Real 300-620 are Uploaded by Prep4pass provide 2021 Latest 300-620 Practice Tests Dumps.
All 300-620 Dumps and Implementing Cisco Application Centric Infrastructure Training Courses Help candidates to study and pass the Implementing Cisco Application Centric Infrastructure Exams hassle-free!
NEW QUESTION 34
Which feature dynamically assigns or modifies the EPG association of virtual machines based on their attributes?
- A. vzAny contracts
- B. uSeg EPGs
- C. standard contracts
- D. application EPGs
Answer: A
NEW QUESTION 35
Which type of profile needs to be created to deploy an access port policy group?
- A. leaf interface
- B. module
- C. Pod
- D. attachable entity
Answer: D
NEW QUESTION 36
A data center administrator is upgrading an ACI fabric. There are 3 APIC controllers in the fabric and all the servers are dual-homed to pairs of leaf switches configured in VPC mode. How should the fabric be upgraded to minimize possible traffic impact during the upgrade?
- A. 1. Create two maintenance groups for APIC controllers: VPC left and VPC right.
2.Upgrade the leaf switches.
3.Upgrade the first group of controllers.
4.Upgrade the second group of controllers. - B. 1. Create two maintenance groups for the leaf switches: VPC left and VPC right.
2.Upgrade the APIC controllers.
3.Upgrade the first group of leaf switches.
4.Upgrade the second group of leaf switches. - C. 1. Create two maintenance groups for the APIC controllers: VPC left and VPC right.
2.Upgrade the first group of controllers.
3.Upgrade the second group of controllers.
4.Upgrade the leaf switches. - D. 1. Create two maintenance groups for the leaf switches: VPC left and VPC right.
2.Upgrade the first group of switches.
3.Upgrade the second group of switches.
4.Upgrade the APIC controllers.
Answer: B
NEW QUESTION 37
Which two types of interfaces are supported on border leaf switches to connect to an external router? (Choose two.)
- A. FEX host interface
- B. subinterface with VXLAN tagging
- C. Switch Virtual Interface
- D. subinterface with 802.1Q tagging
- E. out of band interface
Answer: C,D
Explanation:
Section: ACI Fabric Infrastructure
NEW QUESTION 38
An engineer configured Layer 2 extension from the ACI fabric and changed the Layer 2 unknown unicast policy from Flood to Hardware Proxy. How does this change affect the flooding of the L2 unknown unicast traffic?
- A. It is forwarded to one of the APICs to perform as a proxy.
- B. It is forwarded to one of the spines to perform as a spine proxy.
- C. It is flooded within the whole fabric.
- D. It is dropped by the leaf when the destination endpoint is not present in the endpoint table.
Answer: B
Explanation:
Section: ACI Packet Forwarding
Explanation/Reference: https://www.cisco.com/c/en/us/td/docs/switches/datacenter/aci/apic/sw/2-x/L2_config/ b_Cisco_APIC_Layer_2_Configuration_Guide/ b_Cisco_APIC_Layer_2_Configuration_Guide_chapter_010.html
NEW QUESTION 39
An engineer configured a bridge domain with the hardware-proxy option for Layer 2 unknown unicast traffic. Which statement is true about this configuration?
- A. The leaf switch forwards the Layers 2 unknown unicast packets to all other leaf switches if it is unable to find the MAC address in its local forwarding tables.
- B. The leaf switch drops the Layer 2 unknown unicast packet if it is unable to find the MAC address in the local forwarding tables.
- C. The Layer 2 unknown hardware proxy lacks support of the topology change notification.
- D. The spine switch drops the Layer 2 unknown unicast packet if it is unable to find the MAC address in the proxy database.
Answer: B
NEW QUESTION 40
An administrator must migrate the vSphere Management VMkernel of all ESXi hosts in the production cluster from the standard default virtual switch to a VDS that is integrated with APIC in a VMM domain. Which action must be completed in this scenario?
- A. The administrator must set the Management VMkernel BD resolution immediacy to On-Demand.
- B. The Management VMkernel EPG resolution must be set to Pre-Provosion.
- C. The VMkernel Management BD must be located under the Management Tenant.
- D. The administrator must create an in-band VMM Management EPG before performing the migration.
Answer: B
NEW QUESTION 41
Which endpoint learning operation is completed on the egress leaf switch when traffic is received from an L3Out?
- A. No source MAC or IP address of the traffic is learned as a remote endpoint.
- B. The source MAC and IP address of the traffic is learned as a local endpoint.
- C. The source IP address of the traffic is learned as a remote endpoint.
- D. The source MAC address of the traffic is learned as a remote endpoint.
Answer: C
NEW QUESTION 42
Which statement regarding ACI Multi-Pod and TEP pool is true?
- A. The Pod1 TEP pool must be split and a portion of the TEP pool allocated to each Pod.
- B. The same TEP pool is used in all Pods.
- C. A different TEP pool must be assigned to each Pod.
- D. The IP addresses used in the IPN network can overlap TEP pool of the APIC.
Answer: C
NEW QUESTION 43
Drag and drop the Cisco ACI Layer 4 to Layer 7 service insertion terms on the left to the correct descriptions on the right.
Answer:
Explanation:

NEW QUESTION 44
A network engineer must design a method to allow the Cisco ACI to redirect traffic to the firewalls. Only traffic that matches specific L4-L7 policy rules should be redirected. The load must be distributed across multiple firewalls to scale the performance horizontally. Which action must be taken to meet these requirements?
- A. Configure ACI Service Graph with Symmetric PBR.
- B. Configure ACI Service Graph with Unidirectional PBR.
- C. Implement ACI Service Graph Two Nodes with GIPo.
- D. Implement ACI Service Graph with GIPo.
Answer: A
NEW QUESTION 45
An engineer has set the VMM resolution immediacy to pre-provision in a Cisco ACI environment. No Cisco Discovery Protocol neighborship has been formed between the hypervisors and the ACI fabric leaf nodes. How does this affect the download policies to the leaf switches?
- A. No policies are downloaded because there is no discovery protocol neighborship.
- B. Policies are downloaded to the ACI leaf switch regardless of Cisco Discovery Protocol neighborship.
- C. No policies are downloaded because LLDP is the only supported discovery protocol.
- D. Policies are downloaded when the hypervisor host is connected to the VMM VDS.
Answer: B
Explanation:
Section: Integrations
Explanation
NEW QUESTION 46
An engineer needs to deploy a leaf access port policy group in ACI Fabric to support the following requirements:
* Control the amount of application data flowing into the system
* Allow the newly connected device to auto-negotiate link speed with the leaf switch Which two ACI policies must be configured to achieve these requirements? (Choose two.)
- A. link level policy
- B. ingress data plane policing policy

Slow Drain handles FCoE packets that are causing traffic congestion on ACI fabric. So, it is wrong.
Ingress control plane is wrong, because the request is for "application data flowing".
L2 interface policy is concerned about QinQ and VLAN scope. - C. L2 interface policy
- D. slow drain policy
- E. ingress control plane policing policy
Answer: A,B
NEW QUESTION 47
An engineer must ensure that Cisco ACI flushes the appropriate endpoints when a topology change notification message is received in an MST domain. Which three steps are required to accomplish this goal? (Choose three.)
- A. Associate the STP interface policy to the appropriate interface policy group.
- B. Create a new region policy under the spanning tree policy.
- C. Map VLAN range to MAT instance number.
- D. Enable the BPDU interface controls under the spanning tree interface policy.
- E. Bind the spanning tree policy to the switch policy group.
- F. Configure a new STP interface policy.
Answer: A,D,F
NEW QUESTION 48
A RADIUS user resolves its role via the Cisco AV Pair. What object does the Cisco AV Pair resolve to?
- A. managed object class
- B. tenant
- C. primary Cisco APIC
- D. security domain
Answer: A
Explanation:
Reference:
https://www.cisco.com/c/en/us/td/docs/switches/datacenter/aci/apic/sw/2-x/Security_config/ b_Cisco_APIC_Security_Configuration_Guide/b_Cisco_APIC_Security_Guide_chapter_01011.html
NEW QUESTION 49
......
Valid Way To Pass Cisco's 300-620 Exam with : https://www.prep4pass.com/300-620_exam-braindumps.html
Free Test Engine For Implementing Cisco Application Centric Infrastructure Certification Exams: https://drive.google.com/open?id=19KDHoU1u64CZa3Cb_57ZwL3aeJ5Vw67A
