[2026] Cisco Implementing Cisco Application Centric Infrastructure

문제1

Which feature allows firewall ACLs to be configured automatically when new endpoints are attached to an EPG?

A. hardware proxy

B. network-stitching

C. dynamic endpoint attach

D. ARP gleaning

정답: C

설명: (Fast2test 회원만 볼 수 있음)

문제2

Refer to the exhibit A Cisco ACI fabric is using out-of-band management connectivity.
The APIC must access a routable host with an IP address of 192.168.11.2.
Which action accomplishes this goal?

A. Modify the Pod Profile to use the default Management Access Policy

B. Remove the in-band management address from the APIC.

C. Change the switch APIC Connectivity Preference to in-band management

D. Add a Fabric Access Policy to allow management connections.

정답: B

문제3

An engineer configured a bridge domain with the hardware-proxy option for Layer 2 unknown unicast traffic. Which statement is true about this configuration?

A. The leaf switch forwards the Layers 2 unknown unicast packets to all other leaf switches if it is unable to find the MAC address in its local forwarding tables.

B. The spine switch drops the Layer 2 unknown unicast packet if it is unable to find the MAC address in the proxy database.

C. The leaf switch drops the Layer 2 unknown unicast packet if it is unable to find the MAC address in the local forwarding tables.

D. The Layer 2 unknown hardware proxy lacks support of the topology change notification.

정답: B

설명: (Fast2test 회원만 볼 수 있음)

문제4

An engineer must configure a new local user inside a Cisco ACI. The new user must meet these criteria:
- Must be provided with complete read-only access to the tenant.
- Must be permitted to create and delete EPGs within a specific tenant.
- Must not be allowed to modify any other objects within that tenant.
The tenant and security domain association is already in place. Which configuration set configures the new tenant?

A. Create a new role with tenant-epg privilege.
Create the local user and assign it to the tenant-security domain.
Add the tenant-security domain to the role read-all with access privilege type Read.
Add the tenant-security domain to the new role with access privilege type Write.

B. Create a new role with tenant-connectivity privilege.
Create the local user and assign it to the tenant-security domain.
Add the tenant-security domain to the role access-admin with access privilege type Read.
Add the tenant-security domain to the new role with access privilege type Write.

C. Create a new role with tenant-admin privilege.
Create the local user and assign it to the tenant-security domain.
Add the tenant-security domain to the role admin with access privilege type Read.
Add the tenant-security domain to the new role with access privilege type Write.

D. Create a new role with tenant-security privilege.
Create the local user and assign it to the tenant-security domain.
Add the tenant-security domain to the role tenant-admin with access privilege type Read.
Add the tenant-security domain to the new role with access privilege type Write.

정답: A

설명: (Fast2test 회원만 볼 수 있음)

문제5

An engineer must advertise a bridge domain subnet out of the ACI fabric to an OSPF neighbor.
Which two configuration steps are required? (Choose two.)

A. Add External Subnet for External EPG flag under External EPG.

B. Configure the Subnet under the EPG level.

C. Add L50ut profile to the bridge domain using Associated L30uts section

D. Create Route Control Profile with the export direction under External EPG.

E. Configure Subnet scope to Advertised Externally

정답: C,E

문제6

An engineer is creating a configuration import policy that must terminate if the imported configuration is incompatible with the existing system. Which import mode achieves this result?

A. atomic

B. best effort

C. replace

D. merge

정답: A

설명: (Fast2test 회원만 볼 수 있음)

문제7

In Cisco ACI, what is the order of steps for deploying an EPG on a specific port with Cisco APIC using the CLI?

A. Create a tenant > Create an application profile > Associate the EPG with a specific port > Create a bridge domain > Create a private network

B. Create a tenant > Create a private network > Create a bridge domain > Create an application profile > Associate the EPG with a specific port

C. Create a tenant > Create a bridge domain > Create a private network > Create an application profile > Associate the EPG with a specific port

D. Create a tenant > Create an application profile > Create a bridge domain > Create a private network > Associate the EPG with a specific port

정답: B

설명: (Fast2test 회원만 볼 수 있음)

문제8

Refer to the exhibit. The 0.0.0.0/0 is configured as a default static route on L3Out-1. Which action should be taken for the 0.0.0.0/0 prefix to advertise out on L3Out-2 OSPF?

A. Enable Export Route Control Subnet.

B. Enable Shared Security Import Subnet.

C. Enable Shared Route Control Subnet.

D. Enable Aggregate Export Subnet.

정답: A

설명: (Fast2test 회원만 볼 수 있음)

문제9

What must be configured to allow SNMP traffic on the APIC controller?

A. SNMP relay policy

B. out-of-band management interface

C. out-of-band bridge domain

D. contract under tenant mgmt

정답: D

문제10

An engineer deploys a two-pod Cisco ACI Multi-Pod environment. Why should no more than two Cisco APIC controllers be deployed in the same pod?

A. to enable equal capacity to scale in each pod

B. to avoid losing all replicas of a shard if a pod fails

C. to avoid hair-pinning traffic that is destined for the primary APIC controller between pods

D. to ensure that all nodes in all pods have local access to a controller

정답: B

문제11

Refer to the exhibit. An engineer must configure a bridge domain inside the Cisco ACI fabric called BD. The configuration must permit EP2 and EP3 to reach EP1. Which configuration must be applied on the bridge domain to accomplish this goal?

A. Define the Pervasive gateway on BD.

B. Enable L2 Unknown unicast flooding.

C. Configure unicast routing within BD.

D. Optimize L2 Unknown unicast traffic.

정답: B

설명: (Fast2test 회원만 볼 수 있음)

문제12

A Cisco ACI fabric is integrated with a Cisco ASA firewall using a service graph under the tenant called Operations. The fabric must permit the firewall used on tenant Operations to be referenced by the tenant called Management. Which export action must be used to accomplish this goal?

A. service graph template

B. Layer4-Layer7 device

C. device selection policies

D. router configurations

정답: B

설명: (Fast2test 회원만 볼 수 있음)

문제13

An engineer implements a configuration backup on the Cisco APIC. The backup job must meet these requirements:
- The backup must transfer the encrypted data to the remote server.
- The transfer must be resumed if the connection is interrupted
Which configuration set meets these requirements?

A. Select protocol SFTP in Create Remote Location.
Choose XML format in Configuration Export Policy.

B. Select protocol FTP in Create Remote Location.
Choose XML format in Configuration Export Policy.

C. Select protocol TFTP in Create Remote Location.
Choose JSON format in Configuration Export Policy.

D. Select protocol HTTP in Create Remote Location.
Choose JSON format in Configuration Export Policy.

정답: A

문제14

A retail company must configure an RBAC policy for Cisco ACI that allows its users to perform these tasks:
- View the status of the switches in the fabric and replace any switch
from the fabric, but not allow the user to access any information about services configured on any ports.
- Create or modify any VLAN pool but not allow the user to associate it to a physical or external domain or change any existing associations.
Which set of privileges must be included in a custom RBAC role to accomplish these tasks?

A. fabric-equipment
access-connectivity

B. access-protocol
access-equipment

C. access-equipment
fabric-connectivity

D. tenant-connectivity
fabric-protocol

정답: B

설명: (Fast2test 회원만 볼 수 있음)

Cisco Implementing Cisco Application Centric Infrastructure - 300-620무료 덤프문제 풀어보기

우리와 연락하기

유용한 링크

최신 업데이트