Question 1

Which type of profile needs to be created to deploy an access port policy group?

Accepted Answer

A)  attachable entity 
B)  Pod 
C)  module 
D)  leaf interface 
A)  attachable entity 
B)  Pod 
C)  module 
D)  leaf interface

Question 2

Which components must be configured for the BGP Route Reflector policy to take effect?

Accepted Answer

A)  spine fabric interface overrides and profiles 
B)  access policies and profiles 
C)  pod policy groups and profiles 
D)  leaf fabric interface overrides and profiles 
A)  spine fabric interface overrides and profiles 
B)  access policies and profiles 
C)  pod policy groups and profiles 
D)  leaf fabric interface overrides and profiles

Question 3

An engineer must limit management access to the Cisco ACI fabric that originates from a single subnet where the NOC operates. Access should be limited to SSH and HTTPS only. Where should the policy be configured on the Cisco APIC to meet the requirements?

Accepted Answer

A)  policy in the management tenant 
B)  ACL on the console interface 
C)  ACL on the management interface of the APIC 
D)  policy on the management VLAN 
A)  policy in the management tenant 
B)  ACL on the console interface 
C)  ACL on the management interface of the APIC 
D)  policy on the management VLAN

Question 4

An engineer is extending an EPG out of the ACI fabric using static path binding. Which statement about the endpoints is true?

Accepted Answer

A)  Endpoints must connect directly to the ACI leaf port. 
B)  External endpoints are in a different bridge domain than the endpoints in the fabric. 
C)  Endpoint learning encompasses the MAC address only. 
D)  External endpoints are in the same EPG as the directly attached endpoints. 
A)  Endpoints must connect directly to the ACI leaf port. 
B)  External endpoints are in a different bridge domain than the endpoints in the fabric. 
C)  Endpoint learning encompasses the MAC address only. 
D)  External endpoints are in the same EPG as the directly attached endpoints.

Question 5

On which two interface types should a user configure storm control to protect against broadcast traffic? (Choose two.)

Accepted Answer

A)  APIC facing interfaces 
B)  port channel on a single leaf switch 
C)  all interfaces on the leaf switches in the fabric 
D)  endpoint-facing trunk interface 
E)  fabric uplink interfaces on the leaf switches 
A)  APIC facing interfaces 
B)  port channel on a single leaf switch 
C)  all interfaces on the leaf switches in the fabric 
D)  endpoint-facing trunk interface 
E)  fabric uplink interfaces on the leaf switches

Question 6

What are two requirements for the IPN network when implementing a Multi-Pod ACI fabric? (Choose two.)

Accepted Answer

A)  EIGRP routing 
B)  PIM ASM multicast routing 
C)  BGP routing 
D)  VLAN ID 4 
E)  OSPF routing 
A)  EIGRP routing 
B)  PIM ASM multicast routing 
C)  BGP routing 
D)  VLAN ID 4 
E)  OSPF routing

Question 7

Which statement regarding ACI Multi-Pod and TEP pool is true?

Accepted Answer

A)  The IP addresses used in the IPN network can overlap TEP pool of the APIC. 
B)  A different TEP pool must be assigned to each Pod. 
C)  The Pod1 TEP pool must be split and a portion of the TEP pool allocated to each Pod. 
D)  The same TEP pool is used in all Pods. 
A)  The IP addresses used in the IPN network can overlap TEP pool of the APIC. 
B)  A different TEP pool must be assigned to each Pod. 
C)  The Pod1 TEP pool must be split and a portion of the TEP pool allocated to each Pod. 
D)  The same TEP pool is used in all Pods.

Question 8

An engineer needs to deploy a leaf access port policy group in ACI Fabric to support the following requirements: Control the amount of application data flowing into the system Allow the newly connected device to auto-negotiate link speed with the leaf switch Which two ACI policies must be configured to achieve these requirements? (Choose two.)

Accepted Answer

A)  link level policy 
B)  L2 interface policy 
C)  slow drain policy 
D)  ingress data plane policing policy 
E)  ingress control plane policing policy 
A)  link level policy 
B)  L2 interface policy 
C)  slow drain policy 
D)  ingress data plane policing policy 
E)  ingress control plane policing policy

Question 9

Which protocol does ACI use to securely sane the configuration in a remote location?

Accepted Answer

A)  SCP 
B)  HTTPS 
C)  TFTP 
D)  FTP 
A)  SCP 
B)  HTTPS 
C)  TFTP 
D)  FTP

Question 10

A situation causes a fault to be raised on the APIC. The ACI administrator does not want that fault to be raised because it is not directly relevant to the environment. Which action should the administrator take to prevent the fault from appearing?

Accepted Answer

A)  Under System -> Faults , right-click on the fault and select Acknowledge Fault so that acknowledged faults will immediately disappear. Under System -> Faults , right-click on the fault and select Acknowledge Fault so that acknowledged faults will immediately disappear. 
B)  Create a stats threshold policy with both rising and falling thresholds defined so that the critical severity threshold matches the squelched threshold. 
C)  Under System -> Faults , right-click on the fault and select Ignore Fault to create a fault severity assignment policy that hides the fault. Ignore Fault to create a fault severity assignment policy that hides the fault. 
D)  Create a new global health score policy that ignores specific faults as identified by their unique fault code. 
A)  Under System -> Faults , right-click on the fault and select Acknowledge Fault so that acknowledged faults will immediately disappear. Under System -> Faults , right-click on the fault and select Acknowledge Fault so that acknowledged faults will immediately disappear. 
B)  Create a stats threshold policy with both rising and falling thresholds defined so that the critical severity threshold matches the squelched threshold. 
C)  Under System -> Faults , right-click on the fault and select Ignore Fault to create a fault severity assignment policy that hides the fault. Ignore Fault to create a fault severity assignment policy that hides the fault. 
D)  Create a new global health score policy that ignores specific faults as identified by their unique fault code.

Question 11

What happens to the traffic flow when the Cisco ACI fabric has a stale endpoint entry for the destination endpoint?

Accepted Answer

A)  The leaf switch does not learn the source endpoint through data plane learning. 
B)  The leaf switch drops the traffic that is destined to the endpoint. 
C)  The leaf switch floods the traffic to the endpoint throughout the fabric. 
D)  The leaf switch sends the traffic to the wrong destination leaf. 
A)  The leaf switch does not learn the source endpoint through data plane learning. 
B)  The leaf switch drops the traffic that is destined to the endpoint. 
C)  The leaf switch floods the traffic to the endpoint throughout the fabric. 
D)  The leaf switch sends the traffic to the wrong destination leaf.

Question 12

Which description regarding the initial APIC cluster discovery process is true?

Accepted Answer

A)  The APIC uses an internal IP address from a pool to communicate with the nodes. 
B)  Every switch is assigned a unique AV by the APIC. 
C)  The APIC discovers the IP address of the other APIC controllers by using Cisco Discovery Protocol. 
D)  The ACI fabric is discovered starting with the spine switches. 
A)  The APIC uses an internal IP address from a pool to communicate with the nodes. 
B)  Every switch is assigned a unique AV by the APIC. 
C)  The APIC discovers the IP address of the other APIC controllers by using Cisco Discovery Protocol. 
D)  The ACI fabric is discovered starting with the spine switches.

Question 13

An engineer configured Layer 2 extension from the ACI fabric and changed the Layer 2 unknown unicast policy from Flood to Hardware Proxy. How does this change affect the flooding of the L2 unknown unicast traffic?

Accepted Answer

A)  It is forwarded to one of the spines to perform as a spine proxy. 
B)  It is flooded within the whole fabric. 
C)  It is dropped by the leaf when the destination endpoint is not present in the endpoint table. 
D)  It is forwarded to one of the APICs to perform as a proxy. 
A)  It is forwarded to one of the spines to perform as a spine proxy. 
B)  It is flooded within the whole fabric. 
C)  It is dropped by the leaf when the destination endpoint is not present in the endpoint table. 
D)  It is forwarded to one of the APICs to perform as a proxy.

Question 14

Which two actions extend a Layer 2 domain beyond the ACI fabric? (Choose two.)

Accepted Answer

A)  extending the routed domain out of the ACI fabric 
B)  creating a single homed Layer 3 Out 
C)  creating an external physical network 
D)  extending the bridge domain out of the ACI fabric 
E)  extending the EPG out of the ACI fabric 
A)  extending the routed domain out of the ACI fabric 
B)  creating a single homed Layer 3 Out 
C)  creating an external physical network 
D)  extending the bridge domain out of the ACI fabric 
E)  extending the EPG out of the ACI fabric

Question 15

Which two types of interfaces are supported on border leaf switches to connect to an external router? (Choose two.)

Accepted Answer

A)  subinterface with VXLAN tagging 
B)  subinterface with 802.1Q tagging 
C)  FEX host interface 
D)  out of band interface 
E)  Switch Virtual Interface 
A)  subinterface with VXLAN tagging 
B)  subinterface with 802.1Q tagging 
C)  FEX host interface 
D)  out of band interface 
E)  Switch Virtual Interface

Question 16

When creating a subnet within a bridge domain, which configuration option is used to specify the network visibility of the subnet?

Accepted Answer

A)  limit IP learning to subnet 
B)  scope 
C)  gateway IP 
D)  subnet control 
A)  limit IP learning to subnet 
B)  scope 
C)  gateway IP 
D)  subnet control

Question 17

Which endpoint learning operation is completed on the egress leaf switch when traffic is received from an L3Out?

Accepted Answer

A)  The source MAC and IP address of the traffic is learned as a local endpoint. 
B)  The source MAC address of the traffic is learned as a remote endpoint. 
C)  No source MAC or IP address of the traffic is learned as a remote endpoint. 
D)  The source IP address of the traffic is learned as a remote endpoint. 
A)  The source MAC and IP address of the traffic is learned as a local endpoint. 
B)  The source MAC address of the traffic is learned as a remote endpoint. 
C)  No source MAC or IP address of the traffic is learned as a remote endpoint. 
D)  The source IP address of the traffic is learned as a remote endpoint.

Question 18

Which statement about ACI syslog is true?

Accepted Answer

A)  Notifications for different scopes of syslog objects can be sent only to one destination. 
B)  Syslog messages are sent to the destination through the spine. 
C)  All syslog messages are sent to the destination through APIC. 
D)  Switches send syslog messages directly to the destinations. 
A)  Notifications for different scopes of syslog objects can be sent only to one destination. 
B)  Syslog messages are sent to the destination through the spine. 
C)  All syslog messages are sent to the destination through APIC. 
D)  Switches send syslog messages directly to the destinations.

Question 19

An engineer is implementing Cisco ACI at a large platform-as-a-service provider using APIC controllers, 9396PX leaf switches, and 9336PQ spine switches. The leaf switch ports are configured as IEEE 802.1p ports. Where does the traffic exit from the EPG in IEEE 802.1p mode in this configuration?

Accepted Answer

A)  from leaf ports tagged as VLAN 0 
B)  from leaf ports untagged 
C)  from leaf ports tagged as VLAN 4094 
D)  from leaf ports tagged as VLAN 1 
A)  from leaf ports tagged as VLAN 0 
B)  from leaf ports untagged 
C)  from leaf ports tagged as VLAN 4094 
D)  from leaf ports tagged as VLAN 1

Question 20

A RADIUS user resolves its role via the Cisco AV Pair. What object does the Cisco AV Pair resolve to?

Accepted Answer

A)  tenant 
B)  security domain 
C)  primary Cisco APIC 
D)  managed object class 
A)  tenant 
B)  security domain 
C)  primary Cisco APIC 
D)  managed object class

Exam 19: Configuring Cisco MDS 9000 Series Switches (DCSAN)

Which type of profile needs to be created to deploy an access port policy group?

Which components must be configured for the BGP Route Reflector policy to take effect?

An engineer must limit management access to the Cisco ACI fabric that originates from a single subnet where the NOC operates. Access should be limited to SSH and HTTPS only. Where should the policy be configured on the Cisco APIC to meet the requirements?

An engineer is extending an EPG out of the ACI fabric using static path binding. Which statement about the endpoints is true?

On which two interface types should a user configure storm control to protect against broadcast traffic? (Choose two.)

What are two requirements for the IPN network when implementing a Multi-Pod ACI fabric? (Choose two.)

Which statement regarding ACI Multi-Pod and TEP pool is true?

Which protocol does ACI use to securely sane the configuration in a remote location?

A situation causes a fault to be raised on the APIC. The ACI administrator does not want that fault to be raised because it is not directly relevant to the environment. Which action should the administrator take to prevent the fault from appearing?

What happens to the traffic flow when the Cisco ACI fabric has a stale endpoint entry for the destination endpoint?

Which description regarding the initial APIC cluster discovery process is true?

An engineer configured Layer 2 extension from the ACI fabric and changed the Layer 2 unknown unicast policy from Flood to Hardware Proxy. How does this change affect the flooding of the L2 unknown unicast traffic?

Which two actions extend a Layer 2 domain beyond the ACI fabric? (Choose two.)

Which two types of interfaces are supported on border leaf switches to connect to an external router? (Choose two.)

When creating a subnet within a bridge domain, which configuration option is used to specify the network visibility of the subnet?

Which endpoint learning operation is completed on the egress leaf switch when traffic is received from an L3Out?

Which statement about ACI syslog is true?

An engineer is implementing Cisco ACI at a large platform-as-a-service provider using APIC controllers, 9396PX leaf switches, and 9336PQ spine switches. The leaf switch ports are configured as IEEE 802.1p ports. Where does the traffic exit from the EPG in IEEE 802.1p mode in this configuration?

A RADIUS user resolves its role via the Cisco AV Pair. What object does the Cisco AV Pair resolve to?

Supporting Cisco Data Center System Devices (DCTECH)

Cisco Certified Technician Routing & Switching (RSTECH)

Understanding Cisco Cybersecurity Operations Fundamentals (CBROPS)

Cisco Certified Network Associate (CCNA)

Managing Industrial Networks with Cisco Networking Technologies (IMINS)

DevNet Associate (DEVASC)

Conducting Forensic Analysis and Incident Response Using Cisco CyberOps Technologies (CBRFIR)

Implementing Cisco Enterprise Advanced Routing and Services (ENARSI)

Implementing Cisco SD-WAN Solutions (ENSDWI)

Designing Cisco Enterprise Networks (ENSLD)

Designing Cisco Enterprise Wireless Networks (300-425 ENWLSD)

Implementing Cisco Enterprise Wireless Networks (300-430 ENWLSI)

Automating Cisco Enterprise Solutions (ENAUTO)

Implementing Cisco Service Provider Advanced Routing Solutions (SPRI)

Implementing Cisco Service Provider VPN Services (SPVI)

Designing Cisco Data Center Infrastructure (DCID)

Troubleshooting Cisco Data Center Infrastructure (DCIT)

Implementing Cisco Application Centric Infrastructure (DCACI)

Implementing Cisco Application Centric Infrastructure - Advanced

Automating Cisco Data Center Solutions (DCAUTO)

Securing Networks with Cisco Firepower (300-710 SNCF)

Implementing and Configuring Cisco Identity Services Engine (300-715 SISE)

Securing Email with Cisco Email Security Appliance (300-720 SESA)

Securing the Web with Cisco Web Security Appliance (300-725 SWSA)

Implementing Secure Solutions with Virtual Private Networks (SVPN 300-730)

Automating Cisco Security Solutions (SAUTO)

Implementing Cisco Collaboration Applications (CLICA)

Implementing Cisco Advanced Call Control and Mobility Services (CLASSM)

Implementing Cisco Collaboration Cloud and Edge Solutions

Implementing Cisco Collaboration Conferencing

Automating Cisco Collaboration Solutions (CLAUTO)

Implementing DevOps Solutions and Practices using Cisco Platforms (DEVOPS)

Developing Solutions Using Cisco IoT and Edge Platforms (DEVIOT)

Developing Applications for Cisco Webex and Webex Devices (DEVWBX)

Performing CyberOps Using Core Security Technologies (CBRCOR)

Implementing Cisco Enterprise Network Core Technologies (ENCOR)

Implementing and Operating Cisco Service Provider Network Core Technologies (SPCOR)

Implementing and Operating Cisco Data Center Core Technologies (DCCOR)

Implementing and Operating Cisco Security Core Technologies

Implementing Cisco Collaboration Core Technologies (CLCOR)

Developing Applications using Cisco Core Platforms and APIs (DEVCOR)

CCDE Design Written

Deploying Cisco Unified Contact Center Express

Cisco Meraki Solutions Specialist

Securing Cisco Networks with Sourcefire FireAMP Endpoints

Designing Cisco Unified Contact Center Enterprise (UCCED)

Implementing and Supporting Cisco Unified Contact Center Enterprise (UCCEIS)

Cisco Collaboration SaaS Authorization Exam

Cisco Security Architecture for System Engineers

Adopting The Cisco Business Architecture Approach (DTBAA)

Cisco Customer Success Manager (CSM)

Mastering The Cisco Business Architecture Discipline (DTBAD)

Filters