400-151 Exam - CCIE Data Center Written Exam

NEW QUESTION 1
Which of the following are two possible upgrade states for a node in ACI ? (Choose two)

• A. CompleteNOK
• B. upgrading
• C. CompleteOK
• D. aborted
• E. failed

Answer: AC

Explanation:
https://www.cisco.com/c/en/us/td/docs/switches/datacenter/aci/apic/sw/1-x/Operating_ACI/guide/b_Cisco_Operating_ACI/b_Cisco_Operating_ACI_chapter_0101.pdf

NEW QUESTION 2
Refer to the exhibit.

Which two statements about the health of the displayed tenant are true?
(Choose two)

• A. The current health score is good and indicates that all EPGs of this tenant are deployed.
• B. The tenant health score has not changed over displayed period of time.
• C. The health score is good, but further investigation is needed to determine the health of the EPGs
• D. faults directly related to this tenant caused by access pohcies must be viewed in the Fabnc > Access polices tab

Answer: BC

NEW QUESTION 3
Which two statements about VLAN trunking Protocol are true? (Choose two.)

• A. On Cisco Nexus switches, VLAN TrunkingProtocol is enabled by default.
• B. VLAN Trunking Protocol is only supported on Layer 2 trunk interfaces
• C. Layer 2 trunk interfaces, Layer 2 port channels, and virtual port channels support VLAN Trunking Protocol functionality.
• D. VLAN Trunking Protocol is a Layer 2 messaging protocol that maintains VLAN consistency bymanaging the addition, deletion, and renaming of VLANs withing a VLAN Trunking Protocol domain.
• E. VLAN Trunking Protocol is a Layer 2 messaging protocol that maintains the interface VLAN configuringwithin a VLAN Trunking Protocol domain.

Answer: CD

NEW QUESTION 4
Which two statements about attachable access entity profiles in the ACI Fabric are true? (Choose two)

• A. Enabling the infrastructure VLAN on an AEP is a mandatory requirement when the AEP is associated to any VMM domain
• B. AEP provides the association of a virtual machine management domain and the physical network infrastructure
• C. AEPs are an optional component to ACI access port configuration that ease the burdenof configuring multiple individual policies
• D. The attached entity profiles a template to deploy hypervisor policies on a large set of leaf ports
• E. AEPs are directly bound to spine and leaf Switch profiles and are then associated indirectly to interface selectors

Answer: AB

Explanation: https://www.cisco.com/c/en/us/td/docs/switches/datacenter/aci/apic/sw/1-x/basic-config/b_ACI_Config_Guide/b_ACI_Config_Guide_chapter_0101.html#concept_C3EF1E36E8F6406A 96A71E605AC175BD

NEW QUESTION 5
Refer to the exhibit.

Which statement about the displayed ACI Fabric is true?

• A. This fabric is configured for VMM integration
• B. The number of user-defined tenants is 26
• C. The capacity information shown is typical of multipod deployments
• D. Too many endpoints are connected to nodes 121 and 122
• E. Integrated Layer 4 Layer 7 services are not in use

Answer: B

NEW QUESTION 6
DRAG DROP
Drag and drop the fault from the left onto its correct description on the right.

Answer:

Explanation: Informational -- a basic notification or informational message
Minor -- a non service-effecting fault condition that requires corrective action to prevent a more serious fault from occuring
Major -- a service-effecting condition that requires urgent corrective action
Critical -- a service-effecting condition that requires immediate corrective action
Warning --a potential or impending service-effecting fault that currently has no significance effects in the system

NEW QUESTION 7
Which option must be configured before IP Source Guard is used successfully in your networkenvironment?

• A. Dynamic ARP inspection
• B. DHCP snooping
• C. port security
• D. dot1tx

Answer: B

NEW QUESTION 8
A VPC stretched from two leaf switches up to an ASA firewall you are configuring the VPC as anL3out interface in a Cisco ACI fabric. How is the Layer 3 configuration applied?

• A. A separate SVI must be configured in the ACI fabric and the VLAN of the SVI must be allowedon the VPC trunk configuration
• B. Each endpoint of the VPC must be configured with an IP address in the same range
• C. The VPC configuration itself must be seen as a Layer 2 Portchannel stretching over two devices.A subinterface in the port channel configuration
• D. Each link must be configured as a Layer 3 link

Answer: A

NEW QUESTION 9
Which two cluster interface types are valid when integrating a Layer 4 –Layer 7device in an ACI
Fabric? (Choose two)

• A. outside
• B. inside
• C. provider
• D. consumer
• E. control

Answer: CD

NEW QUESTION 10
Which technology, implemented on aggregation-edge nodes at the aggregation layer, provides per-
tenant isolation at Layer 3, with separate dedicated per-tenant routing and forwarding tables on the inside interfaces of firewall contexts?

• A. VDC
• B. VRF-lite
• C. VXLAN
• D. VLAN

Answer: B

Explanation:
https://www.cisco.com/c/en/us/td/docs/solutions/Enterprise/Data_Center/VMDC/2-2/design_guide/vmdcDesign22/VMDC_2-2_DG_2.html

NEW QUESTION 11
How do you manually configure a vNIC MAC address?

• A. Use the mac -address-table static command.
• B. Modify the dynamic vNIC connection policy.
• C. Use the set identity dynamic-mac command.
• D. Modify the adapter policy.

Answer: D

NEW QUESTION 12
Which three options can be used to add a device as a member to a zone? (Choose three)

• A. IP address
• B. LUN ID
• C. device alias
• D. Fibre Channel ID
• E. VLAN ID
• F. fully qualified domain name

Answer: BCD

NEW QUESTION 13
Which two limitations or requirements do MP-BGP-based EVPN addresses have compared to the
initial IETF VXLAN standard (RFC 7348)? (Choose two)

• A. network flooding through protocol-based host MAC/IP route distribution and ARP suppression on the local VTEPs
• B. requirement to disable multicast for underlay forwarding
• C. active-passive multihoming at Layer 2
• D. scalability limitations due to data-driven flood-and-learn behavior
• E. Provides suboptimal forwarding for east-west and north-south traffic and supports workload mobility with the distributed anycast function

Answer: AD

NEW QUESTION 14
Which two guidelines and limitations of policy-based routing are true? (Choose two.)

• A. A match command can refer to more than one ACL in a route map used for policy-basedroyting.
• B. An ACL used in a policy-based routing route map cannot include a deny statement.
• C. The same route can be shared among different interfaces for policy-based routing as long asthe interfaces belong to the same VRF instance
• D. A policy-based routing route map can have multiple match or set statements per route- mapstatement
• E. Policy-based routing and WCCPv2 are not supported on the same interface if bank chaining isdisabled

Answer: BC

NEW QUESTION 15
DRAG DROP
Drag and drop components of policy drive Layer 4 - Layer 7 services in an ACI environment from left onto the correct definitions on the right.

Answer:

Explanation:

NEW QUESTION 16
Which application is used to manage a Cisco vPath deployment?

• A. UCS Director
• B. Virtual Supervisor Module
• C. Application Policy Infrastucture Controller
• D. Prime Network Services Controller

Answer: D

Explanation: https://blogs.cisco.com/datacenter/application-centric-infrastructure-aci-application-networkprofiles-for-security-and-network-services

NEW QUESTION 17
A network architect must migrate the legacy infrastructure switches of a customer from a Cisco
Nexus 9000 platform. Which process helps achieve this milestone?

• A. Create a container providing separate execution space
• B. Manage software upgrades via guest shell
• C. Allow guests temporary access to the CLI without logging in
• D. Set up a web-based interface for configuration management

Answer: A

NEW QUESTION 18
Which option lists the cloud deployment model types?

• A. hybrid,community,mobile,and service
• B. public,private,mobile,and community
• C. public,private,hybrid,and community
• D. hybrid,public,shared,and mobile

Answer: C

NEW QUESTION 19
After VTEP devices have established BGP neighbor adjacencies with other VTEPs or with Internal BGP route reflectors, which three pieces of inirmation are exchanged through BGP? (Choose three)

• A. VTEP peer list
• B. router MAC address
• C. VPNv4 prefixes
• D. MD5 Triple Data Encryption Standard (3DES) key
• E. VTEP address
• F. Layer 3 VNI

Answer: BEF