Cisco 300-620 Online Practice Questions and Exam Preparation

Cisco 300-620 Online Questions & Answers

• Question 81:

  A packet is routed between two endpoints on different Cisco ACI leaf switches. Which VXLAN VNID is applied to the packet?

  A. FD
  B. EPG
  C. VRF
  D. BD
  C. VRF

  ---

  Explanation/Reference:

  For each tenant VRF in the fabric, ACI assigns a single L3 VNID.

• Question 82:

  An engineer is extending EPG connectivity to an external network. The external network houses the Layer 3 gateway and other end hosts. Which ACI bridge domain configuration should be used?

  A. Forwarding: Custom L2 Unknown Unicast: Hardware Proxy L3 Unknown Multicast Flooding: Flood Multi Destination Flooding: Flood in BD ARP Flooding: Enabled
  B. Forwarding: Custom L2 Unknown Unicast: Flood L3 Unknown Multicast Flooding: Flood Multi Destination Flooding: Flood in BD ARP Flooding: Enabled
  C. Forwarding: Custom L2 Unknown Unicast: Hardware Proxy L3 Unknown Multicast Flooding: Flood Multi Destination Flooding: Flood in BD ARP Flooding: Disabled
  D. Forwarding: Custom L2 Unknown Unicast: Flood L3 Unknown Multicast Flooding: Flood Multi Destination Flooding: Flood in BD ARP Flooding: Disabled
  B. Forwarding: Custom L2 Unknown Unicast: Flood L3 Unknown Multicast Flooding: Flood Multi Destination Flooding: Flood in BD ARP Flooding: Enabled

  ---

  Explanation/Reference:

• Question 83:

  Refer to the exhibit.

  

  A Cisco ACI administrator noticed a fault raised that affects the receipt of the external subnet. Which action clears the fault?

  A. Import route control subnet 192.168.1.1 for ExtEPG L3_Out_Test.
  B. Set route map Import_Policy_192.168.1.1 as the import policy.
  C. Import subnet 192.168.1.1 under the created route map.
  D. Create route map Import_Policy_192.168.1.1 under L3Out.
  D. Create route map Import_Policy_192.168.1.1 under L3Out.

• Question 84:

  Refer to the exhibit.

  

  An engineer connects a Cisco ACI fabric to two different Cisco Nexus 9000 Series Switches. The fabric must be configured to ensure a loop-free topology and N9K1 must be configured as the root bridge for VLAN 10. Which action meets these requirements?

  A. Enable STP on ports between the leaf and spine.
  B. Set BPDU Guard on ports between the leaf and Nexus 9000 Series Switches.
  C. Enable Cisco Discovery Protocol on ports between the leaf and spine.
  D. Activate MCP on ports between the leaf and Nexus 9000 Series Switches.
  D. Activate MCP on ports between the leaf and Nexus 9000 Series Switches.

  ---

  Explanation/Reference:

  MCP for loop-free topology

• Question 85:

  DRAG DROP

  An engineer must configure RADIUS authentication with Cisco ACI for remote authentication with out-of-band management access. Drag and drop the RADIUS configuration steps from the left into the required implementation order on the right. Not all steps are used.

  Select and Place:

  

  

  ---

  Explanation/Reference:

• Question 86:

  Which type of profile needs to be created to deploy an access port policy group?

  A. attachable entity
  B. Pod
  C. module
  D. leaf interface
  A. attachable entity

  ---

  Explanation/Reference:

  Reference:

  https://www.cisco.com/c/en/us/td/docs/switches/datacenter/aci/apic/sw/1-x/Operating_ACI/guide/b_Cisco_Operating_ACI/ b_Cisco_Operating_ACI_chapter_0110.html

• Question 87:

  Refer to the exhibit.

  

  An engineer applies an OSPF L3Out between a Cisco ACI fabric and an external router. Router1 must receive a default route from the Cisco ACI via OSPF. Which action ensures that the ACI fabric is the Layer 3 gateway for Router1?

  A. A. Configure a default route leak policy in the L3Out.
  B. Apply an OSPF interface policy in the OSPF interface profile.
  C. Associate the external EPG with the appropriate contract.
  D. Include an OSPF route summarization policy in external EPG.
  A. A. Configure a default route leak policy in the L3Out.

  ---

  Explanation/Reference:

  For external connections to the fabric that only require a default route, there is support for originating a default route for OSPF, EIGRP, and BGP L3Out connections. If a default route is received from an external peer, this route can be

  redistributed out to another peer following the transit export route control as described earlier in this article. A default route can also be advertised out using a Default Route Leak policy. This policy supports advertising a default route if it is

  present in the routing table or it always supports advertising a default route. The Default Route Leak policy is configured in the L3Out connection.

  When creating a Default Route Leak policy, follow these guidelines:

  For BGP, the Always property is not applicable. When configuring the Scope property, choose Outside. For OSPF, the scope value Context creates a type-5 LSA while the Scope value Outside creates type-7 LSA. For EIGRP, when choosing

  the Scope property, you must choose Context.

• Question 88:

  How does Cisco ACI manage the old endpoint information on the original leaf switch after an endpoint moves between two Cisco ACI leaf switches?

  A. A bounce entry is created by COOP communication instead of data plane learning.
  B. A remote endpoint is created to represent the endpoint on another leaf.
  C. Cisco APIC deletes an endpoint after receiving GARP packets from the new leaf.
  D. The spine switch pushes all endpoint database entries to all leaf switches.
  A. A bounce entry is created by COOP communication instead of data plane learning.

  ---

  Explanation/Reference:

  https://www.cisco.com/c/en/us/solutions/collateral/data-center-virtualization/application-centric-infrastructure/white-paper-c11-739989.html#Endpointmovementandbounceentries

• Question 89:

  Refer to the exhibit.

  

  A customer is running an application that collects data from multiple servers. The application does not support acknowledgments back to the servers. The customer environment is approaching its TCAM limits. The customer must implement a contract that will allow this communication and limit the number of TCAM entries. Which configuration meets these requirements?

  A. Contract CTR-4: Consumer: EPG-2, EPG-3 Provider: EPG-1 Subject: Apply Both Direction: enabled Reverse Filter Ports: enabled Protocol: UDP, Src Port: Any, Dst Port: 5000
  B. Contract CTR-3: Consumer: EPG-1 Provider: EPG-2, EPG-3 Subject: Apply Both Direction: enabled Reverse Filter Ports: enabled Protocol: UDP, Src Port: Any, Dst Port: 5000
  C. Contract CTR-2: Consumer: EPG-1 Provider: EPG-2, EPG-3 Subject: Apply Both Direction: disabled Reverse Filter Ports: disabled Filter from Consumer to Provider: Protocol: UDP, Src Port: Any, Dst Port: 5000 Filter from Provider to Consumer: empty
  D. Contract CTR-1: Consumer: EPG-2, EPG-3 Provider: EPG-1 Subject: Apply Both Direction: disabled Reverse Filter Ports: disabled Filter from Consumer to Provider: Protocol: UDP, Src Port: Any, Dst Port: 5000 Filter from Provider to Consumer: empty
  D. Contract CTR-1: Consumer: EPG-2, EPG-3 Provider: EPG-1 Subject: Apply Both Direction: disabled Reverse Filter Ports: disabled Filter from Consumer to Provider: Protocol: UDP, Src Port: Any, Dst Port: 5000 Filter from Provider to Consumer: empty

• Question 90:

  Refer to the exhibit.

  

  A Cisco ACI fabric has four access policy groups. The VPC reciprocal protection group has been defined. The N9K1 trunks VLANs 10-20 to ACI leaf switches. Which policy group must be associated with Eth1/1 and Eth1/2 to complete the deployment?

  A. PEGRKAL12_PolGrp
  B. PEGRMET12_PolGrp
  C. PEGRKIF11_PolGrp
  D. PEGRPAL11_PolGrp
  B. PEGRMET12_PolGrp