Practice Free Cisco 300-620 Exam Questions Online, 300-620 Free Demo

Question 16 Written Answer

DRAG DROP
Refer to the exhibit.

A Cisco ACI fabric is newly deployed, and the security team requires more visibility of all inter-EPG traffic flows. All traffic in a VRF must be forwarded to an existing firewall pair. During fallover, the standby firewall must continue to use the same IP and MAC as the primary firewall.
Drag and drop the steps from the left Into the Implementation order on the right to configure the service graph that meets the requirements. (Not all steps are used.)

Answer:

Explanation:
Table
Description automatically generated with medium confidence

Question 17 Selectable Answer

When a pre-provision immediacy is used, when is the policy downloaded to the Cisco ACI leaf switch?

A. The policy is downloaded and programmed in the hardware policy CAM when the change is implemented on the Cisco API
B. The policy is programmed in the hardware policy CAM when the policy is downloaded in the leaf software.
C. The policy is programmed in the hardware policy CAM when the first packet is received through the data path.
D. The policy is downloaded to the associated leaf switch software when the ESXi host is attached to a DV

Answer:

Question 18 Selectable Answer

Which new construct must a user create when configuring in-band management?

A. VLAN pool
B. management contract
C. management tenant
D. bridge domain

Answer:
Explanation:
Reference: https://www.cisco.com/c/en/us/td/docs/switches/datacenter/aci/apic/sw/kb/b_KB_Configuring_Static_Management_Access.html

Question 19 Selectable Answer

Which setting prevents the learning of Endpoint IP addresses whose subnet does not match the bridge domain subnet?

A. “Limit IP learning to network” setting within the bridge domain.
B. “Limit IP learning to subnet” setting within the EP
C. “Limit IP learning to network” setting within the EP
D. “Limit IP learning to subnet” setting within the bridge domain.

Answer:
Explanation:
Reference: https://www.cisco.com/c/en/us/td/docs/switches/datacenter/aci/apic/sw/2-x/L2_config/b_Cisco_APIC_Layer_2_Configuration_Guide/b_Cisco_APIC_Layer_2_Configuration_Guide_chapter_010.html

Question 20 Selectable Answer

Refer to the exhibit.

The EPG-100 must be extended to the vCenter as a port group with a tagged VLAN ID of 100.
Which set of actions accomplishes this goal?

A. Define a static VLAN range (from 100-200) under a VLAN pool that is associated with the dc1vcdev domain. Associate the dc1vcdev domain with EPG and select these settings: Untagged VLAN Access: unselected VLAN Mode: Static with Encap: 100
B. Define a static VLAN range (from 100-200) under a VLAN pool that is associated with the dc1vcdev domain. Associate the dc2vcdev domain with EPG and select these settings: Untagged VLAN Access: selected VLAN Mode: Static with Encap: 100
C. Define a dynamic VLAN range (from 100-200) under a VLAN pool that is associated with the del vdev domain. Associate the dc1vcdev domain with EPG and select these settings: Untagged VLAN Access: unselected VLAN Mode: Static with Encap: 100
D. Define a dynamic VLAN range (from 100-200) under a VLAN pool that is associated with the dc1vdev domain. Associate the dc2vcdev domain with EPG and select these settings: Untagged VLAN Access: selected VLAN Mode: Static with Encap: 100

Answer:

Question 21 Selectable Answer

When creating a subnet within a bridge domain, which configuration option is used to specify the network visibility of the subnet?

A. limit IP learning to subnet
B. scope
C. gateway IP
D. subnet control

Answer:
Explanation:
Reference: https://www.cisco.com/c/en/us/td/docs/switches/datacenter/aci/apic/sw/1-x/Operating_ACI/guide/b_Cisco_Operating_ACI/b_Cisco_Operating_ACI_chapter_0111.html

Question 22 Selectable Answer

Refer to the exhibit.

A Cisco ACI fabric is using out-of-band management connectivity The APIC must access a routable host with an IP address of 192 168 11 2.
Which action accomplishes this goal?

A. Change the switch APIC Connectivity Preference to in-band management
B. Remove the in-band management address from the API
C. Add a Fabric Access Policy to allow management connections.
D. Modify the Pod Profile to use the default Management Access Policy

Answer:

Question 23 Selectable Answer

An engineer is in the process of discovering a new Cisco ACI fabric consisting of two spines and four leaf switches. The discovery of leaf 1 has just been completed.
Which two nodes are expected to be discovered next? (Choose two.)

A. spine 1
B. leaf 4
C. spine 2
D. leaf 3
E. leaf 2

Answer:
Explanation:
Reference: https://www.cisco.com/c/en/us/td/docs/switches/datacenter/aci/apic/sw/2-x/GSG/b_APIC_Getting_Started_Guide_Rel_2_x/b_APIC_Getting_Started_Guide_Rel_2_x_chapter_0100.pdf

Question 24 Selectable Answer

An engineer is implementing a connection that represents an external bridged network.
Which two configurations are used? (Choose two.)

A. Layer 2 remote fabric
B. Layer 2 outside
C. Layers 2 internal
D. Static path binding
E. VXLAN outside

Answer:

Question 25 Selectable Answer

An engineer must configure a group of servers with a contract that uses TCP port 80. The EGP that contains the web servers requires an external Layer 3 cloud to initiate communication.
Which action must be taken to meet these requirements?

A. Configure the EGP as a provider and L3 out as consumer of the contract.
B. Configure OSPF to exchange routes between the L3 out and EG
C. Configure a taboo contract and apply it to the EP
D. Configure the EPG as a consumer and L3 out as a provider of the contract.

Answer:

Question 26 Selectable Answer

Refer to the exhibit.

A Cisco APIC raises an error when the EPG must accept endpoints from a VMM domain created.
Which action clears the fault?

A. Expand the VLAN pool for the VMM domain.
B. Create a bridge domain for the VMM domain.
C. Associate the EPG with the VMM domain.
D. Associate the VLAN pool with the VMM domain.

Answer:

Question 27 Selectable Answer

Where is the COOP database located?

A. leaf
B. spine
C. APIC
D. endpoint

Answer:
Explanation:
Reference: https://www.cisco.com/c/en/us/solutions/collateral/data-center-virtualization/application-centric-infrastructure/white-paper-c11-739989.html

Question 28 Selectable Answer

Refer to the exhibit.

A client reports that the ACI domain connectivity to the fiber channel storage is experiencing a B2B credit oversubscription. The environment has a SYSLOG server for state collection messages.
Which value should be chosen to clear the critical fault?

A. 300
B. 410
C. 350
D. 510

Answer:

Question 29 Selectable Answer

The company ESXi infrastructure is hosted on the Cisco UCS-B Blade Servers. The company decided to take advantage of ACI VMM integration to enable consistent enforcement of policies across virtual and physical workloads. The requirement is to prevent the packet loss between the distributed virtual switch and the ACI fabric.
Which setting must be implemented on a vSwitch policy to accomplish this goal?

A. Static Channel
B. MAC Pinning
C. LACP
D. LLDP

Answer:

Question 30 Selectable Answer

All workloads in VLAN 1001 have been migrated into EPG-1001. The requirement is to move the gateway address for VLAN 1001 from the core outside the Cisco ACI fabric into the Cisco ACI fabric. The endpoints in EPG-1001 must route traffic to endpoints in other EPGs and minimize flooded traffic in the fabric.
Which configuration set is needed on the bridge domain to meet these requirements?

A. Disable ARP Flood Disable Limn Endpoint Learning
B. Enable Hardware Proxy Enable Unicast Routing
C. Disable Local IP Learning Limit Disable Unicast Routing
D. Enable Flood Enable Unicast Routing

Answer:

Test Online Free Cisco 300-620 Exam Questions and Answers