What does a bridge domain represent?

A. Layer 3 cloud

B. Layer 2 forwarding construct

C. tenant

D. physical domain

A network engineer must design a method to allow the Cisco ACI to redirect traffic to the firewalls. Only traffic that matches specific L4-L7 policy rules should be redirected. The load must be distributed across multiple firewalls to scale the performance horizontally. Which action must be taken to meet these requirements?

A. Configure ACI Service Graph with Unidirectional PBR.

B. Implement ACI Service Graph with GIPo.

C. Implement ACI Service Graph Two Nodes with GIPo.

D. Configure ACI Service Graph with Symmetric PBR.

An engineer is extending an EPG out of the ACI fabric using static path binding. Which statement about the endpoints is true?

A. Endpoints must connect directly to the ACI leaf port.

B. External endpoints are in a different bridge domain than the endpoints in the fabric.

C. Endpoint learning encompasses the MAC address only.

D. External endpoints are in the same EPG as the directly attached endpoints.

Refer to the exhibit.

An engineer configures the Cisco ACI fabric for VMM integration with ESXi servers that are to be connected to the ACI leaves. The server team requires the network switches to initiate the LACP negotiation as opposed to the servers. The LAG group consists of two 10 Gigabit Ethernet links. The server learn also wants to evenly distribute traffic across all available links. Which two enhanced LAG policies meet these requirements? (Choose two.)

A. LACP Mode: LACP Standby

B. LB Mode: Destination IP Address and TCP/UDP Port

C. LB Mode: Source and Destination MAC Address

D. LB Mode: Source IP Address and TCP/UDP Port

E. LACP Mode: LACP Active

Which two IP address types are available for transport over the ISN when they are configured from Cisco ACI Multi-Site Orchestrator? (Choose two.)

A. Management IP of APICs

B. Management IP of the MSO Node

C. Anycast Overlay Multicast TEP

D. MP-BGP EVPN Router-ID

E. Common Pervasive Gateway

A customer requested the creation of a VLAN POOL for VMM integration. The pool must support the creation of 999 dynamic and 10 static VLANs. Which VLAN pool implementation meets the customer requirements?

A. Option A

B. Option B

C. Option C

D. Option D

An engineer must configure a new local user inside a Cisco ACI. The new user must meet these criteria:

1.

Must be provided with complete read-only access to the tenant.

2.

Must be permitted to create and delete EPGs within a specific tenant.

3.

Must not be allowed to modify any other objects within that tenant.

The tenant and security domain association is already in place. Which configuration set configures the new tenant?

A. Create a new role with tenant-admin privilege. Create the local user and assign it to the tenant-security domain. Add the tenant-security domain to the role admin with access privilege type Read. Add the tenant-security domain to the new role with access privilege type Write.

B. Create a new role with tenant-epg privilege. Create the local user and assign it to the tenant-security domain. Add the tenant-security domain to the role read-all with access privilege type Read. Add the tenant-security domain to the new role with access privilege type Write.

C. Create a new role with tenant-connectivity privilege. Create the local user and assign it to the tenant-security domain. Add the tenant-security domain to the role access-admin with access privilege type Read. Add the tenant-security domain to the new role with access privilege type Write.

D. Create a new role with tenant-security privilege. Create the local user and assign it to the tenant-security domain. Add the tenant-security domain to the role tenant-admin with access privilege type Read. Add the tenant-security domain to the new role with access privilege type Write.

Refer to the exhibit.

An engineer is migrating legacy servers into the Cisco ACI environment. The requirement is to ensure that all endpoints and MAC addresses are learned properly in legacy and Cisco ACI switches. Which configuration set must be configured under the bridge domain called bd_360 to accomplish this goal?

A. L2 Unknown Unicast: Hardware Proxy ARP Flooding: Disabled

B. L2 Unknown Unicast: Flood ARP Flooding: Enabled

C. L2 Unknown Unicast: Hardware Proxy ARP Flooding: Enabled

D. L2 Unknown Unicast: Flood ARP Flooding: Disabled

Refer to the exhibit.

An engineer applies an OSPF L3Out between a Cisco ACI fabric and an external router. Router1 must receive a default route from the Cisco ACI via OSPF. Which action ensures that the ACI fabric is the Layer 3 gateway for Router1?

A. A. Configure a default route leak policy in the L3Out.

B. Apply an OSPF interface policy in the OSPF interface profile.

C. Associate the external EPG with the appropriate contract.

D. Include an OSPF route summarization policy in external EPG.

DRAG DROP

Drag and drop the Cisco ACI filter entry options from the left onto the correct categories on the right indicating what are required or optional parameters.

Select and Place: