Cisco 300-620 Online Practice Questions and Exam Preparation

Cisco 300-620 Online Questions & Answers

• Question 351:

  Which action sets Layer 2 loop migration in an ACI Fabric with a Layer 2 Out configured?

  A. Enable MCP on the ACI fabric.
  B. Disable STP in the external network.
  C. Disable STP on the ACI fabric.
  D. Enable STP on the ACI fabric.
  A. Enable MCP on the ACI fabric.

• Question 352:

  A Cisco ACI fabric must detect all silent endpoints for the Layer 3 bridge domain. Which actions accomplish this goal?

  A. Enable Unicast Routing. Disable ARP Flooding.
  B. Disable Unicast Routing. Enable L2 Unknown Unicast Hardware Proxy.
  C. Enable Unicast Routing. Enable ARP Flooding.
  D. Disable Unicast Routing. Enable L2 Unknown Unicast Flood.
  D. Disable Unicast Routing. Enable L2 Unknown Unicast Flood.

  ---

  Explanation/Reference:

• Question 353:

  An engineer wants to record the login and configuration change events in a Cisco ACI environment. The requirements are to send the records to a syslog server, but to exclude fabric-related or tenant-related events.

  Which action accomplishes this goal?

  A. Configure the default monitoring policy in the access policies to include the audit logs.
  B. Configure the forwarding facility of the remote destination in the external data collectors to Iocal7.
  C. Configure the syslog source Min Severity to the information level in the access policy.
  D. Configure the local file destination severity to debugging level in the external data collectors.
  A. Configure the default monitoring policy in the access policies to include the audit logs.

• Question 354:

  An EPG is associated with a VMM domain. Which option must be set to allow the bridge domain and the VRF of the EPG to be instantiated on all leaf switches that discovered the ESXi host?

  A. Immediate Resolution immediacy
  B. On-Demand Resolution immediacy
  C. On-Demand Deployment immediacy
  D. Immediate Deployment immediacy
  C. On-Demand Deployment immediacy

• Question 355:

  A border leaf has learned external routes through an L3Out. The routes must also become available to other leaf switches in the fabric. Which additional fabric function is required?

  A. BGP route reflector on the spines
  B. per-VLAN MCP
  C. LLDP interface policy
  D. VMM domain association
  A. BGP route reflector on the spines

  ---

  Explanation

  The correct answer is A because spine-based BGP route reflectors propagate externally learned routes from border leaves to the rest of the fabric. Option B is incorrect because MCP is used for loop detection on Layer 2 domains. Option C is incorrect because LLDP is for neighbor discovery and VMM resolution, not route distribution. Option D is incorrect because VMM domain association is unrelated to L3 route propagation inside the fabric.

• Question 356:

  An engineer must restrict learning of endpoint IP addresses to only those that belong to the configured subnet of a bridge domain. Which bridge domain setting should be enabled?

  A. Unicast Routing
  B. Limit IP Learning to Subnet
  C. ARP Flooding
  D. Multi Destination Flooding
  B. Limit IP Learning to Subnet

  ---

  Explanation

  The correct answer is B because Limit IP Learning to Subnet prevents the fabric from learning endpoint IP addresses that do not match the configured bridge-domain subnet. Option A is incorrect because unicast routing enables Layer 3 behavior but does not enforce subnet-based IP learning limits. Option C is incorrect because ARP Flooding affects ARP propagation, not endpoint IP learning validation. Option D is incorrect because Multi Destination Flooding controls flooding behavior for BUM traffic, not endpoint subnet learning boundaries.

• Question 357:

  An engineer must add a group of 70 bare-metal ESXi servers to the Cisco ACI fabric, which is integrated with vCenter. These configuration steps are complete:

  1.

  The configured pool of ESXi hosts is configured with an Attachable Access Entity Profile (AAEP) called AEP_VMM.

  2.

  The new group uses the AAEP called AEP_BAREMETAL.

  Which action extends functional VMM integration to the new nodes?

  A. Update AAEP to AEP_VMM on all policy groups that are used toward bare-metal servers.
  B. Create a new AAEP container object for policy groups for AEP_VMM.
  C. Implement a separate VMM domain for the bare-metal servers by using AEP_VMM.
  D. Add the VMM domain under the AEP_BAREMETAL AAEP object.
  D. Add the VMM domain under the AEP_BAREMETAL AAEP object.

• Question 358:

  A bridge domain for an EPG called "Web Servers" must be created in the Cisco APIC. The configuration must meet these requirements:

  1.

  Only traffic to known MAC addresses must be allowed to reduce noise.

  2.

  The multicast traffic must be limited to the ports that are participating in multicast routing.

  3.

  The endpoints within the bridge domain must be kept in the endpoint table for 20 minutes without any updates.

  Which set of steps configures the bridge domain that satisfies the requirements?

  A. Switch L2 Unknown Unicast to Flood. Select the default Endpoint Retention Policy and set the Local Endpoint Aging to 20 minutes. Set Multicast Destination Flooding to Flood in Encapsulation.
  B. Set L2 Unknown Unicast to Hardware Proxy. Configure L3 Unknown Multicast Flooding to Optimized Flood. Create an Endpoint Retention Policy with a Local Endpoint Aging Interval of 1200 seconds.
  C. Multicast Destination Flooding should be set to Flood in BD. Set L3 Unknown Multicast Flooding to Flood. Select the default Endpoint Retention Policy with a Local Endpoint Aging Interval of 1200 seconds.
  D. Select the ARP Flooding checkbox. Create an Endpoint Retention Policy with a Remote Endpoint Aging Interval of 20 minutes. Set L3 Unknown Multicast Flooding to Optimized Flooding.
  B. Set L2 Unknown Unicast to Hardware Proxy. Configure L3 Unknown Multicast Flooding to Optimized Flood. Create an Endpoint Retention Policy with a Local Endpoint Aging Interval of 1200 seconds.

  ---

  Explanation/Reference:

• Question 359:

  An engineer must connect a new host to port 1/1 on Leaf 101. A Cisco ACI fabric has an MCP policy configured but experiences excessive Layer 2 loops. The engineer wants the Cisco ACI fabric to detect and prevent Layer 2 loops in the fabric. Which set of actions accomplishes these goals?

  A. Enable MCP locally. Associate the MCP policy with an interface policy group.
  B. Enable MCP locally. Associate the MCP policy with an interface profile.
  C. Enable MCP globally. Associate the MCP policy with an interface selector.
  D. Enable MCP globally. Associate the MCP policy with an interface policy group.
  D. Enable MCP globally. Associate the MCP policy with an interface policy group.

• Question 360:

  Refer to the exhibit.

  

  An engineer associated EPG-1 with a VMM domain called VMware/west. The VLAN pool west-VLP is configured in VMware/west, and the VMware/west is associated with the AEP called VMware/west-AEP. The corresponding port group failed to be automatically created in vCenter. Which action must the engineer take to resolve the missing port group?

  A. Configure VMware/west-AEP with the correct vCenter credentials.
  B. Include VLANs in the VMware/west-VLP.
  C. Add a static range to VMware/west-VLP.
  D. Associate VMware/west-AEP with a physical domain.
  B. Include VLANs in the VMware/west-VLP.

  ---

  Explanation/Reference: