Cisco CCNP Data Center 300-620 Questions & Answers

• Question 121:

  DRAG DROP

  An engineer must configure VMM domain integration on a Cisco UCS B-Series server that is connected to a Cisco ACI fabric. Drag and drop the products used to create VMM domain from the bottom into the sequence in which they should be implemented at the top. Products are used more than once.

  Select and Place:

  

  Correct Answer:

  

• Question 122:

  DRAG DROP

  An engineer must configure RADIUS authentication with Cisco ACI for remote authentication with out-of-band management access. Drag and drop the RADIUS configuration steps from the left into the required implementation order on the right. Not all steps are used.

  Select and Place:

  

  Correct Answer:

  

• Question 123:

  The engineer notices frequent MAC and IP address moves between different leaf switch ports. Which action prevents this problem from occurring?

  A. Disable enforce subnet check.

  B. Enable endpoint loop protection.

  C. Enable rogue endpoint control.

  D. Disable IP bridge domain enforcement.

  Correct Answer: B

  While Ep Loop Protection has similar intentions (that is, finding a loop and disabling learning) to Rogue EP Control, it disables learning on the bridge domain and/or disables the port (error-disable), which could affect healthy endpoints connected to the same interface or the same bridge domain. Thus, use of Rogue EP Control instead of Ep Loop Protection is recommended after APIC Release 3.2. Please be aware that the detection mechanism of Ep Loop Protection is strictly for a loop, because it triggers the move only when the move is between the same two interfaces. Ep Loop Protection cannot detect movements for an endpoint that moves around randomly.

  https://www.cisco.com/c/en/us/solutions/collateral/data-center-virtualization/application-centric-infrastructure/white-paper-c11-739989.html#EpLoopProtection

• Question 124:

  Refer to the exhibit.

  

  A Cisco APIC raises an error when the EPG must accept endpoints from a VMM domain created. Which action clears the fault?

  A. Expand the VLAN pool for the VMM domain.

  B. Create a bridge domain for the VMM domain.

  C. Associate the EPG with the VMM domain.

  D. Associate the VLAN pool with the VMM domain.

  Correct Answer: A

• Question 125:

  A Cisco ACI endpoint group must have its gateway address migrated out of the ACI fabric. An engineer configures EPG-TEST with a static port binding and configures the encap VLAN with the required VLAN. Which configuration set must be used on the bridge domain to meet these requirements?

  A. L2 Unknown Unicast: Hardware Proxy Unicast Routing: Disabled ARP Flooding: Enabled

  B. L2 Unknown Unicast: Hardware Proxy Unicast Routing: Disabled ARP Flooding: Disabled

  C. L2 Unknown Unicast: Flood Unicast Routing: Disabled ARP Flooding: Enabled

  D. L2 Unknown Unicast: Flood Unicast Routing: Enabled ARP Flooding: Enabled

  Correct Answer: C

• Question 126:

  What are two requirements for the IPN network when implementing a Multi-Pod ACI fabric? (Choose two.)

  A. EIGRP routing

  B. PIM ASM multicast routing

  C. BGP routing

  D. VLAN ID 4

  E. OSPF routing

  Correct Answer: DE

  Uses dot1.q with Vlan4 and OSPF for routing: interface Ethernet1/1.4 description 40G Link to POD1-SPINE-101(1/1) mtu 9150 encapsulation dot1q 4 vrf member fabric-mpod-vrf ip address 192.168.1.253/30 ip ospf network point-to-point

• Question 127:

  Which two statements regarding ACI Multi-Site are true? (Choose two.)

  A. The Multi-Site orchestrator must be directly attached to one ACI leaf.

  B. Routers in the Inter-Site network must run OSPF, DHCP relay, and MP-BGP.

  C. ACI Multi-Site is a solution that supports a dedicated APIC cluster per site.

  D. ACI Multi-Site is a solution that allows one APIC cluster to manage multiple ACI sites.

  E. The Inter-Site network routers should run OSPF to establish peering with the spines.

  Correct Answer: CE

• Question 128:

  In the context of ACI Multi-Site, when is the information of an endpoint (MAC/IP) that belongs to site 1 advertised to site 2 using the EVPN control plane?

  A. Endpoint information is not exchanged across sites unless COOP protocol is used.

  B. Endpoint information is not exchanged across sites unless a policy is configured to allow communication across sites.

  C. Endpoint information is exchanged across sites as soon as the endpoint is discovered in one site.

  D. Endpoint information is exchanged across sites when the endpoints are discovered in both sites.

  Correct Answer: B

  The endpoint information is stored in the local COOP database. Spine nodes in site 1 know about locally connected endpoints, and the same is true for spine nodes in site 2. Note that at this point no information is exchanged across sites for EP1 and EP2 EPGs, because there is no policy in place yet indicating a need for those endpoints to communicate.

  An intersite policy is defined in Cisco ACI Multi-Site Orchestrator and is then pushed and rendered in the two sites.

• Question 129:

  Which statement regarding ACI Multi-Pod and TEP pool is true?

  A. The IP addresses used in the IPN network can overlap TEP pool of the APIC.

  B. A different TEP pool must be assigned to each Pod.

  C. The Pod1 TEP pool must be split and a portion of the TEP pool allocated to each Pod.

  D. The same TEP pool is used in all Pods.

  Correct Answer: B

• Question 130:

  An engineer must perform a Cisco ACI fabric upgrade that minimizes the impact on user traffic and allows only permitted users to perform an upgrade. Which two configuration steps should be taken to meet these requirements? (Choose two.)

  A. Grant tenant-ext-admin access to a user who performs an upgrade

  B. Divide Cisco APIC controllers into two or more maintenance groups

  C. Combine all switches into an upgrade group

  D. Grant the fabric administrator role to a user who performs an upgrade

  E. Divide switches into two or more maintenance groups

  Correct Answer: DE