300-620 Exam Questions

Which endpoint learning operation is completed on the ingress leaf switch when traffic is received from a Layer 3 Out?

An engineer must adjust the time on a Cisco ACI fabric. The implementation must use a single external time server and the APIC management interfaces for the communication. Which ac...

An SNMP monitoring service is added to a Cisco ACI fabric. The solution must meet these requirements: - The notification must be generated when significant events occur during hard...

In a Cisco ACI fabric, an endpoint moves between two leaf switches during a virtual machine migration. Which action does Cisco ACI take to minimize the impact to traffic during thi...

An engineer must configure an L3Out to advertise a single summarized address for all Cisco ACI host routes. The summarized address must be advertised to the core switches that are...

An engineer must add new servers to a Cisco ACI cluster and configure ports to accept the new servers. The existing servers are dual-homed to Leaf101 and Leaf102 using ports 1-3 an...

Refer to the exhibit. A Cisco APIC raises this fault when connectivity for EPG-3 is configured. Which action clears the fault?

A network engineer implements an L3Out inside the Cisco ACI fabric. The engineer plans to connect a Cisco ACI leaf switch to a switch outside of the Cisco ACI fabric to exchange ro...

Which protocol is used in a Multi-Pod topology to synchronize reachability information across pods?

Which two external entities are referenced by an AEP? (Choose two.)

Refer to the exhibit. All nodes in the Cisco ACI fabric have been statically assigned out-of-band management IP addresses in the 10.100.180.0/24 range. An engineer is attempting to...

A recent set of changes by a Cisco ACI administrator corrupted the APIC cluster. The ACI engineer must restore the configuration of the previous day. The APIC nodes in the cluster...

Refer to the exhibit. A service provider hosts applications for multiple organizations. Each organization owns a separate tenant and syslog server. The events from each tenant must...

An engineer needs to avoid loops in the ACI network and needs an ACI leaf switch to error- disable an interface if the interface receives an ACI-generated packet. Which action meet...

Which two actions does the Cisco ACI take when a bridge domain is configured with a subnet and unicast routing is enabled? (Choose two.)

An engineer must configure a new local user inside a Cisco ACI. The new user must meet these criteria: - Must be provided with complete read-only access to the tenant. - Must be pe...

Refer to the exhibit. A client is configuring a new Cisco ACI fabric. All VLANs will be extended during the migration phase using the VPC connections on leaf switches 3, 4 and leaf...

A Cisco ACI fabric is connected to an external Cisco Catalyst switch. Which set of actions must be taken for Cisco ACI leaf and spine switches to be managed from the management por...

A Cisco ACI fabric contains a tenant called Prod. User_1 must have written access to tenant Prod and full access to the fabric access policy. Which set of actions must be taken to...

For which type of endpoint entry does a Cisco ACI leaf switch keep the original TEP source address instead of rewriting the outer source IP address to its TEP address?

Refer to the exhibit. An engineer is implementing a BPDU filter on external switch interfaces that face the Cisco ACI fabric to prevent excessive TCNs from impacting the fabric. Wh...

Refer to the exhibit. The VMs called VM1 and VM2 are deployed on the ESXi Server in a Cisco ACI environment. VM1 has MAC address A and an IP address 192.168.1.1/24, and VM2 has MAC...

A Cisco ACI leaf switch receives an ARP request packet from a host that is attached to a bridge domain with unicast routing enabled. Which information does the leaf switch learn?

Refer to the exhibit. An engineer is migrating legacy servers into the Cisco ACI environment. The requirement is to ensure that all endpoints and MAC addresses are learned properly...

Refer to the exhibit. A Cisco ACI fabric is created with L2Out to N7K1 and N7K2 switches. The switches are running MSTP with native VLAN 10. The N7K1 and N7K2 act as the root bridg...

Refer to the exhibit. An engineer configures a static port binding for EPG-3. These Cisco ACI objects are already configured: - The EPG-3 is associated with a physical domain. - Th...

Refer to the exhibit. A Cisco ACI fabric uses L3Out to connect with R1. The 192.168.1.0/24 subnet is received over the physical interface Eth1/1 of Leaf1 and Leaf2. Which set of ac...

Refer to the exhibit. An engineer applies an OSPF L3Out between a Cisco ACI fabric and an external router. Router1 must receive a default route from the Cisco ACI via OSPF. Which a...

What is the result of selecting the On Demand attribute in the Deploy Immediacy feature during VMM domain association to an EPG?

An engineer must configure a service graph for the policy-based redirect to redirect traffic to a transparent firewall. The policy must be vendor-agnostic to support any firewall a...

Refer to the exhibit. A network engineer deploys Cisco APIC for the first time. Which connectivity type must be used to connect a Cisco ACI APIC node to connect to an out-of-band s...

A network administrator is configuring a Cisco ACI fabric to automatically take a snapshot of all the configurations once per week. The snapshot must be saved on a server that is l...

A Cisco ACI fabric is experiencing packet loss that originates from a bare metal server. The engineer must configure the syslog service to meet these requirements: - The ACI syslog...

All nodes in a Cisco ACI fabric are raising NTP faults. The Date and Time policy is configured with the IP address of two NTP servers and both servers are reachable via the out-of-...

Refer to the exhibit. A syslog service was configured to capture different faults and events from a Cisco ACI tenant. The Cisco ACI fabric is missing any OOB capability. After some...

A network engineer must optimize a Cisco ACI multi-pod deployment. Both pods are using the same pod policy group. The customer requirement is to avoid inter-pod traffic loss in cas...

An engineer wants to configure Cisco ACI switches to use authenticated ZMQ when communicating with the proxy spine. Which configuration allows MD5 ZMQ messages only?

Refer to the exhibit. A tenant is configured with a single L3Out and a single-homed link to the core router called Core-1. An engineer must add a second link to the L3Out that conn...

Refer to the exhibit. An engineer associated EPG-1 with a VMM domain called VMware/west. The VLAN pool west-VLP is configured in VMware/west, and the VMware/west is associated with...

Refer to the exhibit. A Cisco ACI fabric has these configurations: - VPC exists between Leaf2 and Leaf3. - A switch profile called SW_Prof exists. - A switch selector called SW_Sel...

Refer to the exhibit. An engineer plans to upgrade the Cisco ACI fabric. Leaf1 and Leaf2 are deployed in a VPC. The fabric is peering with R1 using BGP protocol. Which two actions...

Refer to the exhibit. A load balancer is connected to the Cisco ACI fabric using a single interface. The load balancer is performing source and destination NAT. A service graph is...

Refer to the exhibit. Cisco ACI fabric is connected to a Cisco Catalyst 3850 Series Switch using EBGP. Server 2 is unable to communicate with Server 1. Leaf-2 fails to learn the ex...

An engineer created a monitoring policy called Test in a Cisco ACI fabric and had to change the severity level of the monitored object Call home source. Which set of actions preven...

What is the result of the pcEnPref flag configured on the epg-App_EPG?

An engineer must integrate a Cisco ACI fabric with VMware and discover an ESXi host using LLDP. Two EPGs have been created and associated with the VMM domain. The engineer must con...

An engineer must monitor a Cisco ACI fabric with SNMP. The "permit any contract" attribute is not configured in the fabric. Which action must be taken to receive SNMP traps from Ci...

A network engineer is implementing a Layer 3 Out in the Cisco ACI fabric. The data center core switches must connect to a pair of leaf switches and exchange routes via a routing pr...

Refer to the exhibit. Endpoint-A must communicate with Endpoint-B, but Leaf-101 has not learned the location of Endpoint-B. Which step must Leaf-101 take before sending the data?

An engineer is configuring a new user account in Cisco ACI. The new user will be assigned the role of fabric administrator. The fabric has only one tenant, so the engineer associat...