NEW QUESTION 1
After you deploy a Layer 4 - Layer 7 service graph in Cisco AC, where do you modify the parameters
of the Layer 4 - Layer 7 device(s)?

• A. under the Consumer EPG > L4-L7 Service Parameters
• B. under the Service Graph Template
• C. under the Provider EPG > L4-L7 Service Parameters
• D. under the Deployed Graph Instance

Answer: D

NEW QUESTION 2
Which two statements about IP Source Guard are true? (Choose two)

• A. IP Source Guard is independent of DHCP snooping to build and maintain the IP-MAC address binding table
• B. IP Source Guard requires that DHCP snooping is disabled
• C. IP Source Guard limits IP traffic on an interface to only those sources that have an IP-MAC address table entry or static IP source entry
• D. By default, IP Source Guard is enabled on all interfaces
• E. When you first enable IP Source Guard on an interface, you may experience disruption in IP traffic until the hosts on the interface receive a new IP address from a DHCP server

Answer: CE

NEW QUESTION 3
DRAG DROP
Drag and drop the orchestration components form the left onto relevant Cisco UCS Director functionalities on the right.

Answer:

Explanation: Task---new VM provision
Workflow---automates complex operatipons
Service request---can be scheduled for later execution Input variable ---define data type

NEW QUESTION 4
Which two components are the responsibility of the customers in a Platform as a Service offering? (Choose two)

• A. APIs
• B. infrastructure connectivity
• C. applications
• D. hardware
• E. data

Answer: CE

NEW QUESTION 5
In a multiple vendor environment,which approach is recommended in cisco NX-OS to generate the BGP router distinguisher and router target?

• A. Manually configure router-distinguisher and auto generate rouer-tarfet values
• B. Manually configure router-distinguisher and route-target values
• C. Auto generate route-distinguisher and route-target values
• D. Auto generate route-distinguisher and route-target values and make manual adjustments

Answer: B

NEW QUESTION 6
Which three main benefits of using vpath are true? ( Choose three)

• A. multitenancy
• B. multisite
• C. service graphs
• D. dynamic service provisioning
• E. service chaining
• F. device packages

Answer: ADE

NEW QUESTION 7
Which statement about supportability with ITD is true?

• A. Up to 128 ACE enties are supported
• B. Deny ACE enties are supported
• C. ITD is supported on fabric extenders
• D. Weighted load balancing is supported

Answer: D

Explanation: https://www.cisco.com/c/en/us/td/docs/switches/datacenter/nexus9000/sw/7-x/itd/configuration/guide/b_Cisco_Nexus_9000_Series_NXOS_Intelligent_Traffic_Director_Configuration_Guide_7x/b_Cisco_Nexus_9000_Series_NXOS_Intelligent_Traffic_Director_Configuration_Guide_7x_chapter_010.html#concept_1AE89B98882646F492786590EAA85F70

NEW QUESTION 8
Refer to the exhibit.

Health scores can be aggregated for a variety of areas such as for the system, infrastructure, tenants, applications, or services. Which health score level is the exhibit from APIC GUI an example of?

• A. system
• B. managed object
• C. pod
• D. tenant

Answer: C

Explanation:
https://www.cisco.com/c/en/us/td/docs/switches/datacenter/aci/apic/sw/1-x/aci-fundamentals/b_ACI-Fundamentals/b_ACI_Fundamentals_BigBook_chapter_01010.html

NEW QUESTION 9
Which statement about switch policies and leaf profiles in the ACI Fabric is true?

• A. Switch leaf profiles are configured under Fabric > Fabric Policies
• B. Leaf and spine profiles can be part of the same switch policy switch profile when the ports on the leafs and spines have similar characteristics
• C. Manually configuring leaf profiles is not required because they are dynamically configure after new devices come online that are connected to the front panel ports of the leaf
• D. Leaf profilesare associated to interface selector profiles that identify ports on the leaf
• E. Each leaf profile in the ACI fabric must have a unique policy that identifies each single leaf

Answer: D

NEW QUESTION 10
Which OSPF feature groups LSAs with similar link-state refresh times to allow OSPFv2 to pack
multiple LSAs into an OSPFv2 update message?

• A. LSA compression
• B. SPF optimization
• C. LSA throttling
• D. LSA group pacing

Answer: D

NEW QUESTION 11
Which description of Cisco Virtual Topology System is true?

• A. package that contains an entire runtime environment
• B. agent that resides on physical devices
• C. overlay provisioning and management solutions
• D. web server hosting for Cisco NX-OS

Answer: C

Explanation:
https://www.cisco.com/c/en/us/products/collateral/cloud-systems-management/virtual-topology-system/datasheet-c78-734877.html

NEW QUESTION 12
Which three port types support port security in Nexus 7000? (Choose three)

• A. vPC ports
• B. SPAN destination ports
• C. Layer 2 and Layer 3 ports
• D. access ports
• E. SPAN source ports
• F. trunk ports

Answer: DEF

NEW QUESTION 13
Which two statements about ASA and multicontext support in ACI are true? (Choose two)

• A. The application policy Infrastructure Controller creates the contexts in the USA
• B. The APIC must communicate with the system context and each virtual context.
• C. Multicontext support enables the same physical appliance to be experted to multiple tennats.
• D. With ASA, you cannot partition a single physical ASA into multiple virtual firewalls
• E. You can create multiple partitions with a virtual appliance, but the vNICs can be shared

Answer: BC

NEW QUESTION 14
Which two statements about import and export route control in an ACI fabric are true? (Choose two.)

• A. Prefixes learned from OSPF/EIGRP L30urs are never permitted inbound by default.
• B. Prefixes learned from BGP L3outs cannot be filtered inbound.
• C. Export route control controls if the prefixes are redistributed from MP-BGP to the egress leaf.
• D. Prefixes permitted inbound are redistributed into MP-BGP at the ingress leaf.

Answer: CD

NEW QUESTION 15
You are configuring an L3Out interface for a VRF for which OSPF is configured on an ACI fabric.You notice that the OSPF routing table is rebuilt every 10 seconds. Which reason for this behavior is true?

• A. OSPF timers are set to rebuild the RIB every 10 seconds
• B. The loopback interfaces of the L3Out are configured with an IP addresses that is already in use
• C. Aduplex mismatch is on the link on which L3Out is configured
• D. This is the normal behavior of the ACI fabric

Answer: B

NEW QUESTION 16
Refer to the exhibit.

An admin has created a new EPG in an ACI fabric. The admin then specified static path binding as shown in exhibit. After submitting this policy configuration, the admin noticed that this newly created EPG had the fault shown in the exhibit. Which option is the likely Explanation: of this fault?

• A. There is no faul
• B. The fault is currently in the soaking state and the fault will automaticlly clear and everything will work as expected
• C. The encap VLAN configured is not within the allowed range of VLANs as specified by the associated domain
• D. There is not enough information to determine the cause of the problem
• E. The admin incorrectly configured this static path as a "trunk" when it should have been configured as an access (untagged) port

Answer: B

NEW QUESTION 17
Which state is the optimal health state for an APIC cluster?

• A. fully sync'd
• B. in service
• C. in-sync
• D. fully fit

Answer: D

NEW QUESTION 18
Which statement about IP-directed broadcast is true?

• A. When a directed broadcast packet reaches a switch that is directly connected to its destination subnet, that packet is "exploded" as a broadcast on the destination subnet
• B. All switches in the network forward an IP-directed broadcast in the same way they forward unicast IP packets
• C. An IP-directed broadcast is a packet whose destination address is a multicast group to send the packet to a group of hosts in a local or remote network
• D. All IP-redirected broadcast is an IP packet whose destination address is a valid unicast address, but which originates from a node that is itself part of that destination subnet

Answer: A

NEW QUESTION 19
DRAG DROP
Drag and drop the Cisco UCS Director REST URI from the left onto the correct HTTP method on the right.

Answer:

Explanation: