Free 300-620 Exam Braindumps certification guide Q&A
300-620 Certification Overview Latest 300-620 PDF Dumps
Cisco 300-620 certification exam is designed for IT professionals seeking to validate their knowledge and skills in implementing Cisco Application Centric Infrastructure (ACI). ACI is a software-defined networking (SDN) solution that simplifies data center management and automates network provisioning. 300-620 exam tests candidates on their ability to configure, manage, and troubleshoot ACI environments, as well as their understanding of the underlying technologies and protocols.
NEW QUESTION # 13
Refer to the exhibit.
Refer to the exhibit. An engineer must divert the traffic between VM-1 and VM-2 by using a Multi-Node service graph. The solution should prevent an insufficient number of available Layer 4 to Layer 7 devices in the first cluster. Which configuration set accomplishes this goal?
- A. PBR node tracking
tracking threshold with action deny
symmetric PBR
unidirectional PBR - B. PBR node tracking
tracking threshold with action bypass
symmetric PBR
resilient hashing - C. PBR node tracking
tracking threshold with action permit
unidirectional PBR
resilient hashing - D. PBR node tracking
tracking threshold with action permit
symmetric PBR
resilient hashing
Answer: A
NEW QUESTION # 14
Which two dynamic routing protocols are supported when using Cisco ACI to connect to an external Layer 3 network? (Choose two.)
- A. iBGP
- B. eBGP
- C. IS-IS
- D. RIPv2
- E. VXLAN
Answer: A,B
NEW QUESTION # 15
When configuring Cisco ACI VMM domain integration with VMware vCenter, which object is created in vCenter?
- A. datacenter
- B. VMware vSphere Standard vSwitch
- C. cluster
- D. VMware vSphere Distributed Switch
Answer: D
Explanation:
Section: Integrations
NEW QUESTION # 16
An engineer must implement management policy and data plane separation in the Cisco ACI fabric. Which ACI object must be created in Cisco APIC to accomplish this goal?
- A. Tenant
- B. Application profile
- C. Contract
- D. Bridge domain
Answer: A
NEW QUESTION # 17
A Cisco ACI is integrated with a VMware vSphere environment. The port groups must be created automatically in vSphere and propagated to hypervisors when created in the ACI environment.
Which action accomplishes this goal?
- A. Associate the VMM domain with the EPGs that must be available in vCenter.
- B. Configure contracts for the EPGs that are required on the ESXi hosts.
- C. Create the port groups on the vCenter that reflect the EPG names in the APIC.
- D. Assign the uplinks of the ESXi hosts to the vDS that the APIC created.
Answer: A
NEW QUESTION # 18
Which description regarding the initial APIC cluster discovery process is true?
- A. The APIC discovers the IP address of the other APIC controllers by using Cisco Discovery Protocol.
- B. Every switch is assigned a unique AV by the APIC.
- C. The ACI fabric is discovered starting with the spine switches.
- D. The APIC uses an internal IP address from a pool to communicate with the nodes.
Answer: D
Explanation:
Each APIC instance in the cluster first discovers only the leaf switch to which it is directly connected. After the leaf switch is registered with the APIC, the APIC discovers all spine switches that are directly connected to the leaf switch.
As each spine switch is registered, that APIC discovers all the leaf switches that are connected to that spine switch. This cascaded discovery allows the APIC to discover the entire fabric topology in a few simple steps.
https://www.cisco.com/c/en/us/td/docs/switches/datacenter/aci/apic/sw/2- x/GSG/b_APIC_Getting_Started_Guide_Rel_2_x/b_APIC_Getting_Started_Guide_Rel_2_x_chap ter_0100.pdf
NEW QUESTION # 19
Refer to the exhibit A customer must back up the current Cisco ACl configuration securely to the remote location using encryption and authentication. The backup job must run once per day The customer s security policy mandates that any sensitive information including passwords, must not be exported from the device Which set of steps meets these requirements?
- A. Option B
- B. Option A
- C. Option C
- D. Option D
Answer: A
NEW QUESTION # 20
An engineer needs to deploy a leaf access port policy group in ACI Fabric to support the following requirements:
* Control the amount of application data flowing into the system
* Allow the newly connected device to auto-negotiate link speed with the leaf switch Which two ACI policies must be configured to achieve these requirements? (Choose two.)
- A. ingress data plane policing policy
- B. L2 interface policy
- C. link level policy
- D. ingress control plane policing policy
- E. slow drain policy
Answer: A,C
Explanation:
Section: ACI Fabric Infrastructure
Explanation/Reference:
https://www.cisco.com/c/en/us/td/docs/switches/datacenter/aci/apic/sw/kb/ b_Cisco_ACI_and_Forward_Error_Correction.html
https://www.cisco.com/c/en/us/td/docs/switches/datacenter/aci/apic/sw/4-x/security/Cisco-APIC-Security- Configuration-Guide-401/b_Cisco_APIC_Security_Guide_chapter_01110.html#:~:text=Use%20data%20plane
%20policing%20(DPP,dropping%20of%20packets%20occurs%20immediately.
NEW QUESTION # 21
Refer to the exhibit. A customer is deploying a WAN with these requirements:
- Routers 1 and 2 must receive only routes 192.168.11.0/24 and
192.168.21.0/24 from the Cisco ACI fabric.
- Reachability to the WAN users must be permitted only for the servers
that are located in vrf_prod.
Which settings must be configured to meet these objectives?
- A. Configure the subnets 192.168.11.0/24 and 192.168.21.0/24 as Private to VRF.
Configure the subnet 192.168.31.0/24 as Advertised Externally.
Configure an EPG subnet 0.0.0.0/0 as External Subnets for External EPG. - B. Configure the subnets 192.168.11.0/24 and 192.168.21.0/24 as Advertised Externally.
Configure the subnet 192.168.31.0/24 as Private to VRF.
Configure an EPG subnet 0.0.0.0/0 as External Subnets for External EPG. - C. Configure the subnets 192.168.11.0/24 and 192.168.21.0/24 as Private to VRF.
Configure the subnet 192.168.31.0/24 as Advertised Externally.
Configure an EPG subnet 0.0.0.0/0 as Shared Route Control Subnet. - D. Configure the subnets 192.168.11.0/24 and 192.168.21.0/24 as Advertised Externally.
Configure the subnet 192.168.31.0/24 as Private to VRF.
Configure an EPG subnet 0.0.0.0/0 as Shared Route Control Subnet.
Answer: B
NEW QUESTION # 22
Refer to the exhibit. Endpoint-A must communicate with Endpoint-B, but Leaf-101 has not learned the location of Endpoint-B. Which step must Leaf-101 take before sending the data?
- A. Leaf-101 broadcasts an ARP request on a link to one of the spines.
- B. Leaf-101 forwards the packet to the anycast proxy VTEP IP.
- C. Leaf-101 sends the packet to the Spine-201.
- D. Leaf-101 creates an eVXLAN tunnel to Leaf-104.
Answer: B
Explanation:
In this scenario, given the ingress leaf does not know the destination MAC address, it will forward the packet to the spine anycast proxy-mac address. The spine will perform a COOP lookup for the destination MAC.
https://www.cisco.com/c/en/us/support/docs/cloud-systems-management/application-policy- infrastructure-controller-apic/218035-troubleshoot-aci-intra-fabric-forwarding.html
NEW QUESTION # 23
Which endpoint learning operation is completed on the ingress leaf switch when traffic is received from a Layer 3 Out?
- A. The source IP address of the traffic is learned as a remote endpoint.
- B. The source IP address of the traffic is learned as a local endpoint.
- C. The source MAC address of the traffic is learned as a local endpoint.
- D. The source MAC address of the traffic is learned as a remote endpoint.
Answer: C
NEW QUESTION # 24
A Cisco ACI environment consists of multiple silent hosts that are often relocated between leaf switches. When the host is relocated, the bridge domain takes more than a few seconds to relearn the host's new location. The requirement is to minimize the relocation impact and make the ACI fabric relearn the new location of the host faster. Which action must be taken to meet these requirements?
- A. Configure ARP Flooding to Enabled.
- B. Set L2 Unknown Unicast to Hardware Proxy.
- C. Configure IP Data-Plane Learning to No.
- D. Set Unicast Routing to Enabled.
Answer: A
NEW QUESTION # 25
Which attribute should be configured for each user to enable RADIUS for external authentication in Cisco ACI?
- A. cisco-aci-role
- B. cisco-security domain
- C. cisco-auth-features
- D. cisco-av-pair
Answer: D
Explanation:
Section: ACI Management
Explanation/Reference: https://www.cisco.com/c/en/us/td/docs/switches/datacenter/aci/apic/sw/2-x/Security_config/ b_Cisco_APIC_Security_Configuration_Guide/b_Cisco_APIC_Security_Guide_chapter_01011.html
NEW QUESTION # 26
Which two actions extend a Layer 2 domain beyond the ACI fabric? (Choose two.)
- A. extending the routed domain out of the ACI fabric
- B. creating an external physical network
- C. extending the EPG out of the ACI fabric
- D. creating a single homed Layer 3 Out
- E. extending the bridge domain out of the ACI fabric
Answer: C,E
NEW QUESTION # 27
How is an EPG extended outside of the ACI fabric?
- A. Create an external bridged network that is assigned to a leaf port.
- B. Statically assign a VLAN ID to a leaf port in an EPG.
- C. Create an external routed network that is assigned to an EPG.
- D. Enable unicast routing within an EPG.
Answer: B
Explanation:
Extending the EPG out of the ACI Fabric: An EPG can be extended out of ACI fabric by statically assigning port to an EPG. As soon as leaf receives the traffic and determines the end point information, it assigns the traffic to Proper EPG by matching the VLAN ID on port.
NEW QUESTION # 28
Which two components are essential parts of a Cisco ACI Virtual Machine Manager (VMM) domain policy configuration? (Choose two.)
- A. EPG static port binding
- B. Layer 3 outside interface association
- C. IP address pool association
- D. EPG association
- E. VMM domain profile
Answer: D,E
Explanation:
Explanation
https://www.cisco.com/c/en/us/td/docs/switches/datacenter/aci/apic/sw/1-x/aci-fundamentals/b_ACI-Fundamenta
NEW QUESTION # 29
An engineer configured Layer 2 extension from the ACI fabric and changed the Layer 2 unknown unicast policy from Flood to Hardware Proxy. How does this change affect the flooding of the L2 unknown unicast traffic?
- A. It is forwarded to one of the APICs to perform as a proxy.
- B. It is forwarded to one of the spines to perform as a spine proxy.
- C. It is flooded within the whole fabric.
- D. It is dropped by the leaf when the destination endpoint is not present in the endpoint table.
Answer: B
Explanation:
https://www.cisco.com/c/en/us/td/docs/switches/datacenter/aci/apic/sw/2- x/L2_config/b_Cisco_APIC_Layer_2_Configuration_Guide/ b_Cisco_APIC_Layer_2_Configuration_Guide_chapter_010.html
NEW QUESTION # 30
Refer to the exhibit.
An engineer is implementing Cisco ACI - VMware vCenter integration for a blade server that lacks support of bonding. Which port channel mode results in "route based on originating virtual port" on the VMware VDS?
- A. MAC Pinning+
- B. LACP Passive
- C. LACP Active
- D. Static Channel - Mode On
- E. MAC Pinning-Physical-NIC-load
Answer: A
NEW QUESTION # 31
What must be configured to redistribute externally learned OSPF routes within the ACI fabric?
- A. Route Control Profile
- B. BGP Route Reflector
- C. PIM Sparse Mode
- D. BGP Inter-leak Route Map
Answer: A
NEW QUESTION # 32
......
The Best Cisco 300-620 Study Guides and Dumps of 2024: https://examcollection.dumpsactual.com/300-620-actualtests-dumps.html
