Cisco 300-620 Online Practice Questions and Exam Preparation

Cisco 300-620 Online Questions & Answers

• Question 331:

  A network administrator is configuring a Cisco ACI fabric to automatically take a snapshot of all the configurations once per week. The snapshot must be saved on a server that is located in the data center. Which configuration meets these requirements?

  A. Scope: Fabric Action: Create recurring snapshots Location: Create Remote Location
  B. Scope: Tenant Action: Create recurring snapshots Location: APIC
  C. Scope: Tenant Action: Take a snapshot Location: Create Remote Location
  D. Scope: Fabric Action: Take a snapshot Location: APIC
  A. Scope: Fabric Action: Create recurring snapshots Location: Create Remote Location

  ---

  Explanation/Reference:

  All config snapshot = "Fabric" option, tenant as the name suggests is for a specific tenant

  Action should be set to "Recurring snapshots" aka not once, but continuous

  Location is "remote location" as it is stored in a server within the DC, instead of the APIC itself. Otherwise, the location would be set to "APIC" aka the UCS box hosting the APIC OS.

• Question 332:

  What are two requirements for the IPN network when implementing a Multi-Pod ACI fabric? (Choose two.)

  A. EIGRP routing
  B. PIM ASM multicast routing
  C. BGP routing
  D. VLAN ID 4
  E. OSPF routing
  D. VLAN ID 4
  E. OSPF routing

  ---

  Explanation/Reference:

  Uses dot1.q with Vlan4 and OSPF for routing: interface Ethernet1/1.4 description 40G Link to POD1-SPINE-101(1/1) mtu 9150 encapsulation dot1q 4 vrf member fabric-mpod-vrf ip address 192.168.1.253/30 ip ospf network point-to-point

• Question 333:

  Refer to the exhibit.

  

  A client reports that the ACI domain connectivity to the fiber channel storage is experiencing a B2B credit oversubscription. The environment has a SYSLOG server for state collection messages. Which value should be chosen to clear the critical fault?

  A. 300
  B. 410
  C. 350
  D. 510
  B. 410

  ---

  Explanation/Reference:

• Question 334:

  Which setting prevents the learning of Endpoint IP addresses whose subnet does not match the bridge domain subnet?

  A. "Limit IP learning to network" setting within the bridge domain.
  B. "Limit IP learning to subnet" setting within the EPG.
  C. "Limit IP learning to network" setting within the EPG.
  D. "Limit IP learning to subnet" setting within the bridge domain.
  D. "Limit IP learning to subnet" setting within the bridge domain.

• Question 335:

  An engineer needs to deploy a leaf access port policy group in ACI Fabric to support the following requirements:

  1.

  Control the amount of application data flowing into the system

  2.

  Allow the newly connected device to auto-negotiate link speed with the leaf switch

  Which two ACI policies must be configured to achieve these requirements? (Choose two.)

  A. link level policy
  B. L2 interface policy
  C. slow drain policy
  D. ingress data plane policing policy
  E. ingress control plane policing policy
  A. link level policy
  D. ingress data plane policing policy

  ---

  Explanation/Reference:

  Reference: https://www.cisco.com/c/en/us/td/docs/switches/datacenter/aci/apic/sw/kb/b_Cisco_ACI_and_Forward_Error_Correction.html https://www.cisco.com/c/en/us/td/docs/switches/datacenter/aci/apic/sw/4-x/security/Cisco-APIC-Security-Configuration-Guide-401/ b_Cisco_APIC_Security_Guide_chapter_01110.html#:~:text=Use%20data%20plane%20policing%20 (DPP,dropping%20of%20packets%20occurs%20immediately

• Question 336:

  An engineer must advertise a selection of external networks learned from a BGP neighbor into the ACI fabric. Which L3Out subnet configuration option creates an inbound route map for route filtering?

  A. External Subnets for the External EPG
  B. Shared Route Control Subnet
  C. Import Route Control Subnet
  D. Shared Security Import Subnet
  C. Import Route Control Subnet

• Question 337:

  An engineer configures port-12 on Leaf-101 and Leaf-102 to connect to a new server. SVR-12. The new server will belong to EPG-12 and use encap VLAN-1212. The engineer configured port-12 as a VPC member port and statically bound the VPC member port to EPG-12. Which additional step must the engineer take to configure connectivity?

  A. Create a VPC Explicit Protection Group for EPG-12 and VLAN-1212.
  B. Configure an LACP Interface Policy and apply it to EPG-12.
  C. Select VLAN-1212 on the EPG-12 Interface Policy Group.
  D. Associate a domain with EPG-12 that is associated with VLAN-1212.
  D. Associate a domain with EPG-12 that is associated with VLAN-1212.

  ---

  Explanation/Reference:

• Question 338:

  Refer to the exhibit.

  

  A company merges three of its departments: CORP, HR, and SERVICES, Currently, the connectivity between departments is achieved by using VRF route leaking. The requirement is to redesign the Cisco ACI networking architecture to communicate between EPGs and BDs from any tenant without configuring contracts or VRF route leaking. Which configuration meets these criteria?

  A. Configure an unenforced VRF in the user tenant and map all required EPGs to it.
  B. Implement an enforced VRF in the common tenant and map all required BDs to it.
  C. Configure an enforced VRF in the user tenant and map all required EPGs to it.
  D. Implement an unenforced VRF in the common tenant and map all required BDs to it.
  D. Implement an unenforced VRF in the common tenant and map all required BDs to it.

  ---

  Explanation/Reference:

  https://www.cisco.com/c/en/us/td/docs/switches/datacenter/aci/apic/sw/4-x/basic-configuration/Cisco-APIC-Basic-Configuration-Guide-42x/Cisco-APIC-Basic-Configuration-Guide-42x_chapter_0110.htm

  ensure a scalable solution when multiple EPGs in a VRF require unrestricted communication VRF policy control enforcement preference to Unenforced EPGs that require unrestricted communication between each other as preferred group members

• Question 339:

  A Cisco ACI fabric is configured with these objects: login domain named Domain_1 TACACS+ provider group named Tacacs_ProvGro TACACS+ server IP 10.43.145.1

  Which action set allows users to log in to Cisco APIC using TACACS user credentials without setting the domain to Domain_1 for each login?

  A. Add IP 10.43.145.1 under Tacacs_ProvGro. Associate Tacacs_ProvGro to Domain_1. Set realm to TACACS+ under default AAA authentication.
  B. Add IP 10.43.145.1 under default AAA authentication. Associate Tacacs_ProvGro to Domain_1. Set realm to local under Tacacs_ProvGro.
  C. Add IP 10.43.145.1 under Tacacs_ProvGro. Associate Tacacs_ProvGro to default AAA authentication. Set realm to TACACS+ under default AAA authentication.
  D. Add IP 10.43.145.1 under Domain_1. Associate Tacacs_ProvGro to Domain_1. Set realm to local under default AAA authentication.
  C. Add IP 10.43.145.1 under Tacacs_ProvGro. Associate Tacacs_ProvGro to default AAA authentication. Set realm to TACACS+ under default AAA authentication.

• Question 340:

  A network engineer configured a Cisco ACI fabric as follows:

  1.

  An EPG called EPG-A is created and associated with a VMM domain called North.

  2.

  The EPG-A is associated with BD-A and is in an application profile called Apps-A.

  3.

  The BD-A is associated with VRF-1 in the Prod tenant.

  Which port group must be selected to place VMs in EPG-A?

  A. Prod|Apps-A|EPG-A
  B. Prod|Apps-A|North|EPG-A
  C. Prod|Business_Apps|BD-A|EPG-A
  D. Prod|VRF-1|Apps-A|EPG-A
  B. Prod|Apps-A|North|EPG-A

  ---

  Explanation/Reference: