300-620 Exam Questions
377 real 300-620 exam questions with expert-verified answers and explanations. Page 6 of 8.
- Question #263ACI Management and Operations
An engineer must implement user activity tracking in the Cisco ACI with a solution that meets these requirements: - All user activity that is related to the Cisco ACI infrastructur...
Syslogmonitoring policiesaudit logsSIEM integration - Question #265External Network Connectivity
Refer to the exhibit. An engineer must migrate workloads from the brownfield network to the Cisco ACI fabric. The VLAN 10 default gateway remains in the router located in the brown...
L2Outbrownfield integrationARP floodingL2 unknown unicast - Question #266ACI Fabric Infrastructure
Which protocol is used in the Cisco ACI fabric for automatic discovery?
fabric discoveryLLDP - Question #267Integrations
A Cisco ACI fabric is integrated with a Cisco ASA firewall using a service graph under the tenant called Operations. The fabric must permit the firewall used on tenant Operations t...
service graphsmulti-tenancyL4-L7 deviceresource sharing - Question #268External Network Connectivity
Refer to the exhibit. An engineer connects a Cisco ACI fabric to two different Cisco Nexus 9000 Series Switches. The fabric must be configured to ensure a loop-free topology and N9...
external connectivityloop preventionMCPSTP - Question #269External Network Connectivity
An engineer configures an L3Out between BLeaf1 and Core1. A Cisco Nexus 9000 Series Switch runs in NX-OS mode, and the two devices must peer using OSPF. The devices in the network...
L3OutOSPFrouting protocolsexternal routing - Question #270External Network Connectivity
Refer to the exhibit. The default route is not present in the routing tables of the Cisco ACI leaf switches. All static and direct routes are currently being redistributed and adve...
L3OutBGPdefault route advertisementroute leak policy - Question #271ACI Integrations
An engineer associates EPG-A with a VMM domain and sets the Deployment and Resolution preferences to Immediate. The host that will generate endpoints for EPG-A is attached to Leaf-...
VMM domainendpoint attachmentCDPLLDP - Question #272ACI Management
A Cisco APIC is configured to authenticate users by using RADIUS by default. The network administrator must ensure that the users can access the APIC GUI with a local account if th...
APIC authenticationRADIUSlocal accountsfallback login - Question #273ACI Fabric Infrastructure
An engineer configures port-12 on Leaf-101 and Leaf-102 to connect to a new server called SVR- 12. This server will belong to a new EPG-12 and needs to use Encapsulation VLAN-12. A...
EPGVLAN encapsulationport local VLAN scopebare metal server - Question #274ACI Packet Forwarding
An engineer must configure a Cisco ACI bridge domain to prevent flooding from unknown unicast frames. Which action must be configured in Cisco ACI to accomplish this goal?
bridge domainunknown unicasthardware proxyoptimized mode - Question #275External Network Connectivity
Refer to the exhibit. A customer is deploying a WAN with these requirements: - Routers 1 and 2 must receive only routes 192.168.11.0/24 and 192.168.21.0/24 from the Cisco ACI fabri...
L3Outsubnet advertisementVRFexternal routing - Question #276ACI Management and Operations
An engineer plans a Cisco ACI firmware upgrade. The ACI fabric consists of three Cisco APIC controllers, two spine switches, and four leaf switches. Two leaf switches have 1-Gb cop...
firmware upgradeAPIC upgrademinimal disruption - Question #277ACI Integrations
A Cisco ACI fabric is integrated with VMware VDS. The fabric must apply a security policy to check the integrity of traffic out of the network adapter. Which action must be taken t...
VMM integrationVMware VDSsecurity policyforged transmits - Question #278ACI Packet Forwarding
How does Cisco ACI manage the old endpoint information on the original leaf switch after an endpoint moves between two Cisco ACI leaf switches?
endpoint mobilityCOOPbounce entryendpoint learning - Question #279ACI Management
An engineer discovered an outage on the mgmt0 port of Leaf113 and Leaf114. Both leaf switches were recently registered in the fabric and have health scores of 100. The engineer dis...
out-of-band managementmgmt0EPGnode management - Question #280ACI Packet Forwarding
A Cisco ACI leaf switch learns the source IP address of a packet that enters the front panel port of the switch. Which bridge domain setting is used?
IP learningbridge domainunicast routing - Question #281External Network Connectivity
Refer to the exhibit. An engineer is deploying a Cisco ACI fabric with an L2Out to external switches. The Cisco ACI fabric has just been deployed and follows the default forwarding...
L2Outloop preventionSTPexternal connectivity - Question #282ACI Fabric Infrastructure
Refer to the exhibit. An engineer must migrate the web servers and backup servers from the legacy network to a Cisco ACI environment in the corresponding EPGs. The requirement is t...
EPG communicationcontract-less communicationpolicy enforcementBridge Domain - Question #283ACI Packet Forwarding
When Layer 3 routed traffic is destined to a Cisco ACI fabric, which mechanism does ACI use to detect silent hosts?
silent hostARP gleaningL3 forwarding - Question #284External Network Connectivity
An engineer must attach an ESXi host to the Cisco ACI fabric. The host is connected to Leaf 1 and has its gateway IP address 10.10.10.254/24 configured inside the ACI fabric. A new...
gateway migrationunicast routingL3Outfirewall integration - Question #285ACI Integrations
A VM called App_1 belongs to VLAN 10. VM App_2 belongs to VLAN 20. Pool_1 contains VLAN 10 and Pool_2 contains VLAN 20. Currently, AP_1 is located on Server 1. The Cisco ACI fabric...
VMM integrationAAEPVLAN poolsinterface policy group - Question #286ACI Packet Forwarding
A Cisco ACI fabric with an ARP packet must ensure detection of silent hosts with an ARP packet. The current bridge domain is configured with hardware proxy and unicast routing. Whi...
silent hostARP floodingBridge Domainhardware proxy - Question #287ACI Management
An engineer is implementing an out-of-band (OOB) management access for the Cisco ACI fabric. The secure access must meet these requirements: - Only GUI and secure shell must be all...
OOB managementmanagement accesscontractsfilters - Question #288ACI Management and Operations
A Cisco ACI fabric is integrated with a VMware environment. The engineer must back up the current configuration of the fabric and restore the vCenter password when the configuratio...
configuration backuprestorepassword encryptionVMM integration - Question #289ACI Integrations
An engineer must configure Cisco ACI for VMM integration to VMware vCenter. Which two attributes must be configured on the Cisco APIC to achieve this goal? (Choose two.)
VMM integrationVMware vCentervirtual switchlogon credentials - Question #290ACI Fabric Infrastructure
Which tunnel endpoint is shown in this output from interface Io0?
tunnel endpointVXLANfabric forwardinginterface Io0 - Question #291Multi-Pod and Multi-Site
Refer to the exhibit. A four-node APIC cluster is deployed across two data centers. What happens to the database shards when DC1 with APIC1 and APIC2 fail?
APIC clusterdatabase shardingquorumMulti-Podhigh availability - Question #292Multi-Pod and Multi-Site
A Cisco ACI fabric must send a packet between two pods in a Cisco ACI Multi-Pod topology where ARP flooding is disabled within the bridge domain. How does a Cisco ACI spine switch...
Multi-PodARP handlingARP gleaningIPN - Question #293ACI Packet Forwarding
An endpoint called EP1 is connected to Cisco ACI compute leaf1. The engineer must replace EP1 with EP2 on the same leaf switch. Which set of actions forces all remote leaves to del...
endpoint learningendpoint retentionL2 Unknown UnicastBridge Domain - Question #294ACI Management and Operations
Refer to the exhibit. A network engineer must improve the configuration backup process and the configuration restore process. The current ACI solution is integrated with VMMs and t...
configuration backuprestorepassword encryptionVMM integration - Question #295Multi-Pod and Multi-Site
Which Cisco ACI feature allows the encryption of communication over TEP addresses connecting sites via the intersite network in a Cisco Multi-Site deployment?
Multi-SiteencryptionCloudSecintersite network - Question #296ACI Integrations
A Cisco ACI environment is configured to integrate with a vCenter environment using the VMM domain name west_coast_VMM. Within the ACI environment, only tenant west_coast has EPGs...
VMM integrationVMware vCenterVDStroubleshooting - Question #297ACI Management
An engineer must configure SNMP inside a Cisco ACI fabric. The engineer has created an SNMP Policy, called SNMP-policy and an SNMP Monitoring Group called SNMP-group1 that contains...
SNMPOOB managementmanagement accesscontracts - Question #298ACI Management and Operations
A Cisco ACI fabric must back up the current configuration to a remote FTP server. Which set of actions automatically triggers the created policy?
configuration backupexport policyautomationremote backup - Question #299ACI Fabric Infrastructure
A Cisco ACI fabric has 10 standalone leaf switches. The requirement is for the APIC to select the odd switches as a VPC group and select even switches as another VPC group automati...
VPCVPC protectionleaf switchautomatic grouping - Question #300ACI Fabric Infrastructure
Which component provides Cisco ACI fabric with Layer 2 and Layer 3 connectivity across pods and physical locations?
VXLANL2 connectivityL3 connectivityoverlayMulti-Pod - Question #301External Network Connectivity
An engineer configures an L3Out in VRF-1 that was configured for Import Route Control Enforcement. The L3Out uses OSPF to peer with a core switch. The L3Out has one external EPG, a...
L3OutRoute controlOSPFExternal EPG - Question #302ACI Management and Operations
An engineer resolves an underlying condition of a fault but notices that the fault was not deleted from the Faults view. Which two actions must be taken to remove the fault? (Choos...
Fault managementACI operationsTroubleshootingFault lifecycle - Question #303ACI Management
An engineer configures SNMP for an ACI fabric and created an SNMP Monitoring Destination Group called snmp_dgroup1. Snmp_dgroup1 is configured with the server hostname and communit...
SNMPACI managementOut-of-band managementManagement contracts - Question #304ACI Integrations
A network engineer configured a Cisco ACI fabric as follows: - An EPG called EPG-A is created and associated with a VMM domain called North. - The EPG-A is associated with BD-A and...
VMM integrationEPGPort groupVMware DVS - Question #305ACI Fabric Infrastructure
A network engineer configures a Cisco ACI fabric with this configuration: - Endpoint-1 with an IP address 10.1.0.1/24 is attached to Leaf-101. - Endpoint-2 with an IP address 10.1....
EPGsContractsEndpoint communicationBridge Domain - Question #306ACI Fabric Infrastructure
An engineer configures two Cisco ACI leaf switches called Leaf1 and Leaf2 as VPC peers. The server called S1 is connected to Leaf1 with a port channel interface. How is S1 learned...
VPCEndpoint learningPort channelACI fabric - Question #307ACI Fabric Infrastructure
Which switch type is discovered first in the Cisco ACI fabric discovery process?
Fabric discoveryACI fabricLeaf switch - Question #308ACI Integrations
An engineer plans to integrate a Cisco ACI fabric with VMware vCenter DVS. Which set of actions must the engineer take to ensure a successful integration?
VMM integrationVMware vCenterDVSACI integration - Question #309ACI Fabric Infrastructure
How does Cisco ACI detect the IP address of a silent host that moved from one location to another without notifying a Cisco ACI leaf?
Endpoint learningSilent hostARPBridge Domain - Question #310ACI Integrations
Refer to the exhibit. An engineer configures a Layer 4 to Layer 7 device object. The device is a virtual firewall with a single network adapter and it must be deployed in routed mo...
L4-L7 service integrationService graphVirtual firewallRouted mode - Question #311External Network Connectivity
Refer to the exhibit. The Cisco ACI fabric is built with L2Out to the N9K1 and N9K2 switches. The switches run the RSTP protocol. The requirement is for the Cisco ACI fabric to det...
L2OutSTPLoop detectionExternal network connectivity - Question #312ACI Fabric Infrastructure
Which role do interfaces Ethernet 1/49-50 have in this output?
ACI fabricLeaf switchFabric portsUplink - Question #313ACI Management
Refer to the exhibit. An engineer must set a policy to reuse the old password when changed after two days. Which action set accomplishes this goal?
Password policySecurityACI management