Cisco CCNP Data Center 300-620 Questions & Answers

• Question 181:

  What must be configured to redistribute externally learned OSPF routes within the ACI fabric?

  A. Route Control Profile

  B. BGP Route Reflector

  C. BGP Inter-leak Route Map

  D. PIM Sparse Mode

  Correct Answer: B

  Once the border leaf learns the external routes, it can then redistribute the external routes of a given VRF instance to an MP-BGP address family (VPNv4 or VPNv6). MP-BGP maintains a separate BGP routing table for each VRF instance. Within MP-BGP, the border leaf switch advertises routes to a spine switch, which is a BGP route reflector. The routes are then propagated to all the leaf switches where the VRF instances are instantiated.

  Reference: https://www.cisco.com/c/en/us/td/docs/switches/datacenter/aci/apic/sw/1-x/ACI_Best_Practices/b_ACI_Best_Practices/ b_ACI_Best_Practices_chapter_010010.html https://www.cisco.com/c/en/us/solutions/collateral/data-center-virtualization/application-centric-infrastructure/guide-c07-743150.html

• Question 182:

  On which two interface types should a user configure storm control to protect against broadcast traffic? (Choose two.)

  A. APIC facing interfaces

  B. port channel on a single leaf switch

  C. all interfaces on the leaf switches in the fabric

  D. endpoint-facing trunk interface

  E. fabric uplink interfaces on the leaf switches

  Correct Answer: BD

  Typically, a fabric administrator configures storm control in fabric access policies on the following interfaces:

  1.

  A regular trunk interface.

  2.

  A direct port channel on a single leaf switch.

  3.

  A virtual port channel (a port channel on two leaf switches).

  Reference:

  https://www.cisco.com/c/en/us/td/docs/switches/datacenter/aci/apic/sw/2-x/L2_config/b_Cisco_APIC_Layer_2_Configuration_Guide/ b_Cisco_APIC_Layer_2_Configuration_Guide_chapter_01010.html

• Question 183:

  Which two actions extend a Layer 2 domain beyond the ACI fabric? (Choose two.)

  A. extending the routed domain out of the ACI fabric

  B. creating a single homed Layer 3 Out

  C. creating an external physical network

  D. extending the bridge domain out of the ACI fabric

  E. extending the EPG out of the ACI fabric

  Correct Answer: DE

• Question 184:

  When Cisco ACI connects to an outside Layers 2 network, where does the ACI fabric flood the STP BPDU frame?

  A. within the bridge domain

  B. within the APIC

  C. within the access encap VLAN

  D. between all the spine and leaf switches

  Correct Answer: C

  The ACI fabric is an IP-based fabric that implements an integrated overlay, allowing any subnet to be placed anywhere in the fabric and supports a fabric-wide mobility domain for virtualized workloads. STP is not required within the ACI fabric and leaf. The spine and APIC don't run STP instances.

  When connecting to an outside layer 2 network, the ACI fabric floods the STP BPDU frame within the boundary of the EPG. External switches are expected to break any potential loop upon receiving the flooded BPDU from the ACI fabric. Figure 69 depicts this process.

• Question 185:

  An engineer is implementing a connection that represents an external bridged network. Which two configurations are used? (Choose two.)

  A. Layer 2 remote fabric

  B. Layer 2 outside

  C. Layers 2 internal

  D. Static path binding

  E. VXLAN outside

  Correct Answer: BD

  Extend the bridge domain out of the ACI fabric - Another option to extend the layer 2 domain is to create a layer 2 outside connection (or external bridged network, as called in the APIC GUI) for a given bridge domain. It effectively extends the bridge domain to the outside network.

  The following sections explain these three options in greater detail.

  Extend the EPG Out of the ACI Fabric

  The user can extend an EPG beyond an ACI leaf by statically assigning a leaf port (along with a VLAN ID) to an EPG. After doing so, all the traffic received on this leaf port with the configured VLAN ID will be mapped to the EPG and the configured policy for this EPG will be enforced. The endpoints need not be directly connected to the ACI leaf port. They can be behind a layer 2 network as long as the VLAN associated with the EPG is enabled within the layer 2 network that connects the remote endpoint to the ACI fabric.

  To statically assign port to an EPG, go to menu TenantàApplication ProfilesàEPGàStatic Binding (Paths).

• Question 186:

  A network engineer must configure a Cisco ACI system to detect network loops for untagged and tagged traffic. The loop must be detected and stopped by disabling an interface within 4 seconds. Which configuration must be used?

  

  A. Option A

  B. Option B

  C. Option C

  D. Option D

  Correct Answer: B

• Question 187:

  Which action sets Layer 2 loop migration in an ACI Fabric with a Layer 2 Out configured?

  A. Enable MCP on the ACI fabric.

  B. Disable STP in the external network.

  C. Disable STP on the ACI fabric.

  D. Enable STP on the ACI fabric.

  Correct Answer: A

• Question 188:

  A Cisco ACI bridge domain and VRF are configured with a default data-plane learning configuration. Which two endpoint attributes are programmed in the leaf switch when receiving traffic? (Choose two.)

  A. Remote MAC, IP

  B. Remote Subnet

  C. Local IP, not MAC

  D. Local MAC, IP

  E. Local Subnet

  F. Remote IP

  Correct Answer: DF

  The key point is default data-plane learning configuration

• Question 189:

  Refer to the exhibit.

  

  An engineer wants to initiate an ICMP ping from Server1 to Server2. The requirement is for the BD1 to enforce ICMP replies that follow the expected path. The packets must be prevented from taking the direct path from Leaf1 to Server1. Which action must be taken on BD1 to meet these requirements?

  A. Set L2 Unknown Unicast to Flood.

  B. Set L2 Unknown Unicast to Hardware Proxy.

  C. Disable Unicast Routing.

  D. Enable ARP Flooding.

  Correct Answer: C

• Question 190:

  An engineer must allow multiple external networks to communicate with internal ACI subnets. Which action should the engineer take to assign the prefix to the class ID of the external Endpoint Group?

  A. Enable the Export Route Control Subnet for the External Endpoint Group flag.

  B. Enable an L3Out with Shared Route Control Subnet.

  C. Configure subnets with the External Subnets for External EPG flag enabled.

  D. Configure subnets with the Import Route Control Subnet flag enabled.

  Correct Answer: C