300-620 practice questions 171–180

1. Question 171 · 340 in bank

   

   Refer to the exhibit. What must be configured in the service graph to redirect HTTP traffic between the EPG client and EPG server to go through the Cisco ASA firewall?

   • Aprecise filter to allow only HTTP traffic
   • Bpermit-all contract filter
   • Ccontract with no filter
   • Dcontract filter to allow ARP and HTTP.

   Show answer

   Answer: A

   Next question

2. Question 172 · 340 in bank

   What is the advantage of implementing an active-active firewall cluster that is stretched across separate pods when anycast services are configured?

   • AA cluster is capable to be deployed in transparent mode across pods.
   • BA different MAC/IP configuration combination is configurable for the firewall in each pod.
   • CLocal traffic in a pod is load-balanced between the clustered firewalls.
   • DThe local pod anycast node is preferred by the local spines.

   Show answer

   Answer: D

   Next question

3. Question 173 · 340 in bank

   

   Refer to the exhibit. Server A is connected to the Cisco ACI fabric using two teamed interfaces. One interface in a team is configured as active and the other remains in standby mode. When a failover occurs and the standby interface becomes active, it uses its built-in MAC address to send traffic. Which bridge domain configuration must be applied to resolve the issue?

   • AConfigure Hardware proxy.
   • BSet L2 Unknown Unicast to Flood.
   • CEnable ARP flooding.
   • DActivate Limit IP Learning to Subnet.

   Show answer

   Answer: C

   Next question

4. Question 174 · 340 in bank

   In a Cisco ACI Multi-Site fabric, the Inter-Site BUM Traffic Allow option is enabled in a specific stretched bridge domain. What is used to forward BUM traffic to all endpoints in the same broadcast domain?

   • Aingress replication on the spines in the source site
   • Begress replication on the destination leaf switches
   • Cegress replication on the source leaf switches
   • Dingress replication on the spines in the destination site

   Show answer

   Answer: A

   Next question

5. Question 175 · 340 in bank

   The engineer notices frequent MAC and IP address moves between different leaf switch ports. Which action prevents this problem from occurring?

   • ADisable enforce subnet check.
   • BEnable endpoint loop protection.
   • CEnable rogue endpoint control.
   • DDisable IP bridge domain enforcement.

   Show answer

   Answer: C

   Next question

6. Question 176 · 340 in bank

   A customer is deploying a new application across two ACI pods that is sensitive to latency and jitter. The application sets the DSCP values of packets to AF31 and CS6, respectively. Which configuration changes must be made on the APIC to support the new application and prevent packets from being delayed or dropped between pods?

   • Adisable DSCP mapping on the IPN devices
   • Bdisable DSCP translation policy
   • Calign the ACI QoS levels and IPN QoS policies
   • Dalign the custom QoS policy on the EPG site in the customer tenant

   Show answer

   Answer: C

   Next question

7. Question 177 · 340 in bank

   What controls communication between EPGs?

   • AInter-EPG communication is controlled by BGP.
   • BInter-EPG communication is controlled by contracts.
   • CInter-EPG communication is controlled by IS-IS.
   • DInter-EPG communication is controlled by VXLAN.

   Show answer

   Answer: B

   Next question

8. Question 178 · 340 in bank

   Which feature should be disabled on a bridge domain when a default gateway for endpoints is on an external device instead of a Cisco ACI bridge domain SVI?

   • Aunknown unicast flooding
   • BARP flooding
   • Cunicast routing
   • Dproxy ARP

   Show answer

   Answer: C

   Next question

9. Question 179 · 340 in bank

   Where are STP BPDUSs flooded in Cisco ACI fabric?

   • Ain the access encapsulation VLAN part of different VLAN pools
   • Bin the bridge domain VLAN
   • Cin the native VLAN ID
   • Din the VNID that is assigned to the FD VLAN

   Show answer

   Answer: D

   Next question

10. Question 180 · 340 in bank

    

    Refer to the exhibit. An engineer is configuring a production Multi-Site solution to provide connectivity from EPGs from a specific site to networks reachable through a remote site L3OUT. All required schema and template objects are already defined. Which additional configuration must be implemented in the Multi-Site Orchestrator to support the cross-site connectivity?

    • AConfigure a routable TEP pool for SITE1.
    • BEnable CloudSec for intersite traffic encryption.
    • CAdd a new stretched external EPG to the existing L3OUT.
    • DImplement a policy-based redirect using a service graph.

    Show answer

    Answer: A

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

300-620 practice, question 171. 340 questions available.