An engineer associates EPG-A with a VMM domain and sets the Deployment and Resolution preferences to Immediate. The host that will generate endpoints for EPG-A is attached to Leaf-and Leaf-102 using etht1/1. However, no configuration for EPG-A appears to have been pushed to the leaf switches. Which action must be taken for the configuration to be pushed to f-101 and Leaf-102?

Enable CDP or LLDP on the host.

Configure both ports for trunking.

Enable LACP on the leaf switch ports.

Disable and enable eth1/1 on both leaf switches

An engineer is implementing an out-of-band (OOB) management access for the Cisco ACI fabric. The secure access must meet these requirements:* Only GUI and secure shell must be allowed to access the management interfaces of the ACIs.* The only IP ranges that must be permitted to connect the fabric will be 10.10.10.0724 and 192.168.15.0/24.Which configuration set meets these requirements?

Implement HTTPS and SSH protocol filters in the OOB contract. Add the required subnets to the external network instance profile.

Create an out-of-band EPG in the external management entity. Associate the management profile with the OOB contract.

Set up static IPs on the management interfaces from the required IP range. Add the required subnets to the external network instance profile.

Create an out-of-band EPG in the common tenant. Associate the external network instance profile with the OOB contract.

An engineer configures port-12 on Leaf-101 and Leaf-102 to connect to a new server, SVR-12. The new server will belong to EPG-12 and use encap VLAN-1212. The engineer configured SVR-12 as a VPC member port and statically bound the VPC member port to EPG-12. Which additional step must the engineer take to configure connectivity?

Associate a domain with EPG-12 that is associated with VLAN-1212.

Create a VPC Explicit Protection Group for EPG-12 and VLAN-1212.

Associate a domain with EPG-12 that is associated with VLAN-1212.

Select VLAN-1212 on the EPG-12 Interface Policy Group.

Configure an LACP Interface Policy and apply it to EPG-12.

Cisco ACI fabric must detect all silent endpoints for the Layer 3 bridge domain. Which actions accomplish this goal?

Enable Unicast Routing. Disable ARP Flooding.

Disable Unicast Routing. Enable L2 Unknown Unicast Hardware Proxy.

Disable Unicast Routing. Enable L2 Unknown Unicast Flood.

Enable Unicast Routing. Disable ARP Flooding.

Enable Unicast Routing. Enable ARP Flooding.

An engineer implements a configuration backup on the Cisco APIC. The backup job must meet these requirements:* The backup must transfer the encrypted data to the remote server.* The transfer must be resumed if the connection is interrupted.Which configuration set meets these requirements?

Select protocol SFTP in Create Remote Location. Choose XML format in Configuration Export Policy.

Select protocol HTTP in Create Remote Location. Choose JSON format in Configuration Export Policy.

Select protocol TFTP in Create Remote Location. Choose JSON format in Configuration Export Policy

Select protocol FTP in Create Remote Location. Choose XML format in Configuration Export Policy.

Select protocol SFTP in Create Remote Location. Choose XML format in Configuration Export Policy.

Refer to the exhibit. A network engineer must improve the configuration backup process and the configuration restore process. The current ACI solution is integrated with VMMs and third-y.. L4-L7 devices. The process requires that no additional information be re-entered when importing the configuration for a fully-functional state. Which configuration configures the port policy?

Enable the Global AES Encryption Setting.

Select the JSON data format to be used when exporting

Create target DNs for all tenants.

Refer to the exhibit. An application called App_1 is hosted on the server called S1. A silent host application. App_2. is hosted on S2. Both applications use the same VLAN encapsulation, which action forces Cisco ACI fabric to learn App_2 on ACI leaf 2?

Set L2 Unknown Unicast to Flood.

Set Multi-Destination Flooding to Drop.

Set Unicast Routing to Hardware Proxy.

Set L2 Unknown Unicast to Flood.

Set L3 Unknown Multicast to Optimized flood.

An engineer configures an L30ut in VRF-1 that was configured for Import Route Control Enforcement. The L30ut uses OSPF to peer with a core switch. The L30ut has one external EPG, it has been configured with a subnet 10.1.0.0/24. Which scope must be set to force 10.1.0.0/24 to populate in the routing table for VRF-1?

External Subnet for External EPG

What is a characteristic of a Cisco ACI Multi-Pod?

It manages the configuration of different Cisco ACI pods using a single common Cisco APIC cluster.

It eliminates the need to deploy multicast in the Layer 3 network that interconnects the pods.

Spines use BGP peering with IPN to send out the TEP pool prefix for the local pod.

It manages the configuration of different Cisco ACI pods using a single common Cisco APIC cluster.

A VPNv4 address family is used to exchange endpoint information between spines.

An engineer discovered an outage on the mgmt0 port of Leaf113 and Leaf114. Both leaf switches were recently registered in the fabric and have health scores of 100. The engineer overs there is no IP address assigned to the mgmt0 interface of the switches. Which action resolves the outage?

Add Leaf113 and Leaf114 to the node management address policy.

Statically bind the mgmt0 interface of Leaf113 and Leaf114 to the oob-default EPG.

Enable Leaf 113 and Leaf 114 mgmt0 under the leaf switch.

Associate the oobbrc-default contract to Leaf113 and Leaf114.

Add Leaf113 and Leaf114 to the node management address policy.

An Cisco ACI leaf switch learns the source IP address of a packet that enters the front panel port of the switch. Which bridge domain setting is used?

L3 Unknown Multicast Flooding - Flood

Unknown Unicast - Hardware proxy

Refer to the exhibit. Refer to the exhibit. A tenant is configured with a single L30ut and a single-homed link to the core router called Core-1. An engineer must add a second link to the L30ut that connects to Core-2 router. Which action allows the traffic from Core-2 to BL-1002 to have the same connectivity as the traffic from Core-1 to BL-1001?

Add a second path to the logical interface profile of the existing L30ut

Add a second subnet to the external EPG to the existing L30ut.

Add a second OSPF interface profile to the logical interface profile.

Add a second interface to the external domain to the existing L30ut.

An engineer wants to configure Cisco ACI switches to use authenticated ZMQ when communicating with the proxy spine. Which configuration allows MD5 ZMQ messages only?

COOP Group policy in strict mode

COOP Group policy in compatible mode

Refer to the exhibit. A customer is deploying a WAN with these requirements: *Routers 1 and 2 must receive only routes 192.168.11.0/24 and 192.168.21.0724 from the Cisco ACI fabric *Reachability to the WAN users must be permitted only for the servers that are located in vrf_prod.Which settings must be configured to meet these objectives?

Configure the subnets 192.168.11.0/24 and 192.168.21.0/24 as Advertised Externally. Configure the subnet 192.168.31.0/24 as Private to VRF. Configure an EPG subnet 0.0.0.0/0 as External Subnets for External EPG.

Configure the subnets 192.168.11.0/24 and 192.168.21.0/24 as Private to VRF Configure the subnet 192.168.31.0/24 as Advertised Externally. Configure an EPG subnet 0.0.0.0/0 as External Subnets for External EPG.

Configure the subnets 192.168.11.0/24 and 192.168.21.0/24 as Private to VRF. Configure the subnet 192.168.31.0/24 as Advertised Externally. Configure an EPG subnet 0.0.0.0/0 as Shared Route Control Subnet.

Configure the subnets 192.168.11.0/24 and 192.168.21.0/24 as Advertised Externally. Configure the subnet 192.168.31.0/24 as Private to VRF. Configure an EPG subnet 0.0.0.0/0 as Shared Route Control Subnet.

Configure the subnets 192.168.11.0/24 and 192.168.21.0/24 as Advertised Externally. Configure the subnet 192.168.31.0/24 as Private to VRF. Configure an EPG subnet 0.0.0.0/0 as External Subnets for External EPG.

Cisco ACI fabric has three different endpoints S1, S2. and S3. These endpoints must communicate with each other without contracts. These objects have been created in APIC:*Two EPGs named DNS_EPG and Database_EPG*Two application profiles. PROD_App and Data_App*Two bridge domains DNS_BD and Database_BD*PROD_APP and Database_BD mapped to Tenant PROD*Data_App and DNS_BD mapped to Tenant DataWhich set of actions completes the fabric configuration?

Add S1, S2, S3, under DNS_EPG. MAP DNS_EPG to Data_App. Associate DNS_EPG with Dns_BD.

Add S1, S2, S3 under Database_EPG. MAP Database_EPG under PROD_ App. Associate Datbase_EPG with DNS_BD.

Add S1, S2, S3, under DNS_EPG. MAP DNS_EPG to Data_App. Associate DNS_EPG with Dns_BD.

Add S1, S2, S3 under DNS_EPG. MAP DNS_EPG to Data_App. Associate DNS_EPG with Database_BD.

Add S1, S2, S3 under Database_EPG. MAP Database_EPG under Data_App. Associate Datbase_EPG with Database_BD.

An engineer plans a Cisco ACI firmware upgrade. The ACI fabric consists of three Cisco APIC controllers, two spine switches, and four leaf switches. Two leaf switches have 1-Gb copper s for bare metal servers, and the other two leaf switches have 10-Gb SFP ports to connect storage. Which set of actions accomplishes an upgrade with minimal disruptions?

Upgrade the APIC controllers by selecting the desired firmware and choosing Upgrade Now. Divide the switches into two upgrade groups with one spine, one 1-Gb switch, and one 10-Gb switch per group. Start the firmware upgrade on the first upgrade group and when it finishes, start the second upgrade group.

Upgrade the APIC controllers by selecting the desired firmware and choosing Upgrade Now. Divide the switches into two upgrade groups: spines and leaves. Start the firmware upgrade on the spine upgrade group and then proceed with the leaf upgrade group.

Upgrade the APIC controllers by initiating the upgrade process that uses the most recent uploaded firmware. Divide the switches into three upgrade groups: spines, 1-Gb switches, and 10-Gb switches. Start the firmware upgrade on the spine upgrade group and then proceed with the other two groups.

Upgrade the APIC controllers by selecting the desired firmware and choosing Upgrade Now. Divide the switches into two upgrade groups with one spine, one 1-Gb switch, and one 10-Gb switch per group. Start the firmware upgrade on the first upgrade group and when it finishes, start the second upgrade group.

Upgrade the APIC controllers as a single group by selecting the firmware and choosing Upgrade Now. Divide the switches into four upgrade groups with one switch per group. Start the firmware upgrade on each upgrade group in succession until all four are complete.

An engineer needs to avoid loops in the ACI network and needs an ACI leaf switch to error-disable an interface if the interface receives an ACI-generated packet. Which action meets these requirements?

Change the default administrative state of the global MCP Instance Policy.

Enable the Loop Indication by MCP event in the Error Disabled Recovery Policy.

Set Rogue EP Control in the Endpoint Controls Policy.

Uncheck the Loop Protection Action check box in MCP Instance Policy.

Change the default administrative state of the global MCP Instance Policy.

Refer to the exhibit. Refer to the exhibit. An engineer connects a Cisco ACI fabric to two different Cisco Nexus 9000 Series Switches. The fabric must be configured to ensure a loop-free topology and N9K1 be configured as the root bridge for VLAN 10. Which action meets these requirements?

Activate MCP on ports between the leaf and Nexus 9000 Series Switches.

Enable STP on ports between the leaf and spine.

Activate MCP on ports between the leaf and Nexus 9000 Series Switches.

Enable Cisco Discovery Protocol on ports between the leaf and spine.

Set BPDU Guard on ports between the leaf and Nexus 9000 Series Switches.

Refer to the exhibit. Refer to the exhibit. An engineer must disable the communication between the two backup servers in the backup EPG. Which action accomplishes this goal?

Set Intra EPG Isolation to Enforced.

Set Preferred Group Member to Excluded.

Set the physical domain to None.

Set a different static binding for the encap VLAN.

Set Intra EPG Isolation to Enforced.

Which Cisco ACI setting corresponds to the VMware MAC pinning?

route based on originating virtual port

route based on physical NIC load

Refer to the exhibit. Refer to the exhibit. An engineer is migrating legacy servers into the Cisco ACI environment. The requirement is to ensure that all endpoints and MAC addresses are learned properly in legacy and Cisco ACI switches. Which configuration set must be configured under the bridge domain called bd__360 to accomplish this goal?

L2 Unknown Unicast: Flood ARP Flooding: Enabled

L2 Unknown Unicast: Hardware Proxy ARP Flooding: Disabled

L2 Unknown Unicast: Hardware Proxy ARP Flooding: Enabled

L2 Unknown Unicast: Flood ARP Flooding: Disabled

L2 Unknown Unicast: Flood ARP Flooding: Enabled

Refer to the exhibit. Refer to the exhibit. An engineer configures a Layer 4 to Layer 7 device object. The device is a virtual firewall with a single network adapter and it must be deployed in routed mode. Which .. completes the configuration of the device object?

Add an outside interface to the cluster interfaces.

Change context awareness to Multiple.

Refer to the exhibit. Refer to the exhibit. The default route is not present in the routing tables of the Cisco ACI leaf switches. All static and direct routes are currently being redistributed and advertised. Which jn must be taken to advertise a default route on the eBGP L30ut?

Create a Default Route Leak Policy on the L3Qut.

Configure a static default route on the ACI node profiles with next-hop null.

Create a Default Route Leak Policy on the L3Qut.

Enable a BGP peer prefix policy set to Always.

Implement an export route map matching 0.0.0.0/0.

An engineer must attach an ESXi host to the Cisco ACI fabric. The host is connected to Leaf 1 and has its gateway IP address 10.10.10.254/24 configured inside the ACI fabric. A new wall is attached to Leaf 2 and mapped to the same EPG and BD as the ESXi host. The engineer must migrate the gateway of the ESXi host to the firewall. Which configuration set complishes this goal?

Disable unicast routing. Define IP address 10.10.10.254/24 on the firewall.

Disable unicast routing. Configure IP address 10.10.10.254/24 on the ACI BD.

Enable unicast routing. Configure IP address 10.10.10.254/24 on the ACI EPG.

Disable unicast routing. Define IP address 10.10.10.254/24 on the firewall.

Enable unicast routing. Set IP address 10.10.10.254/24 on the firewall.

Refer to the exhibit. An engineer is implementing a BPDU filter on external switch interfaces That face the Cisco ACI fabric to prevent excessive TCNs from impacting the fabric. Which Configuration must be applied on Cisco ACI to avoid a Layer 2 loop?

Apply an MSTP instance on Cisco ACI.

An engineer configures SNMP for an ACI fabric and created an SNMP Monitoring Destination Group called snmp_dgroup1. Snmp_dgroup1 is configured with the server hostname and Community password. An SNMP policy called snmp_podpolicy1 is configured to enable SNMP and add an SNMP Client Group Profile called snmp_clgroup1. Snmp_podpolicy1 is associated default pod profile via a pod policy group named podl. Which configuration set must the engineer enable to complete the SNMP configuration?

Configure the OOB management contract to permit UDP 162. Associate snmp_dgroupl with the OOB management EPG.

Configure an SNMP management contract to permit all traffic. Associate snmp_podpolicy1 with an SNMP pod profile.

Configure the OOB management contract to permit all traffic. Associate snmp_clgroup1 with the SNMP management EPG.

Configure the OOB management contract to permit UDP 162. Associate snmp_dgroupl with the OOB management EPG.

Configure an SNMP management contract to permit UDP 162. Associate the SNMP Source to snmp_clgroup1.

Engineer must configure SNMP inside a Cisco ACI fabric. The engineer has created an SNMP Policy, called SNMP-policy and an SNMP Monitoring Group called SNMP-group1 that Contains five trap receivers. Which configuration set completes the configuration?

Permit OOB management traffic using UDP port 161. Associate client group policy with the OOB management EPG.

Edit oobbrc to permit traffic using UDP port 16. Associate the client group policy to SNMP-group1.

Permit OOB management traffic using UDP port 161. Associate client group policy with the OOB management EPG.

Allow all OOB management traffic. Configure three trap receivers on SNMP-group1.

Create an OOB management contract. Include the SNMP server in the OOB management EPG.

Cisco 300-620 Practice Test 6 - Free Online Exam Prep & Questions

Cisco ACI fabric is integrated with a VMware environment. The engineer must back up the current configuration of the fabric and restore the vCenter password when the configuration is ... Which action accomplishes this goal?

Become a Premium Member for full access

Unlock Premium Member

Cisco 300-620 Practice Test 6

Question

Cisco 300-620 Practice Tests

Practice Tests