600-660 Online Practice Questions and Answers

DRAG DROP

An engineer deploys a Cisco ACI Multi-Site Orchestrator for the first time. Drag and drop the actions from the left into the steps on the right to add a site and deploy new Cisco ACI objects to the fabric. Not all actions are used.

Select and Place:

Refer to the exhibit. Two application profiles are configured in the same tenant and different VRFs. Which contract scope is configured to allow communication between the two application profiles?

A. global

B. VRF

C. application

D. tenant

Refer to the exhibit. Which two configurations enable inter-VRF communication? (Choose two.)

A. Set the subnet scope to Shared Between VRFs

B. Enable Advertise Externally under the subnet scope

C. Change the contract scope to Tenant

D. Change the subject scope to VRF

E. Export the contract and import as a contract interface

Refer to the exhibit. The 0.0.0.0/0 is configured as a default static route on L3Out-1. Which action should be taken for the 0.0.0.0/0 prefix to advertise out on L3Out-2 OSPF?

A. Enable Shared Security Import Subnet

B. Enable Aggregate Export Subnet

C. Enable Shared Route Control Subnet

D. Enable Export Route Control Subnet

A cloud provider must make a pair of firewalls available to all tenants. Each tenant defines its own service graph. Where should the Layer 4 to Layer 7 service be configured to accomplish this goal?

A. management tenant

B. infrastructure tenant

C. user tenant

D. common tenant

Which feature should be disabled on a bridge domain when a default gateway for endpoints is on an external device instead of a Cisco ACI bridge domain SVI?

A. unicast routing

B. ARP flooding

C. unknown unicast flooding

D. proxy ARP

An engineer configures a new Cisco ACI Multi-Pod setup. Which action should be taken for fabric discovery to be successful for the nodes in Pod 2?

A. Select the Route Reflector field in Pod Peering

B. Enable the DSCP class-cos translation policy for Layer 3 traffic

C. Configure POD 2 Data Plane TEP under the Pod Connection Profile

D. Add the IPN subnet under the Fabric External Routing Profile

What is the advantage of implementing an active-active firewall cluster that is stretched across separate pods when anycast services are configured?

A. A different MAC/IP combination can be configured for the firewall in each pod.

B. The local pod anycast node is preferred by the local spines.

C. A cluster can be deployed in transparent mode across pods.

D. Local traffic in a pod is load-balanced between the clustered firewalls.

In a Cisco ACI Multi-Site fabric, the Inter-Site BUM Traffic Allow option is enabled in a specific stretched bridge domain. What is used to forward BUM traffic to all endpoints in the same broadcast domain?

A. ingress replication on the spines in the source site

B. egress replication on the source leaf switches

C. egress replication on the destination leaf switches

D. ingress replication on the spines in the destination site

Where are STP BPDUs flooded in Cisco ACI fabric?

A. in the bridge domain VLAN

B. in the native VLAN ID

C. in the access encapsulation VLAN part of different VLAN pools

D. in the VNID that is assigned to the FD VLAN