Verified 400-151 Exam Questions and Answers 2021

NEW QUESTION 1
When you deploy a Layer 4 – Layer 7 service graph in ACI using policy-based redirect, when does the PDR functionality get enabled?

• A. when you enable PBR under the consumer EPG Layer 4 –Layer 7 parameters
• B. when you enable PBR under the provider EPG Layer 4 –Layer 7 parameters
• C. when you create the service graph template
• D. when you add the Layer 4 – Layer 7 device to the APIC
• E. when you deploy the service graph template

Answer: A

NEW QUESTION 2
Refer to the exhibit.

Which condition executes the Add DNS server task"?

• A. true
• B. failed
• C. undefined
• D. false

Answer: C

NEW QUESTION 3
Which two statements about IP Source Guard are true? (Choose two)

• A. IP Source Guard limits IP traffic on an interface to only those sources that have an IPMAC address binding table entry or static IP source entry
• B. IP Source Guard requires that DHCP snooping is disabled
• C. When you first enable IP Source Guard on an interface, you may experience disruption in IP traffic until the hosts on the interface receive a new IP address from a DHCP server
• D. By default,IP Source Guard is enable on all interfaces
• E. IP Source Guard is independent of DHCP anooping to build and maintain the IP-MAC address binding table

Answer: AC

Explanation: https://www.cisco.com/c/en/us/td/docs/switches/datacenter/nexus1000/sw/4_0_4_s_v_1_2/security/configuration/guide/n1000v_security/n1000v_security_14sourceguard.pdf

NEW QUESTION 4
DRAG DROP
Drag and drops the feature from the left onto the correct description on the right

Answer:

Explanation:

NEW QUESTION 5
On which two criteria can an endpoint be classified statically into an application EPG? (Choose two)

• A. guest operating system
• B. VLAN
• C. VM name
• D. physical leaf port
• E. DNS host name

Answer: BD

NEW QUESTION 6
According to Cisco, which two options are benefits of ITD compared to WCCP? (Choose two)

• A. requires less TCAM entries
• B. weighted load distribution
• C. much less configuration
• D. transparent for service node
• E. does not require authentication or certificates

Answer: AB

NEW QUESTION 7
Which three main benefits of using vpath are true? ( Choose three)

• A. multitenancy
• B. multisite
• C. service graphs
• D. dynamic service provisioning
• E. service chaining
• F. device packages

Answer: ADE

NEW QUESTION 8
Refer to the exhibit.

Health scores can be aggregated for a variety of areas such as for the system, infrastructure, tenants, applications, or services. Which health score level is the exhibit from APIC GUI an example of?

• A. system
• B. managed object
• C. pod
• D. tenant

Answer: C

Explanation:
https://www.cisco.com/c/en/us/td/docs/switches/datacenter/aci/apic/sw/1-x/aci-fundamentals/b_ACI-Fundamentals/b_ACI_Fundamentals_BigBook_chapter_01010.html

NEW QUESTION 9
DRAG DROP
Drag and drop the Spanning Tree protocol standards from left onto the correct characteristics on the right

Answer:

Explanation:

NEW QUESTION 10
Which statement about updating the service profile is true?

• A. Updating service profile templates can have vNIC and vHBA templates that are initial templates.
• B. Updating service profile templates cannot have vNIC and vHBA templates that are lnitialtemplates
• C. Changes made to a vNIC templat that is an Updating template are not propagated to the service profile if the service profile template is lnitial.
• D. Updating service profile templates can only be applied to an existing service profile.
• E. Changes made to a vNIC template that is an lnitial template are propagated to the service profile if the service profile template is Updating.

Answer: A

NEW QUESTION 11
DRAG DROP
Drag and drop the term about BFD session parameters from the left onto the correct definition on the right?

Answer:

Explanation:

NEW QUESTION 12
Which method is the best way to troubleshoot a specific workflow execution in UCSD?

• A. Check the specific SR log.
• B. Generate techsupport and submit it to the TAC workflow analysis tool.
• C. Enable debug log first, the check the infrastructure logs.
• D. Open the infrastructure log.

Answer: A

NEW QUESTION 13
Which two Layer 4 – Layer 7 parameters are needed to do route peering with a Layer 4 – Layer 7
service device in Cisco ACI? (Choose two)

• A. Under the device interface, the L3 out must be selected
• B. A valid router configuration must be set under the service graph template
• C. Under the device interface, the path must be selected
• D. A router ID must be assigned under the Layer 4-Layer 7 device
• E. The connector type must be set to “Layer 2 Peering”

Answer: CD

NEW QUESTION 14
Which three main functions are provided by OTV to achieve failure isolation? (Choose three.)

• A. unknown Unicast traffic suppression
• B. use of multiple OTV overlays
• C. optimal outbound routing
• D. Spanning Tree isolation
• E. ARP optimization
• F. Unicast policy control

Answer: ADE

NEW QUESTION 15
Which two statements about geolocation policies in the ACI Fabric are true?

• A. Geolocation is the identification of the real-world geographic location of a networking device
• B. Geolocation policies are dynamically configured in ACI using the site address field in the spine and leaf Type-network
• C. Creating a geolocation policy involves creating a site,floor,room,and row
• D. Geolocation policies are configured under Fabric > Access Policies
• E. Geolocation is performed by associating a geographic location with an IP address

Answer: AE

NEW QUESTION 16
Which two guidelines and limitations of PTP on Cisco NX-OS are true? (Choose two)

• A. PTP supports multicast, unicast, and anycast communication
• B. PTP can be enabled only on F - and M - Series module ports.
• C. PTP is limitless per network
• D. Only one PTP process can control all of the port clocks through the clock manager.
• E. PTP supports transport over UD
• F. Transport over Ethernet is not supported.

Answer: DE

NEW QUESTION 17
Which option is the best practice recommendation for Spanning Tree configuration in a vPC environment?

• A. Disable PortFast (edge port type) on host-facing interfaces to avoid slow STP convergence
• B. Disable Rapid PVST or MST on all switches in the Layer 2 domain to avoid slow STP convergence
• C. Disable the Bridge Assurance feature on vPC links
• D. Disable the BPDU Filter on the edge devices to avoid BPDU propagation

Answer: C

NEW QUESTION 18
Which three LSA types are valid for OSPFv2? (Choose three)

• A. Router LSA: an LSA sent by every route
• B. This LSA includes the state and the cost of all links and a list of all OSPFv2 neighbors on the link
• C. AS Internal LSA: an LSA generated by the ASB
• D. AS Internal LSAs are flooded only within the autonomous system
• E. Backbone Summary: an LSA sent by the backbone router to all the OSPF areas
• F. DR Summary LSA: an LSA sent by the DR router to all the others on network
• G. Default LSA: an LSA generated by the ASB
• H. These LSAs are used to propagate default route into OSPF
• I. Network LSA: an LSA sent by the D
• J. This LSA lists all routers in the multi-access network
• K. Opaque LSA: an LSA used to extend OSPF

Answer: AFG

NEW QUESTION 19
Which two options are benefits of moving the application development workload to the cloud? (Choose two)

• A. High availability and redundancy is handled by the hypervisor
• B. The application availability is not affected by the loss of a single virtual machine
• C. It provides you full control over the software packages and vendor used
• D. The workload can be moved or replicated easily
• E. It provides a more secure environment.

Answer: BD