Latest 300-620 Pass Guaranteed Exam Dumps Certification Sample Questions [Q171-Q187]

4.5/5 - (2 votes)

Latest 300-620 Pass Guaranteed Exam Dumps Certification Sample Questions

New 300-620 Test Materials & Valid 300-620 Test Engine

Cisco 300-620 certification exam is a popular choice for IT professionals looking to validate their skills in implementing Cisco Application Centric Infrastructure (ACI). Implementing Cisco Application Centric Infrastructure certification is aimed at network engineers, architects, and administrators who are responsible for designing, deploying, and managing data center infrastructure using Cisco ACI solutions. 300-620 exam tests candidates’ knowledge of ACI architecture, fabric infrastructure, automation, and policy-based networking.

Q171. What must be configured to allow SNMP traffic on the APIC controller?

out-of-band management interface

contract under tenant mgmt

SNMP relay policy

out-of-band bridge domain

Q172. In a Cisco ACI Multi-Site fabric, the Inter-Site BUM Traffic Allow option is enabled in a specific stretched bridge domain. What is used to forward BUM traffic to all endpoints in the same broadcast domain?

ingress replication on the spines in the source site

egress replication on the destination leaf switches

egress replication on the source leaf switches

ingress replication on the spines in the destination site

Q173. Refer to the exhibit.

An engineer must implement the inter-tenant service graph. Which set of actions must be taken to accomplish this goal?

* Define the contract in the provider tenant and export it to the consumer tenant.
* Define the L4-L7 device, service graph template, and ASA bridge domains in the provider tenant.

* Define the contract in the provider tenant and export it to the consumer tenant.
* Define the L4-L7 device and service graph template in the provider tenant and the ASA bridge domains in the consumer tenant.

* Define the contract in the provider tenant and export it to the provider tenant.
* Define the L4-L7 device and service graph template in the provider tenant and the ASA bridge domains in the consumer tenant.

* Define the contract in the provider tenant and export it to the provider tenant.
* Define the L4-L7 device, service graph template, and ASA bridge domains in the consumer tenant.

Q174. All workloads in VLAN 1001 have been migrated into EPG-1001. The requirement is to move the gateway address for VLAN 1001 from the core outside the Cisco ACI fabric into the Cisco ACI fabric. The endpoints in EPG-1001 must route traffic to endpoints in other EPGs and minimize flooded traffic in the fabric. Which configuration set is needed on the bridge domain to meet these requirements?

Disable ARP Flood Disable Limn Endpoint Learning

Enable Hardware Proxy Enable Unicas! Routing

Disable Local IP Learning Limit Disable Unicast Routing

Enable Flood Enable Unicast Routing

Q175. What are two benefits of the Clos architecture? (Choose two.)

improved fabric scalability

complicated network design and implementation

multiple nonblocking ECMP paths from all leafs

limited fabric scalability

Q176. Where are STP BPDUSs flooded in Cisco ACI fabric?

in the access encapsulation VLAN part of different VLAN pools

in the bridge domain VLAN

in the native VLAN ID

in the VNID that is assigned to the FD VLAN

STP BPDUs are flooded in the bridge domain VLAN in Cisco ACI fabric.

Q177. When a pre-provision immediacy is used, when is the policy downloaded to the Cisco ACI leaf switch?

The policy is downloaded and programmed in the hardware policy CAM when the change is implemented on the Cisco APIC.

The policy is programmed in the hardware policy CAM when the policy is downloaded in the leaf software.

The policy is programmed in the hardware policy CAM when the first packet is received through the data path.

The policy is downloaded to the associated leaf switch software when the ESXi host is attached to a DVS.

Q178. An engineer is creating a configuration import policy that must terminate if the imported configuration is incompatible with the existing system. Which import mode achieves this result?

merge

atomic

best effort

replace

importMode
Best-effort mode: each MO is applied individually, and errors only cause the invalid MOs to be skipped.
Note
If the object is not present on the controller, none of the children of the object get configured.
Best-effort mode attempts to configure the children of the object.
Atomic mode: configuration is applied by whole shards. A single error causes whole shard to be rolled back to its original state.
https://www.cisco.com/c/en/us/td/docs/switches/datacenter/aci/apic/sw/4-x/aci- fundamentals/Cisco-ACI-Fundamentals-401/Cisco-ACI-Fundamentals- 401_chapter_01011.html

Q179. An engineer must add new servers to a Cisco ACI cluster and configure ports to accept the new servers. The existing servers are dual-homed to Leaf101 and Leaf102 using ports 1-3 and an interface policy group called cluster1_ifpg. The new servers must use ports 1 and 2 on Leaf103 and Leaf104. Which two actions must be taken to enable the ports with the same configuration as the existing servers in the cluster? (Choose two.)

Attach interface selectors to leaf profiles Leaf103 and Leaf104.

Use interface selector for cluster1_infpg.

Connect with interface selector using a new AEP.

Configure interface selector using a new interface policy group.

Select ports 1 and 2 using interface selectors.

Q180. The existing network and ACI fabric have been connected to support workload migration. Servers will physically terminate at the Cisco ACI, but their gateway must stay in the existing network. The solution needs to adhere to Cisco’s best practices. The engineer started configuring the relevant Bridge Domain and needs to complete the configuration. Which group of settings are required to meet these requirements?

L2 Unknown Unicast: Hardware Proxy
L3 Unknown Multicast Flooding: Flood
Multi Destination Flooding: Flood in BD
ARP Flooding: Enable

L2 Unknown Unicast: Flood
L3 Unknown Multicast Flooding: Flood
Multi Destination Flooding: Flood in BD
ARP Flooding: Enable

L2 Unknown Unicast: Flood
L3 Unknown Multicast Flooding: Optimize Flood
Multi Destination Flooding: Flood in BD
ARP Flooding: Disable

L2 Unknown Unicast: Hardware Proxy
L3 Unknown Multicast Flooding: Optimize Flood
Multi Destination Flooding: Flood in BD
ARP Flooding: Disable

https://www.cisco.com/c/en/us/td/docs/switches/datacenter/aci/apic/sw/migration_guides/migrating_existing_networks_to_aci.html

Q181. Which statements are correct regarding ACI support for BFD? (Choose two.)

BFD is supported for EIGRP, OSPF, and BGP in ACI.

BFD is supported on L3Out loopback interfaces.

BFD is supported for BGP prefix peers (dynamic neighbors).

BFD is supported on routed interfaces, routed subinterfaces, and SVIs.

Q182. What represents the unique identifier of an ACI object?

universal resource identifier (URI)

application programming interface

management information tree

distinguished name

Q183. An engineer is configuring a VRF for a tenant named Cisco. Drag and drop the child objects on the left onto the correct containers on the right for this configuration.

Q184. The Application team reports that a previously existing port group has disappeared from vCenter. An engineer confirms that the VM domain association for the EPG is no longer present. Which action determines which user is responsible for the change?

Check the EPG audit logs for the ‘deletion’ action and compare the affected object and user.

Evaluate the potential faults that are raised for that EPG.

Examine the health score and drill down to an object that affects the EPG combined score.

Inspect the server logs to see who was logging in to the APIC during the last few hours.

Q185. Refer to the exhibit.

A Cisco ACI fabric is newly deployed, and the security team requires more visibility of all inter-EPG traffic flows. All traffic in a VRF must be forwarded to an existing firewall pair. During fallover, the standby firewall must continue to use the same IP and MAC as the primary firewall. Drag and drop the steps from the left Into the Implementation order on the right to configure the service graph that meets the requirements. (Not all steps are used.)

Explanation
https://www.cisco.com/c/en/us/td/docs/switches/datacenter/aci/apic/sw/1-x/L4-L7_Services_Deployment/guide/b
* Create a service bridge domain and a layer 4 to layer 7 device within one cluster interface.

Q186. Where is the COOP database located?

leaf

spine

APIC

endpoint

https://www.cisco.com/c/en/us/solutions/collateral/data-center-virtualization/application-centric- infrastructure/white-paper-c11-739989.html

Q187. An engineer must perform a Cisco ACI fabric upgrade that minimizes the impact on user traffic and allows only permitted users to perform an upgrade.
Which two configuration steps should be taken to meet these requirements?

Divide Cisco APIC controllers into two or more maintenance groups.

Grant tenant-ext-admin access to a user who performs an upgrade

Combine all switches into an upgrade group.

Divide switches into two or more maintenance groups.

Grant the fabric administrator role to a user who performs an upgrade.

Loading …