Limited-Time Offer: Enjoy 50% Savings! Ends in 00h 00m 00s Coupon code: 50OFF
Skip to content
Login Sign up

Free Cisco Implementing Cisco Application Centric Infrastructure 300-620 Exam Questions

Page: 1 / 17 Total 247 questions

Want more questions? Get Premium Access.

Question 1

Refer to the exhibit.

Refer to the exhibit. The EPG-100 must be extended to the vCenter as a port group with a tagged VLAN ID of 100. Which set of actions accomplishes this goal?

Correct Answer: A. Define a static VLAN range (from 100-200) under a VLAN pool that is associated with the dc1vcdev domain. Associate the dc1vcdev domain with EPG and select these settings: Untagged VLAN Access: unselected VLAN Mode: Static with Encap: 100
Explanation:

To extend the EPG-100 to the vCenter as a port group with a tagged VLAN ID of 100, the following actions should be taken:

Define a static VLAN range (from 100-200) under a VLAN pool: This step involves creating a VLAN pool that includes the desired VLAN range.The VLAN pool is then associated with the VMM domain that corresponds to the vCenter integration1.

Associate the dc1vcdev domain with EPG: The VMM domain named 'dc1vcdev' should be associated with the EPG-100.This association allows for the automatic creation of port groups in vCenter when the EPG is associated with a VMM domain1.

Select the appropriate settings for the domain association:

Untagged VLAN Access: This should be unselected because the VLAN ID needs to be tagged.

VLAN Mode: Set to 'Static' to specify the encapsulation VLAN ID.

Encap: Set to '100' to define the specific VLAN ID that should be tagged for the port group1.


Cisco APIC Layer 2 Networking Configuration Guide1

Cisco APIC Layer 2 Networking Configuration Guide1

Question 2

How does Cisco ACI detect the IP address of a silent host that moved from one location to another without notifying a Cisco ACI leaf?

Correct Answer: A. ARP requests are flooded in the bridge domain.
Explanation:

In a Cisco ACI fabric, when a silent host moves from one location to another without notifying the ACI leaf switch (e.g., via Gratuitous ARP), the detection mechanism depends on how the bridge domain is configured. Specifically, ARP flooding can help detect such silent hosts.


Question 4

An engineer configures a Multi-Pod system with the default getaway residing outside of the ACI fabric for a

bridge domain. Which setting should be configured to support this requirement?

Correct Answer: A. disable Limit IP Learning to Subnet
Explanation:

When configuring a Multi-Pod system with the default gateway residing outside of the ACI fabric for a bridge domain, the setting that should be configured is todisable Limit IP Learning to Subnet (Option A). This allows the ACI fabric to learn IP addresses outside of the defined subnet, which is necessary when the default gateway is external.


Question 5

An engineer must connect a new host to port 1 '1 on Leaf 101. A Cisco ACI fabric has an MOP policy configured but experience excessive Layer 2 loops The engineer wants the Cisco ACI fabric to detect and prevent Layer 2 loops m the fabric Which set of actions accomplishes these goals'?

Correct Answer: B. Option B
Explanation:

To detect and prevent Layer 2 loops in a Cisco ACI fabric, the engineer must configure the Mis-Cabling Protocol (MCP) and related policies. MCP is designed to detect loops in Layer 2 network segments connected to ACI access ports and operates in conjunction with Spanning Tree Protocol (STP) running on external Layer 2 networks. The steps to accomplish these goals include:

Enable MCP Globally: Ensure that MCP is enabled globally on all access ports, virtual ports, and virtual port channels (VPCs) unless they are disabled at the individual port level1.

Configure MCP Transmit Frequency: Set the transmit frequency to a value that allows for quick loop detection.Starting with the 3.2(1) release, the Cisco ACI fabric provides faster loop detection with transmit frequencies from 100 milliseconds to 300 seconds1.

Set Action on Loop Detection: Decide how the MCP policies will act upon loop detection.Options include generating a syslog message or disabling the port upon detection of a loop1.

Implement Error Disabled Recovery Policy: Configure an error disabled recovery policy to automatically re-enable ports that were disabled due to loop detection after a configurable interval1.

By following these steps, the engineer can ensure that the Cisco ACI fabric will detect and prevent Layer 2 loops, thereby maintaining a stable and efficient network environment.


Cisco APIC Online Help - Loop Detection1

ACI Layer 2 loop detection and Mitigation - Cisco Video Portal2

Question 6

An engineer must connect Cisco ACI fabric using Layer 2 with external third-party switches. The third-party

switches are configured using 802.1s protocol. Which two constructs are required to complete the task?

(Choose two.)

Correct Answer: A. spanning tree policy for mapping MST Instances to VLANs; E. static binding of native VLAN in all existing EPGs
Explanation:

To connect Cisco ACI fabric using Layer 2 with external third-party switches configured using 802.1s protocol, the two constructs required are:

Spanning tree policy for mapping MST Instances to VLANs (Option A): This policy will ensure that the Multiple Spanning Tree (MST) instances on the third-party switches are correctly mapped to the VLANs in the ACI fabric.

Static binding of native VLAN in all existing EPGs (Option E): This construct is necessary to maintain the native VLAN across all EPGs when integrating with third-party switches that use 802.1s protocol.

https://www.ciscolive.com/c/dam/r/ciscolive/emea/docs/2019/pdf/BRKACI-3101.pdf

https://www.cisco.com/c/en/us/solutions/collateral/data-center-virtualization/application-centric-infrastructure/white-paper-c07-732033.html


Question 7

Refer to the exhibit.

Refer to the exhibit. How are the STP BPDUs forwarded over Cisco ACI fabric?

Correct Answer: B. STP BPDUs that are generated by Switch2 are received by Switch1 and Switch3
Explanation:

In a Cisco ACI fabric, Spanning Tree Protocol (STP) Bridge Protocol Data Units (BPDUs) that are generated by an external switch, such as Switch2 in this scenario, are indeed forwarded across the fabric. This allows externally connected switches to maintain a loop-free topology.While Cisco ACI does not participate in STP as it uses its own protocols and mechanisms for loop prevention within the fabric, it will forward STP BPDUs across End Point Groups (EPGs) on which they are received1. This ensures that the connected external switches can still use STP for their loop prevention mechanisms.


Cisco Community Discussion on STP BPDUs in ACI1

Question 9

Refer to the exhibit.

The engineer is planning to configure in-band management for the Cisco ACI fabric. The goal is to allow the network operators to reach the Cisco APIC servers and fabric switches from the in-band network. Which configuration must be applied on the bridge domain to accomplish these goals?

Correct Answer: B. Enable Unicast Routing. Set scope to Advertised Externally.
Explanation:

https://www.cisco.com/c/en/us/support/docs/cloud-systems-management/application-policy-infrastructure-controller-apic/221867-configure-in-band-management-in-aci.html Scope - Choose according to the route leakage method you use. Here choose to use L3out, and then click Advertised Externally.


Question 10

An engineer implements a configuration backup on the Cisco APIC. The backup job must meet these requirements:

* The backup must transfer the encrypted data to the remote server.

* The transfer must be resumed if the connection is interrupted.

Which configuration set meets these requirements?

Correct Answer: D. Select protocol SFTP in Create Remote Location. Choose XML format in Configuration Export Policy.

Question 11

Refer to the exhibit.

Refer to the exhibit. Server A is connected to the Cisco ACI fabric using two teamed interfaces. One interface in a team is configured as active and the other remains in standby mode. When a failover occurs and the standby interface becomes active, it uses its built-in MAC address to send traffic. Which bridge domain configuration must be applied to resolve the issue?

Correct Answer: C. Enable ARP flooding.
Explanation:

In the scenario where Server A is connected to the Cisco ACI fabric using teamed interfaces with one active and one standby, enabling ARP flooding in the bridge domain configuration is necessary to resolve the issue that occurs when the standby interface becomes active and uses its built-in MAC address to send traffic.Enabling ARP flooding allows the fabric to learn the new MAC address without waiting for the ARP timeout, which helps to ensure that traffic continues to flow to the correct destination after a failover event1.


Discuss Cisco 300-620 Exam Topic 9 Question 71 | Pass4Success1

Question 12

Refer to the exhibit.

An engineer is implementing Cisco ACI -- VMware vCenter integration for a blade server that lacks support of bonding. Which port channel mode results in ''route based on originating virtual port'' on the VMware VDS?

Correct Answer: B. MAC Pinning-Physical-NIC-load
Explanation:

For a blade server that lacks support of bonding, the port channel mode that results in ''route based on originating virtual port'' on the VMware VDS isMAC Pinning-Physical-NIC-load(Option B).This mode ensures that the virtual machine traffic is distributed across the available uplinks based on the MAC address of the originating virtual port1.

https://www.cisco.com/c/en/us/td/docs/dcn/aci/apic/6x/virtualization/cisco-aci-virtualization-guide-60x/ACI-Virtualization-Guide-60x-aci-with-vmware-vds.pdf


Question 13

Refer to the exhibit.

Refer to the exhibit. An engineer configured subnets on the external EPG called L3OUT_CORE. The external endpoints in the 10.1.0.0/24 subnet can reach internal endpoints, but the external endpoints in the 172.16.1.0/24 subnet are unreachable. Which set of actions enables the connectivity?

Correct Answer: C. Delete both external EPG subnets. Create the 0.0.0.0/0 subnet.
Explanation:

To enable connectivity for the external endpoints in the 172.16.1.0/24 subnet, the following actions should be taken:

Delete both external EPG subnets: This action removes any specific subnet configurations that might be causing routing issues or conflicts within the external EPG1.

Create the 0.0.0.0/0 subnet: By configuring a 0.0.0.0/0 subnet, you are effectively creating a default route that allows all traffic to be routed, ensuring that endpoints in any subnet, including the 172.16.1.0/24 subnet, can reach internal endpoints1.

This configuration change addresses the issue where traffic from the 172.16.1.0/24 subnet is not reaching the internal endpoints, likely due to a lack of a default route or misconfigured subnets within the external EPG


Question 14

In-band is currently configured and used to manage the Cisco ACI fabric. The requirement is for leaf and spine switches to use out-of-band management for NTP protocol. Which action accomplishes this goal?

Correct Answer: B. Create an Override Policy with NTP Out-of-Band for leaf and spine switches.
Explanation:

To configure leaf and spine switches in a Cisco ACI fabric to use out-of-band management for NTP protocol, anOverride Policy with NTP Out-of-Bandmust be created. This policy specifies that NTP traffic should be directed through the out-of-band management network, separate from the in-band management traffic, ensuring dedicated management connectivity for time synchronization.

https://www.cisco.com/c/en/us/support/docs/cloud-systems-management/application-policy-infrastructure-controller-apic/200128-Configuring-NTP-in-ACI-Fabric-Solution.html


Question 15

A network engineer configures the Cisco ACI fabric to connect to vCenter with these requirements:

Port groups must be automatically created on the distributed virtual switch.

Port groups must use the VLAN allocation in the range between 20-30.

The deployment must optimize the CAM space on the leaf switches.

Which set of actions meets these criteria?

Correct Answer: A. Create a dynamic VLAN pool with the VLAN range of 20-30. Create a VMM domain and associate it with the VLAN pool. Create the EPG and associate the domain. Set the deployment immediacy to On Demand.
Explanation:

To meet the criteria for configuring the Cisco ACI fabric to connect to vCenter, the following actions should be taken:

Create a dynamic VLAN pool with the VLAN range of 20-30: This step involves creating a VLAN pool that dynamically assigns VLANs within the specified range to the port groups as they are created1.

Create a VMM domain and associate it with the VLAN pool: The VMM domain is a representation of the VMware vSphere Distributed Switch (VDS) in ACI, and associating it with the VLAN pool allows for the automatic creation of port groups on the VDS1.

Create the EPG and associate the domain: An Endpoint Group (EPG) is a logical entity to which workloads are attached.Associating the EPG with the VMM domain ensures that the port groups are automatically created in vCenter when the EPG is associated with a VMM domain1.

Set the deployment immediacy to On Demand: Setting the deployment immediacy to 'On Demand' optimizes the CAM space on the leaf switches by deploying policies to leaf nodes only when endpoints assigned to this EPG are connected, rather than immediately upon configuration12.

By following these steps, the network engineer can ensure that the Cisco ACI fabric is correctly configured to connect to vCenter, with port groups being automatically created on the distributed virtual switch, using the VLAN allocation in the range between 20-30, and optimizing the CAM space on the leaf switches.


Page: 1 / 17 Total 247 questions