300-620 practice questions 301–310

1. Question 301 · 340 in bank

   An engineer must configure an export policy that regularly backs up Cisco APIC configuration to a remote location. The backup must be sent by using a secure and encrypted protocol. Which configuration set must be used?

   • AConfigure the export policy with the required export destination. Set the export destination as TLS. Configure the scheduler with a maximum number of nodes.
   • BConfigure the export policy with the required export destination. Set the export destination as SSH. Set the scheduler settings to recurring.
   • CConfigure the export policy with the required export destination. Set the export destination as SCP. Set the scheduler settings to recurring.
   • DConfigure the export policy with the required export destination. Set the export destination as AES. Configure the scheduler with a maximum number of nodes.

   Show answer

   Answer: C

   Next question

2. Question 302 · 340 in bank

   What is a characteristic of a Cisco ACI Multi-Site?

   • AIt eliminates the need to deploy multicast in a Layer 3 network that interconnects the fabrics.
   • BIt adds a third Cisco ACI site that requires using of full mesh cabling connectivity between spines.
   • CIt manages the separate deployed Cisco ACI fabrics with a single common Cisco APIC cluster.
   • DMP-BGP EVPN sessions are established between leafs deployed in separate fabrics.

   Show answer

   Answer: A

   Next question

3. Question 303 · 340 in bank

   Which service graph option creates a permit entry for the traffic from the provider EPG to the provider connector of the PBR node?

   • Adirect connect
   • Bpromiscuous mode
   • Csingle context aware
   • Dshare encap

   Show answer

   Answer: A

   Next question

4. Question 304 · 340 in bank

   

   Refer to the exhibit. An engineer configures connectivity for a bare metal server called SVR-15. EPG-15 is associated with a physical domain named phys_dom-15. The VPC member port is statically bound to EPG-15 with Encapsulation VLAN-1500. Which step must the engineer take to ensure that SVR-15 is connected to the Cisco ACI fabric?

   • AAssociate an LACP interface policy to phys_dom-15 for VLAN-1500.
   • BEnable dynamic VLAN assignment for the VLAN pool that is associated with phys_dom-15.
   • CConfigure a VPC explicit protection group for VLAN-1500 on the VPC member ports.
   • DConfirm that the VLAN pool that is associated with phys_dom-15 includes VLAN-1500.

   Show answer

   Answer: D

   Next question

5. Question 305 · 340 in bank

   

   Refer to the exhibit. A network engineer must configure a Cisco ACI fabric that meets these requirements: • The interface Eth1/2 must accept traffic only from EP2. • The interface Eth1/1 must accept traffic from EP1 and EP2. • EP1 and EP2 must authenticate independently on Eth1/1. Which 802.1x host modes must be configured to meet these requirements?

   • ASingle-host on Eth1/1 - Multi-auth on Eth1/2
   • BSingle-host on Eth1/1 - Multi-domain on Eth1/2
   • CMulti-auth on Eth1/1 - Multi-domain on Eth1/2
   • DMulti-auth on Eth1/1 - Single-host on Eth1/2

   Show answer

   Answer: D

   Next question

6. Question 306 · 340 in bank

   What is the function of an HTTP GET request during Cisco ACI fabric discovery?

   • AIt allows neighbor discovery of leaf switches.
   • BIt downloads firmware image on leaf switches.
   • CIt pushes policy elements from Cisco APIC to leaf switches.
   • DIt assigns VTEP IPs to leaf switches.

   Show answer

   Answer: B

   Next question

7. Question 307 · 340 in bank

   A Cisco ACI leaf node has received a Layer 2 frame from an unknown endpoint. The bridge domain is configured for Hardware Proxy. Which action will the ACI fabric take on the traffic?

   • AThe leaf will flood the traffic to all attached nodes configured with the bridge domain. Attached nodes will respond with a proxy ARP.
   • BThe leaf will flood the traffic to all attached nodes configured with the bridge domain. Attached nodes will flood the traffic to endpoints.
   • CThe leaf will forward the traffic to a spine. If the spine has no information in the COOP database, the traffic will be dropped.
   • DThe leaf will forward the traffic to a spine. If the spine has no information in the COOP database, the traffic will be flooded.

   Show answer

   Answer: C

   Next question

8. Question 308 · 340 in bank

   Which log type provides information about configuration changes initiated by the user in the Cisco ACI fabric?

   • Afault
   • Bsession
   • Cevent
   • Daudit

   Show answer

   Answer: D

   Next question

9. Question 309 · 340 in bank

   Select 2

   Which two settings are available in a Cisco ACI contract? (Choose two.)

   • Aversion
   • Bsubject
   • Cconstraint
   • Dpolicy
   • Escope

   Show answer

   Answer: BE

   Next question

10. Question 310 · 340 in bank

    A network engineer is configuring syslogs in the Cisco ACI environment with these requirements: • All message severities must be logged except for debugging messages. • Messages must be compliant with RFC 5424 format. • Logs must be saved only in a file on the APIC. Which settings must be used in the Syslog Monitoring Destination Group to meet these requirements?

    • AFormat: ACI - Local File Destination Admin State: Enabled Severity: Notifications - Console Destination Admin State: Disabled
    • BFormat: NX-OS - Local File Destination Admin State: Disabled Severity: Emergencies - Console Destination Admin State: Enabled
    • CFormat: NX-OS - Local File Destination Admin State: Disabled Severity: Alerts - Console Destination Admin State: Enabled
    • DFormat: ACI - Local File Destination Admin State: Enabled Severity: Information - Console Destination Admin State: Disabled

    Show answer

    Answer: D

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

300-620 practice, question 301. 340 questions available.