QUESTION 61
Which endpoint type is used when the entries are pushed down from the COOP database of the spine switches to the ACI leaf switches?
A. on-peer
B. local
C. remote
D. bounce entry
Correct Answer: D
QUESTION 62
Which requirement must be met for the inter-pod network when connecting a remote leaf to a Cisco Application Centric Infrastructure fabric?
A. border gateway protocol underlay for VTEP reachability
B. dynamic host configuration protocol relay configuration on the upstream router
C. less than 150ms end-to-end latency
D. multicast bidirectional PIM support
Correct Answer: C
QUESTION 63
Which Cisco ACI import mode reverts the entire shard to its original state when a single fault appears?
A. Best-effort
B. Atomic
C. Merge
D. Replace
Correct Answer: B
QUESTION 64
An engineer must configure a one-time backup for a Cisco APIC cluster. Which two actions accomplish this goal? (Choose two.)
A. Configure Global AES Encryption.
B. Create a remote location.
C. Create a snapshot of the configuration.
D. Create a configuration export policy.
E. Configure the TFTP server.
Correct Answer: BD
QUESTION 65
What is a requirement for Cisco ACI IPN to manage multidestination traffic?
A. unicast routing
B. anycast gateway
C. multicast routing
D. pervasive gateway
Correct Answer: C
QUESTION 66
An engineer must add new servers to a Cisco ACI cluster and configure ports to accept the new servers. The existing servers are dual-homed to Leaf101 and Leaf102 using ports 1-3 and an interface policy group called cluster1_ifpg. The new servers must use ports 1 and 2 on Leaf103 and Leaf104. Which two actions must be taken to enable the ports with the same configuration as the existing servers in the cluster? (Choose two.)
A. Use interface selector for cluster1_infpg.
B. Connect with interface selector using a new AEP.
C. Select ports 1 and 2 using interface selectors.
D. Configure interface selector using a new interface policy group.
E. Attach interface selectors to leaf profiles Leaf103 and Leaf104.
Correct Answer: CE
QUESTION 67
An SNMP monitoring service is added to a Cisco ACI fabric. The solution must meet these requirements:
1. The notification must be generated when significant events occur during hardware-related events.
2. The notification system must be redundant by using multiple servers to receive the notifications.
Which set of actions meets these requirements?
A. Define an SNMP policy with community policies in the Fabric Policies section under the Fabric tab.
Implement an SNMP Client Group Profile.
B. Configure an SNMP policy with community policies in the Tenant section of the common tenant.
Link the SNMP policy to the common tenant in the Monitoring Policies section under the Fabric tab.
C. Configure an SNMP Monitoring Destination Group.
Define an SNMP source by using the previously defined group in the Access Policies section under the Fabric tab
D. Implement an SNMP Monitoring Destination Group.
Associate the SNMP policy to the desired pod in the Pod Policies section under the Fabric tab.
Correct Answer: D
QUESTION 68
An engineer must adjust the time on a Cisco ACI fabric. The implementation must use a single external time server and the APIC management interfaces for the communication. Which action accomplishes this goal?
A. Set the NTP provider in default Date and Time policy.
B. Set the NTP provider minimum polling interval to 1.
C. Enable the Date and Time offset state in the system settings.
D. Create a contract in the management tenant to allow UDP port 123.
Correct Answer: A
QUESTION 69
ln a Cisco ACI fabric, an endpoint moves between two leaf switches during a virtual machine migration. Which action does Cisco ACI take to minimize the impact to traffic during this event?
A. A new leaf switch sends a COOP message directly to the old leaf switch to update it with new information about the endpoint move.
B. A new leaf switch updates a COOP database on the spine, which causes the old leaf switch to install a bounce entry.
C. A new leaf switch sends a COOP message to the Cisco APIC cluster to populate a new location of the endpoint.
D. A new leaf switch floods GARP to every other leaf switch in the fabric, which advertises a new endpoint location to the fabric.
Correct Answer: B
QUESTION 70
Which two external entities are referenced by an AEP? (Choose two.)
A. VMware vCenter server
B. Fibre Channel switch
C. Hypervisor
D. VMM domain
E. Layer 3 domain
Correct Answer: DE
QUESTION 71
For which type of endpoint entry does a Cisco ACI leaf switch keep the original TEP source address instead of rewriting the outer source IP address to its TEP address?
A. remote entry
B. bounce entry
C. local entry
D. COOP entry
Correct Answer: B
QUESTION 72
What is the result of selecting the On Demand attribute in the Deploy Immediacy feature during VMM domain association to an EPG?
A. The EPG policy is downloaded to the leaf when a hypervisor is connected, and a VM is placed in a port group.
B. The EPG policy is programmed in the hardware policy CAM only when the first packet is received through the data path.
C. The EPG policy is programmed in the hardware policy CAM as soon as the policy is downloaded in the leaf software.
D. The EPG policy is downloaded to the leaf when a hypervisor is attached to a DVS, and CDP or LLDP adjacency is formed.
Correct Answer: B
QUESTION 73
A network engineer must optimize a Cisco ACI multi-pod deployment. Both pods are using the same pod policy group. The customer requirement is to avoid inter-pod traffic loss in case of planned or unplanned spine reload. Which action accomplishes this goal?
A. Configure the COOP type as compatible in COOP Group Policy.
B. Configure all spines as Route Reflectors in the BGP Route Reflector Policy.
C. Configure MACsec in the MACsec Fabric Interface Policy.
D. Configure a lower IS-IS metric for redistributed routes in ISIS Policy.
Correct Answer: B
QUESTION 74
A Cisco ACI fabric is connected to an external Cisco Catalyst switch. Which set of actions must be taken for Cisco ACI leaf and spine switches to be managed from the management port?
A. Provide default/mgmt contract by external management network under tenant common.
Consume default/mgmt contract by out-of-band EPG.
B. Provide default/common contract by out-of-band EPG.
Consume default/common contract by external management network under tenant mgmt.
C. Provide default/common contract by external management network under tenant mgmt.
Consume default/common contract by out-of-band EPG.
D. Provide default/mgmt contract by out-of-band EPG
Consume default/mgmt contract by external management network under tenant common.
Correct Answer: B
QUESTION 75
A Cisco ACI fabric is experiencing packet loss that originates from a bare metal server. The engineer must configure the syslog service to meet these requirements:
1. The ACI syslog information must be collected with logging information from other network devices.
2. The monitoring must only be performed on leaf 103 and leaf 104.
Which set of actions accomplishes these goals?
A. Configure the Syslog Monitoring Destination Group to Local File logging.
Create a Fabric Monitoring policy for ingress and egress bytes.
Apply the Monitoring policy to the appropriate Switch Profile group.
B. Configure the Syslog Monitoring Destination Group to Console logging.
Create a Fabric-Wide Monitoring policy for ingress packet drops.
Apply the Monitoring policy to the appropriate Switch Profile group.
C. Configure the Syslog Monitoring Destination Group to Console logging.
Create an Access Monitoring policy for egress packet drops.
Apply the Monitoring policy to the appropriate Switch Profile group.
D. Configure the Syslog Monitoring Destination Group to remote server logging.
Create an Access Monitoring policy for ingress and egress packet drops.
Apply the Monitoring policy to the appropriate Switch Profile group.
Correct Answer: D
QUESTION 76
An engineer must implement user activity tracking in the Cisco ACI with a solution that meets these requirements:
1. All user activity that is related to the Cisco ACI infrastructure hardware must be tracked.
2. All audit logs with severity level 5 and below must be collected and exported.
3. Logs must be exported to a Security Information and Event Management (SIM) appliance.
Which set of steps must be taken?
A. Create a Syslog Monitoring Destination Group with Console Destination.
Create a System-level Syslog Source under the Monitoring section of the System Tab.
Select Session Logs and a severity level of Warning.
B. Create a Syslog Monitoring Destination Group with a remote destination of the SIEM device.
Create a Fabric-level Syslog Source under the Monitoring section of the Fabric Tab
Select Audit Logs and a severity level of Notification.
C. Create a Syslog Monitoring Destination Group with a remote destination of the SIEM device
Create a Tenant-level Syslog Source under the Monitoring section of the Tenant Tab
Select Audit Logs and a severity level of Warning.
D. Create a Syslog Monitoring Destination Group with a Local File destination
Create an Access-level Syslog Source under the Monitoring section of the Fabric Tab.
Select Fault Logs and a severity level of Notification.
Correct Answer: B
QUESTION 77
An engineer must integrate a Cisco ACI fabric with VMware and discover an ESXi host using LLDP. Two EPGs have been created and associated with the VMM domain. The engineer must configure the ACI such that contracts are pushed to the ACI leaf switches when the VM is mapped to EPG and the contracts are removed when LLDP is disabled. Which configuration must be selected to meet these requirements?
A. Resolution immediacy: Immediate
B. Resolution immediacy: On-Demand
C. Deployment immediacy: On-Demand
D. Deployment immediacy: Immediate
Correct Answer: D
QUESTION 78
An engineer is configuring a new user account in Cisco ACI. The new user will be assigned the role of fabric administrator. The fabric has only one tenant, so the engineer associated the new user account with a security domain for the tenant, as well as the security domain for the management tenant. Which configuration permits the new user with admin access to the fabric?
A. Bind the security domain infra to the new user account.
B. Grant the new user R/W access to the user and management tenant.
C. Add the DN uni/fabric under explicit rules.
D. Associate the new user with the security domain all.
Correct Answer: D
QUESTION 79
An engineer must monitor a Cisco ACI fabric with SNMP. The “permit any contract” attribute is not configured in the fabric. Which action must be taken to receive SNMP traps from Cisco APIC?
A. Provide a standard contract under the user tenant
B. Consume the inband contract from the out-of-band EPG.
C. Configure the OOB contract under the common tenant.
D. Add the UDP filter port 162 to the existing OOB contract.
Correct Answer: D
QUESTION 80
When Layer 3 routed traffic is destined to a Cisco ACI fabric, which mechanism does ACI use to detect silent hosts?
A. gratuitous ARP
B. ARP gleaning
C. inverse ARP
D. proxy ARP
Correct Answer: B