300-620 practice questions 111–120

1. Question 111 · 340 in bank

   A network engineer must backup the PRODUCTION tenant. The configuration backup should be stored on the APIC using a markup language and contain all secure information. Which export policy must be used to meet these requirement?

   • A//IMG//
   • B//IMG//
   • C//IMG//
   • D//IMG//

   Show answer

   Answer: D

   Next question

2. Question 112 · 340 in bank

   An engineer must create a backup of the Cisco ACI fabric for disaster recovery purposes. The backup must be transferred over a secure and encrypted transport. The backup file must contain all user and password related information. The engineer also wants to process and confirm the backup file validity by using a Python script. This requires the data structure to have a format similar to a Python dictionary. Which configuration set must be used to meet these requirements?

   • AUnder the Create Remote location settings, select Protocol: FTP Under the Export policy, select - - Format: XML - Modify Global AES Encryption Settings: Enabled
   • BUnder the Create Remote location settings, select Protocol: FTP Under the Export policy, select - - Format: XML - Modify Global AES Encryption Settings: Disabled
   • CUnder the Create Remote location settings, select Protocol: SCP Under the Export policy, select - - Format: JSON - Modify Global AES Encryption Settings: Disabled
   • DUnder the Create Remote location settings, select Protocol: SCP Under the Export policy, select - - Format: JSON - Modify Global AES Encryption Settings: Enabled

   Show answer

   Answer: D

   Next question

3. Question 113 · 340 in bank

   The Application team reports that a previously existing port group has disappeared from vCenter. An engineer confirms that the VMM domain association for the EPG is no longer present. Which action determines which user is responsible for the change?

   • ACheck the EPG audit logs for the “deletion” action and compare the affected object and user.
   • BEvaluate the potential faults that are raised for that EPG.
   • CExamine the health score and drill down to an object that affects the EPG combined score.
   • DInspect the server logs to see who was logging in to the APIC during the last few hours.

   Show answer

   Answer: A

   Next question

4. Question 114 · 340 in bank

   An application team tells the Cisco ACI network administrator that it wants to monitor the statistics of the unicast and BUM traffic that are seen in a certain EPG. Which statement describes the collection statistics?

   • AAll EPGs in the Cisco ACI tenant object must be enabled for statistics to be collected.
   • BCisco ACI does not capture statistics at the EPG level. Only statistics that pass through ACI contracts can be monitored.
   • CEPG statistics can be collected only for VMM domains. If a physical domain exists, statistics are not collected.
   • DThe collection of statistics is enabled on the EPG level by enabling the statistics for unicast and BUM traffic.

   Show answer

   Answer: D

   Next question

5. Question 115 · 340 in bank

   An engineer must securely export Cisco APIC configuration snapshots to a secure, offsite location. The exported configuration must be transferred using an encrypted tunnel and encoded with a platform-agnostic data format that provides namespace support. Which configuration set must be used?

   • APolicy: Export Policy - Protocol: TLS - Format: JSON
   • BPolicy: Import Policy - Protocol: TLS - Format: XML
   • CPolicy: Import Policy - Protocol: SCP - Format: JSON
   • DPolicy: Export Policy - Protocol: SCP - Format: XML

   Show answer

   Answer: D

   Next question

6. Question 116 · 340 in bank

   A network engineer must allow secure access to the Cisco ACI out-of-band (OOB) management only from external subnets 10.0.0.0/24 and 192.168.20.0/25. Which configuration set accomplishes this goal?

   • ACreate a L3Out in the MGMT tenant in OOB VRF. Set External Management Network Instance Profile as a consumer of the OOB contract. Create an External EPG with two subnet entries with the external subnets.
   • BCreate a PBR service graph in the MGMT tenant. Create a management Profile with the required OOB EPG. Redirect all traffic going into ACI management to the external firewall. Create two subnet entries under the OOB Bridge domain with the required subnets.
   • CCreate an EPG and BD in the MGMT tenant in OOB VRF. Set OOB VRF to provide the contract. Set a new EPG to consume the OOB contract.
   • DCreate an OOB contract that allows the required ports. Provide the contract from the OOB EPG. Consume the contract by the OOB External Management Network Instance Profile. Create two subnet entries in the External Management Network Profile with the required subnets.

   Show answer

   Answer: D

   Next question

7. Question 117 · 340 in bank

   

   Refer to the exhibit. A Cisco ACI fabric is using out-of-band management connectivity. The APIC must access a routable host with an IP address of 192.168.11.2. Which action accomplishes this goal?

   • AChange the switch APIC Connectivity Preference to in-band management
   • BModify the Pod Profile to use the default Management Access Policy
   • CAdd a Fabric Access Policy to allow management connections
   • DRemove the in-band management address from the APIC

   Show answer

   Answer: D

   Next question

8. Question 118 · 340 in bank

   A Cisco APIC is configured with RADIUS authentication as the default. The network administrator must ensure that users can access the APIC GUI with a local account if the RADIUS server is unreachable. Which action must be taken to accomplish this goal?

   • AAssociate console authentication with the “RADIUS” realm
   • BReference the “local” realm in the fallback domain
   • CCreate an additional login domain that references local accounts
   • DEnable the fallback check with the default authentication domain

   Show answer

   Answer: B

   Next question

9. Question 119 · 340 in bank

   

   Refer to the exhibit. A customer must back up the current Cisco ACI configuration securely to the remote location using encryption and authentication. The backup job must run once per day. The customer’s security policy mandates that any sensitive information including passwords must not be exported from the device. Which set of steps meets these requirements?

   • AExport destination using FTP protocol. Use XML format.
   • BExport destination using FTP protocol. Disable Global AES Encryption.
   • CExport destination using SCP protocol. Disable Global AES Encryption.
   • DExport destination using SCP protocol. Use XML format.

   Show answer

   Answer: C

   Next question

10. Question 120 · 340 in bank

    Select 2

    An engineer must perform a Cisco ACI fabric upgrade that minimizes the impact on user traffic and allows only permitted users to perform an upgrade. Which two configuration steps should be taken to meet these requirements? (Choose two.)

    • AGrant tenant-ext-admin access to a user who performs an upgrade
    • BDivide Cisco APIC controllers into two or more maintenance groups
    • CCombine all switches into an upgrade group
    • DGrant the fabric administrator role to a user who performs an upgrade
    • EDivide switches into two or more maintenance groups

    Show answer

    Answer: DE

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

300-620 practice, question 111. 340 questions available.