Question 1

Which new construct must a user create when configuring in-band management?

Accepted Answer

A)  VLAN pool 
B)  management contract 
C)  management tenant 
D)  bridge domain 
A)  VLAN pool 
B)  management contract 
C)  management tenant 
D)  bridge domain

Question 2

Where is the COOP database located?

Accepted Answer

A)  leaf 
B)  spine 
C)  APIC 
D)  endpoint 
A)  leaf 
B)  spine 
C)  APIC 
D)  endpoint

Question 3

How is an EPG extended outside of the ACI fabric?

Accepted Answer

A)  Create an external bridged network that is assigned to a leaf port. 
B)  Create an external routed network that is assigned to an EPG. 
C)  Enable unicast routing within an EPG. 
D)  Statically assign a VLAN ID to a leaf port in an EPG. 
A)  Create an external bridged network that is assigned to a leaf port. 
B)  Create an external routed network that is assigned to an EPG. 
C)  Enable unicast routing within an EPG. 
D)  Statically assign a VLAN ID to a leaf port in an EPG.

Question 4

An engineer is creating a configuration import policy that must terminate if the imported configuration is incompatible with the existing system. Which import mode achieves this result?

Accepted Answer

A)  merge 
B)  atomic 
C)  best effort 
D)  replace 
A)  merge 
B)  atomic 
C)  best effort 
D)  replace

Question 5

When the subnet is configured on a bridge domain, on which physical devices is the gateway IP address configured?

Accepted Answer

A)  all leaf switches and all spine nodes 
B)  only spine switches where the bridge domain of the tenant is present 
C)  only leaf switches where the bridge domain of the tenant is present 
D)  all border leaf nodes where the bridge domain of the tenant is present 
A)  all leaf switches and all spine nodes 
B)  only spine switches where the bridge domain of the tenant is present 
C)  only leaf switches where the bridge domain of the tenant is present 
D)  all border leaf nodes where the bridge domain of the tenant is present

Question 6

Which two statements regarding ACI Multi-Site are true? (Choose two.)

Accepted Answer

A)  The Multi-Site orchestrator must be directly attached to one ACI leaf. 
B)  Routers in the Inter-Site network must run OSPF, DHCP relay, and MP-BGP. 
C)  ACI Multi-Site is a solution that supports a dedicated APIC cluster per site. 
D)  ACI Multi-Site is a solution that allows one APIC cluster to manage multiple ACI sites. 
E)  The Inter-Site network routers should run OSPF to establish peering with the spines. 
A)  The Multi-Site orchestrator must be directly attached to one ACI leaf. 
B)  Routers in the Inter-Site network must run OSPF, DHCP relay, and MP-BGP. 
C)  ACI Multi-Site is a solution that supports a dedicated APIC cluster per site. 
D)  ACI Multi-Site is a solution that allows one APIC cluster to manage multiple ACI sites. 
E)  The Inter-Site network routers should run OSPF to establish peering with the spines.

Question 7

Which two components are essential parts of a Cisco ACI Virtual Machine Manager (VMM) domain policy configuration? (Choose two.)

Accepted Answer

A)  Layer 3 outside interface association 
B)  EPG static port binding 
C)  VMM domain profile 
D)  EPG association 
E)  IP address pool association 
A)  Layer 3 outside interface association 
B)  EPG static port binding 
C)  VMM domain profile 
D)  EPG association 
E)  IP address pool association

Question 8

Which attribute should be configured for each user to enable RADIUS for external authentication in Cisco ACI?

Accepted Answer

A)  cisco-security domain 
B)  cisco-auth-features 
C)  cisco-aci-role 
D)  cisco-av-pair 
A)  cisco-security domain 
B)  cisco-auth-features 
C)  cisco-aci-role 
D)  cisco-av-pair

Question 9

An engineer is implementing a connection that represents an external bridged network. Which two configurations are used? (Choose two.)

Accepted Answer

A)  Layer 2 remote fabric 
B)  Layer 2 outside 
C)  Layers 2 internal 
D)  Static path binding 
E)  VXLAN outside 
A)  Layer 2 remote fabric 
B)  Layer 2 outside 
C)  Layers 2 internal 
D)  Static path binding 
E)  VXLAN outside

Question 10

A data center administrator is upgrading an ACI fabric. There are 3 APIC controllers in the fabric and all the servers are dual-homed to pairs of leaf switches configured in VPC mode. How should the fabric be upgraded to minimize possible traffic impact during the upgrade?

Accepted Answer

A)  1. Create two maintenance groups for the APIC controllers: VPC left and VPC right. 2. Upgrade the first group of controllers. 3. Upgrade the second group of controllers. 4. Upgrade the leaf switches. 
B)  1. Create two maintenance groups for APIC controllers: VPC left and VPC right. 2. Upgrade the leaf switches. 3. Upgrade the first group of controllers. 4. Upgrade the second group of controllers. 
C)  1. Create two maintenance groups for the leaf switches: VPC left and VPC right. 2. Upgrade the APIC controllers. 3. Upgrade the first group of leaf switches. 4. Upgrade the second group of leaf switches. 
D)  2. Upgrade the first group of switches. 3. Upgrade the second group of switches. 4. Upgrade the APIC controllers. 
A)  1. Create two maintenance groups for the APIC controllers: VPC left and VPC right. 2. Upgrade the first group of controllers. 3. Upgrade the second group of controllers. 4. Upgrade the leaf switches. 
B)  1. Create two maintenance groups for APIC controllers: VPC left and VPC right. 2. Upgrade the leaf switches. 3. Upgrade the first group of controllers. 4. Upgrade the second group of controllers. 
C)  1. Create two maintenance groups for the leaf switches: VPC left and VPC right. 2. Upgrade the APIC controllers. 3. Upgrade the first group of leaf switches. 4. Upgrade the second group of leaf switches. 
D)  2. Upgrade the first group of switches. 3. Upgrade the second group of switches. 4. Upgrade the APIC controllers.

Question 11

A Solutions Architect is asked to design two data centers based on Cisco ACI technology that can extend L2/L3, VXLAN, and network policy across locations. ACI Multi-Pod has been selected. Which two requirements must be considered in this design? (Choose two.)

Accepted Answer

A)  ACI underlay protocols, i.e. COOP, IS-IS and MP-BGP, spans across pods. Create QoS policies to make sure those protocols have higher priority. 
B)  A single APIC Cluster is required in a Multi-Pod design. It is important to place the APIC Controllers in different locations in order to maximize redundancy and reliability. 
C)  ACI Multi-Pod requires an IP Network supporting PIM-Bidir. 
D)  ACI Multi-Pod does not support Firewall Clusters across Pods. Firewall Clusters should always be local. 
E)  Multi-Pod requires multiple APIC Controller Clusters, one per pod. Make sure those clusters can communicate to each other through a highly available connection. 
A)  ACI underlay protocols, i.e. COOP, IS-IS and MP-BGP, spans across pods. Create QoS policies to make sure those protocols have higher priority. 
B)  A single APIC Cluster is required in a Multi-Pod design. It is important to place the APIC Controllers in different locations in order to maximize redundancy and reliability. 
C)  ACI Multi-Pod requires an IP Network supporting PIM-Bidir. 
D)  ACI Multi-Pod does not support Firewall Clusters across Pods. Firewall Clusters should always be local. 
E)  Multi-Pod requires multiple APIC Controller Clusters, one per pod. Make sure those clusters can communicate to each other through a highly available connection.

Question 12

An ACI administrator notices a change in the behavior of the fabric. Which action must be taken to determine if a human intervention introduced the change?

Accepted Answer

A)  Inspect event records in the APIC UI to see all actions performed by users. 
B)  Inspect /var/log/audit_messages on the APIC to see a record of all user actions. 
C)  Inspect audit logs in the APIC UI to see all user events. 
D)  Inspect the output of show command history in the APIC CLI. Inspect the output of show command history in the APIC CLI. 
A)  Inspect event records in the APIC UI to see all actions performed by users. 
B)  Inspect /var/log/audit_messages on the APIC to see a record of all user actions. 
C)  Inspect audit logs in the APIC UI to see all user events. 
D)  Inspect the output of show command history in the APIC CLI. Inspect the output of show command history in the APIC CLI.

Question 13

Refer to the exhibit. A client reports that the ACI domain connectivity to the fiber channel storage is experiencing a B2B credit oversubscription. The environment has a SYSLOG server for state collection messages. Which value should be chosen to clear the critical fault?

Accepted Answer

A)  300 
B)  410 
C)  350 
D)  510 
A)  300 
B)  410 
C)  350 
D)  510

Question 14

What must be enabled in the bridge domain to have the endpoint table learn the IP addresses of endpoints?

Accepted Answer

A)  L2 unknown unicast: flood 
B)  GARP based detection 
C)  unicast routing 
D)  subnet scope 
A)  L2 unknown unicast: flood 
B)  GARP based detection 
C)  unicast routing 
D)  subnet scope

Question 15

Refer to the exhibit. An engineer configures the Cisco ACI fabric for VMM integration with ESXi servers that are to be connected to the ACI leaves. The server team requires the network switches to initiate the LACP negotiation as opposed to the servers. The LAG group consists of two 10 Gigabit Ethernet links. The server learn also wants to evenly distribute traffic across all available links. Which two enhanced LAG policies meet these requirements? (Choose two.)

Accepted Answer

A)  LACP Mode: LACP Standby 
B)  LB Mode: Destination IP Address and TCP/UDP Port 
C)  LB Mode: Source and Destination MAC Address 
D)  LB Mode: Source IP Address and TCP/UDP Port 
E)  LACP Mode: LACP Active 
A)  LACP Mode: LACP Standby 
B)  LB Mode: Destination IP Address and TCP/UDP Port 
C)  LB Mode: Source and Destination MAC Address 
D)  LB Mode: Source IP Address and TCP/UDP Port 
E)  LACP Mode: LACP Active

Question 16

Refer to the exhibit. An engineer is integrating a VMware vCenter with Cisco ACI VMM domain configuration. ACI creates port-group names with the format of "Tenant | Application | EPG". Which configuration option is used to generate port groups with names formatted as "Tenant=Application=EPG"?

Accepted Answer

A)  enable tag collection 
B)  security domains 
C)  delimiter 
D)  virtual switch name 
A)  enable tag collection 
B)  security domains 
C)  delimiter 
D)  virtual switch name

Question 17

Refer to the exhibit. An engineer is implementing Cisco ACI - VMware vCenter integration for a blade server that lacks support of bonding. Which port channel mode results in "route based on originating virtual port" on the VMware VDS?

Accepted Answer

A)  Static Channel - Mode On 
B)  MAC Pinning-Physical-NIC-load 
C)  LACP Passive 
D)  MAC Pinning+ 
E)  LACP Active 
A)  Static Channel - Mode On 
B)  MAC Pinning-Physical-NIC-load 
C)  LACP Passive 
D)  MAC Pinning+ 
E)  LACP Active

Question 18

An engineer configures a Multi-Pod system with the default getaway residing outside of the ACI fabric for a bridge domain. Which setting should be configured to support this requirement?

Accepted Answer

A)  disable Limit IP Learning to Subnet 
B)  disable IP Data-plane Learning 
C)  disable Unicast Routing 
D)  disable Advertise Host Routes 
A)  disable Limit IP Learning to Subnet 
B)  disable IP Data-plane Learning 
C)  disable Unicast Routing 
D)  disable Advertise Host Routes

Question 19

What does a bridge domain represent?

Accepted Answer

A)  Layer 3 cloud 
B)  Layer 2 forwarding construct 
C)  tenant 
D)  physical domain 
A)  Layer 3 cloud 
B)  Layer 2 forwarding construct 
C)  tenant 
D)  physical domain

Question 20

Which setting prevents the learning of Endpoint IP addresses whose subnet does not match the bridge domain subnet?

Accepted Answer

A)  "Limit IP learning to network" setting within the bridge domain. 
B)  "Limit IP learning to subnet" setting within the EPG. 
C)  "Limit IP learning to network" setting within the EPG. 
D)  "Limit IP learning to subnet" setting within the bridge domain. 
A)  "Limit IP learning to network" setting within the bridge domain. 
B)  "Limit IP learning to subnet" setting within the EPG. 
C)  "Limit IP learning to network" setting within the EPG. 
D)  "Limit IP learning to subnet" setting within the bridge domain.

Exam 19: Configuring Cisco MDS 9000 Series Switches (DCSAN)

Which new construct must a user create when configuring in-band management?

Where is the COOP database located?

How is an EPG extended outside of the ACI fabric?

An engineer is creating a configuration import policy that must terminate if the imported configuration is incompatible with the existing system. Which import mode achieves this result?

When the subnet is configured on a bridge domain, on which physical devices is the gateway IP address configured?

Which two statements regarding ACI Multi-Site are true? (Choose two.)

Which two components are essential parts of a Cisco ACI Virtual Machine Manager (VMM) domain policy configuration? (Choose two.)

Which attribute should be configured for each user to enable RADIUS for external authentication in Cisco ACI?

An engineer is implementing a connection that represents an external bridged network. Which two configurations are used? (Choose two.)

A data center administrator is upgrading an ACI fabric. There are 3 APIC controllers in the fabric and all the servers are dual-homed to pairs of leaf switches configured in VPC mode. How should the fabric be upgraded to minimize possible traffic impact during the upgrade?

A Solutions Architect is asked to design two data centers based on Cisco ACI technology that can extend L2/L3, VXLAN, and network policy across locations. ACI Multi-Pod has been selected. Which two requirements must be considered in this design? (Choose two.)

An ACI administrator notices a change in the behavior of the fabric. Which action must be taken to determine if a human intervention introduced the change?

Refer to the exhibit. A client reports that the ACI domain connectivity to the fiber channel storage is experiencing a B2B credit oversubscription. The environment has a SYSLOG server for state collection messages. Which value should be chosen to clear the critical fault?

What must be enabled in the bridge domain to have the endpoint table learn the IP addresses of endpoints?

Refer to the exhibit. An engineer is integrating a VMware vCenter with Cisco ACI VMM domain configuration. ACI creates port-group names with the format of "Tenant | Application | EPG". Which configuration option is used to generate port groups with names formatted as "Tenant=Application=EPG"?

Refer to the exhibit. An engineer is implementing Cisco ACI - VMware vCenter integration for a blade server that lacks support of bonding. Which port channel mode results in "route based on originating virtual port" on the VMware VDS?

An engineer configures a Multi-Pod system with the default getaway residing outside of the ACI fabric for a bridge domain. Which setting should be configured to support this requirement?

What does a bridge domain represent?

Which setting prevents the learning of Endpoint IP addresses whose subnet does not match the bridge domain subnet?

Supporting Cisco Data Center System Devices (DCTECH)

Cisco Certified Technician Routing & Switching (RSTECH)

Understanding Cisco Cybersecurity Operations Fundamentals (CBROPS)

Cisco Certified Network Associate (CCNA)

Managing Industrial Networks with Cisco Networking Technologies (IMINS)

DevNet Associate (DEVASC)

Conducting Forensic Analysis and Incident Response Using Cisco CyberOps Technologies (CBRFIR)

Implementing Cisco Enterprise Advanced Routing and Services (ENARSI)

Implementing Cisco SD-WAN Solutions (ENSDWI)

Designing Cisco Enterprise Networks (ENSLD)

Designing Cisco Enterprise Wireless Networks (300-425 ENWLSD)

Implementing Cisco Enterprise Wireless Networks (300-430 ENWLSI)

Automating Cisco Enterprise Solutions (ENAUTO)

Implementing Cisco Service Provider Advanced Routing Solutions (SPRI)

Implementing Cisco Service Provider VPN Services (SPVI)

Designing Cisco Data Center Infrastructure (DCID)

Troubleshooting Cisco Data Center Infrastructure (DCIT)

Implementing Cisco Application Centric Infrastructure (DCACI)

Implementing Cisco Application Centric Infrastructure - Advanced

Automating Cisco Data Center Solutions (DCAUTO)

Securing Networks with Cisco Firepower (300-710 SNCF)

Implementing and Configuring Cisco Identity Services Engine (300-715 SISE)

Securing Email with Cisco Email Security Appliance (300-720 SESA)

Securing the Web with Cisco Web Security Appliance (300-725 SWSA)

Implementing Secure Solutions with Virtual Private Networks (SVPN 300-730)

Automating Cisco Security Solutions (SAUTO)

Implementing Cisco Collaboration Applications (CLICA)

Implementing Cisco Advanced Call Control and Mobility Services (CLASSM)

Implementing Cisco Collaboration Cloud and Edge Solutions

Implementing Cisco Collaboration Conferencing

Automating Cisco Collaboration Solutions (CLAUTO)

Implementing DevOps Solutions and Practices using Cisco Platforms (DEVOPS)

Developing Solutions Using Cisco IoT and Edge Platforms (DEVIOT)

Developing Applications for Cisco Webex and Webex Devices (DEVWBX)

Performing CyberOps Using Core Security Technologies (CBRCOR)

Implementing Cisco Enterprise Network Core Technologies (ENCOR)

Implementing and Operating Cisco Service Provider Network Core Technologies (SPCOR)

Implementing and Operating Cisco Data Center Core Technologies (DCCOR)

Implementing and Operating Cisco Security Core Technologies

Implementing Cisco Collaboration Core Technologies (CLCOR)

Developing Applications using Cisco Core Platforms and APIs (DEVCOR)

CCDE Design Written

Deploying Cisco Unified Contact Center Express

Cisco Meraki Solutions Specialist

Securing Cisco Networks with Sourcefire FireAMP Endpoints

Designing Cisco Unified Contact Center Enterprise (UCCED)

Implementing and Supporting Cisco Unified Contact Center Enterprise (UCCEIS)

Cisco Collaboration SaaS Authorization Exam

Cisco Security Architecture for System Engineers

Adopting The Cisco Business Architecture Approach (DTBAA)

Cisco Customer Success Manager (CSM)

Mastering The Cisco Business Architecture Discipline (DTBAD)

Filters