Cisco CCNP 300-620 Questions & Answers

• Question 1:

  What controls communication between EPGs?

  A. Inter-EPG communication is controlled by BGP.

  B. Inter-EPG communication is controlled by contracts.

  C. Inter-EPG communication is controlled by IS-IS.

  D. Inter-EPG communication is controlled by VXLAN.

  Correct Answer: B

• Question 2:

  Which feature should be disabled on a bridge domain when a default gateway for endpoints is on an external device instead of a Cisco ACI bridge domain SVI?

  A. unknown unicast flooding

  B. ARP flooding

  C. unicast routing

  D. proxy ARP

  Correct Answer: C

• Question 3:

  Where are STP BPDUSs flooded in Cisco ACI fabric?

  A. in the access encapsulation VLAN part of different VLAN pools

  B. in the bridge domain VLAN

  C. in the native VLAN ID

  D. in the VNID that is assigned to the FD VLAN

  Correct Answer: D

  ACI floods STP Bridge Protocol Data Units (BPDUs) to the VXLAN network identifier (VNID) assigned to the FD VLAN (VNID is assigned through the VLAN pool so encapsulation has to be part of same VLAN pool to be in part of same STP domain). So in effect, it operates as an Ethernet hub when it comes to Spanning Tree. When external L2 switches are connected to an ACI leaf, they default to full-duplex operation. In the STP world, this equates to a P2P link type

  https://www.cisco.com/c/en/us/support/docs/cloud-systems-management/application-policy-infrastructure-controller-apic/211236-ACI-operation-with-L2-switches-and-Spann.pdf

• Question 4:

  Refer to the exhibit.

  

  An engineer is configuring a production Multi-Site solution to provide connectivity from EPGs from a specific site to networks reachable through a remote site L3OUT. All required schema and template objects are already defined. Which additional configuration must be implemented in the Multi-Site Orchestrator to support the cross-site connectivity?

  A. Configure a routable TEP pool for SITE1.

  B. Enable CloudSec for intersite traffic encryption.

  C. Add a new stretched external EPG to the existing L3OUT.

  D. Add a new stretched external EPG to the existing L3OUT.

  Correct Answer: C

• Question 5:

  Refer to the exhibit.

  

  Which two configurations enable inter-VRF communication? (Choose two.)

  A. Set the subnet scope to Shared Between VRFs.

  B. Enable Advertise Externally under the subnet scope.

  C. Export the contract and import as a contract interface.

  D. Change the contract scope to Tenant.

  E. Change the subject scope to VRF.

  Correct Answer: AD

• Question 6:

  An engineer must adjust the time on a Cisco ACI fabric. The implementation must use a single external time server and the APIC management interfaces for the communication. Which action accomplishes this goal?

  A. Enable the Date and Time offset state in the system settings.

  B. Set the NTP provider minimum polling interval to 1.

  C. Set the NTP provider in default Date and Time policy.

  D. Create a contract in the management tenant to allow UDP port 123.

  Correct Answer: C

• Question 7:

  An SNMP monitoring service is added to a Cisco ACI fabric. The solution must meet these requirements:

  1.

  The notification must be generated when significant events occur during hardware-related events.

  2.

  The notification system must be redundant by using multiple servers to receive the notifications.

  Which set of actions meets these requirements?

  A. Implement an SNMP Monitoring Destination Group. Associate the SNMP policy to the desired pod in the Pod Policies section under the Fabric tab.

  B. Configure an SNMP policy with community policies in the Tenant section of the common tenant. Link the SNMP policy to the common tenant in the Monitoring Policies section under the Fabric tab.

  C. Define an SNMP policy with community policies in the Fabric Policies section under the Fabric tab. Implement an SNMP Client Group Profile.

  D. Configure an SNMP Monitoring Destination Group. Define an SNMP source by using the previously defined group in the Access Policies section under the Fabric tab.

  Correct Answer: A

  https://www.cisco.com/c/dam/en/us/solutions/collateral/data-center-virtualization/application-centric-infrastructure/aci-guide-configuring-snmp.pdf

• Question 8:

  In a Cisco ACI fabric, an endpoint moves between two leaf switches during a virtual machine migration. Which action does Cisco ACI take to minimize the impact to traffic during this event?

  A. A new leaf switch updates a COOP database on the spine, which causes the old leaf switch to install a bounce entry.

  B. A new leaf switch sends a COOP message to the Cisco APIC cluster to populate a new location of the endpoint.

  C. A new leaf switch sends a COOP message directly to the old leaf switch to update it with new information about the endpoint move.

  D. A new leaf switch floods GARP to every other leaf switch in the fabric, which advertises a new endpoint location to the fabric.

  Correct Answer: A

  There are several scenarios in which an endpoint moves between two Cisco ACI leaf switches, such as a failover event or a virtual machine migration in a hypervisor environment. Cisco ACI data-plane endpoint learning detects these events quickly and updates the Cisco ACI endpoint database on a new leaf. In addition to data-plane learning, Cisco ACI uses bounce entries to manage the old endpoint information on the original leaf.

  When a new local endpoint is detected on a leaf, the leaf updates the COOP database on spine switches with its new local endpoint. If the COOP database has already learned the same endpoint from another leaf, COOP will recognize this event as an endpoint move and report this move to the original leaf that contained the old endpoint information. The old leaf that receives this notification will delete its old endpoint entry and create a bounce entry, which will point to the new leaf. A bounce entry is basically a remote endpoint created by COOP communication instead of data-plane learning.

• Question 9:

  An engineer must configure an L3Out to advertise a single summarized address for all Cisco ACI host routes. The summarized address must be advertised to the core switches that are physically attached to the ACI fabric. An external EPG is created with the required subnet.

  Which configuration set advertises the subnet to the remote peer?

  A. Set the external EPG subnet scope to Export Route Control Subnet. Associate a route control profile.

  B. Set the external EPG subnet scope to Export Route Control Subnet. Associate a route summarization policy.

  C. Set the external EPG subnet scope to Import Route Control Subnet. Associate a route summarization policy.

  D. Set the external EPG subnet scope to Import Route Control Subnet. Associate a route control profile.

  Correct Answer: B

  https://www.cisco.com/c/en/us/td/docs/dcn/aci/apic/5x/l3-configuration/cisco-apic-layer-3-networking-configuration-guide-52x/route-summarization-layer3-config-52x.html

• Question 10:

  An engineer must add new servers to a Cisco ACI cluster and configure ports to accept the new servers. The existing servers are dual-homed to Leaf101 and Leaf102 using ports 1-3 and an interface policy group called cluster1_ifpg. The new servers must use ports 1 and 2 on Leaf103 and Leaf104. Which two actions must be taken to enable the ports with the same configuration as the existing servers in the cluster? (Choose two.)

  A. Attach interface selectors to leaf profiles Leaf103 and Leaf104.

  B. Use interface selector for cluster1_infpg.

  C. Connect with interface selector using a new AEP.

  D. Configure interface selector using a new interface policy group.

  E. Select ports 1 and 2 using interface selectors.

  Correct Answer: AE