300-620 Dumps - Grab Out For [NEW-2021] Cisco Exam [Q53-Q73]

300-620 Dumps - Grab Out For [NEW-2021] Cisco Exam

300-620 Exam Dumps PDF Guaranteed Success  with Accurate & Updated Questions

Understanding functional and technical aspects of Implementing Cisco Application Centric Infrastructure (300-620 DCACI) Security Policies and Procedures

The following will be discussed in CISCO 300-620 exam dumps:

Customers changing application requirements need a flexible approach that is simple, more agile, and application-centric. Ease of provisioning and speed are critical performance metrics for data center network infrastructure that support physical, virtual, and cloud environments—without compromising scalability or security.

Cisco Application Centric Infrastructure (Cisco ACI) is a comprehensive software-defined networking (SDN) architecture. This solution provides a network that is deployed, monitored, and managed in an application-centric way. It uses business-relevant language that benefits different teams working with and within the IT organization.

• Utilize syslog and snmp services
• Configure Network Time Protocol (NTP)
• Configure an upgrade
• Enable Inter-EPG Layer 3 Connectivity
• Configure External Layer 3 (L3Out) Connection
• Implement AAA and RBAC
• Integrate Application Policy Infrastructure Controller (APIC) With VMware vCenter Using VMware
• Implement configuration backup (snapshot/config import export)
• Enable Inter-EPG Layer 2 Connectivity
• Implement out-of-band and in-band
• Enable Layer 2 Connectivity in the Same Endpoint Group (EPG)
• Distributed Virtual Switch (DVS)
• Validate Fabric Discovery
• Create Access Policies and Virtual Port Channel (vPC)
• Configure External Layer 2 (L2Out) Connection
• Compare Traffic Forwarding Methods in a Bridge Domain

 

NEW QUESTION 53
An engineer is extending an EPG out of the ACI fabric using static path binding. Which statement about the endpoints is true?

• A. External endpoints are in a different bridge domain than the endpoints in the fabric.
• B. Endpoint learning encompasses the MAC address only.
• C. Endpoints must connect directly to the ACI leaf port.
• D. External endpoints are in the same EPG as the directly attached endpoints.

Answer: B

 

NEW QUESTION 54

Refer to the exhibit. Which Adjacency Type value should be set when the client endpoint and the service node interface are in a different subnet?

• A. Routed
• B. L3
• C. Unicast
• D. L3Out

Answer: B

Explanation:
Section: External Network Connectivity
Explanation/Reference:

 

NEW QUESTION 55
Refer to the exhibit.

Which Adjacency Type value should be set when the client endpoint and the service node interface are in a different subnet?

• A. L3
• B. Unicast
• C. Routed
• D. L3Out

Answer: C

 

NEW QUESTION 56
Refer to the exhibit.

Which two objects are created as a result of the configuration? (Choose two.)

• A. VRF
• B. attachable AEP
• C. bridge domain
• D. endpoint group
• E. application profile

Answer: A,C

 

NEW QUESTION 57
Which two components are essential parts of a Cisco ACI Virtual Machine Manager (VMM) domain policy configuration? (Choose two.)

• A. VMM domain profile
• B. EPG association
• C. IP address pool association
• D. Layer 3 outside interface association
• E. EPG static port binding

Answer: A,B

Explanation:
Reference:
https://www.cisco.com/c/en/us/td/docs/switches/datacenter/aci/apic/sw/1-x/aci-fundamentals/b_ACI-Fundamentals/b_ACI-Fundamentals_chapter_01011.html#concept_74EFC437C0AA44A391676F70ACE59DF3

 

NEW QUESTION 58
Refer to the exhibit.

Which Adjacency Type value should be set when the client endpoint and the service node interface are in a different subnet?

• A. L3
• B. Unicast
• C. Routed
• D. L3Out

Answer: C

 

NEW QUESTION 59
Which endpoint learning operation is completed on the egress leaf switch when traffic is received from an L3Out?

• A. No source MAC or IP address of the traffic is learned as a remote endpoint.
• B. The source MAC address of the traffic is learned as a remote endpoint.
• C. The source IP address of the traffic is learned as a remote endpoint.
• D. The source MAC and IP address of the traffic is learned as a local endpoint.

Answer: B

Explanation:
Section: ACI Packet Forwarding
Explanation/Reference: https://www.cisco.com/c/en/us/solutions/collateral/data-center-virtualization/application-centric- infrastructure/white-paper-c11-739989.html

 

NEW QUESTION 60
A Solutions Architect is asked to design two data centers based on Cisco ACI technology that can extend L2/ L3, VXLAN, and network policy across locations. ACI Multi-Pod has been selected. Which two requirements must be considered in this design? (Choose two.)

• A. ACI Multi-Pod does not support Firewall Clusters across Pods. Firewall Clusters should always be local.
• B. Multi-Pod requires multiple APIC Controller Clusters, one per pod. Make sure those clusters can communicate to each other through a highly available connection.
• C. ACI Multi-Pod requires an IP Network supporting PIM-Bidir.
• D. ACI underlay protocols, i.e. COOP, IS-IS and MP-BGP, spans across pods. Create QoS policies to make sure those protocols have higher priority.
• E. A single APIC Cluster is required in a Multi-Pod design. It is important to place the APIC Controllers in different locations in order to maximize redundancy and reliability.

Answer: B,D

Explanation:
Section: ACI Anywhere

 

NEW QUESTION 61
Which two types of interfaces are supported on border leaf switches to connect to an external router? (Choose two.)

• A. Switch Virtual Interface
• B. subinterface with VXLAN tagging
• C. subinterface with 802.1Q tagging
• D. FEX host interface
• E. out of band interface

Answer: A,C

Explanation:
Section: ACI Fabric Infrastructure

 

NEW QUESTION 62
What must be configured to allow SNMP traffic on the APIC controller?

• A. out-of-band bridge domain
• B. SNMP relay policy
• C. contract under tenant mgmt
• D. out-of-band management interface

Answer: C

 

NEW QUESTION 63
Refer to the exhibit.

A Cisco ACI fabric is newly deployed, and the security team requires more visibility of all inter-EPG traffic flows. All traffic in a VRF must be forwarded to an existing firewall pair. During fallover, the standby firewall must continue to use the same IP and MAC as the primary firewall. Drag and drop the steps from the left Into the Implementation order on the right to configure the service graph that meets the requirements. (Not all steps are used.)

Answer:

Explanation:

 

NEW QUESTION 64
Which protocol does ACI use to securely sane the configuration in a remote location?

• A. FTP
• B. SCP
• C. TFTP
• D. HTTPS

Answer: B

Explanation:
Reference:
https://www.cisco.com/c/en/us/td/docs/switches/datacenter/aci/apic/sw/kb/ b_KB_Using_Import_Export_to_Recover_Config_States.html

 

NEW QUESTION 65
An engineer must set up a Cisco ACI fabric to send Syslog messages related to hardware events, such as chassis line card failures. The messages should be sent to a dedicated Syslog server. Where in the Cisco APIC should the policy be configured to meet this requirement?

• A. uni/fabric/monfab-default
• B. uni/infra/monifra-default
• C. uni/tn-common/monepg-default
• D. uni/fabric/moncommon

Answer: A

 

NEW QUESTION 66
Refer to the exhibit.

Which action should be taken to ensure authentication if the RADIUS servers are unavailable?

• A. Assign the user to the default role.
• B. Set the default login realm to LDAP
• C. Adjust the priority of server 10.1.1.1 to 1.
• D. Set the fallback login to local.

Answer: D

Explanation:
Changing the server priority is not logical answer.
The command "aaa user default-role no-login" means that remote users who do not have a user role cannot login. This means that assigning the user to default role will not be able to login.
The "aaa authentication login default" and "aaa authentication login fallback" has identical configuration. The fallback uses RADIUS server. We should change is to local.

 

NEW QUESTION 67
Which components must be configured for the BGP Route Reflector policy to take effect?

• A. spine fabric interface overrides and profiles
• B. pod policy groups and profiles
• C. leaf fabric interface overrides and profiles
• D. access policies and profiles

Answer: A

Explanation:
Reference:
https://www.cisco.com/c/en/us/td/docs/switches/datacenter/aci/apic/sw/4-x/L3-configuration/Cisco- APIC-Layer-3-Networking-Configuration-Guide-401/Cisco-APIC-Layer-3-Networking-Configuration-Guide- 401_chapter_01.html

 

NEW QUESTION 68
Which tenant is used when configuring in-band management IP addresses for Cisco APICs, leaf nodes, and spine nodes?

• A. default
• B. common
• C. infra
• D. mgmt

Answer: D

Explanation:
Reference:
https://www.cisco.com/c/en/us/td/docs/switches/datacenter/aci/apic/sw/kb/ b_KB_Configuring_Static_Management_Access.html#concept_CFF63FEBE947424291B0F10E6F23DA7D

 

NEW QUESTION 69
An engineer is implementing a Cisco ACI data center network that includes Cisco Nexus 2000 Series 10G fabric extenders. Which physical topology is supported?
A)

B)

C)

D)

• A. Option D
• B. Option B
• C. Option A
• D. Option C

Answer: A

 

NEW QUESTION 70
Drag and drop the Cisco ACI filter entry options from the left onto the correct categories on the right indicating what are required or optional parameters.

Answer:

Explanation:

Reference:
https://www.cisco.com/c/en/us/td/docs/switches/datacenter/aci/apic/sw/1-x/Operating_ACI/guide/ b_Cisco_Operating_ACI/b_Cisco_Operating_ACI_chapter_01000.html

 

NEW QUESTION 71
Drag and drop the Cisco ACI Layer 4 to Layer 7 service insertion terms on the left to the correct descriptions on the right.

Answer:

Explanation:

 

NEW QUESTION 72
What must be configured to redistribute externally learned OSPF routes within the ACI fabric?

• A. BGP Route Reflector
• B. PIM Sparse Mode
• C. BGP Inter-leak Route Map
• D. Route Control Profile

Answer: D

 

NEW QUESTION 73
......

Get New 300-620 Certification Practice Test Questions Exam Dumps: https://www.realexamfree.com/300-620-real-exam-dumps.html

Pass 300-620 Exam - Real Test Engine PDF with 113 Questions: https://drive.google.com/open?id=1tzYYI8xsh-cIaUYuLHx6RTwFmKR8Ez-S