QUESTION 161
An engineer must integrate Cisco ACI with a VMware Sphere environment. The requirement is to use a VMware Distributed Virtual Switch and to assign the encapsulation VLAN of the EPG from the VLAN pool. Which configuration set accomplishes this goal?

A. Create a physical domain association under the EPGs.
Create a VLAN pool with dynamic allocated VLANs.
B. Create a VMM domain association under the EPGs.
Create a VLAN pool with dynamic allocated VLANs.
C. Create a VMM domain association under the EPGs.
Create a VLAN pool with static allocated VLANs.
D. Create a physical domain association under the EPGs.
Create a VLAN pool with static allocated VLANs.

Correct Answer: B

QUESTION 162
An engineer must automate the provisioning of Cisco ACI objects using the Terraform tool. The engineer must ensure that APIC counts the authentication login requests against the threshold to avoid a DOS attack. Which configuration must be used in Terraform to accomplish these goals?

A. resources with user ID and password
B. resources with signature-based authentication
C. provider with user ID and password
D. provider with signature-based authentication

Correct Answer: D

QUESTION 163
An engineer implements an Application Performance Monitoring (APM) solution. The solution runs in a Sphere infrastructure where the Switch support for promiscuous mode is disabled for security reasons. As a result, the final implementation must receive a copy of bidirectional traffic to a load balancer that is connected to a Cisco Nexus 93108 Series Switch. The APM solution supports GRE encapsulated traffic. Which configuration must be applied to the switch to meet this requirement?

A. interface ethernet 1/9
erspan-id 1
monitor session 1 type erspan-source
interface mgmt0
monitor session 1 type erspan-destination
destination ip 10.1.1.1
no shut
B. interface vlan1
switchport monitor
destination ip 10.1.1.1
exit
monitor session 1 rx
monitor session 1 tx
source interface ethernet1/9
C. configure terminal
monitor session 1 type erspan-source
erspan-id 1
destination ip 10.1.1.1
source interface ethernet 1/9 both
vrf default
no shut
D. monitor session 1 both
source interface ethernet 1/9
destination interface ethernet 1/12
erspan-id 1
vrt mgmto
filter vlan 3
no shut

Correct Answer: C

QUESTION 164
An engineer implements an ACI fabric and must implement microsegmentation of endpoints within the same IP subnet using a network-based attribute. The attribute mapping must allow IP subnet independence. Which attribute must be selected?

A. tag
B. custom
C. MAC address
D. IP

Correct Answer: C

QUESTION 165
An engineer must configure OSPF in the data center. The external routes have already been redistributed into OSPF. The network must meet these criteria:
1. The data center servers must reach services in the cloud and the services behind the redistributed routes.
2. The exit point toward the Internet should be propagated only when there is a dynamically learned default route from the upstream router.

Which feature is required?

A. totally stubby area
B. default-information originate
C. stubby area
D. default-information originate always

Correct Answer: B

QUESTION 166
A DNS server with IP address 192.168.1.1 is deployed in a data center. A network engineer must configure a Cisco UCS Fabric Interconnect to use this DNS. Which configuration should be applied?

A. ficl-mgmt-A# scope fabric-interconnect a
ficl-mgmt-A /fabric-interconnect # set name 192.168.1.1
ficl-mgmt-A /fabric-interconnect* # commit-buffer
B. ficl-mgmt-A# scope fabric-interconnect a
ficl-mgmt-A /fabric-interconnect # set name 192.168.1.1
ficl-mgmt-A /fabric-interconnect # scope system
ficl-mgmt-A /system # commit-buffer
C. ficl-mgmt-A# scope system
ficl-mgmt-A /system # create dns 192.168.1.1
ficl-mgmt-A /system* # commit-buffer
D. ficl-mgmt-A# scope system
ficl-mgmt-A /system # scope services
ficl-mgmt-A /system/services # create dns 192.168.1.1
ficl-mgmt-A /system/services* # commit-buffer

Correct Answer: D

QUESTION 167
A network architect must redesign a data center network based on OSPFv2. The network must perform fast reconvergence between directly connected switches. Which two actions must be taken to meet the requirements? (Choose two.)

A. Set low OSPF hello and DEAD timers.
B. Configure all links on AREA 0.
C. Use OSPF point-to point links only.
D. Implement a virtual link between the switches.
E. Enable BFD for failure detection.

Correct Answer: CE

QUESTION 168
An engineer is implementing a Cisco ACI fabric and must use static VLAN range as part of a MM deployment. The static VLAN must be incorporated into the dynamic VLAN pool. The existing VLAN pool is set for dynamic allocation. Which action accomplishes this goal?

A. Add the VLAN to the pool configured with Inherit Allocation Mode from parent.
B. Create a static reservation within the dynamic VLAN pool.
C. Change the existing VLAN pool to static allocation mode.
D. Add a static VLAN allocation range to the VLAN pool.

Correct Answer: D

QUESTION 169
An engineer configured an environment that contains the vPC and non-vPC switches. However, it was noticed that the downstream non-vPC switches do not receive the same STP bridge ID from the upstream vPC switch peers. Which vPC feature must be implemented to ensure that vPC and non-vPC switches receive the same STP bridge ID from the upstream vPC switch peers?

A. peer-gateway
B. peer-switch
C. system-mac 0123.4567.89ab
D. vpc local role-priority 4000

Correct Answer: B

QUESTION 170
An engineer is designing a cloud solution for an organization. The security requirements mandate that the cloud must be hosted in a local data center but leverage the remote data center tor remote backups .Additionally, the workloads in the data center must be scaled out to a known cloud provider in the future. Which cloud deployment model must be used to meet these requirements?

A. edge cloud
B. public cloud
C. hybrid cloud
D. private cloud

Correct Answer: C

QUESTION 171
A DevOps engineer must use Python to manage a Cisco device. The device is in a highly secure DMZ environment. Only trusted Cisco Python libraries can be used. Which solution meets the requirements?

A. Develop an off-box Python script that uses trusted Cisco libraries.
B. Develop a containerization application that uses trusted Cisco-provided libraries.
C. Develop an on-box Python script that uses trusted Cisco libraries.
D. Develop an application by using serverless technologies in a primary cloud provider.

Correct Answer: C

QUESTION 172
A network engineer repeatedly saves a configuration on Catalyst switches to NVRAM using the write memory command. What action should be taken to implement the same action on Nexus switches?

A. Use the wri command to use the copy running-config startup-config command.
B. Use the exit command to leave the configuration mode and save the configuration automatically.
C. Use the write memory command to save the configuration.
D. Use the alias command to use the write memory command.

Correct Answer: D

QUESTION 173
Which feature of Cisco Nexus Dashboard permits users to switch between site controllers of Cisco ACI?

A. air-gap support
B. cloud-site onboarding
C. multifactor authentication
D. single sign-on

Correct Answer: D

QUESTION 174
An engineer must back up the Cisco UCS Manager configuration to a remote server. The backup job must meet these requirements:
1. The backup must use the TCP protocol and be secure.
2. Client identification does not need to be verified before data is transmitted.
3. The backup must contain the system configuration, including usernames, roles, and locales.
4. The operations team requires that the backup file is in a human-readable format.

Which set of configurations should the engineer use?

A. Type: Full state
Protocol: SCP
B. Type: All configuration
Protocol: SCP
C. Type: Logical configuration
Protocol: SFTP
D. Type: System configuration
Protocol: SFTP

Correct Answer: B

QUESTION 175
An engineer installed a new Nexus switch with the mgm0 interface in vrf management. Connectivity to the rest of the network needs to be tested from the guest shell of the NX-OS. Winch command tests connectivity from the guest shell of the NX-OS?

A. [guestshell@guestshell ~]$ chvrf management ping 173.37.145.84
B. [guestshell@guestshell ~]$ ping vrf management ip 173.37.145.84
C. [guestshell@guestshell ~]$ ping 173.37.145.84 vrf management
D. [guestshell@guestshell ~]$ dohost “ping vrf management 173.37.145.84”

Correct Answer: A

QUESTION 176
An engineer requires the Cisco Fabric Services to distribute NTP configuration only to the members within the scope of a VSAN that belongs to a Cisco Unified Network. Which scope distribution must be selected to meet this requirement?

A. Coordinated scope
B. Logical scope
C. Physical scope
D. Uncoordinated scope

Correct Answer: B

QUESTION 177
An engineer is using REST API calls to configure the Cisco APIC. Which data structure must be used within a POST message to receive a login token?

A. <aaaUser><name>apiuser</name><pwd>cisco123</pwd></aaaUser>
B. {“aaaUser”:{“attributes”:{“name”:”apiuser”,”pwd”:”cisco123″}}}
C. <aaaUser><name=”apiuser”/><pwd=”cisco123″/></aaaUser>
D. {aaaUser:{attributes:{name: apiuser, pwd:cisco123}}}

Correct Answer: B

QUESTION 178
A Cisco MDS 9000 Series Switch must automatically learn about devices and switches connected to a fibre channel interface. However, a conflicting entry exists in the configuration database. Which set of actions activates the configuration database?

A. Enforce port security.
Disable auto-learning.
B. Disable port security.
Lock down the fabric.
C. Activate port security.
Enable auto-learning.
D. Enable auto-learning.
Activate port security.

Correct Answer: D

QUESTION 179
An engineer must configure an ERSPAN on a Cisco Nexus 9000 Series Switch where all traffic originates from a specific IP address. The traffic must be forwarded to a network analyzer connected to eth1/10 on the Nexus switch. Which configuration set accomplishes this goal?

A. monitor session 1 type erspan-destination
erspan-id 1
source ip 10.10.10.10
destination interface eth1/10
no shut
B. monitor session 1 rx
source ip address 10.10.10.10
destination interface eth1/10
no shut
C. monitor session 1 type erspan-source
erspan-id 1
source ip 10.10.10.10
source interface eth1/10
no shut
D. monitor session 1 rx
source interface all rx
destination interface eth1/10
no shut

Correct Answer: A

QUESTION 180
An engineer is configuring a Switched Port Analyzer (SPAN) session on a Cisco Unified Computing System to monitor traffic from the network adapter of a UCS chassis and send the monitored traffic to an external network analyzer. Which set of actions must be taken to accomplish the goal?

A. Configure the Ethernet port channel associated with the chassis adapter as the SPAN source, select the virtual host bus adapter of a service profile as the destination, and specify management traffic only.
B. Configure the unified uplink port as the SPAN source, configure an unconfigured physical Ethernet port as the destination, and filter for admin speed traffic.
C. Configure the virtual network interface card of a service profile as the SPAN source, direct the destination to a Fibre Channel storage port, and filter for all traffic.
D. Configure the network adapter as the SPAN source, configure an unconfigured physical Ethernet port as the destination, and enable traffic monitoring session.

Correct Answer: D