Cisco 300-620 Online Practice Questions and Exam Preparation

Cisco 300-620 Online Questions & Answers

• Question 321:

  Which two protocols support accessing backup files on a remote location from the APIC? (Choose two.)

  A. TFTP
  B. FTP
  C. SFTP
  D. SMB E. HTTPS
  B. FTP
  C. SFTP

• Question 322:

  Refer to the exhibit.

  

  An engineer configured subnets on the external EPG called L3OUT_CORE. The external endpoints in the 10.1.0.0/24 subnet can reach internal endpoints, but the external endpoints in the 172.16.1.0/24 subnet are unreachable. Which set of actions enables the connectivity?

  A. Delete both external EPG subnets. Create the 0.0.0.0/1 subnet.
  B. Delete the external EPG subnet 0.0.0.128/1. Create the 128.0.0.0/1 subnet.
  C. Delete both external EPG subnets. Create the 0.0.0.0/0 subnet.
  D. Delete the external EPG subnet 0.0.0.0/0. Create the 0.0.0.0/128 subnet.
  B. Delete the external EPG subnet 0.0.0.128/1. Create the 128.0.0.0/1 subnet.

  ---

  Explanation/Reference:

  The 0.0.0.0/0 matches every IP address, whereas 0.0.0.0/1 only matches half of them (0.0.0.0-127.255.255.255) and requires 128.0.0.0/1 as its pair to match the rest (128.0.0.0-255.255.255.255).

  https://serverfault.com/questions/1100250/what-is-the-difference-between-0-0-0-0-0-and-0-0-0-0-1

• Question 323:

  For which type of endpoint entry does a Cisco ACI leaf switch keep the original TEP source address instead of rewriting the outer source IP address to its TEP address?

  A. local entry
  B. remote entry
  C. bounce entry
  D. COOP entry
  C. bounce entry

  ---

  Explanation/Reference:

  There are several scenarios in which an endpoint moves between two Cisco ACI leaf switches, such as a failover event or a virtual machine migration in a hypervisor environment. Cisco ACI data-plane endpoint learning detects these events quickly and updates the Cisco ACI endpoint database on a new leaf. In addition to data-plane learning, Cisco ACI uses bounce entries to manage the old endpoint information on the original leaf.

  The difference between a bounce entry and a remote endpoint is in whether or not the leaf rewrites the outer source IP address of the packet. When a packet uses a normal remote endpoint, the Cisco ACI leaf uses its own TEP address as the outer source IP address, so the remote leaf learns this packet with its own TEP. When a packet uses a bounce entry, the Cisco ACI leaf doesn't rewrite the outer source IP address, so the remote data-plane learning will behave as if the packet came from the originating leaf rather than the intermediate “bounce” leaf.

• Question 324:

  Refer to the exhibit.

  

  The VMs called VM1 and VM2 are deployed on the ESXi Server in a Cisco ACI environment. VM1 has MAC address A and an IP address 192.168.1.1/24, and VM2 has MAC address B. VM1 has been shut down. Which set of actions must be taken to detect the movement of IP address 192.168.1.1/24 to MAC address B?

  A. Enable ARP flooding. Disable unicast routing. Enable GARP-based detection.
  B. Disable ARP flooding. Disable unicast routing. Disable GARP-based detection.
  C. Disable ARP flooding. Enable unicast routing. Disable GARP-based detection.
  D. Enable ARP flooding. Enable unicast routing. Enable GARP-based detection.
  D. Enable ARP flooding. Enable unicast routing. Enable GARP-based detection.

  ---

  Explanation/Reference:

  GARP is used to update IP to MAC relation on upstream network devices. It is most relevant in case of vmotions or VMs/servers moving from one host to another, and the MAC address changes, but the IP remains the same.

  In the context of ACI, the leaf switches can detect MAC and IP address movement between leaf switch ports, leaf switches, bridge domains, and EPGs, but it does not detect the movement of an IP address to a new MAC address if the new MAC address is from the same interface and same EPG as the old MAC address.

  When the GARP based detection option is enabled (configuration available under the BD), Cisco ACI will trigger an endpoint move based on GARP packets if the move occurs on the same interface and same EPG. If a GARP packet comes from the same interface and same EPG, then endpoint learning is triggered only when Unicast Routing, ARP Flooding, and “GARP based detection” are all enabled for the bridge domain.

• Question 325:

  Refer to the exhibit.

  

  A tenant is configured with a single L3Out and a single-homed link to the core router called Core-1. An engineer must add a second link to the L3Out that connects to the Core-2 router. Which action allows traffic from Core-2 to BL-1002 to have the same connectivity as the traffic from Core-1 to BL-1001?

  A. Add a second OSPF interface profile to the logical interface profile.
  B. Add a second interface to the external domain to the existing L3Out.
  C. Add a second path to the logical interface profile of the existing L3Out.
  D. Add a second subnet to the external EPG to the existing L3Out.
  C. Add a second path to the logical interface profile of the existing L3Out.

  ---

  Explanation/Reference:

• Question 326:

  Which type of MP-BGP address family is used to exchange MAC and IP address endpoint information between spines in two separate pods?

  A. IPv4
  B. L2VPN
  C. VNPv4
  D. NSAP
  B. L2VPN

• Question 327:

  What does the "L" flag indicate in this output?

  

  A. learned
  B. local
  C. local-aged
  D. learned-aged
  B. local

• Question 328:

  

  Refer to the exhibit. A legacy data center has a group of VLANs from 10 to 20 that must be migrated to the existing Cisco ACI fabric. The fabric must be configured such that the traffic remains undisrupted in the process, and the communication is allowed between migrated endpoints and host1. A contract called Legacy_ACI_CTR is provided by Telco_EPG, and the VLAN pool [10-100] called "Physical_VLAN_Po" is configured. Which two actions must be taken to meet these requirements? (Choose two.)

  A. MAP VLAN pool Physical_VLAN_Po under physical domain.
  B. Extend EPG Telco_EPG over the configured path binding.
  C. Consume contract Legacy_ACI_CTR by all Layer 2 external EPGs.
  D. Create 11 L2Outs using 11 different encapsulated VLANs.
  E. Configure a single bridge domain to be extended over a VPC path.
  A. MAP VLAN pool Physical_VLAN_Po under physical domain.
  C. Consume contract Legacy_ACI_CTR by all Layer 2 external EPGs.

• Question 329:

  

  Refer to the exhibit. A user tenant is configured with 10 application EPGs. An engineer must design the tenant to reject deploying a new application EPG. Which attribute set must be set to meet the requirement?

  A. exceedAction to fault maxNum to 11
  B. exceedAction to fail maxNum to 11
  C. exceedAction to fault maxNum to 10
  D. exceedAction to fail maxNum to 10
  D. exceedAction to fail maxNum to 10

• Question 330:

  Refer to the exhibit.

  

  The external subnet and internal EPG1 must communicate with each other, and the L3Out traffic must leak into the VRF named "VF1". Which configuration set accomplishes these goals?

  A. Export Route Control Subnet Import Route Control Subnet Aggregate Shared Routes
  B. External Subnets for External EPG Shared Route Control Subnet Shared Security Import Subnet
  C. External Subnets for External EPG Import Route Control Subnet Shared Route Control Subnet
  D. Export Route Control Subnet Shared Security Import Subnet Aggregate Shared Routes
  B. External Subnets for External EPG Shared Route Control Subnet Shared Security Import Subnet

  ---

  Explanation/Reference: