300-620 practice questions 241–250

1. Question 241 · 340 in bank

   An engineer must configure a Cisco ACI bridge domain to prevent flooding from unknown unicast frames. Which action must be configured in Cisco ACI to accomplish this goal?

   • ASet the bridge domain option to Flood in Encapsulation.
   • BConfigure Clear Remote MAC Entries in the bridge domain mode.
   • CSet Disable Remote EP Learn in the Fabric Wide Setting Policy.
   • DConfigure the bridge domain to operate in optimized mode.

   Show answer

   Answer: D

   Next question

2. Question 242 · 340 in bank

   

   Refer to the exhibit. A customer is deploying a WAN with these requirements: • Routers 1 and 2 must receive only routes 192.168.11.0/24 and 192.168.21.0/24 from the Cisco ACI fabric. • Reachability to the WAN users must be permitted only for the servers that are located in vrf_prod. Which settings must be configured to meet these objectives?

   • AConfigure the subnets 192.168.11.0/24 and 192.168.21.0/24 as Private to VRF. Configure the subnet 192.168.31.0/24 as Advertised Externally. Configure an EPG subnet 0.0.0.0/0 as Shared Route Control Subnet.
   • BConfigure the subnets 192.168.11.0/24 and 192.168.21.0/24 as Private to VRF. Configure the subnet 192.168.31.0/24 as Advertised Externally. Configure an EPG subnet 0.0.0.0/0 as External Subnets for External EPG.
   • CConfigure the subnets 192.168.11.0/24 and 192.168.21.0/24 as Advertised Externally. Configure the subnet 192.168.31.0/24 as Private to VRF. Configure an EPG subnet 0.0.0.0/0 as External Subnets for External EPG.
   • DConfigure the subnets 192.168.11.0/24 and 192.168.21.0/24 as Advertised Externally. Configure the subnet 192.168.31.0/24 as Private to VRF. Configure an EPG subnet 0.0.0.0/0 as Shared Route Control Subnet.

   Show answer

   Answer: C

   Next question

3. Question 243 · 340 in bank

   An engineer plans a Cisco ACI firmware upgrade. The ACI fabric consists of three Cisco APIC controllers, two spine switches, and four leaf switches. Two leaf switches have 1-Gb copper ports for bare metal servers, and the other two leaf switches have 10-Gb SFP ports to connect storage. Which set of actions accomplishes an upgrade with minimal disruptions?

   • AUpgrade the APIC controllers by selecting the desired firmware and choosing Upgrade Now. Divide the switches into two upgrade groups: spines and leaves. Start the firmware upgrade on the spine upgrade group and then proceed with the leaf upgrade group.
   • BUpgrade the APIC controllers by initiating the upgrade process that uses the most recent uploaded firmware. Divide the switches into three upgrade groups: spines, 1-Gb switches, and 10-Gb switches. Start the firmware upgrade on the spine upgrade group and then proceed with the other two groups.
   • CUpgrade the APIC controllers by selecting the desired firmware and choosing Upgrade Now. Divide the switches into two upgrade groups with one spine, one 1-Gb switch, and one 10-Gb switch per group. Start the firmware upgrade on the first upgrade group and when it finishes, start the second upgrade group.
   • DUpgrade the APIC controllers as a single group by selecting the firmware and choosing Upgrade Now. Divide the switches into four upgrade groups with one switch per group. Start the firmware upgrade on each upgrade group in succession until all four are complete.

   Show answer

   Answer: C

   Next question

4. Question 244 · 340 in bank

   A Cisco ACI fabric is integrated with VMware VDS. The fabric must apply a security policy to check the integrity of traffic out of the network adapter. Which action must be taken to drop the packet when the ESXi host discovers a mismatch between the actual source MAC address transmitted by the guest operating system and the effective MAC address of the virtual machine adapter?

   • AReject MAC changes.
   • BReject forged transmits.
   • CAccept MAC changes.
   • DAccept forged transmits.

   Show answer

   Answer: B

   Next question

5. Question 245 · 340 in bank

   How does Cisco ACI manage the old endpoint information on the original leaf switch after an endpoint moves between two Cisco ACI leaf switches?

   • AA bounce entry is created by COOP communication instead of data plane learning.
   • BA remote endpoint is created to represent the endpoint on another leaf.
   • CCisco APIC deletes an endpoint after receiving GARP packets from the new leaf.
   • DThe spine switch pushes all endpoint database entries to all leaf switches.

   Show answer

   Answer: A

   Next question

6. Question 246 · 340 in bank

   An engineer discovered an outage on the mgmt0 port of Leaf113 and Leaf114. Both leaf switches were recently registered in the fabric and have health scores of 100. The engineer discovers there is no IP address assigned to the mgmt0 interface of the switches. Which action resolves the outage?

   • AStatically bind the mgmt0 interface of Leaf113 and Leaf114 to the oob-default EPG.
   • BEnable Leaf113 and Leaf114 mgmt0 under the leaf switch.
   • CAssociate the oobbrc-default contract to Leaf113 and Leaf114.
   • DAdd Leaf113 and Leaf114 to the node management address policy.

   Show answer

   Answer: A

   Next question

7. Question 247 · 340 in bank

   A Cisco ACI leaf switch learns the source IP address of a packet that enters the front panel port of the switch. Which bridge domain setting is used?

   • AARP Flooding
   • BL3 Unknown Multicast Flooding - Flood
   • CL2 Unknown Unicast - Hardware proxy
   • DUnicast Routing

   Show answer

   Answer: D

   Next question

8. Question 248 · 340 in bank

   

   Refer to the exhibit. An engineer is deploying a Cisco ACI fabric with an L2Out to external switches. The Cisco ACI fabric has just been deployed and follows the default forwarding behavior. Which two actions accomplish a loop free topology? (Choose two.)

   • AAdd ports Eth1/1 and Eth1/2 to the LACP port channel.
   • BEnable MCP on the ports between the leafs and spine switches.
   • CDisconnect the link between Leaf3 and Leaf4.
   • DImplement LLDP on ports Eth1/1 and Eth1/2 on Leaf2.
   • EConfigure BPDU guard on Catalyst switch ports.

   Show answer

   Answer: C

   Next question

9. Question 249 · 340 in bank

   

   Refer to the exhibit. An engineer must migrate the web servers and backup servers from the legacy network to a Cisco ACI environment in the corresponding EPGs. The requirement is to allow communication between the servers in the web EPG and the backup EPG without creating contracts. Which action meets the requirements?

   • AConfigure the Enforced Bridge Domain status flag.
   • BSet the direction of Policy Enforcement to Egress.
   • CSet IP Data-plane learning to Enabled.
   • DSet Policy Control Enforcement to Unenforced.

   Show answer

   Answer: D

   Next question

10. Question 250 · 340 in bank

    When Layer 3 routed traffic is destined to a Cisco ACI fabric, which mechanism does ACI use to detect silent hosts?

    • Agratuitous ARP
    • BARP gleaning
    • Cproxy ARP
    • Dinverse ARP

    Show answer

    Answer: B

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

300-620 practice, question 241. 340 questions available.