Cisco 300-620 Online Practice Questions and Exam Preparation

Cisco 300-620 Online Questions & Answers

• Question 71:

  Refer to the exhibit.

  

  A customer must back up the current Cisco ACI configuration securely to the remote location using encryption and authentication. The backup job must run once per day. The customer's security policy mandates that any sensitive information including passwords must not be exported from the device. Which set of steps meets these requirements?

  A. Export destination using FTP protocol. Use XML format.
  B. Export destination using FTP protocol. Disable Global AES Encryption.
  C. Export destination using SCP protocol. Disable Global AES Encryption.
  D. Export destination using SCP protocol. Use XML format.
  C. Export destination using SCP protocol. Disable Global AES Encryption.

  ---

  Explanation/Reference:

  Absolutely C based on the requirements. SCP provides authentication and encryption. And per Cisco documentation "To export hashed secure properties (passwords and certificates), AES encryption must be configured and enabled. While encryption is not enabled, any secure fields will not be exported. In this case re-importing the configuration will require all secure properties to be re-configured."

• Question 72:

  In the context of VMM, which protocol between ACI leaf and compute hosts ensures that the policies are pushed to the leaf switches for immediate and on demand resolution immediacy?

  A. VXLAN
  B. LLDP
  C. IS-IS
  D. STP
  B. LLDP

  ---

  Explanation/Reference:

  Immediate—Specifies that EPG policies (including contracts and filters) are downloaded to the associated leaf switch software upon ESXi host attachment to a DVS. LLDP or OpFlex permissions are used to resolve the VM controller to leaf

  node attachments.

  The policy will be downloaded to leaf when you add host to the VMM switch. CDP/LLDP neighborship from host to leaf is required.

  On Demand—Specifies that a policy (for example, VLAN, VXLAN bindings, contracts, or filters) is pushed to the leaf node only when an ESXi host is attached to a DVS and a VM is placed in the port group (EPG).

  The policy will be downloaded to leaf when host is added to VMM switch and virtual machine needs to be placed into port group (EPG). CDP/LLDP neighborship from host to leaf is required.

  With both immediate and on demand, if host and leaf lose LLDP/CDP neighborship the policies are removed.

  https://www.cisco.com/c/en/us/td/docs/switches/datacenter/aci/apic/sw/1-x/aci-fundamentals/b_ACI-Fundamentals/b_ACI-Fundamentals_chapter_01011.html

• Question 73:

  An application team tells the Cisco ACI network administrator that it wants to monitor the statistics of the unicast and BUM traffic that are seen in a certain EPG. Which statement describes the collection statistics?

  A. All EPGs in the Cisco ACI tenant object must be enabled for statistics to be collected.
  B. Cisco ACI does not capture statistics at the EPG level. Only statistics that pass through ACI contracts can be monitored.
  C. EPG statistics can be collected only for VMM domains. If a physical domain exists, statistics are not collected.
  D. The collection of statistics is enabled on the EPG level by enabling the statistics for unicast and BUM traffic.
  D. The collection of statistics is enabled on the EPG level by enabling the statistics for unicast and BUM traffic.

  ---

  Explanation/Reference:

• Question 74:

  A Cisco ACI fabric has detected EP1 with IP address 192.168.1.1 to MAC M1 on interface Eth1/1. The fabric is designed so that when EP1 is down, a new EP2 receives the same IP address with a different MAC M2 on the same interface Eth1/1. Which two features must be enabled to meet this requirement? (Choose two.)

  A. ARP Flooding
  B. L3 Unknown Multicast Optimized Flood
  C. L2 Unknown Unicast Hardware Proxy
  D. GARP Based Detection
  E. EPG Flood in Encapsulation
  A. ARP Flooding
  D. GARP Based Detection

• Question 75:

  Refer to the exhibit.

  

  An engineer is configuring a production Multi-Site solution to provide connectivity from EPGs from a specific site to networks reachable through a remote site L3OUT. All required schema and template objects are already defined. Which additional configuration must be implemented in the Multi-Site Orchestrator to support the cross-site connectivity?

  A. Configure a routable TEP pool for SITE1.
  B. Enable CloudSec for intersite traffic encryption.
  C. Add a new stretched external EPG to the existing L3OUT.
  D. Add a new stretched external EPG to the existing L3OUT.
  C. Add a new stretched external EPG to the existing L3OUT.

  ---

  Explanation/Reference:

• Question 76:

  A Solutions Architect is asked to design two data centers based on Cisco ACI technology that can extend L2/L3, VXLAN, and network policy across locations. ACI Multi-Pod has been selected. Which two requirements must be considered in this design? (Choose two.)

  A. ACI underlay protocols, i.e. COOP, IS-IS and MP-BGP, spans across pods. Create QoS policies to make sure those protocols have higher priority.
  B. A single APIC Cluster is required in a Multi-Pod design. It is important to place the APIC Controllers in different locations in order to maximize redundancy and reliability.
  C. ACI Multi-Pod requires an IP Network supporting PIM-Bidir.
  D. ACI Multi-Pod does not support Firewall Clusters across Pods. Firewall Clusters should always be local.
  E. Multi-Pod requires multiple APIC Controller Clusters, one per pod. Make sure those clusters can communicate to each other through a highly available connection.
  B. A single APIC Cluster is required in a Multi-Pod design. It is important to place the APIC Controllers in different locations in order to maximize redundancy and reliability.
  C. ACI Multi-Pod requires an IP Network supporting PIM-Bidir.

  ---

  Explanation/Reference:

  Multipod is with only a single APIC cluster - multisite requires multiple clusters.

  "The entire network hence runs as a single large fabric from an operational perspective; however, ACI Multi-Pod introduces specific enhancements to isolate as much as possible the failure domains between Pods, contributing to increase the

  overall design resiliency. This is achieved by running separate instances of fabric control planes (IS-IS, COOP, MP-BGP) across Pods."

  https://www.cisco.com/c/en/us/solutions/collateral/data-center-virtualization/application-centric-infrastructure/white-paper-c11-737855.html

• Question 77:

  Refer to the exhibit.

  

  Which action should be taken to ensure authentication if the RADIUS servers are unavailable?

  A. Adjust the priority of server 10.1.1.1 to 1.
  B. Assign the user to the default role.
  C. Set the default login realm to LDAP.
  D. Set the fallback login to local.
  D. Set the fallback login to local.

  ---

  Explanation/Reference:

• Question 78:

  Refer to the exhibit.

  

  An engineer is deploying a Cisco ACI fabric with an L2Out to external switches. The Cisco ACI fabric has just been deployed and follows the default forwarding behavior. Which two actions accomplish a loop free topology? (Choose two.)

  A. Add ports Eth1/1 and Eth1/2 to the LACP port channel.
  B. Enable MCP on the ports between the leafs and spine switches.
  C. Disconnect the link between Leaf3 and Leaf4.
  D. Implement LLDP on ports Eth1/1 and Eth1/2 on Leaf2.
  E. Configure BPDU guard on Catalyst switch ports.
  A. Add ports Eth1/1 and Eth1/2 to the LACP port channel.
  C. Disconnect the link between Leaf3 and Leaf4.

  ---

  Explanation/Reference:

• Question 79:

  An engineer must integrate a Cisco ACI fabric with VMware and discover an ESXi host using LLDP. Two EPGs have been created and associated with the VMM domain. The engineer must configure the ACI such that contracts are pushed to the ACI leaf switches when the VM is mapped to EPG and the contracts are removed when LLDP is disabled.

  Which configuration must be selected to meet these requirements?

  A. Deployment immediacy: On-Demand
  B. Resolution immediacy: On-Demand
  C. Deployment immediacy: Immediate
  D. Resolution immediacy: Immediate
  B. Resolution immediacy: On-Demand

  ---

  Explanation/Reference:

• Question 80:

  Which Cisco ACI import mode reverts the entire shard to its original state when a single fault appears?

  A. Replace
  B. Atomic
  C. Best-effort
  D. Merge
  B. Atomic