Cisco Cisco Certifications 600-660 Questions & Answers

• Question 41:

  

  Refer to the exhibit. Which combination of flags in the Cisco ACI contract allows a client in WebClient EPG to establish an HTTP connection toward a server in WebServer EPG?

  A. Apply Both Direction ENABLED and Reverse Port Filter ENABLED

  B. Apply Both Direction DISABLED and Reverse Port Filter DISABLED

  C. Apply Both Direction DISABLED and Reverse Port Filter ENABLED

  D. Apply Both Direction ENABLED and Reverse Port Filter DISABLED

  Correct Answer: C

• Question 42:

  

  Refer to the exhibit. Which two configurations enable inter-VRF communication? (Choose two.)

  A. Set the subnet scope to Shared Between VRFs

  B. Enable Advertise Externally under the subnet scope

  C. Change the contract scope to Tenant

  D. Change the subject scope to VRF

  E. Export the contract and import as a contract interface

  Correct Answer: BE

• Question 43:

  

  Refer to the exhibits. Which subject must be configured for the All_noSSH contract to allow all IP traffic except SSH between the two EPGs?

  A.

  B.

  C.

  D.

  Correct Answer: D

  Reference: https://www.cisco.com/c/en/us/td/docs/switches/datacenter/aci/apic/sw/1-x/ACI_Best_Practices/b_ACI_Best_Practices/b_ACI_Best_Practices_chapter_010.html

• Question 44:

  

  Refer to the exhibit. Two application profiles are configured in the same tenant and different VRFs. Which contract scope is configured to allow communication between the two application profiles?

  A. global

  B. VRF

  C. application

  D. tenant

  Correct Answer: D

  Reference: https://www.cisco.com/c/en/us/td/docs/switches/datacenter/aci/apic/sw/1-x/Operating_ACI/guide/b_Cisco_Operating_ACI/b_Cisco_Operating_ACI_chapter_01000.html

• Question 45:

  Which action should be taken in Cisco ACI to reassign a unique globally scoped pcTag to an EPG that provides a global contract?

  A. Configure subnets that are treated as virtual IP

  B. Configure subnets that advertise externally

  C. Configure subnets that are shared between VRFs

  D. Configure subnets that are private to VRF

  Correct Answer: C

  Reference: https://www.cisco.com/c/en/us/support/docs/cloud-systems-management/application-policy-infrastructure-controller-apic/119023-technote-apic-00.html

• Question 46:

  

  Refer to the exhibit. What must be configured in the service graph to redirect HTTP traffic between the EPG client and EPG server to go through the Cisco ASA firewall?

  A. contract filter to allow ARP and HTTP

  B. precise filter to allow only HTTP traffic

  C. contract with no filter

  D. permit-all contract filter

  Correct Answer: A

• Question 47:

  What is the purpose of the Forwarding Tag (FTAG) in Cisco ACI?

  A. FTAG is used in Cisco ACI to add a label to the iVXLAN traffic in the fabric to apply the correct policy.

  B. FTAG is used in Cisco ACI to add a label to the VXLAN traffic in the fabric to apply the correct policy.

  C. FTAG trees in Cisco ACI are used to load balance unicast traffic.

  D. FTAG trees in Cisco ACI are used to load balance mutli-destination traffic.

  Correct Answer: D

  Reference: https://www.cisco.com/c/en/us/td/docs/switches/datacenter/aci/apic/sw/1-x/aci-fundamentals/b_ACI-Fundamentals/b_ACI-Fundamentals_chapter_010010.html#concept_1E8BF286E1C043EF839D80935FDF9F50

• Question 48:

  

  Refer to the exhibit. Which three actions should be taken to implement the vPC in the Cisco ACI fabric? (Choose three.)

  A. Select a common vPC interface policy group

  B. Select individual interface profiles

  C. Select common interface profiles

  D. Select individual switch profiles

  E. Select common switch profiles

  Correct Answer: ABE

• Question 49:

  An engineer must limit local and remote endpoint learning to the bridge domain subnet. Which action should be taken inside the Cisco APIC?

  A. Disable Remote EP Learn

  B. Enable Enforce Subnet Check

  C. Disable Endpoint Dataplane Learning

  D. Enable Limit IP Learning to Subnet

  Correct Answer: B

  Reference: https://www.cisco.com/c/en/us/solutions/collateral/data-center-virtualization/application-centric-infrastructure/white-paper-c11-739989.html

• Question 50:

  

  An organization migrates its virtualized servers from a legacy environment to Cisco ACI. VM1 is incorrectly attached to PortGroup IT|3TierApp|Web. Which action limits IP address learning in BD1?

  A. Enable Enforce Subnet Check

  B. Enable Rouge Endpoint Control

  C. Enable GARP-based EP Move Detection Mode

  D. Disable Remote EP Learn

  Correct Answer: C