Pass Your CCNP Data Center 300-620 Exam Easily with Accurate PDF Questions [Sep 03, 2023]
300-620 Certification Exam Dumps Questions in here
Cisco 300-620 certification exam is designed to test the knowledge and skills of IT professionals in implementing Cisco's Application Centric Infrastructure (ACI). 300-620 exam is aimed at professionals who are involved in designing, deploying, and managing data center networks using Cisco ACI technologies. Implementing Cisco Application Centric Infrastructure certification verifies the candidate's expertise in applying Cisco's ACI architecture to data center environments.
Cisco 300-620 exam is an excellent opportunity for IT professionals to demonstrate their knowledge and skills in ACI implementation and management. Implementing Cisco Application Centric Infrastructure certification is highly valued in the IT industry and can lead to career advancement opportunities in a variety of fields. With the right preparation and training, candidates can successfully pass the exam and earn the Cisco 300-620 certification.
Understanding functional and technical aspects of Implementing Cisco Application Centric Infrastructure (300-620 DCACI) Host-Based Analysis
The following will be discussed in CISCO 300-620 exam dumps:
- Simplify operations with flexible deployment models
- Drive agility with policy driven automation for cloud deployments
- Improve availability and scale ACI fabrics under a single policy domain
- Implement Layer 3 out (excludes transit routing and VRF route leaking)
- Secure infrastructure with visibility and analytics to meet compliance
NEW QUESTION # 38
Which method does the Cisco ACI fabric use to load-balance multidestination traffic?
- A. shortest-path trees
- B. PIM routing
- C. spanning trees
- D. forwarding tag trees
Answer: D
Explanation:
Explanation
https://www.cisco.com/c/en/us/td/docs/switches/datacenter/aci/apic/sw/1-x/aci-fundamentals/b_ACI-Fundamenta
NEW QUESTION # 39
An engineer has set the VMM resolution immediacy to pre-provision in a Cisco ACI environment. No Cisco Discovery Protocol neighborship has been formed between the hypervisors and the ACI fabric leaf nodes.
How does this affect the download policies to the leaf switches?
- A. No policies are downloaded because LLDP is the only supported discovery protocol.
- B. Policies are downloaded when the hypervisor host is connected to the VMM VDS.
- C. No policies are downloaded because there is no discovery protocol neighborship.
- D. Policies are downloaded to the ACI leaf switch regardless of Cisco Discovery Protocol neighborship.
Answer: D
NEW QUESTION # 40
Which type of profile needs to be created to deploy an access port policy group?
- A. Pod
- B. leaf interface
- C. module
- D. attachable entity
Answer: D
Explanation:
Section: ACI Fabric Infrastructure
Explanation/Reference: https://www.cisco.com/c/en/us/td/docs/switches/datacenter/aci/apic/sw/1-x/Operating_ACI/guide/ b_Cisco_Operating_ACI/b_Cisco_Operating_ACI_chapter_0110.html
NEW QUESTION # 41
What must be enabled in the bridge domain to have the endpoint table learn the IP addresses of endpoints?
- A. subnet scope
- B. GARP based detection
- C. L2 unknown unicast: flood
- D. unicast routing
Answer: D
Explanation:
Reference:
https://hsvglobalschool.in/dhkycw/cisco-aci-bridge-domain.html
NEW QUESTION # 42
Which tenant is used when configuring in-band management IP addresses for Cisco APICs, leaf nodes, and spine nodes?
- A. infra
- B. common
- C. mgmt
- D. default
Answer: C
Explanation:
Section: ACI Management
Explanation/Reference: https://www.cisco.com/c/en/us/td/docs/switches/datacenter/aci/apic/sw/kb/ b_KB_Configuring_Static_Management_Access.html#concept_CFF63FEBE947424291B0F10E6F23DA7D
NEW QUESTION # 43
How is an EPG extended outside of the ACI fabric?
- A. Create an external routed network that is assigned to an EPG.
- B. Statically assign a VLAN ID to a leaf port in an EPG.
- C. Create an external bridged network that is assigned to a leaf port.
- D. Enable unicast routing within an EPG.
Answer: B
Explanation:
Reference:
https://www.dclessons.com/l2-external-network-with-aci
NEW QUESTION # 44
As part of a migration, legacy non-ACI switches must be connected to the Cisco ACI fabric. All non-ACI switches run per-VLAN RSTP. After the non-ACI switches are connected to Cisco ACI, the STP convergence caused a microloop and significant CPU spike on all switches. Which configuration on the interfaces of the external switches that face the Cisco ACI fabric resolves the problem?
- A. BPDU filtering
- B. BPDU guard
- C. STP type link shared
- D. aggressive STP timers
Answer: C
NEW QUESTION # 45
Drag and drop the Cisco ACI filter entry options from the left onto the correct categories on the right indicating what are required or optional parameters.
Answer:
Explanation:
NEW QUESTION # 46
An engineer must limit management access to me Cisco ACI fabric that originates from a single subnet where the NOC operates. Access should be limited to SSH and HTTPS only. Where should the policy be configured on the Cisco APIC to meet the requirements?
- A. policy on the management VLAN
- B. ACL on the console interface
- C. ACL on the management interface of the APIC
- D. policy In the management tenant
Answer: D
Explanation:
Explanation
https://www.cisco.com/c/en/us/td/docs/switches/datacenter/aci/apic/sw/1-x/Operating_ACI/guide/b_Cisco_Oper
NEW QUESTION # 47
An engineer is extending EPG connectivity to an external network. The external network houses the Layer 3 gateway and other end hosts. Which ACI bridge domain configuration should be used?
- A. Forwarding: Custom
L2 Unknown Unicast: Flood
L3 Unknown Multicast Flooding: Flood Multi Destination Flooding: Flood in BD ARP Flooding: Disabled - B. Forwarding: Custom
L2 Unknown Unicast: Hardware Proxy L3 Unknown Multicast Flooding: Flood Multi Destination Flooding: Flood in BD ARP Flooding: Enabled - C. Forwarding: Custom
L2 Unknown Unicast: Flood
L3 Unknown Multicast Flooding: Flood Multi Destination Flooding: Flood in BD ARP Flooding: Enabled - D. Forwarding: Custom
L2 Unknown Unicast: Hardware Proxy L3 Unknown Multicast Flooding: Flood Multi Destination Flooding: Flood in BD ARP Flooding: Disabled
Answer: C
NEW QUESTION # 48
An engineer must connect Cisco ACI fabric using Layer 2 with external third-party switches. The third-party switches are configured using 802.1s protocol. Which two constructs are required to complete the task?
(Choose two.)
- A. MCP policy with PDU per VLAN enabled
- B. static binding of native VLAN in all existing EPGs
- C. dedicated EPG for native VLAN
- D. MCP instance policy with administrative slate disabled
- E. spanning tree policy for mapping MST Instances to VLANs
Answer: A,D
NEW QUESTION # 49
In the context of ACI Multi-Site, when is the information of an endpoint (MAC/IP) that belongs to site 1 advertised to site 2 using the EVPN control plane?
- A. Endpoint information is exchanged across sites as soon as the endpoint is discovered in one site.
- B. Endpoint information is not exchanged across sites unless COOP protocol is used.
- C. Endpoint information is exchanged across sites when the endpoints are discovered in both sites.
- D. Endpoint information is not exchanged across sites unless a policy is configured to allow communication across sites.
Answer: B
NEW QUESTION # 50
A network administrator configures AAA inside the Cisco ACI fabric. The authentication goes through the local users if the TACACS+ server is not reachable. If the Cisco APIC is out of the cluster, the access must be granted through the fallback domain. Which configuration set meets these requirements?
- A. Ping Check: False
Default Authentication Realm: TACACS+
Fallback Check: True - B. Ping Check: True
Default Authentication Realm: Local
Fallback Check: True - C. Ping Check: True
Default Authentication Realm: TACACS+
Fallback Check: False - D. Ping Check: False
Default Authentication Realm: Local
Fallback Check: False
Answer: A
NEW QUESTION # 51
An engineer configured Layer 2 extension from the ACI fabric and changed the Layer 2 unknown unicast policy from Flood to Hardware Proxy. How does this change affect the flooding of the L2 unknown unicast traffic?
- A. It is flooded within the whole fabric.
- B. It is dropped by the leaf when the destination endpoint is not present in the endpoint table.
- C. It is forwarded to one of the spines to perform as a spine proxy.
- D. It is forwarded to one of the APICs to perform as a proxy.
Answer: C
NEW QUESTION # 52
A customer implements RBAC on a Cisco APIC using a Windows RADIUS server that is configured with network control policies. The APIC is as follows:
Tenant = TenantX
Security Domain = Tenantx-SD
User = X
The customer requires User X to have access to TenantX only, without any extra privilege in the Cisco ACI fabric domain. Which Cisco AV pair must be implemented on the RADIUS server to meet these requirement?
- A. shell:domains = TenantX-SD/tenant-admin/,common//read-all
- B. shell:domains = TenantX-SD/fabric-admin/,common//read-all
- C. shell:domains = TenantX-SD/tenant-ext-admin/,common//read-all
- D. shell:domains = TenantX-SD/tenant-admin
Answer: A
Explanation:
https://www.cisco.com/c/en/us/td/docs/switches/datacenter/aci/apic/sw/2-x/Security_config/b_Cisco_APIC_Security_Guide/b_Cisco_APIC_Security_Guide_chapter_0100.html
NEW QUESTION # 53
An engineer must advertise a bridge domain subnet out of the ACI fabric to an OSPF neighbor. Which two configuration steps are required? (Choose two.)
- A. Configure Subnet scope to Advertised Externally
- B. Add L50ut profile to the bridge domain using Associated L30uts section
- C. Configure the Subnet under the EPG level.
- D. Add External Subnet for External EPG flag under External EPG.
- E. Create Route Control Profile with the export direction under External EPG.
Answer: A,B
NEW QUESTION # 54
An engineer must securely export Cisco APIC configuration snapshots to a secure, offsite location The exported configuration must be transferred using an encrypted tunnel and encoded with a platform-agnostic data format that provides namespace support Which configuration set must be used?
- A. Option D
- B. Option C
- C. Option B
- D. Option A
Answer: A
NEW QUESTION # 55
An engineer must configure VMM domain integration on a Cisco UCS B-Series server that is connected to a Cisco ACI fabric. Drag and drop the products used to create VMM domain from the bottom into the sequence in which they should be implemented at the top. Products are used more than once.
Answer:
Explanation:
NEW QUESTION # 56
When the subnet is configured on a bridge domain, on which physical devices is the gateway IP address configured?
- A. all border leaf nodes where the bridge domain of the tenant is present
- B. all leaf switches and all spine nodes
- C. only leaf switches where the bridge domain of the tenant is present
- D. only spine switches where the bridge domain of the tenant is present
Answer: C
NEW QUESTION # 57
......
Updated 300-620 Exam Practice Test Questions: https://realdumps.prep4sures.top/300-620-real-sheets.html