Cisco 600-660 Online Practice Questions and Exam Preparation

Cisco 600-660 Online Questions & Answers

• Question 1:

  

  Refer to the exhibit. What must be configured in the service graph to redirect HTTP traffic between the EPG client and EPG server to go through the Cisco ASA firewall?

  A. contract filter to allow ARP and HTTP
  B. precise filter to allow only HTTP traffic
  C. contract with no filter
  D. permit-all contract filter
  A. contract filter to allow ARP and HTTP

• Question 2:

  What is a design implication for Cisco ACI using an application-centric approach?

  A. Multiple VLANs and/or multiple EPGs are under one bridge domain
  B. VLAN numbers are in the names of the bridge domain and EPG objects
  C. One EPG is mapped to multiple bridge domains
  D. One VLAN equals one EPG equals one bridge domain
  C. One EPG is mapped to multiple bridge domains

• Question 3:

  

  An organization migrates its virtualized servers from a legacy environment to Cisco ACI. VM1 is incorrectly attached to PortGroup IT|3TierApp|Web. Which action limits IP address learning in BD1?

  A. Enable Enforce Subnet Check
  B. Enable Rouge Endpoint Control
  C. Enable GARP-based EP Move Detection Mode
  D. Disable Remote EP Learn
  C. Enable GARP-based EP Move Detection Mode

• Question 4:

  A cloud provider must make a pair of firewalls available to all tenants. Each tenant defines its own service graph. Where should the Layer 4 to Layer 7 service be configured to accomplish this goal?

  A. management tenant
  B. infrastructure tenant
  C. user tenant
  D. common tenant
  C. user tenant

• Question 5:

  DRAG DROP

  An engineer must migrate servers from a legacy data center infrastructure to a Cisco ACI fabric. Drag and drop the steps from the left into the order that they must be completed on the right to ensure the least amount of downtime.

  Select and Place:

  

  

• Question 6:

  

  Refer to the exhibit. Which configuration must be implemented on L3Out EBGP to advertise out of the fabric 172.16.2.0/24 network that is learned from L3Out OSPF?

  A

• Question 7:

  

  Refer to the exhibit. An engineer wants to avoid connectivity problems for the endpoint EP1 when it reaches an external L3Out network through the gateway 10.2.2.254/24. Which two configurations must be implemented in BD-BD2? (Choose two.)

  A. Disable unicast routing
  B. Enable IP data plane learning for the VRF
  C. Disable ARP flooding
  D. Enable ARP flooding
  E. Enable unicast routing
  A. Disable unicast routing
  C. Disable ARP flooding

• Question 8:

  Which firewall connection allows for the integration of service nodes in transparent mode with a Cisco ACI Multi-Pod setup?

  A. active-standby mode across pods
  B. active-active mode per pods for communication between internal endpoints
  C. active-standby mode per pods for communication between endpoints and external networks
  D. active-active mode across pods
  A. active-standby mode across pods

• Question 9:

  An engineer creates the objects that must be deployed at each site in Cisco ACI Multi-Site Orchestrator. Which action should be taken before the schema can be associated with the newly configured site?

  A. Attach the templates to the newly configured site
  B. Configure a provider for the Cisco ACI Multi-Site Orchestrator
  C. Import existing policies from an existing tenant to Cisco ACI Multi-Site Orchestrator
  D. Configure the Infra Site-Specific Settings
  A. Attach the templates to the newly configured site

• Question 10:

  

  Refer to the exhibit. Two application profiles are configured in the same tenant and different VRFs. Which contract scope is configured to allow communication between the two application profiles?

  A. global
  B. VRF
  C. application
  D. tenant
  D. tenant