600-660 Online Practice Questions and Answers

Which two actions should be taken to ensure a scalable solution when multiple EPGs in a VRF require unrestricted communication? (Choose two.)

A. Configure a taboo contract between the EPGs that require unrestricted communication between each other.

B. Enable Preferred Group Member under the EPG Collection for VRF section.

C. Set the VRF policy control enforcement preference to Unenforced.

D. Set the EPGs that require unrestricted communication between each other as preferred group members.

E. Set the EPGs that require policy enforcement between each other as preferred group members.

Which two components must be configured as stretched to establish intra-VRF communication between two EPGs that are deployed in different sites and different bridge domains? (Choose two.)

A. contract

B. tenant

C. application profile

D. bridge domain

E. EPG

Refer to the exhibit. An engineer wants to avoid connectivity problems for the endpoint EP1 when it reaches an external L3Out network through the gateway 10.2.2.254/24. Which two configurations must be implemented in BD-BD2? (Choose two.)

A. Disable unicast routing

B. Enable IP data plane learning for the VRF

C. Disable ARP flooding

D. Enable ARP flooding

E. Enable unicast routing

Refer to the exhibit. Which configuration mode must be selected for the VMM vSwitch Port Channel policy to avoid MAC flapping on the Cisco UCS Fls and Cisco ACI leaf switches?

A. LACP Passive

B. MAC Pinning

C. LACP Active

D. Static Channel ?Mode On

How is broadcast forwarded in Cisco ACI Multi-Pod after ARP flooding is enabled?

A. For the specific bridge domain, all spines forward the broadcast frames to IPN routers

B. Broadcast frames are forwarded inside the pod and across the IPN using the multicast address that is associated to the bridge domain

C. Within a pod, the ingress leaf switch floods the broadcast frame on all fabric ports

D. Ingress replication is used on the spines to forward broadcast frames in the IPN infrastructure

An engineer configures a Cisco ACI Multi-Pod for disaster recovery. Which action should be taken for the new nodes to be discoverable by the existing Cisco APICs?

A. Enable subinterfaces with dot1q tagging on all links between the IPN routers.

B. Configure IGMPv3 on the interfaces of IPN routers that face the Cisco ACI spine.

C. Enable DHCP relay on all links that are connected to Cisco ACI spines on IPN devices.

D. Configure BGP as the underlay protocol in IPN.

What is the advantage of implementing an active-active firewall cluster that is stretched across separate pods when anycast services are configured?

A. A different MAC/IP combination can be configured for the firewall in each pod.

B. The local pod anycast node is preferred by the local spines.

C. A cluster can be deployed in transparent mode across pods.

D. Local traffic in a pod is load-balanced between the clustered firewalls.

A network engineer configured an active-active firewall cluster that is stretched across separate pods in the Cisco ACI fabric. Which two implementation setups for anycast services are available? (Choose two.)

A. Modify the Cisco ACI contract scope

B. Modify the MAC address on the second firewall

C. Configure the firewalls behind an EPG subnet

D. Deselect No Default SVI Gateway under EPG Subnet

E. Deploy a Layer 4 to Layer 7 service graph with PBR

An existing Cisco ACI Multi-Site setup with default fabric settings contains endpoints that communicate with an MTU of 1500. What is the minimum MTU value that must be supported by the ISN to allow control plane endpoint information exchange between sites?

A. 9000

B. 1554

C. 9100

D. 1600

What is a design implication for Cisco ACI using an application-centric approach?

A. Multiple VLANs and/or multiple EPGs are under one bridge domain

B. VLAN numbers are in the names of the bridge domain and EPG objects

C. One EPG is mapped to multiple bridge domains

D. One VLAN equals one EPG equals one bridge domain