Deck 21: Automating Cisco Data Center Solutions (DCAUTO)

Question 1

Refer to the exhibit. Which three actions should be taken to implement the vPC in the Cisco ACI fabric? (Choose three.)

A) Select a common vPC interface policy group
B) Select individual interface profiles
C) Select common interface profiles
D) Select individual switch profiles
E) Select common switch profiles

Answer 1

Select a common vPC interface policy group
Select individual interface profiles
Select common switch profiles

Question 2

Refer to the exhibit. What must be configured to allow the PBR node (LB-int) to monitor the availability of the endpoint that is in the EPG server?

A) Endpoint Dataplane Learning
B) Unicast Route disabled for client and server bridge domains
C) PBR node tracking
D) Direct Connect in the service graph template

Answer 2

Endpoint Dataplane Learning

Question 3

Refer to the exhibit. A customer experiences resource overconsumption on one of its border leaf switches. Which action should be taken to reduce the consumption on this switch?

A) Disable VRF Policy Control Enforcement
B) Disable IP Data Plane Learning
C) Migrate L3Outs to another switch
D) Disable Remote EP Learning

Answer 3

Disable IP Data Plane Learning

Question 4

Refer to the exhibit. What must be configured in the service graph to redirect HTTP traffic between the EPG client and EPG server to go through the Cisco ASA firewall?

A) contract filter to allow ARP and HTTP
B) precise filter to allow only HTTP traffic
C) contract with no filter
D) permit-all contract filter

Question 5

Refer to the exhibit. How is the ARP request from VM1 forwarded when VM2 is not learned in the Cisco ACI fabric?

A) Leaf 101 forwards the ARP request to one of the proxy VTEP spines.
B) POD1 spine responds to the ARP request after the POD1 COOP is updated with the VM2 location.
C) Leaf 101 encapsulates the ARP request into a multicast packet that is destined to 225.0.37.192.
D) Leaf 101 switch consumes the ARP reply of VM2 to update the local endpoint table.

Question 6

Which two components must be configured as stretched to establish intra-VRF communication between two EPGs that are deployed in different sites and different bridge domains? (Choose two.)

A) contract
B) tenant
C) application profile
D) bridge domain
E) EPG

Question 7

Refer to the exhibit. Which configuration mode must be selected for the VMM vSwitch Port Channel policy to avoid MAC flapping on the Cisco UCS Fls and Cisco ACI leaf switches?

A) LACP Passive
B) MAC Pinning
C) LACP Active
D) Static Channel - Mode On

Question 8

An engineer designs a Cisco ACI Multi-Pod solution that requires a pair of active-standby firewalls in different pods for external connectivity. How should the firewalls be implemented?

A) PBR for routed firewalls
B) separate L3Out peerings for routed firewalls
C) routed firewall for the default gateway
D) transparent firewalls

Question 9

What is the purpose of the Forwarding Tag (FTAG) in Cisco ACI?

A) FTAG is used in Cisco ACI to add a label to the iVXLAN traffic in the fabric to apply the correct policy.
B) FTAG is used in Cisco ACI to add a label to the VXLAN traffic in the fabric to apply the correct policy.
C) FTAG trees in Cisco ACI are used to load balance unicast traffic.
D) FTAG trees in Cisco ACI are used to load balance mutli-destination traffic.

Question 10

An engineer must limit local and remote endpoint learning to the bridge domain subnet. Which action should be taken inside the Cisco APIC?

A) Disable Remote EP Learn
B) Enable Enforce Subnet Check
C) Disable Endpoint Dataplane Learning
D) Enable Limit IP Learning to Subnet

Question 11

Which two actions should be taken to ensure a scalable solution when multiple EPGs in a VRF require unrestricted communication? (Choose two.)

A) Configure a taboo contract between the EPGs that require unrestricted communication between each other.
B) Enable Preferred Group Member under the EPG Collection for VRF section.
C) Set the VRF policy control enforcement preference to Unenforced.
D) Set the EPGs that require unrestricted communication between each other as preferred group members.
E) Set the EPGs that require policy enforcement between each other as preferred group members.

Question 12

Refer to the exhibit. Which configuration must be implemented on L3Out EBGP to advertise out of the fabric 172.16.2.0/24 network that is learned from L3Out OSPF?

A)
B)
C)
D)

Question 13

A cloud provider must make a pair of firewalls available to all tenants. Each tenant defines its own service graph. Where should the Layer 4 to Layer 7 service be configured to accomplish this goal?

A) management tenant
B) infrastructure tenant
C) user tenant
D) common tenant

Question 14

Which feature should be disabled on a bridge domain when a default gateway for endpoints is on an external device instead of a Cisco ACI bridge domain SVI?

A) unicast routing
B) ARP flooding
C) unknown unicast flooding
D) proxy ARP

Question 15

Refer to the exhibit. Which configuration must be implemented to allow intra-VRF transit routing between the two external routers?

A) Deploy both areas under the same L3Out policy
B) Change one of the areas to area 0
C) Configure OSPF virtual links
D) Modify L3Out 1 to use the same OSPF area as L3Out 2

Question 16

Refer to the exhibit. The 0.0.0.0/0 is configured as a default static route on L3Out-1. Which action should be taken for the 0.0.0.0/0 prefix to advertise out on L3Out-2 OSPF?

A) Enable Shared Security Import Subnet
B) Enable Aggregate Export Subnet
C) Enable Shared Route Control Subnet
D) Enable Export Route Control Subnet

Question 17

An organization expands a Cisco ACI Multi-Pod from two to six pods and must ensure that the control plane scales. What should be configured in the IPN to ensure that BUM traffic is forwarded efficiently across the IPN?

A) spine headend replication
B) BIDIR-PIM
C) MP-BGP
D) MSDP

Question 18

What does the VXLAN source port add to the overlay packet forwarding when it uses the hash of Layer 2, Layer 3, and Layer 4 headers of the inner packet?

A) ECMP
B) TCP optimization
C) disabled fragmentation
D) jumbo frames

Question 19

Refer to the exhibits. Which subject must be configured for the All_noSSH contract to allow all IP traffic except SSH between the two EPGs?

A)
B)
C)
D)

Question 20

Refer to the exhibit. Which two configurations enable inter-VRF communication? (Choose two.)

A) Set the subnet scope to Shared Between VRFs
B) Enable Advertise Externally under the subnet scope
C) Change the contract scope to Tenant
D) Change the subject scope to VRF
E) Export the contract and import as a contract interface

Question 21

What are two characteristics of Cisco ACI and Spanning Tree Protocol interaction? (Choose two.)

A) When a TCN BPDU is received in a VLAN, Cisco ACI flushes the endpoints for the associated encapsulation.
B) STP BPDUs are dropped due to MCP.
C) MST BPDUs are flooded correctly in Cisco ACI fabric without additional configuration.
D) BPDU filter and BPDU guard can be configured on Cisco ACI leaf edge ports.
E) Cisco ACI must be configured as the STP root for all VLANs.

Question 22

Cisco ACI fabric is migrated from network-centric mode to application-centric mode. What is possible in an application-centric design?

A) remapping of VLAN pools
B) migration of bare metal servers to virtual machines
C) creation of additional EPGs under one bridge domain
D) Cisco ACI VMM integration with hypervisors

Question 23

Refer to the exhibit. Which two configuration steps are required in ISN for Cisco ACI Multi-Site setup? (Choose two.)

A) Connect Spine2 to ISN routers.
B) Configure BIDIR-PIM throughout the ISN
C) Increase ISN MTU to support the maximum MTU that is sent by endpoints
D) Configure OSPF between spines and ISN routers
E) Enable IGMPv3 on ISN routers

Question 24

An engineer creates the objects that must be deployed at each site in Cisco ACI Multi-Site Orchestrator. Which action should be taken before the schema can be associated with the newly configured site?

A) Attach the templates to the newly configured site
B) Configure a provider for the Cisco ACI Multi-Site Orchestrator
C) Import existing policies from an existing tenant to Cisco ACI Multi-Site Orchestrator
D) Configure the Infra Site-Specific Settings

Question 25

An engineer configures a new Cisco ACI Multi-Pod and must set up the link between the spine and the IPN device. Which three actions should be taken to accomplish this goal? (Choose three.)

A) Enable MP-BGP routing
B) Enable BIDIR-PIM protocol
C) Enable PIM-SM protocol
D) Enable OSPF routing
E) Enable IS-IS routing
F) Enable DHCP relay

Question 26

Refer to the exhibit. A network engineer configures a Layer 4 to Layer 7 device for an outside routed firewall that is connected to POD-1 inside a Cisco ACI fabric that consists of two pods. All traffic from POD-1 or POD-2 that uses the L3Out should pass through the routed firewall. Which Function Type must be implemented in the service graph for POD-2 to use L3Out?

A) GoThrough
B) L1
C) GoTo
D) L2

Question 27

Which firewall connection allows for the integration of service nodes in transparent mode with a Cisco ACI Multi-Pod setup?

A) active-standby mode across pods
B) active-active mode per pods for communication between internal endpoints
C) active-standby mode per pods for communication between endpoints and external networks
D) active-active mode across pods

Question 28

An organization deploys active-active data centers and active-standby firewalls in each data center. Which action should be taken in a Cisco ACI Multi-Pod to maintain traffic symmetry through the firewalls?

A) Enable Endpoint Dataplane Learning
B) Disable service node Health Tracking
C) Enable Pod ID Aware Redirection
D) Disable Resilient Hashing

Question 29

An engineer configures a new Cisco ACI Multi-Pod setup. Which action should be taken for fabric discovery to be successful for the nodes in Pod 2?

A) Select the Route Reflector field in Pod Peering
B) Enable the DSCP class-cos translation policy for Layer 3 traffic
C) Configure POD 2 Data Plane TEP under the Pod Connection Profile
D) Add the IPN subnet under the Fabric External Routing Profile

Question 30

What is a characteristic of a stretched bridge domain solution between Cisco ACI sites with Layer 2 flood disabled?

A) The application profile that is associated to the bridge domain have local significance in each site.
B) The tenant and VRF that associated to the bridge domain have local significance in each site.
C) Headend replication is used for BUM traffic between sites.
D) IP mobility is ensured between sites for disaster recovery.

Question 31

Where are STP BPDUs flooded in Cisco ACI fabric?

A) in the bridge domain VLAN
B) in the native VLAN ID
C) in the access encapsulation VLAN part of different VLAN pools
D) in the VNID that is assigned to the FD VLAN

Question 32

Refer to the exhibit. A customer implements Cisco ACI Multi-Site with default MTU settings between two sites. Which configuration should be applied on the interface Eth1/10 on the ISN-1 device?

A)
B)
C)
D)

Question 33

A network engineer configured an active-active firewall cluster that is stretched across separate pods in the Cisco ACI fabric. Which two implementation setups for anycast services are available? (Choose two.)

A) Modify the Cisco ACI contract scope
B) Modify the MAC address on the second firewall
C) Configure the firewalls behind an EPG subnet
D) Deselect No Default SVI Gateway under EPG Subnet
E) Deploy a Layer 4 to Layer 7 service graph with PBR

Question 34

Refer to the exhibit. An engineer extends a Cisco ACI Multi-Pod setup to a Cisco ACI Multi-Site implementation. Which action allows the interconnection?

A) Configure BIDIR-PIM in the IPN and ISN
B) Use dedicated uplinks on Site 1 spines for ISN connections
C) Connect all spines to the IPN and ISN
D) Filter the advertisement of the Site 2 TEP pool into the IPN

Question 35

What are two characteristics of Cisco ACI interaction with MSTP? (Choose two.)

A) A Cisco ACI leaf flushes all local endpoints in the received EPG when an MSTP TCN frame is received.
B) A static path binding is required for native VLAN to carry the MST BPDUs in existing EPGs.
C) Mis-cabling protocol is used to snoop the MSTP TCN packets.
D) A dedicated EPG must be created for the native VLAN ID with static bindings toward the MSTP-enabled switches.
E) The PVST simulation must be configured on external network switches to support MSTP.

Question 36

In a Cisco ACI Multi-Site fabric, the Inter-Site BUM Traffic Allow option is enabled in a specific stretched bridge domain. What is used to forward BUM traffic to all endpoints in the same broadcast domain?

A) ingress replication on the spines in the source site
B) egress replication on the source leaf switches
C) egress replication on the destination leaf switches
D) ingress replication on the spines in the destination site