NEW QUESTION 1
Which two actions extend a Layer 2 domain beyond the ACI fabric? (Choose two.)

• A. extending the routed domain out of the ACI fabric
• B. creating a single homed Layer 3 Out
• C. creating an external physical network
• D. extending the bridge domain out of the ACI fabric
• E. extending the EPG out of the ACI fabric

Answer: AE

NEW QUESTION 2
Which feature dynamically assigns or modifies the EPG association of virtual machines based on their attributes?

• A. vzAny contracts
• B. standard contracts
• C. application EPGs
• D. uSeg EPGs

Answer: D

NEW QUESTION 3
Which table holds IP address, MAC address and VXLAN/VLAN information on a Cisco ACI leaf?

• A. endpoint
• B. adjacency
• C. RIB
• D. ARP

Answer: A

Explanation:
Reference: https://www.cisco.com/c/en/us/solutions/collateral/data-center-virtualization/application-centric-infrastructure/white-paper-c11-739989.html

NEW QUESTION 4
A Solutions Architect is asked to design two data centers based on Cisco ACI technology that can extend L2/L3, VXLAN, and network policy across locations. ACI Multi-Pod has been selected. Which two requirements must be considered in this design? (Choose two.)

• A. ACI underlay protocols, i.
• B. COOP, IS-IS and MP-BGP, spans across pod
• C. Create QoS policies to make sure those protocols have higher priority.
• D. A single APIC Cluster is required in a Multi-Pod desig
• E. It is important to place the APIC Controllers in different locations in order to maximize redundancy and reliability.
• F. ACI Multi-Pod requires an IP Network supporting PIM-Bidir.
• G. ACI Multi-Pod does not support Firewall Clusters across Pod
• H. Firewall Clusters should always be local.
• I. Multi-Pod requires multiple APIC Controller Clusters, one per po
• J. Make sure those clusters can communicate to each other through a highly available connection.

Answer: AE

NEW QUESTION 5
Which type of profile needs to be created to deploy an access port policy group?

• A. attachable entity
• B. Pod
• C. module
• D. leaf interface

Answer: A

Explanation:
Reference: https://www.cisco.com/c/en/us/td/docs/switches/datacenter/aci/apic/sw/1-x/Operating_ACI/guide/b_Cisco_Operating_ACI/b_Cisco_Operating_ACI_chapter_0110.html

NEW QUESTION 6
An engineer is extending an EPG out of the ACI fabric using static path binding. Which statement about the endpoints is true?

• A. Endpoints must connect directly to the ACI leaf port.
• B. External endpoints are in a different bridge domain than the endpoints in the fabric.
• C. Endpoint learning encompasses the MAC address only.
• D. External endpoints are in the same EPG as the directly attached endpoints.

Answer: C

NEW QUESTION 7
Which description regarding the initial APIC cluster discovery process is true?

• A. The APIC uses an internal IP address from a pool to communicate with the nodes.
• B. Every switch is assigned a unique AV by the APIC.
• C. The APIC discovers the IP address of the other APIC controllers by using Cisco Discovery Protocol.
• D. The ACI fabric is discovered starting with the spine switches.

Answer: C

Explanation:
Reference: https://www.cisco.com/c/en/us/td/docs/switches/datacenter/aci/apic/sw/1-x/aci-fundamentals/b_ACI-Fundamentals/b_ACI-Fundamentals_chapter_010011.html

NEW QUESTION 8
Which type of policy configures the suppression of faults that are generated from a port being down?

• A. fault lifecycle assignment
• B. event lifecycle assignment
• C. fault severity assignment
• D. event severity assignment

Answer: C

Explanation:
Reference: https://www.cisco.com/c/en/us/td/docs/switches/datacenter/aci/apic/sw/all/faults/guide/b_APIC_Faults_Errors/b_IFC_Faults_Errors_chapter_01.html

NEW QUESTION 9
When configuring Cisco ACI VMM domain integration with VMware vCenter, which object is created in vCenter?

• A. datacenter
• B. VMware vSphere Standard vSwitch
• C. VMware vSphere Distributed Switch
• D. cluster

Answer: C

NEW QUESTION 10
Which attribute should be configured for each user to enable RADIUS for external authentication in Cisco ACI?

• A. cisco-security domain
• B. cisco-auth-features
• C. cisco-aci-role
• D. cisco-av-pair

Answer: D

Explanation:
Reference: https://www.cisco.com/c/en/us/td/docs/switches/datacenter/aci/apic/sw/2-x/Security_config/b_Cisco_APIC_Security_Configuration_Guide/b_Cisco_APIC_Security_Guide_chapter_01011.html

NEW QUESTION 11
Which new construct must a user create when configuring in-band management?

• A. VLAN pool
• B. management contract
• C. management tenant
• D. bridge domain

Answer: D

Explanation:
Reference: https://www.cisco.com/c/en/us/td/docs/switches/datacenter/aci/apic/sw/kb/b_KB_Configuring_Static_Management_Access.html

NEW QUESTION 12
Refer to the exhibit.

Which Adjacency Type value should be set when the client endpoint and the service node interface are in a different subnet?

• A. Routed
• B. Unicast
• C. L3Out
• D. L3

Answer: D

NEW QUESTION 13
A RADIUS user resolves its role via the Cisco AV Pair. What object does the Cisco AV Pair resolve to?

• A. tenant
• B. security domain
• C. primary Cisco APIC
• D. managed object class

Answer: D

Explanation:
Reference: https://www.cisco.com/c/en/us/td/docs/switches/datacenter/aci/apic/sw/2-x/Security_config/b_Cisco_APIC_Security_Configuration_Guide/b_Cisco_APIC_Security_Guide_chapter_01011.html

NEW QUESTION 14
An engineer is implementing a Cisco ACI data center network that includes Cisco Nexus 2000 Series 10G fabric extenders. Which physical topology is supported?
A.

B.

C.

• A.

Answer: D

NEW QUESTION 15
Regarding the MTU value of MP-BGP EVPN control plane packets in Cisco ACI, which statement about communication between spine nodes in different sites is true?

• A. By default, spine nodes generate 9000-bytes packets to exchange endpoints routing informatio
• B. As a result, the Inter-Site network should be able to carry 9000-bytes packets.
• C. By default, spine nodes generate 1500-bytes packets to exchange endpoints routing informatio
• D. As a result, the Inter-Site network should be able to carry 1800-bytes packets.
• E. By default, spine nodes generate 1500-bytes packets to exchange endpoints routing informatio
• F. As a result, the Inter-Site network should be able to carry 1500-bytes packets.
• G. By default, spine nodes generate 9000-bytes packets to exchange endpoints routing informatio
• H. As a result, the Inter-Site network should be able to carry 9100-bytes packets.

Answer: D

NEW QUESTION 16
Which statement about ACI syslog is true?

• A. Notifications for different scopes of syslog objects can be sent only to one destination.
• B. Syslog messages are sent to the destination through the spine.
• C. All syslog messages are sent to the destination through APIC.
• D. Switches send syslog messages directly to the destinations.

Answer: A

Explanation:
Reference: https://www.ciscolive.com/c/dam/r/ciscolive/us/docs/2021/pdf/BRKACI-2303.pdf

NEW QUESTION 17
An engineer is creating a configuration import policy that must terminate if the imported configuration is incompatible with the existing system. Which import mode achieves this result?

• A. merge
• B. atomic
• C. best effort
• D. replace

Answer: B

Explanation:
Reference: https://www.cisco.com/c/en/us/td/docs/switches/datacenter/aci/apic/sw/4-x/aci-fundamentals/Cisco-ACI-Fundamentals-401/Cisco-ACI-Fundamentals-401_chapter_01011.html

NEW QUESTION 18
Which two statements regarding ACI Multi-Site are true? (Choose two.)

• A. The Multi-Site orchestrator must be directly attached to one ACI leaf.
• B. Routers in the Inter-Site network must run OSPF, DHCP relay, and MP-BGP.
• C. ACI Multi-Site is a solution that supports a dedicated APIC cluster per site.
• D. ACI Multi-Site is a solution that allows one APIC cluster to manage multiple ACI sites.
• E. The Inter-Site network routers should run OSPF to establish peering with the spines.

Answer: AE

NEW QUESTION 19
An engineer is implementing Cisco ACI at a large platform-as-a-service provider using APIC controllers, 9396PX leaf switches, and 9336PQ spine switches. The leaf switch ports are configured as IEEE 802.1p ports. Where does the traffic exit from the EPG in IEEE 802.1p mode in this configuration?

• A. from leaf ports tagged as VLAN 0
• B. from leaf ports untagged
• C. from leaf ports tagged as VLAN 4094
• D. from leaf ports tagged as VLAN 1

Answer: A

NEW QUESTION 20
Where is the COOP database located?

• A. leaf
• B. spine
• C. APIC
• D. endpoint

Answer: B

Explanation:
Reference: https://www.cisco.com/c/en/us/solutions/collateral/data-center-virtualization/application-centric-infrastructure/white-paper-c11-739989.html

NEW QUESTION 21
......