CCNP CCNP Data Center 2 — Questions and Answers
Question 1: In Cisco ACI, what is an Endpoint Group (EPG)?
- A logical grouping of endpoints that share the same policy and security requirements (Correct answer)
- A physical server connected to the ACI fabric
- A VLAN segment spanning multiple leaf switches
- A routing table entry in the spine layer
Correct answer: A logical grouping of endpoints that share the same policy and security requirements
An EPG is a logical grouping of endpoints (VMs, servers, etc.) that share the same policy, and communication between EPGs is controlled by contracts.
Question 2: What is the role of the APIC (Application Policy Infrastructure Controller) in Cisco ACI?
- Centralized policy management and orchestration controller for the ACI fabric (Correct answer)
- The spine switch that routes traffic between leaf nodes
- A hardware load balancer integrated into the fabric
- A firewall service node inserted into the data path
Correct answer: Centralized policy management and orchestration controller for the ACI fabric
The APIC is the centralized automation, policy, and management controller for Cisco ACI, though it is not in the data forwarding path.
Question 3: Which underlay protocol does Cisco ACI use between spine and leaf switches?
- IS-IS (Correct answer)
- OSPF
- BGP
- EIGRP
Correct answer: IS-IS
Cisco ACI uses IS-IS as the underlay routing protocol for fabric discovery and loop-free topology within the spine-leaf architecture.
Question 4: What overlay encapsulation protocol does Cisco ACI use to carry tenant traffic across the fabric?
- VXLAN (Correct answer)
- MPLS
- GRE
- NVGRE
Correct answer: VXLAN
Cisco ACI uses VXLAN as the overlay encapsulation protocol to carry tenant traffic between leaf switches across the IP underlay.
Question 5: In Cisco ACI, what is a Contract used for?
- Define permitted communication between EPGs (Correct answer)
- Allocate IP addresses to endpoints
- Configure uplink port speeds on leaf switches
- Map a VLAN to a bridge domain
Correct answer: Define permitted communication between EPGs
Contracts define the allowed protocols and ports for communication between EPGs; without a contract, inter-EPG traffic is denied by default.
Question 6: What is the purpose of a Bridge Domain (BD) in Cisco ACI?
- Defines the Layer 2 flooding and Layer 3 gateway boundary for a set of endpoints (Correct answer)
- Controls physical port membership on leaf switches
- Provides out-of-band management for APIC
- Connects two VRFs within the same tenant
Correct answer: Defines the Layer 2 flooding and Layer 3 gateway boundary for a set of endpoints
A Bridge Domain in ACI defines the flooding and Layer 3 gateway scope, replacing traditional VLANs, and can have one or more associated subnets.
CCNP CCNP Data Center 2
In Cisco ACI, what is an Endpoint Group (EPG)?