Cisco Cisco Certified Specialist 300-630 Questions & Answers

• Question 1:

  Which action must be taken to connect two nonsilient servers in active/standby mode to two ACI leaves?

  A. Implement a virtual PortChannel on ACI leaves

  B. Enable ARP flooding for the bridge domain if the MAC address of the active interface changes after NIC failover

  C. Configure ARP flooding for the bridge domain if the MAC address of the active interface stays identical after a NIC failover

  D. Disable dataplane learning to avoid endpoint flapping

  Correct Answer: C

  Reference: https://www.cisco.com/c/en/us/td/docs/dcn/whitepapers/cisco-application-centric-infrastructure-design-guide.html

• Question 2:

  How does Cisco ACI manage the STP BPDUs between two pods?

  A. Cisco ACI spines perform ingress replication for STP BPDUs

  B. Cisco ACI spines suppress STP BPDUs to be forwarded to other pods

  C. BPDUs are forwarded over IPN using the bridge domain GIPo multicast address

  D. Special multicast group 239.255.255.255 is used to forward STP BPDUs

  Correct Answer: C

• Question 3:

  An engineer must implement a full mesh Cisco ACI Multi-Site architecture. Which action must be taken on each spine to accomplish this goal?

  A. Configure BGP-EVPN Router-ID

  B. Configure Multi-Pod Data-Plane TEP

  C. Configure Overlay Unicast TEP

  D. Configure Overlay Multicast TEP

  Correct Answer: A

  Reference: https://www.cisco.com/c/en/us/solutions/collateral/data-center-virtualization/application-centric-infrastructure/white-paper-c11-739609.html

• Question 4:

  What two actions should be taken to deploy a new Cisco ACI Multi-Pod setup? (Choose two.)

  A. Configure anycast RP for the underlying multicast protocol

  B. Configure the TEP pool of the new pod to be routable across the IPN

  C. Configure MP-BGP on IPN routers that face the Cisco ACI spines

  D. Increase interface MTU for all IPN routers to support VXLAN traffic

  E. Connect all spines to the IPN

  Correct Answer: DE

• Question 5:

  An engineer must allow routes learned from one L3Out to be advertised out another L3Out. The engineer does not have an explicit list of all the routes that must be advertised out, however, they know that they are all part of the 10.16.0.0/16 CIDR block. Which attributes must be selected under Ext-EPG to allow the necessary routes to be advertised out?

  A. Enable Export Route Control Subnet and enable Aggregate Export

  B. Disable Shared Route Control Subnet and enable Aggregate Shared Routes

  C. Enable Export Route Control Subnet and disable Aggregate Shared Routes

  D. Enable Export Route Control Subnet and enable Shared Route Control Subnet

  Correct Answer: A

  Reference: https://www.cisco.com/c/en/us/td/docs/switches/datacenter/aci/apic/sw/1-x/ACI_Best_Practices/b_ACI_Best_Practices/b_ACI_Best_Practices_chapter_01001.html

• Question 6:

  As part of a newly deployed ACI fabric, a pair of border leaf switches have been deployed to provide shared services for all tenants. The configured L3Out runs OSPF as the routing protocol. The requirement is to advertise the routes from the border leaf switches to the compute leaf switches. Which configuration must be implemented to meet these requirements?

  A. Configure a BGP route reflector policy for the Cisco ACI pod

  B. Define the shared L3Out in the common tenant

  C. Enable Import Route Control Enforcement in the L3Out policy

  D. Define the consumer subnet under the consumer EPG

  Correct Answer: A

  Reference: https://www.cisco.com/c/en/us/solutions/collateral/data-center-virtualization/application-centric-infrastructure/guide-c07-743150.html

• Question 7:

  A customer is deploying a new application across two ACI pods that is sensitive to latency and jitter. The application sets the DSCP values of packets to AF31 and CS6, respectively. Which configuration changes must be made on the APIC to support the new application and prevent packets from being delayed or dropped between pods?

  A. disable DSCP translation policy

  B. align the ACI QoS levels and IPN QoS policies

  C. disable DSCP mapping on the IPN devices

  D. align the custom QoS policy on the EPG site in the customer tenant

  Correct Answer: D

  Reference: https://www.ciscolive.com/c/dam/r/ciscolive/emea/docs/2019/pdf/BRKACI-2210.pdf

• Question 8:

  

  Refer to the exhibit. The client endpoint uses the load-balancer VIP as the destination address to send traffic to the server endpoint. If the load balancer does not do source NAT, which set of configurations must be applied on Cisco ACI to allow only the return traffic to be redirected to the service node?

  A. 1. Create a contract with a filter matching “IP” only

  2.

  Create a L4-L7 device, function type “GoTo”

  3.

  Create a L4-L7 Policy-Based Redirect Policy with the L3 Destination set to the load-balancer inside IP/MAC

  4.

  Create a service graph template that references the previously created contract and L4-L7 device

  5.

  Apply the service graph template. Select “L3 Destination” and reference L4-L7 Policy-Based Redirect Policy on the provider connector only

  B. 1. Create a contract linked to the common/default filter

  2.

  Create a L4-L7 device, function type “GoThrough”

  3.

  Create a L4-L7 Policy-Based Redirect Policy with the L3 Destination set to the load-balancer inside IP/MAC

  4.

  Create a service graph template that references the previously created contract and L4-L7 device

  5.

  Apply the service graph template. Select “L3 Destination” and reference L4-L7 Policy-Based Redirect Policy on the consumer and provider connector

  C. 1. Create a contract linked to the common/default filter

  2.

  Create a L4-L7 device, function type “GoTo”

  3.

  Create a L4-L7 Policy-Based Redirect Policy with “Anycast Endpoint” enabled and the L3 Destination set to the load-balancer inside IP/MAC

  4.

  Create a service graph template that references the previously created contract and L4-L7 device

  5.

  Apply the service graph template. Select “L3 Destination” and reference L4-L7 Policy-Based Redirect Policy on the consumer connector only

  D. 1. Create a contract with a filter matching “IP” only

  2.

  Create a L4-L7 device, function type “GoThrough”

  3.

  Create a L4-L7 Policy-Based Redirect Policy with “Anycast Endpoint” enabled and the L3 Destination set to the load-balancer inside IP/MAC

  4.

  Create a service graph template that references the previously created contract and L4-L7 device

  5.

  Apply the service graph template. Select “L3 Destination” and reference L4-L7 Policy-Based Redirect Policy on the consumer and provider

  Correct Answer: D

• Question 9:

  An engineer created a Cisco ACI environment in which multiple tenants reuse the same contract. The requirement is to prevent inter-tenant communication. Which action meets this requirement?

  A. Create the contract in the user tenant with the scope set to VRF and exported to other tenants

  B. Create the contract in the common tenant with the scope set to Tenant

  C. Create the contract in the user tenant with the scope set to Global and exported to other tenants

  D. Create the contract in the common tenant with the scope set to Global

  Correct Answer: B

• Question 10:

  How is multicast traffic managed in a Cisco ACI fabric?

  A. FTag trees are rooted at the spine nodes. Cisco APIC determines the roots.

  B. FTag trees are rooted at the leaf nodes. Cisco APIC determines the roots.

  C. FTag trees are rooted at the leaf nodes. The roots must be configured manually.

  D. FTag trees are rooted at the spine nodes. The roots must be configured manually.

  Correct Answer: A

  Reference: https://www.ciscolive.com/c/dam/r/ciscolive/emea/docs/2015/pdf/BRKAPP-9004.pdf