Free Implementing Cisco Application Centric Infrastructure – Advanced Exam 300-630 Exam Practice Test

An engineer deployed a Cisco ACI fabric and noticed that the fabric learns endpoints from subnets that are not configured on a bridge domain. To meet strict security requirements, the engineer must prevent this behavior. Which action must be taken to prevent this behavior?

• Activate Enable Data Plane Endpoint Learning
• Implement Pervasive Gateway
• Configure Static Binding
• Enable Enforce Subnet Check

An engineer configures a Cisco ACI Multi-Pod for disaster recovery. Which action should be taken for the new nodes to be discoverable by the existing Cisco APICs?

• Enable subinterfaces with dot1q tagging on all links between the IPN routers.
• Configure IGMPv3 on the interfaces of IPN routers that face the Cisco ACI spine.
• Enable DHCP relay on all links that are connected to Cisco ACI spines on IPN devices.
• Configure BGP as the underlay protocol in IPN.

An engineer designs a Cisco ACI Multi-Pod solution that requires a pair of active-standby firewalls in different pods for external connectivity. How should the firewalls be implemented?

• PBR for routed firewalls
• separate L3Out peerings for routed firewalls
• routed firewall for the default gateway
• transparent firewalls

What is the purpose of the Forwarding Tag (FTAG) in Cisco ACI?

• FTAG is used in Cisco ACI to add a label to the iVXLAN traffic in the fabric to apply the correct policy.
• FTAG is used in Cisco ACI to add a label to the VXLAN traffic in the fabric to apply the correct policy.
• FTAG trees in Cisco ACI are used to load balance unicast traffic.
• FTAG trees in Cisco ACI are used to load balance mutli-destination traffic.

An engineer configures a new Cisco ACI Multi-Site Orchestrator node to join an MSO cluster. Which two components are necessary to ensure that the new node has IP connectivity in this configuration? (Choose two.)

• Cisco ACI spine interfaces that are connected to ISN
• Cisco APICs over the OOB management network
• existing Cisco ACI Multi-Site Orchestrator node
• management IP of ESXi hosts where the controllers are deployed
• OOB interface of ISN

Which two components must be configured as stretched to establish intra-VRF communication between two EPGs that are deployed in different sites and different bridge domains? (Choose two.)

• contract
• tenant
• application profile
• bridge domain
• EPG

Which action must be taken to connect two nonsilient servers in active/standby mode to two ACI leaves?

• Implement a virtual PortChannel on ACI leaves
• Enable ARP flooding for the bridge domain if the MAC address of the active interface changes after NIC failover
• Configure ARP flooding for the bridge domain if the MAC address of the active interface stays identical after a NIC failover
• Disable dataplane learning to avoid endpoint flapping

Where are STP BPDUs flooded in Cisco ACI fabric?

• in the bridge domain VLAN
• in the native VLAN ID
• in the access encapsulation VLAN part of different VLAN pools
• in the VNID that is assigned to the FD VLAN

How does Cisco ACI manage the STP BPDUs between two pods?

• Cisco ACI spines perform ingress replication for STP BPDUs
• Cisco ACI spines suppress STP BPDUs to be forwarded to other pods
• BPDUs are forwarded over IPN using the bridge domain GIPo multicast address
• Special multicast group 239.255.255.255 is used to forward STP BPDUs

What does the VXLAN source port add to the overlay packet forwarding when it uses the hash of Layer 2, Layer 3, and Layer 4 headers of the inner packet?

• ECMP
• TCP optimization
• disabled fragmentation
• jumbo frames