Cisco Cisco Certifications 600-660 Questions & Answers

• Question 21:

  

  Refer to the exhibit. A network engineer configures a Layer 4 to Layer 7 device for an outside routed firewall that is connected to POD-1 inside a Cisco ACI fabric that consists of two pods. All traffic from POD-1 or POD-2 that uses the L3Out should pass through the routed firewall. Which Function Type must be implemented in the service graph for POD-2 to use L3Out?

  A. GoThrough

  B. L1

  C. GoTo

  D. L2

  Correct Answer: D

• Question 22:

  An engineer configures a new Cisco ACI Multi-Pod and must set up the link between the spine and the IPN device. Which three actions should be taken to accomplish this goal? (Choose three.)

  A. Enable MP-BGP routing

  B. Enable BIDIR-PIM protocol

  C. Enable PIM-SM protocol

  D. Enable OSPF routing

  E. Enable IS-IS routing

  F. Enable DHCP relay

  Correct Answer: ABF

• Question 23:

  Which firewall connection allows for the integration of service nodes in transparent mode with a Cisco ACI Multi-Pod setup?

  A. active-standby mode across pods

  B. active-active mode per pods for communication between internal endpoints

  C. active-standby mode per pods for communication between endpoints and external networks

  D. active-active mode across pods

  Correct Answer: A

  Reference: https://www.cisco.com/c/en/us/solutions/collateral/data-center-virtualization/application-centric-infrastructure/white-paper-c11-739571.html (table 1)

• Question 24:

  An engineer configures a new Cisco ACI Multi-Pod setup. Which action should be taken for fabric discovery to be successful for the nodes in Pod 2?

  A. Select the Route Reflector field in Pod Peering

  B. Enable the DSCP class-cos translation policy for Layer 3 traffic

  C. Configure POD 2 Data Plane TEP under the Pod Connection Profile

  D. Add the IPN subnet under the Fabric External Routing Profile

  Correct Answer: D

• Question 25:

  An engineer configures a Cisco ACI Multi-Pod for disaster recovery. Which action should be taken for the new nodes to be discoverable by the existing Cisco APICs?

  A. Enable subinterfaces with dot1q tagging on all links between the IPN routers.

  B. Configure IGMPv3 on the interfaces of IPN routers that face the Cisco ACI spine.

  C. Enable DHCP relay on all links that are connected to Cisco ACI spines on IPN devices.

  D. Configure BGP as the underlay protocol in IPN.

  Correct Answer: B

• Question 26:

  How is broadcast forwarded in Cisco ACI Multi-Pod after ARP flooding is enabled?

  A. For the specific bridge domain, all spines forward the broadcast frames to IPN routers

  B. Broadcast frames are forwarded inside the pod and across the IPN using the multicast address that is associated to the bridge domain

  C. Within a pod, the ingress leaf switch floods the broadcast frame on all fabric ports

  D. Ingress replication is used on the spines to forward broadcast frames in the IPN infrastructure

  Correct Answer: A

• Question 27:

  An engineer designers a Cisco ACI Multi-Pod solution that requires a pair of active-standby firewalls in different pods for external connectivity. How should the firewalls be implemented?

  A. PBR for routed firewalls

  B. separate L3Out peerings for routed firewalls

  C. routed firewall for the default gateway

  D. transparent firewalls

  Correct Answer: D

  Reference: https://www.cisco.com/c/en/us/solutions/collateral/data-center-virtualization/application-centric-infrastructure/white-paper-c11-739571.html

• Question 28:

  

  Refer to the exhibit. A customer experiences resource overconsumption on one of its border leaf switches. Which action should be taken to reduce the consumption on this switch?

  A. Disable VRF Policy Control Enforcement

  B. Disable IP Data Plane Learning

  C. Migrate L3Outs to another switch

  D. Disable Remote EP Learning

  Correct Answer: B

• Question 29:

  Which feature should be disabled on a bridge domain when a default gateway for endpoints is on an external device instead of a Cisco ACI bridge domain SVI?

  A. unicast routing

  B. ARP flooding

  C. unknown unicast flooding

  D. proxy ARP

  Correct Answer: C

• Question 30:

  An organization expands a Cisco ACI Multi-Pod from two to six pods and must ensure that the control plane scales. What should be configured in the IPN to ensure that BUM traffic is forwarded efficiently across the IPN?

  A. spine headend replication

  B. BIDIR-PIM

  C. MP-BGP

  D. MSDP

  Correct Answer: B

  Reference: https://www.cisco.com/c/en/us/solutions/collateral/data-center-virtualization/application-centric-infrastructure/white-paper-c11-737855.html