300-620 practice questions 221–230

1. Question 221 · 340 in bank

   Select 2

   

   Refer to the exhibit. An engineer plans to upgrade the Cisco ACI fabric. Leaf1 and Leaf2 are deployed in a VPC. The fabric is peering with R1 using BGP protocol. Which two actions upgrade the fabric nondisruptively? (Choose two.)

   • AConfigure the Graceful upgrade option.
   • BDisable the BGP neighborship between Cisco ACI fabric and R1.
   • CEnable the Graceful Insertion and Removal option.
   • DConfigure one maintenance group for every leaf.
   • ECreate one update group for all spines.

   Show answer

   Answer: AD

   Next question

2. Question 222 · 340 in bank

   

   Refer to the exhibit. A load balancer is connected to the Cisco ACI fabric using a single interface. The load balancer is performing source and destination NAT. A service graph is configured on the Cisco ACI. Which action must be taken to allow traffic from host A to pass through the load balancer before reaching host B?

   • AApply PBR on contract between the load balancer and application EPGs.
   • BDisable unicast routing on the bridge domain BD_2.
   • CConfigure limit IP learning to subnet on BD_3.
   • DSet the default gateway for host B on the load balancer.

   Show answer

   Answer: A

   Next question

3. Question 223 · 340 in bank

   

   Refer to the exhibit. Cisco ACI fabric is connected to a Cisco Catalyst 3850 Series Switch using EBGP. Server 2 is unable to communicate with Server 1. Leaf-2 fails to learn the external subnet 10.2.2.0/24 and other external subnets from other L3Outs. Which configuration ensures that the networks from Leaf-2 are learned by the external network?

   • AConfigure 10.2.2.0/24 under the external EPG of the L3Out.
   • BImplement a contract between the Server 2 EPG and the L3Out.
   • CImplement the bridge domain to advertise the bridge domain subnet.
   • DConfigure Spine-1 as the MP-BGP route reflector.

   Show answer

   Answer: D

   Next question

4. Question 224 · 340 in bank

   An engineer created a monitoring policy called Test in a Cisco ACI fabric and had to change the severity level of the monitored object Call home source. Which set of actions prevent the event from appearing in event reports?

   • ASelect Faults Severity Assignment Policies. Set severity level to cleared.
   • BSelect Event Severity Assignment Policies. Set severity level to squelched.
   • CSelect Faults Severity Assignment Policies. Set severity level to squelched.
   • DSelect Event Severity Assignment Policies. Set severity level to cleared.

   Show answer

   Answer: B

   Next question

5. Question 225 · 340 in bank

   What is the result of the pcEnPref flag configured on the epg-App_EPG?

   

   • AAny configuration changes to the private network are validated.
   • BAccess control rules for the L3Out network are applied.
   • CAccess control rules for the private network are applied.
   • DAny changes to the underlying EPG objects are forbidden.

   Show answer

   Answer: C

   Next question

6. Question 226 · 340 in bank

   An engineer must integrate a Cisco ACI fabric with VMware and discover an ESXi host using LLDP. Two EPGs have been created and associated with the VMM domain. The engineer must configure the ACI such that contracts are pushed to the ACI leaf switches when the VM is mapped to EPG and the contracts are removed when LLDP is disabled. Which configuration must be selected to meet these requirements?

   • ADeployment immediacy: On-Demand
   • BResolution immediacy: On-Demand
   • CDeployment immediacy: Immediate
   • DResolution immediacy: Immediate

   Show answer

   Answer: B

   Next question

7. Question 227 · 340 in bank

   An engineer must monitor a Cisco ACI fabric with SNMP. The “permit any contract” attribute is not configured in the fabric. Which action must be taken to receive SNMP traps from Cisco APIC?

   • AConsume the inband contract from the out-of-band EPG.
   • BConfigure the OOB contract under the common tenant.
   • CAdd the UDP filter port 162 to the existing OOB contract.
   • DProvide a standard contract under the user tenant.

   Show answer

   Answer: C

   Next question

8. Question 228 · 340 in bank

   A network engineer is implementing a Layer 3 Out in the Cisco ACI fabric. The data center core switches must connect to a pair of leaf switches and exchange routes via a routing protocol. In addition, the implementation must meet these criteria: • The external switch interface must use 802.1Q tagging. • Access to the Internet for the ACI fabric must be the L3Out. • The L3Out must use a routing protocol that has rapid convergence time and low CPU usage. Which configuration set meets these requirements?

   • AConfigure the OSPF Protocol policy with an area of 0. Set up the Routed External Network object and Node Profile and select OSPF. Create the Switch profile and select VPC with the appropriate interfaces. Create the default network and associate it with the Routed Outside object.
   • BConfigure the BGP Protocol policy with the appropriate Autonomous System number. Configure an Interface policy and an External Bridged Domain. Create an External Bridged Network and use the configured VLAN pool. Build the Leaf profile and select the Routed sub-interface with the appropriate VLAN.
   • CImplement the IS-IS Protocol policy with the selected Autonomous System number. Create the Routed Outside object and Node Profile and select IS-IS. Configure the Interface profile and select the Routed Interface with the appropriate interfaces. Create the External Network object.
   • DImplement the EIGRP Protocol policy with the selected Autonomous System number. Create Routed Outside object and Node Profile and select EIGRP as the routing protocol. Build the Interface profile and select SVI and the appropriate VPC. Configure the External Network object with a network of 0.0.0.0/0.

   Show answer

   Answer: D

   Next question

9. Question 229 · 340 in bank

   

   Refer to the exhibit. Endpoint-A must communicate with Endpoint-B, but Leaf-101 has not learned the location of Endpoint-B. Which step must Leaf-101 take before sending the data?

   • ALeaf-101 forwards the packet to the anycast proxy VTEP IP.
   • BLeaf-101 creates an eVXLAN tunnel to Leaf-104.
   • CLeaf-101 sends the packet to the Spine-201.
   • DLeaf-101 broadcasts an ARP request on a link to one of the spines.

   Show answer

   Answer: A

   Next question

10. Question 230 · 340 in bank

    An engineer is configuring a new user account in Cisco ACI. The new user will be assigned the role of fabric administrator. The fabric has only one tenant, so the engineer associated the new user account with a security domain for the tenant, as well as the security domain for the management tenant. Which configuration permits the new user with admin access to the fabric?

    • AAssociate the new user with the security domain all.
    • BGrant the new user R/W access to the user and management tenant.
    • CAdd the DN uni/fabric under explicit rules.
    • DBind the security domain infra to the new user account.

    Show answer

    Answer: A

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

300-620 practice, question 221. 340 questions available.