Labour Day Sale - Limited Time 70% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: mxmas70

Home > Cisco > CCNP Data Center > 300-620

300-620 Implementing Cisco Application Centric Infrastructure (DCACI) Question and Answers

Question # 4

Which tenant is used when configuring in-band management IP addresses for Cisco APICs, leaf nodes, and spine nodes?

A.

default

B.

infra

C.

common

D.

mgmt

Full Access
Question # 5

How is an EPG extended outside of the ACI fabric?

A.

Create an external bridged network that is assigned to a leaf port.

B.

Create an external routed network that is assigned to an EPG.

C.

Enable unicast routing within an EPG.

D.

Statically assign a VLAN ID to a leaf port in an EPG.

Full Access
Question # 6

An organization deploys active-active data centers and active-standby firewalls in each data center. Which action should be taken in a Cisco ACI Multi-Pod to maintain traffic symmetry through the firewalls?

A.

Disable Resilient Hashing.

B.

Disable service node Health Tracking.

C.

Enable Pod ID Aware Redirection.

D.

Enable Endpoint Dataplane Learning.

Full Access
Question # 7

A packet is routed between two endpoints on different Cisco ACI leaf switches. Which VXLAN VNID is applied to the packet?

A.

FD

B.

EPG

C.

VRF

D.

BD

Full Access
Question # 8

Which endpoint learning operation is completed on the ingress leaf switch when traffic is received from a Layer 3 Out?

A.

The source MAC address of the traffic is learned as a local endpoint.

B.

The source MAC address of the traffic is learned as a remote endpoint.

C.

The source IP address of the traffic is learned as a remote endpoint.

D.

The source IP address of the traffic is learned as a local endpoint.

Full Access
Question # 9

Refer to the exhibit.

An engineer configures the Cisco ACI fabric for VMM integration with ESXi servers that are to be connected to the ACI leaves. The server team requires the network switches to initiate the LACP negotiation as opposed to the servers. The LAG group consists of two 10 Gigabit Ethernet links. The server learn also wants to evenly distribute traffic across all available links. Which two enhanced LAG policies meet these requirements? (Choose two.)

A.

LACP Mode: LACP Standby

B.

LB Mode: Destination IP Address and TCP/UDP Port

C.

LB Mode: Source and Destination MAC Address

D.

LB Mode: Source IP Address and TCP/UDP Port

E.

LACP Mode: LACP Active

Full Access
Question # 10

An engineer must configure RADIUS authentication with Cisco ACI for remote authentication with out-of-band management access. Drag and drop the RADIUS configuration steps from the left into the required implementation order on the right. Not all steps are used.

Full Access
Question # 11

A RADIUS user resolves its role via the Cisco AV Pair. What object does the Cisco AV Pair resolve to?

A.

tenant

B.

security domain

C.

primary Cisco APIC

D.

managed object class

Full Access
Question # 12

A customer must upgrade the Cisco ACI fabric to use a feature from the new code release. However, there is no direct path from the current release to the desired one. Based on the Cisco APIC Upgrade/Downgrade Support Matrix, the administrator must go through one intermediate release.

Which set of steps must be taken to upgrade the fabric to the new release?

A.

Upgrade the APICs to an interim release.

Upgrade the switches to an interim release.

Upgrade the APICs to the targeted release.

Upgrade the leaf and spine switches to the targeted release.

B.

Upgrade the APICs to an interim release and then switches to an interim release.

When all switches are operational, upgrade leaf switches to the targeted release.

Upgrade the spine switches to the targeted release.

Upgrade the APICs to the targeted release.

C.

Upgrade the APICs to an interim release.

Upgrade the leaf switches directly to the targeted release.

Upgrade the spine switches directly to the targeted release.

Upgrade the APICs to the targeted release.

D.

Upgrade the APICs directly to the targeted release.

Upgrade the switches to an interim release.

When all switches are operational, upgrade the leaf switches to the targeted release.

Upgrade the spine switches to the targeted release.

Full Access
Question # 13

Refer to the exhibit.

Which action should be taken to ensure authentication if the RADIUS servers are unavailable?

A.

Adjust the priority of server 10.1.1.1 to 1.

B.

Set the fallback login to local.

C.

Assign the user to the default role.

D.

Set the default login realm to LDAP

Full Access
Question # 14

When a pre-provision immediacy is used, when is the policy downloaded to the Cisco ACI leaf switch?

A.

The policy is downloaded and programmed in the hardware policy CAM when the change is implemented on the Cisco APIC.

B.

The policy is programmed in the hardware policy CAM when the policy is downloaded in the leaf software.

C.

The policy is programmed in the hardware policy CAM when the first packet is received through the data path.

D.

The policy is downloaded to the associated leaf switch software when the ESXi host is attached to a DVS.

Full Access
Question # 15

The Application team reports that a previously existing port group has disappeared from vCenter. An engineer confirms that the VM domain association for the EPG is no longer present. Which action determines which user is responsible for the change?

A.

Check the EPG audit logs for the 'deletion' action and compare the affected object and user.

B.

Evaluate the potential faults that are raised for that EPG.

C.

Examine the health score and drill down to an object that affects the EPG combined score.

D.

Inspect the server logs to see who was logging in to the APIC during the last few hours.

Full Access
Question # 16

Which type of profile needs to be created to deploy an access port policy group?

A.

attachable entity

B.

Pod

C.

module

D.

leaf interface

Full Access
Question # 17

Which new construct must a user create when configuring in-band management?

A.

VLAN pool

B.

management contract

C.

management tenant

D.

bridge domain

Full Access
Question # 18

Which routing protocol is supported between Cisco ACI spines and IPNs in a Cisco ACI Multi-Pod environment?

A.

OSPF

B.

ISIS

C.

BGP

D.

EIGRP

Full Access
Question # 19

An ACI engineer is implementing a Layer 3 out inside the Cisco ACI fabric that must meet these requirements:

  • The data center core switch must be connected to one of the leaf switches with a single 1G link.
  • The routes must be exchanged using a link-state routing protocol that supports hierarchical network design.
  • The data center core switch interface must be using 802.1Q tagging, and each vlan will be configured with a dedicated IP address.

Which set of steps accomplishes these goals?

A.

Set up the ElGRP Protocol policy with the selected Autonomous System number. Set up the Routed External Network object ana Node Profile, selecting ElGRP Create the Switch profile, selecting Port-channel and the appropriate interfaces Create the default network and associate it with the Routed Outside object.

B.

Set up the BGP Protocol policy with the Autonomous System number of 0.

Configure an interface policy and an External Bridged Domain.

Create an External Bridged Network using the configured VLAN pool.

Build the Leaf profile, selecting Routed sub-interface and the appropriate VLAN.

C.

Configure the OSPF Protocol policy with an area of 0.

Create Routed Outside object and Node Profile, selecting OSPF as the routing protocol. Build the Interface profile, selecting Routed Sub-interface and the appropriate VLAN. Configure the External Network object with a network of 0.0.0.0/0.

D.

Set up the ElGRP Protocol policy with the selected Autonomous System number. Create the Routed Outside object and Node Profile selecting ElGRP Configure the Interface profile selecting Routed Interface and the appropriate interfaces. Create the External Network object with a network of 0.0.0.0/0.

Full Access
Question # 20

What happens to the traffic flow when the Cisco ACI fabric has a stale endpoint entry for the destination

endpoint?

A.

The leaf switch does not learn the source endpoint through data plane learning.

B.

The leaf switch drops the traffic that is destined to the endpoint.

C.

The leaf switch floods the traffic to the endpoint throughout the fabric.

D.

The leaf switch sends the traffic to the wrong destination leaf.

Full Access
Question # 21

Which two dynamic routing protocols are supported when using Cisco ACI to connect to an external Layer 3 network? (Choose two.)

A.

iBGP

B.

VXLAN

C.

IS-IS

D.

RIPv2

E.

eBGP

Full Access
Question # 22

Which type of policy configures the suppression of faults that are generated from a port being down?

A.

fault lifecycle assignment

B.

event lifecycle assignment

C.

fault severity assignment

D.

event severity assignment

Full Access
Question # 23

When Cisco ACI connects to an outside Layers 2 network, where does the ACI fabric flood the STP BPDU frame?

A.

within the bridge domain

B.

within the APIC

C.

within the access encap VLAN

D.

between all the spine and leaf switches

Full Access
Question # 24

Drag and drop the Cisco ACI Layer 4 to Layer 7 service insertion terms on the left to the correct descriptions on the right.

Full Access
Question # 25

Regarding the MTU value of MP-BGP EVPN control plane packets in Cisco ACI, which statement about communication between spine nodes in different sites is true?

A.

By default, spine nodes generate 9000-bytes packets to exchange endpoints routing information. As a result, the Inter-Site network should be able to carry 9000-bytes packets.

B.

By default, spine nodes generate 1500-bytes packets to exchange endpoints routing information. As a result, the Inter-Site network should be able to carry 1800-bytes packets.

C.

By default, spine nodes generate 1500-bytes packets to exchange endpoints routing information. As a result, the Inter-Site network should be able to carry 1500-bytes packets.

D.

By default, spine nodes generate 9000-bytes packets to exchange endpoints routing information. As a result, the Inter-Site network should be able to carry 9100-bytes packets.

Full Access
Question # 26

What must be enabled in the bridge domain to have the endpoint table learn the IP addresses of endpoints?

A.

L2 unknown unicast: flood

B.

GARP based detection

C.

unicast routing

D.

subnet scope

Full Access
Question # 27

What does a bridge domain represent?

A.

Layer 3 cloud

B.

Layer 2 forwarding construct

C.

tenant

D.

physical domain

Full Access
Question # 28

Which feature allows firewall ACLs to be configured automatically when new endpoints are attached to an EPG?

A.

ARP gleaning

B.

dynamic endpoint attach

C.

hardware proxy

D.

network-stitching

Full Access