300-620 Exam Questions
377 real 300-620 exam questions with expert-verified answers and explanations. Page 2 of 8.
- Question #55External Network Connectivity
Which action sets Layer 2 loop migration in an ACI Fabric with a Layer 2 Out configured?
L2OutLoop preventionMCPACI fabric - Question #56ACI Integrations
What are two of the three methods in integrating the Cisco ACI with existing network infrastructure? (Choose two.)
ACI integrationExisting networkPolicy engineMulti-pod - Question #57ACI Integrations
Assuming that a service device you are integrating into the Cisco ACI is dedicated to one tenant, where should you configure the logical device and associated concrete devices?
Service integrationTenant contextLogical deviceConcrete device - Question #58ACI Fabric Infrastructure
Which three networking architectures is the Cisco ACI architecture based on? (Choose three.)
ACI architectureLeaf-and-spineAPIC controllerZero-touch provisioning - Question #59ACI Management and Operations
Which new construct must a user create when configuring in-band management?
In-band managementVLAN poolManagement configuration - Question #60ACI Management and Operations
What must be configured to allow SNMP traffic on the APIC controller?
APIC managementSNMPManagement tenantContract - Question #61ACI Fabric Infrastructure
Which type of port is used for in-band management within ACI fabric?
in-band managementleaf access portfabric connectivity - Question #62ACI Management and Operations
Refer to the exhibit. A client reports that the ACI domain connectivity to the fiber channel storage is experiencing a B2B credit oversubscription. The environment has a SYSLOG ser...
fault managementB2B creditFCoEtroubleshooting - Question #63ACI Management and Operations
Which statement about ACI syslog is true?
syslogloggingnetwork monitoring - Question #64ACI Management and Operations
A data center administrator is upgrading an ACI fabric. There are 3 APIC controllers in the fabric and all the servers are dual-homed to pairs of leaf switches configured in VPC mo...
fabric upgrademaintenance groupsVPCAPIC cluster - Question #65ACI Management
Which protocol does ACI use to securely sane the configuration in a remote location?
configuration backupSCPsecurity - Question #66ACI Management
Which two protocols support accessing backup files on a remote location from the APIC? (Choose two.)
backup protocolsFTPSFTPAPIC management - Question #67ACI Management
Which attribute should be configured for each user to enable RADIUS for external authentication in Cisco ACI?
RADIUSexternal authenticationuser managementsecurity - Question #68Multi-Pod and Multi-Site
In the context of ACI Multi-Site, when is the information of an endpoint (MAC/IP) that belongs to site 1 advertised to site 2 using the EVPN control plane?
Multi-Siteendpoint learningEVPNpolicy enforcement - Question #69Multi-Pod and Multi-Site
Which statement regarding ACI Multi-Pod and TEP pool is true?
Multi-PodTEP poolIPNfabric addressing - Question #70ACI Fabric Infrastructure
What are two benefits of the Clos architecture? (Choose two.)
Clos architecturefabric designscalabilityECMP - Question #71ACI Management
As the Cisco ACI fabric administrator for a service provider, you have deployed a multitenant environment for your customers. Can a customer see the configuration of other customer...
multi-tenancysecurity isolationrole-based access control - Question #72External Network Connectivity
An engineer is extending an EPG out of the ACI fabric using static path binding. Which statement about the endpoints is true?
EPGstatic path bindingexternal connectivityendpoint learning - Question #73ACI Packet Forwarding
Which setting prevents the learning of Endpoint IP addresses whose subnet does not match the bridge domain subnet?
bridge domainendpoint learningIP subnet validationsecurity - Question #74External Network Connectivity
An engineer is implementing a connection that represents an external bridged network. Which two configurations are used? (Choose two.)
Layer 2 outsideexternal bridged networkstatic path binding - Question #75External Network Connectivity
Which two actions extend a Layer 2 domain beyond the ACI fabric? (Choose two.)
Layer 2 extensionbridge domain extensionEPG extensionexternal connectivity - Question #76ACI Integrations
Which two components are essential parts of a Cisco ACI Virtual Machine Manager (VMM) domain policy configuration? (Choose two.)
VMM domainVMware integrationEPG associationpolicy configuration - Question #77ACI Packet Forwarding
Which method does the Cisco ACI fabric use to load-balance multidestination traffic?
multidistination trafficload balancingforwarding tag treesACI forwarding - Question #78ACI Management
An engineer must limit management access to me Cisco ACI fabric that originates from a single subnet where the NOC operates. Access should be limited to SSH and HTTPS only. Where s...
management accesssecurity policymanagement tenantSSH/HTTPS - Question #79Multi-Pod and Multi-Site
What do Pods use to allow Pod-to-Pod communication in a Cisco ACI Multi-Pod environment?
Multi-PodPod-to-Pod communicationIPNspine connectivity - Question #80ACI Management
Refer to the exhibit. Which action should be taken to ensure authentication if the RADIUS servers are unavailable?
RADIUSauthentication fallbacklocal authenticationhigh availability - Question #81ACI Fabric Infrastructure
An engineer needs to deploy a leaf access port policy group in ACI Fabric to support the following requirements: - Control the amount of application data flowing into the system -...
Leaf access portLink level policyData plane policingPolicy groups - Question #83ACI Fabric Infrastructure
Which Cisco APIC configuration prevents a remote network that is not configured on the bridge domain from being learned by the fabric?
Bridge DomainIP learningSubnet configurationEndpoint learning - Question #84ACI Management and Operations
An engineer wants to filter the System Faults page and view only the active faults that are present in the Cisco ACI fabric. Which two lifecycle stages must be selected for filteri...
Fault managementACI operational statusSystem faultsTroubleshooting - Question #85Integrations
Refer to the exhibit. An engineer configures the Cisco ACI fabric for VMM integration with ESXi servers that are to be connected to the ACI leaves. The server team requires the net...
VMM integrationLACPLink aggregationLoad balancing - Question #86External Network Connectivity
Refer to the exhibit. An engineer must configure an L3Out peering with the backbone network. The L3Out must forward unicast and multicast traffic over the link. Which two methods s...
L3OutRouted portRouted subinterfaceExternal routing - Question #87ACI Fabric Infrastructure
A customer migrates a legacy environment to Cisco ACI. A Layer 2 trunk is configured to interconnect the two environments. The customer also builds ACI fabric in an application-cen...
Multi-Destination FloodingL2 MigrationBridge DomainNetwork stability - Question #88External Network Connectivity
An engineer must connect Cisco ACI fabric using Layer 2 with external third-party switches. The third-party switches are configured using 802.1s protocol. Which two constructs are...
L2OutMSTPSpanning TreeNative VLAN - Question #89ACI Management and Operations
A network engineer demonstrates Cisco ACI to a customer. One of the test cases is to validate a disaster recovery event by resetting the ACI fabric to factory and then restoring th...
Disaster RecoveryConfiguration backupFabric resetAES encryption - Question #90Integrations
New ESXi hosts are procured in a data center compute expansion project. An engineer must update the configuration on the Cisco APIC controllers to support the addition of the new s...
VMM integrationESXiAttachable Access Entity ProfileInterface selector - Question #91Multi-Pod and Multi-Site
An engineer configures a Multi-Pod system with the default getaway residing outside of the ACI fabric for a bridge domain. Which setting should be configured to support this requir...
Multi-PodBridge DomainDefault gatewayUnicast routing - Question #92ACI Packet Forwarding
What happens to the traffic flow when the Cisco ACI fabric has a stale endpoint entry for the destination endpoint?
Endpoint learningStale endpointTraffic forwardingACI fabric - Question #93External Network Connectivity
Using EPG extension, an engineer has moved all endpoints in a VLAN into an ACI fabric. When he moves the default gateway from traditional switches into the fabric, he suddenly lose...
EPG extensionDefault gateway migrationL3OutContracts - Question #94ACI Management
A user has been assigned to a security domain called Production and a domain called Production. The security domain has been mapped to two tenants, named Prod1 and Prod2. In the se...
RBACSecurity domainsTenant administrationFabric administration - Question #95ACI Management
A user needs full read-only visibility into an ACI fabric. Which predefined security domain can be used to enable such visibility?
RBACSecurity domainsRead-only accessAPIC management - Question #96Multi-Pod and Multi-Site
Out of the following switches, which are spine platforms that support ACI Multi-Site? (Choose two.)
Multi-SiteSpine switchesACI hardwareNexus 9000 - Question #97ACI Management
In-band is currently configured and used to manage the Cisco ACI fabric. The requirement is for leaf and spine switches to use out-of-band management for NTP protocol. Which action...
Management accessOut-of-band managementNTPDateTimePolicy - Question #98Integrations
An administrator must migrate the vSphere Management VMkernel of all ESXi hosts in the production cluster from the standard default virtual switch to a VDS that is integrated with...
VMM integrationESXi VMkernelEPG resolution immediacyManagement network - Question #99ACI Management
A customer implements RBAC on a Cisco APIC using a Windows RADIUS server that is configured with network control policies. The APIC is as follows: - Tenant = TenantX - Security Dom...
RBACRADIUSAV-pairSecurity domains - Question #101ACI Management and Operations
An engineer must create a backup of the Cisco ACI fabric for disaster recovery purposes. The backup must be transferred over a secure and encrypted transport. The backup file must...
APIC backupSCPdisaster recoveryconfiguration export - Question #102ACI Management and Operations
The Application team reports that a previously existing port group has disappeared from vCenter. An engineer confirms that the VM domain association for the EPG is no longer presen...
audit logstroubleshootingEPG managementvCenter integration - Question #103ACI Management and Operations
An application team tells the Cisco ACI network administrator that it wants to monitor the statistics of the unicast and BUM traffic that are seen in a certain EPG. Which statement...
EPG statisticstraffic monitoringunicast trafficBUM traffic - Question #104ACI Packet Forwarding
All workloads in VLAN 1001 have been migrated into EPG-1001. The requirement is to move the gateway address for VLAN 1001 from the core outside the Cisco ACI fabric into the Cisco...
Bridge DomainHardware ProxyL2 gatewayARP flood - Question #105ACI Fabric Infrastructure
An engineer is in the process of discovering a new Cisco ACI fabric consisting of two spines and four leaf switches. The discovery of leaf 1 has just been completed. Which two node...
fabric discoveryspine-leafAPIC discovery - Question #106ACI Packet Forwarding
When the subnet is configured on a bridge domain, on which physical devices is the gateway IP address configured?
Bridge Domain subnetgateway IPleaf switchanycast gateway