How does Cisco ACI manage the STP BPDUs between two pods?

A. Cisco ACI spines perform ingress replication for STP BPDUs

B. Cisco ACI spines suppress STP BPDUs to be forwarded to other pods

C. BPDUs are forwarded over IPN using the bridge domain GIPo multicast address

D. Special multicast group 239.255.255.255 is used to forward STP BPDUs

Which two components must be configured as stretched to establish intra-VRF communication between two EPGs that are deployed in different sites and different bridge domains? (Choose two.)

A. contract

B. tenant

C. application profile

D. bridge domain

E. EPG

An engineer configures a new Cisco ACI Multi-Site Orchestrator node to join an MSO cluster. Which two components are necessary to ensure that the new node has IP connectivity in this configuration? (Choose two.)

A. Cisco ACI spine interfaces that are connected to ISN

B. Cisco APICs over the OOB management network

C. existing Cisco ACI Multi-Site Orchestrator node

D. management IP of ESXi hosts where the controllers are deployed

E. OOB interface of ISN

Refer to the exhibit. The external subnet and internal EPG1 must communicate with each other, and the L3Out traffic must leak into the VRF named “VF1”. Which configuration set accomplishes these goals?

A. External Subnets for External EPGImport Route Control Subnet -Shared Route Control Subnet

B. External Subnets for External EPGShared Route Control Subnet -Shared Security Import Subnet

C. Export Route Control Subnet -Shared Security Import Subnet -Aggregate Shared Routes

D. Export Route Control Subnet -Import Route Control Subnet -Aggregate Shared Routes

DRAG DROP -
A leaf receives unicast traffic that is destined to an unknown source, and spine proxy is enabled in the corresponding bridge domain. Drag and drop the Cisco ACI forwarding operations from the left into the order the operation occurs on the right.
Select and Place:
 

Refer to the exhibit. Which feature is available across sites if EPGs are stretched?

A. active-active high-availability firewall clustering

B. Layer 3 routing between sites

C. Layer 2 flooding across sites

D. live virtual machine migration

Refer to the exhibit. A customer implements Cisco ACI Multi-Site with default MTU settings between two sites. Which configuration should be applied on the interface Eth1/10 on the ISN-1 device?
A.
 
B.
 
C.
 
D.
 

Refer to the exhibit. Which three actions should be taken to implement the vPC in the Cisco ACI fabric? (Choose three.)

A. Select a common vPC interface policy group

B. Select individual interface profiles

C. Select common interface profiles

D. Select individual switch profiles

E. Select common switch profiles

An engineer implements the Cisco ACI solution and needs to confirm that the leaf switch correctly learns the remote endpoint MAC. Which information must be included in the VXLAN packet that is received from the Cisco ACI spine for the Cisco ACI leaf to learn MAC as a remote endpoint?

A. VRF

B. application profile

C. bridge domain

D. EPG

A customer is deploying a new application across two ACI pods that is sensitive to latency and jitter. The application sets the DSCP values of packets to AF31 and
CS6, respectively. Which configuration changes must be made on the APIC to support the new application and prevent packets from being delayed or dropped between pods?

A. disable DSCP translation policy

B. align the ACI QoS levels and IPN QoS policies

C. disable DSCP mapping on the IPN devices

D. align the custom QoS policy on the EPG site in the customer tenant

Refer to the exhibit. A Cisco ACI fabric must be integrated with VMware. Leaf1 and Leaf2 are connected to S1 using a VPC. The object VMware Virtual Distributed switch VPC Policy group type has been created in the fabric. Which mode must be set for the port-channel policy to allow the failover and the full use of the bandwidth in both directions?

A. Link Aggregation Control Protocol

B. MAC Pinning

C. Static channel – Mode On

D. Explicit failover order

An engineer configures a new Cisco ACI Multi-Pod and must set up the link between the spine and the IPN device. Which three actions should be taken to accomplish this goal? (Choose three.)

A. Enable MP-BGP routing

B. Enable BIDIR-PIM protocol

C. Enable PIM-SM protocol

D. Enable OSPF routing

E. Enable IS-IS routing

F. Enable DHCP relay

Refer to the exhibit. A network engineer configures a Layer 4 to Layer 7 device for an outside routed firewall that is connected to POD-1 inside a Cisco ACI fabric that consists of two pods. All traffic from POD-1 or POD-2 that uses the L3Out should pass through the routed firewall. Which Function Type must be implemented in the service graph for POD-2 to use L3Out?

A. GoThrough

B. L1

C. GoTo

D. L2

What are two characteristics of Cisco ACI and Spanning Tree Protocol interaction? (Choose two.)

A. When a TCN BPDU is received in a VLAN, Cisco ACI flushes the endpoints for the associated encapsulation.

B. STP BPDUs are dropped due to MCP.

C. MST BPDUs are flooded correctly in Cisco ACI fabric without additional configuration.

D. BPDU filter and BPDU guard can be configured on Cisco ACI leaf edge ports.

E. Cisco ACI must be configured as the STP root for all VLANs.

Refer to the exhibit. An engineer must have communication between EPG1 in VRF1 and External EPG in VRF2. Which three actions should be taken for the defined subnets in the L3Out External EPG to accomplish this goal? (Choose three.)

A. Enable Shared Route Control Subnet

B. Enable External Subnets for External EPG

C. Enable Export Route Control Subnet

D. Enable Shared Security Import Subnet

E. Enable Aggregate Shared Routes

F. Enable Import Route Control Subnet

Which action reduces the impact on workload when migrating from the existing Cisco NX-OS VXLAN network infrastructure to the Cisco ACI fabric?

A. Disable bridge domain unicast routing while a default gateway is in VXLAN infrastructure

B. Set the default gateway in the Cisco ACI and VXLAN fabrics

C. Use ACI spines for the Cisco ACI and VXLAN fabrics

D. Configure vPC between the standalone Nexus and the Cisco ACI leaf

DRAG DROP -
 
Refer to the exhibit. Drag and drop the subnets and flags from the left into the External Network Instance Profile policies on the right to create a setup that advertises only 10.10.0.0/24 and 10.10.1.0/24 prefixes in VRF1 and establishes connectivity between VRFs. Not all options are used.
Select and Place:
 

An organization expands a Cisco ACI Multi-Pod from two to six pods and must ensure that the control plane scales. What should be configured in the IPN to ensure that BUM traffic is forwarded efficiently across the IPN?

A. spine headend replication

B. BIDIR-PIM

C. MP-BGP

D. MSDP

Which two actions should be taken to ensure a scalable solution when multiple EPGs in a VRF require unrestricted communication? (Choose two.)

A. Configure a taboo contract between the EPGs that require unrestricted communication between each other.

B. Enable Preferred Group Member under the EPG Collection for VRF section.

C. Set the VRF policy control enforcement preference to Unenforced.

D. Set the EPGs that require unrestricted communication between each other as preferred group members.

E. Set the EPGs that require policy enforcement between each other as preferred group members.

An engineer deployed a Cisco ACI fabric and noticed that the fabric learns endpoints from subnets that are not configured on a bridge domain. To meet strict security requirements, the engineer must prevent this behavior. Which action must be taken to prevent this behavior?

A. Activate Enable Data Plane Endpoint Learning

B. Implement Pervasive Gateway

C. Configure Static Binding

D. Enable Enforce Subnet Check

Which device replicates Broadcast, Unicast, and Multicast (BUM) frames to all remote sites in a Cisco ACI Multi-Site with multiple stretched bridge domains?

A. remote spine node that translates the VNID to the locally significant value

B. receiving leaf that learns the location for the sourced BUM traffic

C. source leaf that floods the traffic to the specific multicast group or GIPo

D. local spine that is elected the designated forwarder for each bridge domain

Refer to the exhibit. Which two configuration steps are required in ISN for Cisco ACI Multi-Site setup? (Choose two.)

A. Connect Spine2 to ISN routers.

B. Configure BIDIR-PIM throughout the ISN

C. Increase ISN MTU to support the maximum MTU that is sent by endpoints

D. Configure OSPF between spines and ISN routers

E. Enable IGMPv3 on ISN routers

Which mechanism is used by ACI spine switches to maintain a consistent copy of the endpoint address and location information?

A. COOP

B. ISIS

C. BD

D. OSPF

An engineer is deploying a Cisco ACI fabric and discovers that the traffic to certain endpoints is dropped. The originating bridge domain is configured with hardware proxy.
Which action prevents this problem?

A. Set the L2 Unknown Unicast option to Flood for Layer 2 switched traffic.

B. Set the L2 Unknown Unicast option to Hardware-Proxy for Layer 2 switched traffic.

C. Enable the ARP Flooding option under the bridge domain for Layer 3 routed traffic.

D. Disable the ARP Flooding option under the bridge domain for Layer 3 routed traffic.

What is a use of the Overlay Multicast TEP in Cisco ACI Multi-Site communication?

A. to perform headend replication

B. to act as the source IP for BUM traffic

C. to establish MP-BGP adjacencies with remote spines

D. to send and receive unicast VXLAN data plane traffic

What two actions should be taken to deploy a new Cisco ACI Multi-Pod setup? (Choose two.)

A. Configure anycast RP for the underlying multicast protocol

B. Configure the TEP pool of the new pod to be routable across the IPN

C. Configure MP-BGP on IPN routers that face the Cisco ACI spines

D. Increase interface MTU for all IPN routers to support VXLAN traffic

E. Connect all spines to the IPN

DRAG DROP -
Drag and drop the tenant implementation designs from the left onto the outcomes of the design when a greenfield Cisco ACI fabric is deployed on the right.
Select and Place:
 

Refer to the exhibit. Which method does Cisco ACI fabric use to forward L2 Unknown Unicast packets?

A. The source leaf sends the traffic to all ports in BD.

B. Packets are dropped if dMAC is absent in COOP.

C. The traffic is flooded using VRF Outer Multicast Group ID.

D. Traffic is flooded to all Layer 2 ports of ACI fabric.

Refer to the exhibit. Two application profiles are configured in the same tenant and different VRFs. Which contract scope is configured to allow communication between the two application profiles?

A. global

B. VRF

C. application

D. tenant

Refer to the exhibit. An engineer extends a Cisco ACI Multi-Pod setup to a Cisco ACI Multi-Site implementation. Which action allows the interconnection?

A. Configure BIDIR-PIM in the IPN and ISN

B. Use dedicated uplinks on Site 1 spines for ISN connections

C. Connect all spines to the IPN and ISN

D. Filter the advertisement of the Site 2 TEP pool into the IPN

Which action must be taken to connect two nonsilient servers in active/standby mode to two ACI leaves?

A. Implement a virtual PortChannel on ACI leaves

B. Enable ARP flooding for the bridge domain if the MAC address of the active interface changes after NIC failover

C. Configure ARP flooding for the bridge domain if the MAC address of the active interface stays identical after a NIC failover

D. Disable dataplane learning to avoid endpoint flapping

Refer to the exhibit. Which two configurations enable inter-VRF communication? (Choose two.)

A. Set the subnet scope to Shared Between VRFs

B. Enable Advertise Externally under the subnet scope

C. Change the contract scope to Tenant

D. Change the subject scope to VRF

E. Export the contract and import as a contract interface

DRAG DROP -
An engineer must migrate servers from a legacy data center infrastructure to a Cisco ACI fabric. Drag and drop the steps from the left into the order that they must be completed on the right to ensure the least amount of downtime.
Select and Place:
 

An engineer troubleshoots a Cisco ACI fabric and receives this output:
 
What does tunnel 6 use?

A. default VRF

B. GRE protocol

C. jumbo frames

D. public IP address

Refer to the exhibit. What must be configured to allow the PBR node (LB-int) to monitor the availability of the endpoint that is in the EPG server?

A. Endpoint Dataplane Learning

B. Unicast Route disabled for client and server bridge domains

C. PBR node tracking

D. Direct Connect in the service graph template

Which protocol is used to exchange the MAC/IP address information for endpoints between spine switches in different pods in a Cisco Multi-Pod solution?

A. BGP VPNv4

B. MP-BGP EVPN

C. IS-IS

D. GRE

Refer to the exhibit. How is the ARP request from VM1 forwarded when VM2 is not learned in the Cisco ACI fabric?

A. Leaf 101 forwards the ARP request to one of the proxy VTEP spines.

B. POD1 spine responds to the ARP request after the POD1 COOP is updated with the VM2 location.

C. Leaf 101 encapsulates the ARP request into a multicast packet that is destined to 225.0.37.192.

D. Leaf 101 switch consumes the ARP reply of VM2 to update the local endpoint table.

Which two actions are the Cisco best practices to configure NIC teaming load balancing for Cisco UCS B-Series blades that are connected to the Cisco ACI leaf switches? (Choose two.)

A. Create vPC+

B. Enable LACP active mode

C. Create PAgP

D. Create vPC

E. Enable MAC pinning

What is a characteristic of a stretched bridge domain solution between Cisco ACI sites with Layer 2 flood disabled?

A. The application profile that is associated to the bridge domain have local significance in each site.

B. The tenant and VRF that associated to the bridge domain have local significance in each site.

C. Headend replication is used for BUM traffic between sites.

D. IP mobility is ensured between sites for disaster recovery.

Refer to the exhibit. Server S1 is connected to Cisco ACI using two NIC interfaces. NIC1 is an active interface and NIC2 is a standby interface. NIC2 uses its MAC address to send traffic to the Cisco ACI fabric when NIC1 is offline. The requirement is to update the IP address to use the MAC address of NIC2. Which action accomplishes this goal?

A. Clear remote MAC entries.

B. Set L2 Unknown Unicast to Proxy.

C. Activate IP Data Plane Learning,

D. Enable GARP EP Move Detection.

Refer to the exhibit. The requirement is to prefer the local PBR node and redirect the traffic to the remote pod PBR node in the case of catastrophic node failure. Which configuration meets these requirements?

A. location-based PBRhost route advertisementresilient hashing

B. symmetric PBRlocation-based PBRresilient hashing

C. symmetric PBRunidirectional PBRresilient hashing

D. location-based PBRhost route advertisementnode tracking

What is the advantage of implementing an active-active firewall cluster that is stretched across separate pods when anycast services are configured?

A. A different MAC/IP combination can be configured for the firewall in each pod.

B. The local pod anycast node is preferred by the local spines.

C. A cluster can be deployed in transparent mode across pods.

D. Local traffic in a pod is load-balanced between the clustered firewalls.

An engineer configures Cisco ACI Multi-Site and must specify the control plane TEP IP for spines. Which statement describes control plane TEP IP in this situation?

A. The unique IP address is defined on each spine node that belongs to a fabric and is used to establish MP-BGP EVPN and VPNv4 adjacencies with the spine nodes in remote sites.

B. The unique IP address is defined on each spine node that belongs to a fabric and is used to establish VXLAN adjacencies with the spine nodes in remote sites.

C. The common anycast address is shared by all the spine nodes in the same site and is used to perform headend replication for BUM traffic.

D. The common anycast address is shared by all the spine nodes at the same site and is used to source and receive unicast VXLAN data plane traffic.

Refer to the exhibit. A customer experiences resource overconsumption on one of its border leaf switches. Which action should be taken to reduce the consumption on this switch?

A. Disable VRF Policy Control Enforcement

B. Disable IP Data Plane Learning

C. Migrate L3Outs to another switch

D. Disable Remote EP Learning

Which PIM version must be configured in the Inter-Pod Network to allow broadcast, unknown unicast, and multicast flooding between Cisco ACI pods?

A. Bidirectional PIM

B. PIM dense mode

C. PIM sparse mode

D. Source Specific Multicast

Refer to the exhibit. The 0.0.0.0/0 is configured as a default static route on L3Out-1. Which action should be taken for the 0.0.0.0/0 prefix to advertise out on
L3Out-2 OSPF?

A. Enable Shared Security Import Subnet

B. Enable Aggregate Export Subnet

C. Enable Shared Route Control Subnet

D. Enable Export Route Control Subnet

A Cisco ACI fabric is configured with these settings:
•	A single VRF exists that contains 100 EPGs.
•	EPGs 1 to 50 must be permitted to communicate.
•	EPGs 51 to 100 must NOT be allowed to communicate with EPGs 1 to 50.
•	EPG 51 must be allowed to communicate with EPG 10
Which two actions must be taken to accomplish these requirements? (Choose two.)

A. Create a vzAny contract

B. Create a standard contract between EPG 51 and EPG 10.

C. Select the Intra-EPG Isolation checkbox.

D. Set policy control enforcement to Unenforced

E. Enable the Preferred Group option on EPGs 1 to 50.

Refer to the exhibit. Which configuration mode must be selected for the VMM vSwitch Port Channel policy to avoid MAC flapping on the Cisco UCS Fls and Cisco
ACI leaf switches?

A. LACP Passive

B. MAC Pinning

C. LACP Active

D. Static Channel ג€” Mode On

A cloud provider must make a pair of firewalls available to all tenants. Each tenant defines its own service graph. Where should the Layer 4 to Layer 7 service be configured to accomplish this goal?

A. management tenant

B. infrastructure tenant

C. user tenant

D. common tenant

Where are STP BPDUs flooded in Cisco ACI fabric?

A. in the bridge domain VLAN

B. in the native VLAN ID

C. in the access encapsulation VLAN part of different VLAN pools

D. in the VNID that is assigned to the FD VLAN