300-620試験無料問題集（249題）「Cisco Implementing Cisco Application Centric Infrastructure 認定」

出題：1

The company's Cisco ACI fabric hosts multiple customer tenants. To meet a service level agreement, the company is constantly monitoring the Cisco ACI environment. Syslog is one of the methods used for monitoring. Only events related to leaf and spine environmental information without specific customer data should be logged. To which ACI object must the configuration be applied to meet these requirements?

A. infra tenant

B. fabric policy

C. switch profile

D. access policy

正解：B 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：2

What must be configured to redistribute externally learned OSPF routes within the ACI fabric?

A. BGP Route Reflector

B. BGP Inter-leak Route Map

C. PIM Sparse Mode

D. Route Control Profile

正解：D 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：3

When Cisco ACI connects to an outside Layers 2 network, where does the ACI fabric flood the STP BPDU frame?

A. between all the spine and leaf switches

B. within the access encap VLAN

C. within the APIC

D. within the bridge domain

正解：D 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：4

An engineer must perform a Cisco ACI fabric upgrade that minimizes the impact on user traffic and allows only permitted users to perform an upgrade. Which two configuration steps should be taken to meet these requirements?

A. Divide switches into two or more maintenance groups.

B. Grant the fabric administrator role to a user who performs an upgrade.

C. Combine all switches into an upgrade group.

D. Divide Cisco APIC controllers into two or more maintenance groups.

E. Grant tenant-ext-admin access to a user who performs an upgrade

正解：A,D 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：5

A customer implements RBAC on a Cisco APIC using a Windows RADIUS server that is configured with network control policies. The APIC is as follows:
Tenant = TenantX
Security Domain = Tenantx-SD
User = X
The customer requires User X to have access to TenantX only, without any extra privilege in the Cisco ACI fabric domain. Which Cisco AV pair must be implemented on the RADIUS server to meet these requirement?

A. shell:domains = TenantX-SD/tenant-admin/,common//read-all

B. shell:domains = TenantX-SD/tenant-admin

C. shell:domains = TenantX-SD/fabric-admin/,common//read-all

D. shell:domains = TenantX-SD/tenant-ext-admin/,common//read-all

正解：B 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：6

When does the Cisco ACI leaf learn a source IP or MAC as a remote endpoint?

A. When VXLAN traffic arrives on a leaf fabric port from the spine and outer source IP is in the bridge domain subnets range.

B. When VXLAN traffic arrives on a leaf fabric port from the spine and inner source IP is in the Layer 3 Out EPG subnet range.

C. When VXLAN traffic arrives on a leaf fabric port from the spine and outer source IP is in the Layer 3 Out EPG subnet range.

D. When VXLAN traffic arrives on a leaf fabric port from the spine and inner source IP is in the bridge domain subnets range.

正解：D 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：7

Which components must be configured for the BGP Route Reflector policy to take effect?

A. access policies and profiles

B. leaf fabric interface overrides and profiles

C. pod policy groups and profiles

D. spine fabric interface overrides and profiles

正解：B 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：8

Cisco ACI fabric must detect all silent endpoints for the Layer 3 bridge domain. Which actions accomplish this goal?

A. Disable Unicast Routing.
Enable L2 Unknown Unicast Flood.

B. Enable Unicast Routing. Enable ARP Flooding.

C. Disable Unicast Routing.
Enable L2 Unknown Unicast Hardware Proxy.

D. Enable Unicast Routing. Disable ARP Flooding.

正解：D 解答を投票する

出題：9

Refer to the exhibit.

Refer to the exhibit. An engineer configured subnets on the external EPG called L3OUT_CORE. The external endpoints in the 10.1.0.0/24 subnet can reach internal endpoints, but the external endpoints in the 172.16.1.0/24 subnet are unreachable. Which set of actions enables the connectivity?

A. Delete the external EPG subnet 0.0.0.128/1.
Create the 128.0.0.0/1 subnet.

B. Delete both external EPG subnets.
Create the 0.0.0.0/1 subnet.

C. Delete the external EPG subnet 0.0.0.0/0.
Create the 0.0.0.0/128 subnet.

D. Delete both external EPG subnets.
Create the 0.0.0.0/0 subnet.

正解：D 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：10

Refer to the exhibit.

Which action should be taken to ensure authentication if the RADIUS servers are unavailable?

A. Assign the user to the default role.

B. Set the fallback login to local.

C. Adjust the priority of server 10.1.1.1 to 1.

D. Set the default login realm to LDAP

正解：B 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：11

What must be configured to allow SNMP traffic on the APIC controller?

A. contract under tenant mgmt

B. out-of-band bridge domain

C. out-of-band management interface

D. SNMP relay policy

正解：A 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：12

On which two interface types should a user configure storm control to protect against broadcast traffic? (Choose two.)

A. all interfaces on the leaf switches in the fabric

B. fabric uplink interfaces on the leaf switches

C. endpoint-facing trunk interface

D. APIC facing interfaces

E. port channel on a single leaf switch

正解：C,E 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：13

A network engineer must integrate VMware vCenter cluster with Cisco ACI. The requirement is for the management traffic of the hypervisors and VM controllers to use the virtual switch associated with the Cisco Application Policy. The EPG called "Vmware-MGMT" with VLAN 300 has been created for this purpose. Which set of steps must be taken to complete the configuration?

A. Add VLAN 300 with static allocation to the VLAN POOL that is used for VMM integration.
Attach the VMM domain to the target EPG with resolution preprovision, mode static, untagged access VLAN, and Port-Encap 300.

B. Associate the target EPG with the VMM domain with default settings.
Enable Infrastructure VLAN on AAEP used toward VMware hypervisors.

C. Enable Infrastructure VLAN on AAEP used toward VMware hypervisors.
Create a static binding in the target EPG toward VMware hypervisors with VLAN 300, untagged access VLAN, and Untagged 802.1P mode.

D. Enable Infrastructure VLAN on AAEP used toward VMware hypervisors.
Associate the target EPG with the VMM domain with default settings.

正解：C 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：14

A network engineer must design a method to allow the Cisco ACI to redirect traffic to the firewalls. Only traffic that matches specific L4-L7 policy rules should be redirected. The load must be distributed across multiple firewalls to scale the performance horizontally. Which action must be taken to meet these requirements?

A. Configure ACI Service Graph with Symmetric PBR.

B. Implement ACI Service Graph with GIPo.

C. Configure ACI Service Graph with Unidirectional PBR.

D. Implement ACI Service Graph Two Nodes with GIPo.

正解：C 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：15

An engineer needs to deploy a leaf access port policy group in ACI Fabric to support the following requirements:
* Control the amount of application data flowing into the system
* Allow the newly connected device to auto-negotiate link speed with the leaf switch Which two ACI policies must be configured to achieve these requirements? (Choose two.)

A. ingress control plane policing policy

B. ingress data plane policing policy

C. L2 interface policy

D. slow drain policy

E. link level policy

正解：B,E 解答を投票する

解説: (GoShiken メンバーにのみ表示されます)

出題：16

Drag and drop the Cisco ACI Layer 4 to Layer 7 service insertion terms on the left to the correct descriptions on the right.

正解：

300-620試験無料問題集「Cisco Implementing Cisco Application Centric Infrastructure 認定」