Exam 300-620 topic 1 question 103 discussion

Actual exam question from Cisco's 300-620

Question #: 103
Topic #: 1

Refer to the exhibit. An engineer wants to initiate an ICMP ping from Server1 to Server2. The requirement is for the BD1 to enforce ICMP replies that follow the expected path. The packets must be prevented from taking the direct path from Leaf1 to Server1. Which action must be taken on BD1 to meet these requirements?

A. Set L2 Unknown Unicast to Flood.
B. Set L2 Unknown Unicast to Hardware Proxy.
C. Disable Unicast Routing.
D. Enable ARP Flooding.

Show Suggested Answer

Suggested Answer: C 🗳️

by crooks_1988 at Sept. 11, 2023, 2:35 p.m.

Comments

Submit Cancel

crooks_1988

Highly Voted 1 year, 3 months ago

B - when using BD as L3 anycast GW, like in this case, L2 unknown should be set to Hardware Proxy

upvoted 5 times

...

prospio971

Most Recent 1 day, 14 hours ago

Selected Answer: C

To meet the requirements of enforcing ICMP replies to follow the expected path and prevent packets from taking the direct path from Leaf1 to Server1, the engineer must take the following action on BD1: Disable unicast routing on the bridge domain (BD1).

upvoted 1 times

...

Rollizo

1 month, 2 weeks ago

Selected Answer: C

C. Disable Unicast Routing. Explanation: When you disable unicast routing on a bridge domain in Cisco ACI, it prevents the ACI fabric from routing unicast traffic directly. Instead, all traffic must go through the appropriate path as defined by the fabric's policies. In this scenario, by disabling unicast routing: Traffic Redirection: ICMP replies from Server2 to Server1 will not take the direct path between Leaf1 and Server1. Instead, they will be redirected to follow the intended path as defined by the ACI policies and the configurations of the Bridge Domain. Path Enforcement: This ensures that the packets must go through the designated path (possibly going through a service graph, firewall, or specific switches) as required by the architecture, instead of taking a shortcut that bypasses the intended flow.

upvoted 2 times

...

marceaubueno

11 months, 2 weeks ago

That is right. However in this topology the gateway for server1 is outside of the ACI fabric, so C is correct.

upvoted 2 times

Marinheiro

7 months ago

I'm going with C