[Oct-2021] Valid Way To Pass Cisco Exam Dumps with 300-620 Exam Study Guide
All 300-620 Dumps and Implementing Cisco Application Centric Infrastructure Training Courses Help candidates to study and pass the Exams hassle-free!
NEW QUESTION 54
Refer to the exhibit.
A Cisco ACI fabric is newly deployed, and the security team requires more visibility of all inter-EPG traffic flows. All traffic in a VRF must be forwarded to an existing firewall pair. During fallover, the standby firewall must continue to use the same IP and MAC as the primary firewall. Drag and drop the steps from the left Into the Implementation order on the right to configure the service graph that meets the requirements. (Not all steps are used.)
Answer:
Explanation:
Reference:
https://www.cisco.com/c/en/us/td/docs/switches/datacenter/aci/apic/sw/1-x/L4-L7_Services_Deployment/guide/b_L4L7_Deploy_ver201/b_L4L7_Deploy_ver201_chapter_010100.html#id_71564 Create a service bridge domain and a layer 4 to layer 7 device within one cluster interface.
NEW QUESTION 55
Drag and drop the Cisco ACI Layer 4 to Layer 7 service insertion terms on the left to the correct descriptions on the right.
Answer:
Explanation:
NEW QUESTION 56
Which type of profile needs to be created to deploy an access port policy group?
- A. leaf interface
- B. module
- C. Pod
- D. attachable entity
Answer: D
Explanation:
Reference:
https://www.cisco.com/c/en/us/td/docs/switches/datacenter/aci/apic/sw/1-x/Operating_ACI/guide/ b_Cisco_Operating_ACI/b_Cisco_Operating_ACI_chapter_0110.html
NEW QUESTION 57
An engineer is creating a configuration import policy that must terminate if the imported configuration is incompatible with the existing system. Which import mode achieves this result?
- A. best effort
- B. replace
- C. atomic
- D. merge
Answer: C
Explanation:
Reference:
https://www.cisco.com/c/en/us/td/docs/switches/datacenter/aci/apic/sw/4-x/aci-fundamentals/ Cisco-ACI-Fundamentals-401/Cisco-ACI-Fundamentals-401_chapter_01011.html
NEW QUESTION 58
An engineer must limit management access to me Cisco ACI fabric that originates from a single subnet where the NOC operates. Access should be limited to SSH and HTTPS only. Where should the policy be configured on the Cisco APIC to meet the requirements?
- A. ACL on the console interface
- B. ACL on the management interface of the APIC
- C. policy on the management VLAN
- D. policy In the management tenant
Answer: D
Explanation:
Reference:
https://www.cisco.com/c/en/us/td/docs/switches/datacenter/aci/apic/sw/1-x/Operating_ACI/guide/b_Cisco_Operating_ACI/b_Cisco_Operating_ACI_chapter_0111.html
NEW QUESTION 59
What do Pods use to allow Pod-to-Pod communication in a Cisco ACI Multi-Pod environment?
- A. over Layer 3 Out connectivity via border leafs
- B. over Layer 3 IPN connectivity via border leafs
- C. over Layer 3 directly connected back-to-back spines
- D. over Layer 3 IPN connectivity via spines
Answer: D
Explanation:
Section: ACI Anywhere
Explanation/Reference:
https://www.cisco.com/c/en/us/solutions/collateral/data-center-virtualization/application-centric-infrastructure/ white-paper-c11-737855.html
NEW QUESTION 60
An engineer is configuring a VRF for a tenant named Cisco. Drag and drop the child objects on the left onto the correct containers on the right for this configuration.
Answer:
Explanation:
NEW QUESTION 61
On which two interface types should a user configure storm control to protect against broadcast traffic?
(Choose two.)
- A. APIC facing interfaces
- B. port channel on a single leaf switch
- C. all interfaces on the leaf switches in the fabric
- D. endpoint-facing trunk interface
- E. fabric uplink interfaces on the leaf switches
Answer: B,D
Explanation:
Section: External Network Connectivity
Explanation/Reference: https://www.cisco.com/c/en/us/td/docs/switches/datacenter/aci/apic/sw/2-x/L2_config/ b_Cisco_APIC_Layer_2_Configuration_Guide/ b_Cisco_APIC_Layer_2_Configuration_Guide_chapter_01010.html
NEW QUESTION 62
An engineer wants to filter the System Faults page and view only the active faults that are present in the Cisco ACI fabric. Which two lifecycle stages must be selected for filtering? (Choose two.)
- A. Retaining
- B. Soaking
- C. Raised, Clearing
- D. Raised
- E. Soaking, Clearing
Answer: C,D
Explanation:
Section: ACI Management
Explanation/Reference:
https://www.cisco.com/c/en/us/td/docs/switches/datacenter/aci/apic/sw/all/faults/guide/b_APIC_Faults_Errors/ b_IFC_Faults_Errors_chapter_01.html
NEW QUESTION 63
When configuring Cisco ACI VMM domain integration with VMware vCenter, which object is created in vCenter?
- A. VMware vSphere Standard vSwitch
- B. datacenter
- C. cluster
- D. VMware vSphere Distributed Switch
Answer: D
NEW QUESTION 64
The company ESXi infrastructure is hosted on the Cisco UCS-B Blade Servers. The company decided to take advantage of ACI VMM integration to enable consistent enforcement of policies across virtual and physical workloads. The requirement is to prevent the packet loss between the distributed virtual switch and the ACI fabric. Which setting must be implemented on a vSwitch policy to accomplish this goal?
- A. LLDP
- B. LACP
- C. MAC Pinning
- D. Static Channel
Answer: C
NEW QUESTION 65
An engineer must configure RADIUS authentication with Cisco ACI for remote authentication with out-of-band management access. Drag and drop the RADIUS configuration steps from the left into the required implementation order on the right. Not all steps are used.
Answer:
Explanation:
NEW QUESTION 66
An engineer needs to deploy a leaf access port policy group in ACI Fabric to support the following requirements:
* Control the amount of application data flowing into the system
* Allow the newly connected device to auto-negotiate link speed with the leaf switch Which two ACI policies must be configured to achieve these requirements? (Choose two.)
- A. link level policy
- B. L2 interface policy
- C. ingress data plane policing policy
- D. slow drain policy
- E. ingress control plane policing policy
Answer: A,C
Explanation:
Section: ACI Fabric Infrastructure
Explanation/Reference:
https://www.cisco.com/c/en/us/td/docs/switches/datacenter/aci/apic/sw/kb/ b_Cisco_ACI_and_Forward_Error_Correction.html
https://www.cisco.com/c/en/us/td/docs/switches/datacenter/aci/apic/sw/4-x/security/Cisco-APIC-Security- Configuration-Guide-401/b_Cisco_APIC_Security_Guide_chapter_01110.html#:~:text=Use%20data%20plane
%20policing%20(DPP,dropping%20of%20packets%20occurs%20immediately.
NEW QUESTION 67
Which two statements regarding ACI Multi-Site are true? (Choose two.)
- A. The Inter-Site network routers should run OSPF to establish peering with the spines.
- B. Routers in the Inter-Site network must run OSPF, DHCP relay, and MP-BGP.
- C. ACI Multi-Site is a solution that supports a dedicated APIC cluster per site.
- D. ACI Multi-Site is a solution that allows one APIC cluster to manage multiple ACI sites.
- E. The Multi-Site orchestrator must be directly attached to one ACI leaf.
Answer: A,E
NEW QUESTION 68
Which statement about ACI syslog is true?
- A. Notifications for different scopes of syslog objects can be sent only to one destination.
- B. All syslog messages are sent to the destination through APIC.
- C. Switches send syslog messages directly to the destinations.
- D. Syslog messages are sent to the destination through the spine.
Answer: A
Explanation:
Reference:
https://www.ciscolive.com/c/dam/r/ciscolive/us/docs/2016/pdf/BRKACI-2303.pdf
NEW QUESTION 69
Which type of profile needs to be created to deploy an access port policy group?
- A. leaf interface
- B. module
- C. Pod
- D. attachable entity
Answer: D
Explanation:
Section: ACI Fabric Infrastructure
Explanation/Reference: https://www.cisco.com/c/en/us/td/docs/switches/datacenter/aci/apic/sw/1-x/Operating_ACI/guide/ b_Cisco_Operating_ACI/b_Cisco_Operating_ACI_chapter_0110.html
NEW QUESTION 70
Drag and drop the Cisco ACI Layer 4 to Layer 7 service insertion terms on the left to the correct descriptions on the right.
Answer:
Explanation:
NEW QUESTION 71
Which description regarding the initial APIC cluster discovery process is true?
- A. Every switch is assigned a unique AV by the APIC.
- B. The APIC discovers the IP address of the other APIC controllers by using Cisco Discovery Protocol.
- C. The ACI fabric is discovered starting with the spine switches.
- D. The APIC uses an internal IP address from a pool to communicate with the nodes.
Answer: D
Explanation:
Reference:
https://www.cisco.com/c/en/us/td/docs/switches/datacenter/aci/apic/sw/1-x/aci-fundamentals/ b_ACI-Fundamentals/b_ACI-Fundamentals_chapter_010011.html
NEW QUESTION 72
......
Real Exam Questions & Answers - Cisco 300-620 Dump is Ready: https://drive.google.com/open?id=1asLRffx6sqNAnBLif6T_TNyeOHUrLh86
Get Latest [Oct-2021] Conduct effective penetration tests using RealExamFree 300-620
