An ACI engineer is implementing a Layer 3 out inside the Cisco ACI fabric that must meet these requirements:The data center core switch must be connected to one of the leaf switches with a single 1G link.The routes must be exchanged using a link-state routing protocol that supports hierarchical network design.The data center core switch interface must be using 802.1Q tagging, and each vlan will be configured with a dedicated IP address.Which set of steps accomplishes these goals?

Configure the OSPF Protocol policy with an area of 0. Create Routed Outside object and Node Profile, selecting OSPF as the routing protocol. Build the Interface profile, selecting Routed Sub-interface and the appropriate VLAN. Configure the External Network object with a network of 0.0.0.0/0.

Set up the ElGRP Protocol policy with the selected Autonomous System number. Set up the Routed External Network object ana Node Profile, selecting ElGRP Create the Switch profile, selecting Portchannel and the appropriate interfaces Create the default network and associate it with the Routed Outside object.

Set up the BGP Protocol policy with the Autonomous System number of 0. Configure an interface policy and an External Bridged Domain. Create an External Bridged Network using the configured VLAN pool. Build the Leaf profile, selecting Routed sub-interface and the appropriate VLAN.

Configure the OSPF Protocol policy with an area of 0. Create Routed Outside object and Node Profile, selecting OSPF as the routing protocol. Build the Interface profile, selecting Routed Sub-interface and the appropriate VLAN. Configure the External Network object with a network of 0.0.0.0/0.

Set up the ElGRP Protocol policy with the selected Autonomous System number. Create the Routed Outside object and Node Profile selecting ElGRP Configure the Interface profile selecting Routed Interface and the appropriate interfaces. Create the External Network object with a network of 0.0.0.0/0.

An engineer must advertise a bridge domain subnet out of the ACI fabric to an OSPF neighbor. Which two configuration steps are required? (Choose two.)

Configure Subnet scope to Advertised Externally

Add L50ut profile to the bridge domain using Associated L30uts section

Configure Subnet scope to Advertised Externally

Add External Subnet for External EPG flag under External EPG.

Create Route Control Profile with the export direction under External EPG.

Add L50ut profile to the bridge domain using Associated L30uts section

Configure the Subnet under the EPG level.

An engineer must perform a Cisco ACI fabric upgrade that minimizes the impact on user traffic and allows only permitted users to perform an upgrade. Which two configuration steps should be taken to meet these requirements?

Divide switches into two or more maintenance groups.

Grant the fabric administrator role to a user who performs an upgrade.

Divide Cisco APIC controllers into two or more maintenance groups.

Grant tenant-ext-admin access to a user who performs an upgrade

Combine all switches into an upgrade group.

Divide switches into two or more maintenance groups.

Grant the fabric administrator role to a user who performs an upgrade.

All workloads in VLAN 1001 have been migrated into EPG-1001. The requirement is to move the gateway address for VLAN 1001 from the core outside the Cisco ACI fabric into the Cisco ACI fabric.The endpoints in EPG-1001 must route traffic to endpoints in other EPGs and minimize flooded traffic in the fabric. Which configuration set is needed on the bridge domain to meet these requirements?

Enable Hardware Proxy Enable Unicas! Routing

Disable ARP Flood Disable Limn Endpoint Learning

Enable Hardware Proxy Enable Unicas! Routing

Disable Local IP Learning Limit Disable Unicast Routing

Enable Flood Enable Unicast Routing

Refer to the exhibit, An engineer is deploying a Cisco ACI environment but experiences a STP loop between switch1 and switch2. Which configuration step is needed to break the STP loop?

Enable the native VLAN on the interfaces facing the MST switches using static pons in a dedicated EPG.

Configure the STP instance to VLAN mapping under the switch STP policy.

Configure a Layer 2 external bridged network on the interfaces facing the MST switches.

Enable the native VLAN on the interfaces facing the MST switches using static pons in a dedicated EPG.

Enable BPDU filter under the STP interface policy on the Interfaces lacing the MST switches.

A customer creates Layer 3 connectivity to the outside network. However, only border leaf switches start receiving destination updates to other networks from the newly created L3Out. The updates must also be propagated to other CiscoACI leaf switches. The L3Out is linked with the EPGs via a contract. Which action must be taken in the pod policy group to accomplish this goal?

Apply a BGP route reflector policy.

Implement an access management policy.

A network administrator configures AAA inside the Cisco ACI fabric. The authentication goes through the local users if the TACACS+ server is not reachable. If the Cisco APIC is out of the cluster, the access must be granted through the fallback domain. Which configuration set meets these requirements?

Ping Check: FalseDefault Authentication Realm: TACACS+Fallback Check: True

Ping Check: TrueDefault Authentication Realm: LocalFallback Check: True

Ping Check: TrueDefault Authentication Realm: TACACS+Fallback Check: False

Ping Check: FalseDefault Authentication Realm: LocalFallback Check: False

Ping Check: FalseDefault Authentication Realm: TACACS+Fallback Check: True

A Cisco ACI environment consists of multiple silent hosts that are often relocated between leaf switches. When the host is relocated, the bridge domain takes more than a few seconds to relearn the host’s new location. The requirement is to minimize the relocation impact and make the ACI fabric relearn the new location of the host faster. Which action must be taken to meet these requirements?

Configure ARP Flooding to Enabled.

Set Unicast Routing to Enabled.

Configure ARP Flooding to Enabled.

Set L2 Unknown Unicast to Hardware Proxy.

Configure IP Data-Plane Learning to No.

Refer to the exhibit. Refer to the exhibit. An engineer configures an L3Out but receives the error presented. Which action clears the fault?

Acknowledge the QoS-related error.

A customer must upgrade the Cisco ACI fabric to use a feature from the new code release. However, there is no direct path from the current release to the desired one. Based on the Cisco APIC Upgrade/Downgrade Support Matrix, the administrator must go through one intermediate release.Which set of steps must be taken to upgrade the fabric to the new release?

Upgrade the APICs to an interim release.Upgrade the switches to an interim release.Upgrade the APICs to the targeted release.Upgrade the leaf and spine switches to the targeted release.

Upgrade the APICs to an interim release and then switches to an interim release.When all switches are operational, upgrade leaf switches to the targeted release.Upgrade the spine switches to the targeted release.Upgrade the APICs to the targeted release.

Upgrade the APICs to an interim release.Upgrade the leaf switches directly to the targeted release.Upgrade the spine switches directly to the targeted release.Upgrade the APICs to the targeted release.

Upgrade the APICs directly to the targeted release.Upgrade the switches to an interim release.When all switches are operational, upgrade the leaf switches to the targeted release.Upgrade the spine switches to the targeted release.

Refer to the exhibit. Refer to the exhibit. Which two configuration steps are completed before this output is generated?(Choose two.)

MCP policy for the interface policy group for Port-channel 12 is enabled.

BPDU Guard is enabled for the interface policy group for Port-channel 12.

MCP policy for the interface policy group for Port-channel 12 is enabled.

MCP Instance Policy default in the global access policies is enabled.

Error Disabled Recovery Policy for Loop Indication by MCP is set to True.

BPDU Guard is enabled for the interface policy group for Port-channel 12.

Spanning Tree Policy Region STP_4CAF232E48FF20 is added to the spanning-tree policy of the switch.

A network engineer configures the Cisco ACI fabric to connect to vCenter with these requirements:Port groups must be automatically created on the distributed virtual switch.Port groups must use the VLAN allocation in the range between 20-30.The deployment must optimize the CAM space on the leaf switches.Which set of actions meets these criteria?

Create a dynamic VLAN pool with the VLAN range of 20-30.Create a VMM domain and associate it with the VLAN pool.Create the EPG and associate the domain.Set the deployment immediacy to On Demand.

Create a dynamic VLAN pool with the VLAN range of 20-30.Create a physical domain and associate it with the VLAN pool.Create the EPG and associate the domain.Set the deployment immediacy to On Demand.

Create a static VLAN pool with the VLAN range of 20-30.Create a physical domain and associate it with the VLAN pool.Create the EPG and associate the domain.Set the deployment immediacy to Immediate.

Create a static VLAN pool with the VLAN range of 20-30.Create a VMM domain and associate it with the VLAN pool.Create the EPG and associate the domain.Set the deployment immediacy to Immediate.

Refer to the exhibit. Refer to the exhibit. A Cisco ACI environment hosts two e-commerce applications. The default contract from a common tenant between different application tiers is used, and the applications work as expected. The customer wants to move to more specific contracts to prevent unwanted traffic between EPGs. A network administrator creates the app-to-db contract to meet this objective for the application and database tiers. The application EPGs must communicate only with their respective database EPGs. How should this contract be configured to meet this requirement?

Implement the app-to-db as a Taboo contract.

Set the app-to-db scope to Global.

Set the app-to-db scope to Application Profile.

Implement the app-to-db scope as VRF.

Implement the app-to-db as a Taboo contract.

Refer to the exhibit. Refer to the exhibit. An engineer configured subnets on the external EPG called L3OUT_CORE. The external endpoints in the 10.1.0.0/24 subnet can reach internal endpoints, but the external endpoints in the 172.16.1.0/24 subnet are unreachable. Which set of actions enables the connectivity?

Delete the external EPG subnet 0.0.0.128/1.Create the 128.0.0.0/1 subnet.

Delete both external EPG subnets.Create the 0.0.0.0/1 subnet.

Delete the external EPG subnet 0.0.0.128/1.Create the 128.0.0.0/1 subnet.

Delete both external EPG subnets.Create the 0.0.0.0/0 subnet.

Delete the external EPG subnet 0.0.0.0/0.Create the 0.0.0.0/128 subnet.

An engineer deploys a two-pod Cisco ACI Multi-Pod environment. Why should no more than two Cisco APIC controllers be deployed in the same pod?

to enable equal capacity to scale in each pod

to avoid losing all replicas of a shard if a pod fails

to avoid hair-pinning traffic that is destined for the primary APIC controller between pods

to ensure that all nodes in all pods have local access to a controller

Refer to the exhibit. Refer to the exhibit. An engineer configures communication between the EPGs in different tenants.Which action should be taken to create the subnet?

Change Scope to Shared between VRFs.

Leave Scope set to Private to VRF.

Add the L3Out for Route Profile value.

Change Scope to Advertised Externally.

Refer to the exhibit. Refer to the exhibit. An engineer must divert the traffic between VM-1 and VM-2 by using a Multi- Node service graph. The solution should prevent an insufficient number of available Layer 4 to Layer 7 devices in the first cluster. Which configuration set accomplishes this goal?

PBR node tracking tracking threshold with action deny symmetric PBR unidirectional PBR

PBR node tracking tracking threshold with action bypass symmetric PBR resilient hashing

PBR node tracking tracking threshold with action permit unidirectional PBR resilient hashing

PBR node tracking tracking threshold with action permit symmetric PBR resilient hashing

PBR node tracking tracking threshold with action deny symmetric PBR unidirectional PBR

An engineer must add a group of 70 bare-metal ESXi servers to the Cisco ACI fabric, which is integrated with vCenter. These configuration steps are complete:The configured pool of ESXi hosts is configured with an Attachable Access Entity Profile (AAEP) called AEP_VMM.The new group uses the AAEP called AEP_BAREMETAL.Which action extends functional VMM integration to the new nodes?

Add the VMM domain under the AEP_BAREMETAL AAEP object.

Update AAEP to AEP_VMM on all policy groups that are used toward bare-metal servers.

Create a new AAEP container object for policy groups for AEP_VMM.

Implement a separate VMM domain for the bare-metal servers by using AEP_VMM.

Add the VMM domain under the AEP_BAREMETAL AAEP object.

What is the purpose of the Overlay Multicast TEP in a Cisco ACI Multi-Site deployment?

to perform head-end replication for BUM traffic

to source and receive unicast VXLAN data plane traffic

to establish MP-BGP EVPN adjacencies with the spine nodes in remote sites

to encapsulate multicast traffic in a common multicast group

to perform head-end replication for BUM traffic

Refer to the exhibit. Refer to the exhibit. A network engineer must complete the Cisco ACI implementation based on the logical system design created by the systems architect. Which Cisco ACI object is required where the dotted line indicates to complete the task?

attachable Access Entity Profile

When a pre-provision immediacy is used, when is the policy downloaded to the Cisco ACI leaf switch?

The policy is downloaded to the associated leaf switch software when the ESXi host is attached to a DVS.

The policy is downloaded and programmed in the hardware policy CAM when the change is implemented on the Cisco APIC.

The policy is programmed in the hardware policy CAM when the policy is downloaded in the leaf software.

The policy is programmed in the hardware policy CAM when the first packet is received through the data path.

The policy is downloaded to the associated leaf switch software when the ESXi host is attached to a DVS.

A network engineer must integrate VMware vCenter cluster with Cisco ACI. The requirement is for the management traffic of the hypervisors and VM controllers to use the virtual switch associated with the Cisco Application Policy. The EPG called "Vmware-MGMT" with VLAN 300 has been created for this purpose. Which set of steps must be taken to complete the configuration?

Add VLAN 300 with static allocation to the VLAN POOL that is used for VMM integration.Attach the VMM domain to the target EPG with resolution preprovision, mode static, untagged access VLAN, and Port-Encap 300.

Associate the target EPG with the VMM domain with default settings.Enable Infrastructure VLAN on AAEP used toward VMware hypervisors.

Enable Infrastructure VLAN on AAEP used toward VMware hypervisors.Associate the target EPG with the VMM domain with default settings.

Enable Infrastructure VLAN on AAEP used toward VMware hypervisors.Create a static binding in the target EPG toward VMware hypervisors with VLAN 300, untagged access VLAN, and Untagged 802.1P mode.

Add VLAN 300 with static allocation to the VLAN POOL that is used for VMM integration.Attach the VMM domain to the target EPG with resolution preprovision, mode static, untagged access VLAN, and Port-Encap 300.

Refer to the exhibit. Refer to the exhibit. A Cisco ACI fabric displays this fault. Which set of actions modifies the event to be displayed as a warning in the future?

Navigate to the ACI Events tab. Change the severity level.

Navigate to the ACI Events tab. Create a new record.

Navigate to the ACI Fault tab. Create a new record.

Navigate to the ACI Events tab. Change the severity level.

Navigate to the ACI Fault tab. Change the severity level.

A bridge domain for a new endpoint group in the Cisco ACI fabric must meet these requirements:The bridge domain must function as the default gateway for the subnet so that routing remains within the Cisco ACI fabric.ARP requests must be managed via Layer 3 unicast packets or be dropped to reduce excessive broadcast traffic.The impact of misconfigured virtual machines must be kept to a minimum by preventing IP addresses outside of the configured subnet from being routed.Which set of actions must be taken?

Enable Unicast Routing on the bridge domain and configure a subnet.Set L2 Unknown Unicast to Flood.Disable Endpoint Retention Policy.

Disable ARP Flooding.Enable Limit IP Learning to Subnet.Enable Unicast Routing on the bridge domain and configure a subnet.

Enable Limit IP Learning to Subnet.Enable Unicast Routing on the bridge domain and configure a subnet.Set Multi-Destination Flooding to Flood in BD.

Set Endpoint Retention Policy to default.Enable ARP Flooding.Enable Unicast Routing on the bridge domain and configure a subnet.

Enable Unicast Routing on the bridge domain and configure a subnet.Set L2 Unknown Unicast to Flood.Disable Endpoint Retention Policy.

An engineer configures a one-armed policy-based redirect service Insertion for an unmanaged firewall. The engineer configures these Cisco ACI objects: a contract named All_Traffic_Allowed a Layer 4 to Layer 7 device named FW-Device a policy-based redirect policy named FW-1Arm-Policy-Based RedirectPolicy Which configuration set redirects the traffic to the firewall?

Configure a service graph.Associate the service graph with All_Traffic_Allowed.

Configure a policy-based redirect subject.Associate the policy-based redirect subject with All_Traffic_Allowed.

Configure a firewall bridge domain.Associate the bridge domain with FW-Device.

Configure a device interface policy.Associate the device interface policy with FW-Device.

Configure a service graph.Associate the service graph with All_Traffic_Allowed.

Refer to the exhibit. Refer to the exhibit. The Cisco ACI fabric has an egress L3Out from Leaf-101 and Leaf-102 to CORE-1.VLAN 102 is used to form the OSPF adjacency. The workloads must be migrated into EPG-101, and the static port binding is configured to Leaf-103 e1/1 with encap VLAN 101. An engineer completes the port binding and receives an MCP fault. Which action clears the fault?

Use VLAN 102 as the encap VLAN on the EPG-101 static port binding.

Use VLAN 101 for OSPF adjacency on the egress L3Out.

Use VLAN 102 as the encap VLAN on the EPG-101 static port binding.

Add VLAN 102 to the VLAN pool that is used by the static port binding.

Prune VLAN 101 from the VLAN pool that is used by the egress L3Out.

Refer to the exhibit. Refer to the exhibit. The EPG-100 must be extended to the vCenter as a port group with a tagged VLAN ID of 100. Which set of actions accomplishes this goal?

Define a dynamic VLAN range (from 100-200) under a VLAN pool that is associated with the dc1vdev domain.Associate the dc2vcdev domain with EPG and select these settings:Untagged VLAN Access: selectedVLAN Mode: Static with Encap: 100

Define a static VLAN range (from 100-200) under a VLAN pool that is associated with the dc1vcdev domain.Associate the dc1vcdev domain with EPG and select these settings:Untagged VLAN Access: unselectedVLAN Mode: Static with Encap: 100

Define a static VLAN range (from 100-200) under a VLAN pool that is associated with the dc1vcdev domain.Associate the dc2vcdev domain with EPG and select these settings:Untagged VLAN Access: selectedVLAN Mode: Static with Encap: 100

Define a dynamic VLAN range (from 100-200) under a VLAN pool that is associated with the del vdev domain.Associate the dc1vcdev domain with EPG and select these settings:Untagged VLAN Access: unselectedVLAN Mode: Static with Encap: 100

Define a dynamic VLAN range (from 100-200) under a VLAN pool that is associated with the dc1vdev domain.Associate the dc2vcdev domain with EPG and select these settings:Untagged VLAN Access: selectedVLAN Mode: Static with Encap: 100