Cisco CCNP Data Center 300-620 Questions & Answers

• Question 41:

  Which two external entities are referenced by an AEP? (Choose two.)

  A. Layer 3 domain

  B. Hypervisor

  C. VMM domain

  D. Fibre Channel switch

  E. VMware vCenter server

  Correct Answer: AC

• Question 42:

  Refer to the exhibit.

  

  All nodes in the Cisco ACI fabric have been statically assigned out-of-band management IP addresses in the 10.100.180.0/24 range. An engineer is attempting to SSH into Leaf101 using a laptop with an IP address of 10.101.180.100/24. Which configuration change must be performed to allow the engineer to SSH using the laptop?

  A. Add a contract filter to oobbrc-default that allows SSH.

  B. Change the Leaf101 IP address to 10.101.180.101.

  C. Change the allowed subnets.

  D. Select the default QoS Class policy.

  Correct Answer: C

• Question 43:

  A recent set of changes by a Cisco ACI administrator corrupted the APIC cluster. The ACI engineer must restore the configuration of the previous day. The APIC nodes in the cluster can communicate but fail to connect with other networks. The administrator plans to overwrite the entire existing configuration with the backup configuration. Which set of actions accomplishes this task?

  A. Restore using the last configuration on the factory-reset APIC. Use an import policy set to Best-effort.

  B. Roll back the configuration using a local snapshot. Use an import policy set to Atomic Replace.

  C. Roll back the configuration using a local snapshot. Use an import policy set to Best-effort Merge.

  D. Restore the configuration imported from an FTP server. Use an import policy set to Atomic.

  Correct Answer: B

  Atomic Replace - overwrites existing configuration with imported configuration data. Any objects in the existing configuration that do not exist in the imported configuration are deleted. Objects are deleted from the existing configuration that have children in the existing configuration but do not have children in the incoming imported configuration. For example, if an existing configuration has two tenants, solar and wind, but the imported backed up configuration was saved before the tenant wind was created, tenant soar is restored from the backup but tenant wind is deleted.

  Rollback is when a previous configuration snapshot is used to replace the current APIC configuration. This can be done on the granularity of a snapshot file. This means that a single tenant can be moved back to a previous configuration while the other tenants keep their current configuration state. This is often referred to as partial rollback. When all of the configuration files for a particular version are used to replace the current APIC configuration, this is referred to as a full rollback.

• Question 44:

  An engineer configures a Cisco ACI Multi-Pod for disaster recovery. Which action should be taken for the new nodes to be discoverable by the existing Cisco APICs?

  A. Configure IGMPv3 on the interfaces of IPN routers that face the Cisco ACI spine.

  B. Enable subinterfaces with dot1q tagging on all links between the IPN routers.

  C. Enable DHCP relay on all links that are connected to Cisco ACI spines on IPN devices.

  D. Configure BGP as the underlay protocol in IPN.

  Correct Answer: A

  DHCP relay support: One of the nice functionalities offered by the ACI Multi-Pod solution is the capability of allowing auto-provisioning of configuration for all the ACI devices deployed in remote Pods. This allows those remote Pods to join the Multi-Pod fabric with zero-touch configuration, as it normally happens to ACI nodes part of the same fabric (Pod).

• Question 45:

  Refer to the exhibit.

  

  Server A is connected to the Cisco ACI fabric using two teamed interfaces. One interface in a team is configured as active and the other remains in standby mode. When a failover occurs and the standby interface becomes active, it uses its built-in MAC address to send traffic. Which bridge domain configuration must be applied to resolve the issue?

  A. Configure Hardware proxy.

  B. Set L2 Unknown Unicast to Flood.

  C. Enable ARP flooding.

  D. Activate Limit IP Learning to Subnet.

  Correct Answer: C

• Question 46:

  In a Cisco ACI Multi-Site fabric, the Inter-Site BUM Traffic Allow option is enabled in a specific stretched bridge domain. What is used to forward BUM traffic to all endpoints in the same broadcast domain?

  A. ingress replication on the spines in the source site

  B. egress replication on the destination leaf switches

  C. egress replication on the source leaf switches

  D. ingress replication on the spines in the destination site

  Correct Answer: D

  the Cisco ACI Multi-Site design uses the ingress replication function on the spine nodes of the source site to replicate BUM traffic to all the remote sites on which that bridge domain is stretched. https://www.cisco.com/c/en/us/solutions/collateral/data-center-virtualization/application-centric-infrastructure/white-paper-c11-739609.html

• Question 47:

  A customer requested the creation of a VLAN POOL for VMM integration. The pool must support the creation of 999 dynamic and 10 static VLANs. Which VLAN pool implementation meets the customer requirements?

  

  A. Option A

  B. Option B

  C. Option C

  D. Option D

  Correct Answer: A

• Question 48:

  A network engineer implements an L3Out inside the Cisco ACI fabric. The engineer plans to connect a Cisco ACI leaf switch to a switch outside of the Cisco ACI fabric to exchange routes via a routing protocol. The external switch interface is configured with IP address 192.168.15.1/30. The ACI engineer wants to use a routing protocol that uses a hierarchical network design. The Cisco ACI fabric should use the L3Out to access the Internet. Which set of steps must be taken to meet these requirements?

  A. Set up the BGP Protocol policy with the appropriate Autonomous System number. Create the Routed Outside object and Node profile, selecting BGP as the routing protocol. Build the Interface profile, selecting SVI and the appropriate VPC. Configure the 0.0.0.0/32 network as part of the External Network object.

  B. Set up the EIGRP Protocol policy with the selected Autonomous System number. Set up the Routed External Network object and Node profile, selecting EIGRP. Create the Switch profile, selecting VPC and the appropriate interfaces. Create the default network and associate it with the Routed Outside object.

  C. Set up the EIGRP Protocol policy with the selected Autonomous System number. Configure an Interface policy and an External Bridged Domain. Create an External Bridged Network using the configured VLAN pool. Build the Leaf profile, selecting Routed Sub-Interface and the appropriate VLAN.

  D. Configure the OSPF Protocol policy with an area of 0. Create the Routed Outside object and Node profile, selecting OSPF as the routing protocol. Build the Interface profiles, selecting Routed Interface and the appropriate interface. Set up the External Network object with a network of 0.0.0.0/0.

  Correct Answer: D

• Question 49:

  Which protocol is used in a Multi-Pod topology to synchronize reachability information across pods?

  A. MP-BGP EVPN

  B. OSPF

  C. IS-IS

  D. COOP

  Correct Answer: A

  Each Pod connects to the IPN through the spine nodes, the IPN can be as simple as a single Layer 3 device or can be built with a larger Layer 3 network infrastructure like a Service Provider network.

  Since each Pod is running a separate instance of the COOP protocol, this implies that information about discovered endpoints (MAC, IPv4/IPv6 addresses, and their location) is only exchanged using COOP as a control plane protocol between the leaf and spine nodes locally deployed in each Pod.

  ACI Multi-Pod functions as a single fabric, so, it is key to ensure that the databases implemented in the spine nodes across Pods have a consistent view of the endpoints connected to the fabric, this requires the deployment of an overlay control plane running between the spines and used to exchange endpoint reachability information. Multi-Protocol BGP has been chosen for this function. This is due to the flexibility and scalability properties of this protocol and its support of different address families (like EVPN and VPNv4) allowing the exchange of Layer 2 and Layer 3 information in a true multi-tenant fashion.

• Question 50:

  Refer to the exhibit.

  

  A Cisco APIC raises this fault when connectivity for EPG-3 is configured. Which action clears the fault?

  A. Associate BD-3 to VRF-1.

  B. Implement a domain for EPG-3.

  C. Configure a subnet on BD-3.

  D. Create BD-3 for EPG-3.

  Correct Answer: D