Free 300-620 Sample Questions — Implementing Cisco Application Centric Infrastructure (DCACI)

What does a bridge domain represent?

• A. Layer 3 cloud
• B. Layer 2 forwarding construct
• C. tenant
• D. physical domain

A Cisco ACI fabric is connected to an external Cisco Catalyst switch. Which set of actions must be taken for Cisco ACI leaf and spine switches to be managed from the management port?

• A. Provide default/common contract by external management network under tenant mgmt. Consume default/common contract by out-of-band EPG
• B. Provide default/mgmt contract by out-of-band EPG. Consume default/mgmt contract by external management network under tenant common
• C. Provide default/mgmt contract by external management network under tenant common. Consume default/mgmt contract by out-of-band EPG
• D. Provide default/common contract by out-of-band EPG. Consume default/common contract by external management network under tenant mgmt

A Cisco ACI bridge domain and VRF are configured with a default data-plane learning configuration. Which two endpoint attributes are programmed in the leaf switch when receiving traffic? (Choose two.)

• A. Remote MAC, IP
• B. Remote Subnet
• C. Local IP, not MAC
• D. Local MAC, IP
• E. Local Subnet
• F. Remote IP

A Cisco ACI environment is configured to integrate with a vCenter environment using the VMM domain name west_coast_VMM. Within the ACI environment, only tenant west_coast has EPGs associated with west_coast_VMM. This deployment is new, so these EPGs currently do not have any members. A systems engineer is setting up vCenter, creates a VDS named west-coast-VMM, and deletes the VDS named west_coast_VMM. The systems engineer creates the necessary port groups that correspond with the EPGs, but when VMs are connected to the port groups, they cannot ping their gateway. Which action establishes connectivity?

• A. Associate the EPGs to west-coast-VMM
• B. Rename the VDS to west_coast_VMM
• C. Use the EPG encap-VLAN on the port groups
• D. Disconnect Cisco APIC connectivity from vCenter

On which two interface types should a user configure storm control to protect against broadcast traffic? (Choose two.)

• A. APIC facing interfaces
• B. port channel on a single leaf switch
• C. all interfaces on the leaf switches in the fabric
• D. endpoint-facing trunk interface
• E. fabric uplink interfaces on the leaf switches

An engineer must configure a Cisco ACI bridge domain to prevent flooding from unknown unicast frames. Which action must be configured in Cisco ACI to accomplish this goal?

• A. Set the bridge domain option to Flood in Encapsulation
• B. Configure Clear Remote MAC Entries in the bridge domain mode
• C. Set Disable Remote EP Learn in the Fabric Wide Setting Policy
• D. Configure the bridge domain to operate in optimized mode

A Cisco ACI fabric must be integrated with the VMware environment. An ESXi host is not attached to the Distributed Virtual Switch (DVS). Two EPGs were created and associated with the VMM domain. An engineer was asked to configure the ACI environment to meet these requirements: •The EPG contract is pushed to ACI leafs after the ESXi host is attached to the DVS. •The EPG contract is pushed to the TCAMs only when two EPGs start to communicate. Which immediacy settings accomplish these goals?

• A. Resolution immediacy: On-Demand - Deployment immediacy: Immediate
• B. Resolution immediacy: Immediate - Deployment immediacy: On-Demand
• C. Resolution immediacy: Immediate - Deployment immediacy: Immediate
• D. Resolution immediacy: On-Demand - Deployment immediacy: On-Demand

Which feature is used to program policy CAM on a leaf switch without sending traffic from VM to the leaf?

• A. immediate resolution immediacy
• B. immediate deployment immediacy
• C. on-demand deployment immediacy
• D. on-demand resolution immediacy

A customer is deploying a new application across two ACI pods that is sensitive to latency and jitter. The application sets the DSCP values of packets to AF31 and CS6, respectively. Which configuration changes must be made on the APIC to support the new application and prevent packets from being delayed or dropped between pods?

• A. disable DSCP mapping on the IPN devices
• B. disable DSCP translation policy
• C. align the ACI QoS levels and IPN QoS policies
• D. align the custom QoS policy on the EPG site in the customer tenant

Which method does the Cisco ACI fabric use to load-balance multidestination traffic?

• A. forwarding tag trees
• B. PIM routing
• C. spanning trees
• D. shortest-path trees

An engineer wants to record the login and configuration change events in a Cisco ACI environment. The requirements are to send the records to a syslog server, but to exclude fabric-related or tenant-related events. Which action accomplishes this goal?

• A. Configure the default monitoring policy in the access policies to include the audit logs
• B. Configure the forwarding facility of the remote destination in the external data collectors to Iocal7
• C. Configure the syslog source Min Severity to the information level in the access policy
• D. Configure the local file destination severity to debugging level in the external data collectors

Which type of policy configures the suppression of faults that are generated from a port being down?

• A. fault lifecycle assignment
• B. event lifecycle assignment
• C. fault severity assignment
• D. event severity assignment

An engineer must configure a service graph for the policy-based redirect to redirect traffic to a transparent firewall. The policy must be vendor-agnostic to support any firewall appliance. Which two actions accomplish these goals? (Choose two.)

• A. Set Context Aware to Single
• B. Set the Service Type to Other
• C. Set Promiscuous Mode to True
• D. Set Function Type to L2
• E. Set Managed to True

An engineer must allow multiple external networks to communicate with internal ACI subnets. Which action should the engineer take to assign the prefix to the class ID of the external Endpoint Group?

• A. Enable the Export Route Control Subnet for the External Endpoint Group flag
• B. Enable an L3Out with Shared Route Control Subnet
• C. Configure subnets with the External Subnets for External EPG flag enabled
• D. Configure subnets with the Import Route Control Subnet flag enabled

How is broadcast forwarded in Cisco ACI Multi-Pod after ARP flooding is enabled?

• A. Ingress replication is used on the spines to forward broadcast frames in the IPN infrastructure
• B. Within a pod, the ingress leaf switch floods the broadcast frame on all fabric ports
• C. Broadcast frames are forwarded inside the pod and across the IPN using the multicast address that is associated to the bridge domain
• D. For the specific bridge domain, all spines forward the broadcast frames to IPN routers

What is the advantage of implementing an active-active firewall cluster that is stretched across separate pods when anycast services are configured?

• A. cluster is capable to be deployed in transparent mode across pods
• B. different MAC/IP configuration combination is configurable for the firewall in each pod
• C. Local traffic in a pod is load-balanced between the clustered firewalls
• D. The local pod anycast node is preferred by the local spines

An engineer must configure a Layer 3 connection to the WAN router. The hosts in production VRF must access WAN subnets. The engineer associates EPGs in the production VRF with the external routed domain. Which action completes the task?

• A. Configure the Export Route Control Subnet scope for the external EPG
• B. Configure the External Subnets for the External EPG scope for the external EPG
• C. Configure the Import Route Control Subnet scope for the external EPG
• D. Configure the Shared Route Control Subnet scope for the external EPG

An engineer must create a backup of the Cisco ACI fabric for disaster recovery purposes. The backup must be transferred over a secure and encrypted transport. The backup file must contain all user and password related information. The engineer also wants to process and confirm the backup file validity by using a Python script. This requires the data structure to have a format similar to a Python dictionary. Which configuration set must be used to meet these requirements?

• A. Under the Create Remote location settings, select Protocol: FTP Under the Export policy, select - - Format: XML - Modify Global AES Encryption Settings: Enabled
• B. Under the Create Remote location settings, select Protocol: FTP Under the Export policy, select - - Format: XML - Modify Global AES Encryption Settings: Disabled
• C. Under the Create Remote location settings, select Protocol: SCP Under the Export policy, select - - Format: JSON - Modify Global AES Encryption Settings: Disabled
• D. Under the Create Remote location settings, select Protocol: SCP Under the Export policy, select - - Format: JSON - Modify Global AES Encryption Settings: Enabled

Which protocol does ACI use to securely sane the configuration in a remote location?

• A. SCP
• B. HTTPS
• C. TFTP
• D. FTP

An organization has encountered many STP-related issues in the past due to failed hardware components. They are in the process of long-term migration to a newly deployed ACI fabric. Senior engineers are worried that spanning-tree loops in the existing network may be extended to the ACI fabric. Which feature must be enabled on the ACI leaf ports to protect the fabric from spanning-tree loops?

• A. BPDU Guard
• B. per-VLAN MCP
• C. Storm Control
• D. BPDU Filter