Cisco 300-620 Online Practice Questions and Exam Preparation

Cisco 300-620 Online Questions & Answers

• Question 161:

  A recent set of changes by a Cisco ACI administrator corrupted the APIC cluster. The ACI engineer must restore the configuration of the previous day. The APIC nodes in the cluster can communicate but fail to connect with other networks. The administrator plans to overwrite the entire existing configuration with the backup configuration. Which set of actions accomplishes this task?

  A. Restore using the last configuration on the factory-reset APIC. Use an import policy set to Best-effort.
  B. Roll back the configuration using a local snapshot. Use an import policy set to Atomic Replace.
  C. Roll back the configuration using a local snapshot. Use an import policy set to Best-effort Merge.
  D. Restore the configuration imported from an FTP server. Use an import policy set to Atomic.
  B. Roll back the configuration using a local snapshot. Use an import policy set to Atomic Replace.

  ---

  Explanation/Reference:

  Atomic Replace - overwrites existing configuration with imported configuration data. Any objects in the existing configuration that do not exist in the imported configuration are deleted. Objects are deleted from the existing configuration that have children in the existing configuration but do not have children in the incoming imported configuration. For example, if an existing configuration has two tenants, solar and wind, but the imported backed up configuration was saved before the tenant wind was created, tenant soar is restored from the backup but tenant wind is deleted.

  Rollback is when a previous configuration snapshot is used to replace the current APIC configuration. This can be done on the granularity of a snapshot file. This means that a single tenant can be moved back to a previous configuration while the other tenants keep their current configuration state. This is often referred to as partial rollback. When all of the configuration files for a particular version are used to replace the current APIC configuration, this is referred to as a full rollback.

• Question 162:

  On which endpoint type is the host tracking feature performed in the Cisco ACI fabric?

  A. local endpoint
  B. bounce entry endpoint
  C. on-peer endpoint
  D. remote endpoint
  A. local endpoint

• Question 163:

  A customer requested the creation of a VLAN POOL for VMM integration. The pool must support the creation of 999 dynamic and 10 static VLANs. Which VLAN pool implementation meets the customer requirements?

  

  A. Option A
  B. Option B
  C. Option C
  D. Option D
  A. Option A

  ---

  Explanation/Reference:

• Question 164:

  A retail company must configure an RBAC policy for Cisco ACI that allows its users to perform these tasks: View the status of the switches in the fabric and replace any switch from the fabric, but not allow the user to access any information about services configured on any ports. Create or modify any VLAN pool but not allow the user to associate it to a physical or external domain or change any existing associations.

  Which set of privileges must be included in a custom RBAC role to accomplish these tasks?

  A. access-equipment fabric-connectivity
  B. access-protocol access-equipment
  C. fabric-equipment access-connectivity
  D. tenant-connectivity fabric-protocol
  C. fabric-equipment access-connectivity

• Question 165:

  A Cisco ACI fabric is connected to an external Cisco Catalyst switch. Which set of actions must be taken for Cisco ACI leaf and spine switches to be managed from the management port?

  A. Provide default/common contract by external management network under tenant mgmt. Consume default/common contract by out-of-band EPG.
  B. Provide default/mgmt contract by out-of-band EPG. Consume default/mgmt contract by external management network under tenant common.
  C. Provide default/mgmt contract by external management network under tenant common. Consume default/mgmt contract by out-of-band EPG.
  D. Provide default/common contract by out-of-band EPG. Consume default/common contract by external management network under tenant mgmt.
  D. Provide default/common contract by out-of-band EPG. Consume default/common contract by external management network under tenant mgmt.

  ---

  Explanation/Reference:

  1.

  All devices will need static OOB addresses (APIC controllers, leafs, and spines) that associate the IP address, NodeID, default GW, and management type (OOB, in this case).

  2.

  You'll need to configure a contract that will be consumed and provided to your OOB devices. The contract will allow the system to know what traffic is allowed. (In this use case, you will use the default/common contract to permit any traffic.)

  Step 1 – Providing the contract Tenant > Tenant mgmt > Node Management EPGs > Out-of-Band EPG default

  Under the “Provided Out-of-Band Contracts” in the policy window, provide the appropriate contract. (This could be a the default/common contract or a specific contract you have created and modified). Click Submit.

  Step 2 – Consuming the contract Tenant > Tenant mgmt > External Management Network Instance Profiles > YourInstanceProfile

  Consume the same contract that you provided in the previous step.

  Enter the subnets that are allowed to have access to the APIC. (0.0.0.0/0 will permit all).

• Question 166:

  Which protocol is used in a Multi-Pod topology to synchronize reachability information across pods?

  A. MP-BGP EVPN
  B. OSPF
  C. IS-IS
  D. COOP
  A. MP-BGP EVPN

  ---

  Explanation/Reference:

  Each Pod connects to the IPN through the spine nodes, the IPN can be as simple as a single Layer 3 device or can be built with a larger Layer 3 network infrastructure like a Service Provider network.

  Since each Pod is running a separate instance of the COOP protocol, this implies that information about discovered endpoints (MAC, IPv4/IPv6 addresses, and their location) is only exchanged using COOP as a control plane protocol between the leaf and spine nodes locally deployed in each Pod.

  ACI Multi-Pod functions as a single fabric, so, it is key to ensure that the databases implemented in the spine nodes across Pods have a consistent view of the endpoints connected to the fabric, this requires the deployment of an overlay control plane running between the spines and used to exchange endpoint reachability information. Multi-Protocol BGP has been chosen for this function. This is due to the flexibility and scalability properties of this protocol and its support of different address families (like EVPN and VPNv4) allowing the exchange of Layer 2 and Layer 3 information in a true multi-tenant fashion.

• Question 167:

  Refer to the exhibit.

  

  A Cisco APIC raises this fault when connectivity for EPG-3 is configured. Which action clears the fault?

  A. Associate BD-3 to VRF-1.
  B. Implement a domain for EPG-3.
  C. Configure a subnet on BD-3.
  D. Create BD-3 for EPG-3.
  D. Create BD-3 for EPG-3.

  ---

  Explanation/Reference:

• Question 168:

  A network engineer configures the Cisco ACI fabric to connect to vCenter with these requirements:

  1.

  Port groups must be automatically created on the distributed virtual switch.

  2.

  Port groups must use the VLAN allocation in the range between 20-30.

  3.

  The deployment must optimize the CAM space on the leaf switches.

  Which set of actions meets these criteria?

  A. Create a dynamic VLAN pool with the VLAN range of 20-30. Create a VMM domain and associate it with the VLAN pool. Create the EPG and associate the domain. Set the deployment immediacy to On Demand.
  B. Create a dynamic VLAN pool with the VLAN range of 20-30. Create a physical domain and associate it with the VLAN pool. Create the EPG and associate the domain. Set the deployment immediacy to On Demand.
  C. Create a static VLAN pool with the VLAN range of 20-30. Create a physical domain and associate it with the VLAN pool. Create the EPG and associate the domain. Set the deployment immediacy to Immediate.
  D. Create a static VLAN pool with the VLAN range of 20-30. Create a VMM domain and associate it with the VLAN pool. Create the EPG and associate the domain. Set the deployment immediacy to Immediate.
  A. Create a dynamic VLAN pool with the VLAN range of 20-30. Create a VMM domain and associate it with the VLAN pool. Create the EPG and associate the domain. Set the deployment immediacy to On Demand.

  ---

  Explanation/Reference:

  https://community.cisco.com/t5/data-center-and-cloud-knowledge-base/apic-policy-deployment-and-resolution-immediacy-for-avs-vmm/ta-p/3134812

• Question 169:

  Refer to the exhibit.

  

  An engineer configures a Layer 4 to Layer 7 device object. The device is a virtual firewall with a single network adapter and it must be deployed in routed mode. Which action completes the configuration of the device object?

  A. Enable Promiscuous Mode.
  B. Change Function Type to GoTo.
  C. Change context awareness to Multiple.
  D. Add an outside interface to the cluster interfaces.
  B. Change Function Type to GoTo.

  ---

  Explanation/Reference:

• Question 170:

  A customer must upgrade the Cisco ACI fabric to use a feature from the new code release. However, there is no direct path from the current release to the desired one. Based on the Cisco APIC Upgrade/Downgrade Support Matrix, the administrator must go through one intermediate release.

  Which set of steps must be taken to upgrade the fabric to the new release?

  A. 1. Upgrade the APICs to an interim release. 2. Upgrade the switches to an interim release. 3. Upgrade the APICs to the targeted release. 4. Upgrade the leaf and spine switches to the targeted release.
  B. 1. Upgrade the APICs to an interim release and then switches to an interim release. 2. When all switches are operational, upgrade leaf switches to the targeted release. 3. Upgrade the spine switches to the targeted release. 4. Upgrade the APICs to the targeted release.
  C. 1. Upgrade the APICs to an interim release. 2. Upgrade the leaf switches directly to the targeted release. 3. Upgrade the spine switches directly to the targeted release. 4. Upgrade the APICs to the targeted release.
  D. 1. Upgrade the APICs directly to the targeted release. 2. Upgrade the switches to an interim release. 3. When all switches are operational, upgrade the leaf switches to the targeted release. 4. Upgrade the spine switches to the targeted release.
  A. 1. Upgrade the APICs to an interim release. 2. Upgrade the switches to an interim release. 3. Upgrade the APICs to the targeted release. 4. Upgrade the leaf and spine switches to the targeted release.

  ---

  Explanation/Reference:

  Get files from Cisco onto a HTTP/SCP server and then uploaded to APIC Get APICs upgraded Wait for things to stabilise. Get Leaf/Spines upgraded Wait for things to stabilise.

  When upgrading or downgrading to a release that does not have a direct path from your current release, you must upgrade or downgrade all the APICs and switches to an intermediate supported release to which there is a direct path, then upgrade or downgrade from that release to your desired release. Sometimes, you must move through multiple intermediate releases before being able to get to your desired release, upgrading or downgrading both the APICs and switches to the same release each time.