Skip to main content

300-620 Real Exam Questions

Implementing Cisco Application Centric Infrastructure (DCACI)

388 questions available · Page 1 of 39

Updated Exam DumpsVerified AnswersPass Guarantee

Get Complete Exam Dumps
Question 1 Single choice

Refer to the exhibit.

A tenant is configured with a single L3Out and a single-homed link to the core router called Core-1. An engineer must add a second link to the L3Out that connects to the Core-2 router.

Which action allows traffic from Core-2 to BL-1002 to have the same connectivity as the traffic from Core-1 to BL-1001?

  1. A

    Add a second OSPF interface profile to the logical interface profile.

  2. B

    Add a second interface to the external domain to the existing L3Out.

  3. C

    Add a second path to the logical interface profile of the existing L3Out.

  4. D

    Add a second subnet to the external EPG to the existing L3Out.

Show answer and explanation

Correct answer: C

Question 2 Single choice

An engineer wants to record the login and configuration change events in a Cisco ACI environment. The requirements are to send the records to a syslog server, but to exclude fabric-related or tenant-related events.

Which action accomplishes this goal?

  1. A

    Configure the default monitoring policy in the access policies to include the audit logs.

  2. B

    Configure the forwarding facility of the remote destination in the external data collectors to Iocal7.

  3. C

    Configure the syslog source Min Severity to the information level in the access policy.

  4. D

    Configure the local file destination severity to debugging level in the external data collectors.

Show answer and explanation

Correct answer: A

Question 3 Single choice

Which setting prevents the learning of Endpoint IP addresses whose subnet does not match the bridge domain subnet?

  1. A

    "Limit IP learning to network" setting within the bridge domain.

  2. B

    "Limit IP learning to subnet" setting within the EPG.

  3. C

    "Limit IP learning to network" setting within the EPG.

  4. D

    "Limit IP learning to subnet" setting within the bridge domain.

Show answer and explanation

Correct answer: D

Question 4 Single choice

Which resolution immediacy setting allows a policy to be downloaded to the Cisco ACI leaf switch software regardless of CDP/LLDP neighborship?

  1. A

    Expedite

  2. B

    Immediate

  3. C

    Pre-Provision

  4. D

    On Demand

Show answer and explanation

Correct answer: C

Question 5 Single choice

Refer to the exhibit.

An engineer configured this node control policy and these ACI objects:

1. leaf policy group named ACI_Leaf_PolGrp.
2. leaf switches profile named ACI_Leaf_NodeProf.
3. node control policy named ACI_Pal_Node_Ctrl.

Which association set must be used to apply ACI_Pal_Node_Ctrl on Node-2001?

  1. A

    SWNFV1ACIPAL to ACI_Leaf_PolGrp
    ACI_Leaf_PolGrp to ACI_Leaf_NodeProf
    SWNFV1ACIPAL to Node-2001

  2. B

    ACI_Pal_Node_Ctrl to SWNFV1ACIPAL
    ACI_Leaf_PolGrp to Node-2001
    ACI_Pal_Node_Ctrl to ACI_Leaf_NodeProf

  3. C

    ACI_Pal_Node_Ctrl to ACI_Leaf_PolGrp

    ACI_Leaf_PolGrp to Node-2001
    SWNFV1ACIPAL to ACI_Leaf_NodeProf

  4. D

    ACI_Pal_Node_Ctrl to ACI_Leaf_PolGrp
    ACI_Pal_Node_Ctrl to Node-2001
    SWNFV1ACIPAL to ACI Leaf PolGrp

Show answer and explanation

Correct answer: C

Question 6 Single choice

An engineer configures SNMP for an ACI fabric and created an SNMP Monitoring Destination Group called snmp_dgroup1. Snmp_dgroup1 is configured with the server hostname and community password. An SNMP policy called snmp_podpolicy1 is configured to enable SNMP and add an SNMP Client Group Profile called snmp_clgroup1. Snmp_podpolicy1 is associated the default pod profile via a pod policy group named pod1.

Which configuration set must the engineer enable to complete the SNMP configuration?

  1. A

    Configure the OOB management contract to permit UDP 162.
    Associate snmp_dgroup1 with the OOB management EPG.

  2. B

    Configure an SNMP management contract to permit all traffic.
    Associate snmp_podpolicy1 with an SNMP pod profile.

  3. C

    Configure an SNMP management contract to permit UDP 162.
    Associate the SNMP Source to snmp_clgroup1.

  4. D

    Configure the OOB management contract to permit all traffic.
    Associate snmp_clgroup1 with the SNMP management EPG.

Show answer and explanation

Correct answer: C

Question 7 Single choice

Which IP address pool must be reachable across the backbone from the physical pod to the remote leaf?

  1. A

    seed pod tunnel endpoint pool

  2. B

    seed pod external tunnel endpoint pool

  3. C

    remote leaf tunnel endpoint pool

  4. D

    remote leaf external tunnel endpoint pool

Show answer and explanation

Correct answer: D

Question 8 Single choice

The company's Cisco ACI fabric hosts multiple customer tenants. To meet a service level agreement, the company is constantly monitoring the Cisco ACI environment. Syslog is one of the methods used for monitoring. Only events related to leaf and spine environmental information without specific customer data should be logged.
To which ACI object must the configuration be applied to meet these requirements?

  1. A

    infra tenant

  2. B

    access policy

  3. C

    switch profile

  4. D

    fabric policy

Show answer and explanation

Correct answer: D

Question 9 Multiple choice

Which two protocols support accessing backup files on a remote location from the APIC? (Choose two.)

  1. A

    TFTP

  2. B

    FTP

  3. C

    SFTP

  4. D

    SMB

  5. E

    HTTPS

Show answer and explanation

Correct answers: B, C

Question 10 Single choice

Where are STP BPDUSs flooded in Cisco ACI fabric?

  1. A

    in the access encapsulation VLAN part of different VLAN pools

  2. B

    in the bridge domain VLAN

  3. C

    in the native VLAN ID

  4. D

    in the VNID that is assigned to the FD VLAN

Show answer and explanation

Correct answer: D

Explanation

ACI floods STP Bridge Protocol Data Units (BPDUs) to the VXLAN network identifier (VNID) assigned to the FD VLAN (VNID is assigned through the VLAN pool so encapsulation has to be part of same VLAN pool to be in part of same STP domain). So in effect, it operates as an Ethernet hub when it comes to Spanning Tree. When external L2 switches are connected to an ACI leaf, they default to full-duplex operation. In the STP world, this equates to a P2P link type
https://www.cisco.com/c/en/us/support/docs/cloud-systems-management/application-policy-infrastructure-controller-apic/211236-ACI-operation-with-L2-switches-and-Spann.pdf