Cisco 300-620 Online Practice Questions and Exam Preparation

Cisco 300-620 Online Questions & Answers

• Question 241:

  Which protocol must be used to securely export ACI configuration backup to a remote location?

  A. NFS
  B. FTPS
  C. SFTP
  D. SMB
  C. SFTP

• Question 242:

  Refer to the exhibit.

  

  An engineer configures the Cisco ACI fabric for VMM integration with ESXi servers that are to be connected to the ACI leaves. The server team requires the network switches to initiate the LACP negotiation as opposed to the servers. The LAG group consists of two 10 Gigabit Ethernet links. The server learn also wants to evenly distribute traffic across all available links. Which two enhanced LAG policies meet these requirements? (Choose two.)

  A. LACP Mode: LACP Standby
  B. LB Mode: Destination IP Address and TCP/UDP Port
  C. LB Mode: Source and Destination MAC Address
  D. LB Mode: Source IP Address and TCP/UDP Port
  E. LACP Mode: LACP Active
  C. LB Mode: Source and Destination MAC Address
  E. LACP Mode: LACP Active

  ---

  Explanation/Reference:

  Reference: https://www.cisco.com/c/en/us/td/docs/switches/datacenter/aci/aci_virtual_edge/configuration/2-x/Cisco-ACI-Virtual-Edge-Configuration-Guide-202/Cisco-ACIVirtual-Edge-Configuration-Guide-202_chapter_0100.html

• Question 243:

  A Cisco APIC is configured to authenticate users by using RADIUS by default. The network administrator must ensure that the users can access the APIC GUI with a local account if the RADIUS server is unreachable. Which action achieves this goal?

  A. Enable Fallback Check for Default Authentication.
  B. Configure the fallback login domain to reference Local Realm.
  C. Set RADIUS Realm to connect with Console Authentication.
  D. Create an additional login domain to associate with local accounts.
  B. Configure the fallback login domain to reference Local Realm.

  ---

  Explanation/Reference:

  To ensure that users can access the APIC GUI with a local account if the RADIUS server is unreachable, you must configure the fallback login domain to reference the Local Realm. This setting allows the system to revert to using local authentication methods when external RADIUS authentication fails due to server unavailability. This approach maintains system access continuity without compromising security.

• Question 244:

  An engineer is in the process of discovering a new Cisco ACI fabric consisting of two spines and four leaf switches. The discovery of leaf 1 has just been completed. Which two nodes are expected to be discovered next? (Choose two.)

  A. leaf 2
  B. leaf 4
  C. spine 1
  D. leaf 3
  E. spine 2
  C. spine 1
  E. spine 2

  ---

  Explanation/Reference:

  The APIC is a central point of automated provisioning and management for all the switches that are part of the ACI fabric. A single data center might include multiple ACI fabrics; each data center might have its own APIC cluster and Cisco Nexus 9000 Series switches that are part of the fabric. To ensure that a switch is managed only by a single APIC cluster, each switch must be registered with that specific APIC cluster that manages the fabric.

  The APIC discovers new switches that are directly connected to any switch it currently manages. Each APIC instance in the cluster first discovers only the leaf switch to which it is directly connected. After the leaf switch is registered with the APIC, the APIC discovers all spine switches that are directly connected to the leaf switch. As each spine switch is registered, that APIC discovers all the leaf switches that are connected to that spine switch. This cascaded discovery allows the APIC to discover the entire fabric topology in a few simple steps.

• Question 245:

  A company is running a multi-pod environment across two data centers and wants to expand to co-locations. Which solution extends the application centric infrastructure (ACI) policy with minimum

  investment?

  A. dedicated equipment for a new site in a multi-site deployment
  B. dedicated equipment to extend the existing multi-pod
  C. dedicated equipment for a dedicated ACI fabric
  D. new leaf switches to be used in a remote-leaf architecture
  D. new leaf switches to be used in a remote-leaf architecture

• Question 246:

  An engineer must implement management policy and data plane separation in the Cisco ACI fabric. Which ACI object must be created in Cisco APIC to accomplish this goal?

  A. Application profile
  B. Tenant
  C. Contract
  D. Bridge domain
  B. Tenant

• Question 247:

  What is a characteristic of a Cisco ACI Multi-Pod?

  A. It manages the configuration of different Cisco ACI pods using a single common Cisco APIC cluster.
  B. It eliminates the need to deploy multicast in the Layer 3 network that interconnects the pods.
  C. A VPNv4 address family is used to exchange endpoint information between spines.
  D. Spines use BGP peering with IPN to send out the TEP pool prefix for the local pod.
  A. It manages the configuration of different Cisco ACI pods using a single common Cisco APIC cluster.

  ---

  Explanation/Reference:

• Question 248:

  An engineer configures a Multi-Pod system with the default getaway residing outside of the ACI fabric for a bridge domain. Which setting should be configured to support this requirement?

  A. disable Limit IP Learning to Subnet
  B. disable IP Data-plane Learning
  C. disable Unicast Routing
  D. disable Advertise Host Routes
  C. disable Unicast Routing

  ---

  Explanation/Reference:

  https://www.cisco.com/c/en/us/td/docs/switches/datacenter/aci/apic/sw/migration_guides/migrating_existing_networks_to_aci.html#_Toc27467766

• Question 249:

  Which protocol is used in the Cisco ACI fabric for automatic discovery?

  A. LLDP
  B. IS-IS
  C. CFS
  D. COOP
  A. LLDP

• Question 250:

  A network team must extend an EPG outside the ACI fabric toward a connected Layer 2 network. Which action accomplishes this requirement most directly?

  A. create a route control profile
  B. statically bind a leaf port and VLAN to the EPG
  C. configure a BGP route reflector
  D. enable shared route control subnet
  B. statically bind a leaf port and VLAN to the EPG

  ---

  Explanation

  The correct answer is B because statically binding a leaf port and VLAN to an EPG extends that EPG to an external Layer 2 segment while enforcing the EPG policy. Option A is incorrect because a route control profile applies to Layer 3 route policy. Option C is incorrect because a BGP route reflector is for control-plane route distribution. Option D is incorrect because shared route control subnet is an L3Out subnet scope, not an EPG extension mechanism.