NEW QUESTION 1
Which statement about switch policies and leaf profiles in the ACI Fabric is true?

• A. Switch leaf profiles are configured under Fabric > Fabric Policies
• B. Leaf and spine profiles can be part of the same switch policy switch profile when the ports on the leafs and spines have similar characteristics
• C. Manually configuring leaf profiles is not required because they are dynamically configure after new devices come online that are connected to the front panel ports of the leaf
• D. Leaf profilesare associated to interface selector profiles that identify ports on the leaf
• E. Each leaf profile in the ACI fabric must have a unique policy that identifies each single leaf

Answer: D

NEW QUESTION 2
Which description of Cisco Virtual Topology System is true?

• A. package that contains an entire runtime environment
• B. agent that resides on physical devices
• C. overlay provisioning and management solutions
• D. web server hosting for Cisco NX-OS

Answer: C

Explanation:
https://www.cisco.com/c/en/us/products/collateral/cloud-systems-management/virtual-topology-system/datasheet-c78-734877.html

NEW QUESTION 3
Refer to the exhibit.

Which option describes the main purpose of the XML messages?

• A. Shut down an existing port group profile
• B. Delete an existing port group profile
• C. Modify an existing port group profile
• D. Create a new port group profile

Answer: D

NEW QUESTION 4
Which three statement about the VLAN Trunking Protocol version 3 are true? (Choose three)

• A. It provides enhanced security with hidden and secret passwords
• B. It does not support private VLANs
• C. It supports manual configuration of VLANs on a device configured as a VLAN TrunkingProtocol client
• D. It is not compatible with VLAN Trunking Protocol version 1 or 2
• E. It allows only the primary server to make VLAN Trunking Protocol configuration changes
• F. It supports 4K VLANs

Answer: AEF

NEW QUESTION 5
What is recommended backup policy for Cisco Cloud Center?

• A. Bi-Weekly Basis
• B. Daily Basis
• C. Monthly Basis
• D. Weekly Basis
• E. Hourly Basis

Answer: B

NEW QUESTION 6
According to Cisco, which two options are benefits of ITD compared to WCCP? (Choose two)

• A. requires less TCAM entries
• B. weighted load distribution
• C. much less configuration
• D. transparent for service node
• E. does not require authentication or certificates

Answer: AB

NEW QUESTION 7
Refer to the exhibit.

Health scores can be aggregated for a variety of areas such as for the system, infrastructure, tenants, applications, or services. Which health score level is the exhibit from APIC GUI an example of?

• A. system
• B. managed object
• C. pod
• D. tenant

Answer: C

Explanation:
https://www.cisco.com/c/en/us/td/docs/switches/datacenter/aci/apic/sw/1-x/aci-fundamentals/b_ACI-Fundamentals/b_ACI_Fundamentals_BigBook_chapter_01010.html

NEW QUESTION 8
Which two of the following options are true about OpenStack Cinder? (Choose two)

• A. Attached to multiple distances simultaneously
• B. Ephemeral storage
• C. Persistent storage
• D. Can only be attached to one instance at a time
• E. Data Storage

Answer: AD

NEW QUESTION 9
Which two statements about geolocation policies in the ACI Fabric are true?

• A. Geolocation is the identification of the real-world geographic location of a networking device
• B. Geolocation policies are dynamically configured in ACI using the site address field in the spine and leaf Type-network
• C. Creating a geolocation policy involves creating a site,floor,room,and row
• D. Geolocation policies are configured under Fabric > Access Policies
• E. Geolocation is performed by associating a geographic location with an IP address

Answer: AE

NEW QUESTION 10
Refer to the exhibit.

Refer to the exhibit. Switch A and switch B have these zone sets currently active and are connected by an ISL that is configured to transport VSAN 2 Enhanced zoning is configured for VSAN 2 and merge-control is set to restrict. Which statement about this configuration is true?

• A. Zone merge succeeds and the resulting zone set matches switch B
• B. Zone merge succeeds but Zone2 is dropped from the active zone set because it is not currently included in the active zone set in switch A
• C. Zone merge fails because the currently active zone sets are not identical
• D. Enhanced zoning is configured so the user is prompted on the CLI to permit or deny Zone2 into the active zone set
• E. Zone merge fails because merge-control set to restrict which means that merges are never permitted

Answer: C

NEW QUESTION 11
Refer to the exhibit.

An admin has created a new EPG in an ACI fabric. The admin then specified static path binding as shown in exhibit. After submitting this policy configuration, the admin noticed that this newly created EPG had the fault shown in the exhibit. Which option is the likely Explanation: of this fault?

• A. There is no faul
• B. The fault is currently in the soaking state and the fault will automaticlly clear and everything will work as expected
• C. The encap VLAN configured is not within the allowed range of VLANs as specified by the associated domain
• D. There is not enough information to determine the cause of the problem
• E. The admin incorrectly configured this static path as a "trunk" when it should have been configured as an access (untagged) port

Answer: B

NEW QUESTION 12
Which statement about supportability with ITD is true?

• A. Up to 128 ACE enties are supported
• B. Deny ACE enties are supported
• C. ITD is supported on fabric extenders
• D. Weighted load balancing is supported

Answer: D

Explanation: https://www.cisco.com/c/en/us/td/docs/switches/datacenter/nexus9000/sw/7-x/itd/configuration/guide/b_Cisco_Nexus_9000_Series_NXOS_Intelligent_Traffic_Director_Configuration_Guide_7x/b_Cisco_Nexus_9000_Series_NXOS_Intelligent_Traffic_Director_Configuration_Guide_7x_chapter_010.html#concept_1AE89B98882646F492786590EAA85F70

NEW QUESTION 13
Which two statements about IP Source Guard are true? (Choose two)

• A. IP Source Guard is independent of DHCP snooping to build and maintain the IP-MAC address binding table
• B. IP Source Guard requires that DHCP snooping is disabled
• C. IP Source Guard limits IP traffic on an interface to only those sources that have an IP-MAC address table entry or static IP source entry
• D. By default, IP Source Guard is enabled on all interfaces
• E. When you first enable IP Source Guard on an interface, you may experience disruption in IP traffic until the hosts on the interface receive a new IP address from a DHCP server

Answer: CE

NEW QUESTION 14
Which two statements about CFS are true? (Choose two)

• A. CFS distributes the local NTP configuration to the master only, which then forwards it to all devices in the network
• B. You must manually distribute NTP authentication keys on the NTP server and Cisco NX-OS devices across the network
• C. If CFS is used to distribute NTP, all devices in the network must have different VRFs configured than the ones used for NTP
• D. CFS requires a license to be installed before it can be used to distribute NTP
• E. After enabling CFS, a network-wide lock is applied to NTP whenever an NTP configuration is started and released once after the change has been committed

Answer: BE

Explanation:
https://www.cisco.com/c/en/us/td/docs/switches/datacenter/nexus5500/sw/system_management/ 6x/b_5500_System_Mgmt_Config_6x/b_5500_System_Mgmt_Config_6x_chapter_010010.html

NEW QUESTION 15
Which two options are different ways to extend the Layer 2 domain beyond the ACI fabric? (Choose two)

• A. Extend the EPG out of the ACI fabric
• B. Use Private Networks to extend the Layer 2 domain
• C. Configure fabric access polices on the ACI fabric to match the port settings at the remote end
• D. Extend the bridge domain out of the ACI fabric
• E. Extend the VTEP out of the ACI fabric

Answer: AD

NEW QUESTION 16
Which open source controller is a general purpose SDN controller for service provider and enterprise
network operators?

• A. Beacon OpenFlow Controller
• B. Cisco OpenDaylight Controller
• C. Open Network Operating System
• D. OpenStack Neutron
• E. Linux Foundation OpenDaylight

Answer: E

NEW QUESTION 17
Refer to the exhibit.

If you inspect a VXLAN packet at point 2, which two options about the outer fields in the VXLAN
header are true? (Choose 2)

• A. Outer S-MAC = MAC-A ; Outer D-MAC = MAC~B
• B. Outer S-MAC = MAC-1 ; Outer D-MAC = MAC-4
• C. Outer S-MAC = MAC-1 ; Outer D-MAC = MAC-2
• D. Outer S-|P = IP-1; Outer D-IP = IP-4
• E. Outer S-IP = IP-1; Outer D-IP = IP-2.

Answer: CD

NEW QUESTION 18
Which access policy determines whether or not interfaces will be members of the same virtual port channel in ACI environment?

• A. interface selector
• B. port channel
• C. port channel member
• D. policy group

Answer: A

NEW QUESTION 19
Which two cluster interface types are valid when integrating a Layer 4 –Layer 7device in an ACI
Fabric? (Choose two)

• A. outside
• B. inside
• C. provider
• D. consumer
• E. control

Answer: CD