Pass the Cisco 300-620 Exam 2023 - Best 300-620 Preparation Material

Pass the Cisco 300-620 Exam 2023 – Best 300-620 Preparation Material

Jonnie Karnath2023-04-11T22:32:56+00:00

The Cisco 300-620 exam is a challenging test that requires a solid understanding of the subject matter. But with the right preparation materials, you can increase your chances of passing the exam on the first try. That’s where Certspot comes in with their latest 300-620 preparation material. Their 300-620 practice exam questions are carefully crafted to cover all the topics and concepts that you’ll need to know to pass the Implementing Cisco Application Centric Infrastructure (DCACI) exam. The material is updated regularly to ensure that it reflects any changes or updates to the exam. By studying Certspot 300-620 preparation material, you’ll be able to identify any knowledge gaps and focus your studying efforts on those areas. This will help you to study more effectively, ultimately leading to a better chance of passing the exam.

Page 1 of 6

1. What are two requirements for the IPN network when implementing a Multi-Pod ACI fabric? (Choose two.)

EIGRP routing

PIM ASM multicast routing

BGP routing

VLAN ID 4

OSPF routing

2. A Cisco ACI environment consists of multiple silent hosts that are often relocated between leaf switches. When the host is relocated, the bridge domain takes more than a few seconds to relearn the host’s new location. The requirement is to minimize the relocation impact and make the ACI fabric relearn the new location of the host faster.

Which action must be taken to meet these requirements?

Set Unicast Routing to Enabled.

Configure ARP Flooding to Enabled.

Set L2 Unknown Unicast to Hardware Proxy.

Configure IP Data-Plane Learning to No.

3. Regarding the MTU value of MP-BGP EVPN control plane packets in Cisco ACI, which statement about communication between spine nodes in different sites is true?

By default, spine nodes generate 9000-bytes packets to exchange endpoints routing information. As a result, the Inter-Site network should be able to carry 9000-bytes packets.

By default, spine nodes generate 1500-bytes packets to exchange endpoints routing information. As a result, the Inter-Site network should be able to carry 1800-bytes packets.

By default, spine nodes generate 1500-bytes packets to exchange endpoints routing information. As a result, the Inter-Site network should be able to carry 1500-bytes packets.

By default, spine nodes generate 9000-bytes packets to exchange endpoints routing information. As a result, the Inter-Site network should be able to carry 9100-bytes packets.

4. An engineer must configure a group of servers with a contract that uses TCP port 80. The EGP that contains the web servers requires an external Layer 3 cloud to initiate communication.

Which action must be taken to meet these requirements?

Configure the EGP as a provider and L3 out as consumer of the contract.

Configure OSPF to exchange routes between the L3 out and EG

Configure a taboo contract and apply it to the EP

Configure the EPG as a consumer and L3 out as a provider of the contract.

5. An ACI administrator notices a change in the behavior of the fabric.

Which action must be taken to determine if a human intervention introduced the change?

Inspect event records in the APIC UI to see all actions performed by users.

Inspect /var/log/audit_messages on the APIC to see a record of all user actions.

Inspect audit logs in the APIC UI to see all user events.

Inspect the output of show command history in the APIC CL

6. A Solutions Architect is asked to design two data centers based on Cisco ACI technology that can extend L2/L3, VXLAN, and network policy across locations. ACI Multi-Pod has been selected.

Which two requirements must be considered in this design? (Choose two.)

ACI underlay protocols, i.e. COOP, IS-IS and MP-BGP, spans across pods. Create QoS policies to make sure those protocols have higher priority.

A single APIC Cluster is required in a Multi-Pod design. It is important to place the APIC Controllers in different locations in order to maximize redundancy and reliability.

ACI Multi-Pod requires an IP Network supporting PIM-Bidir.

ACI Multi-Pod does not support Firewall Clusters across Pods. Firewall Clusters should always be local.

Multi-Pod requires multiple APIC Controller Clusters, one per pod. Make sure those clusters can communicate to each other through a highly available connection.

7. Refer to the exhibit.

An engineer configures an L3Out but receives the error presented.

Which action clears the fault?

Acknowledge the QoS-related error.

Associate a custom QoS class.

Create a custom QoS policy.

Set the QoS policy to Level 3.

8. A network engineer must backup the PRODUCTION tenant. The configuration backup should be stored on the APIC using a markup language and contain all secure information.

Which export policy must be used to meet these requirement?

A)

Option A

Option B

Option D

9. An engineer must advertise a bridge domain subnet out of the ACI fabric to an OSPF neighbor.

Which two configuration steps are required? (Choose two.)

Configure Subnet scope to Advertised Externally

Add External Subnet for External EPG flag under External EP

Create Route Control Profile with the export direction under External EP

Add L30ut profile to the bridge domain using Associated L30uts section

Configure the Subnet under the EPG level.

10. An engineer is implementing Cisco ACI at a large platform-as-a-service provider using APIC controllers, 9396PX leaf switches, and 9336PQ spine switches. The leaf switch ports are configured as IEEE 802.1p ports.

Where does the traffic exit from the EPG in IEEE 802.1p mode in this configuration?

from leaf ports tagged as VLAN 0

from leaf ports untagged

from leaf ports tagged as VLAN 4094

from leaf ports tagged as VLAN 1

Page 2 of 6

11. An engineer is creating a configuration import policy that must terminate if the imported configuration is incompatible with the existing system.

Which import mode achieves this result?

merge

atomic

best effort

replace

12. What must be enabled in the bridge domain to have the endpoint table learn the IP addresses of endpoints?

L2 unknown unicast: flood

GARP based detection

unicast routing

subnet scope

13. How is broadcast forwarded in Cisco ACI Multi-Pod after ARP flooding is enabled?

Ingress replication is used on the spines to forward broadcast frames in the IPN infrastructure.

Within a pod, the ingress leaf switch floods the broadcast frame on all fabric ports.

Broadcast frames are forwarded inside the pod and across the IPN using the multicast address that is associated to the bridge domain.

For the specific bridge domain, all spines forward the broadcast frames to IPN routers.

14. A network administrator configures AAA inside the Cisco ACI fabric. The authentication goes through the local users if the TACACS+ server is not reachable. If the Cisco APIC is out of the cluster, the access must be granted through the fallback domain.

Which configuration set meets these requirements?

Ping Check: True Default Authentication Realm: Local Fallback Check: True

Ping Check: True Default Authentication Realm: TACACS+ Fallback Check: False

Ping Check: False Default Authentication Realm: Local Fallback Check: False

Ping Check: False Default Authentication Realm: TACACS+ Fallback Check: True

15. What are two PBR characteristics of the Cisco ACI Active-Active Across Pods deployment mode in Cisco ACI Multi-Pod design? (Choose two.)

Traffic is dynamically redirected to the firewall that owns the connection.

Deployment occurs in transparent mode.

The connection state is unsynchronized.

Deployment occurs in go-to mode only.

This mode causes the traffic to flow asymmetrically.

16. Which type of port is used for in-band management within ACI fabric?

spine switch port

APIC console port

leaf access port

management port

17. When creating a subnet within a bridge domain, which configuration option is used to specify the network visibility of the subnet?

limit IP learning to subnet

scope

gateway IP

subnet control

18. The company’s Cisco ACI fabric hosts multiple customer tenants. To meet a service level agreement, the company is constantly monitoring the Cisco ACI environment. Syslog is one of the methods used for monitoring. Only events related to leaf and spine environmental information without specific customer data should be logged.

To which ACI object must the configuration be applied to meet these requirements?

access policy

infra tenant

switch profile

fabric policy

19. Which two protocols support accessing backup files on a remote location from the APIC? (Choose two.)

TFTP

FTP

SFTP

SMB

HTTPS

20. An engineer wants to filter the System Faults page and view only the active faults that are present in the Cisco ACI fabric.

Which two lifecycle stages must be selected for filtering? (Choose two.)

Raised

Retaining

Soaking, Clearing

Raised, Clearing

Soaking

Page 3 of 6

21. Refer to the exhibit.

How are the STP BPDUs forwarded over Cisco ACI fabric?

Cisco ACI acts as the STP root for all three external switches.

STP BPDUs that are generated by Switch2 are received by Switch1 and Switch3

STP BPDUs that are generated by Switch1 are received only by Switch3.

Cisco ACI fabric drops all STP BPDUs that are generated by the external switches.

22. What controls communication between EPGs?

Inter-EPG communication is controlled by BG

Inter-EPG communication is controlled by contracts.

Inter-EPG communication is controlled by IS-I

Inter-EPG communication is controlled by VXLA

23. An engineer must securely export Cisco APIC configuration snapshots to a secure, offsite location The exported configuration must be transferred using an encrypted tunnel and encoded with a platform-agnostic data format that provides namespace support.

Which configuration set must be used?

Option A

Option B

Option C

Option D

24. A situation causes a fault to be raised on the APIC. The ACI administrator does not want that fault to be raised because it is not directly relevant to the environment.

Which action should the administrator take to prevent the fault from appearing?

Under System -> Faults, right-click on the fault and select Acknowledge Fault so that acknowledged faults will immediately disappear.

Create a stats threshold policy with both rising and falling thresholds defined so that the critical severity threshold matches the squelched threshold.

Under System -> Faults, right-click on the fault and select Ignore Fault to create a fault severity assignment policy that hides the fault.

Create a new global health score policy that ignores specific faults as identified by their unique fault code.

25. Refer to the exhibit.

An engineer wants to initiate an ICMP ping from Server1 to Server2. The requirement is for the BD1 to enforce ICMP replies that follow the expected path. The packets must be prevented from taking the direct path from Leaf1 to Server1.

Which action must be taken on BD1 to meet these requirements?

Set L2 Unknown Unicast to Flood.

Set L2 Unknown Unicast to Hardware Proxy.

Disable Unicast Routing.

Enable ARP Flooding.

26. An engineer configures a Multi-Pod system with the default getaway residing outside of the ACI fabric for a bridge domain.

Which setting should be configured to support this requirement?

disable Limit IP Learning to Subnet

disable IP Data-plane Learning

disable Unicast Routing

disable Advertise Host Routes

27. What are two descriptions of ACI multi-site? (Choose two.)

The Inter-Site network routers should run OSPF to establish peering with the spines.

The Multi-Site orchestrator must be directly attached to one ACI leaf.

Routers in the inter-Site network must run OSP

DHCP relay, and MP-BGP

ACI Multi-Site is a solution that allows one APIC cluster to manage multiple ACI sites

ACI Multi-Site is a solution that supports a dedicated APIC cluster per site

28. When the subnet is configured on a bridge domain, on which physical devices is the gateway IP address configured?

all leaf switches and all spine nodes

only spine switches where the bridge domain of the tenant is present

only leaf switches where the bridge domain of the tenant is present

all border leaf nodes where the bridge domain of the tenant is present

29. Refer to the exhibit.

An engineer must allow IP mobility between Site1 and Site2 in a Cisco ACI Multi-Site orchestrator. The design must meet these requirements:

A disaster recovery (DR) solution must exist between the sites that do not require vMotion support.

The application must be started at a DR site without having to re-IP the application servers.

The solution must avoid any broadcast storms between the sites.

Which two actions meet these criteria? (Choose two.)

Define a unique bridge domain subnet per site.

Configure STP between Cisco ACI fabrics.

Deploy a local EPG for Site1 and Site2.

Disable Inter-site BUM Traffic.

Apply the L2 Stretch feature.

30. What is the purpose of the Overlay Multicast TEP in a Cisco ACI Multi-Site deployment?

to source and receive unicast VXLAN data plane traffic

to establish MP-BGP EVPN adjacencies with the spine nodes in remote sites

to encapsulate multicast traffic in a common multicast group

to perform head-end replication for BUM traffic

Page 4 of 6

31. An engineer must advertise a selection of external networks learned from a BGP neighbor into the ACI fabric.

Which L3Out subnet configuration option creates an inbound route map for route filtering?

External Subnets for the External EPG

Shared Route Control Subnet

Import Route Control Subnet

Shared Security Import Subnet

32. On which two interface types should a user configure storm control to protect against broadcast traffic? (Choose two.)

APIC facing interfaces

port channel on a single leaf switch

all interfaces on the leaf switches in the fabric

endpoint-facing trunk interface

fabric uplink interfaces on the leaf switches

33. Which two types of interfaces are supported on border leaf switches to connect to an external router? (Choose two.)

subinterface with VXLAN tagging

subinterface with 802.1Q tagging

FEX host interface

out of band interface

Switch Virtual Interface

34. An engineer must deploy Cisco ACI across 10 geographically separated data centers.

Which ACI site deployment feature enables the engineer to control which bridge domains contain Layer 2 flooding?

GOLF

Multi-Site

Multi-Pod

Stretched Fabric

35. An engineer configured Layer 2 extension from the ACI fabric and changed the Layer 2 unknown unicast policy from Flood to Hardware Proxy.

How does this change affect the flooding of the L2 unknown unicast traffic?

It is forwarded to one of the spines to perform as a spine proxy.

It is flooded within the whole fabric.

It is dropped by the leaf when the destination endpoint is not present in the endpoint table.

It is forwarded to one of the APICs to perform as a proxy.

36. Which table holds IP address, MAC address and VXLAN/VLAN information on a Cisco ACI leaf?

endpoint

adjacency

RIB

ARP

37. An engineer deploys a two-pod Cisco ACI Multi-Pod environment.

Why should no more than two Cisco APIC controllers be deployed in the same pod?

to enable equal capacity to scale in each pod

to avoid losing all replicas of a shard if a pod fails

to avoid hair-pinning traffic that is destined for the primary APIC controller between pods

to ensure that all nodes in all pods have local access to a controller

38. A network engineer demonstrates Cisco ACI to a customer. One of the test cases is to validate a disaster recovery event by resetting the ACI fabric to factory and then restoring the fabric to the state it was in before the event.

Which setting must be enabled on ACI to export all configuration parameters that are necessary to

meet these requirements?

enabled AES encryption

generated a tech-support file

encrypted export destination

enabled JSON format export

39. How is an EPG extended outside of the ACI fabric?

Create an external bridged network that is assigned to a leaf port.

Create an external routed network that is assigned to an EP

Enable unicast routing within an EP

Statically assign a VLAN ID to a leaf port in an EP

40. Which two dynamic routing protocols are supported when using Cisco ACI to connect to an external Layer 3 network? (Choose two.)

iBGP

VXLAN

IS-IS

RIPv2

eBGP

Page 5 of 6

41. Refer to the exhibit.

A client reports that the ACI domain connectivity to the fiber channel storage is experiencing a B2B credit oversubscription. The environment has a SYSLOG server for state collection messages.

Which value should be chosen to clear the critical fault?

300

410

350

510

42. What must be configured to redistribute externally learned OSPF routes within the ACI fabric?

Route Control Profile

BGP Route Reflector

BGP Inter-leak Route Map

PIM Sparse Mode

43. What is the advantage of implementing an active-active firewall cluster that is stretched across separate pods when anycast services are configured?

A cluster is capable to be deployed in transparent mode across pods.

A different MAC/IP configuration combination is configurable for the firewall in each pod.

Local traffic in a pod is load-balanced between the clustered firewalls.

The local pod anycast node is preferred by the local spines.

44. Refer to the exhibit.

Which action should be taken to ensure authentication if the RADIUS servers are unavailable?

Adjust the priority of server 10.1.1.1 to 1.

Set the fallback login to local.

Assign the user to the default role.

Set the default login realm to LDAP

45. A customer must upgrade the Cisco ACI fabric to use a feature from the new code release. However, there is no direct path from the current release to the desired one. Based on the Cisco APIC Upgrade/Downgrade Support Matrix, the administrator must go through one intermediate release.

Which set of steps must be taken to upgrade the fabric to the new release?

Upgrade the APICs to an interim release. Upgrade the switches to an interim release. Upgrade the APICs to the targeted release. Upgrade the leaf and spine switches to the targeted release.

Upgrade the APICs to an interim release and then switches to an interim release. When all switches are operational, upgrade leaf switches to the targeted release. Upgrade the spine switches to the targeted release. Upgrade the APICs to the targeted release.

Upgrade the APICs to an interim release. Upgrade the leaf switches directly to the targeted release. Upgrade the spine switches directly to the targeted release. Upgrade the APICs to the targeted release.

Upgrade the APICs directly to the targeted release. Upgrade the switches to an interim release. When all switches are operational, upgrade the leaf switches to the targeted release. Upgrade the spine switches to the targeted release.

46. In a Cisco ACI Multi-Site fabric, the Inter-Site BUM Traffic Allow option is enabled in a specific stretched bridge domain.

What is used to forward BUM traffic to all endpoints in the same broadcast domain?

ingress replication on the spines in the source site

egress replication on the destination leaf switches

egress replication on the source leaf switches

ingress replication on the spines in the destination site

47. An engineer created two interface protocol policies called Pol_CDP40275332 and Pol_LLDP46783451. The policies must be used together in a single policy.

Which ACI object must be used?

interface policy group

switch policy group

switch profile

interface profile

48. Which class of ACI object is presented in this output?

Contract

Bridge Domain

Tenant

Endpoint

49. A customer is deploying a new application across two ACI pods that is sensitive to latency and jitter. The application sets the DSCP values of packets to AF31 and CS6, respectively.

Which configuration changes must be made on the APIC to support the new application and prevent packets from being delayed or dropped between pods?

disable DSCP mapping on the IPN devices

disable DSCP translation policy

align the ACI QoS levels and IPN QoS policies

align the custom QoS policy on the EPG site in the customer tenant

50. Which Cisco APIC configuration prevents a remote network that is not configured on the bridge domain from

being learned by the fabric?

enable Limit IP Learning to Subnet

enable Unicast Routing

enable IP Data-plane Learning

enable ARP Flooding to BD

Page 6 of 6

51. As part of a migration, legacy non-ACI switches must be connected to the Cisco ACI fabric. All non-ACI switches run per-VLAN RSTP. After the non-ACI switches are connected to Cisco ACI, the STP convergence caused a microloop and significant CPU spike on all switches.

Which configuration on the interfaces of the external switches that face the Cisco ACI fabric resolves the problem?

BPDU guard

aggressive STP timers

BPDU filtering

STP type link shared

52. An engineer must create a backup of the Cisco ACI fabric for disaster recovery purposes. The backup must be transferred over a secure and encrypted transport. The backup file must contain all user and password related information. The engineer also wants to process and confirm the backup file validity by using a Python script. This requires the data structure to have a format similar to a Python dictionary.

Which configuration set must be used to meet these requirements?

Under the Create Remote location settings, select Protocol: FTP Under the Export policy, select - Format: XML - Modify Global AES Encryption Settings: Enabled

Under the Create Remote location settings, select Protocol: FTP Under the Export policy, select - Format: XML - Modify Global AES Encryption Settings: Disabled

Under the Create Remote location settings, select Protocol: SCP Under the Export policy, select - Format: JSON - Modify Global AES Encryption Settings: Disabled

Under the Create Remote location settings, select Protocol: SCP Under the Export policy, select - Format: JSON - Modify Global AES Encryption Settings: Enabled

53. What must be configured to allow SNMP traffic on the APIC controller?

out-of-band management interface

contract under tenant mgmt

SNMP relay policy

out-of-band bridge domain

54. A network engineer is integrating a new Hyperflex storage duster into an existing Cisco ACI fabric The Hyperflex cluster must be managed by vCenter so a new vSphere Distributed switch must be created In addition the hardware discovery must be performed by a vendor-neutral discovery protocol.

Which set of steps meets these requirements'?

Option A

Option B

Option C

Option D

55. All workloads in VLAN 1001 have been migrated into EPG-1001. The requirement is to move the gateway address for VLAN 1001 from the core outside the Cisco ACI fabric into the Cisco ACI fabric. The endpoints in EPG-1001 must route traffic to endpoints in other EPGs and minimize flooded traffic in the fabric.

Which configuration set is needed on the bridge domain to meet these requirements?

Disable ARP Flood Disable Limn Endpoint Learning

Enable Hardware Proxy Enable Unicast Routing

Disable Local IP Learning Limit Disable Unicast Routing

Enable Flood Enable Unicast Routing

56. A company must connect three Cisco ACI data centers by using Cisco ACI Multi-Site. An engineer must configure the Inter-Site Network (ISN) between the existing sites.

Which two configuration steps must be taken to implement the ISN? (Choose two.)

Configure OSPF on subinterfaces on routers that are directly connected with spine nodes.

Configure ISN site extension on Cisco routers in the network.

Configure OSPF on all ISN routers.

Configure BIDIR-PIM on all ISN routers.

Configure encapsulation VLAN-4 between the routers and spine nodes.

57. An engineer is implementing a connection that represents an external bridged network.

Which two configurations are used? (Choose two.)

Layer 2 remote fabric

Layer 2 outside

Layers 2 internal

Static path binding

VXLAN outside

58. Which two IP address types are available for transport over the ISN when they are configured from Cisco ACI Multi-Site Orchestrator? (Choose two.)

Management IP of APICs

Management IP of the MSO Node

Anycast Overlay Multicast TEP

MP-BGP EVPN Router-ID

Common Pervasive Gateway

Facebook Twitter LinkedIn Google + Email