300-620 Online Practice Questions and Answers

An engineer must set up a Cisco ACI fabric to send Syslog messages related to hardware events, such as chassis line card failures. The messages should be sent to a dedicated Syslog server. Where in the Cisco APIC should the policy be configured to meet this requirement?

A. uni/tn-common/monepg-default

B. uni/infra/monifra-default

C. uni/fabric/monfab-default

D. uni/fabric/moncommon

What is the minimum number of APICs does Cisco recommend to deploy in a production cluster?

A. 1

B. 3

C. 4

D. 5

A data center administrator is upgrading an ACI fabric. There are 3 APIC controllers in the fabric and all the servers are dual-homed to pairs of leaf switches configured in VPC mode. How should the fabric be upgraded to minimize possible traffic impact during the upgrade?

A. 1. Create two maintenance groups for the APIC controllers: VPC left and VPC right.

2.

Upgrade the first group of controllers.

3.

Upgrade the second group of controllers.

4.

Upgrade the leaf switches.

B. 1. Create two maintenance groups for APIC controllers: VPC left and VPC right.

2.

Upgrade the leaf switches.

3.

Upgrade the first group of controllers.

4.

Upgrade the second group of controllers.

C. 1. Create two maintenance groups for the leaf switches: VPC left and VPC right.

2.

Upgrade the APIC controllers.

3.

Upgrade the first group of leaf switches.

4.

Upgrade the second group of leaf switches.

D. 1. Create two maintenance groups for the leaf switches: VPC left and VPC right.

2.

Upgrade the first group of switches.

3.

Upgrade the second group of switches.

4.

Upgrade the APIC controllers.

Which two statements regarding ACI Multi-Site are true? (Choose two.)

A. The Multi-Site orchestrator must be directly attached to one ACI leaf.

B. Routers in the Inter-Site network must run OSPF, DHCP relay, and MP-BGP.

C. ACI Multi-Site is a solution that supports a dedicated APIC cluster per site.

D. ACI Multi-Site is a solution that allows one APIC cluster to manage multiple ACI sites.

E. The Inter-Site network routers should run OSPF to establish peering with the spines.

Which feature should be disabled on a bridge domain when a default gateway for endpoints is on an external device instead of a Cisco ACI bridge domain SVI?

A. unknown unicast flooding

B. ARP flooding

C. unicast routing

D. proxy ARP

Refer to the exhibit.

An engineer connects a Cisco ACI fabric to two different Cisco Nexus 9000 Series Switches. The fabric must be configured to ensure a loop-free topology and N9K1 must be configured as the root bridge for VLAN 10. Which action meets these requirements?

A. Enable STP on ports between the leaf and spine.

B. Set BPDU Guard on ports between the leaf and Nexus 9000 Series Switches.

C. Enable Cisco Discovery Protocol on ports between the leaf and spine.

D. Activate MCP on ports between the leaf and Nexus 9000 Series Switches.

Refer to the exhibit.

An engineer must migrate the web servers and backup servers from the legacy network to a Cisco ACI environment in the corresponding EPGs. The requirement is to allow communication between the servers in the web EPG and the backup EPG without creating contracts. Which action meets the requirements?

A. Configure the Enforced Bridge Domain status flag.

B. Set the direction of Policy Enforcement to Egress.

C. Set IP Data-plane learning to Enabled.

D. Set Policy Control Enforcement to Unenforced.

DRAG DROP

Drag and drop the Cisco ACI filter entry options from the left onto the correct categories on the right indicating what are required or optional parameters.

Select and Place:

DRAG DROP

Drag and drop the Cisco ACI Layer 4 to Layer 7 service insertion terms on the left to the correct descriptions on the right.

Select and Place:

DRAG DROP Refer to the exhibit. A Cisco ACI fabric is newly deployed, and the security team requires more visibility of all inter EPG traffic flows. All traffic in a VRF must be forwarded to an existing firewall pair. During failover, the standby firewall must continue to use the same IP and MAC as the primary firewall. Drag and drop the steps from the left into the implementation order on the right to configure the service graph that meets the requirements. (Not all steps are used.)

Select and Place: