Where are STP BPDUs flooded in Cisco ACI fabric?

A. in the bridge domain VLAN

B. in the native VLAN ID

C. in the access encapsulation VLAN part of different VLAN pools

D. in the VNID that is assigned to the FD VLAN

DRAG DROP -
Drag and drop the tenant implementation designs from the left onto the outcomes of the design when a greenfield Cisco ACI fabric is deployed on the right.
Select and Place:
 

Refer to the exhibit. Which type of design approach is shown?

A. traditional VLAN/subnet model

B. edge-core-edge model

C. application-centric

D. network-centric

Refer to the exhibit. A Cisco ACI fabric must be integrated with VMware. Leaf1 and Leaf2 are connected to S1 using a VPC. The object VMware Virtual Distributed switch VPC Policy group type has been created in the fabric. Which mode must be set for the port-channel policy to allow the failover and the full use of the bandwidth in both directions?

A. Link Aggregation Control Protocol

B. MAC Pinning

C. Static channel – Mode On

D. Explicit failover order

An engineer is configuring a Cisco ACI fabric and requires a shared L3Out network connectivity to external networks. The connectivity must be shared between different tenants. Which tenant type must be created to meet this requirement?

A. common tenant

B. infra tenant

C. management tenant

D. user tenant

Refer to the exhibit. Which combination of flags in the Cisco ACI contract allows a client in WebClient EPG to establish an HTTP connection toward a server in
WebServer EPG?

A. Apply Both Direction ENABLED and Reverse Port Filter ENABLED

B. Apply Both Direction DISABLED and Reverse Port Filter DISABLED

C. Apply Both Direction DISABLED and Reverse Port Filter ENABLED

D. Apply Both Direction ENABLED and Reverse Port Filter DISABLED

Refer to the exhibit. An administrator configures inter-VRF route leaking between Production:vrf-prod and Non-Production:vrf-nonprod. However, the route in the Non-Production:vrf-nonprod VRF to the production tenant is missing. Which action resolves the VRF route leaking issue?

A. Enable the Shared between VRFs option for the BD subnet in the production VRF.

B. Change the contract scope to Global.

C. Enable the Shared between VRFs option for the EPG subnet in the non-production VRF.

D. Export the contract from provider to consumer tenant.

How does Cisco ACI manage the STP BPDUs between two pods?

A. Cisco ACI spines perform ingress replication for STP BPDUs

B. Cisco ACI spines suppress STP BPDUs to be forwarded to other pods

C. BPDUs are forwarded over IPN using the bridge domain GIPo multicast address

D. Special multicast group 239.255.255.255 is used to forward STP BPDUs

An engineer implements the Cisco ACI solution and needs to confirm that the leaf switch correctly learns the remote endpoint MAC. Which information must be included in the VXLAN packet that is received from the Cisco ACI spine for the Cisco ACI leaf to learn MAC as a remote endpoint?

A. VRF

B. application profile

C. bridge domain

D. EPG

An engineer is implementing the Cisco ACI fabric but is experiencing loops detected from endpoints. When the issue was investigated, it was discovered that the packets are received with the same source IP address but from different leaf switch ports. The engineer must prevent the issue from happening in the future and make sure that the port is brought back up if it was disabled due to the loop discovered. Which set of actions must be taken to meet these requirements?

A. Enable the enforce endpoint check and set the Rouge EP detection interval

B. Enable the rogue endpoint and set the Error Disabled Recovery Policy

C. Enable the remote endpoint limit and set the Interface override

D. Enable reverse path forwarding and set the Hold Interval

Refer to the exhibit. Which feature is available across sites if EPGs are stretched?

A. active-active high-availability firewall clustering

B. Layer 3 routing between sites

C. Layer 2 flooding across sites

D. live virtual machine migration

A customer plans to deploy a Cisco ACI Multi-Pod deployment. Which two features must be implemented on the IPN switches?

A. Enable BIDIR-PIM.Configure a minimum multicast range of /15.

B. Enable BIDIR-PIM.Configure a maximum multicast range of /23.

C. Configure PIM anycast RP.Configure a minimum multicast range of /23.

D. Configure PIM anycast RP.Configure a maximum multicast range of /15.

An engineer configures Cisco ACI Multi-Site and must specify the control plane TEP IP for spines. Which statement describes control plane TEP IP in this situation?

A. The unique IP address is defined on each spine node that belongs to a fabric and is used to establish MP-BGP EVPN and VPNv4 adjacencies with the spine nodes in remote sites.

B. The unique IP address is defined on each spine node that belongs to a fabric and is used to establish VXLAN adjacencies with the spine nodes in remote sites.

C. The common anycast address is shared by all the spine nodes in the same site and is used to perform headend replication for BUM traffic.

D. The common anycast address is shared by all the spine nodes at the same site and is used to source and receive unicast VXLAN data plane traffic.

Which action reduces the impact on workload when migrating from the existing Cisco NX-OS VXLAN network infrastructure to the Cisco ACI fabric?

A. Disable bridge domain unicast routing while a default gateway is in VXLAN infrastructure

B. Set the default gateway in the Cisco ACI and VXLAN fabrics

C. Use ACI spines for the Cisco ACI and VXLAN fabrics

D. Configure vPC between the standalone Nexus and the Cisco ACI leaf

Refer to the exhibit. Which configuration must be implemented to allow intra-VRF transit routing between the two external routers?

A. Deploy both areas under the same L3Out policy

B. Change one of the areas to area 0

C. Configure OSPF virtual links

D. Modify L3Out 1 to use the same OSPF area as L3Out 2

What two actions should be taken to deploy a new Cisco ACI Multi-Pod setup? (Choose two.)

A. Configure anycast RP for the underlying multicast protocol

B. Configure the TEP pool of the new pod to be routable across the IPN

C. Configure MP-BGP on IPN routers that face the Cisco ACI spines

D. Increase interface MTU for all IPN routers to support VXLAN traffic

E. Connect all spines to the IPN

DRAG DROP -
A leaf receives unicast traffic that is destined to an unknown source, and spine proxy is enabled in the corresponding bridge domain. Drag and drop the Cisco ACI forwarding operations from the left into the order the operation occurs on the right.
Select and Place:
 

An organization expands a Cisco ACI Multi-Pod from two to six pods and must ensure that the control plane scales. What should be configured in the IPN to ensure that BUM traffic is forwarded efficiently across the IPN?

A. spine headend replication

B. BIDIR-PIM

C. MP-BGP

D. MSDP

A cloud provider must make a pair of firewalls available to all tenants. Each tenant defines its own service graph. Where should the Layer 4 to Layer 7 service be configured to accomplish this goal?

A. management tenant

B. infrastructure tenant

C. user tenant

D. common tenant

 
Refer to the exhibits. Which subject must be configured for the All_noSSH contract to allow all IP traffic except SSH between the two EPGs?
A.
 
B.
 
C.
 
D.
 

How is multicast traffic managed in a Cisco ACI fabric?

A. FTag trees are rooted at the spine nodes. Cisco APIC determines the roots.

B. FTag trees are rooted at the leaf nodes. Cisco APIC determines the roots.

C. FTag trees are rooted at the leaf nodes. The roots must be configured manually.

D. FTag trees are rooted at the spine nodes. The roots must be configured manually.

An engineer created a Cisco ACI environment in which multiple tenants reuse the same contract. The requirement is to prevent inter-tenant communication. Which action meets this requirement?

A. Create the contract in the user tenant with the scope set to VRF and exported to other tenants

B. Create the contract in the common tenant with the scope set to Tenant

C. Create the contract in the user tenant with the scope set to Global and exported to other tenants

D. Create the contract in the common tenant with the scope set to Global

A host that is connected to a Cisco ACI fabric leaf switch sends an ARP request. Which transmission method does the ingress switch use to send the ARP requests?

A. anycast

B. broadcast

C. multicast

D. unicast

An engineer configures a Cisco ACI Multi-Pod for disaster recovery. Which action should be taken for the new nodes to be discoverable by the existing Cisco
APICs?

A. Enable subinterfaces with dot1q tagging on all links between the IPN routers.

B. Configure IGMPv3 on the interfaces of IPN routers that face the Cisco ACI spine.

C. Enable DHCP relay on all links that are connected to Cisco ACI spines on IPN devices.

D. Configure BGP as the underlay protocol in IPN.

The engineer notices frequent MAC and IP address moves between different leaf switch ports. Which action prevents this problem from occurring?

A. Disable enforce subnet check.

B. Disable IP bridge domain enforcement.

C. Enable endpoint loop protection.

D. Enable rogue endpoint control.

A customer is deploying a new application across two ACI pods that is sensitive to latency and jitter. The application sets the DSCP values of packets to AF31 and
CS6, respectively. Which configuration changes must be made on the APIC to support the new application and prevent packets from being delayed or dropped between pods?

A. disable DSCP translation policy

B. align the ACI QoS levels and IPN QoS policies

C. disable DSCP mapping on the IPN devices

D. align the custom QoS policy on the EPG site in the customer tenant

A Cisco ACI fabric is connected to a switched network that runs Spanning Tree Protocol on VLAN 101. VLANs 101, 102, and 103 are mapped to bridge domain BD10123.
The leaf node that is attached to this switched network receives a spanning-tree topology change notification. Which endpoints does ACI flush?

A. all endpoints associated with VLAN 102 or 103 in BD10123 on the spine node

B. all endpoints associated with VLAN 101 in BD10123 on the leaf node

C. all endpoints associated with VLAN 101, 102, and 103 in BD10123

D. all endpoints associated with VLAN 101 in BD10123

Refer to the exhibit. In a Cisco ACI Multi-Site deployment, traffic fails to pass between Site-A and Site-B, and an engineer troubleshoots the link between ISN-01 and Node-201. Which set of actions establishes connectivity?

A. Configure the MTU on the link to be at least 1000 bytes larger than the MTU of the ACI fabrics.Configure the link as a routed subinterface by using VLAN-4.

B. Configure the MTU on the link to be at least 100 bytes larger than the MTU of the ACI fabrics.Configure the link as an access interface by using VLAN-4.

C. Configure the MTU on the link to be at least 100 bytes larger than the MTU of the ACI fabrics.Configure the link as a routed subinterface by using VLAN-4.

D. Configure the MTU on the link to be at least 1000 bytes larger than the MTU of the ACI fabrics.Configure the link as an access interface by using VLAN-4.

DRAG DROP -
An engineer must migrate servers from a legacy data center infrastructure to a Cisco ACI fabric. Drag and drop the steps from the left into the order that they must be completed on the right to ensure the least amount of downtime.
Select and Place:
 

Which two components must be configured as stretched to establish intra-VRF communication between two EPGs that are deployed in different sites and different bridge domains? (Choose two.)

A. contract

B. tenant

C. application profile

D. bridge domain

E. EPG

Refer to the exhibit. A company merges three of its departments: CORP, HR, and SERVICES. Currently, the connectivity between departments is achieved by using VRF route leaking. The requirement is to redesign the Cisco ACI networking architecture to communicate between EPGs and BDs from any tenant without configuring contracts or VRF route leaking. Which configuration meets these criteria?

A. Implement an enforced VRF in the common tenant and map all required BDs to it

B. Configure an enforced VRF in the user tenant and map all required EPGs to it.

C. Implement an unenforced VRF in the common tenant and map all required BDs to it.

D. Configure an unenforced VRF in the user tenant and map all required EPGs to it.

Refer to the exhibit. An engineer must have communication between EPG1 in VRF1 and External EPG in VRF2. Which three actions should be taken for the defined subnets in the L3Out External EPG to accomplish this goal? (Choose three.)

A. Enable Shared Route Control Subnet

B. Enable External Subnets for External EPG

C. Enable Export Route Control Subnet

D. Enable Shared Security Import Subnet

E. Enable Aggregate Shared Routes

F. Enable Import Route Control Subnet

Refer to the exhibit. An engineer must implement a solution to ensure that ingress and egress traffic flows are symmetric for all stretched bridge domains in the customer multisite architecture. Which configuration accomplishes this goal?

A. Configure host route advertisement on the bridge domains.

B. Enable anycast services to the firewalls in both fabrics.

C. Implement a policy-based redirect using a service graph.

D. Add a new stretched external EPG to the existing L3Outs.

What is a design implication for Cisco ACI using an application-centric approach?

A. Multiple VLANs and/or multiple EPGs are under one bridge domain

B. VLAN numbers are in the names of the bridge domain and EPG objects

C. One EPG is mapped to multiple bridge domains

D. One VLAN equals one EPG equals one bridge domain

An engineer is deploying a Cisco ACI fabric and discovers that the traffic to certain endpoints is dropped. The originating bridge domain is configured with hardware proxy.
Which action prevents this problem?

A. Set the L2 Unknown Unicast option to Flood for Layer 2 switched traffic.

B. Set the L2 Unknown Unicast option to Hardware-Proxy for Layer 2 switched traffic.

C. Enable the ARP Flooding option under the bridge domain for Layer 3 routed traffic.

D. Disable the ARP Flooding option under the bridge domain for Layer 3 routed traffic.

A company must connect three Cisco ACI data centers by using Cisco ACI Multi-Site. An engineer must configure the Inter-Site Network (ISN) between the existing sites.
Which two configuration steps must be taken to implement the ISN? (Choose two.)

A. Configure encapsulation VLAN-4 between the routers and spine nodes.

B. Configure OSPF on subinterfaces on routers that are directly connected with spine nodes.

C. Configure ISN site extension on Cisco routers in the network.

D. Configure OSPF on all ISN routers.

E. Configure BIDIR-PIM on all ISN routers.

An engineer troubleshoots a Cisco ACI fabric and receives this output:
 
What does tunnel 6 use?

A. default VRF

B. GRE protocol

C. jumbo frames

D. public IP address

Refer to the exhibit. The external subnet and internal EPG1 must communicate with each other, and the L3Out traffic must leak into the VRF named “VF1”. Which configuration set accomplishes these goals?

A. External Subnets for External EPGImport Route Control Subnet -Shared Route Control Subnet

B. External Subnets for External EPGShared Route Control Subnet -Shared Security Import Subnet

C. Export Route Control Subnet -Shared Security Import Subnet -Aggregate Shared Routes

D. Export Route Control Subnet -Import Route Control Subnet -Aggregate Shared Routes

An engineer must limit local and remote endpoint learning to the bridge domain subnet. Which action should be taken inside the Cisco APIC?

A. Disable Remote EP Learn

B. Enable Enforce Subnet Check

C. Disable Endpoint Dataplane Learning

D. Enable Limit IP Learning to Subnet

DRAG DROP -
 
Refer to the exhibit. Drag and drop the subnets and flags from the left into the External Network Instance Profile policies on the right to create a setup that advertises only 10.10.0.0/24 and 10.10.1.0/24 prefixes in VRF1 and establishes connectivity between VRFs. Not all options are used.
Select and Place:
 

Which protocol must be applied between the inter-pod network and spines within each pod to allow broadcast traffic replication between Cisco ACI pods?

A. MSDP Peering

B. Multicast BGP

C. Bidirectional PIM

D. IGMP Registration

What are two characteristics of network-centric design in Cisco ACI? (Choose two.)

A. There is open communication between EPGs

B. EPGs are used for microsegmentation

C. EPGs are different security zones

D. Applications define the network requirements

E. A bridge domain has one subnet and one EPG

A Cisco ACI fabric is configured with these settings:
•	A single VRF exists that contains 100 EPGs.
•	EPGs 1 to 50 must be permitted to communicate.
•	EPGs 51 to 100 must NOT be allowed to communicate with EPGs 1 to 50.
•	EPG 51 must be allowed to communicate with EPG 10
Which two actions must be taken to accomplish these requirements? (Choose two.)

A. Create a vzAny contract

B. Create a standard contract between EPG 51 and EPG 10.

C. Select the Intra-EPG Isolation checkbox.

D. Set policy control enforcement to Unenforced

E. Enable the Preferred Group option on EPGs 1 to 50.

Which feature should be disabled on a bridge domain when a default gateway for endpoints is on an external device instead of a Cisco ACI bridge domain SVI?

A. unicast routing

B. ARP flooding

C. unknown unicast flooding

D. proxy ARP

What are two characteristics of Cisco ACI interaction with MSTP? (Choose two.)

A. A Cisco ACI leaf flushes all local endpoints in the received EPG when an MSTP TCN frame is received.

B. A static path binding is required for native VLAN to carry the MST BPDUs in existing EPGs.

C. Mis-cabling protocol is used to snoop the MSTP TCN packets.

D. A dedicated EPG must be created for the native VLAN ID with static bindings toward the MSTP-enabled switches.

E. The PVST simulation must be configured on external network switches to support MSTP.

Refer to the exhibit. Which configuration set must be applied to filter 1 to enable SSH communication between Web_EPG to App_EPG?

A. Apply Both Directions: Disabled -Reverse Filter Ports: Enabled

B. Apply Both Directions: Enabled -Reverse Filter Ports: Enabled

C. Apply Both Directions: Disabled -Reverse Filter Ports: Disabled

D. Apply Both Directions: Enabled -Reverse Filter Ports: Disabled

Which two actions should be taken to ensure a scalable solution when multiple EPGs in a VRF require unrestricted communication? (Choose two.)

A. Configure a taboo contract between the EPGs that require unrestricted communication between each other.

B. Enable Preferred Group Member under the EPG Collection for VRF section.

C. Set the VRF policy control enforcement preference to Unenforced.

D. Set the EPGs that require unrestricted communication between each other as preferred group members.

E. Set the EPGs that require policy enforcement between each other as preferred group members.

An existing Cisco ACI Multi-Site setup with default fabric settings contains endpoints that communicate with an MTU of 1500. What is the minimum MTU value that must be supported by the ISN to allow control plane endpoint information exchange between sites?

A. 9000

B. 1554

C. 9100

D. 1600

What is the advantage of implementing an active-active firewall cluster that is stretched across separate pods when anycast services are configured?

A. A different MAC/IP combination can be configured for the firewall in each pod.

B. The local pod anycast node is preferred by the local spines.

C. A cluster can be deployed in transparent mode across pods.

D. Local traffic in a pod is load-balanced between the clustered firewalls.

An engineer must allow routes learned from one L3Out to be advertised out another L3Out. The engineer does not have an explicit list of all the routes that must be advertised out, however, they know that they are all part of the 10.16.0.0/16 CIDR block. Which attributes must be selected under Ext-EPG to allow the necessary routes to be advertised out?

A. Enable Export Route Control Subnet and enable Aggregate Export

B. Disable Shared Route Control Subnet and enable Aggregate Shared Routes

C. Enable Export Route Control Subnet and disable Aggregate Shared Routes

D. Enable Export Route Control Subnet and enable Shared Route Control Subnet