300-620 Exam Info and Free Practice Test Professional Quiz Study Materials [Q56-Q75]

NEW QUESTION 56
A network engineer must configure a Cisco ACI system to detect network loops for untagged and tagged traffic The loop must be detected and slopped by disabling an interface within 4 seconds Which configuration must be used?

Option A

Option B

Option C

NEW QUESTION 57
What represents the unique identifier of an ACI object?

universal resource identifier (URI)

application programming interface

management information tree

distinguished name

NEW QUESTION 58
What must be enabled in the bridge domain to have the endpoint table learn the IP addresses of endpoints?

L2 unknown unicast: flood

GARP based detection

unicast routing

subnet scope

NEW QUESTION 59
Refer to the exhibit.

Refer to the exhibit. The EPG-100 must be extended to the vCenter as a port group with a tagged VLAN ID of 100. Which set of actions accomplishes this goal?

Define a static VLAN range (from 100-200) under a VLAN pool that is associated with the dc1vcdev domain.
Associate the dc1vcdev domain with EPG and select these settings:
Untagged VLAN Access: unselected
VLAN Mode: Static with Encap: 100

Define a static VLAN range (from 100-200) under a VLAN pool that is associated with the dc1vcdev domain.
Associate the dc2vcdev domain with EPG and select these settings:
Untagged VLAN Access: selected
VLAN Mode: Static with Encap: 100

Define a dynamic VLAN range (from 100-200) under a VLAN pool that is associated with the del vdev domain.
Associate the dc1vcdev domain with EPG and select these settings:
Untagged VLAN Access: unselected
VLAN Mode: Static with Encap: 100

Define a dynamic VLAN range (from 100-200) under a VLAN pool that is associated with the dc1vdev domain.
Associate the dc2vcdev domain with EPG and select these settings:
Untagged VLAN Access: selected
VLAN Mode: Static with Encap: 100

NEW QUESTION 60
An engineer has set the VMM resolution immediacy to pre-provision in a Cisco ACI environment. No Cisco Discovery Protocol neighborship has been formed between the hypervisors and the ACI fabric leaf nodes. How does this affect the download policies to the leaf switches?

No policies are downloaded because LLDP is the only supported discovery protocol.

Policies are downloaded when the hypervisor host is connected to the VMM VDS.

Policies are downloaded to the ACI leaf switch regardless of Cisco Discovery Protocol neighborship.

No policies are downloaded because there is no discovery protocol neighborship.

NEW QUESTION 61
How is an EPG extended outside of the ACI fabric?

Create an external bridged network that is assigned to a leaf port.

Create an external routed network that is assigned to an EPG.

Enable unicast routing within an EPG.

Statically assign a VLAN ID to a leaf port in an EPG.

NEW QUESTION 62
Refer to the exhibit.

An engineer is integrating a VMware vCenter with Cisco ACI VMM domain configuration. ACI creates port-group names with the format of “Tenant | Application | EPG”. Which configuration option is used to generate port groups with names formatted as “Tenant=Application=EPG”?

enable tag collection

security domains

delimiter

virtual switch name

NEW QUESTION 63

Refer to the exhibit. Which two objects are created as a result of the configuration? (Choose two.)

application profile

attachable AEP

bridge domain

endpoint group

VRF

NEW QUESTION 64
Which feature dynamically assigns or modifies the EPG association of virtual machines based on their attributes?

vzAny contracts

standard contracts

application EPGs

uSeg EPGs

NEW QUESTION 65
What does a bridge domain represent?

Layer 3 cloud

Layer 2 forwarding construct

tenant

physical domain

NEW QUESTION 66

Refer to the exhibit. Which action should be taken to ensure authentication if the RADIUS servers are unavailable?

Adjust the priority of server 10.1.1.1 to 1.

Assign the user to the default role.

Set the default login realm to LDAP.

Set the fallback login to local.

NEW QUESTION 67
A bridge domain for an EPC called “Web Servers” must be created in the Cisco APIC. The configuration must meet these requirements:
Only traffic to known Mac addresses must be allowed to reduce noice.
The multicast traffic must be limited to the ports that are participating in multicast routing.
The endpoints within the bridge domain must be kept in the endpoint table for 20 minultes without any updates.
Which set of steps configures the bridge domain that satisfies the requirements?

Select the ARP Flooding checkbox.
Create an Endpoint Retention Policy with a Remote Endpoint Aging Interval of 20 minutes.
Set L3 Unknown Multicast Flooding to Optimized Flooding

Set L2 Unknown Unicast to Hardware Proxy.
Configure L3 Unknown Multicast Flooding to Optimized Flood.
Create an Endpoint Retention Policy with a Local Endpoint Aging interval of 1200 seconds.

Switch L2 Unknown Unicast to Flood.
Select the default Endpoint Retention Policy and set the Local Endpoint Aging to 20 minutes.
Set Multicast Destination Flooding to Flood in Encapsulation.

Multicast Destination Flooding should be set to Flood in BD.
Set L3 Unknown Multicast Flooding to Flood.
Select the default Endpoint Retention Policy with a Local Endpoint Aging Interval of 1200 seconds.

NEW QUESTION 68
Which new construct must a user create when configuring in-band management?

VLAN pool

management contract

management tenant

bridge domain

NEW QUESTION 69
Which attribute should be configured for each user to enable RADIUS for external authentication in Cisco ACI?

cisco-security domain

cisco-auth-features

cisco-aci-role

cisco-av-pair

NEW QUESTION 70
Which statement about ACI syslog is true?

Notifications for different scopes of syslog objects can be sent only to one destination.

Syslog messages are sent to the destination through the spine.

All syslog messages are sent to the destination through APIC.

Switches send syslog messages directly to the destinations.

NEW QUESTION 71
Which endpoint learning operation is completed on the egress leaf switch when traffic is received from an L3Out?

The source MAC and IP address of the traffic is learned as a local endpoint.

The source MAC address of the traffic is learned as a remote endpoint.

No source MAC or IP address of the traffic is learned as a remote endpoint.

The source IP address of the traffic is learned as a remote endpoint.

NEW QUESTION 72
On which two interface types should a user configure storm control to protect against broadcast traffic? (Choose two.)

APIC facing interfaces

port channel on a single leaf switch

all interfaces on the leaf switches in the fabric

endpoint-facing trunk interface

fabric uplink interfaces on the leaf switches

NEW QUESTION 73
Refer to the exhibit.

Refer to the exhibit. An engineer configures communication between the EPGs in different tenants. Which action should be taken to create the subnet?

Change Scope to Shared between VRFs.

Leave Scope set to Private to VRF.

Add the L3Out for Route Profile value.

Change Scope to Advertised Externally.

NEW QUESTION 74
An engineer must configure RADIUS authentication with Cisco ACI for remote authentication with out-of-band management access. Drag and drop the RADIUS configuration steps from the left into the required implementation order on the right. Not all steps are used.

NEW QUESTION 75
What do Pods use to allow Pod-to-Pod communication in a Cisco ACI Multi-Pod environment?

over Layer 3 directly connected back-to-back spines

over Layer 3 Out connectivity via border leafs

over Layer 3 IPN connectivity via border leafs

over Layer 3 IPN connectivity via spines

300-620 Exam Info and Free Practice Test Professional Quiz Study Materials [Q56-Q75]

Understanding functional and technical aspects of Implementing Cisco Application Centric Infrastructure (300-620 DCACI) Security Concepts

Be the first to reply

Leave a Reply Cancel reply

Understanding functional and technical aspects of Implementing Cisco Application Centric Infrastructure (300-620 DCACI) Security Concepts