Best Preparations of 300-620 Exam 2021 CCNP Data Center Unlimited 113 Questions
Focus on 300-620 All-in-One Exam Guide For Quick Preparation.
NEW QUESTION 32
A network engineer must design a method to allow the Cisco ACI to redirect traffic to the firewalls. Only traffic that matches specific L4-L7 policy rules should be redirected. The load must be distributed across multiple firewalls to scale the performance horizontally. Which action must be taken to meet these requirements?
- A. Configure ACI Service Graph with Symmetric PBR.
- B. Configure ACI Service Graph with Unidirectional PBR.
- C. Implement ACI Service Graph Two Nodes with GIPo.
- D. Implement ACI Service Graph with GIPo.
Answer: A
NEW QUESTION 33
Which tenant is used when configuring in-band management IP addresses for Cisco APICs, leaf nodes, and spine nodes?
- A. mgmt
- B. default
- C. infra
- D. common
Answer: C
Explanation:
Reference:
https://www.cisco.com/c/en/us/td/docs/switches/datacenter/aci/apic/sw/kb/ b_KB_Configuring_Static_Management_Access.html#concept_CFF63FEBE947424291B0F10E6F23DA7D
NEW QUESTION 34
Which method does the Cisco ACI fabric use to load-balance multidestination traffic?
- A. forwarding tag trees
- B. spanning trees
- C. shortest-path trees
- D. PIM routing
Answer: A
Explanation:
Reference:
https://www.cisco.com/c/en/us/td/docs/switches/datacenter/aci/apic/sw/1-x/aci-fundamentals/b_ACI-Fundamentals/b_ACI-Fundamentals_chapter_010010.html
NEW QUESTION 35
When does the Cisco ACI leaf learn a source IP or MAC as a remote endpoint?
- A. When VXLAN traffic arrives on a leaf fabric port from the spine and inner source IP is in the Layer 3 Out EPG subnet range.
- B. When VXLAN traffic arrives on a leaf fabric port from the spine and outer source IP is in the Layer 3 Out EPG subnet range.
- C. When VXLAN traffic arrives on a leaf fabric port from the spine and outer source IP is in the bridge domain subnets range.
- D. When VXLAN traffic arrives on a leaf fabric port from the spine and inner source IP is in the bridge domain subnets range.
Answer: C
NEW QUESTION 36
A Cisco ACI bridge domain and VRF are configured with a default data-plane learning configuration. Which two endpoint attributes are programmed in the leaf switch when receiving traffic? (Choose two.)
- A. Remote IP
- B. Local Subnet
- C. Remote MAC. IP
- D. Local IP, not MAC
- E. Local MAC, IP
- F. Remote Subnet
Answer: A,E
NEW QUESTION 37
What is the minimum number of APICs does Cisco recommend to deploy in a production cluster?
- A. 0
- B. 1
- C. 2
- D. 3
Answer: B
NEW QUESTION 38
What must be configured to redistribute externally learned OSPF routes within the ACI fabric?
- A. BGP Inter-leak Route Map
- B. PIM Sparse Mode
- C. BGP Route Reflector
- D. Route Control Profile
Answer: D
Explanation:
Reference:
https://www.cisco.com/c/en/us/td/docs/switches/datacenter/aci/apic/sw/1-x/ACI_Best_Practices/ b_ACI_Best_Practices/b_ACI_Best_Practices_chapter_010010.html
NEW QUESTION 39 
Refer to the exhibit. Which action should be taken to ensure authentication if the RADIUS servers are unavailable?
- A. Adjust the priority of server 10.1.1.1 to 1.
- B. Set the default login realm to LDAP.
- C. Set the fallback login to local.
- D. Assign the user to the default role.
Answer: C
Explanation:
Section: ACI Management
NEW QUESTION 40
On which two interface types should a user configure storm control to protect against broadcast traffic?
(Choose two.)
- A. APIC facing interfaces
- B. port channel on a single leaf switch
- C. all interfaces on the leaf switches in the fabric
- D. endpoint-facing trunk interface
- E. fabric uplink interfaces on the leaf switches
Answer: B,D
Explanation:
Section: External Network Connectivity
Explanation/Reference: https://www.cisco.com/c/en/us/td/docs/switches/datacenter/aci/apic/sw/2-x/L2_config/ b_Cisco_APIC_Layer_2_Configuration_Guide/ b_Cisco_APIC_Layer_2_Configuration_Guide_chapter_01010.html
NEW QUESTION 41
An engineer is implementing Cisco ACI at a large platform-as-a-service provider using APIC controllers,
9396PX leaf switches, and 9336PQ spine switches. The leaf switch ports are configured as IEEE 802.1p ports.
Where does the traffic exit from the EPG in IEEE 802.1p mode in this configuration?
- A. from leaf ports tagged as VLAN 0
- B. from leaf ports tagged as VLAN 1
- C. from leaf ports tagged as VLAN 4094
- D. from leaf ports untagged
Answer: D
NEW QUESTION 42
Which type of profile needs to be created to deploy an access port policy group?
- A. leaf interface
- B. module
- C. Pod
- D. attachable entity
Answer: D
Explanation:
Section: ACI Fabric Infrastructure
Explanation/Reference: https://www.cisco.com/c/en/us/td/docs/switches/datacenter/aci/apic/sw/1-x/Operating_ACI/guide/ b_Cisco_Operating_ACI/b_Cisco_Operating_ACI_chapter_0110.html
NEW QUESTION 43
An engineer must configure VMM domain integration on a Cisco UCS B-Series server that is connected to a Cisco ACI fabric. Drag and drop the products used to create VMM domain from the bottom into the sequence in which they should be implemented at the top. Products are used more than once.
Answer:
Explanation:
NEW QUESTION 44
An application team tells the Cisco ACI network administrator that it wants to monitor the statistics of the unicast and BUM traffic that are seen in a certain EPG. Which statement describes the collection statistics?
- A. Cisco ACI does not capture statistics at the EPG level. Only statistics that pass through ACI contracts can be monitored.
- B. The collection of statistics is enabled on the EPG level by enabling the statistics for unicast and BUM traffic.
- C. All EPGs in the Cisco ACI tenant object must be enabled for statistics to be collected.
- D. EPG statistics can be collected only for VMM domains. If a physical domain exists, statistics are not collected.
Answer: C
NEW QUESTION 45
Which endpoint learning operation is completed on the ingress leaf switch when traffic is received from a Layer
3 Out?
- A. The source IP address of the traffic is learned as a remote endpoint.
- B. The source MAC address of the traffic is learned as a remote endpoint.
- C. The source MAC address of the traffic is learned as a local endpoint.
- D. The source IP address of the traffic is learned as a local endpoint.
Answer: B
Explanation:
Section: External Network Connectivity
NEW QUESTION 46
Which setting prevents the learning of Endpoint IP addresses whose subnet does not match the bridge domain subnet?
- A. "Limit IP learning to network" setting within the bridge domain.
- B. "Limit IP learning to subnet" setting within the bridge domain.
- C. "Limit IP learning to subnet" setting within the EPG.
- D. "Limit IP learning to network" setting within the EPG.
Answer: B
Explanation:
Section: ACI Packet Forwarding
Explanation/Reference: https://www.cisco.com/c/en/us/td/docs/switches/datacenter/aci/apic/sw/2-x/L2_config/ b_Cisco_APIC_Layer_2_Configuration_Guide/ b_Cisco_APIC_Layer_2_Configuration_Guide_chapter_010.html
NEW QUESTION 47
Refer to the exhibit.
A Cisco ACI fabric is newly deployed, and the security team requires more visibility of all inter-EPG traffic flows. All traffic in a VRF must be forwarded to an existing firewall pair. During fallover, the standby firewall must continue to use the same IP and MAC as the primary firewall. Drag and drop the steps from the left Into the Implementation order on the right to configure the service graph that meets the requirements. (Not all steps are used.)
Answer:
Explanation:
Explanation
https://www.cisco.com/c/en/us/td/docs/switches/datacenter/aci/apic/sw/1-x/L4-L7_Services_Deployment/guide/b
* Create a service bridge domain and a layer 4 to layer 7 device within one cluster interface.
NEW QUESTION 48
......
Guaranteed Success with 300-620 Dumps: https://www.fast2test.com/300-620-premium-file.html
Pass Cisco 300-620 Exam – Experts Are Here To Help You: https://drive.google.com/open?id=1oTGJ0ro2xWjWbmdBsn14wtUMGJZ-ZyJb