Cisco CCNP Data Center 300-620 Questions & Answers

• Question 271:

  A Cisco ACI fabric is integrated with a VMware environment. The engineer must back up the current configuration of the fabric and restore the vCenter password when the configuration is imported. Which action accomplishes this goal?

  A. Create a Configuration Import Policy.

  B. Select SCP protocol for the remote location.

  C. Enable the Global AES Encryption setting.

  D. Set the Authentication type to Use Password.

  Correct Answer: C

• Question 272:

  An engineer must configure Cisco ACI for VMM integration to VMware vCenter. Which two attributes must be configured on the Cisco APIC to achieve this goal? (Choose two.)

  A. cluster name

  B. virtual switch name

  C. data center name

  D. port group

  E. logon credentials

  Correct Answer: BE

  Data Center name is specified in Create vCenter Controller screen

• Question 273:

  A Cisco ACI fabric must send a packet between two pods in a Cisco ACI Multi-Pod topology where ARP flooding is disabled within the bridge domain. How does a Cisco ACI spine switch forward ARP messages from a leaf switch in POD1 to POD2?

  A. ARP optimization is applied and sends ARP to remote anycast.

  B. The ARP message is dropped and connectivity is lost between the endpoints.

  C. A proxy ARP message is sent to destination group 225.224.0.0.

  D. An ARP Glean message is sent to multicast address 239.255.255.240.

  Correct Answer: D

• Question 274:

  An endpoint called EP1 is connected to Cisco ACI compute leaf1. The engineer must replace EP1 with EP2 on the same leaf switch. Which set of actions forces all remote leaves to delete EP1 before timer expiration?

  A. Set L2 Unknown Unicast to Hardware proxy. Select Clear remote MAC entries.

  B. Set L2 Unknown Unicast to Flood. Select Clear remote MAC entries.

  C. Set L2 Unknown Unicast to Hardware Proxy. Select Clear remote IP entries.

  D. Set L2 Unknown Unicast to Flood. Select Clear remote IP entries.

  Correct Answer: B

  When the bridge domain has L2 Unknown Unicast set to Flood, if an endpoint is deleted the system deletes it from both the local leaf switches as well as the remote leaf switches where the bridge domain is deployed, by selecting Clear Remote MAC Entries. Without this feature, the remote leaf continues to have this endpoint learned until the timer expires. https://www.cisco.com/c/en/us/td/docs/switches/datacenter/aci/apic/sw/2-x/L2_config/b_Cisco_APIC_Layer_2_Configuration_Guide/b_Cisco_APIC_Layer_2_Configuration_Guide_chapter_010.html#:~:text=When%20the%20bridge,the% 20timer%20expires.

• Question 275:

  Which Cisco ACI feature allows the encryption of communication over TEP addresses connecting sites via the intersite network in a Cisco Multi-Site deployment?

  A. TrustSec

  B. IPsec

  C. MACsec

  D. CloudSec

  Correct Answer: D

• Question 276:

  A Cisco ACI environment is configured to integrate with a vCenter environment using the VMM domain name west_coast_VMM. Within the ACI environment, only tenant west_coast has EPGs associated with west_coast_VMM. This deployment is new, so these EPGs currently do not have any members. A systems engineer is setting up vCenter, creates a VDS named west-coast-VMM, and deletes the VDS named west_coast_VMM. The systems engineer creates the necessary port groups that correspond with the EPGs, but when VMs are connected to the port groups, they cannot ping their gateway. Which action establishes connectivity?

  A. Associate the EPGs to west-coast-VMM.

  B. Rename the VDS to west_coast_VMM.

  C. Use the EPG encap-VLAN on the port groups.

  D. Disconnect Cisco APIC connectivity from vCenter.

  Correct Answer: B

• Question 277:

  An engineer must configure SNMP inside a Cisco ACI fabric. The engineer has created an SNMP Policy, called SNMP-policy and an SNMP Monitoring Group called SNMP-group1 that contains five trap receivers. Which configuration set completes the configuration?

  A. Permit OOB management traffic using UDP port 161. Associate client group policy with the OOB management EPG.

  B. Edit oobbrc to permit traffic using UDP port 16. Associate the client group policy to SNMP-group1.

  C. Create an OOB management contract. Include the SNMP server in the OOB management EPG.

  D. Allow all OOB management traffic. Configure three trap receivers on SNMP-group1.

  Correct Answer: A

  1) Ports 161 and 162 2) Fabric Policies > Policies > Pod > SNMP > default > Client Group Policies > Create SNMP Client Group Profile > define Name and select Associated Management EPG