600-511 Online Practice Questions and Answers

Which three main problems was a host overlay system designed to address? (Choose three.)

A. workload mobility

B. simplified and automated workload provisioning

C. multitenancy at scale

D. integrate physical and virtual networking

E. increase visibility to traffic flows

F. better root cause analysis capabilities

G. consolidate IT infrastructure teams

Which statement about a whitelist security model is true?

A. Permit all traffic.

B. Deny specific traffic flows, and permit any other traffic.

C. Permit specific traffic flows, and deny any other traffic.

D. Deny all traffic.

Which three statements about the group policy model within ACI are true? (Choose three.)

A. It is an abstracted view of application requirements.

B. Policy is portable.

C. Policy is based on the IP addresses of application services.

D. Policy is extensible.

E. Policy maintains flow information.

F. Policy is enforced from the Cisco APIC.

G. Policy follows the blacklist model.

Which two options are two provisions of ACI for security? (Choose two.)

A. Security services are provided by the fabric, without the need for external appliances.

B. ACI depends on external appliances and software to provide security.

C. ACI provides a stateless whitelist approach for all traffic in the fabric.

D. ACI allows for easy integration of external stateful physical and virtual security devices into the fabric.

Which three elements of the ACI fabric contribute to zero-touch deployment capability? (Choose three.)

A. centralized controller for policy, bootstrap, and image management

B. topology auto discovery, automated configuration, and infrastructure addressing

C. loose wiring validation

D. support for iBGP confederations

E. NX-API and NETCONF protocol interfaces

F. orchestration using Visore

If flowlet switching and dynamic flow prioritization are enabled, which two statements about ACI fabric load balancing are true? (Choose two.)

A. A flowlet is a subset of a TCP/UDP flow that is composed of packets that are part of the same bursts of packets.

B. A flowlet is a subset of a TCP/UDP flow that is composed of packets of approximately the same size (64 bytes to 127 is flowlet 1, 128 to 255 is flowlet 2, ...).

C. The first few identified flowlets of a TCP/UDP flow are treated with a higher priority than the last flowlet of the same TCP/UDP flow.

D. Each flowlet of a TCP/UDP flow is treated with same priority and takes the same path to avoid out-oforder packets.

E. The egress leaf reorders out-of-order packets when flowlet switching is used.

You have an application named "E_commerce" in tenant "Production", which is composed of three tiers of servers (web, app, and DB). Each tier sits in a different EPG (epgWeb, epgApp, and epgDB). Which action should be performed first to measure the performance or packet loss of this application?

A. Check the health score of the application profile "E_commerce".

B. Check the faults of the application profile "E_commerce".

C. Configure a troubleshooting policy for on-demand atomic counters for epgWeb-to-epgApp traffic and epgApp-to-epgDB traffic.

D. Configure a monitoring policy for each of the EPGs of the "E_commerce" application.

Which statement about the infrastructure requirements for an ACI fabric is true?

A. Hypervisors that connect to the ACI fabric must support the Cisco Discovery Protocol so that ACI can discover the presence of virtualized hosts and deploy policies to the ports on which a virtualized host is present.

B. The Cisco Nexus 9336PQ form factor is well suited for large enterprise ACI deployments because it provides 288 40 Gigabit Ethernet ports at the spine.

C. Leaf and spine switches can connect at 40 Gbps with multimode fiber by using the Cisco 40 Gbps short-reach bidirectional QSFP optics modules, which do not require new cabling.

D. The Cisco ACI fabric uses an overlay, based on MPLS VPN, to virtualize the physical infrastructure. This overlay maps the tenant endpoint addresses to the location of the endpoint using the tunnel endpoint.

Which three options are three primary functions of ACI fabric spine switches? (Choose three.)

A. proxy database

B. multidestination tree root

C. distributed default gateway

D. Layer 3 IP fabric underlay

E. spanning-tree root

F. OSPF DR

Which two options are components of a device package? (Choose two.)

A. device configuration

B. device specification

C. device prototype

D. device script

E. device mapping