Refer to the exhibit.

Refer to the exhibit. A Cisco ACI environment hosts two e-commerce applications. The default contract from a common tenant between different application tiers is used, and the applications work as expected. The customer wants to move to more specific contracts to prevent unwanted traffic between EPGs. A network administrator creates the app-to-db contract to meet this objective for the application and database tiers. The application EPGs must communicate only with their respective database EPGs. How should this contract be configured to meet this requirement?

• A.Implement the app-to-db scope as VRF.
• B.Implement the app-to-db as a Taboo contract.
• C.Set the app-to-db scope to Application Profile.
• D.Set the app-to-db scope to Global.

Comment: *

Name: *

Email: *

Verification: *

Refer to the exhibit. An engineer configures communication between the EPGs in different tenants.
Which action should be taken to create the subnet?

• A.Add the L3Out for Route Profile value.
• B.Leave Scope set to Private to VRF.
• C.Change Scope to Shared between VRFs.
• D.Change Scope to Advertised Externally.

Comment: *

Name: *

Email: *

Verification: *

An engineer must limit management access to me Cisco ACI fabric that originates from a single subnet where the NOC operates. Access should be limited to SSH and HTTPS only. Where should the policy be configured on the Cisco APIC to meet the requirements?

• A.policy in the management tenant
• B.policy on the management VLAN
• C.ACL on the management interface of the APIC
• D.ACL on the console interface

Correct Answer: A

https://www.cisco.com/c/en/us/td/docs/switches/datacenter/aci/apic/sw/1- x/Operating_ACI/guide/b_Cisco_Operating_ACI/b_Cisco_Operating_ACI_chapter_0111.ht ml

Comment: *

Name: *

Email: *

Verification: *

Refer to the exhibit. An engineer must implement the inter-tenant service graph. Which set of actions must be taken to accomplish this goal?

• A.- Define the contract in the provider tenant and export it to the consumer tenant.
  - Define the L4-L7 device, service graph template, and ASA bridge domains in the provider tenant.
• B.- Define the contract in the provider tenant and export it to the provider tenant.
  - Define the L4-L7 device and service graph template in the provider tenant and the ASA bridge domains in the consumer tenant.
• C.- Define the contract in the provider tenant and export it to the provider tenant.
  - Define the L4-L7 device, service graph template, and ASA bridge domains in the consumer tenant.
• D.- Define the contract in the provider tenant and export it to the consumer tenant.
  - Define the L4-L7 device and service graph template in the provider tenant and the ASA bridge domains in the consumer tenant.

Comment: *

Name: *

Email: *

Verification: *

Refer to the exhibit.

Refer to the exhibit. The EPG-100 must be extended to the vCenter as a port group with a tagged VLAN ID of 100. Which set of actions accomplishes this goal?

• A.Define a static VLAN range (from 100-200) under a VLAN pool that is associated with the dc1vcdev domain.
  Associate the dc2vcdev domain with EPG and select these settings:
  Untagged VLAN Access: selected
  VLAN Mode: Static with Encap: 100
• B.Define a dynamic VLAN range (from 100-200) under a VLAN pool that is associated with the del vdev domain.
  Associate the dc1vcdev domain with EPG and select these settings:
  Untagged VLAN Access: unselected
  VLAN Mode: Static with Encap: 100
• C.Define a dynamic VLAN range (from 100-200) under a VLAN pool that is associated with the dc1vdev domain.
  Associate the dc2vcdev domain with EPG and select these settings:
  Untagged VLAN Access: selected
  VLAN Mode: Static with Encap: 100
• D.Define a static VLAN range (from 100-200) under a VLAN pool that is associated with the dc1vcdev domain.
  Associate the dc1vcdev domain with EPG and select these settings:
  Untagged VLAN Access: unselected
  VLAN Mode: Static with Encap: 100

Comment: *

Name: *

Email: *

Verification: *