300-620 Exam Questions
377 real 300-620 exam questions with expert-verified answers and explanations. Page 3 of 8.
- Question #107External Network Connectivity
Refer to the exhibit, An engineer is deploying a Cisco ACI environment but experiences a STP loop between switch1 and switch2. Which configuration step is needed to break the STP l...
STP loopexternal L2 networknative VLANMST - Question #109ACI Management and Operations
An engineer must perform a Cisco ACI fabric upgrade that minimizes the impact on user traffic and allows only permitted users to perform an upgrade. Which two configuration steps s...
fabric upgrademaintenance groupsAPIC upgradeaccess control - Question #110External Network Connectivity
A customer creates Layer 3 connectivity to the outside network. However, only border leaf switches start receiving destination updates to other networks from the newly created L3Ou...
L3Outroute propagationBGP route reflectorborder leaf - Question #111Multi-Pod and Multi-Site
Which routing protocol is supported between Cisco ACI spines and IPNs in a Cisco ACI Multi-Pod environment?
Multi-PodIPNrouting protocolsOSPF - Question #112Multi-Pod and Multi-Site
An engineer must deploy Cisco ACI across 10 geographically separated data centers. Which ACI site deployment feature enables the engineer to control which bridge domains contain La...
Multi-SiteL2 floodingdata center interconnectACI Anywhere - Question #114External Network Connectivity
Which statements are correct regarding ACI support for BFD? (Choose two.)
BFDL3Outrouting protocolsinterface types - Question #115External Network Connectivity
An engineer must advertise a selection of external networks learned from a BGP neighbor into the ACI fabric. Which L3Out subnet configuration option creates an inbound route map fo...
L3Outroute filteringimport route mapexternal EPG - Question #116ACI Management and Operations
An engineer must set up a Cisco ACI fabric to send Syslog messages related to hardware events, such as chassis line card failures. The messages should be sent to a dedicated Syslog...
Sysloghardware eventsmonitoring policyAPIC configuration - Question #117ACI Packet Forwarding
The existing network and ACI fabric have been connected to support workload migration. Servers will physically terminate at the Cisco ACI, but their gateway must stay in the existi...
Bridge DomainL2 extensionexternal gatewayL2 Unknown Unicast Flood - Question #118ACI Fabric Infrastructure
An engineer must implement management policy and data plane separation in the Cisco ACI fabric. Which ACI object must be created in Cisco APIC to accomplish this goal?
Tenantmanagement planedata planelogical separation - Question #119ACI Fabric Infrastructure
An engineer is implementing a Cisco ACI environment that consists of more than 20 servers. Two of the servers support only Cisco Discovery Protocol with no order link discovery pro...
CDPLLDPserver discoveryinterface policyoverride policy - Question #120ACI Management and Operations
An engineer wants to monitor all configuration changes, threshold crossing, and link-state transitions in a Cisco ACI fabric. Which action must be taken to receive the required mes...
SyslogAudit LogsEventsmonitoring policyconfiguration changes - Question #121ACI Fabric Infrastructure
An organization has encountered many STP-related issues in the past due to failed hardware components. They are in the process of long-term migration to a newly deployed ACI fabric...
STP loop preventionMis-Cabling Protocolleaf port policy - Question #122Integrations
A network engineer must design a method to allow the Cisco ACI to redirect traffic to the firewalls. Only traffic that matches specific L4-L7 policy rules should be redirected. The...
Service GraphPBRfirewall integrationL4-L7 policy - Question #123ACI Fabric Infrastructure
An engineer created two interface protocol policies called Pol_CDP40275332 and Pol_LLDP46783451. The policies must be used together in a single policy. Which ACI object must be use...
interface policy groupCDP policyLLDP policy - Question #124ACI Management
What is the minimum number of APICs does Cisco recommend to deploy in a production cluster?
APIC clusterAPIC deploymenthigh availability - Question #125Integrations
Refer to the exhibit. An engineer must implement the inter-tenant service graph. Which set of actions must be taken to accomplish this goal?
inter-tenant communicationservice graphcontract export - Question #126ACI Packet Forwarding
Refer to the exhibit. A systems engineer is implementing the Cisco ACI fabric. However, the Server2 information is missing from the Leaf 101 endpoint table and the COOP database of...
endpoint learningCOOP databasebridge domain settingsL2 unknown unicast - Question #127External Network Connectivity
An engineer must allow multiple external networks to communicate with internal ACI subnets. Which action should the engineer take to assign the prefix to the class ID of the extern...
external network connectivityL3Outexternal EPGroute control - Question #128ACI Fabric Infrastructure
An engineer must ensure that Cisco ACI flushes the appropriate endpoints when a topology change notification message is received in an MST domain. Which three steps are required to...
MST integrationSTP TCNendpoint flushspanning tree policy - Question #129ACI Packet Forwarding
A Cisco ACI bridge domain and VRF are configured with a default data-plane learning configuration. Which two endpoint attributes are programmed in the leaf switch when receiving tr...
endpoint learningdata-plane learningMAC addressIP address - Question #130ACI Packet Forwarding
Refer to the exhibit. An engineer wants to initiate an ICMP ping from Server1 to Server2. The requirement is for the BD1 to enforce ICMP replies that follow the expected path. The...
unicast routingbridge domainICMP forwardingpath control - Question #131External Network Connectivity
An engineer must configure a group of servers with a contract that uses TCP port 80. The EGP that contains the web servers requires an external Layer 3 cloud to initiate communicat...
contractEPGL3Outconsumer/provider - Question #132ACI Packet Forwarding
The unicast routing feature is enabled on the bridge domain. Which two conditions enable the Cisco ACI leaf to learn a source IP as a local endpoint? (Choose two.)
endpoint learningunicast routingbridge domainSVI - Question #133ACI Packet Forwarding
When does the Cisco ACI leaf learn a source IP or MAC as a remote endpoint?
endpoint learningremote endpointVXLANspine - Question #134Integrations
The company ESXi infrastructure is hosted on the Cisco UCS-B Blade Servers. The company decided to take advantage of ACI VMM integration to enable consistent enforcement of policie...
VMM integrationUCS-BvSphere DVSMAC Pinning - Question #135Integrations
An engineer is configuring ACI VMM domain integration with Cisco UCS-B Series. Which type of port channel policy must be configured in the vSwitch policy?
VMM integrationUCS-Bport channel policyMAC Pinning - Question #137ACI Management
Which class of ACI object is presented in this output?
ACI object modelTenantAPIC configuration - Question #138ACI Packet Forwarding
What is the effect of enabling the disable Remote EP learn feature?
endpoint learningremote endpointfabric forwardingborder leaf - Question #139ACI Fabric Infrastructure
An engineer must connect a new host to port 1/1 on Leaf 101. A Cisco ACI fabric has an MOP policy configured but experience excessive Layer 2 loops. The engineer wants the Cisco AC...
L2 loop preventionMis-Cabling Protocolfabric access policyleaf port - Question #140Integrations
A network engineer is integrating a new Hyperflex storage duster into an existing Cisco ACI fabric. The Hyperflex cluster must be managed by vCenter, so a new vSphere Distributed s...
VMM integrationHyperflexvCenterLLDP - Question #142ACI Management
Refer to the exhibit. A customer must back up the current Cisco ACl configuration securely to the remote location using encryption and authentication. The backup job must run once...
configuration backupsecure protocolsSCPdata encryption - Question #143ACI Packet Forwarding
What is MP-BGP used for in Cisco ACl fabric?
MP-BGPVPNv4 AFL3Out routesspine routing - Question #144ACI Management
An engineer must securely export Cisco APIC configuration snapshots to a secure, offsite location. The exported configuration must be transferred using an encrypted tunnel and enco...
configuration exportsecure transferencrypted tunnelplatform-agnostic format - Question #145ACI Management
A Cisco APIC is configured with RADIUS authentication as the default. The network administrator must ensure that users can access the APIC GUI with a local account if the RADIUS se...
APIC authenticationRADIUSlocal account fallbackAAA configuration - Question #146ACI Management
A network engineer must allow secure access to the Cisco ACI out-of-band (OOB) management only from external subnets 10.0.0.0/24 and 192.168.20.0/25. Which configuration set accomp...
OOB managementaccess controlmanagement tenantcontracts - Question #147ACI Management and Operations
Refer to the exhibit A Cisco ACI fabric is using out-of-band management connectivity. The APIC must access a routable host with an IP address of 192.168.11.2. Which action accompli...
out-of-band managementin-band managementAPIC connectivitymanagement IP - Question #148ACI Fabric Infrastructure
A bridge domain for an EPC called "Web Servers" must be created in the Cisco APIC. The configuration must meet these requirements: - Only traffic to known Mac addresses must be all...
bridge domainL2 unknown unicasthardware proxyendpoint retention - Question #149ACI Management and Operations
The company's Cisco ACI fabric hosts multiple customer tenants. To meet a service level agreement, the company is constantly monitoring the Cisco ACI environment. Syslog is one of...
syslogmonitoringfabric policyinfra tenant - Question #150ACI Integrations
A Cisco ACI is integrated with a VMware vSphere environment. The port groups must be created automatically in vSphere and propagated to hypervisors when created in the ACI environm...
VMM integrationVMware vSphereport group creationEPG association - Question #151ACI Fabric Infrastructure
An engineer is troubleshooting fabric discovery in a newly deployed Cisco ACI fabric and analyzes this output: Which ACI fabric address is assigned to interface lo1023?
fabric discoveryfabric addressingloopback interfacetunnel endpoint - Question #152External Network Connectivity
An ACI engineer is implementing a Layer 3 out inside the Cisco ACI fabric that must meet these requirements: - The data center core switch must be connected to one of the leaf swit...
L3OutOSPF802.1Q tagginglink-state routing - Question #153External Network Connectivity
An engineer must advertise a bridge domain subnet out of the ACI fabric to an OSPF neighbor. Which two configuration steps are required? (Choose two.)
bridge domain subnetL3Out exportadvertised externallyroute control - Question #154ACI Management
A network administrator configures AAA inside the Cisco ACI fabric. The authentication goes through the local users if the TACACS+ server is not reachable. If the Cisco APIC is out...
AAATACACS+local usersfallback domain - Question #155ACI Fabric Infrastructure
A Cisco ACI environment consists of multiple silent hosts that are often relocated between leaf switches. When the host is relocated, the bridge domain takes more than a few second...
endpoint learningsilent hostsARP floodingbridge domain optimization - Question #156External Network Connectivity
Refer to the exhibit. An engineer configures an L3Out but receives the error presented. Which action clears the fault?
L3Out troubleshootingQoS policyfault managementerror resolution - Question #157ACI Management and Operations
A customer must upgrade the Cisco ACI fabric to use a feature from the new code release. However, there is no direct path from the current release to the desired one. Based on the...
fabric upgradeAPIC upgradeintermediate releaseupgrade path - Question #158ACI Fabric Infrastructure
Refer to the exhibit. Which two configuration steps are completed before this output is generated? (Choose two.)
MCPfabric discoveryloop indicationinterface policy - Question #160ACI Integrations
A network engineer configures the Cisco ACI fabric to connect to vCenter with these requirements: - Port groups must be automatically created on the distributed virtual switch. - P...
VMM integrationvCenterdynamic VLAN poolCAM optimization - Question #161ACI Fabric Infrastructure
Refer to the exhibit. A Cisco ACI environment hosts two e-commerce applications. The default contract from a common tenant between different application tiers is used, and the appl...
ACI contractscontract scopeEPG communicationApplication Profile