Cisco CCNP 300-620 Questions & Answers

• Question 231:

  Which statement describes the initial APIC cluster discovery process?

  A. The APIC uses an internal IP address from a pool to communicate with the nodes.

  B. Every switch is assigned a unique AV by the APIC.

  C. The APIC discovers the IP address of the other APIC controllers by using Cisco Discovery Protocol.

  D. The ACI fabric is discovered starting with the spine switches.

  Correct Answer: A

  The following describes the APIC cluster discovery process:

  Each APIC in the Cisco ACI uses an internal private IP address to communicate with the ACI nodes and other APICs in the cluster. The APIC discovers the IP address of other APIC controllers in the cluster through the LLDP-based discovery process. Link: https://www.cisco.com/c/en/us/td/docs/switches/datacenter/aci/apic/sw/1-x/aci-fundamentals/b_ACI-Fundamentals/m_provisioning.html#concept_8E5AD8328B9348D5B8F0FF1FF7D2EC96

• Question 232:

  How is an EPG extended outside of the ACI fabric?

  A. Create an external bridged network that is assigned to a leaf port.

  B. Create an external routed network that is assigned to an EPG.

  C. Enable unicast routing within an EPG.

  D. Statically assign a VLAN ID to a leaf port in an EPG.

  Correct Answer: D

  Reference: https://www.dclessons.com/l2-external-network-with-aci

• Question 233:

  An engineer is implementing Cisco ACI at a large platform-as-a-service provider using APIC controllers, 9396PX leaf switches, and 9336PQ spine switches. The leaf switch ports are configured as IEEE 802.1p ports. Where does the traffic exit from the EPG in IEEE 802.1p mode in this configuration?

  A. from leaf ports tagged as VLAN 0

  B. from leaf ports untagged

  C. from leaf ports tagged as VLAN 4094

  D. from leaf ports tagged as VLAN 1

  Correct Answer: A

  Trunk (Tagged - classic IEEE 802.1q trunk)—Traffic for the EPG is sourced by the leaf switch with the specified VLAN tag. The leaf switch also expects to receive traffic tagged with that VLAN to be able to associate it with the EPG. Traffic received untagged is discarded.

  1.

  Access (Untagged)—Traffic for the EPG is sourced by the leaf as untagged. Traffic received by the leaf switch as untagged or with the tag specified during the static binding configuration is associated with the EPG.

  2.

  Access (802.1p)—If only one EPG is bound to that interface, the behavior is identical as in the untagged case. If other EPGs are associated with the same interface, traffic for the EPG is sourced with an IEEE 802.1q tag using VLAN 0 (IEEE 802.1p tag), or is sourced as untagged in the case of EX switches.

• Question 234:

  A RADIUS user resolves its role via the Cisco AV Pair. What object does the Cisco AV Pair resolve to?

  A. tenant

  B. security domain

  C. primary Cisco APIC

  D. managed object class

  Correct Answer: D

  managed object class is an object ; security domain is a tag

• Question 235:

  Which feature dynamically assigns or modifies the EPG association of virtual machines based on their attributes?

  A. vzAny contracts

  B. standard contracts

  C. application EPGs

  D. uSeg EPGs

  Correct Answer: D

  Microsegmented EPGs (uSeg) works based on attribute.

• Question 236:

  Which feature allows firewall ACLs to be configured automatically when new endpoints are attached to an EPG?

  A. ARP gleaning

  B. dynamic endpoint attach

  C. hardware proxy

  D. network-stitching

  Correct Answer: B

  Dynamic Endpoint Attach is a feature that allows Firewall ACLs or ADC load balanced servers to be dynamically configured when new endpoints are attached to an EPG. https://www.cisco.com/c/en/us/solutions/collateral/data-center-virtualization/application-centric-infrastructure/white-paper-c11-734298.html

• Question 237:

  A situation causes a fault to be raised on the APIC. The ACI administrator does not want that fault to be raised because it is not directly relevant to the environment. Which action should the administrator take to prevent the fault from appearing?

  A. Under System -> Faults, right-click on the fault and select Acknowledge Fault so that acknowledged faults will immediately disappear.

  B. Create a stats threshold policy with both rising and falling thresholds defined so that the critical severity threshold matches the squelched threshold.

  C. Under System -> Faults, right-click on the fault and select Ignore Fault to create a fault severity assignment policy that hides the fault.

  D. Create a new global health score policy that ignores specific faults as identified by their unique fault code.

  Correct Answer: C

• Question 238:

  Which components must be configured for the BGP Route Reflector policy to take effect?

  A. spine fabric interface overrides and profiles

  B. access policies and profiles

  C. pod policy groups and profiles

  D. leaf fabric interface overrides and profiles

  Correct Answer: C

  https://www.cisco.com/c/dam/en/us/solutions/collateral/data-center-virtualization/application-centric-infrastructure/aci-guide-configuring-fabric-bgp-route-reflectors.pdf

• Question 239:

  Which type of policy configures the suppression of faults that are generated from a port being down?

  A. fault lifecycle assignment

  B. event lifecycle assignment

  C. fault severity assignment

  D. event severity assignment

  Correct Answer: C

  Reference: https://www.cisco.com/c/en/us/td/docs/switches/datacenter/aci/apic/sw/all/faults/guide/b_APIC_Faults_Errors/b_IFC_Faults_Errors_chapter_01.html

• Question 240:

  Which type of profile needs to be created to deploy an access port policy group?

  A. attachable entity

  B. Pod

  C. module

  D. leaf interface

  Correct Answer: A

  Reference:

  https://www.cisco.com/c/en/us/td/docs/switches/datacenter/aci/apic/sw/1-x/Operating_ACI/guide/b_Cisco_Operating_ACI/ b_Cisco_Operating_ACI_chapter_0110.html