300-620 Exam - Implementing Cisco Application Centric Infrastructure (DCACI)

NEW QUESTION 1
Which two dynamic routing protocols are supported when using Cisco ACI to connect to an external Layer 3 network? (Choose two.)

• A. iBGP
• B. VXLAN
• C. IS-IS
• D. RIPv2
• E. eBGP

Answer: AE

Explanation:
Reference: https://www.cisco.com/c/en/us/td/docs/switches/datacenter/aci/apic/sw/1-x/ACI_Best_Practices/b_ACI_Best_Practices/b_ACI_Best_Practices_chapter_010010.html

NEW QUESTION 2
A data center administrator is upgrading an ACI fabric. There are 3 APIC controllers in the fabric and all the servers are dual-homed to pairs of leaf switches configured in VPC mode. How should the fabric be upgraded to minimize possible traffic impact during the upgrade?

• A. * 1. Create two maintenance groups for the APIC controllers: VPC left and VPC right.* 2. Upgrade the first group of controllers.* 3. Upgrade the second group of controllers.* 4. Upgrade the leaf switches.
• B. * 1. Create two maintenance groups for APIC controllers: VPC left and VPC right.* 2. Upgrade the leaf switches.* 3. Upgrade the first group of controllers.* 4. Upgrade the second group of controllers.
• C. * 1. Create two maintenance groups for the leaf switches: VPC left and VPC right.* 2. Upgrade the APIC controllers.* 3. Upgrade the first group of leaf switches.* 4. Upgrade the second group of leaf switches.
• D. * 1. Create two maintenance groups for the leaf switches: VPC left and VPC right.* 2. Upgrade the first group of switches.* 3. Upgrade the second group of switches.* 4. Upgrade the APIC controllers.

Answer: D

NEW QUESTION 3
Which setting prevents the learning of Endpoint IP addresses whose subnet does not match the bridge domain subnet?

• A. “Limit IP learning to network” setting within the bridge domain.
• B. “Limit IP learning to subnet” setting within the EPG.
• C. “Limit IP learning to network” setting within the EPG.
• D. “Limit IP learning to subnet” setting within the bridge domain.

Answer: D

Explanation:
Reference: https://www.cisco.com/c/en/us/td/docs/switches/datacenter/aci/apic/sw/2-x/L2_config/b_Cisco_APIC_Layer_2_Configuration_Guide/b_Cisco_APIC_Layer_2_Configuration_Guide_chapter_010.html

NEW QUESTION 4
An engineer is implementing Cisco ACI at a large platform-as-a-service provider using APIC controllers, 9396PX leaf switches, and 9336PQ spine switches. The leaf switch ports are configured as IEEE 802.1p ports. Where does the traffic exit from the EPG in IEEE 802.1p mode in this configuration?

• A. from leaf ports tagged as VLAN 0
• B. from leaf ports untagged
• C. from leaf ports tagged as VLAN 4094
• D. from leaf ports tagged as VLAN 1

Answer: A

NEW QUESTION 5
How is an EPG extended outside of the ACI fabric?

• A. Create an external bridged network that is assigned to a leaf port.
• B. Create an external routed network that is assigned to an EPG.
• C. Enable unicast routing within an EPG.
• D. Statically assign a VLAN ID to a leaf port in an EPG.

Answer: D

Explanation:
Reference: https://www.dclessons.com/l2-external-network-with-aci

NEW QUESTION 6
In the context of VMM, which protocol between ACI leaf and compute hosts ensures that the policies are pushed to the leaf switches for immediate and on demand resolution immediacy?

• A. VXLAN
• B. LLDP
• C. ISIS
• D. STP

Answer: A

Explanation:
Reference: https://www.cisco.com/c/en/us/td/docs/switches/datacenter/aci/apic/sw/1-x/ACI_Best_Practices/b_ACI_Best_Practices/b_ACI_Best_Practices_chapter_0101.html

NEW QUESTION 7
Which type of profile needs to be created to deploy an access port policy group?

• A. attachable entity
• B. Pod
• C. module
• D. leaf interface

Answer: A

Explanation:
Reference: https://www.cisco.com/c/en/us/td/docs/switches/datacenter/aci/apic/sw/1-x/Operating_ACI/guide/b_Cisco_Operating_ACI/b_Cisco_Operating_ACI_chapter_0110.html

NEW QUESTION 8
Refer to the exhibit.

A client reports that the ACI domain connectivity to the fiber channel storage is experiencing a B2B credit oversubscription. The environment has a SYSLOG server for state collection messages. Which value should be chosen to clear the critical fault?

• A. 300
• B. 410
• C. 350
• D. 510

Answer: B

NEW QUESTION 9
Which statement regarding ACI Multi-Pod and TEP pool is true?

• A. The IP addresses used in the IPN network can overlap TEP pool of the APIC.
• B. A different TEP pool must be assigned to each Pod.
• C. The Pod1 TEP pool must be split and a portion of the TEP pool allocated to each Pod.
• D. The same TEP pool is used in all Pods.

Answer: B

Explanation:
Reference: https://www.cisco.com/c/en/us/solutions/collateral/data-center-virtualization/application-centric-infrastructure/white-paper-c11-739714.html

NEW QUESTION 10
What must be enabled in the bridge domain to have the endpoint table learn the IP addresses of endpoints?

• A. L2 unknown unicast: flood
• B. GARP based detection
• C. unicast routing
• D. subnet scope

Answer: C

Explanation:
Reference: https://hsvglobalschool.in/dhkycw/cisco-aci-bridge-domain.html

NEW QUESTION 11
Which two actions extend a Layer 2 domain beyond the ACI fabric? (Choose two.)

• A. extending the routed domain out of the ACI fabric
• B. creating a single homed Layer 3 Out
• C. creating an external physical network
• D. extending the bridge domain out of the ACI fabric
• E. extending the EPG out of the ACI fabric

Answer: AE

NEW QUESTION 12
An engineer has set the VMM resolution immediacy to pre-provision in a Cisco ACI environment. No Cisco Discovery Protocol neighborship has been formed between the hypervisors and the ACI fabric leaf nodes. How does this affect the download policies to the leaf switches?

• A. No policies are downloaded because LLDP is the only supported discovery protocol.
• B. Policies are downloaded when the hypervisor host is connected to the VMM VDS.
• C. Policies are downloaded to the ACI leaf switch regardless of Cisco Discovery Protocol neighborship.
• D. No policies are downloaded because there is no discovery protocol neighborship.

Answer: C

NEW QUESTION 13
Regarding the MTU value of MP-BGP EVPN control plane packets in Cisco ACI, which statement about communication between spine nodes in different sites is true?

• A. By default, spine nodes generate 9000-bytes packets to exchange endpoints routing informatio
• B. As a result, the Inter-Site network should be able to carry 9000-bytes packets.
• C. By default, spine nodes generate 1500-bytes packets to exchange endpoints routing informatio
• D. As a result, the Inter-Site network should be able to carry 1800-bytes packets.
• E. By default, spine nodes generate 1500-bytes packets to exchange endpoints routing informatio
• F. As a result, the Inter-Site network should be able to carry 1500-bytes packets.
• G. By default, spine nodes generate 9000-bytes packets to exchange endpoints routing informatio
• H. As a result, the Inter-Site network should be able to carry 9100-bytes packets.

Answer: D

NEW QUESTION 14
An engineer configured a bridge domain with the hardware-proxy option for Layer 2 unknown unicast traffic. Which statement is true about this configuration?

• A. The leaf switch drops the Layer 2 unknown unicast packet if it is unable to find the MAC address in the local forwarding tables.
• B. The Layer 2 unknown hardware proxy lacks support of the topology change notification.
• C. The leaf switch forwards the Layers 2 unknown unicast packets to all other leaf switches if it is unable to find the MAC address in its local forwarding tables.
• D. The spine switch drops the Layer 2 unknown unicast packet if it is unable to find the MAC address in the proxy database.

Answer: A

NEW QUESTION 15
An engineer is extending EPG connectivity to an external network. The external network houses the Layer 3 gateway and other end hosts. Which ACI bridge domain configuration should be used?

• A. Forwarding: CustomL2 Unknown Unicast: Hardware Proxy L3 Unknown Multicast Flooding: Flood Multi Destination Flooding: Flood in BD ARP Flooding: Enabled
• B. Forwarding: Custom L2 Unknown Unicast: FloodL3 Unknown Multicast Flooding: Flood Multi Destination Flooding: Flood in BD ARP Flooding: Enabled
• C. Forwarding: CustomL2 Unknown Unicast: Hardware Proxy L3 Unknown Multicast Flooding: Flood Multi Destination Flooding: Flood in BD ARP Flooding: Disabled
• D. Forwarding: Custom L2 Unknown Unicast: FloodL3 Unknown Multicast Flooding: Flood Multi Destination Flooding: Flood in BD ARP Flooding: Disabled

Answer: D

NEW QUESTION 16
In the context of ACI Multi-Site, when is the information of an endpoint (MAC/IP) that belongs to site 1 advertised to site 2 using the EVPN control plane?

• A. Endpoint information is not exchanged across sites unless COOP protocol is used.
• B. Endpoint information is not exchanged across sites unless a policy is configured to allow communication across sites.
• C. Endpoint information is exchanged across sites as soon as the endpoint is discovered in one site.
• D. Endpoint information is exchanged across sites when the endpoints are discovered in both sites.

Answer: A

Explanation:
Reference: https://www.cisco.com/c/en/us/solutions/collateral/data-center-virtualization/application-centric-infrastructure/white-paper-c11-739609.html#CiscoACIMultiSiteoverlaydataplane

NEW QUESTION 17
An engineer is creating a configuration import policy that must terminate if the imported configuration is incompatible with the existing system. Which import mode achieves this result?

• A. merge
• B. atomic
• C. best effort
• D. replace

Answer: B

Explanation:
Reference: https://www.cisco.com/c/en/us/td/docs/switches/datacenter/aci/apic/sw/4-x/aci-fundamentals/Cisco-ACI-Fundamentals-401/Cisco-ACI-Fundamentals-401_chapter_01011.html

NEW QUESTION 18
A RADIUS user resolves its role via the Cisco AV Pair. What object does the Cisco AV Pair resolve to?

• A. tenant
• B. security domain
• C. primary Cisco APIC
• D. managed object class

Answer: D

Explanation:
Reference: https://www.cisco.com/c/en/us/td/docs/switches/datacenter/aci/apic/sw/2-x/Security_config/b_Cisco_APIC_Security_Configuration_Guide/b_Cisco_APIC_Security_Guide_chapter_01011.html

NEW QUESTION 19
Which type of port is used for in-band management within ACI fabric?

• A. spine switch port
• B. APIC console port
• C. leaf access port
• D. management port

Answer: C

NEW QUESTION 20
Which endpoint learning operation is completed on the egress leaf switch when traffic is received from an L3Out?

• A. The source MAC and IP address of the traffic is learned as a local endpoint.
• B. The source MAC address of the traffic is learned as a remote endpoint.
• C. No source MAC or IP address of the traffic is learned as a remote endpoint.
• D. The source IP address of the traffic is learned as a remote endpoint.

Answer: B

Explanation:
Reference: https://www.cisco.com/c/en/us/solutions/collateral/data-center-virtualization/application-centric-infrastructure/white-paper-c11-739989.html

NEW QUESTION 21
Refer to the exhibit.

Which Adjacency Type value should be set when the client endpoint and the service node interface are in a different subnet?

• A. Routed
• B. Unicast
• C. L3Out
• D. L3

Answer: D

NEW QUESTION 22
An engineer is extending an EPG out of the ACI fabric using static path binding. Which statement about the endpoints is true?

• A. Endpoints must connect directly to the ACI leaf port.
• B. External endpoints are in a different bridge domain than the endpoints in the fabric.
• C. Endpoint learning encompasses the MAC address only.
• D. External endpoints are in the same EPG as the directly attached endpoints.

Answer: C

NEW QUESTION 23
What does a bridge domain represent?

• A. Layer 3 cloud
• B. Layer 2 forwarding construct
• C. tenant
• D. physical domain

Answer: B

Explanation:
Reference: https://www.cisco.com/c/en/us/td/docs/switches/datacenter/aci/apic/sw/2-x/L2_config/b_Cisco_APIC_Layer_2_Configuration_Guide/b_Cisco_APIC_Layer_2_Configuration_Guide_chapter_010.html

NEW QUESTION 24
An engineer configured Layer 2 extension from the ACI fabric and changed the Layer 2 unknown unicast policy from Flood to Hardware Proxy. How does this change affect the flooding of the L2 unknown unicast traffic?

• A. It is forwarded to one of the spines to perform as a spine proxy.
• B. It is flooded within the whole fabric.
• C. It is dropped by the leaf when the destination endpoint is not present in the endpoint table.
• D. It is forwarded to one of the APICs to perform as a proxy.

Answer: A

Explanation:
Reference: https://www.cisco.com/c/en/us/td/docs/switches/datacenter/aci/apic/sw/2-x/L2_config/b_Cisco_APIC_Layer_2_Configuration_Guide/b_Cisco_APIC_Layer_2_Configuration_Guide_chapter_010.html

NEW QUESTION 25
What represents the unique identifier of an ACI object?

• A. universal resource identifier (URI)
• B. application programming interface
• C. management information tree
• D. distinguished name

Answer: D

Explanation:
Reference: https://www.slideshare.net/CiscoDevNet/introduction-to-aci-apis

NEW QUESTION 26
......