Question 1

For which type of endpoint entry does a Cisco ACI leaf switch keep the original TEP source address instead of rewriting the outer source IP address to its TEP address?

Options :

A : local entry

B : remote entry

C : bounce entry

D : COOP entry

Answer: C

Question 2

An engineer is implementing a connection that represents an external bridged network. Which two configurations are used? (Choose two.)

Options :

A : Layer 2 remote fabric

B : Layer 2 outside

C : Layers 2 internal

D : Static path binding

E : VXLAN outside

Answer: B,D

Question 3

An engineer wants to configure Cisco ACI switches to use authenticated ZMQ when communicating with the proxy spine. Which configuration allows MD5 ZMQ messages only?

Options :

A : COOP Group policy in strict mode

B : IS-IS password using MD5

C : BGP password using MD5

D : COOP Group policy in compatible mode

Answer: A

Question 4

How is broadcast forwarded in Cisco ACI Multi-Pod after ARP flooding is enabled?

Options :

A : Ingress replication is used on the spines to forward broadcast frames in the IPN infrastructure.

B : Within a pod, the ingress leaf switch floods the broadcast frame on all fabric ports.

C : Broadcast frames are forwarded inside the pod and across the IPN using the multicast address that is associated to the bridge domain.

D : For the specific bridge domain, all spines forward the broadcast frames to IPN routers.

Answer: C

Question 5

Refer to the exhibit.

An engineer configures a Layer 4 to Layer 7 device object. The device is a virtual firewall with a single network adapter and it must be deployed in routed mode. Which action completes the configuration of the device object?

Options :

A : Enable Promiscuous Mode.

B : Change Function Type to GoTo.

C : Change context awareness to Multiple.

D : Add an outside interface to the cluster interfaces.

Answer: B