Cisco CCNP Data Center 300-620 Questions & Answers

• Question 231:

  Refer to the exhibit.

  

  Which two components should be configured as route reflectors in the ACI fabric? (Choose two.)

  A. Spine1

  B. apic1

  C. Spine2

  D. Leaf1

  E. Leaf2

  F. apic2

  Correct Answer: AC

• Question 232:

  Where is the COOP database located?

  A. leaf

  B. spine

  C. APIC

  D. endpoint

  Correct Answer: B

  Reference: https://www.cisco.com/c/en/us/solutions/collateral/data-center-virtualization/application-centric-infrastructure/white-paper-c11-739989.html

• Question 233:

  Which statement describes the initial APIC cluster discovery process?

  A. The APIC uses an internal IP address from a pool to communicate with the nodes.

  B. Every switch is assigned a unique AV by the APIC.

  C. The APIC discovers the IP address of the other APIC controllers by using Cisco Discovery Protocol.

  D. The ACI fabric is discovered starting with the spine switches.

  Correct Answer: A

  The following describes the APIC cluster discovery process:

  Each APIC in the Cisco ACI uses an internal private IP address to communicate with the ACI nodes and other APICs in the cluster. The APIC discovers the IP address of other APIC controllers in the cluster through the LLDP-based discovery process. Link: https://www.cisco.com/c/en/us/td/docs/switches/datacenter/aci/apic/sw/1-x/aci-fundamentals/b_ACI-Fundamentals/m_provisioning.html#concept_8E5AD8328B9348D5B8F0FF1FF7D2EC96

• Question 234:

  How is an EPG extended outside of the ACI fabric?

  A. Create an external bridged network that is assigned to a leaf port.

  B. Create an external routed network that is assigned to an EPG.

  C. Enable unicast routing within an EPG.

  D. Statically assign a VLAN ID to a leaf port in an EPG.

  Correct Answer: D

  Reference: https://www.dclessons.com/l2-external-network-with-aci

• Question 235:

  Which feature dynamically assigns or modifies the EPG association of virtual machines based on their attributes?

  A. vzAny contracts

  B. standard contracts

  C. application EPGs

  D. uSeg EPGs

  Correct Answer: D

  Microsegmented EPGs (uSeg) works based on attribute.

• Question 236:

  Which feature allows firewall ACLs to be configured automatically when new endpoints are attached to an EPG?

  A. ARP gleaning

  B. dynamic endpoint attach

  C. hardware proxy

  D. network-stitching

  Correct Answer: B

  Dynamic Endpoint Attach is a feature that allows Firewall ACLs or ADC load balanced servers to be dynamically configured when new endpoints are attached to an EPG. https://www.cisco.com/c/en/us/solutions/collateral/data-center-virtualization/application-centric-infrastructure/white-paper-c11-734298.html

• Question 237:

  An engineer is implementing Cisco ACI at a large platform-as-a-service provider using APIC controllers, 9396PX leaf switches, and 9336PQ spine switches. The leaf switch ports are configured as IEEE 802.1p ports. Where does the traffic exit from the EPG in IEEE 802.1p mode in this configuration?

  A. from leaf ports tagged as VLAN 0

  B. from leaf ports untagged

  C. from leaf ports tagged as VLAN 4094

  D. from leaf ports tagged as VLAN 1

  Correct Answer: A

  Trunk (Tagged - classic IEEE 802.1q trunk)—Traffic for the EPG is sourced by the leaf switch with the specified VLAN tag. The leaf switch also expects to receive traffic tagged with that VLAN to be able to associate it with the EPG. Traffic received untagged is discarded.

  1.

  Access (Untagged)—Traffic for the EPG is sourced by the leaf as untagged. Traffic received by the leaf switch as untagged or with the tag specified during the static binding configuration is associated with the EPG.

  2.

  Access (802.1p)—If only one EPG is bound to that interface, the behavior is identical as in the untagged case. If other EPGs are associated with the same interface, traffic for the EPG is sourced with an IEEE 802.1q tag using VLAN 0 (IEEE 802.1p tag), or is sourced as untagged in the case of EX switches.

• Question 238:

  A RADIUS user resolves its role via the Cisco AV Pair. What object does the Cisco AV Pair resolve to?

  A. tenant

  B. security domain

  C. primary Cisco APIC

  D. managed object class

  Correct Answer: D

  managed object class is an object ; security domain is a tag

• Question 239:

  Which components must be configured for the BGP Route Reflector policy to take effect?

  A. spine fabric interface overrides and profiles

  B. access policies and profiles

  C. pod policy groups and profiles

  D. leaf fabric interface overrides and profiles

  Correct Answer: C

  https://www.cisco.com/c/dam/en/us/solutions/collateral/data-center-virtualization/application-centric-infrastructure/aci-guide-configuring-fabric-bgp-route-reflectors.pdf

• Question 240:

  Which type of policy configures the suppression of faults that are generated from a port being down?

  A. fault lifecycle assignment

  B. event lifecycle assignment

  C. fault severity assignment

  D. event severity assignment

  Correct Answer: C

  Reference: https://www.cisco.com/c/en/us/td/docs/switches/datacenter/aci/apic/sw/all/faults/guide/b_APIC_Faults_Errors/b_IFC_Faults_Errors_chapter_01.html