Cisco 300-620 Online Practice Questions and Exam Preparation

Cisco 300-620 Online Questions & Answers

• Question 41:

  An engineer is creating a configuration import policy that must terminate if the imported configuration is incompatible with the existing system. Which import mode achieves this result?

  A. merge
  B. atomic
  C. best effort
  D. replace
  B. atomic

  ---

  Explanation/Reference:

  Reference: https://www.cisco.com/c/en/us/td/docs/switches/datacenter/aci/apic/sw/4-x/aci-fundamentals/Cisco-ACI-Fundamentals-401/Cisco-ACI-Fundamentals401_chapter_01011.html

• Question 42:

  A Cisco ACI fabric contains a tenant called Prod. User_1 must have written access to tenant Prod and full access to the fabric access policy. Which set of actions must be taken to meet these requirements?

  A. Associate User_1 to tenant Prod. Associate the security domain to the distinguished name of the fabric access policy. Create RBAC for the distinguished name of security domain.
  B. Associate User_1 to the distinguished name of the fabric access policy. Associate the security domain to RBAC. Create RBAC for the distinguished name of User_1.
  C. Associate User_1 to the fabric access policy. Associate the security domain to the fabric access policy. Create RBAC for the distinguished name of tenant Prod.
  D. Associate User_1 to the security domain. Associate the security domain to tenant Prod. Create RBAC for the distinguished name of fabric access policy.
  D. Associate User_1 to the security domain. Associate the security domain to tenant Prod. Create RBAC for the distinguished name of fabric access policy.

  ---

  Explanation/Reference:

  https://www.cisco.com/c/en/us/td/docs/switches/datacenter/aci/apic/sw/5-x/security/cisco-apic-security-configuration-guide-50x/m-restricted-access-security-domains.html

• Question 43:

  An engineer associates EPG-A with a VMM domain and sets the Deployment and Resolution preferences to Immediate. The host that will generate endpoints for EPG-A is attached to Leaf-101 and Leaf-102 using etht1/1. However, no configuration for EPG-A appears to have been pushed to the leaf switches. Which action must be taken for the configuration to be pushed to Leaf-101 and Leaf-102?

  A. Enable CDP or LLDP on the host.
  B. Enable LACP on the leaf switch ports.
  C. Disable and enable eth1/1 on both leaf switches.
  D. Configure both ports for trunking.
  A. Enable CDP or LLDP on the host.

  ---

  Explanation/Reference:

  Resolution immediacy:

  Immediate: The VLAN will be deployed on leaf interfaces only when hypervisors are detected through LLDP or CDP.

  https://learnduty.com/cisco-aci/cisco-aci-resolution-and-deployment-immediacy-explained/

• Question 44:

  Which Cisco ACI setting corresponds to the VMware MAC pinning?

  A. route based on MAC hash
  B. route based on IP hash
  C. route based on physical NIC load
  D. route based on originating virtual port
  D. route based on originating virtual port

  ---

  Explanation/Reference:

• Question 45:

  Refer to the exhibit.

  

  Which two components should be configured as route reflectors in the ACI fabric? (Choose two.)

  A. Spine1
  B. apic1
  C. Spine2
  D. Leaf1
  E. Leaf2
  F. apic2
  A. Spine1
  C. Spine2

  ---

  Explanation/Reference:

• Question 46:

  What happens to the traffic flow when the Cisco ACI fabric has a stale endpoint entry for the destination endpoint?

  A. The leaf switch does not learn the source endpoint through data plane learning.
  B. The leaf switch drops the traffic that is destined to the endpoint.
  C. The leaf switch floods the traffic to the endpoint throughout the fabric.
  D. The leaf switch sends the traffic to the wrong destination leaf.
  D. The leaf switch sends the traffic to the wrong destination leaf.

  ---

  Explanation/Reference:

  Because of this stale remote endpoint, any traffic from LEAF1 toward IP2 will fail, because LEAF1 sends packets to the wrong leaf.

  This stale remote endpoint on LEAF1 needs to be manually cleared to resume communication. The command syntax to manually clear a particular remote IP endpoint is shown here:

  LEAF1# clear system internal epm endpoint key vrf ip

  Reference:

  https://www.ciscolive.com/c/dam/r/ciscolive/us/docs/2019/pdf/BRKACI-2641.pdf

• Question 47:

  What must be configured to redistribute externally learned OSPF routes within the ACI fabric?

  A. Route Control Profile
  B. BGP Route Reflector
  C. BGP Inter-leak Route Map
  D. PIM Sparse Mode
  B. BGP Route Reflector

  ---

  Explanation/Reference:

  Once the border leaf learns the external routes, it can then redistribute the external routes of a given VRF instance to an MP-BGP address family (VPNv4 or VPNv6). MP-BGP maintains a separate BGP routing table for each VRF instance. Within MP-BGP, the border leaf switch advertises routes to a spine switch, which is a BGP route reflector. The routes are then propagated to all the leaf switches where the VRF instances are instantiated.

  Reference: https://www.cisco.com/c/en/us/td/docs/switches/datacenter/aci/apic/sw/1-x/ACI_Best_Practices/b_ACI_Best_Practices/ b_ACI_Best_Practices_chapter_010010.html https://www.cisco.com/c/en/us/solutions/collateral/data-center-virtualization/application-centric-infrastructure/guide-c07-743150.html

• Question 48:

  A Cisco ACI environment consists of multiple silent hosts that are often relocated between leaf switches. When the host is relocated, the bridge domain takes more than a few seconds to relearn the host's new location. The requirement is to minimize the relocation impact and make the ACI fabric relearn the new location of the host faster. Which action must be taken to meet these requirements?

  A. Set Unicast Routing to Enabled.
  B. Configure ARP Flooding to Enabled.
  C. Set L2 Unknown Unicast to Hardware Proxy.
  D. Configure IP Data-Plane Learning to No.
  C. Set L2 Unknown Unicast to Hardware Proxy.

  ---

  Explanation/Reference:

  Hardware Proxy By default, Layer 2 unknown unicast traffic is sent to the spine proxy. This behaviour is controlled by the hardware proxy option associated with a bridge domain: if the destination is not known, send the packet to the spine proxy; if the spine proxy also does not know the address, discard the packet (default mode).

  The advantage of the hardware proxy mode is that no flooding occurs in the fabric. The potential disadvantage is that the fabric has to learn all the endpoint addresses.

  With Cisco ACI, however, this is not a concern for virtual and physical servers that are part of the fabric: the database is built for scalability to millions of endpoints. However, if the fabric had to learn all the IP addresses coming from the Internet, it would clearly not scale.

• Question 49:

  Refer to the exhibit.

  

  Cisco ACI fabric is connected to a Cisco Catalyst 3850 Series Switch using EBGP. Server 2 is unable to communicate with Server 1. Leaf-2 fails to learn the external subnet 10.2.2.0/24 and other external subnets from other L3Outs. Which configuration ensures that the networks from Leaf-2 are learned by the external network?

  A. Configure 10.2.2.0/24 under the external EPG of the L3Out.
  B. Implement a contract between the Server 2 EPG and the L3Out.
  C. Implement the bridge domain to advertise the bridge domain subnet.
  D. Configure Spine-1 as the MP-BGP route reflector.
  D. Configure Spine-1 as the MP-BGP route reflector.

  ---

  Explanation/Reference:

• Question 50:

  An engineer must monitor a Cisco ACI fabric with SNMP. The “permit any contract” attribute is not configured in the fabric.

  Which action must be taken to receive SNMP traps from Cisco APIC?

  A. Consume the inband contract from the out-of-band EPG.
  B. Configure the OOB contract under the common tenant.
  C. Add the UDP filter port 162 to the existing OOB contract.
  D. Provide a standard contract under the user tenant.
  C. Add the UDP filter port 162 to the existing OOB contract.

  ---

  Explanation/Reference:

  1.

  To allow SNMP communications, you must configure an "out-of-band (OOB) contract" in the "mgmt" tenant to allow SNMP traffic. SNMP traffic typically uses UDP port 161 for SNMP requests.

  2.

  Configure the APIC OOB IP addresses in the "mgmt" tenant. Although the OOB addresses are configured during APIC setup, the addresses must be explicitly configured in the "mgmt" tenant before the OOB contract will take effect. About SNMP ACI provides SNMPv1, v2, and v3 support, including Management Information Bases (MIBs) and notifications (traps). The SNMP standard allows any third-party applications that support the different MIBs to manage and monitor the ACI fabric.

  https://www.cisco.com/c/dam/en/us/solutions/collateral/data-center-virtualization/application-centric-infrastructure/aci-guide-configuring-snmp.pdf