Cisco 300-620 Online Practice Questions and Exam Preparation

Cisco 300-620 Online Questions & Answers

• Question 111:

  A data center administrator is upgrading an ACI fabric. There are 3 APIC controllers in the fabric and all the servers are dual-homed to pairs of leaf switches configured in VPC mode. How should the fabric be upgraded to minimize possible traffic impact during the upgrade?

  A. 1. Create two maintenance groups for the APIC controllers: VPC left and VPC right. 2. Upgrade the first group of controllers. 3. Upgrade the second group of controllers. 4. Upgrade the leaf switches.
  B. 1. Create two maintenance groups for APIC controllers: VPC left and VPC right. 2. Upgrade the leaf switches. 3. Upgrade the first group of controllers. 4. Upgrade the second group of controllers.
  C. 1. Create two maintenance groups for the leaf switches: VPC left and VPC right. 2. Upgrade the APIC controllers. 3. Upgrade the first group of leaf switches. 4. Upgrade the second group of leaf switches.
  D. 1. Create two maintenance groups for the leaf switches: VPC left and VPC right. 2. Upgrade the first group of switches. 3. Upgrade the second group of switches. 4. Upgrade the APIC controllers.
  C. 1. Create two maintenance groups for the leaf switches: VPC left and VPC right. 2. Upgrade the APIC controllers. 3. Upgrade the first group of leaf switches. 4. Upgrade the second group of leaf switches.

  ---

  Explanation/Reference:

  Recommended by Cisco TAC and the Cisco Consultant that was helping us upgrade ACI to upgrade the APIC first and than the Fabric with Minimum of two groups VPC1 and VPC2.

• Question 112:

  Which two hardware models are supported as fixed spine in Cisco ACI fabrics? (Choose two.)

  A. Cisco Nexus 9236C
  B. Cisco Nexus 9336C-FX2
  C. Cisco Nexus 9332C
  D. Cisco Nexus 9508
  E. Cisco Nexus 9364C
  C. Cisco Nexus 9332C
  E. Cisco Nexus 9364C

  ---

  Explanation/Reference:

• Question 113:

  An engineer configures two Cisco ACI objects:

  1. Security domain Dom_1

  2. Local user called User1.

  Which role privilege must be assigned to security domains so that User1 can access only policies for interface selectors?

  A. fabric-connectivity-l1
  B. access-connectivity-util
  C. nw-svc-devshare
  D. tenant-ext-protocol-l3
  A. fabric-connectivity-l1

• Question 114:

  Which switch type is discovered first in the Cisco ACI fabric discovery process?

  A. spine
  B. distribution
  C. leaf
  D. access
  C. leaf

• Question 115:

  An engineer must deploy Cisco ACI across 10 geographically separated data centers. Which ACI site deployment feature enables the engineer to control which bridge domains contain Layer 2 flooding?

  A. GOLF
  B. Multi-Site
  C. Multi-Pod
  D. Stretched Fabric
  B. Multi-Site

• Question 116:

  In a Cisco ACI Multi-Site fabric, the Inter-Site BUM Traffic Allow option is enabled in a specific stretched bridge domain. What is used to forward BUM traffic to all endpoints in the same broadcast domain?

  A. ingress replication on the spines in the source site
  B. egress replication on the destination leaf switches
  C. egress replication on the source leaf switches
  D. ingress replication on the spines in the destination site
  D. ingress replication on the spines in the destination site

  ---

  Explanation/Reference:

  the Cisco ACI Multi-Site design uses the ingress replication function on the spine nodes of the source site to replicate BUM traffic to all the remote sites on which that bridge domain is stretched. https://www.cisco.com/c/en/us/solutions/collateral/data-center-virtualization/application-centric-infrastructure/white-paper-c11-739609.html

• Question 117:

  Which feature is used to program policy CAM on a leaf switch without sending traffic from VM to the leaf?

  A. immediate resolution immediacy
  B. immediate deployment immediacy
  C. on-demand deployment immediacy
  D. on-demand resolution immediacy
  D. on-demand resolution immediacy

  ---

  Explanation/Reference:

• Question 118:

  Refer to the exhibit.

  

  The Cisco ACI fabric is built with L2Out to the N9K1 and N9K2 switches. The switches run the RSTP protocol. The requirement is for the Cisco ACI fabric to detect loops from the N9K and for the fabric to be protected against loops. Which set of actions must be taken to meet the requirements?

  A. Configure the N9K STP link type as point-to-point link. Enable MCP on ACI globally.
  B. Configure the N9K STP link type as a shared link. Enable MCP on ACI globally.
  C. Configure the N9K STP link type as a shared link. Enable MCP on the ACI leaf interfaces.
  D. Configure the N9K STP link type as a point-to-point link. Enable MCP on the ACI leaf interfaces.
  B. Configure the N9K STP link type as a shared link. Enable MCP on ACI globally.

  ---

  Explanation/Reference:

• Question 119:

  Which Cisco ACI feature allows the encryption of communication over TEP addresses connecting sites via the intersite network in a Cisco Multi-Site deployment?

  A. TrustSec
  B. IPsec
  C. MACsec
  D. CloudSec
  D. CloudSec

• Question 120:

  An engineer discovered an outage on the mgmt0 port of Leaf113 and Leaf114. Both leaf switches were recently registered in the fabric and have health scores of 100. The engineer discovers there is no IP address assigned to the mgmt0 interface of the switches. Which action resolves the outage?

  A. Statically bind the mgmt0 interface of Leaf113 and Leaf114 to the oob-default EPG.
  B. Enable Leaf113 and Leaf114 mgmt0 under the leaf switch.
  C. Associate the oobbrc-default contract to Leaf113 and Leaf114.
  D. Add Leaf113 and Leaf114 to the node management address policy.
  D. Add Leaf113 and Leaf114 to the node management address policy.

  ---

  Explanation/Reference:

  Tenants->mgmt->Node Management Addresses->Static Node Management Addresses->Create Static Node Management Addresses. Out-Of-Band Management EPG is assigned here as well.