300-620 by Cisco Valid Free Exam Practice Test

Question 1

A Cisco ACI fabric is integrated with a VMware environment. The engineer must back up the current configuration of the fabric and restore the vCenter password when the configuration is imported. Which action accomplishes this goal?

A. Enable the Global AES Encryption setting. B. Create a Configuration Import Policy. C. Set the Authentication type to Use Password. D. Select SCP protocol for the remote location.

Correct Answer: A

Question 2

A network engineer must allow secure access to the Cisco ACI out-of-band (OOB) management only from external subnets 10.0.0.0/24 and 192.168.20.0/25. Which configuration set accomplishes this goal?

A. Create a L3Out in the MGMT tenant in OOB VRF.
Set External Management Network Instance Profile as a consumer of the OOB contract.
Create an External EPG with two subnet entries with the external subnets. B. Create an EPG and BD in the MGMT tenant in OOB VRF.
Set OOB VRF to provide the contract.
Set a new EPG to consume the OOB contract. C. Create a PBR service graph in the MGMT tenant.
Create a management Profile with the required OOB EPG.
Redirect all traffic going into ACI management to the external firewall.
Create two subnet entries under the OOB Bridge domain with the required subnets. D. Create an OOB contract that allows the required ports.
Provide the contract from the OOB EPG.
Consume the contract by the OOB External Management Network Instance Profile.
Create two subnet entries in the External Management Network Profile with the required subnets.

Correct Answer: D

Question 3

When creating a subnet within a bridge domain, which configuration option is used to specify the network visibility of the subnet?

A. gateway IP B. subnet control C. scope D. limit IP learning to subnet

Correct Answer: C

Explanation: Only visible for ExamsLabs members. You can sign-up / login (it's free).

Question 4

In the context of ACI Multi-Site, when is the information of an endpoint (MAC/IP) that belongs to site 1 advertised to site 2 using the EVPN control plane?

A. Endpoint information is not exchanged across sites unless a policy is configured to allow communication across sites. B. Endpoint information is exchanged across sites when the endpoints are discovered in both sites. C. Endpoint information is not exchanged across sites unless COOP protocol is used. D. Endpoint information is exchanged across sites as soon as the endpoint is discovered in one site.

Correct Answer: A

Explanation: Only visible for ExamsLabs members. You can sign-up / login (it's free).

Question 5

Refer to the exhibit. An engineer created a local user named User on Cisco ACI. The engineer must configure the fabric so that the User can access only common and PROD tenants.

Which set of actions accomplishes the goal?

A. Add security domain "Tenant" to User.
Associate security domain "Tenant" under PROD tenant. B. Add security domain "common" to User.
Associate security domain "common" under PROD tenant. C. Add security domain "mgmt." to User.
Associate security domain "mgmt." under PROD tenant. D. Add security domain "all" to User.
Associate security domain "all" under PROD tenant

Correct Answer: B

Explanation: Only visible for ExamsLabs members. You can sign-up / login (it's free).

Question 6

An engineer must create a backup of the Cisco ACI fabric for disaster recovery purposes. The backup must be transferred over a secure and encrypted transport. The backup file must contain all user and password related information. The engineer also wants to process and confirm the backup file validity by using a Python script. This requires the data structure to have a format similar to a Python dictionary. Which configuration set must be used to meet these requirements?

A. Under the Create Remote location settings, select Protocol: SCP
Under the Export policy, select
- Format: JSON
- Modify Global AES Encryption Settings: Enabled B. Under the Create Remote location settings, select Protocol: FTP
Under the Export policy, select
- Format: XML
- Modify Global AES Encryption Settings: Disabled C. Under the Create Remote location settings, select Protocol: FTP
Under the Export policy, select
- Format: XML
- Modify Global AES Encryption Settings: Enabled D. Under the Create Remote location settings, select Protocol: SCP
Under the Export policy, select
- Format: JSON
- Modify Global AES Encryption Settings: Disabled

Correct Answer: A

Question 7

A Cisco ACI fabric must be integrated with a VMware vSphere environment. One of the ESXi hosts is still disconnected from the Distributed Virtual Switch (DVS) and the VMM domain. Two EPGs have already been created and associated with the VMM domain. An engineer must prepare the ACI configuration such that:
- EPG contracts must be sent to ACI leaf switches before a hypervisor
is attached to the DVS.
- EPG contracts must be pushed to leaf hardware as soon as the policy
is downloaded into the leaf software.
Which EPG configuration must be used to meet these requirements?

A. Resolution immediacy: Pre-provision
Deployment immediacy: Immediate B. Resolution immediacy: On-Demand
Deployment immediacy: Immediate C. Resolution immediacy: Pre-provision
Deployment immediacy: On-Demand D. Resolution immediacy: On-Demand
Deployment immediacy: On-Demand

Correct Answer: A

Explanation: Only visible for ExamsLabs members. You can sign-up / login (it's free).

Question 8

When Layer 3 routed traffic is destined to a Cisco ACI fabric, which mechanism does ACI use to detect silent hosts?

A. inverse ARP B. gratuitous ARP C. ARP gleaning D. proxy ARP

Correct Answer: C

Question 9

An engineer is implementing an out-of-band (OOB) management access for the Cisco ACI fabric.
The secure access must meet these requirements:
- Only GUI and secure shell must be allowed to access the management
interfaces of the ACIs.
- The only IP ranges that must be permitted to connect the fabric will
be 10.10.10.0/24 and 192.168.15.0/24.
Which configuration set meets these requirements?

A. Set up static IPs on the management interfaces from the required IP range.
Add the required subnets to the external network instance profile. B. Implement HTTPS and SSH protocol filters in the OOB contract.
Add the required subnets to the external network instance profile. C. Create an out-of-band EPG in the common tenant.
Associate the external network instance profile with the OOB contract. D. Create an out-of-band EPG in the external management entity.
Associate the management profile with the OOB contract.

Correct Answer: B

Question 10

Refer to the exhibit. The Cisco ACI fabric is built with L2Out to the N9K1 and N9K2 switches. The switches run the RSTP protocol. The requirement is for the Cisco ACI fabric to detect loops from the N9K and for the fabric to be protected against loops. Which set of actions must be taken to meet the requirements?

A. Configure the N9K STP link type as a shared link.
Enable MCP on ACI globally. B. Configure the N9K STP link type as point-to-point link.
Enable MCP on ACI globally. C. Configure the N9K STP link type as a point-to-point link.
Enable MCP on the ACI leaf interfaces. D. Configure the N9K STP link type as a shared link.
Enable MCP on the ACI leaf interfaces.

Correct Answer: A

Question 11

Refer to the exhibit. Which two components should be configured as route reflectors in the ACI fabric? (Choose two.)

A. Leaf1 B. Leaf2 C. apic2 D. apic1 E. Spine2 F. Spine1

Correct Answer: E,F

Question 12

In the context of VMM, which protocol between ACI leaf and compute hosts ensures that the policies are pushed to the leaf switches for immediate and on demand resolution immediacy?

A. ISIS B. STP C. VXLAN D. LLDP

Correct Answer: D

Explanation: Only visible for ExamsLabs members. You can sign-up / login (it's free).

Question 13

What is the minimum number of APICs does Cisco recommend to deploy in a production cluster?

A. 3 B. 4 C. 5 D. 1

Correct Answer: A

Question 14

An ACI administrator notices a change in the behavior of the fabric. Which action must be taken to determine if a human intervention introduced the change?

A. Inspect audit logs in the APIC UI to see all user events. B. Inspect the output of show command history in the APIC CLI. C. Inspect /var/log/audit_messages on the APIC to see a record of all user actions. D. Inspect event records in the APIC UI to see all actions performed by users.

Correct Answer: A

Explanation: Only visible for ExamsLabs members. You can sign-up / login (it's free).

Cisco Implementing Cisco Application Centric Infrastructure - 300-620 Exam Practice Test