Cisco 300-620 Online Practice Questions and Exam Preparation

Cisco 300-620 Online Questions & Answers

• Question 151:

  A Cisco ACI fabric is integrated with a VMware environment. The engineer must back up the current configuration of the fabric and restore the vCenter password when the configuration is imported. Which action accomplishes this goal?

  A. Create a Configuration Import Policy.
  B. Select SCP protocol for the remote location.
  C. Enable the Global AES Encryption setting.
  D. Set the Authentication type to Use Password.
  C. Enable the Global AES Encryption setting.

• Question 152:

  Which two protocols are used for fabric discovery in ACI? (Choose two.)

  A. LLDP
  B. OSPF
  C. CDP
  D. DHCP
  E. ISIS
  A. LLDP
  D. DHCP

  ---

  Explanation/Reference:

  The APIC startup topology auto discovery, automated configuration, and infrastructure addressing uses these industry-standard protocols: Intermediate System-to-Intermediate System (IS-IS), Link Layer Discovery Protocol (LLDP), and Dynamic Host Configuration Protocol (DHCP).

  The ACI fabric is brought up in a cascading manner, starting with the leaf nodes that are directly attached to the APIC. LLDP and control-plane IS-IS convergence occurs in parallel to this boot process. The ACI fabric uses LLDP- and DHCP-based fabric discovery to automatically discover the fabric switch nodes, assign the infrastructure VXLAN tunnel endpoint (VTEP) addresses, and install the firmware on the switches. Prior to this automated process, a minimal bootstrap configuration must be performed on the Cisco APIC controller. After the APIC controllers are connected and their IP addresses assigned, the APIC GUI can be accessed by entering the address of any APIC controller into a web browser. The APIC GUI runs HTML5 and eliminates the need for Java to be installed locally.

  Reference: https://www.dclessons.com/aci-fabric-discovery

• Question 153:

  An engineer sets the VMM resolution immediacy for an EPG to pre-provision. What is the effect on the leaf switches?

  A. policies are downloaded only after LLDP adjacency forms
  B. policies are downloaded only after a VM is powered on
  C. policies are downloaded before the VM controller attachment is detected
  D. policies are downloaded only after a contract is consumed
  C. policies are downloaded before the VM controller attachment is detected

  ---

  Explanation

  The correct answer is C because pre-provision resolution immediacy downloads the policy to the leaf switch before the VM controller attachment is detected. Option A is incorrect because that behavior aligns with immediate or on-demand modes that rely on attachment resolution. Option B is incorrect because VM power state is not the trigger for pre-provision mode. Option D is incorrect because contract consumption does not define pre-provision policy download timing.

• Question 154:

  A Cisco ACI endpoint group must have its gateway address migrated out of the ACI fabric. An engineer configures EPG-TEST with a static port binding and configures the encap VLAN with the required VLAN. Which configuration set must be used on the bridge domain to meet these requirements?

  A. L2 Unknown Unicast: Hardware Proxy Unicast Routing: Disabled ARP Flooding: Enabled
  B. L2 Unknown Unicast: Hardware Proxy Unicast Routing: Disabled ARP Flooding: Disabled
  C. L2 Unknown Unicast: Flood Unicast Routing: Disabled ARP Flooding: Enabled
  D. L2 Unknown Unicast: Flood Unicast Routing: Enabled ARP Flooding: Enabled
  C. L2 Unknown Unicast: Flood Unicast Routing: Disabled ARP Flooding: Enabled

  ---

  Explanation/Reference:

• Question 155:

  A network engineer must configure a new SNMP configuration and syslog servers. The requirement is for all faults and events related to endpoint groups, bridge domains, and VRFs to be sent to it. Which action must be taken to meet the requirements?

  A. Enable access monitoring policies on the required endpoint groups, bridge domains, and VRFs.
  B. Utilize common tenant monitoring policies in the Cisco APIC.
  C. Configure fabric monitoring policies and attach to the spine switch in the fabric.
  D. Implement fabric-wide monitoring policies on all nodes.
  D. Implement fabric-wide monitoring policies on all nodes.

  ---

  Explanation/Reference:

  Below are the high-level steps required to successfully configuring your ACI Fabric to send messages to an external SYSLOG server.

  -Ensure that your Out-of-Band -or- Inband Contracts permit UDP Port 514. -Create a SYSLOG Destination -Create ACI Fabric Monitoring Sources -Select and Configure the appropriate Fabric-level Fabric SYSLOG events (Fabric > Fabric) -Fabric > Fabric > Policies > Monitoring > Common Policy -Fabric > Fabric > Policies > Monitoring > default -(optional) Fabric > Fabric > Policies > Monitoring > Common Policy > Syslog Message Policies > Policy for system syslog messages -Select and Configure the appropriate Access-level SYSLOG events (Fabric > Access) -Select and Configure the appropriate Tenant-level SYSLOG events (Tenants > common > Policies > Monitoring > default

• Question 156:

  Which two components are essential parts of a Cisco ACI Virtual Machine Manager (VMM) domain policy configuration? (Choose two.)

  A. Layer 3 outside interface association
  B. EPG static port binding
  C. VMM domain profile
  D. EPG association
  E. IP address pool association
  C. VMM domain profile
  D. EPG association

  ---

  Explanation/Reference:

  Reference: https://www.cisco.com/c/en/us/td/docs/switches/datacenter/aci/apic/sw/1-x/aci-fundamentals/b_ACI-Fundamentals/b_ACI-Fundamentals_chapter_01011.html

• Question 157:

  An engineer configures SNMP for an ACI fabric and created an SNMP Monitoring Destination Group called snmp_dgroup1. Snmp_dgroup1 is configured with the server hostname and community password. An SNMP policy called snmp_podpolicy1 is configured to enable SNMP and add an SNMP Client Group Profile called snmp_clgroup1. Snmp_podpolicy1 is associated the default pod profile via a pod policy group named pod1. Which configuration set must the engineer enable to complete the SNMP configuration?

  A. Configure the OOB management contract to permit UDP 162. Associate snmp_dgroup1 with the OOB management EPG.
  B. Configure an SNMP management contract to permit all traffic. Associate snmp_podpolicy1 with an SNMP pod profile.
  C. Configure an SNMP management contract to permit UDP 162. Associate the SNMP Source to snmp_clgroup1.
  D. Configure the OOB management contract to permit all traffic. Associate snmp_clgroup1 with the SNMP management EPG.
  C. Configure an SNMP management contract to permit UDP 162. Associate the SNMP Source to snmp_clgroup1.

• Question 158:

  Refer to the exhibit.

  

  The default route is not present in the routing tables of the Cisco ACI leaf switches. All static and direct routes are currently being redistributed and advertised. Which action must be taken to advertise a default route on the eBGP L3Out?

  A. Enable a BGP peer prefix policy set to Always.
  B. Configure a static default route on the ACI node profiles with next-hop null.
  C. Create a Default Route Leak Policy on the L3Out.
  D. Implement an export route map matching 0.0.0.0/0.
  C. Create a Default Route Leak Policy on the L3Out.

  ---

  Explanation/Reference:

  There are two methods to advertise a default route (0.0.0.0/0) from BGP L3Out to the outside.

  1.

  Transit Routing

  2.

  Default Route Leak Policy

• Question 159:

  A network engineer must backup the PRODUCTION tenant. The configuration backup should be stored on the APIC using a markup language and contain all secure information. Which export policy must be used to meet these requirement?

  

  A. Option A
  B. Option B
  C. Option C
  D. Option D
  D. Option D

  ---

  Explanation/Reference:

  Snapshots created for a single tenant do not include configurations from anywhere else in the fabric

• Question 160:

  A Cisco ACI leaf switch receives an ARP request packet from a host that is attached to a bridge domain with unicast routing enabled. Which information does the leaf switch learn?

  A. the local endpoint source IP address
  B. the MAC and IP addresses of the local endpoint
  C. the remote endpoint IP address
  D. the source IP and destination IP addresses
  B. the MAC and IP addresses of the local endpoint