600-660 Online Practice Questions and Answers

DRAG DROP

A leaf receives unicast traffic that is destined to an unknown source, and spine proxy is enabled in the corresponding bridge domain. Drag and drop the Cisco ACI forwarding operations from the left into the order the operation occurs on the right.

Select and Place:

What is the purpose of the Forwarding Tag (FTAG) in Cisco ACI?

A. FTAG is used in Cisco ACI to add a label to the iVXLAN traffic in the fabric to apply the correct policy.

B. FTAG is used in Cisco ACI to add a label to the VXLAN traffic in the fabric to apply the correct policy.

C. FTAG trees in Cisco ACI are used to load balance unicast traffic.

D. FTAG trees in Cisco ACI are used to load balance mutli-destination traffic.

Which two components must be configured as stretched to establish intra-VRF communication between two EPGs that are deployed in different sites and different bridge domains? (Choose two.)

A. contract

B. tenant

C. application profile

D. bridge domain

E. EPG

Refer to the exhibit. The 0.0.0.0/0 is configured as a default static route on L3Out-1. Which action should be taken for the 0.0.0.0/0 prefix to advertise out on L3Out-2 OSPF?

A. Enable Shared Security Import Subnet

B. Enable Aggregate Export Subnet

C. Enable Shared Route Control Subnet

D. Enable Export Route Control Subnet

A cloud provider must make a pair of firewalls available to all tenants. Each tenant defines its own service graph. Where should the Layer 4 to Layer 7 service be configured to accomplish this goal?

A. management tenant

B. infrastructure tenant

C. user tenant

D. common tenant

An engineer designers a Cisco ACI Multi-Pod solution that requires a pair of active-standby firewalls in different pods for external connectivity. How should the firewalls be implemented?

A. PBR for routed firewalls

B. separate L3Out peerings for routed firewalls

C. routed firewall for the default gateway

D. transparent firewalls

How is broadcast forwarded in Cisco ACI Multi-Pod after ARP flooding is enabled?

A. For the specific bridge domain, all spines forward the broadcast frames to IPN routers

B. Broadcast frames are forwarded inside the pod and across the IPN using the multicast address that is associated to the bridge domain

C. Within a pod, the ingress leaf switch floods the broadcast frame on all fabric ports

D. Ingress replication is used on the spines to forward broadcast frames in the IPN infrastructure

What is the advantage of implementing an active-active firewall cluster that is stretched across separate pods when anycast services are configured?

A. A different MAC/IP combination can be configured for the firewall in each pod.

B. The local pod anycast node is preferred by the local spines.

C. A cluster can be deployed in transparent mode across pods.

D. Local traffic in a pod is load-balanced between the clustered firewalls.

An existing Cisco ACI Multi-Site setup with default fabric settings contains endpoints that communicate with an MTU of 1500. What is the minimum MTU value that must be supported by the ISN to allow control plane endpoint information exchange between sites?

A. 9000

B. 1554

C. 9100

D. 1600

What are two characteristics of Cisco ACI interaction with MSTP? (Choose two.)

A. A Cisco ACI leaf flushes all local endpoints in the received EPG when an MSTP TCN frame is received.

B. A static path binding is required for native VLAN to carry the MST BPDUs in existing EPGs.

C. Mis-cabling protocol is used to snoop the MSTP TCN packets.

D. A dedicated EPG must be created for the native VLAN ID with static bindings toward the MSTP-enabled switches.

E. The PVST simulation must be configured on external network switches to support MSTP.