Practice with 300-620 Dumps for CCNP Data Center Certified Exam Questions & Answer
REAL 300-620 Exam Questions With 100% Refund Guarantee
Cisco 300-620 certification exam is designed to test the knowledge and skills of IT professionals who are responsible for designing, deploying, and managing Cisco Application Centric Infrastructure (ACI) solutions. ACI is a comprehensive solution for building agile, secure, and scalable data center networks that can support modern applications and services.
NEW QUESTION # 100
A Cisco ACI fabric has L3Out using BGP with the maximum number of BGP prefixes configured as 1000. The fabric must raise the fault when 1001 prefixes are learned and the prefix 1002 must not be learned. Which BGP peer prefix action accomplishes this goal?
- A. Restart
- B. Shutdown
- C. Log
- D. Reject
Answer: D
Explanation:
The reject action raises the fault when the 1001st prefix arrives (exceeding the 1000-prefix limit) and then refuses any further prefixes, so prefix 1002 is not learned.
NEW QUESTION # 101
Refer to the exhibit.
A systems engineer is implementing the Cisco ACI fabric. However, the Server2 information is missing from the Leaf 101 endpoint table and the COOP database of the spine. The requirement is for the bridge domain configuration to enforce the ACI fabric to forward the unicast packets generated by Server1 destined to Server2. Which action must be taken to meet these requirements?
- A. Enable Unicast Routing
- B. Set L2 Unknown Unicast to Flood
- C. Set IP Data-Plane Learning to No
- D. Enable ARP Flooding
Answer: B
Explanation:
Both servers are in the same subnet. ARP flooding is out if we read the article in the link. Also unicast routing is not needed.
https://www.cisco.com/c/en/us/solutions/collateral/data-center-virtualization/application-centric-infrastructure/white-paper-c11-739989.html
NEW QUESTION # 102
An engineer must add a group of 70 bare-metal ESXi servers to the Cisco ACI fabric, which is integrated with vCenter. These configuration steps are complete:
The configured pool of ESXi hosts is configured with an Attachable Access Entity Profile (AAEP) called AEP_VMM.
The new group uses the AAEP called AEP_BAREMETAL.
Which action extends functional VMM integration to the new nodes?
- A. Add the VMM domain under the AEP_BAREMETAL AAEP object.
- B. Implement a separate VMM domain for the bare-metal servers by using AEP_VMM.
- C. Create a new AAEP container object for policy groups for AEP_VMM.
- D. Update AAEP to AEP_VMM on all policy groups that are used toward bare-metal servers.
Answer: A
NEW QUESTION # 103
Refer to the exhibit. All nodes in the Cisco ACI fabric have been statically assigned out-of-band management IP addresses in the 10.100.180.0/24 range. An engineer is attempting to SSH into Leaf101 using a laptop with an IP address of 10.101.180.100/24. Which configuration change must be performed to allow the engineer to SSH using the laptop?
- A. Change the allowed subnets.
- B. Select the default QoS Class policy.
- C. Add a contract filter to oobbrc-default that allows SSH.
- D. Change the Leaf101 IP address to 10.101.180.101.
Answer: A
NEW QUESTION # 104
Refer to the exhibit. A four-node APIC cluster is deployed across two data centers. What happens to the database shards when DC1 with APIC1 and APIC2 fail?
- A. The red shard becomes primary, and blue and red are standby.
- B. The blue shard remains in read-write mode, and green and red are inaccessible.
- C. The blue shard remains in read-write mode, and green and red are in read-only mode.
- D. The blue shard becomes primary, and green and red are standby.
Answer: C
NEW QUESTION # 105
Refer to the exhibit. A Cisco APIC raises an error when the EPG must accept endpoints from a VMM domain created. Which action clears the fault?
- A. Expand the VLAN pool for the VMM domain.
- B. Associate the VLAN pool with the VMM domain.
- C. Create a bridge domain for the VMM domain.
- D. Associate the EPG with the VMM domain.
Answer: A
NEW QUESTION # 106
Drag and drop the Cisco ACI Layer 4 to Layer 7 service insertion terms on the left to the correct descriptions on the right.
Answer:
Explanation:
NEW QUESTION # 107
Which feature dynamically assigns or modifies the EPG association of virtual machines based on their attributes?
- A. vzAny contracts
- B. application EPGs
- C. uSeg EPGs
- D. standard contracts
Answer: C
Explanation:
Section: ACI Fabric Infrastructure
NEW QUESTION # 108
What are two requirements for the IPN network when implementing a Multi-Pod ACI fabric? (Choose two.)
- A. BGP routing
- B. VLAN ID 4
- C. EIGRP routing
- D. PIM ASM multicast routing
- E. OSPF routing
Answer: C,E
Explanation:
Section: ACI Anywhere
NEW QUESTION # 109
What is the advantage of implementing an active-active firewall cluster that is stretched across separate pods when anycast services are configured?
- A. The local pod anycast node is preferred by the local spines.
- B. A different MAC/IP configuration combination is configurable for the firewall in each pod.
- C. Local traffic in a pod is load-balanced between the clustered firewalls.
- D. A cluster is capable to be deployed in transparent mode across pods.
Answer: C
Explanation:
The advantage of implementing an active-active firewall cluster that is stretched across separate pods when anycast services are configured is that local traffic within a pod is load-balanced between the clustered firewalls. This means that traffic destined for the anycast IP address of the service node (firewall) will preferentially be directed to the local node within the same pod, thus optimizing traffic flows and reducing latency by avoiding unnecessary traffic tromboning to a remote pod1.
NEW QUESTION # 110
An engineer must securely export Cisco APIC configuration snapshots to a secure, offsite location The exported configuration must be transferred using an encrypted tunnel and encoded with a platform-agnostic data format that provides namespace support Which configuration set must be used?
- A. Option D
- B. Option B
- C. Option C
- D. Option A
Answer: B
Explanation:
To securely export Cisco APIC configuration snapshots to a secure, offsite location using an encrypted tunnel and a platform-agnostic data format that provides namespace support, the following configuration set must be used:
Choose a Platform-Agnostic Data Format: Export the configuration in a data format like JSON or XML, which are platform-agnostic and support namespaces1.
Use an Encrypted Tunnel: Transfer the configuration snapshot over a secure protocol such as SFTP or SCP, which provides an encrypted tunnel for the data transfer1.
Schedule the Export: Set up a scheduled export of the configuration in the Cisco APIC to occur at regular intervals, ensuring the process is automated1.
Enable Encryption: Make sure the configuration export policy includes encryption settings. Cisco APIC supports AES-256 encryption for securing exported configuration files2.
Verify Namespace Support: Ensure that the chosen data format and the method of export support the use of namespaces, which are essential for organizing elements and attributes in XML documents1.
By following these steps and choosing Option B, the engineer can meet the requirements for securely exporting Cisco APIC configuration snapshots to an offsite location.
NEW QUESTION # 111
A network engineer must allow secure access to the Cisco ACl out-of-band (OOB) management only from external subnets 10 0 0024 and 192.168 20 G'25. Which configuration set accomplishes this goal?
- A. Option C
- B. Option D
- C. Option A
- D. Option B
Answer: A
Explanation:
To enable the APIC in a Cisco ACI fabric using out-of-band management connectivity to access a routable host with an IP address of 192.168.11.2, you need to add a Fabric Access Policy that allows management connections. This involves configuring a contract that will be consumed and provided to your OOB devices. The contract will let the system know what traffic is allowed. In this case, you will use the default/common contract to permit any traffic. This is necessary because the APIC needs to be able to send traffic to and receive traffic from the management network1.
Reference:
ACI: Configuring Out-of-Band (OOB) Access for Your Fabric - Cisco1
Troubleshoot ACI Management and Core Services - In-band and Out-of-band Management - Cisco2
NEW QUESTION # 112
Refer to the exhibit. An engineer must migrate workloads from the brownfield network to the Cisco ACI fabric. The VLAN 10 default gateway remains in the router located in the brownfield network. The bridge domain has already been associated with L2Out. Which two actions must be taken to migrate the workloads? (Choose two.)
- A. Enable ARP Flooding.
- B. Set L2 Unknown Unicast Flood.
- C. Select limit IP learning to Subnet.
- D. Configure Multi-Destination Flooding Flood in Encapsulation.
- E. Map the MAC address of the default gateway to the bridge domain.
Answer: A,B
Explanation:
Enable ARP flooding: ARP requests originated from devices connected to the Cisco ACI fabric should be able to reach the default gateway or other endpoints part of the same IP subnet and still connected to the brownfield network. Since those entities are unknown to the Cisco ACI fabric, it is required to flood ARP requests across the Cisco ACI fabric and toward the brownfield network.
Enable Unknown Unicast flooding: similar considerations valid for ARP traffic apply also to Layer
2 unknown traffic (unicast and multicast), so it is required to ensure flooding is enabled in this phase for those traffic types.
https://www.cisco.com/c/en/us/td/docs/switches/datacenter/aci/apic/sw/migration_guides/migratin g_existing_networks_to_aci.html#_Toc133408118
NEW QUESTION # 113
Refer to the exhibit.
An engineer is integrating a VMware vCenter with Cisco ACI VMM domain configuration. ACI creates port-group names with the format of "Tenant | Application | EPG". Which configuration option is used to generate port groups with names formatted as "Tenant=Application=EPG"?
- A. delimiter
- B. virtual switch name
- C. enable tag collection
- D. security domains
Answer: A
Explanation:
In the Cisco ACI VMM domain configuration, to generate port groups with names formatted as "Tenant=Application=EPG", the configuration option used is delimiter. The delimiter is a character that separates the elements of the port-group name. By changing the delimiter setting to "=", the port-group names will be generated with the desired format.
NEW QUESTION # 114
Which endpoint learning operation is completed on the ingress leaf switch when traffic is received from a Layer
3 Out?
- A. The source MAC address of the traffic is learned as a remote endpoint.
- B. The source IP address of the traffic is learned as a local endpoint.
- C. The source IP address of the traffic is learned as a remote endpoint.
- D. The source MAC address of the traffic is learned as a local endpoint.
Answer: A
Explanation:
Section: External Network Connectivity
NEW QUESTION # 115
A network engineer must backup the PRODUCTION tenant. The configuration backup should be stored on the APIC using a markup language and contain all secure information. Which export policy must be used to meet these requirement?
- A.
- B.
- C.
- D.
Answer: A
NEW QUESTION # 116
When the subnet is configured on a bridge domain, on which physical devices is the gateway IP address configured?
- A. only leaf switches where the bridge domain of the tenant is present
- B. all leaf switches and all spine nodes
- C. all border leaf nodes where the bridge domain of the tenant is present
- D. only spine switches where the bridge domain of the tenant is present
Answer: A
NEW QUESTION # 117
An engineer wants to monitor all configuration changes, threshold crossing, and link-state transitions in a Cisco ACI fabric. Which action must be taken to receive the required messages?
- A. Add Faults and Events to the monitor policy.
- B. Include Events and Session Logs in the Syslog source policy.
- C. Add Session Logs and Audit Logs to the monitor policy.
- D. Include Audit Logs and Events in the Syslog source policy.
Answer: C
Explanation:
After searching, there is nothing called "syslog source policy" in ACI. Syslog source policy exists in UCS Central. The choices now are on "Monitoring Policy" that exits on A and C.
https://community.cisco.com/legacyfs/online/attachments/blog/technote-aci-syslog_external-latest.pdf
https://www.cisco.com/c/en/us/td/docs/switches/datacenter/aci/apic/sw/all/faults/guide/b_APIC_Faults_Errors/b_IFC_Faults_Errors_chapter_010.html
NEW QUESTION # 118
Which statement about ACI syslog is true or Which statement describes the ACI syslog?
- A. Notifications for different scopes of syslog objects can be sent only to one destination.
- B. All syslog messages are sent to the destination through APIC.
- C. Switches send syslog messages directly to the destinations.
- D. Syslog messages are sent to the destination through the spine.
Answer: B
Explanation:
The correct statement about ACI syslog is that all syslog messages are sent to the destination through APIC1. This centralized approach allows for consistent logging and monitoring across the ACI fabric1.
NEW QUESTION # 119
......
PDF Download Cisco Test To Gain Brilliante Result!: https://www.fast2test.com/300-620-premium-file.html
Get Special Discount Offer on 300-620 Dumps PDF: https://drive.google.com/open?id=1LUzqwSg_APKFy4MqO0SqCPZc-TitWevQ