Cisco 300-620 Online Practice Questions and Exam Preparation

Cisco 300-620 Online Questions & Answers

• Question 61:

  An ACI administrator notices a change in the behavior of the fabric. Which action must be taken to determine if a human intervention introduced the change?

  A. Inspect event records in the APIC UI to see all actions performed by users.
  B. Inspect /var/log/audit_messages on the APIC to see a record of all user actions.
  C. Inspect audit logs in the APIC UI to see all user events.
  D. Inspect the output of show command history in the APIC CLI.
  C. Inspect audit logs in the APIC UI to see all user events.

  ---

  Explanation/Reference:

  https://www.cisco.com/c/en/us/td/docs/switches/datacenter/aci/apic/sw/all/faults/guide/b_APIC_Faults_Errors/b_IFC_Faults_Errors_chapter_010.html

• Question 62:

  A network engineer must integrate VMware vCenter cluster with Cisco ACI. The requirement is for the management traffic of the hypervisors and VM controllers to use the virtual switch associated with the Cisco Application Policy. The EPG called "Vmware-MGMT" with VLAN 300 has been created for this purpose. Which set of steps must be taken to complete the configuration?

  A. Add VLAN 300 with static allocation to the VLAN POOL that is used for VMM integration. Attach the VMM domain to the target EPG with resolution preprovision, mode static, untagged access VLAN, and Port-Encap 300.
  B. Associate the target EPG with the VMM domain with default settings. Enable Infrastructure VLAN on AAEP used toward VMware hypervisors.
  C. Enable Infrastructure VLAN on AAEP used toward VMware hypervisors. Associate the target EPG with the VMM domain with default settings.
  D. Enable Infrastructure VLAN on AAEP used toward VMware hypervisors. Create a static binding in the target EPG toward VMware hypervisors with VLAN 300, untagged access VLAN, and Untagged 802.1P mode.
  A. Add VLAN 300 with static allocation to the VLAN POOL that is used for VMM integration. Attach the VMM domain to the target EPG with resolution preprovision, mode static, untagged access VLAN, and Port-Encap 300.

  ---

  Explanation/Reference:

• Question 63:

  The engineer notices frequent MAC and IP address moves between different leaf switch ports. Which action prevents this problem from occurring?

  A. Disable enforce subnet check.
  B. Enable endpoint loop protection.
  C. Enable rogue endpoint control.
  D. Disable IP bridge domain enforcement.
  B. Enable endpoint loop protection.

  ---

  Explanation/Reference:

  While Ep Loop Protection has similar intentions (that is, finding a loop and disabling learning) to Rogue EP Control, it disables learning on the bridge domain and/or disables the port (error-disable), which could affect healthy endpoints connected to the same interface or the same bridge domain. Thus, use of Rogue EP Control instead of Ep Loop Protection is recommended after APIC Release 3.2. Please be aware that the detection mechanism of Ep Loop Protection is strictly for a loop, because it triggers the move only when the move is between the same two interfaces. Ep Loop Protection cannot detect movements for an endpoint that moves around randomly.

  https://www.cisco.com/c/en/us/solutions/collateral/data-center-virtualization/application-centric-infrastructure/white-paper-c11-739989.html#EpLoopProtection

• Question 64:

  An engineer must prevent Layer 2 unknown unicast traffic from being flooded across the fabric whenever possible. Which bridge domain setting should be selected?

  A. ARP Flooding enabled
  B. L2 Unknown Unicast set to Hardware Proxy
  C. Unicast Routing disabled
  D. Multi Destination Flooding set to Flood in BD
  B. L2 Unknown Unicast set to Hardware Proxy

  ---

  Explanation

  The correct answer is B because setting L2 Unknown Unicast to Hardware Proxy reduces unknown unicast flooding by relying on spine proxy behavior. Option A is incorrect because ARP Flooding affects ARP handling, not unknown unicast forwarding. Option C is incorrect because disabling unicast routing does not provide hardware-proxy behavior. Option D is incorrect because multi-destination flooding controls BUM traffic scope, not the specific treatment of unknown unicast traffic.

• Question 65:

  An engineer must configure SNMP inside a Cisco ACI fabric. The engineer has created an SNMP Policy, called SNMP-policy and an SNMP Monitoring Group called SNMP-group1 that contains five trap receivers. Which configuration set completes the configuration?

  A. Permit OOB management traffic using UDP port 161. Associate client group policy with the OOB management EPG.
  B. Edit oobbrc to permit traffic using UDP port 16. Associate the client group policy to SNMP-group1.
  C. Create an OOB management contract. Include the SNMP server in the OOB management EPG.
  D. Allow all OOB management traffic. Configure three trap receivers on SNMP-group1.
  A. Permit OOB management traffic using UDP port 161. Associate client group policy with the OOB management EPG.

  ---

  Explanation/Reference:

  1) Ports 161 and 162 2) Fabric Policies > Policies > Pod > SNMP > default > Client Group Policies > Create SNMP Client Group Profile > define Name and select Associated Management EPG

• Question 66:

  What are two descriptions of ACI Multi-Site? (Choose two.)

  A. Routers in the Inter-Site network must run OSPF, DHCP relay, and MP-BGP
  B. ACI Multi-Site is a solution that allows one APIC cluster to manage multiple ACI sites
  C. The Multi-Site orchestrator must be directly attached to one ACI leaf
  D. ACI Multi-Site is a solution that supports a dedicated APIC cluster per site
  E. The Inter-Site network routers should run OSPF to establish peering with the spines
  D. ACI Multi-Site is a solution that supports a dedicated APIC cluster per site
  E. The Inter-Site network routers should run OSPF to establish peering with the spines

• Question 67:

  Refer to the exhibit.

  

  Which two configuration steps are completed before this output is generated? (Choose two.)

  A. MCP policy for the interface policy group for Port-channel 12 is enabled.
  B. MCP Instance Policy default in the global access policies is enabled.
  C. Error Disabled Recovery Policy for Loop Indication by MCP is set to True.
  D. BPDU Guard is enabled for the interface policy group for Port-channel 12.
  E. Spanning Tree Policy Region STP_4CAF232E48FF20 is added to the spanning-tree policy of the switch.
  A. MCP policy for the interface policy group for Port-channel 12 is enabled.
  B. MCP Instance Policy default in the global access policies is enabled.

  ---

  Explanation/Reference:

• Question 68:

  Which Cisco APIC configuration prevents a remote network that is not configured on the bridge domain from being learned by the fabric?

  A. enable Limit IP Learning to Subnet
  B. enable Unicast Routing
  C. enable IP Data-plane Learning
  D. enable ARP Flooding to BD
  A. enable Limit IP Learning to Subnet

  ---

  Explanation/Reference:

  Reference: https://www.cisco.com/c/en/us/solutions/collateral/data-center-virtualization/application-centric-infrastructure/white-paper-c11-739989.html

• Question 69:

  Which function does spine switch perform in the Cisco ACI fabric?

  A. It connects to classic Ethernet devices in the multitier topology.
  B. It decapsulates VXLAN packets received from leaf switches.
  C. It stores all the entries of endpoints-to-VTEP mapping.
  D. It bridges tenant packets for applying network policies.
  C. It stores all the entries of endpoints-to-VTEP mapping.

• Question 70:

  A Cisco ACI fabric with many dual-homed servers connected through VPC pairs must be upgraded with minimal traffic impact. Which upgrade preparation step is recommended for the leaf switches?

  A. place all leaf switches in one maintenance group
  B. divide leaf switches into two or more maintenance groups
  C. upgrade all APICs after the leafs
  D. disable VPC before the upgrade
  B. divide leaf switches into two or more maintenance groups

  ---

  Explanation

  The correct answer is B because dividing leaf switches into two or more maintenance groups minimizes traffic impact in environments with VPC-connected endpoints. Option A is incorrect because upgrading all leafs together increases risk and disruption. Option C is incorrect because leaf grouping, not APIC sequencing alone, is the key preparation step described. Option D is incorrect because disabling VPC is not the recommended approach for minimizing impact during the upgrade.