300-620 practice questions 231–240

1. Question 231 · 340 in bank

   An engineer must implement user activity tracking in the Cisco ACI with a solution that meets these requirements: • All user activity that is related to the Cisco ACI infrastructure hardware must be tracked. • All audit logs with severity level 5 and below must be collected and exported. • Logs must be exported to a Security Information and Event Management (SIEM) appliance. Which set of steps must be taken?

   • ACreate a Syslog Monitoring Destination Group with a remote destination of the SIEM device. Create a Tenant-level Syslog Source under the Monitoring section of the Tenant Tab. Select Audit Logs and a severity level of Warning,
   • BCreate a Syslog Monitoring Destination Group with a Local File destination. Create an Access-level Syslog Source under the Monitoring section of the Fabric Tab. Select Fault Logs and a severity level of Notification.
   • CCreate a Syslog Monitoring Destination Group with a remote destination of the SIEM device. Create a Fabric-level Syslog Source under the Monitoring section of the Fabric Tab. Select Audit Logs and a severity level of Notification.
   • DCreate a Syslog Monitoring Destination Group with Console Destination. Create a System-level Syslog Source under the Monitoring section of the System Tab. Select Session Logs and a severity level of Warning.

   Show answer

   Answer: C

   Next question

2. Question 232 · 340 in bank

   Select 2

   

   Refer to the exhibit. An engineer must migrate workloads from the brownfield network to the Cisco ACI fabric. The VLAN 10 default gateway remains in the router located in the brownfield network. The bridge domain has already been associated with L2Out. Which two actions must be taken to migrate the workloads? (Choose two.)

   • AEnable ARP Flooding.
   • BConfigure Multi-Destination Flooding Flood in Encapsulation.
   • CSelect limit IP learning to Subnet.
   • DSet L2 Unknown Unicast Flood.
   • EMap the MAC address of the default gateway to the bridge domain.

   Show answer

   Answer: AD

   Next question

3. Question 233 · 340 in bank

   Which protocol is used in the Cisco ACI fabric for automatic discovery?

   • ALLDP
   • BIS-IS
   • CCFS
   • DCOOP

   Show answer

   Answer: A

   Next question

4. Question 234 · 340 in bank

   A Cisco ACI fabric is integrated with a Cisco ASA firewall using a service graph under the tenant called Operations. The fabric must permit the firewall used on tenant Operations to be referenced by the tenant called Management. Which export action must be used to accomplish this goal?

   • Adevice selection policies
   • Bservice graph template
   • Crouter configurations
   • DLayer4-Layer7 device

   Show answer

   Answer: D

   Next question

5. Question 235 · 340 in bank

   

   Refer to the exhibit. An engineer connects a Cisco ACI fabric to two different Cisco Nexus 9000 Series Switches. The fabric must be configured to ensure a loop-free topology and N9K1 must be configured as the root bridge for VLAN 10. Which action meets these requirements?

   • AEnable STP on ports between the leaf and spine.
   • BSet BPDU Guard on ports between the leaf and Nexus 9000 Series Switches.
   • CEnable Cisco Discovery Protocol on ports between the leaf and spine.
   • DActivate MCP on ports between the leaf and Nexus 9000 Series Switches.

   Show answer

   Answer: D

   Next question

6. Question 236 · 340 in bank

   An engineer configures an L3Out between BLeaf1 and Core1. A Cisco Nexus 9000 Series Switch runs in NX-OS mode, and the two devices must peer using OSPF. The devices in the network are configured as follows: • BLeaf1 has been configured with the IP address 10.1.0.2/31 and the router ID 0.0.0.2. • Core1 has been configured with the IP address 10.1.0.3/31 and the router ID 0.0.0.1. • On Cisco ACI, the engineer has enabled OSPF using the default OSPF settings. • The engineer has configured OSPF on the NX-OS switch using the ip router ospf ACI_peering area 1 command. Which action brings up the OSPF adjacency?

   • ASet and Auth Key on Core1.
   • BConfigure Area 1 on BLeaf1.
   • CDisable Hello Timer on BLeaf1.
   • DChange the MTU on Core1.

   Show answer

   Answer: D

   Next question

7. Question 237 · 340 in bank

   

   Refer to the exhibit. The default route is not present in the routing tables of the Cisco ACI leaf switches. All static and direct routes are currently being redistributed and advertised. Which action must be taken to advertise a default route on the eBGP L3Out?

   • AEnable a BGP peer prefix policy set to Always.
   • BConfigure a static default route on the ACI node profiles with next-hop null.
   • CCreate a Default Route Leak Policy on the L3Out.
   • DImplement an export route map matching 0.0.0.0/0.

   Show answer

   Answer: C

   Next question

8. Question 238 · 340 in bank

   An engineer associates EPG-A with a VMM domain and sets the Deployment and Resolution preferences to Immediate. The host that will generate endpoints for EPG-A is attached to Leaf-101 and Leaf-102 using etht1/1. However, no configuration for EPG-A appears to have been pushed to the leaf switches. Which action must be taken for the configuration to be pushed to Leaf-101 and Leaf-102?

   • AEnable CDP or LLDP on the host.
   • BEnable LACP on the leaf switch ports.
   • CDisable and enable eth1/1 on both leaf switches.
   • DConfigure both ports for trunking.

   Show answer

   Answer: A

   Next question

9. Question 239 · 340 in bank

   A Cisco APIC is configured to authenticate users by using RADIUS by default. The network administrator must ensure that the users can access the APIC GUI with a local account if the RADIUS server is unreachable. Which action achieves this goal?

   • AEnable Fallback Check for Default Authentication.
   • BConfigure the fallback login domain to reference Local Realm.
   • CSet RADIUS Realm to connect with Console Authentication.
   • DCreate an additional login domain to associate with local accounts.

   Show answer

   Answer: B

   Next question

10. Question 240 · 340 in bank

    An engineer configures port-12 on Leaf-101 and Leaf-102 to connect to a new server called SVR-12. This server will belong to a new EPG-12 and needs to use Encapsulation VLAN-12. An already existing server, which is named SVR-10, is also connected to the same leaf switches. SVR-10 belongs to EPG-10 and also uses Encapsulation VLAN-12. Which step must the engineer take to configure connectivity for SVR-12 and EPG-12?

    • AAssociate EPG-12 to the same BD as EPG-10.
    • BEnable port local VLAN scope.
    • CDisable native VLAN on both EPGs.
    • DAssign the IP address of SVR-12 to a different subnet.

    Show answer

    Answer: B

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

300-620 practice, question 231. 340 questions available.