300-620 Exam Training Practice Tests (Cisco Implementing Cisco Application Centric Infrastructure)]

Question 1

A network administrator configures AAA inside the Cisco ACI fabric. The authentication goes through the local users if the TACACS+ server is not reachable. If the Cisco APIC is out of the cluster, the access must be granted through the fallback domain.
Which configuration set meets these requirements?

A. Ping Check: False
Default Authentication Realm: Local
Fallback Check: False B. Ping Check: False
Default Authentication Realm: TACACS+
Fallback Check: True C. Ping Check: True
Default Authentication Realm: TACACS+
Fallback Check: False D. Ping Check: True
Default Authentication Realm: Local
Fallback Check: True

Correct Answer: B

Question 2

An engineer configured Layer 2 extension from the ACI fabric and changed the Layer 2 unknown unicast policy from Flood to Hardware Proxy. How does this change affect the flooding of the L2 unknown unicast traffic?

A. It is forwarded to one of the spines to perform as a spine proxy. B. It is flooded within the whole fabric. C. It is forwarded to one of the APICs to perform as a proxy. D. It is dropped by the leaf when the destination endpoint is not present in the endpoint table.

Correct Answer: A

Explanation: Only visible for TrainingDump members. You can sign-up / login (it's free).

Question 3

Refer to the exhibit. An engineer is implementing Cisco ACI ?VMware vCenter integration for a blade server that lacks support of bonding. Which port channel mode results in "route based on originating virtual port" on the VMware VDS?

A. MAC Pinning+ B. LACP Passive C. Static Channel - Mode On D. LACP Active E. MAC Pinning-Physical-NIC-load

Correct Answer: A

Explanation: Only visible for TrainingDump members. You can sign-up / login (it's free).

Question 4

An application team tells the Cisco ACI network administrator that it wants to monitor the statistics of the unicast and BUM traffic that are seen in a certain EPG. Which statement describes the collection statistics?

A. EPG statistics can be collected only for VMM domains. If a physical domain exists, statistics are not collected. B. Cisco ACI does not capture statistics at the EPG level. Only statistics that pass through ACI contracts can be monitored. C. All EPGs in the Cisco ACI tenant object must be enabled for statistics to be collected. D. The collection of statistics is enabled on the EPG level by enabling the statistics for unicast and BUM traffic.

Correct Answer: D

Explanation: Only visible for TrainingDump members. You can sign-up / login (it's free).

Question 5

A company is running a multi-pod environment across two data centers and wants to expand to co-locations. Which solution extends the application centric infrastructure (ACI) policy with minimum investment?

A. dedicated equipment to extend the existing multi-pod B. new leaf switches to be used in a remote-leaf architecture C. dedicated equipment for a dedicated ACI fabric D. dedicated equipment for a new site in a multi-site deployment

Correct Answer: B

Explanation: Only visible for TrainingDump members. You can sign-up / login (it's free).

Question 6

Which statements are correct regarding ACI support for BFD? (Choose two.)

A. BFD is supported on routed interfaces, routed subinterfaces, and SVIs. B. BFD is supported for EIGRP, OSPF, and BGP in ACI. C. BFD is supported on L3Out loopback interfaces. D. BFD is supported for BGP prefix peers (dynamic neighbors).

Correct Answer: A,B

Question 7

A network engineer implements an L3Out inside the Cisco ACI fabric. The engineer plans to connect a Cisco ACI leaf switch to a switch outside of the Cisco ACI fabric to exchange routes via a routing protocol. The external switch interface is configured with IP address 192.168.15.1/30.
The ACI engineer wants to use a routing protocol that uses a hierarchical network design. The Cisco ACI fabric should use the L3Out to access the Internet. Which set of steps must be taken to meet these requirements?

A. Set up the EIGRP Protocol policy with the selected Autonomous System number.
Configure an Interface policy and an External Bridged Domain.
Create an External Bridged Network using the configured VLAN pool.
Build the Leaf profile, selecting Routed Sub-Interface and the appropriate VLAN. B. Set up the BGP Protocol policy with the appropriate Autonomous System number.
Create the Routed Outside object and Node profile, selecting BGP as the routing protocol.
Build the Interface profile, selecting SVI and the appropriate VPC.
Configure the 0.0.0.0/32 network as part of the External Network object. C. Set up the EIGRP Protocol policy with the selected Autonomous System number.
Set up the Routed External Network object and Node profile, selecting EIGRP.
Create the Switch profile, selecting VPC and the appropriate interfaces.
Create the default network and associate it with the Routed Outside object. D. Configure the OSPF Protocol policy with an area of 0.
Create the Routed Outside object and Node profile, selecting OSPF as the routing protocol.
Build the Interface profiles, selecting Routed Interface and the appropriate interface.
Set up the External Network object with a network of 0.0.0.0/0.

Correct Answer: D

Question 8

What is the result of selecting the On Demand attribute in the Deploy Immediacy feature during VMM domain association to an EPG?

A. The EPG policy is downloaded to the leaf when a hypervisor is attached to a DVS, and CDP or LLDP adjacency is formed. B. The EPG policy is programmed in the hardware policy CAM only when the first packet is received through the data path. C. The EPG policy is programmed in the hardware policy CAM as soon as the policy is downloaded in the leaf software. D. The EPG policy is downloaded to the leaf when a hypervisor is connected, and a VM is placed in a port group.

Correct Answer: B

Explanation: Only visible for TrainingDump members. You can sign-up / login (it's free).

Question 9

Refer to the exhibit. VM1 and VM2 are in Cisco ACI POD1 and communication takes place.
Which event is triggered when VM2 is live migrated from POD1 to POD2?

A. Leaf 201 creates a tunnel with leaf 102 because of the bounced traffic that is destined to VM2. B. Leaf 102 installs a bounce entry for VM2 pointing to the PTEP address of leaf 201. C. Spines from POD2 send an MP-BGP EVPN update to the leaves in POD1 about the new location of VM2. D. An MP-BGP EVPN update is received by spines in POD1 announcing the reachability of VM2 via the proxy VTEP address of the spines in POD2.

Correct Answer: D

Question 10

Refer to the exhibit. Endpoint-A must communicate with Endpoint-B, but Leaf-101 has not learned the location of Endpoint-B. Which step must Leaf-101 take before sending the data?

A. Leaf-101 forwards the packet to the anycast proxy VTEP IP. B. Leaf-101 broadcasts an ARP request on a link to one of the spines. C. Leaf-101 sends the packet to the Spine-201. D. Leaf-101 creates an eVXLAN tunnel to Leaf-104.

Correct Answer: A

Explanation: Only visible for TrainingDump members. You can sign-up / login (it's free).

Question 11

Refer to the exhibit. A Cisco ACI fabric has an L3Out OSPF connectivity with router R1. The Cisco ACI fabric must have only subnet 192.168.1.0/24 installed in the routing table. Which two configurations must be selected to accomplish this goal? (Choose two.)

A. Import Route Control Enforcement B. Shared Security Import Subnet C. External Subnets for the External EPG D. Import Route Control Subnet E. Export Route Control Subnet

Correct Answer: A,D

Explanation: Only visible for TrainingDump members. You can sign-up / login (it's free).

Question 12

An engineer wants to filter the System Faults page and view only the active faults that are present in the Cisco ACI fabric. Which two lifecycle stages must be selected for filtering? (Choose two.)

A. Raised B. Soaking, Clearing C. Raised, Clearing D. Soaking E. Retaining

Correct Answer: A,D

Explanation: Only visible for TrainingDump members. You can sign-up / login (it's free).

Question 13

An engineer configures two Cisco ACI objects:
- Security domain Dom_1
- Local user called User1
Which role privilege must be assigned to security domains so that User1 can access only policies for interface selectors?

A. out-of-band bridge domain B. access-connectivity-util C. nw-svc-devshare D. fabric-connectivity-l1

Correct Answer: B

Explanation: Only visible for TrainingDump members. You can sign-up / login (it's free).

Question 14

Refer to the exhibit. A Cisco ACI fabric connects with the same L3Out to SW1 and SW2. The fabric has a single tenant and single VRF. Which two actions must be taken to allow Host1 to communicate with the external EPG subnet? (Choose two.)

A. Add subnet 2a01:8c8:03a0:3::2/64 under Telco_EPG. B. Disable unicast routing on bridge domain Telco_BD. C. Check the box of No Default SVI Gateway under Telco_BD. D. Associate bridge domain Telco_BD to L3out_Telco. E. Add subnet 2a01:8c8:03a0:3::2/64 under Telco_EPG.

Correct Answer: D,E

Explanation: Only visible for TrainingDump members. You can sign-up / login (it's free).

Question 15

Which method does the Cisco ACI fabric use to load-balance multidestination traffic?

A. forwarding tag trees B. shortest-path trees C. PIM routing D. spanning trees

Correct Answer: A

Explanation: Only visible for TrainingDump members. You can sign-up / login (it's free).

Cisco Implementing Cisco Application Centric Infrastructure - 300-620 Exam Practice Test