Unicast: Flood
Unicast Routing: Enabled
ARP Flooding: Enabled
Correct Answer: C
QUESTION 37
A network engineer must configure a new SNMP configuration and syslog servers. The requirement is for all faults and events related to endpoint groups, bridge domains, and VRFs to be sent to it. Which action must be taken to meet the requirements?
A. Enable access monitoring policies on the required endpoint groups, bridge domains, and VRFs.
B. Configure fabric monitoring policies and attach to the spine switch in the fabric.
C. Utilize common tenant monitoring policies in the Cisco APIC.
D. Implement fabric-wide monitoring policies on all nodes.
Correct Answer: C
QUESTION 38
What is the purpose of the Overlay Multicast TEP in a Cisco ACI Multi-Site deployment?
A. to source and receive unicast VXLAN data plane traffic
B. to perform head-end replication for BUM traffic
C. to encapsulate multicast traffic in a common multicast group
D. to establish MP-BGP EVPN adjacencies with the spine nodes in remote sites
Correct Answer: B
QUESTION 39
An engineer must configure a Layer 3 connection to the WAN router. The hosts in production VRF must access WAN subnets. The engineer associates EPGs in the production VRF with the external routed domain. Which action completes the task?
A. Configure the External Subnets for the External EPG scope for the external EPG.
B. Configure the Import Route Control Subnet scope for the external EPG.
C. Configure the Shared Route Control Subnet scope for the external EPG.
D. Configure the Export Route Control Subnet scope for the external EPG.
Correct Answer: A
QUESTION 40
Which protocol is used in a Multi-Pod topology to synchronize reachability information across pods?
A. COOP
B. OSPF
C. IS-IS
D. MP-BGP EVPN
Correct Answer: D