Pass Cisco Implementing Cisco Application Centric Infrastructure Exam in First Attempt Guaranteed Updated Dump from Actual4Dumps!
Pass 300-620 Exam with 113 Questions - Verified By Actual4Dumps
NEW QUESTION 22
What do Pods use to allow Pod-to-Pod communication in a Cisco ACI Multi-Pod environment?
- A. over Layer 3 Out connectivity via border leafs
- B. over Layer 3 IPN connectivity via border leafs
- C. over Layer 3 directly connected back-to-back spines
- D. over Layer 3 IPN connectivity via spines
Answer: D
Explanation:
Explanation
https://www.cisco.com/c/en/us/solutions/collateral/data-center-virtualization/application-centric-infrastructure/w
NEW QUESTION 23
An engineer is implementing a Cisco ACI data center network that includes Cisco Nexus 2000 Series 10G fabric extenders. Which physical topology is supported?
A)
B)
C)
D)
- A. Option A
- B. Option D
- C. Option B
- D. Option C
Answer: B
NEW QUESTION 24
An engineer must advertise a selection of external networks learned from a BGP neighbor into the ACI fabric. Which L3Out subnet configuration option creates an inbound route map for route filtering?
- A. Shared Security Import Subnet
- B. Import Route Control Subnet
- C. External Subnets for the External EPG
- D. Shared Route Control Subnet
Answer: B
NEW QUESTION 25
An engineer is extending EPG connectivity to an external network. The external network houses the Layer 3 gateway and other end hosts. Which ACI bridge domain configuration should be used?
- A. Forwarding: Custom
L2 Unknown Unicast: Flood
L3 Unknown Multicast Flooding: Flood
Multi Destination Flooding: Flood in BD
ARP Flooding: Disabled - B. Forwarding: Custom
L2 Unknown Unicast: Hardware Proxy
L3 Unknown Multicast Flooding: Flood
Multi Destination Flooding: Flood in BD
ARP Flooding: Enabled - C. Forwarding: Custom
L2 Unknown Unicast: Hardware Proxy
L3 Unknown Multicast Flooding: Flood
Multi Destination Flooding: Flood in BD
ARP Flooding: Disabled - D. Forwarding: Custom
L2 Unknown Unicast: Flood
L3 Unknown Multicast Flooding: Flood
Multi Destination Flooding: Flood in BD
ARP Flooding: Enabled
Answer: A
Explanation:
Section: ACI Packet Forwarding
NEW QUESTION 26
Which protocol does ACI use to securely sane the configuration in a remote location?
- A. FTP
- B. SCP
- C. TFTP
- D. HTTPS
Answer: B
NEW QUESTION 27
On which two interface types should a user configure storm control to protect against broadcast traffic?
(Choose two.)
- A. APIC facing interfaces
- B. port channel on a single leaf switch
- C. all interfaces on the leaf switches in the fabric
- D. endpoint-facing trunk interface
- E. fabric uplink interfaces on the leaf switches
Answer: B,D
NEW QUESTION 28
Which Cisco APIC configuration prevents a remote network that is not configured on the bridge domain from being learned by the fabric?
- A. enable ARP Flooding to BD
- B. enable IP Data-plane Learning
- C. enable Unicast Routing
- D. enable Limit IP Learning to Subnet
Answer: D
Explanation:
Section: ACI Fabric Infrastructure
Explanation/Reference:
https://www.cisco.com/c/en/us/solutions/collateral/data-center-virtualization/application-centric-infrastructure/ white-paper-c11-739989.html
NEW QUESTION 29
What must be configured to redistribute externally learned OSPF routes within the ACI fabric?
- A. BGP Inter-leak Route Map
- B. Route Control Profile
- C. PIM Sparse Mode
- D. BGP Route Reflector
Answer: D
Explanation:
Reference:
https://www.cisco.com/c/en/us/td/docs/switches/datacenter/aci/apic/sw/1-x/ACI_Best_Practices/ b_ACI_Best_Practices/b_ACI_Best_Practices_chapter_010010.html
NEW QUESTION 30
An engineer is implementing Cisco ACI at a large platform-as-a-service provider using APIC controllers, 9396PX leaf switches, and 9336PQ spine switches. The leaf switch ports are configured as IEEE 802.1p ports. Where does the traffic exit from the EPG in IEEE 802.1p mode in this configuration?
- A. from leaf ports untagged
- B. from leaf ports tagged as VLAN 0
- C. from leaf ports tagged as VLAN 1
- D. from leaf ports tagged as VLAN 4094
Answer: B
NEW QUESTION 31
An engineer must limit management access to the Cisco ACI fabric that originates from a single subnet where the NOC operates. Access should be limited to SSH and HTTPS only. Where should the policy be configured on the Cisco APIC to meet the requirements?
- A. ACL on the console interface
- B. ACL on the management interface of the APIC
- C. policy on the management VLAN
- D. policy in the management tenant
Answer: D
Explanation:
Section: ACI Management
Explanation/Reference:
https://www.cisco.com/c/en/us/td/docs/switches/datacenter/aci/apic/sw/1-x/cli/nx/cfg/ b_APIC_NXOS_CLI_User_Guide/b_APIC_NXOS_CLI_User_Guide_chapter_01000.html
NEW QUESTION 32
Which endpoint learning operation is completed on the egress leaf switch when traffic is received from an L3Out?
- A. The source IP address of the traffic is learned as a remote endpoint.
- B. The source MAC address of the traffic is learned as a remote endpoint.
- C. No source MAC or IP address of the traffic is learned as a remote endpoint.
- D. The source MAC and IP address of the traffic is learned as a local endpoint.
Answer: B
Explanation:
Reference:
https://www.cisco.com/c/en/us/solutions/collateral/data-center-virtualization/application-centric- infrastructure/white-paper-c11-739989.html
NEW QUESTION 33
An engineer must configure RADIUS authentication with Cisco ACI for remote authentication with out-of-band management access. Drag and drop the RADIUS configuration steps from the left into the required implementation order on the right. Not all steps are used.
Answer:
Explanation:
NEW QUESTION 34
On which two interface types should a user configure storm control to protect against broadcast traffic?
(Choose two.)
- A. APIC facing interfaces
- B. port channel on a single leaf switch
- C. all interfaces on the leaf switches in the fabric
- D. endpoint-facing trunk interface
- E. fabric uplink interfaces on the leaf switches
Answer: B,D
Explanation:
Section: External Network Connectivity
Explanation/Reference: https://www.cisco.com/c/en/us/td/docs/switches/datacenter/aci/apic/sw/2-x/L2_config/ b_Cisco_APIC_Layer_2_Configuration_Guide/ b_Cisco_APIC_Layer_2_Configuration_Guide_chapter_01010.html
NEW QUESTION 35
Refer to the exhibit.
A systems engineer is implementing the Cisco ACI fabric. However, the Server2 information is missing from the Leaf 101 endpoint table and the COOP database of the spine. The requirement is for the bridge domain configuration to enforce the ACI fabric to forward the unicast packets generated by Server1 destined to Server2. Which action must be taken to meet these requirements?
- A. Set IP Data-Plane Learning to No
- B. Set L2 Unknown Unicast to Flood
- C. Enable Unicast Routing
- D. Enable ARP Flooding
Answer: B
NEW QUESTION 36
Refer to the exhibit.
Which Adjacency Type value should be set when the client endpoint and the service node interface are in a different subnet?
- A. L3Out
- B. L3
- C. Unicast
- D. Routed
Answer: D
NEW QUESTION 37
An engineer must set up a Cisco ACI fabric to send Syslog messages related to hardware events, such as chassis line card failures. The messages should be sent to a dedicated Syslog server. Where in the Cisco APIC should the policy be configured to meet this requirement?
- A. uni/tn-common/monepg-default
- B. uni/fabric/monfab-default
- C. uni/infra/monifra-default
- D. uni/fabric/moncommon
Answer: B
NEW QUESTION 38
Which method does the Cisco ACI fabric use to load-balance multidestination traffic?
- A. forwarding tag trees
- B. spanning trees
- C. shortest-path trees
- D. PIM routing
Answer: A
Explanation:
Reference:
https://www.cisco.com/c/en/us/td/docs/switches/datacenter/aci/apic/sw/1-x/aci-fundamentals/b_ACI-Fundamentals/b_ACI-Fundamentals_chapter_010010.html
NEW QUESTION 39
Which two statements regarding ACI Multi-Site are true? (Choose two.)
- A. The Inter-Site network routers should run OSPF to establish peering with the spines.
- B. ACI Multi-Site is a solution that allows one APIC cluster to manage multiple ACI sites.
- C. Routers in the Inter-Site network must run OSPF, DHCP relay, and MP-BGP.
- D. The Multi-Site orchestrator must be directly attached to one ACI leaf.
- E. ACI Multi-Site is a solution that supports a dedicated APIC cluster per site.
Answer: A,B
NEW QUESTION 40
An engineer needs to deploy a leaf access port policy group in ACI Fabric to support the following requirements:
* Control the amount of application data flowing into the system
* Allow the newly connected device to auto-negotiate link speed with the leaf switch Which two ACI policies must be configured to achieve these requirements? (Choose two.)
- A. link level policy
- B. L2 interface policy
- C. ingress data plane policing policy
- D. slow drain policy
- E. ingress control plane policing policy
Answer: A,C
Explanation:
Slow Drain handles FCoE packets that are causing traffic congestion on ACI fabric. So, it is wrong.
Ingress control plane is wrong, because the request is for "application data flowing".
L2 interface policy is concerned about QinQ and VLAN scope.
NEW QUESTION 41
An engineer must implement management policy and data plane separation in the Cisco ACI fabric. Which ACI object must be created in Cisco APIC to accomplish this goal?
- A. Application profile
- B. Bridge domain
- C. Tenant
- D. Contract
Answer: C
NEW QUESTION 42
An engineer must limit management access to me Cisco ACI fabric that originates from a single subnet where the NOC operates. Access should be limited to SSH and HTTPS only. Where should the policy be configured on the Cisco APIC to meet the requirements?
- A. ACL on the console interface
- B. ACL on the management interface of the APIC
- C. policy on the management VLAN
- D. policy In the management tenant
Answer: D
Explanation:
Explanation
https://www.cisco.com/c/en/us/td/docs/switches/datacenter/aci/apic/sw/1-x/Operating_ACI/guide/b_Cisco_Oper
NEW QUESTION 43
......
Penetration testers simulate 300-620 exam: https://www.actual4dumps.com/300-620-study-material.html
Free Test Engine For Implementing Cisco Application Centric Infrastructure Certification Exams: https://drive.google.com/open?id=1_290kAmx-fF9_UqO28yWd7fPv38W383J