An engineer must configure a Layer 3 connection to the WAN router. The hosts in production VRF must access WAN subnets. The engineer associates EPGs in the production VRF with the external routed domain. Which action completes the task?

Configure the Export Route Control Subnet scope for the external EPG.

Configure the External Subnets for the External EPG scope for the external EPG.

Configure the Import Route Control Subnet scope for the external EPG.

Configure the Shared Route Control Subnet scope for the external EPG.

Refer to the exhibit. Refer to the exhibit. A Cisco APIC raises an error when the EPG must accept endpoints from a VMM domain created. Which action clears the fault?

Expand the VLAN pool for the VMM domain.

Create a bridge domain for the VMM domain.

Associate the EPG with the VMM domain.

Associate the VLAN pool with the VMM domain.

A Cisco ACI endpoint group must have its gateway address migrated out of the ACI fabric. An engineer configures EPG-TEST with a static port binding and configures the encap VLAN with the required VLAN. Which configuration set must be used on the bridge domain to meet these requirements?

L2 Unknown Unicast: Hardware ProxyUnicast Routing: DisabledARP Flooding: Enabled

L2 Unknown Unicast: Hardware ProxyUnicast Routing: DisabledARP Flooding: Disabled

L2 Unknown Unicast: FloodUnicast Routing: DisabledARP Flooding: Enabled

L2 Unknown Unicast: FloodUnicast Routing: EnabledARP Flooding: Enabled

L2 Unknown Unicast: Hardware ProxyUnicast Routing: DisabledARP Flooding: Enabled

An organization deploys active-active data centers and active-standby firewalls in each data center.Which action should be taken in a Cisco ACI Multi-Pod to maintain traffic symmetry through the firewalls?

Disable service node Health Tracking.

Enable Pod ID Aware Redirection.

Enable Endpoint Dataplane Learning.

Refer to the exhibit. Refer to the exhibit. An engineer must allow IP mobility between Site1 and Site2 in a Cisco ACI Multi- Site orchestrator. The design must meet these requirements:A disaster recovery (DR) solution must exist between the sites that do not require vMotion support.The application must be started at a DR site without having to re-IP the application servers.The solution must avoid any broadcast storms between the sites.Which two actions meet these criteria? (Choose two.)

Define a unique bridge domain subnet per site.

Deploy a local EPG for Site1 and Site2.

Define a unique bridge domain subnet per site.

Configure STP between Cisco ACI fabrics.

Deploy a local EPG for Site1 and Site2.

Disable Inter-site BUM Traffic.

Refer to the exhibit. Refer to the exhibit. A company merges three of its departments: CORP, HR, and SERVICES, Currently, the connectivity between departments is achieved by using VRF route leaking. The requirement is to redesign the Cisco ACI networking architecture to communicate between EPGs and BDs from any tenant without configuring contracts or VRF route leaking. Which configuration meets these criteria?

Configure an enforced VRF in the user tenant and map all required EPGs to it.

Configure an unenforced VRF in the user tenant and map all required EPGs to it.

Implement an enforced VRF in the common tenant and map all required BDs to it.

Configure an enforced VRF in the user tenant and map all required EPGs to it.

Implement an unenforced VRF in the common tenant and map all required BDs to it.

What two actions should be taken to deploy a new Cisco ACI Multi-Pod setup? (Choose two.)

Increase interface MTU for all IPN routers to support VXLAN traffic.

Configure MP-BGP on IPN routers that face the Cisco ACI spines.

Configure anycast RP for the underlying multicast protocol

Configure the TEP pool of the new pod to be routable across the IPN.

Increase interface MTU for all IPN routers to support VXLAN traffic.

Refer to the exhibit. The external subnet and internal EPG1 must communicate with each other, and the L3Out traffic must leak into the VRF named "VF1". Which configuration set accomplishes these goals?A.

External Subnets for External EPGImport Route Control SubnetShared Route Control Subnet

External Subnets for External EPGShared Route Control SubnetShared Security Import Subnet

External Subnets for External EPGImport Route Control SubnetShared Route Control Subnet

Export Route Control SubnetShared Security Import SubnetAggregate Shared Routes

Export Route Control SubnetImport Route Control SubnetAggregate Shared Routes

Refer to the exhibit. VM1 and VM2 are in Cisco ACI POD1 and communication takes place. Which event is triggered when VM2 is live migrated from POD1 to POD2?

Leaf 201 creates a tunnel with leaf 102 because of the bounced traffic that is destined to VM2.

Leaf 102 installs a bounce entry for VM2 pointing to the PTEP address of leaf 201.

Leaf 201 creates a tunnel with leaf 102 because of the bounced traffic that is destined to VM2.

Spines from POD2 send an MP-BGP EVPN update to the leaves in POD1 about the new location of VM2.

An MP-BGP EVPN update is received by spines in POD1 announcing the reachability of VM2 via the proxy VTEP address of the spines in POD2.

An engineer configures a Cisco ACI Multi-Pod for disaster recovery. Which action should be taken for the new nodes to be discoverable by the existing Cisco APICs?

Configure IGMPv3 on the interfaces of IPN routers that face the Cisco ACI spine.

Enable subinterfaces with dot1q tagging on all links between the IPN routers.

Enable DHCP relay on all links that are connected to Cisco ACI spines on IPN devices.

Configure BGP as the underlay protocol in IPN.

Refer to the exhibit. Refer to the exhibit. The 0.0.0.0/0 is configured as a default static route on L3Out-1. Which action should be taken for the 0.0.0.0/0 prefix to advertise out on L3Out-2 OSPF?

Enable Aggregate Export Subnet.

Enable Export Route Control Subnet.

Enable Shared Security Import Subnet.

Enable Shared Route Control Subnet.

Enable Aggregate Export Subnet.

Refer to the exhibit. Refer to the exhibit. A company decided to decrease its routing footprint and remove RT-2 and RT-3 devices from its data center. Because of that, the exit point must be created from all the tenants by using the common tenant. Which two configuration tasks must be completed to meet these requirements? (Choose two.)

Move subnets from all the bridge domains to the EPG level and mark them with flag Shared between VRFs.

Change contract Ctr-3 scope to Global, consume it by all EPGs, and flag all subnets with flag Shared between VRFs.

Move subnets from all the bridge domains to the EPG level and mark them with flag Shared between VRFs.

Update the L3Out ExtEPG subnet in the common tenant with flag Shared Route Control Subnet and Aggregate Shared Routes.

Mark all subnets with flag Shared between VRFs and attach contract Ctr-3 as a provider to all the EPGs.

Change contract Ctr-3 scope to Global, consume it by all EPGs, and flag all subnets with flag Shared between VRFs.

Export contract Ctr-2 into the tenant TN-1 and attach it as a consumer to all the EPGs in the tenant TN-1.

A company must connect three Cisco ACI data centers by using Cisco ACI Multi-Site. An engineer must configure the Inter-Site Network (ISN) between the existing sites. Which two configuration steps must be taken to implement the ISN?(Choose two.)

Configure ISN site extension on Cisco routers in the network.

Configure encapsulation VLAN-4 between the routers and spine nodes.

Configure OSPF on subinterfaces on routers that are directly connected with spine nodes.

Configure ISN site extension on Cisco routers in the network.

Configure OSPF on all ISN routers.

Configure BIDIR-PIM on all ISN routers.

Configure encapsulation VLAN-4 between the routers and spine nodes.

Refer to the exhibit. Refer to the exhibit. How are the STP BPDUs forwarded over Cisco ACI fabric?

STP BPDUs that are generated by Switch2 are received by Switch1 and Switch3

Cisco ACI acts as the STP root for all three external switches.

STP BPDUs that are generated by Switch2 are received by Switch1 and Switch3

STP BPDUs that are generated by Switch1 are received only by Switch3.

Cisco ACI fabric drops all STP BPDUs that are generated by the external switches.

Refer to the exhibit. Refer to the exhibit. An administrator configures inter-VRF route leaking between Production:vrfprod and Non-Production:vrf-nonprod. However, the route in the Non-Production:vrf-nonprod VRF to the production tenant is missing. Which action resolves the VRF route leaking issue?

Enable the Shared between VRFs option for the BD subnet in the production VRF.

Change the contract scope to Global.

Enable the Shared between VRFs option for the BD subnet in the production VRF.

Enable the Shared between VRFs option for the EPG subnet in the non-production VRF.

Export the contract from provider to consumer tenant.

How is broadcast forwarded in Cisco ACI Multi-Pod after ARP flooding is enabled?

For the specific bridge domain, all spines forward the broadcast frames to IPN routers.

Ingress replication is used on the spines to forward broadcast frames in the IPN infrastructure.

Within a pod, the ingress leaf switch floods the broadcast frame on all fabric ports.

Broadcast frames are forwarded inside the pod and across the IPN using the multicast address that is associated to the bridge domain.

For the specific bridge domain, all spines forward the broadcast frames to IPN routers.

In a Cisco ACI Multi-Site fabric, the Inter-Site BUM Traffic Allow option is enabled in a specific stretched bridge domain. What is used to forward BUM traffic to all endpoints in the same broadcast domain?

egress replication on the source leaf switches

ingress replication on the spines in the source site

egress replication on the destination leaf switches

egress replication on the source leaf switches

ingress replication on the spines in the destination site

The engineer notices frequent MAC and IP address moves between different leaf switch ports. Which action prevents this problem from occurring?

Enable endpoint loop protection.

Disable IP bridge domain enforcement.

A customer is deploying a new application across two ACI pods that is sensitive to latency and jitter.The application sets the DSCP values of packets to AF31 and CS6, respectively. Which configuration changes must be made on the APIC to support the new application and prevent packets from being delayed or dropped between pods?

align the ACI QoS levels and IPN QoS policies

disable DSCP mapping on the IPN devices

disable DSCP translation policy

align the ACI QoS levels and IPN QoS policies

align the custom QoS policy on the EPG site in the customer tenant

What controls communication between EPGs?

Inter-EPG communication is controlled by IS-IS.

Inter-EPG communication is controlled by BGP.

Inter-EPG communication is controlled by contracts.

Inter-EPG communication is controlled by IS-IS.

Inter-EPG communication is controlled by VXLAN.

Where are STP BPDUSs flooded in Cisco ACI fabric?

in the access encapsulation VLAN part of different VLAN pools

in the VNID that is assigned to the FD VLAN

Refer to the exhibit. Refer to the exhibit. An engineer is configuring a production Multi-Site solution to provide connectivity from EPGs from a specific site to networks reachable through a remote site L3OUT. All required schema and template objects are already defined. Which additional configuration must be implemented in the Multi-Site Orchestrator to support the cross-site connectivity?

Add a new stretched external EPG to the existing L3OUT.

Configure a routable TEP pool for SITE1.

Enable CloudSec for intersite traffic encryption.

Add a new stretched external EPG to the existing L3OUT.

Implement a policy-based redirect using a service graph.

Refer to the exhibit. Which two configurations enable inter-VRF communication? (Choose two.)

Set the subnet scope to Shared Between VRFs.

Export the contract and import as a contract interface.

Set the subnet scope to Shared Between VRFs.

Enable Advertise Externally under the subnet scope.

Export the contract and import as a contract interface.

Change the contract scope to Tenant.

Change the subject scope to VRF.

What are two PBR characteristics of the Cisco ACI Active-Active Across Pods deployment mode in Cisco ACI Multi-Pod design? (Choose two.)

Traffic is dynamically redirected to the firewall that owns the connection.

The connection state is unsynchronized.

Traffic is dynamically redirected to the firewall that owns the connection.

Deployment occurs in transparent mode.

The connection state is unsynchronized.

Deployment occurs in go-to mode only.

This mode causes the traffic to flow asymmetrically.

Refer to the exhibit. Refer to the exhibit. What must be configured in the service graph to redirect HTTP traffic betweenthe EPG client and EPG server to go through the Cisco ASA firewall?

contract filter to allow ARP and HTTP.

precise filter to allow only HTTP traffic

contract filter to allow ARP and HTTP.

What is the advantage of implementing an active-active firewall cluster that is stretched across separate pods when anycast services are configured?

A different MAC/IP configuration combination is configurable for the firewall in each pod.

A cluster is capable to be deployed in transparent mode across pods.

A different MAC/IP configuration combination is configurable for the firewall in each pod.

Local traffic in a pod is load-balanced between the clustered firewalls.

The local pod anycast node is preferred by the local spines.

Refer to the exhibit. Refer to the exhibit. Server A is connected to the Cisco ACI fabric using two teamed interfaces. One interface in a team is configured as active and the other remains in standby mode. When a failover occurs and the standby interface becomes active, it uses its built-in MAC address to send traffic.Which bridge domain configuration must be applied to resolve the issue?

Set L2 Unknown Unicast to Flood.

Activate Limit IP Learning to Subnet.

Cisco ACI fabric contains a tenant called Prod. User_1 must have write access to tenant Prod and full access to the fabric access policy. Which set of actions must be taken to meet these requirements?

Associate User_1 to the security domain. Associate the security domain to tenant Prod. Create RBAC for the distinguished name of fabric access policy.

Associate User_1 to the fabric access policy. Associate the security domain to the fabric access policy. Create RBAC for the distinguished name of tenant Prod.

Associate User_1 to tenant Prod. Associate the security domain to the distinguished name of the fabric access policy. Create RBAC for the distinguished name of security domain.

Associate User_1 to the distinguished name of the fabric access policy. Associate the security domain to RBAC. Create RBAC for the distinguished name of User__1.

Associate User_1 to the security domain. Associate the security domain to tenant Prod. Create RBAC for the distinguished name of fabric access policy.

Refer to the exhibit. Refer to the exhibit. A client is configuring a new Cisco ACI fabric. All VLANs will be extended during the migration phase using the VPC connections on leaf switches 3. 4 and leaf switches toward the legacy network. The migration phase has these requirements;* If The legacy switches must be able to transfer BPDUs through the ACI fabric.* If the legacy switches fail to break a loop. Cisco ACI must break the loop.Which group settings must be configured on VPC interface policy groups ipg_vpc-legacy_1 and ipg_vpc-legacy_2 to meet these requirements?

MCP: enabled BPDU Guard: disabled BPDU Filter: disabled

MCP: enabled BPDU Guard: enabled BPDU Filter: disabled

MCP: enabled BPDU Guard: disabled BPDU Filter: disabled

MCP: disabled BPDU Guard: disabled BPDU Filter: enabled

MCP: disabled BPDU Guard: enabled BPDU Filter enable

What is the result of selecting the On Demand attribute in the Deploy Immediacy feature during VMM domain association to an EPG?

The EPG policy is programmed in the hardware policy CAM only when the first packet is received through the data path.

The EPG policy is downloaded to the leaf when a hypervisor is connected, and a VM is placed in a port group.

The EPG policy is programmed in the hardware policy CAM only when the first packet is received through the data path.

The EPG policy is programmed in the hardware policy CAM as soon as the policy is downloaded in the leaf software.

The EPG policy is downloaded to the leaf when a hypervisor is attached to a DVS. and CDP or LLDP adjacency is formed.

Refer to the exhibit. The Cisco ACI fabric is built with L20ut to the N9K1 and N9K2 switches. The switches run the RSTP protocol. The requirement is for the Cisco ACI fabric to detect 5 from the N9K and for the fabric to be protected against loops. Which set of actions must be taken to meet the requirements?

Configure the N9K STP link type as a shared link. Enable MCP on ACI globally.

Configure the N9K STP link type as point-to-point link. Enable MCP on ACI globally.

Configure the N9K STP link type as a point-to-point Enable MCP on the ACI leaf interfaces.

Configure the N9K STP link type as a shared link. Enable MCP on the ACI leaf interfaces.

Configure the N9K STP link type as a shared link. Enable MCP on ACI globally.

A network engineer is implementing a Layer 3 Out in the Cisco ACI fabric. The data center core switches must connect to a pair of leaf switches and exchange routes via a routing protocol. In addition, the implementation must meet these criteria;* The external switch interface must use 802.1Q tagging.* Access to the internet for the ACI fabric must be the L30ut.* The L30ut must use a routing protocol that has rapid convergence time and low CPU usage.Which configuration set meets these requirements?

Implement the EIGRP Protocol policy with the selected Autonomous System number. Create Routed Outside object and Node Profile and select EIGRP as the routing protocol. Build the Interface profile and select SVI and the appropriate VPC. Configure the External Network object with a network of 0.0.0.070.

Configure the OSPF Protocol policy with an area of 0. Set up the Routed External Network object and Node Profile and select OSPF. Create the Switch profile and select VPC with the appropriate interfaces. Create the default network and associate it with the Routed Outside object.

Configure the BGP Protocol policy with the appropriate Autonomous System number. Configure an Interface policy and an External Bridged Domain. Create an External Bridged Network and use the configured VLAN pool. Build the Leaf profile and select the Routed sub-interface with the appropriate VLAN.

Implement the IS-IS Protocol policy with the selected Autonomous System number. Create the Routed Outside object and Node Profile and select IS-IS. Configure the Interface profile and select the Routed Interface with the appropriate interfaces. Create the External Network object.

Implement the EIGRP Protocol policy with the selected Autonomous System number. Create Routed Outside object and Node Profile and select EIGRP as the routing protocol. Build the Interface profile and select SVI and the appropriate VPC. Configure the External Network object with a network of 0.0.0.070.

Refer to the exhibit. An engineer must migrate workloads from the brownfield network to the Cisco ACI fabric. The VLAN 10 default gateway remains in the router located in the brownfield Network. The bridge domain has already been associated with L20ut. Which two actions must be taken to migrate the workloads? (Choose two.)

Select Limit IP Learning to Subnet.

Configure Multi-Destination Flooding Flood in Encapsulation.

Map the MAC address of the default gateway to the bridge domain

How does Cisco ACI detect the IP address of a silent host that moved from one location to another without notifying a Cisco ACI leaf?

ARP requests are flooded in the bridge domain.

Bounce entries are installed on the leaf switch.

Endpoint announce messages are sent to COOP.

Silent hosts are detected by the ACI fabric.

Cisco 300-620 Practice Test 5 - Free Online Exam Prep & Questions

A network engineer must configure a new SNMP configuration and syslog servers. The requirement is for all faults and events related to endpoint groups, bridge domains, and VRFs to be sent to it.

Which action must be taken to meet the requirements?

Become a Premium Member for full access

Unlock Premium Member

Cisco 300-620 Practice Test 5

Question

Cisco 300-620 Practice Tests

Practice Tests