QUESTION 41
An engineer must configure a service graph for the policy-based redirect to redirect traffic to a transparent firewall. The policy must be vendor-agnostic to support any firewall appliance. Which two actions accomplish these goals? (Choose two.)

A. Set Managed to True.
B. Set Context Aware to Single.
C. Set Function Type to L2.
D. Set the Service Type to Other.
E. Set Promiscuous Mode to True.

Correct Answer: CD

QUESTION 42
An engineer discovered an outage on the mgmt0 port of Leaf113 and Leaf114. Both leaf switches were recently registered in the fabric and have health scores of 100. The engineer discovers there is no IP address assigned to the mgmt0 interface of the switches. Which action resolves the outage?

A. Enable Leaf113 and Leaf114 mgmt0 under the leaf switch.
B. Associate the oobbrc-default contract to Leaf113 and Leaf114.
C. Statically bind the mgmt0 interface of Leaf113 and Leaf114 to the oob-default EPG.
D. Add Leaf113 and Leaf114 to the node management address policy.

Correct Answer: D

QUESTION 43
An engineer plans a Cisco ACI firmware upgrade. The ACI fabric consists of three Cisco APIC controllers, two spine switches, and four leaf switches. Two leaf switches have 1-Gb copper ports for bare metal servers, and the other two leaf switches have 10-Gb SFP ports to connect storage. Which set of actions accomplishes an upgrade with minimal disruptions?

A. Upgrade the APIC controllers by selecting the desired firmware and choosing Upgrade Now.
Divide the switches into two upgrade groups: spines and leaves.
Start the firmware upgrade on the spine upgrade group and then proceed with the leaf upgrade group.
B. Upgrade the APIC controllers by initiating the upgrade process that uses the most recent uploaded firmware.
Divide the switches into three upgrade groups: spines, 1-Gb switches, and 10-Gb switches.
Start the firmware upgrade on the spine upgrade group and then proceed with the other two groups.
C. Upgrade the APIC controllers as a single group by selecting the firmware and choosing Upgrade Now.
Divide the switches into four upgrade groups with one switch per group.
Start the firmware upgrade on each upgrade group in succession until all four are complete.
D. Upgrade the APIC controllers by selecting the desired firmware and choosing Upgrade Now.
Divide the switches into two upgrade groups with one spine, one 1-Gb switch, and one 10-Gb switch per group.
Start the firmware upgrade on the first upgrade group and when it finishes, start the second upgrade group.

Correct Answer: D

QUESTION 44
A Cisco ACI fabric must send a packet between two pods in a Cisco ACI Multi-Pod topology where ARP flooding is disabled within the bridge domain. How does a Cisco ACI spine switch forward ARP messages from a leaf switch in POD1 to POD2?

A. A proxy ARP message is sent to destination group 225.224.0.0.
B. An ARP Glean message is sent to multicast address 239.255.255.240.
C. The ARP message is dropped and connectivity is lost between the endpoints.
D. ARP optimization is applied and sends ARP to remote anycast.

Correct Answer: B

QUESTION 45
A Cisco ACI fabric is integrated with VMware VDS. The fabric must apply a security policy to check the integrity of traffic out of the network adapter. Which action must be taken to drop the packet when the ESXi host discovers a mismatch between the actual source MAC address transmitted by the guest operating system and the effective MAC address of the virtual machine adapter?

A. Reject MAC changes.
B. Accept MAC changes.
C. Accept forged transmits.
D. Reject forged transmits.

Correct Answer: D

QUESTION 46
An engineer must attach an ESXi host to the Cisco ACI fabric. The host is connected to Leaf 1 and has its gateway IP address 10.10.10.254/24 configured inside the ACI fabric. A new firewall is attached to Leaf 2 and mapped to the same EPG and BD as the ESXi host. The engineer must migrate the gateway of the ESXi host to the firewall. Which configuration set accomplishes this goal?

A. Enable unicast routing.
Configure IP address 10.10.10.254/24 on the ACI EPG.
B. Enable unicast routing.
Set IP address 10.10.10.254/24 on the firewall.
C. Disable unicast routing.
Configure IP address 10.10.10.254/24 on the ACI BD.
D. Disable unicast routing.
Define IP address 10.10.10.254/24 on the firewall.

Correct Answer: D

QUESTION 47
A Cisco ACI leaf switch learns the source IP address of a packet that enters the front panel port of the switch. Which bridge domain setting is used?

A. L3 Unknown Multicast Flooding – Flood
B. L2 Unknown Unicast – Hardware proxy
C. ARP Flooding
D. Unicast Routing

Correct Answer: D

QUESTION 48
An engineer must configure SNMP inside a Cisco ACI fabric. The engineer has created an SNMP Policy, called SNMP-policy and an SNMMP Monitoring Group called SNMP-group1 that contains five trap receivers. Which configuration set completes the configuration?

A. Allow all OOB management traffic.
Configure three trap receivers on SNMP-group1.Permit
B. Permit OOB management traffic using UDP port 161.
Associate client group policy with the OOB management EPG.
C. Create an OOB management contract.
Include the SNMP server in the OOB management EPG.
D. Edit oobbrc to permit traffic using UDP port 16.
Associate the client group policy to SNMP-group1.

Correct Answer: B

QUESTION 49
An engineer resolves an underlying condition of a fault but notices that the fault was not deleted from the Faults view. Which two actions must be taken to remove the fault? (Choose two.)

A. The fault is deleted after the retention interval.
B. Faults are never deleted from the system.
C. The raised condition ceases.
D. The soaking timer expires.
E. Acknowledge the fault as an administrator.

Correct Answer: AE

QUESTION 50
A network engineer configured a Cisco ACI fabric as follows:
1. An EPG called EPG-A is created and associated with a VMM domain called North.
2. The EPG-Ais associated with BD-A and is in an application profile called Apps-A
3. The BD-A is associated with VRF-1 in the Prod tenant.

Which port group must be selected to place VMs in EPG-A?

A. Prod|Apps-A|EPG-A
B. Prod|Apps-A|North|EPG-A
C. Prod|Business_Apps|BD-A|EPG-A
D. Prod|VRF-1[Apps-A|EPG-A

Correct Answer: A

QUESTION 51
How many ARP requests are sent from leaf switches to perform host tracking for local endpoints?

A. 1
B. 2
C. 3
D. 4

Correct Answer: C

QUESTION 52
Which Cisco ACI setting corresponds to the VMware MAC pinning?

A. route based on originating virtual port
B. route based on physical NIC load
C. route based on IP hash
D. route based on MAC hash

Correct Answer: A

QUESTION 53
A Cisco ACI fabric has L3Out using BGP with the maximum number of BGP prefixes configured as 1000. The fabric must raise the fault when 1001 prefixes are learned and the prefix 1002must not be learned. Which BGP peer prefix action accomplishes this goal?

A. Restart
B. Log
C. Shutdown
D. Reject

Correct Answer: D

QUESTION 54
Which service graph option creates a permit entry for the traffic from the provider EPG to the provider connector of the PBR node?

A. promiscuous mode
B. single context aware
C. share encap
D. direct connect

Correct Answer: D

QUESTION 55
A Cisco ACI fabric must be integrated with a VMware vSphere environment. One of the ESXi hosts is still disconnected from the Distributed Virtual Switch (DVS) and the VMM domain. Two EPGs have already been created and associated with the VMM domain. An engineer must prepare the ACI configuration such that:
1. EPG contracts must be sent to ACI leaf switches before a hypervisor is attached to the DVS.
2. EPG contracts must be pushed to leaf hardware as soon as the policy is downloaded into the leaf software.

Which EPG configuration must be used to meet these requirements?

A. Resolution immediacy: On-Demand
Deployment immediacy: Immediate
B. Resolution immediacy: Pre-provision
Deployment immediacy: Immediate
C. Resolution immediacy: On-Demand
Deployment immediacy: On-Demand
D. Resolution immediacy: Pre-provision
Deployment immediacy: On-Demand
Correct Answer: B

QUESTION 56
Which resolution immediacy setting allows a policy to be downloaded to the Cisco ACl leaf switch software regardless of CDP/LLDP neighborship?

A. Expedite
B. Pre-Provision
C. On Demand
D. Immediate

Correct Answer: B

QUESTION 57
What is a characteristic of a Cisco ACI Multi-Site?

A. It adds a third Cisco ACI site that requires using of full mesh cabling connectivity between spines.
B. It manages the separate deployed Cisco ACI fabrics with a single common Cisco APIC cluster.
C. MP-BGP EVPN sessions are established between leafs deployed in separate fabrics.
D. It eliminates the need to deploy multicast in a Layer 3 network that interconnects the fabrics.

Correct Answer: D

QUESTION 58
What is the function of an HTTP GET request during Cisco ACI fabric discovery?

A. It allows neighbor discovery of leaf switches.
B. It assigns VTEP IPs to leaf switches.
C. It pushes policy elements from Cisco APIC to leaf switches.
D. It downloads firmware image on leaf switches.

Correct Answer: D

QUESTION 59
Which two settings are available in a Cisco ACI contract? (Choose two.)

A. subject
B. policy
C. constraint
D. version
E. scope

Correct Answer: AE

QUESTION 60
A network engineer is configuring syslogs in the Cisco ACI environment with these requirements:
1. All message severities must be logged except for debugging messages.
2. Messages must be compliant with RFC 5424 format.
3. Logs must be saved only in a file on the APIC.

Which settings must be used in the Syslog Monitoring Destination Group to meet these requirements?

A. Format: ACI
Local File Destination Admin State: Enabled
Severity: Notifications
Console Destination Admin State: Disabled
B. Format: NX-OS
Local File Destination Admin State: Disabled
Severity: Emergencies
Console Destination Admin State: Enabled
C. Format: NX-OS
Local File Destination Admin State: Disabled
Severity: Alerts
Console Destination Admin State: Enabled
D. Format: ACI
Local File Destination Admin State: Enabled
Severity: Information
Console Destination Admin State: Disabled

Correct Answer: D