500-601 · Question #49
Which two statements about troubleshooting common ARP forwarding issues ma Cisco ACI Fabric are true? (Choose two.)
The correct answer is C. The tcpdum command can be used on all Cisco ACI switches to capture and verify tenant EPGdata plan traffic. tcpdump is natively available on Cisco ACI leaf and spine switches because they run a Linux-based OS underneath NX-OS. This makes it a legitimate and effective tool for capturing data-plane traffic from tenant EPGs directly on the fabric, making C correct. Why the distractors…
Question
Options
- AIf IPManager On the spine rejected a tenant VRF/route configuration, the spine command show ip route vrf <vrf name> can be used to verify all tenant VRF configurations.
- BThe BD SVI IP address can be verified with the vsh_ _lc show platform internal ns forwarding router-ip command.
- CThe tcpdum command can be used on all Cisco ACI switches to capture and verify tenant EPGdata plan traffic.
- DThe VLAN membership for an interface on the Broadcom ASIC can be verified with the show hardware plans programmed command.
- EVLAN membership of an interface can be vended wrth the VSh_IC show system Internal eltme Info interface x/x command.
How the community answered
(35 responses)- B9% (3)
- C83% (29)
- D6% (2)
- E3% (1)
Explanation
tcpdump is natively available on Cisco ACI leaf and spine switches because they run a Linux-based OS underneath NX-OS. This makes it a legitimate and effective tool for capturing data-plane traffic from tenant EPGs directly on the fabric, making C correct.
Why the distractors are wrong:
- A is misleading:
show ip route vrf <name>on a spine shows routes for that specific VRF, not "all tenant VRF configurations" - and if IPManager rejected the configuration, it wouldn't appear in the routing table at all, defeating the purpose. - B contains a garbled command path (
vsh_ _lc). The real command usesvsh_lc(line card shell) without extra spaces or underscores; the syntax error alone makes this statement false as written. - D is incorrect because
show hardware plans programmedis not a valid ACI ASIC verification command. The correct approach for Broadcom ASIC VLAN verification uses line-card-specific internal commands. - E uses
VSh_ICinstead of the correctvsh_lc, and "eltme" is a misspelling ofeltm(Encap and VLAN Table Manager). Command typos in ACI troubleshooting = wrong answers.
Memory tip: In ACI, the Linux layer is always underneath - think "Linux tools (tcpdump) always work because ACI = NX-OS on Linux." For the distractors, watch for command typos and overly broad claims (like "all VRFs") - they're the exam's tell that the statement is false.
Note: The question says "Choose two" but only one correct answer (C) is provided - your source may have a typo or missing second answer. On the actual exam, expect a second valid option.
Topics
Community Discussion
No community discussion yet for this question.