DRAG DROP

Drag and drop the tenant implementation designs from the left onto the outcomes of the design when a greenfield Cisco ACI fabric is deployed on the right.

Select and Place:

DRAG DROP

An engineer deploys a Cisco ACI Multi-Site Orchestrator for the first time. Drag and drop the actions from the left into the steps on the right to add a site and deploy new Cisco ACI objects to the fabric. Not all actions are used.

Select and Place:

Refer to the exhibit. What must be configured in the service graph to redirect HTTP traffic between the EPG client and EPG server to go through the Cisco ASA firewall?

A. contract filter to allow ARP and HTTP

B. precise filter to allow only HTTP traffic

C. contract with no filter

D. permit-all contract filter

Which feature should be disabled on a bridge domain when a default gateway for endpoints is on an external device instead of a Cisco ACI bridge domain SVI?

A. unicast routing

B. ARP flooding

C. unknown unicast flooding

D. proxy ARP

An engineer designs a Cisco ACI Multi-Pod solution that requires a pair of active-standby firewalls in different pods for external connectivity. How should the firewalls be implemented?

A. PBR for routed firewalls

B. separate L3Out peerings for routed firewalls

C. routed firewall for the default gateway

D. transparent firewalls

How is broadcast forwarded in Cisco ACI Multi-Pod after ARP flooding is enabled?

A. For the specific bridge domain, all spines forward the broadcast frames to IPN routers

B. Broadcast frames are forwarded inside the pod and across the IPN using the multicast address that is associated to the bridge domain

C. Within a pod, the ingress leaf switch floods the broadcast frame on all fabric ports

D. Ingress replication is used on the spines to forward broadcast frames in the IPN infrastructure

An engineer configures a Cisco ACI Multi-Pod for disaster recovery. Which action should be taken for the new nodes to be discoverable by the existing Cisco APICs?

A. Enable subinterfaces with dot1q tagging on all links between the IPN routers.

B. Configure IGMPv3 on the interfaces of IPN routers that face the Cisco ACI spine.

C. Enable DHCP relay on all links that are connected to Cisco ACI spines on IPN devices.

D. Configure BGP as the underlay protocol in IPN.

What is the advantage of implementing an active-active firewall cluster that is stretched across separate pods when anycast services are configured?

A. A different MAC/IP combination can be configured for the firewall in each pod.

B. The local pod anycast node is preferred by the local spines.

C. A cluster can be deployed in transparent mode across pods.

D. Local traffic in a pod is load-balanced between the clustered firewalls.

Refer to the exhibit. Which two configuration steps are required in ISN for Cisco ACI Multi-Site setup? (Choose two.)

A. Connect Spine2 to ISN routers.

B. Configure BIDIR-PIM throughout the ISN

C. Increase ISN MTU to support the maximum MTU that is sent by endpoints

D. Configure OSPF between spines and ISN routers

E. Enable IGMPv3 on ISN routers

An engineer implements the Cisco ACI solution and needs to confirm that the leaf switch correctly learns the remote endpoint MAC. Which information must be included in the VXLAN packet that is received from the Cisco ACI spine for the Cisco ACI leaf to learn MAC as a remote endpoint?

A. VRF

B. application profile

C. bridge domain

D. EPG