[Aug-2021] Verified Cisco Exam Dumps with 300-620 Exam Study Guide
Best Quality Cisco 300-620 Exam Questions VCE4Plus Realistic Practice Exams [2021]
NEW QUESTION 28
A network engineer must backup the PRODUCTION tenant. The configuration backup should be stored on the APIC using a markup language and contain all secure information. Which export policy must be used to meet these requirement?
A)
B)
C)
D)
- A. Option D
- B. Option D
- C. Option A
- D. Option B
Answer: B
NEW QUESTION 29
A data center administrator is upgrading an ACI fabric. There are 3 APIC controllers in the fabric and all the servers are dual-homed to pairs of leaf switches configured in VPC mode. How should the fabric be upgraded to minimize possible traffic impact during the upgrade?
- A. Option A
- B. Option D
- C. Option B
- D. Option C
Answer: A
NEW QUESTION 30
Refer to the exhibit.
Which two objects are created as a result of the configuration? (Choose two.)
- A. bridge domain
- B. endpoint group
- C. application profile
- D. VRF
- E. attachable AEP
Answer: A,D
NEW QUESTION 31
Drag and drop the Cisco ACI Layer 4 to Layer 7 service insertion terms on the left to the correct descriptions on the right.
Answer:
Explanation:
NEW QUESTION 32
An engineer is extending an EPG out of the ACI fabric using static path binding. Which statement about the endpoints is true?
- A. External endpoints are in the same EPG as the directly attached endpoints.
- B. Endpoint learning encompasses the MAC address only.
- C. Endpoints must connect directly to the ACI leaf port.
- D. External endpoints are in a different bridge domain than the endpoints in the fabric.
Answer: B
Explanation:
Section: ACI Packet Forwarding
NEW QUESTION 33 
When the subnet is configured on a bridge domain, on which physical devices is the gateway IP address configured?
- A. only leaf switches where the bridge domain of the tenant is present
- B. only spine switches where the bridge domain of the tenant is present
- C. all border leaf nodes where the bridge domain of the tenant is present
- D. all leaf switches and all spine nodes
Answer: A
Explanation:
Section: ACI Packet Forwarding
Explanation/Reference: http://www.netdesignarena.com/index.php/2016/06/16/aci-tenant-building-blocks-forwarding-logic/
NEW QUESTION 34
An engineer must limit management access to the Cisco ACI fabric that originates from a single subnet where the NOC operates. Access should be limited to SSH and HTTPS only. Where should the policy be configured on the Cisco APIC to meet the requirements?
- A. ACL on the console interface
- B. ACL on the management interface of the APIC
- C. policy on the management VLAN
- D. policy in the management tenant
Answer: D
Explanation:
Section: ACI Management
Explanation/Reference:
https://www.cisco.com/c/en/us/td/docs/switches/datacenter/aci/apic/sw/1-x/cli/nx/cfg/ b_APIC_NXOS_CLI_User_Guide/b_APIC_NXOS_CLI_User_Guide_chapter_01000.html
NEW QUESTION 35
Drag and drop the Cisco ACI filter entry options from the left onto the correct categories on the right indicating what are required or optional parameters.
Answer:
Explanation:
Reference:
https://www.cisco.com/c/en/us/td/docs/switches/datacenter/aci/apic/sw/1-x/Operating_ACI/guide/ b_Cisco_Operating_ACI/b_Cisco_Operating_ACI_chapter_01000.html
NEW QUESTION 36
An engineer is implementing Cisco ACI at a large platform-as-a-service provider using APIC controllers,
9396PX leaf switches, and 9336PQ spine switches. The leaf switch ports are configured as IEEE 802.1p ports.
Where does the traffic exit from the EPG in IEEE 802.1p mode in this configuration?
- A. from leaf ports untagged
- B. from leaf ports tagged as VLAN 0
- C. from leaf ports tagged as VLAN 1
- D. from leaf ports tagged as VLAN 4094
Answer: B
Explanation:
Section: ACI Fabric Infrastructure
NEW QUESTION 37
An engineer is implementing Cisco ACI at a large platform-as-a-service provider using APIC controllers,
9396PX leaf switches, and 9336PQ spine switches. The leaf switch ports are configured as IEEE 802.1p ports.
Where does the traffic exit from the EPG in IEEE 802.1p mode in this configuration?
- A. from leaf ports tagged as VLAN 0
- B. from leaf ports tagged as VLAN 1
- C. from leaf ports tagged as VLAN 4094
- D. from leaf ports untagged
Answer: D
NEW QUESTION 38
Drag and drop the Cisco ACI Layer 4 to Layer 7 service insertion terms on the left to the correct descriptions on the right.
Answer:
Explanation:
NEW QUESTION 39
Which statement about ACI syslog is true?
- A. All syslog messages are sent to the destination through APIC.
- B. Notifications for different scopes of syslog objects can be sent only to one destination.
- C. Switches send syslog messages directly to the destinations.
- D. Syslog messages are sent to the destination through the spine.
Answer: C
Explanation:
Reference:
https://www.ciscolive.com/c/dam/r/ciscolive/us/docs/2016/pdf/BRKACI-2303.pdf
NEW QUESTION 40
An engineer needs to deploy a leaf access port policy group in ACI Fabric to support the following requirements:
* Control the amount of application data flowing into the system
* Allow the newly connected device to auto-negotiate link speed with the leaf switch Which two ACI policies must be configured to achieve these requirements? (Choose two.)
- A. link level policy
- B. L2 interface policy
- C. ingress data plane policing policy
- D. slow drain policy
- E. ingress control plane policing policy
Answer: A,C
Explanation:
Explanation
Slow Drain handles FCoE packets that are causing traffic congestion on ACI fabric. So, it is wrong.
Ingress control plane is wrong, because the request is for "application data flowing".
L2 interface policy is concerned about QinQ and VLAN scope.
NEW QUESTION 41
Which table holds IP address, MAC address and VXLAN/VLAN information on a Cisco ACI leaf?
- A. endpoint
- B. ARP
- C. RIB
- D. adjacency
Answer: A
Explanation:
Reference:
https://www.cisco.com/c/en/us/solutions/collateral/data-center-virtualization/application-centric- infrastructure/white-paper-c11-739989.html
NEW QUESTION 42
An engineer wants to filter the System Faults page and view only the active faults that are present in the Cisco ACI fabric. Which two lifecycle stages must be selected for filtering? (Choose two.)
- A. Retaining
- B. Soaking
- C. Raised, Clearing
- D. Raised
- E. Soaking, Clearing
Answer: C,D
Explanation:
Reference:
https://www.cisco.com/c/en/us/td/docs/switches/datacenter/aci/apic/sw/all/faults/guide/b_APIC_Faults_Errors/ b_IFC_Faults_Errors_chapter_01.html
NEW QUESTION 43
A Cisco ACI bridge domain and VRF are configured with a default data-plane learning configuration. Which two endpoint attributes are programmed in the leaf switch when receiving traffic? (Choose two.)
- A. Remote IP
- B. Local Subnet
- C. Remote MAC. IP
- D. Local IP, not MAC
- E. Local MAC, IP
- F. Remote Subnet
Answer: A,E
NEW QUESTION 44
Which two actions extend a Layer 2 domain beyond the ACI fabric? (Choose two.)
- A. creating an external physical network
- B. extending the EPG out of the ACI fabric
- C. extending the bridge domain out of the ACI fabric
- D. creating a single homed Layer 3 Out
- E. extending the routed domain out of the ACI fabric
Answer: B,E
Explanation:
Section: External Network Connectivity
NEW QUESTION 45
Which new construct must a user create when configuring in-band management?
- A. management tenant
- B. bridge domain
- C. VLAN pool
- D. management contract
Answer: B
Explanation:
Reference:
https://www.cisco.com/c/en/us/td/docs/switches/datacenter/aci/apic/sw/kb/ b_KB_Configuring_Static_Management_Access.html
NEW QUESTION 46 
Refer to the exhibit. An engineer is implementing Cisco ACI - VMware vCenter integration for a blade server that lacks support of bonding. Which port channel mode results in "route based on originating virtual port" on the VMware VDS?
- A. MAC Pinning-Physical-NIC-load
- B. LACP Active
- C. LACP Passive
- D. MAC Pinning+
- E. Static Channel - Mode On
Answer: D
Explanation:
Section: Integrations
NEW QUESTION 47
An engineer is implementing a Cisco ACI data center network that includes Cisco Nexus 2000 Series 10G fabric extenders. Which physical topology is supported?
A)
B)
C)
D)
- A. Option A
- B. Option D
- C. Option B
- D. Option C
Answer: B
NEW QUESTION 48
An engineer is implementing a connection that represents an external bridged network. Which two configurations are used? (Choose two.)
- A. Layers 2 internal
- B. Static path binding
- C. Layer 2 remote fabric
- D. VXLAN outside
- E. Layer 2 outside
Answer: C,E
NEW QUESTION 49
A situation causes a fault to be raised on the APIC. The ACI administrator does not want that fault to be raised because it is not directly relevant to the environment. Which action should the administrator take to prevent the fault from appearing?
- A. Create a stats threshold policy with both rising and falling thresholds defined so that the critical severity threshold matches the squelched threshold.
- B. Under System -> Faults, right-click on the fault and select Acknowledge Fault so that acknowledged faults will immediately disappear.
- C. Create a new global health score policy that ignores specific faults as identified by their unique fault code.
- D. Under System -> Faults, right-click on the fault and select Ignore Fault to create a fault severity assignment policy that hides the fault.
Answer: D
Explanation:
Section: ACI Fabric Infrastructure
NEW QUESTION 50
An engineer configured Layer 2 extension from the ACI fabric and changed the Layer 2 unknown unicast policy from Flood to Hardware Proxy. How does this change affect the flooding of the L2 unknown unicast traffic?
- A. It is forwarded to one of the APICs to perform as a proxy.
- B. It is forwarded to one of the spines to perform as a spine proxy.
- C. It is flooded within the whole fabric.
- D. It is dropped by the leaf when the destination endpoint is not present in the endpoint table.
Answer: B
NEW QUESTION 51
Refer to the exhibit.
An engineer must configure an L3Out peering with the backbone network. The L3Out must forward unicast and multicast traffic over the link. Which two methods should be used to configure L3Out to meet these requirements? (Choose two.)
- A. port channel with SVI
- B. VPC with SVI
- C. Layer 3 floating SVI
https://www.cisco.com/c/en/us/solutions/collateral/data-center-virtualization/application-centricinfrastructure/ guide-c07-743150.html#_L3Out_sStatic_rRoutes - D. Layer 3 routed port
- E. Layer 3 routed subinterface
Answer: C,E
NEW QUESTION 52
......
Authentic Best resources for 300-620: https://www.vce4plus.com/Cisco/300-620-valid-vce-dumps.html
300-620 Test Engine Practice Exam: https://drive.google.com/open?id=1SmyI1zsJ0LbAKWkQYkAwYGUaMRsRemaG