Cisco® 300-620 Exam Practice Questions (P. 4)
- Full Access (324 questions)
- Six months of Premium Access
- Access to one million comments
- Seamless ChatGPT Integration
- Ability to download PDF files
- Anki Flashcard files for revision
- No Captcha & No AdSense
- Advanced Exam Configuration
Question #31
What must be enabled in the bridge domain to have the endpoint table learn the IP addresses of endpoints?
- AL2 unknown unicast: flood
- BGARP based detection
- Cunicast routing
- Dsubnet scope
Correct Answer:
C
Reference:
https://hsvglobalschool.in/dhkycw/cisco-aci-bridge-domain.html
C
Reference:
https://hsvglobalschool.in/dhkycw/cisco-aci-bridge-domain.html
send
light_mode
delete
Question #32
An engineer is extending EPG connectivity to an external network. The external network houses the Layer 3 gateway and other end hosts. Which ACI bridge domain configuration should be used?
- AForwarding: Custom L2 Unknown Unicast: Hardware Proxy L3 Unknown Multicast Flooding: Flood Multi Destination Flooding: Flood in BD ARP Flooding: Enabled
- BForwarding: Custom L2 Unknown Unicast: Flood L3 Unknown Multicast Flooding: Flood Multi Destination Flooding: Flood in BD ARP Flooding: EnabledMost Voted
- CForwarding: Custom L2 Unknown Unicast: Hardware Proxy L3 Unknown Multicast Flooding: Flood Multi Destination Flooding: Flood in BD ARP Flooding: Disabled
- DForwarding: Custom L2 Unknown Unicast: Flood L3 Unknown Multicast Flooding: Flood Multi Destination Flooding: Flood in BD ARP Flooding: Disabled
Correct Answer:
D
D

For extending EPG connectivity to an external network where the Layer 3 gateway resides, configuration D is accurate. It is crucial to implement a setup where both ARP Flooding and ARP Gleaning are disabled to enable efficient ARP resolution management across the bridge domain, reducing unnecessary traffic flooding within the ACI infrastructure. Using ARP Flooding could potentially lead to suboptimal traffic flows and overhead, which isn't ideal in scenarios involving external networks and Layer 3 gateways. Thus, option D's ability to manage ARP resolution efficiently makes it preferable for such implementations.
send
light_mode
delete
Question #33
An engineer configured a bridge domain with the hardware-proxy option for Layer 2 unknown unicast traffic. Which statement is true about this configuration?
- AThe leaf switch drops the Layer 2 unknown unicast packet if it is unable to find the MAC address in the local forwarding tables.
- BThe Layer 2 unknown hardware proxy lacks support of the topology change notification.
- CThe leaf switch forwards the Layers 2 unknown unicast packets to all other leaf switches if it is unable to find the MAC address in its local forwarding tables.
- DThe spine switch drops the Layer 2 unknown unicast packet if it is unable to find the MAC address in the proxy database.Most Voted
Correct Answer:
A
A

When configuring a bridge domain with the hardware-proxy option for handling Layer 2 unknown unicast traffic in a Cisco ACI environment, the leaf switch plays a crucial role in the decision-making process for unicast packet forwarding. Specifically, if a leaf switch is unable to locate a MAC address within its local forwarding table, it doesn't indiscriminately forward the traffic to different switches. Instead, it actively drops the packet. This setup enhances the network's efficiency by reducing unnecessary traffic and potential flooding across the network. It’s critical to ensure that such configurations align well with your network design for optimal performance and security.
send
light_mode
delete
Question #34
An engineer configured Layer 2 extension from the ACI fabric and changed the Layer 2 unknown unicast policy from Flood to Hardware Proxy. How does this change affect the flooding of the L2 unknown unicast traffic?
- AIt is forwarded to one of the spines to perform as a spine proxy.
- BIt is flooded within the whole fabric.
- CIt is dropped by the leaf when the destination endpoint is not present in the endpoint table.
- DIt is forwarded to one of the APICs to perform as a proxy.
Correct Answer:
A
Reference:
https://www.cisco.com/c/en/us/td/docs/switches/datacenter/aci/apic/sw/2-x/L2_config/b_Cisco_APIC_Layer_2_Configuration_Guide/ b_Cisco_APIC_Layer_2_Configuration_Guide_chapter_010.html
A
Reference:
https://www.cisco.com/c/en/us/td/docs/switches/datacenter/aci/apic/sw/2-x/L2_config/b_Cisco_APIC_Layer_2_Configuration_Guide/ b_Cisco_APIC_Layer_2_Configuration_Guide_chapter_010.html
send
light_mode
delete
Question #35

When the subnet is configured on a bridge domain, on which physical devices is the gateway IP address configured?
- Aall leaf switches and all spine nodes
- Bonly spine switches where the bridge domain of the tenant is present
- Conly leaf switches where the bridge domain of the tenant is present
- Dall border leaf nodes where the bridge domain of the tenant is present
Correct Answer:
C
Reference:
http://www.netdesignarena.com/index.php/2016/06/16/aci-tenant-building-blocks-forwarding-logic/
C
Reference:
http://www.netdesignarena.com/index.php/2016/06/16/aci-tenant-building-blocks-forwarding-logic/
send
light_mode
delete
Question #36
Which method does the Cisco ACI fabric use to load-balance multidestination traffic?
- Aforwarding tag treesMost Voted
- BPIM routing
- Cspanning trees
- Dshortest-path trees
Correct Answer:
A
Reference:
https://www.cisco.com/c/en/us/td/docs/switches/datacenter/aci/apic/sw/1-x/aci-fundamentals/b_ACI-Fundamentals/b_ACI-Fundamentals_chapter_010010.html
A
Reference:
https://www.cisco.com/c/en/us/td/docs/switches/datacenter/aci/apic/sw/1-x/aci-fundamentals/b_ACI-Fundamentals/b_ACI-Fundamentals_chapter_010010.html
send
light_mode
delete
Question #37
What happens to the traffic flow when the Cisco ACI fabric has a stale endpoint entry for the destination endpoint?
- AThe leaf switch does not learn the source endpoint through data plane learning.
- BThe leaf switch drops the traffic that is destined to the endpoint.
- CThe leaf switch floods the traffic to the endpoint throughout the fabric.
- DThe leaf switch sends the traffic to the wrong destination leaf.Most Voted
Correct Answer:
B
Reference:
https://www.ciscolive.com/c/dam/r/ciscolive/us/docs/2019/pdf/BRKACI-2641.pdf
B
Reference:
https://www.ciscolive.com/c/dam/r/ciscolive/us/docs/2019/pdf/BRKACI-2641.pdf
send
light_mode
delete
Question #38
Which action sets Layer 2 loop migration in an ACI Fabric with a Layer 2 Out configured?
- AEnable MCP on the ACI fabric.
- BDisable STP in the external network.
- CDisable STP on the ACI fabric.
- DEnable STP on the ACI fabric.
Correct Answer:
A
A

Enabling MCP (Misconfiguration Prevention Protocol) on the ACI fabric is essential to effectively prevent Layer 2 loops when a Layer 2 Out is configured. MCP operates by mitigating the risks associated with BPDU (Bridge Protocol Data Unit) propagation, which if unchecked, can lead to loops. It’s a proactive measure to manage events effectively, keeping the network's integrity and performance intact.
send
light_mode
delete
Question #39
An engineer is implementing a connection that represents an external bridged network. Which two configurations are used? (Choose two.)
- ALayer 2 remote fabric
- BLayer 2 outsideMost Voted
- CLayers 2 internal
- DStatic path bindingMost Voted
- EVXLAN outside
Correct Answer:
AB
AB

Absolutely, for setting up a connection that denotes an external bridged network within ACI, the deployment of a Layer 2 outside connection is vital. This config essentially broadcasts the bridge domain beyond the confines of the ACI fabric, integrating external layer 2 networks seamlessly. It's key in scenarios requiring bridge domain extensions to third-party systems or distant sites, maintaining consistent policy enforcement across varied network segments. Meanwhile, the option of employing Layer 2 remote fabric is slightly less mentioned in contexts of extending bridge domains directly. Always good to check the specifics in the latest Cisco documentation though, as network requirements can sway the optimal setup approach.
send
light_mode
delete
Question #40
Which two actions extend a Layer 2 domain beyond the ACI fabric? (Choose two.)
- Aextending the routed domain out of the ACI fabric
- Bcreating a single homed Layer 3 Out
- Ccreating an external physical network
- Dextending the bridge domain out of the ACI fabricMost Voted
- Eextending the EPG out of the ACI fabricMost Voted
Correct Answer:
AE
AE

Extending a Layer 2 domain beyond the ACI fabric primarily involves strategies that allow for the continuation of the same Layer 2 network across different physical locations. Extending the bridge domain (Option D) and extending the Endpoint Groups (EPGs - Option E) are precise examples where the geographical limitations of a single data center are surpassed, enabling resource accessibility and shared services across multiple sites or systems within the same L2 network. These options actively promote seamless connectivity and resource sharing by stretching the Layer 2 network beyond the confines of a single ACI setup.
send
light_mode
delete
All Pages