[Full-Version] 2023 Updated Cisco Study Guide 300-620 Dumps Questions
Newest 300-620 Exam Dumps Achieve Success in Actual 300-620 Exam
Cisco 300-620 exam is a certification exam designed for IT professionals who want to demonstrate their expertise in implementing and managing Cisco Application Centric Infrastructure (ACI). 300-620 exam is part of the CCNP Data Center certification track and is intended for individuals who are responsible for designing, implementing, and managing data center infrastructure using ACI.
NEW QUESTION # 33
Refer to the exhibit.
A Cisco ACI fabric is newly deployed, and the security team requires more visibility of all inter-EPG traffic flows. All traffic in a VRF must be forwarded to an existing firewall pair. During fallover, the standby firewall must continue to use the same IP and MAC as the primary firewall. Drag and drop the steps from the left Into the Implementation order on the right to configure the service graph that meets the requirements. (Not all steps are used.)
Answer:
Explanation:
Explanation
https://www.cisco.com/c/en/us/td/docs/switches/datacenter/aci/apic/sw/1-x/L4-L7_Services_Deployment/guide/b
* Create a service bridge domain and a layer 4 to layer 7 device within one cluster interface.
NEW QUESTION # 34
An engineer needs to deploy a leaf access port policy group in ACI Fabric to support the following requirements:
* Control the amount of application data flowing into the system
* Allow the newly connected device to auto-negotiate link speed with the leaf switch Which two ACI policies must be configured to achieve these requirements? (Choose two.)
- A. slow drain policy
- B. L2 interface policy
- C. ingress data plane policing policy
- D. ingress control plane policing policy
- E. link level policy
Answer: C,E
Explanation:
Explanation
Slow Drain handles FCoE packets that are causing traffic congestion on ACI fabric. So, it is wrong.
Ingress control plane is wrong, because the request is for "application data flowing".
L2 interface policy is concerned about QinQ and VLAN scope.
NEW QUESTION # 35
Refer to the exhibit.
Which two objects are created as a result of the configuration? (Choose two.)
- A. application profile
- B. VRF
- C. bridge domain
- D. endpoint group
- E. attachable AEP
Answer: B,C
NEW QUESTION # 36
Refer to the exhibit.
Which two objects are created as a result of the configuration? (Choose two.)
- A. application profile
- B. VRF
- C. bridge domain
- D. endpoint group
- E. attachable AEP
Answer: B,C
Explanation:
Reference:
https://www.cisco.com/c/en/us/td/docs/switches/datacenter/aci/apic/sw/2-x/rest_cfg/2_1_x/ b_Cisco_APIC_REST_API_Configuration_Guide/ b_Cisco_APIC_REST_API_Configuration_Guide_chapter_01110.html
NEW QUESTION # 37
An engineer is extending an EPG out of the ACI fabric using static path binding. Which statement about the endpoints is true?
- A. Endpoints must connect directly to the ACI leaf port.
- B. Endpoint learning encompasses the MAC address only.
- C. External endpoints are in the same EPG as the directly attached endpoints.
- D. External endpoints are in a different bridge domain than the endpoints in the fabric.
Answer: B
NEW QUESTION # 38
Which endpoint learning operation is completed on the egress leaf switch when traffic is received from an L3Out?
- A. The source MAC address of the traffic is learned as a remote endpoint.
- B. No source MAC or IP address of the traffic is learned as a remote endpoint.
- C. The source IP address of the traffic is learned as a remote endpoint.
- D. The source MAC and IP address of the traffic is learned as a local endpoint.
Answer: C
NEW QUESTION # 39
Which Cisco APIC configuration prevents a remote network that is not configured on the bridge domain from being learned by the fabric?
- A. enable Limit IP Learning to Subnet
- B. enable IP Data-plane Learning
- C. enable Unicast Routing
- D. enable ARP Flooding to BD
Answer: A
Explanation:
Reference:
https://www.cisco.com/c/en/us/solutions/collateral/data-center-virtualization/application-centric-infrastructure/ white-paper-c11-739989.html
NEW QUESTION # 40
An engineer is creating a configuration import policy that must terminate if the imported configuration is incompatible with the existing system. Which import mode achieves this result?
- A. atomic
- B. replace
- C. merge
- D. best effort
Answer: A
NEW QUESTION # 41
What must be enabled in the bridge domain to have the endpoint table learn the IP addresses of endpoints?
- A. L2 unknown unicast: flood
- B. GARP based detection
- C. subnet scope
- D. unicast routing
Answer: D
NEW QUESTION # 42
An engineer must configure RADIUS authentication with Cisco ACI for remote authentication with out-of-band management access. Drag and drop the RADIUS configuration steps from the left into the required implementation order on the right. Not all steps are used.
Answer:
Explanation:
NEW QUESTION # 43
When configuring Cisco ACI VMM domain integration with VMware vCenter, which object is created in vCenter?
- A. cluster
- B. datacenter
- C. VMware vSphere Distributed Switch
- D. VMware vSphere Standard vSwitch
Answer: C
Explanation:
Section: Integrations
Explanation/Reference:
NEW QUESTION # 44
An engineer is implementing Cisco ACI at a large platform-as-a-service provider using APIC controllers, 9396PX leaf switches, and 9336PQ spine switches. The leaf switch ports are configured as IEEE 802.1p ports. Where does the traffic exit from the EPG in IEEE 802.1p mode in this configuration?
- A. from leaf ports tagged as VLAN 0
- B. from leaf ports tagged as VLAN 1
- C. from leaf ports tagged as VLAN 4094
- D. from leaf ports untagged
Answer: A
NEW QUESTION # 45
Which method does the Cisco ACI fabric use to load-balance multidestination traffic?
- A. forwarding tag trees
- B. PIM routing
- C. shortest-path trees
- D. spanning trees
Answer: A
Explanation:
Explanation
https://www.cisco.com/c/en/us/td/docs/switches/datacenter/aci/apic/sw/1-x/aci-fundamentals/b_ACI-Fundamenta
NEW QUESTION # 46
Drag and drop the Cisco ACI filter entry options from the left onto the correct categories on the right indicating what are required or optional parameters.
Answer:
Explanation:
NEW QUESTION # 47
On which two interface types should a user configure storm control to protect against broadcast traffic?
(Choose two.)
- A. endpoint-facing trunk interface
- B. port channel on a single leaf switch
- C. APIC facing interfaces
- D. all interfaces on the leaf switches in the fabric
- E. fabric uplink interfaces on the leaf switches
Answer: A,B
NEW QUESTION # 48
Refer to the exhibit.
Refer to the exhibit. Server A is connected to the Cisco ACI fabric using two teamed interfaces. One interface in a team is configured as active and the other remains in standby mode. When a failover occurs and the standby interface becomes active, it uses its built-in MAC address to send traffic. Which bridge domain configuration must be applied to resolve the issue?
- A. Configure Hardware proxy.
- B. Activate Limit IP Learning to Subnet.
- C. Set L2 Unknown Unicast to Flood.
- D. Enable ARP flooding.
Answer: A
NEW QUESTION # 49
What is the advantage of implementing an active-active firewall cluster that is stretched across separate pods when anycast services are configured?
- A. A cluster is capable to be deployed in transparent mode across pods.
- B. The local pod anycast node is preferred by the local spines.
- C. Local traffic in a pod is load-balanced between the clustered firewalls.
- D. A different MAC/IP configuration combination is configurable for the firewall in each pod.
Answer: D
NEW QUESTION # 50
A customer implements RBAC on a Cisco APIC using a Windows RADIUS server that is configured with network control policies. The APIC is as follows:
Tenant = TenantX
Security Domain = Tenantx-SD
User = X
The customer requires User X to have access to TenantX only, without any extra privilege in the Cisco ACI fabric domain. Which Cisco AV pair must be implemented on the RADIUS server to meet these requirement?
- A. shell:domains = TenantX-SD/tenant-admin
- B. shell:domains = TenantX-SD/tenant-ext-admin/,common//read-all
- C. shell:domains = TenantX-SD/fabric-admin/,common//read-all
- D. shell:domains = TenantX-SD/tenant-admin/,common//read-all
Answer: B
NEW QUESTION # 51
In the context of VMM, which protocol between ACI leaf and compute hosts ensures that the policies are pushed to the leaf switches for immediate and on demand resolution immediacy?
- A. VXLAN
- B. LLDP
- C. STP
- D. ISIS
Answer: A
Explanation:
Section: Integrations
Explanation/Reference: https://www.cisco.com/c/en/us/td/docs/switches/datacenter/aci/apic/sw/1-x/ACI_Best_Practices/ b_ACI_Best_Practices/b_ACI_Best_Practices_chapter_0101.html
NEW QUESTION # 52
Refer to the exhibit.
An engineer wants to initiate an ICMP ping from Server1 to Server2. The requirement is for the BD1 to enforce ICMP replies that follow the expected path. The packets must be prevented from taking the direct path from Leaf1 to Server1. Which action must be taken on BD1 to meet these requirements?
- A. Disable Unicast Routing.
- B. Set L2 Unknown Unicast to Hardware Proxy.
- C. Set L2 Unknown Unicast to Flood.
- D. Enable ARP Flooding.
Answer: B
NEW QUESTION # 53
Which attribute should be configured for each user to enable RADIUS for external authentication in Cisco ACI?
- A. cisco-security domain
- B. cisco-aci-role
- C. cisco-auth-features
- D. cisco-av-pair
Answer: D
Explanation:
Section: ACI Management
Explanation/Reference: https://www.cisco.com/c/en/us/td/docs/switches/datacenter/aci/apic/sw/2-x/Security_config/ b_Cisco_APIC_Security_Configuration_Guide/b_Cisco_APIC_Security_Guide_chapter_01011.html
NEW QUESTION # 54
Refer to the exhibit.
Refer to the exhibit. The Cisco ACI fabric has an egress L3Out from Leaf-101 and Leaf-102 to CORE-1. VLAN 102 is used to form the OSPF adjacency. The workloads must be migrated into EPG-101, and the static port binding is configured to Leaf-103 e1/1 with encap VLAN 101. An engineer completes the port binding and receives an MCP fault. Which action clears the fault?
- A. Use VLAN 101 for OSPF adjacency on the egress L3Out.
- B. Use VLAN 102 as the encap VLAN on the EPG-101 static port binding.
- C. Prune VLAN 101 from the VLAN pool that is used by the egress L3Out.
- D. Add VLAN 102 to the VLAN pool that is used by the static port binding.
Answer: B
NEW QUESTION # 55
An organization has encountered many STP-related issues in the past due to failed hardware components. They are in the process of long-term migration to a newly deployed ACI fabric. Senior engineers are worried that spanning-tree loops in the existing network may be extended to the ACI fabric. Which feature must be enabled on the ACI leaf ports to protect the fabric from spanning-tree loops?
- A. BPDU Guard
- B. BPDU Filter
- C. per-VLANMCP
- D. Storm Control
Answer: C
NEW QUESTION # 56
Which feature should be disabled on a bridge domain when a default gateway for endpoints is on an external device instead of a Cisco ACI bridge domain SVI?
- A. unknown unicast flooding
- B. ARP flooding
- C. unicast routing
- D. proxy ARP
Answer: A
NEW QUESTION # 57
......
Understanding functional and technical aspects of Implementing Cisco Application Centric Infrastructure (300-620 DCACI) Host-Based Analysis
The following will be discussed in CISCO 300-620 exam dumps:
- Secure infrastructure with visibility and analytics to meet compliance
- Drive agility with policy driven automation for cloud deployments
- Implement Layer 2 out (STP/MCP basics)
- Simplify operations with flexible deployment models
Earning the Cisco 300-620 certification is a valuable credential for IT professionals who want to advance their careers in network engineering, data center operations, or cloud computing. Implementing Cisco Application Centric Infrastructure certification validates a candidate's expertise in designing and implementing ACI solutions that meet the needs of modern data centers. It also demonstrates their ability to troubleshoot complex network issues and maintain high levels of network availability and performance.
Updated Cisco 300-620 Dumps – Check Free 300-620 Exam Dumps: https://www.actualtestsit.com/Cisco/300-620-exam-prep-dumps.html
Valid 300-620 exam with Cisco Real Exam Questions: https://drive.google.com/open?id=1YEXtRiFp7qb7rwxY7UKdQQURDSzJV-1S