手に入れよう！は2026年最新の有効な実践問題であなたの300-620試験を合格させる（本日更新された391問)
CCNP Data Center 300-620試験実践テスト問題集解答豪華セットを使おう！
質問 # 55
Refer to the exhibit.
A Cisco ACI fabric is newly deployed, and the security team requires more visibility of all inter-EPG traffic flows. All traffic in a VRF must be forwarded to an existing firewall pair. During fallover, the standby firewall must continue to use the same IP and MAC as the primary firewall. Drag and drop the steps from the left Into the Implementation order on the right to configure the service graph that meets the requirements. (Not all steps are used.)
正解：
解説：
質問 # 56
A network engineer must configure a new SNMP configuration and syslog servers. The requirement is for all faults and events related to endpoint groups, bridge domains, and VRFs to be sent to it. Which action must be taken to meet the requirements?
- A. Implement fabric-wide monitoring policies on all nodes.
- B. Enable access monitoring policies on the required endpoint groups, bridge domains, and VRFs.
- C. Configure fabric monitoring policies and attach to the spine switch in the fabric.
- D. Utilize common tenant monitoring policies in the Cisco APIC.
正解：D
解説：
To meet the requirement of sending all faults and events related to endpoint groups, bridge domains, and VRFs to the new SNMP configuration and syslog servers, the network engineer should utilize common tenant monitoring policies in the Cisco APIC. The common tenant is used for global configurations that apply across the entire fabric, including monitoring policies.
質問 # 57
Which attribute should be configured for each user to enable RADIUS for external authentication in Cisco ACI?
- A. cisco-auth-features
- B. cisco-security domain
- C. cisco-av-pair
- D. cisco-aci-role
正解：C
解説：
Section: ACI Management
Explanation/Reference: https://www.cisco.com/c/en/us/td/docs/switches/datacenter/aci/apic/sw/2-x/Security_config/ b_Cisco_APIC_Security_Configuration_Guide/b_Cisco_APIC_Security_Guide_chapter_01011.html
質問 # 58
Which two statements regarding ACI Multi-Site are true? (Choose two.)
- A. ACI Multi-Site is a solution that supports a dedicated APIC cluster per site.
- B. The Inter-Site network routers should run OSPF to establish peering with the spines.
- C. Routers in the Inter-Site network must run OSPF, DHCP relay, and MP-BGP.
- D. The Multi-Site orchestrator must be directly attached to one ACI leaf.
- E. ACI Multi-Site is a solution that allows one APIC cluster to manage multiple ACI sites.
正解：A、E
解説：
The two true statements regarding ACI Multi-Site are:
ACI Multi-Site is a solution that supports a dedicated APIC cluster per site1.
ACI Multi-Site is a solution that allows one APIC cluster to manage multiple ACI sites1.
質問 # 59
Refer to the exhibit.
Refer to the exhibit. A network engineer must complete the Cisco ACI implementation based on the logical system design created by the systems architect. Which Cisco ACI object is required where the dotted line indicates to complete the task?
- A. context
- B. contract
- C. attachable Access Entity Profile
- D. application profile
正解：B
解説：
In Cisco ACI, a contract is used to define the communication policy between EPGs (Endpoint Groups). It specifies which types of traffic are allowed to pass between EPGs and can include filters for protocols, ports, and other attributes. In the context of the logical system design, the contract would be the object that completes the communication requirements as indicated by the dotted line in the exhibit12.
Reference:
Cisco Application Centric Infrastructure (ACI) Design Guide1
Cisco ACI Policy Model Guide2
質問 # 60
On which endpoint type is the host tracking feature performed in the Cisco ACI fabric?
- A. bounce entry endpoint
- B. on-peer endpoint
- C. remote endpoint
- D. local endpoint
正解：C
解説：
The host-tracking feature in ACI issues ARP/ND probes only for remote endpoints (those learned via unicast routing), in order to verify ongoing reachability. It does not run against purely local, bounce, or on-peer endpoint types.
質問 # 61
Refer to the exhibit.
Which two objects are created as a result of the configuration? (Choose two.)
- A. endpoint group
- B. VRF
- C. attachable AEP
- D. application profile
- E. bridge domain
正解：B、E
質問 # 62 
Refer to the exhibit. An engineer is integrating a VMware vCenter with Cisco ACI VMM domain configuration.
ACI creates port-group names with the format of "Tenant | Application | EPG". Which configuration option is used to generate port groups with names formatted as "Tenant=Application=EPG"?
- A. security domains
- B. delimiter
- C. virtual switch name
- D. enable tag collection
正解：C
解説：
Section: Integrations
質問 # 63
When Layer 3 routed traffic is destined to a Cisco ACI fabric, which mechanism does ACI use to detect silent hosts?
- A. ARP gleaning
- B. proxy ARP
- C. gratuitous ARP
- D. inverse ARP
正解：A
質問 # 64
Which service graph option creates a permit entry for the traffic from the provider EPG to the provider connector of the PBR node?
- A. single context aware
- B. direct connect
- C. promiscuous mode
- D. share encap
正解：A
解説：
In Cisco ACI, when using a service graph with Policy-Based Redirect (PBR), the single context aware option creates a permit entry specifically for traffic flowing from the provider Endpoint Group (EPG) to the provider connector of the PBR node. This ensures that the traffic is properly redirected and allowed to flow through the specified service graph for further processing.
質問 # 65
Refer to the exhibit. VM1 and VM2 are in Cisco ACI POD1 and communication takes place. Which event is triggered when VM2 is live migrated from POD1 to POD2?
- A. Spines from POD2 send an MP-BGP EVPN update to the leaves in POD1 about the new location of VM2.
- B. Leaf 201 creates a tunnel with leaf 102 because of the bounced traffic that is destined to VM2.
- C. Leaf 102 installs a bounce entry for VM2 pointing to the PTEP address of leaf 201.
- D. An MP-BGP EVPN update is received by spines in POD1 announcing the reachability of VM2 via the proxy VTEP address of the spines in POD2.
正解：B
質問 # 66
What are two requirements for the IPN network when implementing a Multi-Pod ACI fabric? (Choose two.)
- A. PIM ASM multicast routing
- B. BGP routing
- C. EIGRP routing
- D. VLAN ID 4
- E. OSPF routing
正解：C、E
質問 # 67
Which new construct must a user create when configuring in-band management?
- A. management tenant
- B. VLAN pool
- C. management contract
- D. bridge domain
正解：D
解説：
When configuring in-band management, the new construct that must be created is a bridge domain1.
質問 # 68
A customer is deploying a new application across two ACI pods that is sensitive to latency and jitter. The application sets the DSCP values of packets to AF31 and CS6, respectively. Which configuration changes must be made on the APIC to support the new application and prevent packets from being delayed or dropped between pods?
- A. align the ACI QoS levels and IPN QoS policies
- B. disable DSCP mapping on the IPN devices
- C. align the custom QoS policy on the EPG site in the customer tenant
- D. disable DSCP translation policy
正解：A
解説：
This will ensure that the Quality of Service (QoS) levels and policies within the ACI fabric and the IPN devices match, preventing packets from being delayed or dropped between pods. Additionally, it is important to align the DSCP values of the packets with the configured QoS levels to ensure that the application's requirements for latency and jitter are met.
質問 # 69
A network engineer demonstrates Cisco ACI to a customer. One of the test cases is to validate a disaster recovery event by resetting the ACI fabric to factory and then restoring the fabric to the state it was in before the event. Which setting must be enabled on ACI to export all configuration parameters that are necessary to meet these requirements?
- A. enabled AES encryption
- B. generated a tech-support file
- C. enabled JSON format export
- D. encrypted export destination
正解：C
解説：
To export all configuration parameters necessary for disaster recovery in Cisco ACI, the setting that must be enabled is enabled JSON format export1. This format allows for a complete and structured export of the configuration that can be used for recovery purposes1.
https://www.cisco.com/c/en/us/td/docs/switches/datacenter/aci/apic/sw/kb/b_KB_Using_Import_Export_to_Recover_Config_States.html
質問 # 70
......
完全版最新の問題集PDFで最新300-620試験問題と解答：https://www.goshiken.com/Cisco/300-620-mondaishu.html
本日更新された最新の300-620のPDFは300-620無料お試し可能です：https://drive.google.com/open?id=1mgJiv7ylgkpHg1LiXsmTtsw3y3fjyvq4