Refer to the exhibit. An engineer must implement the inter-tenant service graph. Which set of actions must be taken to accomplish this goal?

• Define the contract in the provider tenant and export it to the consumer tenant.• Define the L4-L7 device, service graph template, and ASA bridge domains in the provider tenant.

• Define the contract in the provider tenant and export it to the consumer tenant.• Define the L4-L7 device and service graph template in the provider tenant and the ASA bridge domains in the consumer tenant

• Define the contract in the provider tenant and export it to the provider tenant.• Define the L4-L7 device and service graph template in the provider tenant and the ASA bridge domains in the consumer tenant.

• Define the contract in the provider tenant and export it to the provider tenant.• Define the L4-L7 device, service graph template, and ASA bridge domains in the consumer tenant.

When the subnet is configured on a bridge domain, on which physical devices is the gateway IP address configured?

only leaf switches where the bridge domain of the tenant is present

all leaf switches and all spine nodes

only spine switches where the bridge domain of the tenant is present

only leaf switches where the bridge domain of the tenant is present

all border leaf nodes where the bridge domain of the tenant is present

Refer to the exhibit. A systems engineer is implementing the Cisco ACI fabric. However, the Server2 information is missing from the Leaf 101 endpoint table and the COOP database of the spine. The requirement is for the bridge domain configuration to enforce the ACI fabric to forward the unicast packets generated by Server1 destined to Server2. Which action must be taken to meet these requirements?

Set L2 Unknown Unicast to Flood

Set IP Data-Plane Learning to No

An engineer must allow multiple external networks to communicate with internal ACI subnets.Which action should the engineer take to assign the prefix to the class ID of the external Endpoint Group?

Configure subnets with the External Subnets for External EPG flag enabled.

Enable the Export Route Control Subnet for the External Endpoint Group flag.

Enable an L30ut with Shared Route Control Subnet.

Configure subnets with the External Subnets for External EPG flag enabled.

Configure subnets with the Import Route Control Subnet flag enabled.

An engineer must ensure that Cisco ACI flushes the appropriate endpoints when a topology change notification message is received in an MST domain. Which three steps are required to accomplish this goal? (Choose three.)

Enable the BPDU interface controls under the spanning tree interface policy.

Configure a new STP interface policy.

Associate the STP interface policy to the appropriate interface policy group.

Enable the BPDU interface controls under the spanning tree interface policy.

Configure a new STP interface policy.

Bind the spanning tree policy to the switch policy group.

Associate the STP interface policy to the appropriate interface policy group.

Create a new region policy under the spanning tree policy.

Map VLAN range to MAT instance number.

Refer to the exhibit. An engineer wants to initiate an ICMP ping from Server1 to Server2. The requirement is for the BD1 to enforce ICMP replies that follow the expected path. The packets must be prevented from taking the direct path from Leaf1 to Server1.Which action must be taken on BD1 to meet these requirements?

Set L2 Unknown Unicast to Hardware Proxy.

Set L2 Unknown Unicast to Flood.

Set L2 Unknown Unicast to Hardware Proxy.

Which endpoint learning operation is completed on the ingress leaf switch when traffic is received from a Layer 3 Out?

The source MAC address of the traffic is learned as a remote endpoint.

The source MAC address of the traffic is learned as a local endpoint.

The source MAC address of the traffic is learned as a remote endpoint.

The source IP address of the traffic is learned as a remote endpoint.

The source IP address of the traffic is learned as a local endpoint.

An engineer must configure a group of servers with a contract that uses TCP port 80. The EGP that contains the web servers requires an external Layer 3 cloud to initiate communication. Which action must be taken to meet these requirements?

Configure the EGP as a provider and L3 out as consumer of the contract.

Configure OSPF to exchange routes between the L3 out and EGP.

Configure a taboo contract and apply it to the EPG.

Configure the EPG as a consumer and L3 out as a provider of the contract.

The unicast routing feature is enabled on the bridge domain. Which two conditions enable the Cisco ACI leaf to learn a source IP as a local endpoint? (Choose two.)

IP traffic routed through an SVI.

Through ARP received on an SVI.

Through Ethernet traffic received in a bridge domain.

IP traffic routed through an SVI.

Through VXLAN traffic received on the uplink.

IP traffic routed through a Layer 3 Out.

Through ARP received on an SVI.

When does the Cisco ACI leaf learn a source IP or MAC as a remote endpoint?

When VXLAN traffic arrives on a leaf fabric port from the spine and inner source IP is in the bridge domain subnets range.

When VXLAN traffic arrives on a leaf fabric port from the spine and outer source IP is in the Layer 3 Out EPG subnet range.

When VXLAN traffic arrives on a leaf fabric port from the spine and outer source IP is in the bridge domain subnets range.

When VXLAN traffic arrives on a leaf fabric port from the spine and inner source IP is in the Layer 3 Out EPG subnet range.

When VXLAN traffic arrives on a leaf fabric port from the spine and inner source IP is in the bridge domain subnets range.

In-band is currently configured and used to manage the Cisco ACI fabric. The requirement is for leaf and spine switches to use out-of-band management for NTP protocol. Which action accomplishes this goal?

Select Out-of-Band as Management EPG in the default DateTimePolicy.

Create an Override Policy with NTP Out-of-Band for leaf and spine switches.

Change the interface used for APIC external connectivity to ooband.

Add a new filter to the utilized Out-of-Band-Contract to allow NTP protocol.

An administrator must migrate the vSphere Management VMkernel of all ESXi hosts in the production cluster from the standard default virtual switch to a VDS that is integrated with APIC in a VMM domain. Which action must be completed in this scenario?

The Management VMkernel EPG resolution must be set to Pre-Provosion.

The administrator must create an in-band VMM Management EPG before performing the migration.

The administrator must set the Management VMkernel BD resolution immediacy to On-Demand.

The VMkernel Management BD must be located under the Management Tenant.

A customer implements RBAC on a Cisco APIC using a Windows RADIUS server that is configured with network control policies. The APIC is as follows:Tenant = TenantXSecurity Domain = Tenantx-SDUser = XThe customer requires User X to have access to TenantX only, without any extra privilege in the Cisco ACI fabric domain. Which Cisco AV pair must be implemented on the RADIUS server to meet these requirement?

shell:domains = TenantX-SD/tenant-admin/,common//read-all

shell:domains = TenantX-SD/fabric-admin/,common//read-all

shell:domains = TenantX-SD/tenant-admin

shell:domains = TenantX-SD/tenant-ext-admin/,common//read-all

shell:domains = TenantX-SD/tenant-admin/,common//read-all

An engineer must create a backup of the Cisco ACI fabric for disaster recovery purposes. The backup must be transferred over a secure and encrypted transport. The backup file must contain all user and password related information. The engineer also wants to process and confirm the backup file validity by using a Python script. This requires the data structure to have a format similar to a Python dictionary. Which configuration set must be used to meet these requirements?

Under the Create Remote location settings, select Protocol: SCPUnder the Export policy, select- Format: JSON- Modify Global AES Encryption Settings: Enabled

Under the Create Remote location settings, select Protocol: FTPUnder the Export policy, select- Format: XML- Modify Global AES Encryption Settings: Enabled

Under the Create Remote location settings, select Protocol: FTPUnder the Export policy, select- Format: XML- Modify Global AES Encryption Settings: Disabled

Under the Create Remote location settings, select Protocol: SCPUnder the Export policy, select- Format: JSON- Modify Global AES Encryption Settings: Disabled

Under the Create Remote location settings, select Protocol: SCPUnder the Export policy, select- Format: JSON- Modify Global AES Encryption Settings: Enabled

The Application team reports that a previously existing port group has disappeared from vCenter. An engineer confirms that the VM domain association for the EPG is no longer present. Which action determines which user is responsible for the change?

Evaluate the potential faults that are raised for that EPG.

Check the EPG audit logs for the 'deletion' action and compare the affected object and user.

Evaluate the potential faults that are raised for that EPG.

Examine the health score and drill down to an object that affects the EPG combined score.

Inspect the server logs to see who was logging in to the APIC during the last few hours.

An application team tells the Cisco ACI network administrator that it wants to monitor the statistics of the unicast and BUM traffic that are seen in a certain EPG. Which statement describes the collection statistics?

The collection of statistics is enabled on the EPG level by enabling the statistics for unicast and BUM traffic.

All EPGs in the Cisco ACI tenant object must be enabled for statistics to be collected.

Cisco ACI does not capture statistics at the EPG level. Only statistics that pass through ACI contracts can be monitored.

EPG statistics can be collected only for VMM domains. If a physical domain exists, statistics are not collected.

The collection of statistics is enabled on the EPG level by enabling the statistics for unicast and BUM traffic.

What is the effect of enabling the disable Remote EP learn feature?

It disables remote IP endpoint learning on all leaf nodes in the fabric.

It disables remote IP endpoint learning on leaf switches that do not have L3Outs.

It limits learning of compute leaf endpoints on border leaves.

It prevents border leaf switches from receiving routes through peering with external routers.

What are two descriptions of ACI multi-site? (Choose two.)

The Inter-Site network routers should run OSPF to establish peering with the spines.

ACI Multi-Site is a solution that supports a dedicated APIC cluster per site

The Inter-Site network routers should run OSPF to establish peering with the spines.

The Multi-Site orchestrator must be directly attached to one ACI leaf.

Routers in the inter-Site network must run OSPF. DHCP relay, and MP-BGP

ACI Multi-Site is a solution that allows one APIC cluster to manage multiple ACI sites

ACI Multi-Site is a solution that supports a dedicated APIC cluster per site

What is MP-BGP used for in Cisco ACl fabric?

MP-BGP VPNv4 AF is used to propagate L3Out routes that are received from a border leaf to the fabric.

MP-BGP VPNv4 AF is used between spines in an ACI Multi-Pod fabric to propagate the endpoint

MP-BGP VPNv4 AF is used as protocol on L3Out between a border leaf and an external router

MP-BGP Layer 2 VPN EVPN AF is used to propagate L30ut routes that are received from a border leaf.

A Cisco APIC is configured with RADIUS authentication as the default The network administrator must ensure that users can access the APIC GUI with a local account if the RADIUS server is unreachable. Which action must be taken to accomplish this goal?

Reference the local realm in the fallback domain

Create an additional login domain that references local accounts

Enable the fallback check with the default authentication domain

Associate console authentication with the "RADIUS" realm.

Reference the local realm in the fallback domain

Refer to the exhibit A Cisco ACI fabric is using out-of-band management connectivity The APIC must access a routable host with an IP address of 192 168 11 2 Which action accomplishes this goal?

Remove the in-band management address from the APIC.

Change the switch APIC Connectivity Preference to in-band management

Remove the in-band management address from the APIC.

Add a Fabric Access Policy to allow management connections.

Modify the Pod Profile to use the default Management Access Policy

A bridge domain for an EPC called “Web Servers” must be created in the Cisco APIC. The configuration must meet these requirements:Only traffic to known Mac addresses must be allowed to reduce noice.The multicast traffic must be limited to the ports that are participating in multicast routing.The endpoints within the bridge domain must be kept in the endpoint table for 20 minultes without any updates.Which set of steps configures the bridge domain that satisfies the requirements?

Set L2 Unknown Unicast to Hardware Proxy.Configure L3 Unknown Multicast Flooding to Optimized Flood.Create an Endpoint Retention Policy with a Local Endpoint Aging interval of 1200 seconds.

Select the ARP Flooding checkbox.Create an Endpoint Retention Policy with a Remote Endpoint Aging Interval of 20 minutes.Set L3 Unknown Multicast Flooding to Optimized Flooding

Set L2 Unknown Unicast to Hardware Proxy.Configure L3 Unknown Multicast Flooding to Optimized Flood.Create an Endpoint Retention Policy with a Local Endpoint Aging interval of 1200 seconds.

Switch L2 Unknown Unicast to Flood.Select the default Endpoint Retention Policy and set the Local Endpoint Aging to 20 minutes.Set Multicast Destination Flooding to Flood in Encapsulation.

Multicast Destination Flooding should be set to Flood in BD.Set L3 Unknown Multicast Flooding to Flood.Select the default Endpoint Retention Policy with a Local Endpoint Aging Interval of 1200 seconds.

A Cisco ACI is integrated with a VMware vSphere environment. The port groups must be created automatically in vSphere and propagated to hypervisors when created in the ACI environment.Which action accomplishes this goal?

Associate the VMM domain with the EPGs that must be available in vCenter.

Assign the uplinks of the ESXi hosts to the vDS that the APIC created.

Configure contracts for the EPGs that are required on the ESXi hosts.

Create the port groups on the vCenter that reflect the EPG names in the APIC.

Cisco 300-620 Practice Test 3 - Free Online Exam Prep & Questions

Question 1 / 40

A network engineer must design a method to allow the Cisco ACI to redirect traffic to the firewalls.

Only traffic that matches specific L4-L7 policy rules should be redirected. The load must be distributed across multiple firewalls to scale the performance horizontally. Which action must be taken to meet these requirements?

Configure ACI Service Graph with Unidirectional PBR.

Implement ACI Service Graph with GIPo.

Implement ACI Service Graph Two Nodes with GIPo.

Configure ACI Service Graph with Symmetric PBR.

Comment (0)

Cisco 300-620 Practice Test 3

Question

Cisco 300-620 Practice Tests

Practice Tests