Cisco CCNP Data Center 300-620 Questions & Answers

• Question 201:

  Refer to the exhibit.

  

  Which two objects are created as a result of the configuration? (Choose two.)

  A. application profile

  B. attachable AEP

  C. bridge domain

  D. endpoint group

  E. VRF

  Correct Answer: CE

  Configure the tenant, VRF, and bridge domain.

  This example configures tenant t1 with VRF v1 and bridge domain bd1. The tenant, VRF, and BD are not yet deployed.

  Example:

  />

• Question 202:

  Which setting prevents the learning of Endpoint IP addresses whose subnet does not match the bridge domain subnet?

  A. "Limit IP learning to network" setting within the bridge domain.

  B. "Limit IP learning to subnet" setting within the EPG.

  C. "Limit IP learning to network" setting within the EPG.

  D. "Limit IP learning to subnet" setting within the bridge domain.

  Correct Answer: D

• Question 203:

  An engineer is extending an EPG out of the ACI fabric using static path binding. Which statement about the endpoints is true?

  A. Endpoints must connect directly to the ACI leaf port.

  B. External endpoints are in a different bridge domain than the endpoints in the fabric.

  C. Endpoint learning encompasses the MAC address only.

  D. External endpoints are in the same EPG as the directly attached endpoints.

  Correct Answer: D

  The user can extend an EPG beyond an ACI leaf by statically assigning a leaf port (along with a VLAN ID) to an EPG. After doing so, all the traffic received on this leaf port with the configured VLAN ID will be mapped to the EPG and the configured policy for this EPG will be enforced. The endpoints need not be directly connected to the ACI leaf port. They can be behind a layer 2 network as long as the VLAN associated with the EPG is enabled within the layer 2 network that connects the remote endpoint to the ACI fabric.

• Question 204:

  An engineer is troubleshooting fabric discovery in a newly deployed Cisco ACI fabric and analyzes this output:

  

  Which ACI fabric address is assigned to interface lo1023?

  A. VXLAN tunnel endpoint

  B. Physical tunnel endpoint

  C. Fabric tunnel endpoint

  D. Dynamic tunnel endpoint

  Correct Answer: C

• Question 205:

  The company's Cisco ACI fabric hosts multiple customer tenants. To meet a service level agreement, the company is constantly monitoring the Cisco ACI environment. Syslog is one of the methods used for monitoring. Only events related to leaf and spine environmental information without specific customer data should be logged. To which ACI object must the configuration be applied to meet these requirements?

  A. infra tenant

  B. access policy

  C. switch profile

  D. fabric policy

  Correct Answer: D

• Question 206:

  A bridge domain for an EPG called "Web Servers" must be created in the Cisco APIC. The configuration must meet these requirements:

  1.

  Only traffic to known MAC addresses must be allowed to reduce noise.

  2.

  The multicast traffic must be limited to the ports that are participating in multicast routing.

  3.

  The endpoints within the bridge domain must be kept in the endpoint table for 20 minutes without any updates.

  Which set of steps configures the bridge domain that satisfies the requirements?

  A. Switch L2 Unknown Unicast to Flood. Select the default Endpoint Retention Policy and set the Local Endpoint Aging to 20 minutes. Set Multicast Destination Flooding to Flood in Encapsulation.

  B. Set L2 Unknown Unicast to Hardware Proxy. Configure L3 Unknown Multicast Flooding to Optimized Flood. Create an Endpoint Retention Policy with a Local Endpoint Aging Interval of 1200 seconds.

  C. Multicast Destination Flooding should be set to Flood in BD. Set L3 Unknown Multicast Flooding to Flood. Select the default Endpoint Retention Policy with a Local Endpoint Aging Interval of 1200 seconds.

  D. Select the ARP Flooding checkbox. Create an Endpoint Retention Policy with a Remote Endpoint Aging Interval of 20 minutes. Set L3 Unknown Multicast Flooding to Optimized Flooding.

  Correct Answer: B

• Question 207:

  An engineer is in the process of discovering a new Cisco ACI fabric consisting of two spines and four leaf switches. The discovery of leaf 1 has just been completed. Which two nodes are expected to be discovered next? (Choose two.)

  A. leaf 2

  B. leaf 4

  C. spine 1

  D. leaf 3

  E. spine 2

  Correct Answer: CE

  The APIC is a central point of automated provisioning and management for all the switches that are part of the ACI fabric. A single data center might include multiple ACI fabrics; each data center might have its own APIC cluster and Cisco Nexus 9000 Series switches that are part of the fabric. To ensure that a switch is managed only by a single APIC cluster, each switch must be registered with that specific APIC cluster that manages the fabric.

  The APIC discovers new switches that are directly connected to any switch it currently manages. Each APIC instance in the cluster first discovers only the leaf switch to which it is directly connected. After the leaf switch is registered with the APIC, the APIC discovers all spine switches that are directly connected to the leaf switch. As each spine switch is registered, that APIC discovers all the leaf switches that are connected to that spine switch. This cascaded discovery allows the APIC to discover the entire fabric topology in a few simple steps.

• Question 208:

  An ACI engineer is implementing a Layer 3 Out inside the Cisco ACI fabric that must meet these requirements:

  1.

  The data center core switch must be connected to one of the leaf switches with a single 1G link.

  2.

  The routes must be exchanged using a link-state routing protocol that supports hierarchical network design.

  3.

  The data center core switch interface must be using 802.1Q tagging, and each VLAN will be configured with a dedicated IP address.

  Which set of steps accomplishes this goals?

  A. Set up the EIGRP Protocol policy with the selected Autonomous System number. Create the Routed Outside object and Node Profile, selecting EIGRP. Configure the Interface profile, selecting Routed Interface and the appropriate interfaces. Create the External Network object with a network of 0.0.0 0/0.

  B. Set up the EIGRP Protocol policy with the selected Autonomous System number. Set up the Routed External Network object and Node Profile, selecting EIGRP. Create the Switch profile, selecting Port-channel and the appropriate interfaces. Create the default network and associate it with the Routed Outside object.

  C. Set up the BGP Protocol policy with the Autonomous System number of 0. Configure an Interface policy and an External Bridged Domain. Create an External Bridged Network using the configured VLAN pool. Build the Leaf profile, selecting Routed sub-interface and the appropriate VLAN.

  D. Configure the OSPF Protocol policy with an area of 0. Create Routed Outside object and Node Profile, selecting OSPF as the routing protocol. Build the Interface profile, selecting Routed Sub-interface and the appropriate VLAN. Configure the External Network object with a network of 0 0.0 0/0.

  Correct Answer: D

• Question 209:

  An engineer must connect a new host to port 1/1 on Leaf 101. A Cisco ACI fabric has an MCP policy configured but experiences excessive Layer 2 loops. The engineer wants the Cisco ACI fabric to detect and prevent Layer 2 loops in the fabric. Which set of actions accomplishes these goals?

  A. Enable MCP locally. Associate the MCP policy with an interface policy group.

  B. Enable MCP locally. Associate the MCP policy with an interface profile.

  C. Enable MCP globally. Associate the MCP policy with an interface selector.

  D. Enable MCP globally. Associate the MCP policy with an interface policy group.

  Correct Answer: D

• Question 210:

  An engineer must advertise a bridge domain subnet out of the ACI fabric to an OSPF neighbor. Which two configuration steps are required? (Choose two.)

  A. Add External Subnet for External EPG flag under External EPG

  B. Configure Subnet scope to Advertised Externally

  C. Configure the Subnet under the EPG level

  D. Create Route Control Profile with the export direction under External EPG

  E. Add L3Out profile to the bridge domain using Associated L3Outs section

  Correct Answer: BE

  https://www.cisco.com/c/en/us/solutions/collateral/data-center-virtualization/application-centric-infrastructure/guide-c07-743150.html#3AdvertiseinternalroutesBDsubnetstoexternaldevices

  The key points here are as follows:

  1.

  Mark a BD subnet with an “Advertised Externally” scope.

  2.

  Associate the BD with the L3Out(s) that need(s) to advertise the BD subnet to the outside.