Get 100% Passing Success With True 300-620 Exam! [Nov-2021]
Cisco 300-620 PDF Questions - Exceptional Practice To Implementing Cisco Application Centric Infrastructure
Understanding functional and technical aspects of Implementing Cisco Application Centric Infrastructure (300-620 DCACI) Host-Based Analysis
The following will be discussed in CISCO 300-620 dumps:
- Implement Layer 3 out (excludes transit routing and VRF route leaking)
- Drive agility with policy driven automation for cloud deployments
- Improve availability and scale ACI fabrics under a single policy domain
- Simplify operations with flexible deployment models
- Secure infrastructure with visibility and analytics to meet compliance
- Implement Layer 2 out (STP/MCP basics)
NEW QUESTION 59
Drag and drop the Cisco ACI filter entry options from the left onto the correct categories on the right indicating what are required or optional parameters.
Answer:
Explanation:
NEW QUESTION 60
Drag and drop the Cisco ACI filter entry options from the left onto the correct categories on the right indicating what are required or optional parameters.
Answer:
Explanation:
NEW QUESTION 61
When Cisco ACI connects to an outside Layers 2 network, where does the ACI fabric flood the STP BPDU frame?
- A. within the bridge domain
- B. within the APIC
- C. between all the spine and leaf switches
- D. within the access encap VLAN
Answer: D
Explanation:
Reference:
https://www.cisco.com/c/en/us/solutions/collateral/data-center-virtualization/application-centric- infrastructure/white-paper-c07-732033.html#_Toc395143571
NEW QUESTION 62
What do Pods use to allow Pod-to-Pod communication in a Cisco ACI Multi-Pod environment?
- A. over Layer 3 IPN connectivity via spines
- B. over Layer 3 Out connectivity via border leafs
- C. over Layer 3 directly connected back-to-back spines
- D. over Layer 3 IPN connectivity via border leafs
Answer: A
Explanation:
Explanation
https://www.cisco.com/c/en/us/solutions/collateral/data-center-virtualization/application-centric-infrastructure/w
NEW QUESTION 63
The existing network and ACI fabric have been connected to support workload migration. Servers will physically terminate at the Cisco ACI, but their gateway must stay in the existing network. The solution needs to adhere to Cisco's best practices. The engineer started configuring the relevant Bridge Domain and needs to complete the configuration. Which group of settings are required to meet these requirements?
- A. L2 Unknown Unicast: Hardware Proxy
L3 Unknown Multicast Flooding: Optimize Flood
Multi Destination Flooding: Flood in BD
ARP Flooding: Disable - B. L2 Unknown Unicast: Hardware Proxy
L3 Unknown Multicast Flooding: Flood
Multi Destination Flooding: Flood in BD
ARP Flooding: Enable - C. L2 Unknown Unicast: Flood
L3 Unknown Multicast Flooding: Flood
Multi Destination Flooding: Flood in BD
ARP Flooding: Enable - D. L2 Unknown Unicast: Flood
L3 Unknown Multicast Flooding: Optimize Flood
Multi Destination Flooding: Flood in BD
ARP Flooding: Disable
Answer: C
NEW QUESTION 64
Refer to the exhibit.
Which action should be taken to ensure authentication if the RADIUS servers are unavailable?
- A. Adjust the priority of server 10.1.1.1 to 1.
- B. Set the fallback login to local.
- C. Assign the user to the default role.
- D. Set the default login realm to LDAP
Answer: B
Explanation:
Explanation
Changing the server priority is not logical answer.
The command "aaa user default-role no-login" means that remote users who do not have a user role cannot login. This means that assigning the user to default role will not be able to login.
The "aaa authentication login default" and "aaa authentication login fallback" has identical configuration. The fallback uses RADIUS server. We should change is to local.
NEW QUESTION 65
Which new construct must a user create when configuring in-band management?
- A. VLAN pool
- B. bridge domain
- C. management tenant
- D. management contract
Answer: A
Explanation:
Reference:
https://www.cisco.com/c/en/us/td/docs/switches/datacenter/aci/apic/sw/kb/ b_KB_Configuring_Static_Management_Access.html
NEW QUESTION 66
On which two interface types should a user configure storm control to protect against broadcast traffic?
(Choose two.)
- A. fabric uplink interfaces on the leaf switches
- B. port channel on a single leaf switch
- C. APIC facing interfaces
- D. endpoint-facing trunk interface
- E. all interfaces on the leaf switches in the fabric
Answer: B,D
Explanation:
Section: External Network Connectivity
Explanation/Reference: https://www.cisco.com/c/en/us/td/docs/switches/datacenter/aci/apic/sw/2-x/L2_config/ b_Cisco_APIC_Layer_2_Configuration_Guide/ b_Cisco_APIC_Layer_2_Configuration_Guide_chapter_01010.html
NEW QUESTION 67
Which type of profile needs to be created to deploy an access port policy group?
- A. leaf interface
- B. module
- C. attachable entity
- D. Pod
Answer: C
Explanation:
Reference:
https://www.cisco.com/c/en/us/td/docs/switches/datacenter/aci/apic/sw/1-x/Operating_ACI/guide/ b_Cisco_Operating_ACI/b_Cisco_Operating_ACI_chapter_0110.html
NEW QUESTION 68
Which two statements regarding ACI Multi-Site are true? (Choose two.)
- A. Routers in the Inter-Site network must run OSPF, DHCP relay, and MP-BGP.
- B. The Inter-Site network routers should run OSPF to establish peering with the spines.
- C. ACI Multi-Site is a solution that supports a dedicated APIC cluster per site.
- D. The Multi-Site orchestrator must be directly attached to one ACI leaf.
- E. ACI Multi-Site is a solution that allows one APIC cluster to manage multiple ACI sites.
Answer: B,E
NEW QUESTION 69
A data center administrator is upgrading an ACI fabric. There are 3 APIC controllers in the fabric and all the servers are dual-homed to pairs of leaf switches configured in VPC mode. How should the fabric be upgraded to minimize possible traffic impact during the upgrade?
- A. 1. Create two maintenance groups for the APIC controllers: VPC left and VPC right.
2. Upgrade the first group of controllers.
3. Upgrade the second group of controllers.
4. Upgrade the leaf switches. - B. 1. Create two maintenance groups for the leaf switches: VPC left and VPC right.
2. Upgrade the APIC controllers.
3. Upgrade the first group of leaf switches.
4. Upgrade the second group of leaf switches. - C. 1. Create two maintenance groups for the leaf switches: VPC left and VPC right.
2. Upgrade the first group of switches.
3. Upgrade the second group of switches.
4. Upgrade the APIC controllers. - D. 1. Create two maintenance groups for APIC controllers: VPC left and VPC right.
2. Upgrade the leaf switches.
3. Upgrade the first group of controllers.
4. Upgrade the second group of controllers.
Answer: C
NEW QUESTION 70
New ESXi hosts are procured in a data center compute expansion project. An engineer must update the configuration on the Cisco APIC controllers to support the addition of the new servers to the existing VMM domain. Which action should be taken to support this change?
- A. Enable infrastructure VLAN in the associated AEP.
- B. Set the encapsulation mode as VXLAN.
- C. Map the leaf interface selector to the AEP that is associated with the VMM domain.
- D. Create a range of internal VLANs in the associated VLAN pool.
Answer: C
NEW QUESTION 71
An engineer configured a bridge domain with the hardware-proxy option for Layer 2 unknown unicast traffic. Which statement is true about this configuration?
- A. The spine switch drops the Layer 2 unknown unicast packet if it is unable to find the MAC address in the proxy database.
- B. The leaf switch forwards the Layers 2 unknown unicast packets to all other leaf switches if it is unable to find the MAC address in its local forwarding tables.
- C. The Layer 2 unknown hardware proxy lacks support of the topology change notification.
- D. The leaf switch drops the Layer 2 unknown unicast packet if it is unable to find the MAC address in the local forwarding tables.
Answer: D
NEW QUESTION 72
Which description regarding the initial APIC cluster discovery process is true?
- A. The APIC discovers the IP address of the other APIC controllers by using Cisco Discovery Protocol.
- B. Every switch is assigned a unique AV by the APIC.
- C. The APIC uses an internal IP address from a pool to communicate with the nodes.
- D. The ACI fabric is discovered starting with the spine switches.
Answer: C
NEW QUESTION 73
When creating a subnet within a bridge domain, which configuration option is used to specify the network visibility of the subnet?
- A. subnet control
- B. scope
- C. limit IP learning to subnet
- D. gateway IP
Answer: D
Explanation:
Section: ACI Fabric Infrastructure
Explanation/Reference: https://www.cisco.com/c/en/us/td/docs/switches/datacenter/aci/apic/sw/1-x/Operating_ACI/guide/ b_Cisco_Operating_ACI/b_Cisco_Operating_ACI_chapter_0111.html
NEW QUESTION 74
Which Cisco APIC configuration prevents a remote network that is not configured on the bridge domain from being learned by the fabric?
- A. enable Limit IP Learning to Subnet
- B. enable IP Data-plane Learning
- C. enable ARP Flooding to BD
- D. enable Unicast Routing
Answer: A
Explanation:
Reference:
https://www.cisco.com/c/en/us/solutions/collateral/data-center-virtualization/application-centric-infrastructure/ white-paper-c11-739989.html
NEW QUESTION 75
Refer to the exhibit.
An engineer is implementing Cisco ACI - VMware vCenter integration for a blade server that lacks support of bonding. Which port channel mode results in "route based on originating virtual port" on the VMware VDS?
- A. LACP Passive
- B. MAC Pinning-Physical-NIC-load
- C. Static Channel - Mode On
- D. MAC Pinning+
- E. LACP Active
Answer: D
NEW QUESTION 76
A customer implements RBAC on a Cisco APIC using a Windows RADIUS server that is configured with network control policies. The APIC is as follows:
Tenant = TenantX
Security Domain = Tenantx-SD
User = X
The customer requires User X to have access to TenantX only, without any extra privilege in the Cisco ACI fabric domain. Which Cisco AV pair must be implemented on the RADIUS server to meet these requirement?
- A. shell:domains = TenantX-SD/fabric-admin/,common//read-all
- B. shell:domains = TenantX-SD/tenant-admin
- C. shell:domains = TenantX-SD/tenant-admin/,common//read-all
- D. shell:domains = TenantX-SD/tenant-ext-admin/,common//read-all
Answer: D
NEW QUESTION 77
An engineer is configuring a VRF for a tenant named Cisco. Drag and drop the child objects on the left onto the correct containers on the right for this configuration.
Answer:
Explanation:
Explanation
Application profile---> VRF--> Bridge Domain---> EPG
NEW QUESTION 78
Which components must be configured for the BGP Route Reflector policy to take effect?
- A. spine fabric interface overrides and profiles
- B. pod policy groups and profiles
- C. leaf fabric interface overrides and profiles
- D. access policies and profiles
Answer: A
Explanation:
Reference:
https://www.cisco.com/c/en/us/td/docs/switches/datacenter/aci/apic/sw/4-x/L3-configuration/Cisco- APIC-Layer-3-Networking-Configuration-Guide-401/Cisco-APIC-Layer-3-Networking-Configuration-Guide- 401_chapter_01.html
NEW QUESTION 79
Which endpoint learning operation is completed on the egress leaf switch when traffic is received from an L3Out?
- A. No source MAC or IP address of the traffic is learned as a remote endpoint.
- B. The source IP address of the traffic is learned as a remote endpoint.
- C. The source MAC address of the traffic is learned as a remote endpoint.
- D. The source MAC and IP address of the traffic is learned as a local endpoint.
Answer: B
Explanation:
Reference:
https://www.cisco.com/c/en/us/solutions/collateral/data-center-virtualization/application-centric- infrastructure/white-paper-c11-739989.html
NEW QUESTION 80
......
For more info about Implementing Cisco Application Centric Infrastructure (300-620 DCACI)
Implementing Cisco Application Centric Infrastructure (300-620 DCACI)
300-620 dumps - Exam4Docs - 100% Passing Guarantee: https://www.exam4docs.com/300-620-study-questions.html
Fast, Hands-On 300-620 exam: https://drive.google.com/open?id=1YEklHWFIbB96Beog-o-sMsj3SDTrDbnw
