Cisco 300-620 Online Practice Questions and Exam Preparation

Cisco 300-620 Online Questions & Answers

• Question 221:

  A network engineer must allow secure access to the Cisco ACI out-of-band (OOB) management only from external subnets 10.0.0.0/24 and 192.168.20.0/25. Which configuration set accomplishes this goal?

  A. Create a L3Out in the MGMT tenant in OOB VRF. Set External Management Network Instance Profile as a consumer of the OOB contract. Create an External EPG with two subnet entries with the external subnets.
  B. Create a PBR service graph in the MGMT tenant. Create a management Profile with the required OOB EPG. Redirect all traffic going into ACI management to the external firewall. Create two subnet entries under the OOB Bridge domain with the required subnets.
  C. Create an EPG and BD in the MGMT tenant in OOB VRF. Set OOB VRF to provide the contract. Set a new EPG to consume the OOB contract.
  D. Create an OOB contract that allows the required ports. Provide the contract from the OOB EPG. Consume the contract by the OOB External Management Network Instance Profile. Create two subnet entries in the External Management Network Profile with the required subnets.
  D. Create an OOB contract that allows the required ports. Provide the contract from the OOB EPG. Consume the contract by the OOB External Management Network Instance Profile. Create two subnet entries in the External Management Network Profile with the required subnets.

  ---

  Explanation/Reference:

  Step 1 – Providing the contract Tenant > Tenant mgmt > Node Management EPGs > Out-of-Band EPG default Under the “Provided Out-of-Band Contracts” in the policy window, provide the appropriate contract. (This could be a the default/common contract or a specific contract you have created and modified). Click Submit. Tenant > Tenant mgmt > Node Management EPGs > Out-of-Band EPG default Step 2 – Consuming the contract Tenant > Tenant mgmt > External Management Network Instance Profiles > YourInstanceProfile Consume the same contract that you provided in the previous step. Enter the subnets that are allowed to have access to the APIC. (0.0.0.0/0 will permit all).

  https://www.cisco.com/c/dam/en/us/solutions/collateral/data-center-virtualization/application-centric-infrastructure/aci-guide-configuring-out-of-band-access-for-your-fabric.pdf

• Question 222:

  The unicast routing feature is enabled on the bridge domain. Which two conditions enable the Cisco ACI leaf to learn a source IP as a local endpoint? (Choose two.)

  A. Through Ethernet traffic received in a bridge domain.
  B. IP traffic routed through an SVI.
  C. Through VXLAN traffic received on the uplink.
  D. IP traffic routed through a Layer 3 Out.
  E. Through ARP received on an SVI.
  B. IP traffic routed through an SVI.
  E. Through ARP received on an SVI.

• Question 223:

  The company ESXi infrastructure is hosted on the Cisco UCS-B Blade Servers. The company decided to take advantage of ACI VMM integration to enable consistent enforcement of policies across virtual and physical workloads. The requirement is to prevent the packet loss between the distributed virtual switch and the ACI fabric. Which setting must be implemented on a vSwitch policy to accomplish this goal?

  A. Static Channel
  B. MAC Pinning
  C. LACP
  D. LLDP
  B. MAC Pinning

• Question 224:

  A company must connect three Cisco ACI data centers by using Cisco ACI Multi-Site. An engineer must configure the Inter-Site Network (ISN) between the existing sites. Which two configuration steps must be taken to implement the ISN? (Choose two.)

  A. Configure OSPF on subinterfaces on routers that are directly connected with spine nodes.
  B. Configure ISN site extension on Cisco routers in the network.
  C. Configure OSPF on all ISN routers.
  D. Configure BIDIR-PIM on all ISN routers.
  E. Configure encapsulation VLAN-4 between the routers and spine nodes.
  A. Configure OSPF on subinterfaces on routers that are directly connected with spine nodes.
  E. Configure encapsulation VLAN-4 between the routers and spine nodes.

  ---

  Explanation/Reference:

• Question 225:

  Refer to the exhibit.

  

  A company decided to decrease its routing footprint and remove RT-2 and RT-3 devices from its data center. Because of that, the exit point must be created from all the tenants by using the common tenant. Which two configuration tasks must be completed to meet these requirements? (Choose two.)

  A. Move subnets from all the bridge domains to the EPG level and mark them with flag Shared between VRFs.
  B. Update the L3Out ExtEPG subnet in the common tenant with flag Shared Route Control Subnet and Aggregate Shared Routes.
  C. Mark all subnets with flag Shared between VRFs and attach contract Ctr-3 as a provider to all the EPGs.
  D. Change contract Ctr-3 scope to Global, consume it by all EPGs, and flag all subnets with flag Shared between VRFs.
  E. Export contract Ctr-2 into the tenant TN-1 and attach it as a consumer to all the EPGs in the tenant TN-1.
  B. Update the L3Out ExtEPG subnet in the common tenant with flag Shared Route Control Subnet and Aggregate Shared Routes.
  D. Change contract Ctr-3 scope to Global, consume it by all EPGs, and flag all subnets with flag Shared between VRFs.

  ---

  Explanation/Reference:

  Configure your VRF, Bridge Domains (BDs) and subnets under each user Tenant. Associate Bridge Domains (BDs) with the VRF in User tenants.

  1.

  Ensure the BDs are marked as both “advertised externally and shared.”

  2.

  Configure the Application Profile(s) under each user Tenant.

  3.

  Under each user Tenant, configure EPG and associate EPG with the BD configured in step 1

  4.

  Consume the contract from Tenant Common https://www.cisco.com/c/dam/en/us/solutions/collateral/data-center-virtualization/application-centric-infrastructure/aci-configuring.pdf

• Question 226:

  An engineer implements a configuration backup on the Cisco APIC. The backup job must meet these requirements:

  1.

  The backup must transfer the encrypted data to the remote server.

  2.

  The transfer must be resumed if the connection is interrupted

  Which configuration set meets these requirements?

  A. Select protocol TFTP in Create Remote Location. Choose JSON format in Configuration Export Policy.
  B. Select protocol FTP in Create Remote Location. Choose XML format in Configuration Export Policy.
  C. Select protocol SFTP in Create Remote Location. Choose XML format in Configuration Export Policy.
  D. Select protocol HTTP in Create Remote Location. Choose JSON format in Configuration Export Policy.
  C. Select protocol SFTP in Create Remote Location. Choose XML format in Configuration Export Policy.

  ---

  Explanation/Reference:

• Question 227:

  Refer to the exhibit.

  

  A network engineer must ensure that any loops outside the Cisco ACI fabric are detected and mitigated.

  Assuming the policy will be enabled later, which two settings must be used to configure the MCP on all leaf ports in the fabric when the policy is applied? (Choose two.)

  A. Set MCP PDU Per VLAN to Disable.
  B. Adjust Initial Delay (sec) to 360 seconds.
  C. Select Enable MCP PDU Per VLAN.
  D. Disable Loop Protection Action.
  E. Enable Loop Protection Action.
  C. Select Enable MCP PDU Per VLAN.
  E. Enable Loop Protection Action.

• Question 228:

  An engineer must configure a one-time backup for a Cisco APIC cluster.

  Which two actions accomplish this goal? (Choose two.)

  A. Create a snapshot of the configuration.
  B. Configure Global AES Encryption.
  C. Configure the TFTP server.
  D. Create a remote location.
  E. Create a configuration export policy.
  D. Create a remote location.
  E. Create a configuration export policy.

• Question 229:

  A customer is deploying a new application across two ACI pods that is sensitive to latency and jitter. The application sets the DSCP values of packets to AF31 and CS6, respectively. Which configuration changes must be made on the APIC to support the new application and prevent packets from being delayed or dropped between pods?

  A. disable DSCP mapping on the IPN devices
  B. disable DSCP translation policy
  C. align the ACI QoS levels and IPN QoS policies
  D. align the custom QoS policy on the EPG site in the customer tenant
  C. align the ACI QoS levels and IPN QoS policies

  ---

  Explanation/Reference:

  In order to preserve the proper QoS Level of the packet and avoid high priority packets from being delayed or dropped, you can use a DSCP translation policy for traffic that goes between multiple PODs connected by an IPN.

  Also Note For traffic passing through the IPN, do not map any DSCP values to CS6. Which leaves only C as viable answer. As you have to align QoS. as per ref:https://www.cisco.com/c/en/us/td/docs/switches/datacenter/aci/apic/sw/kb/Cisco-APIC-and-QoS.html#id_34903

• Question 230:

  Refer to the exhibit.

  

  An engineer is implementing a BPDU filter on external switch interfaces that face the Cisco ACI fabric to prevent excessive TCNs from impacting the fabric. Which configuration must be applied on Cisco ACI to avoid a Layer 2 loop?

  A. Configure MCP globally.
  B. Implement BPDU Guard.
  C. Apply an MSTP instance on Cisco ACI.
  D. Enable STP on downlinks.
  A. Configure MCP globally.

  ---

  Explanation/Reference:

  https://www.linkedin.com/pulse/cisco-aci-network-behaviour-stptcn-how-identify-loop-ankit-kulshresta