Cisco CCNP Data Center 300-620 Questions & Answers

• Question 221:

  The existing network and ACI fabric have been connected to support workload migration. Servers will physically terminate at the Cisco ACI, but their gateway must stay in the existing network. The solution needs to adhere to Cisco's best practices. The engineer started configuring the relevant Bridge Domain and needs to complete the configuration. Which group of settings are required to meet these requirements?

  A. L2 Unknown Unicast: Hardware Proxy L3 Unknown Multicast Flooding: Flood Multi Destination Flooding: Flood in BD ARP Flooding: Enable

  B. L2 Unknown Unicast: Flood L3 Unknown Multicast Flooding: Flood Multi Destination Flooding: Flood in BD ARP Flooding: Enable

  C. L2 Unknown Unicast: Flood L3 Unknown Multicast Flooding: Optimize Flood Multi Destination Flooding: Flood in BD ARP Flooding: Disable

  D. L2 Unknown Unicast: Hardware Proxy L3 Unknown Multicast Flooding: Optimize Flood Multi Destination Flooding: Flood in BD ARP Flooding: Disable

  Correct Answer: B

• Question 222:

  New ESXi hosts are procured in a data center compute expansion project. An engineer must update the configuration on the Cisco APIC controllers to support the addition of the new servers to the existing VMM domain. Which action should be taken to support this change?

  A. Create a range of internal VLANs in the associated VLAN pool.

  B. Set the encapsulation mode as VXLAN.

  C. Enable infrastructure VLAN in the associated AEP.

  D. Map the leaf interface selector to the AEP that is associated with the VMM domain.

  Correct Answer: D

• Question 223:

  An engineer must advertise a selection of external networks learned from a BGP neighbor into the ACI fabric. Which L3Out subnet configuration option creates an inbound route map for route filtering?

  A. External Subnets for the External EPG

  B. Shared Route Control Subnet

  C. Import Route Control Subnet

  D. Shared Security Import Subnet

  Correct Answer: C

• Question 224:

  A customer migrates a legacy environment to Cisco ACI. A Layer 2 trunk is configured to interconnect the two environments. The customer also builds ACI fabric in an application-centric mode.

  Which feature should be enabled in the bridge domain to reduce instability during the migration?

  A. Set Multi-Destination Flooding to Flood in BD.

  B. Enable Flood in Encapsulation.

  C. Set Multi-Destination Flooding to Flood in Encapsulation.

  D. Disable Endpoint Dataplane Learning

  Correct Answer: C

  Quite a few engineers have asked whether multiple EPGs associated with a single bridge domain can be extended to non-ACI switches outside a fabric. The answer is yes. Among the options for Multi Destination Flooding, administrators can choose Flood in Encapsulation at the bridge domain level to isolate flooding to each associated EPG.

  In the context of migrations, the use case many proponents of this feature have in mind is to consolidate multiple VLANs and subnets into a small number of bridge domains.

• Question 225:

  An engineer needs to deploy a leaf access port policy group in ACI Fabric to support the following requirements:

  1.

  Control the amount of application data flowing into the system

  2.

  Allow the newly connected device to auto-negotiate link speed with the leaf switch

  Which two ACI policies must be configured to achieve these requirements? (Choose two.)

  A. link level policy

  B. L2 interface policy

  C. slow drain policy

  D. ingress data plane policing policy

  E. ingress control plane policing policy

  Correct Answer: AD

  Reference: https://www.cisco.com/c/en/us/td/docs/switches/datacenter/aci/apic/sw/kb/b_Cisco_ACI_and_Forward_Error_Correction.html https://www.cisco.com/c/en/us/td/docs/switches/datacenter/aci/apic/sw/4-x/security/Cisco-APIC-Security-Configuration-Guide-401/ b_Cisco_APIC_Security_Guide_chapter_01110.html#:~:text=Use%20data%20plane%20policing%20 (DPP,dropping%20of%20packets%20occurs%20immediately

• Question 226:

  Which Cisco APIC configuration prevents a remote network that is not configured on the bridge domain from being learned by the fabric?

  A. enable Limit IP Learning to Subnet

  B. enable Unicast Routing

  C. enable IP Data-plane Learning

  D. enable ARP Flooding to BD

  Correct Answer: A

  Reference: https://www.cisco.com/c/en/us/solutions/collateral/data-center-virtualization/application-centric-infrastructure/white-paper-c11-739989.html

• Question 227:

  Which two types of interfaces are supported on border leaf switches to connect to an external router? (Choose two.)

  A. subinterface with VXLAN tagging

  B. subinterface with 802.1Q tagging

  C. FEX host interface

  D. out of band interface

  E. Switch Virtual Interface

  Correct Answer: BE

  Out of given options, 2 interface types are mentioned, 3rd is L3 (routed) interface .

  Border leaf switches can be configured with three types of interfaces to connect to an external router:

  1.

  Layer 3 (routed) interface

  2.

  Subinterface with IEEE 802.1Q tagging

  3.

  Switch Virtual Interface (SVI) https://www.cisco.com/c/en/us/solutions/collateral/data-center-virtualization/application-centric-infrastructure/white-paper-c11-737909.html

• Question 228:

  Which table holds IP address, MAC address and VXLAN/VLAN information on a Cisco ACI leaf?

  A. endpoint

  B. adjacency

  C. RIB

  D. ARP

  Correct Answer: A

  Reference: https://www.cisco.com/c/en/us/solutions/collateral/data-center-virtualization/application-centric-infrastructure/white-paper-c11-739989.html

• Question 229:

  What does a bridge domain represent?

  A. Layer 3 cloud

  B. Layer 2 forwarding construct

  C. tenant

  D. physical domain

  Correct Answer: B

  Reference:

  https://www.cisco.com/c/en/us/td/docs/switches/datacenter/aci/apic/sw/2-x/L2_config/b_Cisco_APIC_Layer_2_Configuration_Guide/ b_Cisco_APIC_Layer_2_Configuration_Guide_chapter_010.html

• Question 230:

  When creating a subnet within a bridge domain, which configuration option is used to specify the network visibility of the subnet?

  A. limit IP learning to subnet

  B. scope

  C. gateway IP

  D. subnet control

  Correct Answer: B

  https://www.cisco.com/c/en/us/td/docs/switches/datacenter/aci/apic/sw/1-x/Operating_ACI/guide/b_Cisco_Operating_ACI/b_Cisco_Operating_ACI_chapter_0111.html#concept_247562B33DE34FC5ADBB5D516DA085EB

  Subnets--The network visibility of the subnet. The subnet is a portion of a network sharing a particular subnet address. The scope can be:

  Shared Between VRFs--Defines subnets under an endpoint group, with the Shared option configured, to route leak to other tenants within the Fabric.

  Advertise Externally--Defines subnets under a bridge domain, with the Public option configured, to share with Layer 3 outbound.

  Private to VRF--Defines subnets under a bridge domain, with the Private option configured, to only be used in that tenant (will not be leaked). The default is Private.