[2023] Use Valid New Free 300-620 Exam Dumps & Answers
300-620 Braindumps PDF, Cisco 300-620 Exam Cram
NEW QUESTION # 44
A packet is routed between two endpoints on different Cisco ACI leaf switches. Which VXLAN VNID is applied to the packet?
- A. BD
- B. FD
- C. VRF
- D. EPG
Answer: D
NEW QUESTION # 45
Where is the COOP database located?
- A. leaf
- B. spine
- C. endpoint
- D. APIC
Answer: B
NEW QUESTION # 46
A network engineer must allow secure access to the Cisco ACl out-of-band (OOB) management only from external subnets 10 0 0024 and 192.168 20 G'25. Which configuration set accomplishes this goal?
- A. Option A
- B. Option C
- C. Option D
- D. Option B
Answer: B
NEW QUESTION # 47
Drag and drop the Cisco ACI Layer 4 to Layer 7 service insertion terms on the left to the correct descriptions on the right.
Answer:
Explanation:
NEW QUESTION # 48
Refer to the exhibit.
Refer to the exhibit. An administrator configures inter-VRF route leaking between Production:vrf-prod and Non-Production:vrf-nonprod. However, the route in the Non-Production:vrf-nonprod VRF to the production tenant is missing. Which action resolves the VRF route leaking issue?
- A. Change the contract scope to Global.
- B. Enable the Shared between VRFs option for the EPG subnet in the non-production VRF.
- C. Export the contract from provider to consumer tenant.
- D. Enable the Shared between VRFs option for the BD subnet in the production VRF.
Answer: D
NEW QUESTION # 49
How is an EPG extended outside of the ACI fabric?
- A. Create an external routed network that is assigned to an EPG.
- B. Statically assign a VLAN ID to a leaf port in an EPG.
- C. Create an external bridged network that is assigned to a leaf port.
- D. Enable unicast routing within an EPG.
Answer: B
Explanation:
Reference:
https://www.dclessons.com/l2-external-network-with-aci
NEW QUESTION # 50
An engineer is configuring a VRF for a tenant named Cisco. Drag and drop the child objects on the left onto the correct containers on the right for this configuration.
Answer:
Explanation:
Explanation
Application profile---> VRF--> Bridge Domain---> EPG
NEW QUESTION # 51
An engineer configured a bridge domain with the hardware-proxy option for Layer 2 unknown unicast traffic.
Which statement is true about this configuration?
- A. The leaf switch drops the Layer 2 unknown unicast packet if it is unable to find the MAC address in the local forwarding tables.
- B. The leaf switch forwards the Layers 2 unknown unicast packets to all other leaf switches if it is unable to find the MAC address in its local forwarding tables.
- C. The Layer 2 unknown hardware proxy lacks support of the topology change notification.
- D. The spine switch drops the Layer 2 unknown unicast packet if it is unable to find the MAC address in the proxy database.
Answer: A
Explanation:
Section: ACI Packet Forwarding
NEW QUESTION # 52
Refer to the exhibit.
An engineer is implementing Cisco ACI - VMware vCenter integration for a blade server that lacks support of bonding. Which port channel mode results in "route based on originating virtual port" on the VMware VDS?
- A. LACP Passive
- B. LACP Active
- C. MAC Pinning-Physical-NIC-load
- D. MAC Pinning+
- E. Static Channel - Mode On
Answer: D
NEW QUESTION # 53
What are two requirements for the IPN network when implementing a Multi-Pod ACI fabric? (Choose two.)
- A. OSPF routing
- B. PIM ASM multicast routing
- C. BGP routing
- D. VLAN ID 4
- E. EIGRP routing
Answer: A,D
NEW QUESTION # 54
An engineer is configuring a VRF for a tenant named Cisco. Drag and drop the child objects on the left onto the correct containers on the right for this configuration.
Answer:
Explanation:
NEW QUESTION # 55
Which statement regarding ACI Multi-Pod and TEP pool is true?
- A. The same TEP pool is used in all Pods.
- B. A different TEP pool must be assigned to each Pod.
- C. The IP addresses used in the IPN network can overlap TEP pool of the APIC.
- D. The Pod1 TEP pool must be split and a portion of the TEP pool allocated to each Pod.
Answer: B
NEW QUESTION # 56
An engineer must allow multiple external networks to communicate with internal ACI subnets. Which action should the engineer take to assign the prefix to the class ID of the external Endpoint Group?
- A. Configure subnets with the External Subnets for External EPG flag enabled.
- B. Configure subnets with the Import Route Control Subnet flag enabled.
- C. Enable the Export Route Control Subnet for the External Endpoint Group flag.
- D. Enable an L30ut with Shared Route Control Subnet.
Answer: A
Explanation:
https://www.cisco.com/c/en/us/td/docs/switches/datacenter/aci/apic/sw/1-x/ACI_Best_Practices/b_ACI_Best_Practices/b_ACI_Best_Practices_chapter_01001.html
NEW QUESTION # 57
An engineer needs to deploy a leaf access port policy group in ACI Fabric to support the following requirements:
* Control the amount of application data flowing into the system
* Allow the newly connected device to auto-negotiate link speed with the leaf switch Which two ACI policies must be configured to achieve these requirements? (Choose two.)
- A. L2 interface policy
- B. ingress control plane policing policy
- C. ingress data plane policing policy
- D. slow drain policy
- E. link level policy
Answer: C,E
Explanation:
Slow Drain handles FCoE packets that are causing traffic congestion on ACI fabric. So, it is wrong.
Ingress control plane is wrong, because the request is for "application data flowing".
L2 interface policy is concerned about QinQ and VLAN scope.
NEW QUESTION # 58
An engineer is extending an EPG out of the ACI fabric using static path binding. Which statement about the endpoints is true?
- A. External endpoints are in the same EPG as the directly attached endpoints.
- B. External endpoints are in a different bridge domain than the endpoints in the fabric.
- C. Endpoints must connect directly to the ACI leaf port.
- D. Endpoint learning encompasses the MAC address only.
Answer: D
NEW QUESTION # 59
Refer to the exhibit.
A Cisco ACI fabric is newly deployed, and the security team requires more visibility of all inter-EPG traffic flows. All traffic in a VRF must be forwarded to an existing firewall pair. During fallover, the standby firewall must continue to use the same IP and MAC as the primary firewall. Drag and drop the steps from the left Into the Implementation order on the right to configure the service graph that meets the requirements. (Not all steps are used.)
Answer:
Explanation:
Explanation
https://www.cisco.com/c/en/us/td/docs/switches/datacenter/aci/apic/sw/1-x/L4-L7_Services_Deployment/guide/b
* Create a service bridge domain and a layer 4 to layer 7 device within one cluster interface.
NEW QUESTION # 60
Which action sets Layer 2 loop migration in an ACI Fabric with a Layer 2 Out configured?
- A. Disable STP on the ACI fabric.
- B. Disable STP in the external network.
- C. Enable STP on the ACI fabric.
- D. Enable MCP on the ACI fabric.
Answer: D
Explanation:
Section: External Network Connectivity
NEW QUESTION # 61
A data center administrator is upgrading an ACI fabric. There are 3 APIC controllers in the fabric and all the servers are dual-homed to pairs of leaf switches configured in VPC mode. How should the fabric be upgraded to minimize possible traffic impact during the upgrade?
- A. Option A
- B. Option D
- C. Option B
- D. Option C
Answer: A
NEW QUESTION # 62
An engineer is configuring a VRF for a tenant named Cisco. Drag and drop the child objects on the left onto the correct containers on the right for this configuration.
Answer:
Explanation:
Explanation
Application profile---> VRF--> Bridge Domain---> EPG
NEW QUESTION # 63
All workloads in VLAN 1001 have been migrated into EPG-1001. The requirement is to move the gateway address for VLAN 1001 from the core outside the Cisco ACI fabric into the Cisco ACI fabric. The endpoints in EPG-1001 must route traffic to endpoints in other EPGs and minimize flooded traffic in the fabric. Which configuration set is needed on the bridge domain to meet these requirements?
- A. Disable ARP Flood Disable Limn Endpoint Learning
- B. Disable Local IP Learning Limit Disable Unicast Routing
- C. Enable Flood Enable Unicast Routing
- D. Enable Hardware Proxy Enable Unicas! Routing
Answer: D
NEW QUESTION # 64
An engineer must limit management access to me Cisco ACI fabric that originates from a single subnet where the NOC operates. Access should be limited to SSH and HTTPS only. Where should the policy be configured on the Cisco APIC to meet the requirements?
- A. ACL on the management interface of the APIC
- B. policy on the management VLAN
- C. ACL on the console interface
- D. policy In the management tenant
Answer: D
Explanation:
https://www.cisco.com/c/en/us/td/docs/switches/datacenter/aci/apic/sw/1-x/Operating_ACI/guide/b_Cisco_Operating_ACI/b_Cisco_Operating_ACI_chapter_0111.html
NEW QUESTION # 65
......
Feel Cisco 300-620 Dumps PDF Will likely be The best Option: https://www.actual4cert.com/300-620-real-questions.html
New 2023 300-620 Sample Questions Reliable 300-620 Test Engine: https://drive.google.com/open?id=1YZxf9xDW6ujafrqAimqjRACqZcxUsggR