The Secret Of Cisco 300-620 Exam Question

NEW QUESTION 1
A data center administrator is upgrading an ACI fabric. There are 3 APIC controllers in the fabric and all the servers are dual-homed to pairs of leaf switches configured in VPC mode. How should the fabric be upgraded to minimize possible traffic impact during the upgrade?

• A. * 1. Create two maintenance groups for the APIC controllers: VPC left and VPC right.* 2. Upgrade the first group of controllers.* 3. Upgrade the second group of controllers.* 4. Upgrade the leaf switches.
• B. * 1. Create two maintenance groups for APIC controllers: VPC left and VPC right.* 2. Upgrade the leaf switches.* 3. Upgrade the first group of controllers.* 4. Upgrade the second group of controllers.
• C. * 1. Create two maintenance groups for the leaf switches: VPC left and VPC right.* 2. Upgrade the APIC controllers.* 3. Upgrade the first group of leaf switches.* 4. Upgrade the second group of leaf switches.
• D. * 1. Create two maintenance groups for the leaf switches: VPC left and VPC right.* 2. Upgrade the first group of switches.* 3. Upgrade the second group of switches.* 4. Upgrade the APIC controllers.

Answer: D

NEW QUESTION 2
Where is the COOP database located?

• A. leaf
• B. spine
• C. APIC
• D. endpoint

Answer: B

Explanation:
Reference: https://www.cisco.com/c/en/us/solutions/collateral/data-center-virtualization/application-centric-infrastructure/white-paper-c11-739989.html

NEW QUESTION 3
Which attribute should be configured for each user to enable RADIUS for external authentication in Cisco ACI?

• A. cisco-security domain
• B. cisco-auth-features
• C. cisco-aci-role
• D. cisco-av-pair

Answer: D

Explanation:
Reference: https://www.cisco.com/c/en/us/td/docs/switches/datacenter/aci/apic/sw/2-x/Security_config/b_Cisco_APIC_Security_Configuration_Guide/b_Cisco_APIC_Security_Guide_chapter_01011.html

NEW QUESTION 4
When creating a subnet within a bridge domain, which configuration option is used to specify the network visibility of the subnet?

• A. limit IP learning to subnet
• B. scope
• C. gateway IP
• D. subnet control

Answer: C

Explanation:
Reference: https://www.cisco.com/c/en/us/td/docs/switches/datacenter/aci/apic/sw/1-x/Operating_ACI/guide/b_Cisco_Operating_ACI/b_Cisco_Operating_ACI_chapter_0111.html

NEW QUESTION 5
An engineer configured Layer 2 extension from the ACI fabric and changed the Layer 2 unknown unicast policy from Flood to Hardware Proxy. How does this change affect the flooding of the L2 unknown unicast traffic?

• A. It is forwarded to one of the spines to perform as a spine proxy.
• B. It is flooded within the whole fabric.
• C. It is dropped by the leaf when the destination endpoint is not present in the endpoint table.
• D. It is forwarded to one of the APICs to perform as a proxy.

Answer: A

Explanation:
Reference: https://www.cisco.com/c/en/us/td/docs/switches/datacenter/aci/apic/sw/2-x/L2_config/b_Cisco_APIC_Layer_2_Configuration_Guide/b_Cisco_APIC_Layer_2_Configuration_Guide_chapter_010.html

NEW QUESTION 6
Which feature allows firewall ACLs to be configured automatically when new endpoints are attached to an EPG?

• A. ARP gleaning
• B. dynamic endpoint attach
• C. hardware proxy
• D. network-stitching

Answer: B

NEW QUESTION 7
Which type of profile needs to be created to deploy an access port policy group?

• A. attachable entity
• B. Pod
• C. module
• D. leaf interface

Answer: A

Explanation:
Reference: https://www.cisco.com/c/en/us/td/docs/switches/datacenter/aci/apic/sw/1-x/Operating_ACI/guide/b_Cisco_Operating_ACI/b_Cisco_Operating_ACI_chapter_0110.html

NEW QUESTION 8
An engineer configured a bridge domain with the hardware-proxy option for Layer 2 unknown unicast traffic. Which statement is true about this configuration?

• A. The leaf switch drops the Layer 2 unknown unicast packet if it is unable to find the MAC address in the local forwarding tables.
• B. The Layer 2 unknown hardware proxy lacks support of the topology change notification.
• C. The leaf switch forwards the Layers 2 unknown unicast packets to all other leaf switches if it is unable to find the MAC address in its local forwarding tables.
• D. The spine switch drops the Layer 2 unknown unicast packet if it is unable to find the MAC address in the proxy database.

Answer: A

NEW QUESTION 9
In the context of ACI Multi-Site, when is the information of an endpoint (MAC/IP) that belongs to site 1 advertised to site 2 using the EVPN control plane?

• A. Endpoint information is not exchanged across sites unless COOP protocol is used.
• B. Endpoint information is not exchanged across sites unless a policy is configured to allow communication across sites.
• C. Endpoint information is exchanged across sites as soon as the endpoint is discovered in one site.
• D. Endpoint information is exchanged across sites when the endpoints are discovered in both sites.

Answer: A

Explanation:
Reference: https://www.cisco.com/c/en/us/solutions/collateral/data-center-virtualization/application-centric-infrastructure/white-paper-c11-739609.html#CiscoACIMultiSiteoverlaydataplane

NEW QUESTION 10
Which two dynamic routing protocols are supported when using Cisco ACI to connect to an external Layer 3 network? (Choose two.)

• A. iBGP
• B. VXLAN
• C. IS-IS
• D. RIPv2
• E. eBGP

Answer: AE

Explanation:
Reference: https://www.cisco.com/c/en/us/td/docs/switches/datacenter/aci/apic/sw/1-x/ACI_Best_Practices/b_ACI_Best_Practices/b_ACI_Best_Practices_chapter_010010.html

NEW QUESTION 11
DRAG DROP
An engineer is configuring a VRF for a tenant named Cisco. Drag and drop the child objects on the left onto the correct containers on the right for this configuration.

• A. Mastered
• B. Not Mastered

Answer: A

Explanation:

NEW QUESTION 12
On which two interface types should a user configure storm control to protect against broadcast traffic? (Choose two.)

• A. APIC facing interfaces
• B. port channel on a single leaf switch
• C. all interfaces on the leaf switches in the fabric
• D. endpoint-facing trunk interface
• E. fabric uplink interfaces on the leaf switches

Answer: BD

Explanation:
Reference: https://www.cisco.com/c/en/us/td/docs/switches/datacenter/aci/apic/sw/2-x/L2_config/b_Cisco_APIC_Layer_2_Configuration_Guide/b_Cisco_APIC_Layer_2_Configuration_Guide_chapter_01010.html

NEW QUESTION 13
An engineer is implementing a connection that represents an external bridged network. Which two configurations are used? (Choose two.)

• A. Layer 2 remote fabric
• B. Layer 2 outside
• C. Layers 2 internal
• D. Static path binding
• E. VXLAN outside

Answer: AB

NEW QUESTION 14
Which statement about ACI syslog is true?

• A. Notifications for different scopes of syslog objects can be sent only to one destination.
• B. Syslog messages are sent to the destination through the spine.
• C. All syslog messages are sent to the destination through APIC.
• D. Switches send syslog messages directly to the destinations.

Answer: A

Explanation:
Reference: https://www.ciscolive.com/c/dam/r/ciscolive/us/docs/2021/pdf/BRKACI-2303.pdf

NEW QUESTION 15
What represents the unique identifier of an ACI object?

• A. universal resource identifier (URI)
• B. application programming interface
• C. management information tree
• D. distinguished name

Answer: D

Explanation:
Reference: https://www.slideshare.net/CiscoDevNet/introduction-to-aci-apis

NEW QUESTION 16
When Cisco ACI connects to an outside Layers 2 network, where does the ACI fabric flood the STP BPDU frame?

• A. within the bridge domain
• B. within the APIC
• C. within the access encap VLAN
• D. between all the spine and leaf switches

Answer: A

Explanation:
Reference: https://www.cisco.com/c/en/us/solutions/collateral/data-center-virtualization/application-centric-infrastructure/white-paper-c07-732033.html#_Toc395143571

NEW QUESTION 17
Which tenant is used when configuring in-band management IP addresses for Cisco APICs, leaf nodes, and spine nodes?

• A. default
• B. infra
• C. common
• D. mgmt

Answer: D

Explanation:
Reference: https://www.cisco.com/c/en/us/td/docs/switches/datacenter/aci/apic/sw/kb/b_KB_Configuring_Static_Management_Access.html#concept_CFF63FEBE947424291B0F10E6F23DA7D

NEW QUESTION 18
An engineer is implementing a Cisco ACI data center network that includes Cisco Nexus 2000 Series 10G fabric extenders. Which physical topology is supported?
A.

B.

C.

• A.

Answer: D

NEW QUESTION 19
Which action sets Layer 2 loop migration in an ACI Fabric with a Layer 2 Out configured?

• A. Enable MCP on the ACI fabric.
• B. Disable STP in the external network.
• C. Disable STP on the ACI fabric.
• D. Enable STP on the ACI fabric.

Answer: A

NEW QUESTION 20
Which protocol does ACI use to securely sane the configuration in a remote location?

• A. SCP
• B. HTTPS
• C. TFTP
• D. FTP

Answer: A

Explanation:
Reference: https://www.cisco.com/c/en/us/td/docs/switches/datacenter/aci/apic/sw/kb/b_KB_Using_Import_Export_to_Recover_Config_States.html

NEW QUESTION 21
Refer to the exhibit.

Which two objects are created as a result of the configuration? (Choose two.)

• A. application profile
• B. attachable AEP
• C. bridge domain
• D. endpoint group
• E. VRF

Answer: CE

Explanation:
Reference: https://www.cisco.com/c/en/us/td/docs/switches/datacenter/aci/apic/sw/2-x/rest_cfg/2_1_x/b_Cisco_APIC_REST_API_Configuration_Guide/b_Cisco_APIC_REST_API_Configuration_Guide_chapter_01110.html

NEW QUESTION 22
......