View Full Cisco CCNP Data Center 300-610 Exam Dumps and Practice Test Dumps.
Question 21. What does an ACI bridge domain primarily provide
- Server firmware
- Storage zoning
- Layer 2 forwarding scope
- GPU scheduling
Correct Answer: 3. Layer 2 forwarding scope
Explanation:
A bridge domain defines a Layer 2 forwarding domain within Cisco ACI and is associated with a VRF for Layer 3 context. One or more endpoint groups can connect to the same bridge domain depending on the segmentation design. The bridge domain also contains settings for endpoint learning, flooding behavior, routing, and subnet configuration. Cisco ACI requires a bridge domain to have a relationship with a VRF even when the design provides only Layer 2 connectivity. Proper bridge domain planning is therefore fundamental to both network centric and application centric ACI architectures.
Question 22. What does an ACI EPG group
- Endpoints with common policy requirements
- Fibre Channel switches
- Physical spine links
- Storage arrays only
Correct Answer: 1. Endpoints with common policy requirements
Explanation:
An endpoint group contains endpoints that share similar connectivity and policy requirements. In Cisco ACI, EPGs provide an important abstraction between applications and the underlying network infrastructure. Servers or workloads can be classified into separate EPGs according to function, security zone, or application role. Contracts then determine which types of traffic can flow between different EPGs. This allows network policy to follow the logical application architecture instead of depending only on traditional VLAN and subnet boundaries. Cisco includes EPG design as a core element of both network centric and application centric ACI deployments.
Question 23. What controls communication between different ACI EPGs
- VSANs
- Port channels
- Service profiles
- Contracts
Correct Answer: 4. Contracts
Explanation:
Contracts define the traffic that is allowed between endpoint groups in Cisco ACI. By default, endpoints in different EPGs do not automatically communicate unless appropriate policy permits the traffic. A contract contains subjects and filters that describe permitted communication. One EPG can provide a contract while another consumes it. This application focused policy model reduces dependence on traditional manually maintained access control lists. Contracts can also integrate with service insertion designs when traffic must pass through devices such as firewalls or load balancers.
Question 24. Which ACI object provides Layer 3 routing isolation
- EPG
- VRF
- Contract
- Application profile
Correct Answer: 2. VRF
Explanation:
A VRF provides Layer 3 routing separation within Cisco ACI. Different VRFs maintain independent routing domains and can therefore support traffic isolation between tenants, applications, or security zones. A tenant can contain multiple VRFs, and several bridge domains can be associated with the same VRF. Cisco also allows a tenant to reference a VRF from the common tenant when shared services are required. Because every bridge domain must be associated with a VRF, the VRF is a fundamental part of the ACI object model even in designs focused mainly on Layer 2 connectivity.
Question 25. What is a common network centric ACI mapping
- One bridge domain to one EPG to one VLAN
- One VRF to one switch port
- One tenant to one server
- One contract to one spine
Correct Answer: 1. One bridge domain to one EPG to one VLAN
Explanation:
A common network centric ACI design maps one bridge domain to one endpoint group and one VLAN. This model closely resembles traditional network segmentation and can simplify migration from conventional VLAN based data center networks. Organizations can first reproduce familiar network boundaries inside ACI and later adopt more application centric segmentation if required. Cisco notes that network centric and application centric approaches can coexist within the same tenant. The best approach depends on operational requirements, application architecture, security boundaries, migration strategy, and the skills of the network operations team.
Question 26. Where can the ACI default gateway subnet commonly be configured
- Spine profile
- Interface policy
- Bridge domain
- Fabric membership
Correct Answer: 3. Bridge domain
Explanation:
When Cisco ACI provides the default gateway for servers, the subnet is commonly configured under the bridge domain. The subnet represents the anycast gateway address used by endpoints attached to that bridge domain. Cisco also supports EPG level subnet configuration for specific shared service and route leaking designs, but ordinary default gateway configuration normally belongs under the bridge domain. This distributed gateway architecture lets leaf switches route endpoint traffic close to where it enters the fabric while maintaining consistent gateway addressing throughout the ACI environment.
Question 27. What does an ACI application profile contain
- Fibre Channel zones
- Endpoint groups
- Server BIOS settings
- GPU memory settings
Correct Answer: 2. Endpoint groups
Explanation:
An ACI application profile is a logical container used to organize endpoint groups that belong to an application or related service. The application profile helps administrators represent application structure in a way that is independent of the physical topology. EPGs created under the application profile can then be associated with bridge domains, physical domains, virtual machine manager domains, and contracts. This abstraction is one of the reasons ACI can model application relationships rather than forcing administrators to manage every communication requirement as a traditional VLAN or interface configuration.
Question 28. What does an ACI tenant primarily provide
- A physical uplink
- A Fibre Channel port
- A server identity
- A logical administrative container
Correct Answer: 4. A logical administrative container
Explanation:
An ACI tenant is a logical administrative container for network and policy objects such as VRFs, bridge domains, application profiles, EPGs, and contracts. Tenants can represent organizations, business units, environments, or other administrative boundaries. A single tenant can contain multiple VRFs, so there is not a required one to one relationship between a tenant and a routing domain. Cisco also provides the common tenant for objects that should be shared across other tenants. Tenant design is therefore an important part of multitenancy and policy organization within ACI.
Question 29. What does an ACI L3Out provide
- External routed connectivity
- Server BIOS management
- Fibre Channel zoning
- GPU acceleration
Correct Answer: 1. External routed connectivity
Explanation:
An L3Out provides routed connectivity between an ACI fabric and external Layer 3 networks. It can connect the fabric to WAN routers, firewalls, traditional data center networks, or other routed environments. The L3Out is associated with a VRF so external routes are imported into and exported from the proper routing context. Contracts can then control which internal endpoint groups are allowed to communicate with external networks. Shared L3Out designs can also be created through the common tenant when several tenants require access to common external routing infrastructure.
Question 30. What is the default policy behavior between separate ACI EPGs
- Permit all traffic
- Require a contract for communication
- Route only multicast traffic
- Disable endpoint learning
Correct Answer: 2. Require a contract for communication
Explanation:
Traffic between separate endpoint groups normally requires an appropriate contract. This creates a policy model in which communication is explicitly defined rather than automatically permitted between security zones. A provider EPG offers a contract and a consumer EPG uses it. Filters inside the contract specify the traffic that is allowed. Traffic within the same EPG is normally permitted without a contract. This model allows Cisco ACI to implement application segmentation while keeping connectivity policy separate from the physical topology and VLAN assignments used to attach workloads.
Question 31. What does a Cisco UCS service profile define
- Fibre Channel fabric health
- ACI contract scope
- Switch routing policy
- Server identity and connectivity
Correct Answer: 4. Server identity and connectivity
Explanation:
A Cisco UCS service profile is a software definition of a server and its associated identity, networking, and storage connectivity characteristics. The profile can define items such as server identity and LAN and SAN connectivity without permanently tying those settings to one physical blade. When the profile is associated with a server, UCS Manager applies the defined configuration to the server and related infrastructure components. This stateless computing model makes hardware replacement and server reprovisioning easier because the logical server personality can be moved to compatible hardware.
Question 32. Where are Cisco UCS Manager service profiles stored
- On every application VM
- On the storage array
- In the fabric interconnect management system
- On ACI spine switches
Correct Answer: 3. In the fabric interconnect management system
Explanation:
Cisco UCS Manager runs within the fabric interconnect environment and stores the logical configuration used to provision UCS servers, including service profiles. These profiles represent the server personality and can be associated with appropriate physical hardware. Centralizing server identity and configuration in the UCS management system reduces the need to manually configure each blade, network adapter, HBA, and related infrastructure component independently. This abstraction is central to UCS stateless computing and simplifies consistent provisioning across large compute environments.
Question 33. What is a key benefit of UCS stateless computing
- Server personality can move between compatible hardware
- Storage zoning is eliminated
- Routing protocols are unnecessary
- All workloads use one VLAN
Correct Answer: 1. Server personality can move between compatible hardware
Explanation:
Stateless computing separates the logical identity and configuration of a server from the individual physical blade. A UCS service profile can contain identity, firmware related settings, networking, and SAN connectivity information. If hardware fails, the profile can be associated with another compatible server so the replacement assumes the intended personality. This reduces manual reconfiguration and can shorten recovery time. The concept is particularly valuable in data centers that require repeatable server deployment, predictable configuration, and simplified hardware replacement at scale.
Question 34. What does a Cisco UCS fabric interconnect provide
- Only GPU processing
- Unified server connectivity and management
- Only SAN storage capacity
- Application firewall policy
Correct Answer: 2. Unified server connectivity and management
Explanation:
Cisco UCS fabric interconnects provide the central connectivity and management foundation for supported UCS server systems. They connect servers to LAN and SAN resources while hosting the UCS management environment in classic UCS Manager architectures. This unified approach reduces the number of separate management and connectivity components required for server provisioning. Service profiles can configure server identity, adapters, networking, and storage access through the fabric interconnect domain. Cisco includes UCS B Series, C Series, and UCS X Series design concepts in the current DCID training objectives.
Question 35. What does a VSAN provide in a Fibre Channel network
- Logical SAN fabric separation
- GPU load balancing
- Layer 3 Internet routing
- Ethernet link aggregation
Correct Answer: 1. Logical SAN fabric separation
Explanation:
A VSAN creates logical separation within a Fibre Channel switching infrastructure. Multiple VSANs can operate on the same physical switch while maintaining independent fabric services and isolation. This allows storage designers to segment devices, applications, or operational domains without deploying a separate physical switch fabric for every requirement. Cisco Nexus Dashboard SAN management displays included and excluded VSANs as part of the fabric definition. VSAN planning should align with redundancy, security, fault isolation, and operational requirements in the storage network design.
Question 36. What does Fibre Channel zoning control
- GPU clock speed
- Ethernet channel width
- Communication between SAN devices
- ACI endpoint learning
Correct Answer: 3. Communication between SAN devices
Explanation:
Fibre Channel zoning controls which initiators and targets are permitted to communicate within a SAN fabric. This helps isolate storage resources and limits unnecessary visibility between devices. A common design principle is to permit only the host initiators and storage targets that need to communicate. Zoning therefore improves manageability, security, and fault isolation within a Fibre Channel environment. Cisco includes storage network design as a major area of the 300 610 DCID exam because reliable data center architecture must account for both Ethernet networks and dedicated SAN connectivity.
Question 37. What is the purpose of dual independent SAN fabrics
- Increase broadcast traffic
- Eliminate host adapters
- Use one physical path
- Provide storage path redundancy
Correct Answer: 4. Provide storage path redundancy
Explanation:
Dual independent SAN fabrics provide redundant storage paths so a host can continue reaching storage if one fabric experiences a failure. A common design uses Fabric A and Fabric B with separate switches, links, and host connectivity. Servers typically use multiple host bus adapter paths and multipathing software to access storage through both fabrics. Keeping the fabrics independent reduces the risk that a single configuration problem or hardware failure affects every storage path simultaneously. High availability is one of the most important design principles in Fibre Channel storage networking.
Question 38. What is a seed switch used for in Nexus Dashboard SAN fabric discovery
- Discover switches in the SAN fabric
- Assign server BIOS settings
- Create ACI contracts
- Accelerate GPU memory
Correct Answer: 1. Discover switches in the SAN fabric
Explanation:
When a SAN fabric is added to Nexus Dashboard management, a seed switch provides the initial entry point for fabric discovery. The administrator supplies the management address or DNS name of the seed switch together with the required access credentials. Nexus Dashboard can then discover the broader SAN fabric and provide inventory, health, alarm, and performance information. Recent Cisco releases can discover supported Cisco and non Cisco switches depending on the SAN management capabilities in use. The seed switch therefore acts as the starting point for centralized fabric discovery rather than as a special forwarding role.
Question 39. What does Nexus Dashboard display for a managed SAN fabric
- Only client passwords
- Fabric health and inventory
- GPU kernel code
- Application source code
Correct Answer: 2. Fabric health and inventory
Explanation:
Nexus Dashboard SAN management provides visibility into fabric health, alarms, inventory, switch configuration, and related operational information. Administrators can view fabric level status and investigate switches and interfaces from a centralized interface. Cisco documentation also includes performance collection and VSAN information as part of SAN fabric management. This centralized visibility reduces the need to manage every Fibre Channel switch independently and helps operations teams identify problems across larger storage networking environments. Management platform design is relevant to DCID because data center infrastructure must remain operationally manageable after deployment.
Question 40. Which DCID domain includes compute storage network and automation design
- Wireless design only
- Internet edge only
- Campus access only
- Data center infrastructure design
Correct Answer: 4. Data center infrastructure design
Explanation:
The Cisco 300 610 DCID exam covers broad data center infrastructure design rather than only Ethernet switching. Cisco identifies network, compute, storage networking, and automation among the major knowledge areas for the exam. Current objectives also include AI and machine learning concepts, high performance networking, modern compute components, and operational sustainability. Candidates therefore need to understand how networking, server infrastructure, SAN design, management platforms, and automation work together as one data center architecture. This broad scope reflects the role of a data center designer, who must evaluate interactions between infrastructure domains instead of optimizing each technology independently.