Cisco 300-620 Online Practice Questions and Exam Preparation

Cisco 300-620 Online Questions & Answers

• Question 381:

  Which statement regarding ACI Multi-Pod and TEP pool is true?

  A. The IP addresses used in the IPN network can overlap TEP pool of the APIC.
  B. A different TEP pool must be assigned to each Pod.
  C. The Pod1 TEP pool must be split and a portion of the TEP pool allocated to each Pod.
  D. The same TEP pool is used in all Pods.
  B. A different TEP pool must be assigned to each Pod.

• Question 382:

  What is the advantage of implementing an active-active firewall cluster that is stretched across separate pods when anycast services are configured?

  A. A cluster is capable to be deployed in transparent mode across pods.
  B. A different MAC/IP configuration combination is configurable for the firewall in each pod.
  C. Local traffic in a pod is load-balanced between the clustered firewalls.
  D. The local pod anycast node is preferred by the local spines.
  D. The local pod anycast node is preferred by the local spines.

  ---

  Explanation/Reference:

  The specific MAC/IP combination is only learned on the leaf nodes where the firewall nodes (anycast service) are directly attached; those leaf nodes then send a COOP update to the spines. From the spine nodes, the path to local attached anycast entry is always preferred. In case of a failure of all local service cluster nodes, the backup path to another pod is chosen. https://www.cisco.com/c/en/us/solutions/collateral/data-center-virtualization/application-centric-infrastructure/white-paper-c11-739571.html

• Question 383:

  When creating a subnet within a bridge domain, which configuration option is used to specify the network visibility of the subnet?

  A. limit IP learning to subnet
  B. scope
  C. gateway IP
  D. subnet control
  B. scope

  ---

  Explanation/Reference:

  https://www.cisco.com/c/en/us/td/docs/switches/datacenter/aci/apic/sw/1-x/Operating_ACI/guide/b_Cisco_Operating_ACI/b_Cisco_Operating_ACI_chapter_0111.html#concept_247562B33DE34FC5ADBB5D516DA085EB

  Subnets--The network visibility of the subnet. The subnet is a portion of a network sharing a particular subnet address. The scope can be:

  Shared Between VRFs--Defines subnets under an endpoint group, with the Shared option configured, to route leak to other tenants within the Fabric.

  Advertise Externally--Defines subnets under a bridge domain, with the Public option configured, to share with Layer 3 outbound.

  Private to VRF--Defines subnets under a bridge domain, with the Private option configured, to only be used in that tenant (will not be leaked). The default is Private.

• Question 384:

  Refer to the exhibit.

  

  The Cisco ACI fabric has an egress L3Out from Leaf-101 and Leaf-102 to CORE-1. VLAN 102 is used to form the OSPF adjacency. The workloads must be migrated into EPG-101, and the static port binding is configured to Leaf-103 e1/1 with encap VLAN 101. An engineer completes the port binding and receives an MCP fault. Which action clears the fault?

  A. Use VLAN 101 for OSPF adjacency on the egress L3Out.
  B. Use VLAN 102 as the encap VLAN on the EPG-101 static port binding.
  C. Add VLAN 102 to the VLAN pool that is used by the static port binding.
  D. Prune VLAN 101 from the VLAN pool that is used by the egress L3Out.
  D. Prune VLAN 101 from the VLAN pool that is used by the egress L3Out.

  ---

  Explanation/Reference:

• Question 385:

  What is the purpose of the Overlay Multicast TEP in a Cisco ACI Multi-Site deployment?

  A. to source and receive unicast VXLAN data plane traffic
  B. to establish MP-BGP EVPN adjacencies with the spine nodes in remote sites
  C. to encapsulate multicast traffic in a common multicast group
  D. to perform head-end replication for BUM traffic
  D. to perform head-end replication for BUM traffic

  ---

  Explanation/Reference:

  Overlay Multicast TEP (O-MTEP): This common anycast address is shared by all the spine nodes in the same site and is used to perform head-end replication for BUM traffic. BUM traffic is sourced from the O-UTEP address defined on the local spine nodes and destined for the O-MTEP of remote sites to which the given bridge domain is being stretched.

  https://www.cisco.com/c/en/us/solutions/collateral/data-center-virtualization/application-centric-infrastructure/white-paper-c11-739609.html

• Question 386:

  Refer to the exhibit.

  

  An engineer configures communication between the EPGs in different tenants. Which action should be taken to create the subnet?

  A. Change Scope to Shared between VRFs.
  B. Leave Scope set to Private to VRF.
  C. Add the L3Out for Route Profile value.
  D. Change Scope to Advertised Externally.
  A. Change Scope to Shared between VRFs.

  ---

  Explanation/Reference:

  Private to VRF = This subnet will only be routed internal to the ACI fabric. This is to say it won't be advertised via any L3outs.

  Advertise Externally = The opposite of Private. This means you want this subnet to participate in any associated L3outs.

  Shared Between VRFs = This is used when you want to do route leaking between different VRFs

  Please note that Shared Services term which is widely used in most of the documents is nothing but about Inter VRF/Tenant Communication.

  Define the subnets at BD level for both the EPGs in both VRF and mark them as Shared between VRFs.

• Question 387:

  An engineer is implementing an out-of-band (OOB) management access for the Cisco ACI fabric. The secure access must meet these requirements:

  1.

  Only GUI and secure shell must be allowed to access the management interfaces of the ACIs.

  2.

  The only IP ranges that must be permitted to connect the fabric will be 10.10.10.0/24 and 192.168.15.0/24.

  Which configuration set meets these requirements?

  A. Implement HTTPS and SSH protocol filters in the OOB contract. Add the required subnets to the external network instance profile.
  B. Set up static IPs on the management interfaces from the required IP range. Add the required subnets to the external network instance profile.
  C. Create an out-of-band EPG in the external management entity. Associate the management profile with the OOB contract.
  D. Create an out-of-band EPG in the common tenant. Associate the external network instance profile with the OOB contract.
  A. Implement HTTPS and SSH protocol filters in the OOB contract. Add the required subnets to the external network instance profile.

  ---

  Explanation/Reference:

  Tenants > mgmt > Contracts > Out Of Band Contracts, apply in provided direction to Node Management EPG Tenants > mgmt > External Management Network Instance Profiles -> apply the contract in consumed direction and add subnets Make sure HTTPS and SSH are enabled in Fabric > Fabric Policies > Policies > Pod > Management Access

• Question 388:

  A network engineer is implementing a Layer 3 Out in the Cisco ACI fabric. The data center core switches must connect to a pair of leaf switches and exchange routes via a routing protocol. In addition, the implementation must meet these criteria:

  1.

  The external switch interface must use 802.1Q tagging.

  2.

  Access to the Internet for the ACI fabric must be the L3Out.

  3.

  The L3Out must use a routing protocol that has rapid convergence time and low CPU usage.

  Which configuration set meets these requirements?

  A. Configure the OSPF Protocol policy with an area of 0. Set up the Routed External Network object and Node Profile and select OSPF. Create the Switch profile and select VPC with the appropriate interfaces. Create the default network and associate it with the Routed Outside object.
  B. Configure the BGP Protocol policy with the appropriate Autonomous System number. Configure an Interface policy and an External Bridged Domain. Create an External Bridged Network and use the configured VLAN pool. Build the Leaf profile and select the Routed sub-interface with the appropriate VLAN.
  C. Implement the IS-IS Protocol policy with the selected Autonomous System number. Create the Routed Outside object and Node Profile and select IS-IS. Configure the Interface profile and select the Routed Interface with the appropriate interfaces. Create the External Network object.
  D. Implement the EIGRP Protocol policy with the selected Autonomous System number. Create Routed Outside object and Node Profile and select EIGRP as the routing protocol. Build the Interface profile and select SVI and the appropriate VPC. Configure the External Network object with a network of 0.0.0.0/0.
  A. Configure the OSPF Protocol policy with an area of 0. Set up the Routed External Network object and Node Profile and select OSPF. Create the Switch profile and select VPC with the appropriate interfaces. Create the default network and associate it with the Routed Outside object.

  ---

  Explanation/Reference: