[Jul-2023] Cisco 300-620 Dumps – Reduce Your Chance of Failure in 300-620 Exam
To help you achieve your ultimate goal, we suggest the actual Cisco 300-620 dumps for your Implementing Cisco Application Centric Infrastructure exam preparation to use as your guideline.
NEW QUESTION # 52
Refer to the exhibit.
Refer to the exhibit. Which two configuration steps are completed before this output is generated? (Choose two.)
- A. MCP policy for the interface policy group for Port-channel 12 is enabled.
- B. MCP Instance Policy default in the global access policies is enabled.
- C. Error Disabled Recovery Policy for Loop Indication by MCP is set to True.
- D. Spanning Tree Policy Region STP_4CAF232E48FF20 is added to the spanning-tree policy of the switch.
- E. BPDU Guard is enabled for the interface policy group for Port-channel 12.
Answer: A,E
NEW QUESTION # 53
In the context of ACI Multi-Site, when is the information of an endpoint (MAC/IP) that belongs to site 1 advertised to site 2 using the EVPN control plane?
- A. Endpoint information is not exchanged across sites unless COOP protocol is used.
- B. Endpoint information is exchanged across sites as soon as the endpoint is discovered in one site.
- C. Endpoint information is exchanged across sites when the endpoints are discovered in both sites.
- D. Endpoint information is not exchanged across sites unless a policy is configured to allow communication across sites.
Answer: A
NEW QUESTION # 54
What do Pods use to allow Pod-to-Pod communication in a Cisco ACI Multi-Pod environment?
- A. over Layer 3 directly connected back-to-back spines
- B. over Layer 3 IPN connectivity via spines
- C. over Layer 3 Out connectivity via border leafs
- D. over Layer 3 IPN connectivity via border leafs
Answer: B
Explanation:
Reference:
https://www.cisco.com/c/en/us/solutions/collateral/data-center-virtualization/application-centric-infrastructure/white-paper-c11-737855.html
NEW QUESTION # 55
Refer to the exhibit.
A Cisco ACI fabric is newly deployed, and the security team requires more visibility of all inter-EPG traffic flows. All traffic in a VRF must be forwarded to an existing firewall pair. During fallover, the standby firewall must continue to use the same IP and MAC as the primary firewall. Drag and drop the steps from the left Into the Implementation order on the right to configure the service graph that meets the requirements. (Not all steps are used.)
Answer:
Explanation:
Reference:
https://www.cisco.com/c/en/us/td/docs/switches/datacenter/aci/apic/sw/1-x/L4-L7_Services_Deployment/guide/b_L4L7_Deploy_ver201/b_L4L7_Deploy_ver201_chapter_010100.html#id_71564 Create a service bridge domain and a layer 4 to layer 7 device within one cluster interface.
NEW QUESTION # 56
Which tenant is used when configuring in-band management IP addresses for Cisco APICs, leaf nodes, and spine nodes?
- A. infra
- B. mgmt
- C. default
- D. common
Answer: A
Explanation:
Reference:
https://www.cisco.com/c/en/us/td/docs/switches/datacenter/aci/apic/sw/kb/ b_KB_Configuring_Static_Management_Access.html#concept_CFF63FEBE947424291B0F10E6F23DA7D
NEW QUESTION # 57
Drag and drop the Cisco ACI filter entry options from the left onto the correct categories on the right indicating what are required or optional parameters.
Answer:
Explanation:
NEW QUESTION # 58
Which two actions extend a Layer 2 domain beyond the ACI fabric? (Choose two.)
- A. extending the EPG out of the ACI fabric
- B. extending the bridge domain out of the ACI fabric
- C. creating an external physical network
- D. creating a single homed Layer 3 Out
- E. extending the routed domain out of the ACI fabric
Answer: A,E
Explanation:
Section: External Network Connectivity
Explanation/Reference:
NEW QUESTION # 59
On which two interface types should a user configure storm control to protect against broadcast traffic? (Choose two.)
- A. port channel on a single leaf switch
- B. fabric uplink interfaces on the leaf switches
- C. endpoint-facing trunk interface
- D. APIC facing interfaces
- E. all interfaces on the leaf switches in the fabric
Answer: A,C
Explanation:
Reference:
https://www.cisco.com/c/en/us/td/docs/switches/datacenter/aci/apic/sw/2-x/L2_config/ b_Cisco_APIC_Layer_2_Configuration_Guide/ b_Cisco_APIC_Layer_2_Configuration_Guide_chapter_01010.html
NEW QUESTION # 60
A network engineer demonstrates Cisco ACI to a customer. One of the test cases is to validate a disaster recovery event by resetting the ACI fabric to factory and then restoring the fabric to the state it was in before the event. Which setting must be enabled on ACI to export all configuration parameters that are necessary to meet these requirements?
- A. enabled JSON format export
- B. enabled AES encryption
- C. generated a tech-support file
- D. encrypted export destination
Answer: B
NEW QUESTION # 61
An engineer is implementing a Cisco ACI environment that consists of more than 20 servers. Two of the servers support only Cisco Discovery Protocol with no order link discovery protocol. The engineer wants the servers to be discovered automatically by the Cisco ACI fabric when connected. Which action must be taken to meet this requirement?
- A. Create an interface profile for the interface that disables LLDP on the desired switch that is referenced by the interface policy group.
- B. Configure a higher order interface policy that enables Cisco Discovery Protocol for the interface on the desired leaf switch.
- C. Configure a lower order policy group that enables Cisco Discovery Protocol for the interface on the desired leaf switch.
- D. Create an override policy that enables Cisco Discovery Protocol after LLDP is enabled in the default policy group.
Answer: D
NEW QUESTION # 62
An engineer deploys a two-pod Cisco ACI Multi-Pod environment. Why should no more than two Cisco APIC controllers be deployed in the same pod?
- A. to avoid hair-pinning traffic that is destined for the primary APIC controller between pods
- B. to ensure that all nodes in all pods have local access to a controller
- C. to enable equal capacity to scale in each pod
- D. to avoid losing all replicas of a shard if a pod fails
Answer: C
NEW QUESTION # 63
Refer to the exhibit.
Refer to the exhibit. An engineer configures an L3Out but receives the error presented. Which action clears the fault?
- A. Associate a custom QoS class.
- B. Create a custom QoS policy.
- C. Acknowledge the QoS-related error.
- D. Set the QoS policy to Level 3.
Answer: C
NEW QUESTION # 64
Which endpoint learning operation is completed on the ingress leaf switch when traffic is received from a Layer 3 Out?
- A. The source IP address of the traffic is learned as a local endpoint.
- B. The source MAC address of the traffic is learned as a remote endpoint.
- C. The source MAC address of the traffic is learned as a local endpoint.
- D. The source IP address of the traffic is learned as a remote endpoint.
Answer: B
NEW QUESTION # 65
A customer implements RBAC on a Cisco APIC using a Windows RADIUS server that is configured with network control policies. The APIC is as follows:
Tenant = TenantX
Security Domain = Tenantx-SD
User = X
The customer requires User X to have access to TenantX only, without any extra privilege in the Cisco ACI fabric domain. Which Cisco AV pair must be implemented on the RADIUS server to meet these requirement?
- A. shell:domains = TenantX-SD/fabric-admin/,common//read-all
- B. shell:domains = TenantX-SD/tenant-admin/,common//read-all
- C. shell:domains = TenantX-SD/tenant-admin
- D. shell:domains = TenantX-SD/tenant-ext-admin/,common//read-all
Answer: D
NEW QUESTION # 66
New ESXi hosts are procured in a data center compute expansion project. An engineer must update the configuration on the Cisco APIC controllers to support the addition of the new servers to the existing VMM domain. Which action should be taken to support this change?
- A. Set the encapsulation mode as VXLAN.
- B. Map the leaf interface selector to the AEP that is associated with the VMM domain.
- C. Create a range of internal VLANs in the associated VLAN pool.
- D. Enable infrastructure VLAN in the associated AEP.
Answer: B
NEW QUESTION # 67
Which feature dynamically assigns or modifies the EPG association of virtual machines based on their attributes?
- A. application EPGs
- B. vzAny contracts
- C. standard contracts
- D. uSeg EPGs
Answer: D
Explanation:
Section: ACI Fabric Infrastructure
NEW QUESTION # 68
An engineer must limit management access to me Cisco ACI fabric that originates from a single subnet where the NOC operates. Access should be limited to SSH and HTTPS only. Where should the policy be configured on the Cisco APIC to meet the requirements?
- A. policy on the management VLAN
- B. policy In the management tenant
- C. ACL on the console interface
- D. ACL on the management interface of the APIC
Answer: B
Explanation:
Explanation
https://www.cisco.com/c/en/us/td/docs/switches/datacenter/aci/apic/sw/1-x/Operating_ACI/guide/b_Cisco_Oper
NEW QUESTION # 69
A bridge domain for a new endpoint group in the Cisco ACI fabric must meet these requirements:
The bridge domain must function as the default gateway for the subnet so that routing remains within the Cisco ACI fabric.
ARP requests must be managed via Layer 3 unicast packets or be dropped to reduce excessive broadcast traffic.
The impact of misconfigured virtual machines must be kept to a minimum by preventing IP addresses outside of the configured subnet from being routed.
Which set of actions must be taken?
- A. Set Endpoint Retention Policy to default.
Enable ARP Flooding.
Enable Unicast Routing on the bridge domain and configure a subnet. - B. Disable ARP Flooding.
Enable Limit IP Learning to Subnet.
Enable Unicast Routing on the bridge domain and configure a subnet. - C. Enable Unicast Routing on the bridge domain and configure a subnet.
Set L2 Unknown Unicast to Flood.
Disable Endpoint Retention Policy. - D. Enable Limit IP Learning to Subnet.
Enable Unicast Routing on the bridge domain and configure a subnet.
Set Multi-Destination Flooding to Flood in BD.
Answer: C
NEW QUESTION # 70 
Refer to the exhibit. Which Adjacency Type value should be set when the client endpoint and the service node interface are in a different subnet?
- A. L3Out
- B. L3
- C. Routed
- D. Unicast
Answer: B
Explanation:
Section: External Network Connectivity
NEW QUESTION # 71
An engineer is extending EPG connectivity to an external network. The external network houses the Layer 3 gateway and other end hosts. Which ACI bridge domain configuration should be used?
- A. Forwarding: Custom
L2 Unknown Unicast: Hardware Proxy
L3 Unknown Multicast Flooding: Flood
Multi Destination Flooding: Flood in BD
ARP Flooding: Enabled - B. Forwarding: Custom
L2 Unknown Unicast: Flood
L3 Unknown Multicast Flooding: Flood
Multi Destination Flooding: Flood in BD
ARP Flooding: Disabled - C. Forwarding: Custom
L2 Unknown Unicast: Flood
L3 Unknown Multicast Flooding: Flood
Multi Destination Flooding: Flood in BD
ARP Flooding: Enabled - D. Forwarding: Custom
L2 Unknown Unicast: Hardware Proxy
L3 Unknown Multicast Flooding: Flood
Multi Destination Flooding: Flood in BD
ARP Flooding: Disabled
Answer: B
Explanation:
Section: ACI Packet Forwarding
NEW QUESTION # 72
A customer implements RBAC on a Cisco APIC using a Windows RADIUS server that is configured with network control policies. The APIC is as follows:
Tenant = TenantX
Security Domain = Tenantx-SD
User = X
The customer requires User X to have access to TenantX only, without any extra privilege in the Cisco ACI fabric domain. Which Cisco AV pair must be implemented on the RADIUS server to meet these requirement?
- A. shell:domains = TenantX-SD/tenant-ext-admin/,common//read-all
- B. shell:domains = TenantX-SD/fabric-admin/,common//read-all
- C. shell:domains = TenantX-SD/tenant-admin
- D. shell:domains = TenantX-SD/tenant-admin/,common//read-all
Answer: D
Explanation:
https://www.cisco.com/c/en/us/td/docs/switches/datacenter/aci/apic/sw/2-x/Security_config/b_Cisco_APIC_Security_Guide/b_Cisco_APIC_Security_Guide_chapter_0100.html
NEW QUESTION # 73
......
100% Free 300-620 Demo-Trial [Pdf], get it now: https://drive.google.com/open?id=1yrsdxqOP4dVuEtVXFbLAZUJve9FWkw81
Accurate & Verified Answers As Seen in the Real Exam here: https://www.premiumvcedump.com/Cisco/valid-300-620-premium-vce-exam-dumps.html