300-620 practice questions 61–70

1. Question 61 · 340 in bank

   Which protocol does ACI use to securely sane the configuration in a remote location?

   • ASCP
   • BHTTPS
   • CTFTP
   • DFTP

   Show answer

   Answer: A

   Next question

2. Question 62 · 340 in bank

   Select 2

   Which two protocols support accessing backup files on a remote location from the APIC? (Choose two.)

   • ATFTP
   • BFTP
   • CSFTP
   • DSMB
   • EHTTPS

   Show answer

   Answer: BC

   Next question

3. Question 63 · 340 in bank

   Which attribute should be configured for each user to enable RADIUS for external authentication in Cisco ACI?

   • Acisco-security domain
   • Bcisco-auth-features
   • Ccisco-aci-role
   • Dcisco-av-pair

   Show answer

   Answer: D

   Next question

4. Question 64 · 340 in bank

   

   Refer to the exhibit. Which action should be taken to ensure authentication if the RADIUS servers are unavailable?

   • AAdjust the priority of server 10.1.1.1 to 1.
   • BAssign the user to the default role.
   • CSet the default login realm to LDAP.
   • DSet the fallback login to local.

   Show answer

   Answer: D

   Next question

5. Question 65 · 340 in bank

   A network engineer demonstrates Cisco ACI to a customer. One of the test cases is to validate a disaster recovery event by resetting the ACI fabric to factory and then restoring the fabric to the state it was in before the event. Which setting must be enabled on ACI to export all configuration parameters that are necessary to meet these requirements?

   • Aenabled AES encryption
   • Bgenerated a tech-support file
   • Cencrypted export destination
   • Denabled JSON format export

   Show answer

   Answer: A

   Next question

6. Question 66 · 340 in bank

   Select 2

   An engineer wants to filter the System Faults page and view only the active faults that are present in the Cisco ACI fabric. Which two lifecycle stages must be selected for filtering? (Choose two.)

   • ARaised
   • BRetaining
   • CSoaking, Clearing
   • DRaised, Clearing
   • ESoaking

   Show answer

   Answer: AE

   Next question

7. Question 67 · 340 in bank

   An engineer must limit management access to the Cisco ACI fabric that originates from a single subnet where the NOC operates. Access should be limited to SSH and HTTPS only. Where should the policy be configured on the Cisco APIC to meet the requirements?

   • Apolicy in the management tenant
   • BACL on the console interface
   • CACL on the management interface of the APIC
   • Dpolicy on the management VLAN

   Show answer

   Answer: A

   Next question

8. Question 68 · 340 in bank

   In the context of ACI Multi-Site, when is the information of an endpoint (MAC/IP) that belongs to site 1 advertised to site 2 using the EVPN control plane?

   • AEndpoint information is not exchanged across sites unless COOP protocol is used.
   • BEndpoint information is not exchanged across sites unless a policy is configured to allow communication across sites.
   • CEndpoint information is exchanged across sites as soon as the endpoint is discovered in one site.
   • DEndpoint information is exchanged across sites when the endpoints are discovered in both sites.

   Show answer

   Answer: B

   Next question

9. Question 69 · 340 in bank

   Which statement regarding ACI Multi-Pod and TEP pool is true?

   • AThe IP addresses used in the IPN network can overlap TEP pool of the APIC.
   • BA different TEP pool must be assigned to each Pod.
   • CThe Pod1 TEP pool must be split and a portion of the TEP pool allocated to each Pod.
   • DThe same TEP pool is used in all Pods.

   Show answer

   Answer: B

   Next question

10. Question 70 · 340 in bank

    Select 2

    Which two statements regarding ACI Multi-Site are true? (Choose two.)

    • AThe Multi-Site orchestrator must be directly attached to one ACI leaf.
    • BRouters in the Inter-Site network must run OSPF, DHCP relay, and MP-BGP.
    • CACI Multi-Site is a solution that supports a dedicated APIC cluster per site.
    • DACI Multi-Site is a solution that allows one APIC cluster to manage multiple ACI sites.
    • EThe Inter-Site network routers should run OSPF to establish peering with the spines.

    Show answer

    Answer: CE

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

300-620 practice, question 61. 340 questions available.