Cisco CCNP Data Center 300-620 Questions & Answers

• Question 211:

  All workloads in VLAN 1001 have been migrated into EPG-1001. The requirement is to move the gateway address for VLAN 1001 from the core outside the Cisco ACI fabric into the Cisco ACI fabric. The endpoints in EPG-1001 must route traffic to endpoints in other EPGs and minimize flooded traffic in the fabric. Which configuration set is needed on the bridge domain to meet these requirements?

  A. Enable Flood Enable Unicast Routing

  B. Disable Local IP Learning Limit Disable Unicast Routing

  C. Disable ARP Flood Disable Limit Endpoint Learning

  D. Enable Hardware Proxy Enable Unicast Routing

  Correct Answer: D

• Question 212:

  What is the minimum number of APICs does Cisco recommend to deploy in a production cluster?

  A. 1

  B. 3

  C. 4

  D. 5

  Correct Answer: B

• Question 213:

  Refer to the exhibit.

  

  An engineer must implement the inter-tenant service graph. Which set of actions must be taken to accomplish this goal?

  A. Define the contract in the provider tenant and export it to the consumer tenant. Define the L4-L7 device, service graph template, and ASA bridge domains in the provider tenant.

  B. Define the contract in the provider tenant and export it to the consumer tenant. Define the L4-L7 device and service graph template in the provider tenant and the ASA bridge domains in the consumer tenant.

  C. Define the contract in the provider tenant and export it to the provider tenant. Define the L4-L7 device and service graph template in the provider tenant and the ASA bridge domains in the consumer tenant.

  D. Define the contract in the provider tenant and export it to the provider tenant. Define the L4-L7 device, service graph template, and ASA bridge domains in the consumer tenant.

  Correct Answer: B

• Question 214:

  An engineer created two interface protocol policies called Pol_CDP40275332 and Pol_LLDP46783451. The policies must be used together in a single policy. Which ACI object must be used?

  A. interface policy group

  B. switch policy group

  C. switch profile

  D. interface profile

  Correct Answer: A

• Question 215:

  An organization has encountered many STP-related issues in the past due to failed hardware components. They are in the process of long-term migration to a newly deployed ACI fabric. Senior engineers are worried that spanning-tree loops in the existing network may be extended to the ACI fabric. Which feature must be enabled on the ACI leaf ports to protect the fabric from spanning-tree loops?

  A. BPDU Guard

  B. per-VLAN MCP

  C. Storm Control

  D. BPDU Filter

  Correct Answer: B

• Question 216:

  A network engineer must design a method to allow the Cisco ACI to redirect traffic to the firewalls. Only traffic that matches specific L4-L7 policy rules should be redirected. The load must be distributed across multiple firewalls to scale the performance horizontally. Which action must be taken to meet these requirements?

  A. Configure ACI Service Graph with Unidirectional PBR.

  B. Implement ACI Service Graph with GIPo.

  C. Implement ACI Service Graph Two Nodes with GIPo.

  D. Configure ACI Service Graph with Symmetric PBR.

  Correct Answer: D

  One of the main features of the service graph is Policy-Based Redirect (PBR). With PBR, the Cisco ACI fabric can redirect traffic between security zones to L4-L7 devices, such as a firewall, Intrusion-Prevention System (IPS), or load balancer, without the need for the L4-L7 device to be the default gateway for the servers or the need to perform traditional networking configuration such as Virtual Routing and Forwarding (VRF) sandwiching or VLAN stitching https://www.cisco.com/c/en/us/solutions/collateral/data-center-virtualization/application-centric-infrastructure/white-paper-c11-739971.html

• Question 217:

  An engineer is implementing a Cisco ACI environment that consists of more than 20 servers. Two of the servers support only Cisco Discovery Protocol with no order link discovery protocol. The engineer wants the servers to be discovered automatically by the Cisco ACI fabric when connected. Which action must be taken to meet this requirement?

  A. Create an override policy that enables Cisco Discovery Protocol after LLDP is enabled in the default policy group.

  B. Configure a higher order interface policy that enables Cisco Discovery Protocol for the interface on the desired leaf switch.

  C. Configure a lower order policy group that enables Cisco Discovery Protocol for the interface on the desired leaf switch.

  D. Create an interface profile for the interface that disables LLDP on the desired switch that is referenced by the interface policy group.

  Correct Answer: A

  https://www.tejasjain.com/2019/10/cisco-aci-cdp-configuration.html

• Question 218:

  An engineer wants to monitor all configuration changes, threshold crossing, and link-state transitions in a Cisco ACI fabric. Which action must be taken to receive the required messages?

  A. Add Faults and Events to the monitor policy.

  B. Add Session Logs and Audit Logs to the monitor policy.

  C. Include Audit Logs and Events in the Syslog source policy.

  D. Include Events and Session Logs in the Syslog source policy.

  Correct Answer: C

• Question 219:

  An engineer must set up a Cisco ACI fabric to send Syslog messages related to hardware events, such as chassis line card failures. The messages should be sent to a dedicated Syslog server. Where in the Cisco APIC should the policy be configured to meet this requirement?

  A. uni/tn-common/monepg-default

  B. uni/infra/monifra-default

  C. uni/fabric/monfab-default

  D. uni/fabric/moncommon

  Correct Answer: C

• Question 220:

  An engineer must implement management policy and data plane separation in the Cisco ACI fabric. Which ACI object must be created in Cisco APIC to accomplish this goal?

  A. Application profile

  B. Tenant

  C. Contract

  D. Bridge domain

  Correct Answer: B