2023 PassLeader Cisco 300-620 Dumps and Exam Test Engine
Cisco 300-620 DUMPS WITH REAL EXAM QUESTIONS
NEW QUESTION # 90
An engineer must create a backup of the Cisco ACI fabric for disaster recovery purposes. The backup must be transferred over a secure and encrypted transport. The backup file must contain all user and password related information. The engineer also wants to process and confirm the backup file validity by using a Python script. This requires the data structure to have a format similar to a Python dictionary. Which configuration set must be used to meet these requirements?
- A. Under the Create Remote location settings, select Protocol: SCP
Under the Export policy, select
- Format: JSON
- Modify Global AES Encryption Settings: Enabled - B. Under the Create Remote location settings, select Protocol: FTP
Under the Export policy, select
- Format: XML
- Modify Global AES Encryption Settings: Enabled - C. Under the Create Remote location settings, select Protocol: FTP
Under the Export policy, select
- Format: XML
- Modify Global AES Encryption Settings: Disabled - D. Under the Create Remote location settings, select Protocol: SCP
Under the Export policy, select
- Format: JSON
- Modify Global AES Encryption Settings: Disabled
Answer: A
NEW QUESTION # 91
What must be configured to allow SNMP traffic on the APIC controller?
- A. out-of-band management interface
- B. SNMP relay policy
- C. out-of-band bridge domain
- D. contract under tenant mgmt
Answer: D
NEW QUESTION # 92
An engineer must configure VMM domain integration on a Cisco UCS B-Series server that is connected to a Cisco ACI fabric. Drag and drop the products used to create VMM domain from the bottom into the sequence in which they should be implemented at the top. Products are used more than once.
Answer:
Explanation:
NEW QUESTION # 93
Which two IP address types are available for transport over the ISN when they are configured from Cisco ACI Multi-Site Orchestrator? (Choose two.)
- A. Management IP of APICs
- B. Common Pervasive Gateway
- C. MP-BGP EVPN Router-ID
- D. Anycast Overlay Multicast TEP
- E. Management IP of the MSO Node
Answer: C,E
NEW QUESTION # 94
Which setting prevents the learning of Endpoint IP addresses whose subnet does not match the bridge domain subnet?
- A. "Limit IP learning to subnet" setting within the bridge domain.
- B. "Limit IP learning to subnet" setting within the EPG.
- C. "Limit IP learning to network" setting within the bridge domain.
- D. "Limit IP learning to network" setting within the EPG.
Answer: A
Explanation:
Reference:
https://www.cisco.com/c/en/us/td/docs/switches/datacenter/aci/apic/sw/2-x/L2_config/ b_Cisco_APIC_Layer_2_Configuration_Guide/ b_Cisco_APIC_Layer_2_Configuration_Guide_chapter_010.html
NEW QUESTION # 95
An engineer must limit management access to me Cisco ACI fabric that originates from a single subnet where the NOC operates. Access should be limited to SSH and HTTPS only. Where should the policy be configured on the Cisco APIC to meet the requirements?
- A. policy In the management tenant
- B. policy on the management VLAN
- C. ACL on the console interface
- D. ACL on the management interface of the APIC
Answer: A
Explanation:
Explanation
https://www.cisco.com/c/en/us/td/docs/switches/datacenter/aci/apic/sw/1-x/Operating_ACI/guide/b_Cisco_Oper
NEW QUESTION # 96
An engineer is implementing Cisco ACI at a large platform-as-a-service provider using APIC controllers, 9396PX leaf switches, and 9336PQ spine switches. The leaf switch ports are configured as IEEE 802.1p ports. Where does the traffic exit from the EPG in IEEE 802.1p mode in this configuration?
- A. from leaf ports tagged as VLAN 4094
- B. from leaf ports tagged as VLAN 0
- C. from leaf ports tagged as VLAN 1
- D. from leaf ports untagged
Answer: B
NEW QUESTION # 97
What is the minimum number of APICs does Cisco recommend to deploy in a production cluster?
- A. 0
- B. 1
- C. 2
- D. 3
Answer: D
NEW QUESTION # 98
Which description regarding the initial APIC cluster discovery process is true?
- A. The APIC discovers the IP address of the other APIC controllers by using Cisco Discovery Protocol.
- B. The APIC uses an internal IP address from a pool to communicate with the nodes.
- C. The ACI fabric is discovered starting with the spine switches.
- D. Every switch is assigned a unique AV by the APIC.
Answer: A
Explanation:
Section: ACI Fabric Infrastructure
Explanation/Reference: https://www.cisco.com/c/en/us/td/docs/switches/datacenter/aci/apic/sw/1-x/aci-fundamentals/ b_ACI-Fundamentals/b_ACI-Fundamentals_chapter_010011.html
NEW QUESTION # 99
What two actions should be taken to deploy a new Cisco ACI Multi-Pod setup? (Choose two.)
- A. Configure MP-BGP on IPN routers that face the Cisco ACI spines.
- B. Connect all spines to the IPN.
- C. Configure anycast RP for the underlying multicast protocol
- D. Increase interface MTU for all IPN routers to support VXLAN traffic.
- E. Configure the TEP pool of the new pod to be routable across the IPN.
Answer: B,D
NEW QUESTION # 100
An organization has encountered many STP-related issues in the past due to failed hardware components. They are in the process of long-term migration to a newly deployed ACI fabric. Senior engineers are worried that spanning-tree loops in the existing network may be extended to the ACI fabric. Which feature must be enabled on the ACI leaf ports to protect the fabric from spanning-tree loops?
- A. per-VLANMCP
- B. Storm Control
- C. BPDU Filter
- D. BPDU Guard
Answer: D
NEW QUESTION # 101
An engineer must perform a Cisco ACI fabric upgrade that minimizes the impact on user traffic and allows only permitted users to perform an upgrade. Which two configuration steps should be taken to meet these requirements?
- A. Divide switches into two or more maintenance groups.
- B. Divide Cisco APIC controllers into two or more maintenance groups.
- C. Grant the fabric administrator role to a user who performs an upgrade.
- D. Grant tenant-ext-admin access to a user who performs an upgrade
- E. Combine all switches into an upgrade group.
Answer: A,C
NEW QUESTION # 102
What must be configured to allow SNMP traffic on the APIC controller?
- A. out-of-band management interface
- B. SNMP relay policy
- C. out-of-band bridge domain
- D. contract under tenant mgmt
Answer: D
Explanation:
Section: ACI Management
NEW QUESTION # 103
An engineer must connect Cisco ACI fabric using Layer 2 with external third-party switches. The third-party switches are configured using 802.1s protocol. Which two constructs are required to complete the task?
(Choose two.)
- A. spanning tree policy for mapping MST Instances to VLANs
- B. static binding of native VLAN in all existing EPGs
- C. dedicated EPG for native VLAN
- D. MCP policy with PDU per VLAN enabled
- E. MCP instance policy with administrative slate disabled
Answer: D,E
NEW QUESTION # 104
Refer to the exhibit.
Which Adjacency Type value should be set when the client endpoint and the service node interface are in a different subnet?
- A. L3
- B. Routed
- C. Unicast
- D. L3Out
Answer: A
NEW QUESTION # 105
An engineer must allow multiple external networks to communicate with internal ACI subnets. Which action should the engineer take to assign the prefix to the class ID of the external Endpoint Group?
- A. Configure subnets with the Import Route Control Subnet flag enabled.
- B. Enable the Export Route Control Subnet for the External Endpoint Group flag.
- C. Configure subnets with the External Subnets for External EPG flag enabled.
- D. Enable an L30ut with Shared Route Control Subnet.
Answer: C
NEW QUESTION # 106
An engineer is extending EPG connectivity to an external network. The external network houses the Layer 3 gateway and other end hosts. Which ACI bridge domain configuration should be used?
- A. Forwarding: Custom
L2 Unknown Unicast: Hardware Proxy
L3 Unknown Multicast Flooding: Flood
Multi Destination Flooding: Flood in BD
ARP Flooding: Enabled - B. Forwarding: Custom
L2 Unknown Unicast: Hardware Proxy
L3 Unknown Multicast Flooding: Flood
Multi Destination Flooding: Flood in BD
ARP Flooding: Disabled - C. Forwarding: Custom
L2 Unknown Unicast: Flood
L3 Unknown Multicast Flooding: Flood
Multi Destination Flooding: Flood in BD
ARP Flooding: Disabled - D. Forwarding: Custom
L2 Unknown Unicast: Flood
L3 Unknown Multicast Flooding: Flood
Multi Destination Flooding: Flood in BD
ARP Flooding: Enabled
Answer: C
Explanation:
Section: ACI Packet Forwarding
NEW QUESTION # 107
An engineer is implementing Cisco ACI at a large platform-as-a-service provider using APIC controllers,
9396PX leaf switches, and 9336PQ spine switches. The leaf switch ports are configured as IEEE 802.1p ports.
Where does the traffic exit from the EPG in IEEE 802.1p mode in this configuration?
- A. from leaf ports tagged as VLAN 4094
- B. from leaf ports untagged
- C. from leaf ports tagged as VLAN 0
- D. from leaf ports tagged as VLAN 1
Answer: B
NEW QUESTION # 108
Refer to the exhibit.
Which action should be taken to ensure authentication if the RADIUS servers are unavailable?
- A. Adjust the priority of server 10.1.1.1 to 1.
- B. Set the fallback login to local.
- C. Assign the user to the default role.
- D. Set the default login realm to LDAP
Answer: B
Explanation:
Changing the server priority is not logical answer.
The command "aaa user default-role no-login" means that remote users who do not have a user role cannot login. This means that assigning the user to default role will not be able to login.
The "aaa authentication login default" and "aaa authentication login fallback" has identical configuration. The fallback uses RADIUS server. We should change is to local.
NEW QUESTION # 109
An engineer is implementing a Cisco ACI environment that consists of more than 20 servers. Two of the servers support only Cisco Discovery Protocol with no order link discovery protocol. The engineer wants the servers to be discovered automatically by the Cisco ACI fabric when connected. Which action must be taken to meet this requirement?
- A. Create an override policy that enables Cisco Discovery Protocol after LLDP is enabled in the default policy group.
- B. Create an interface profile for the interface that disables LLDP on the desired switch that is referenced by the interface policy group.
- C. Configure a lower order policy group that enables Cisco Discovery Protocol for the interface on the desired leaf switch.
- D. Configure a higher order interface policy that enables Cisco Discovery Protocol for the interface on the desired leaf switch.
Answer: D
NEW QUESTION # 110
Refer to the exhibit. VM1 and VM2 are in Cisco ACI POD1 and communication takes place. Which event is triggered when VM2 is live migrated from POD1 to POD2?
- A. Spines from POD2 send an MP-BGP EVPN update to the leaves in POD1 about the new location of VM2.
- B. An MP-BGP EVPN update is received by spines in POD1 announcing the reachability of VM2 via the proxy VTEP address of the spines in POD2.
- C. Leaf 201 creates a tunnel with leaf 102 because of the bounced traffic that is destined to VM2.
- D. Leaf 102 installs a bounce entry for VM2 pointing to the PTEP address of leaf 201.
Answer: C
NEW QUESTION # 111
Refer to the exhibit.
A Cisco ACI fabric is newly deployed, and the security team requires more visibility of all inter-EPG traffic flows. All traffic in a VRF must be forwarded to an existing firewall pair. During fallover, the standby firewall must continue to use the same IP and MAC as the primary firewall. Drag and drop the steps from the left Into the Implementation order on the right to configure the service graph that meets the requirements. (Not all steps are used.)
Answer:
Explanation:
NEW QUESTION # 112
......
Acceptable Candidate Profile
Sitting for the Cisco 300-620 exam is a great career intensification step for all those who want to become a part of Cisco Data Center and gain respective expertise and recognition. In-service professionals like Cisco integrators/partners, field engineers, server administrators, network managers, and storage administrators are some of the roles that will benefit the most. These individuals can validate their competence with the help of 300-620 test.
Cisco 300-620 certification exam is an excellent opportunity for IT professionals to acquire the skills and knowledge needed to implement Cisco ACI solutions successfully. Implementing Cisco Application Centric Infrastructure certification process is rigorous and requires a deep understanding of Cisco ACI architecture, policies, and protocols. With the right preparation and dedication, candidates can pass the exam and advance their careers in the field of data center infrastructure and networking.
2023 New PassLeader 300-620 PDF Recently Updated Questions: https://www.passleader.top/Cisco/300-620-exam-braindumps.html
300-620 Exam with Guarantee Updated 194 Questions: https://drive.google.com/open?id=1UBalRXTBVT0VFnBxSY5yfA1K6JBCwSFI