2025年最新の実際の300-620問題集最新Cisco練習テスト問題集ゲット
300-620問題集PDFで300-620リアル試験問題解答
Cisco 300-620認定試験は、Cisco ACIテクノロジーの実装に関連するさまざまなトピックをカバーしています。これらのトピックには、ACIアーキテクチャ、ファブリックディスカバリー、ポリシーモデル、テナント構成、アプリケーションプロファイル、エンドポイントグループ、およびサービスグラフが含まれます。この試験では、ネットワークの自動化、オーケストレーション、トラブルシューティングに関連するトピックについてもカバーしています。
Cisco 300-620認定試験は、データセンターインフラ管理に特化したITプロフェッショナルにとって重要な基準です。この認定は、現代のデータセンターで最も広く使用されている技術の1つであるACIインフラストラクチャを展開および管理するために必要なスキルと知識を検証します。Cisco 300-620認定を取得することで、候補者はACIインフラストラクチャを設計、実装、および管理する能力を示すことができ、分野内の他のITプロフェッショナルと差別化することができます。この認定は、データセンターインフラ管理でキャリアを進めたいITプロフェッショナルにとって強固な基盤を提供し、業界の雇用主から高く評価されています。
質問 # 203
Drag and drop the Cisco ACI Layer 4 to Layer 7 service insertion terms on the left to the correct descriptions on the right.
正解：
解説：
質問 # 204
Refer to the exhibit. An engineer configures communication between the EPGs in different tenants.
Which action should be taken to create the subnet?
- A. Add the L3Out for Route Profile value.
- B. Leave Scope set to Private to VRF.
- C. Change Scope to Shared between VRFs.
- D. Change Scope to Advertised Externally.
正解：C
質問 # 205
An engineer must implement management policy and data plane separation in the Cisco ACI fabric. Which ACI object must be created in Cisco APIC to accomplish this goal?
- A. Bridge domain
- B. Application profile
- C. Tenant
- D. Contract
正解：C
解説：
An ACI tenant is a secure and exclusive virtual computing environment that forms a unit of isolation from a policy perspective but does not represent a private network.
If you investigate further into use cases for tenants in the real world, you will find that tenants are often deployed in order to achieve these two technical controls:
- Administrative separation
- Configuration fault isolation
質問 # 206
Which endpoint learning operation is completed on the ingress leaf switch when traffic is received from a Layer 3 Out?
- A. The source IP address of the traffic is learned as a remote endpoint.
- B. The source MAC address of the traffic is learned as a local endpoint.
- C. The source IP address of the traffic is learned as a local endpoint.
- D. The source MAC address of the traffic is learned as a remote endpoint.
正解：A
解説：
When traffic is received from a Layer 3 Out (L3Out) on the ingress leaf switch in a Cisco ACI fabric, the source IP address of the traffic is learned as a remote endpoint. This is because the traffic is entering the ACI fabric from an external network, and the source IP is considered remote to the fabric.
質問 # 207
An engineer configures a one-armed policy-based redirect service Insertion for an unmanaged firewall. The engineer configures these Cisco ACI objects:
- a contract named All_Traffic_Allowed
- a Layer 4 to Layer 7 device named FW-Device
- a policy-based redirect policy named FW-1Arm-Policy-Based
RedirectPolicy
Which configuration set redirects the traffic to the firewall?
- A. Configure a service graph.
Associate the service graph with All_Traffic_Allowed. - B. Configure a policy-based redirect subject.
Associate the policy-based redirect subject with All_Traffic_Allowed. - C. Configure a firewall bridge domain.
Associate the bridge domain with FW-Device. - D. Configure a device interface policy.
Associate the device interface policy with FW-Device.
正解：A
質問 # 208
Refer to the exhibit.
Which two components should be configured as route reflectors in the ACI fabric? (Choose two.)
- A. Leaf2
- B. apic2
- C. apic1
- D. Spine2
- E. Spine1
- F. Leaf1
正解：D、E
質問 # 209
Refer to the exhibit. An engineer configured subnets on the external EPG called L3OUT_CORE.
The external endpoints in the 10.1.0.0/24 subnet can reach internal endpoints, but the external endpoints in the 172.16.1.0/24 subnet are unreachable. Which set of actions enables the connectivity?
- A. Delete the external EPG subnet 0.0.0.128/1.
Create the 128.0.0.0/1 subnet. - B. Delete both external EPG subnets.
Create the 0.0.0.0/0 subnet. - C. Delete the external EPG subnet 0.0.0.0/0.
Create the 0.0.0.0/128 subnet. - D. Delete both external EPG subnets.
Create the 0.0.0.0/1 subnet.
正解：A
質問 # 210
Drag and drop the Cisco ACI filter entry options from the left onto the correct categories on the right indicating what are required or optional parameters.
正解：
解説：
質問 # 211
What must be configured to redistribute externally learned OSPF routes within the ACI fabric?
- A. Route Control Profile
- B. BGP Route Reflector
- C. BGP Inter-leak Route Map
- D. PIM Sparse Mode
正解：B
質問 # 212
An ACI administrator notices a change in the behavior of the fabric. Which action must be taken to determine if a human intervention introduced the change?
- A. Inspect the output of show command history in the APIC CLI.
- B. Inspect /var/log/audit_messages on the APIC to see a record of all user actions.
- C. Inspect audit logs in the APIC UI to see all user events.
- D. Inspect event records in the APIC UI to see all actions performed by users.
正解：D
質問 # 213
An engineer is configuring a VRF for a tenant named Cisco. Drag and drop the child objects on the left onto the correct containers on the right for this configuration.
正解：
解説：
Explanation
Application profile---> VRF--> Bridge Domain---> EPG
質問 # 214
An engineer must securely export Cisco APIC configuration snapshots to a secure, offsite location. The exported configuration must be transferred using an encrypted tunnel and encoded with a platform- agnostic data format that provides namespace support.
Which configuration set must be used?
- A. Policy: Import Policy
Protocol: TLS
Format: XML - B. Policy: Import Policy
Protocol: SCP
Format: JSON - C. Policy: Export Policy
Protocol: TLS
Format: JSON - D. Policy: Export Policy
Protocol: SCP
Format: XML
正解：D
質問 # 215
An engineer must configure VMM domain integration on a Cisco UCS B-Series server that is connected to a Cisco ACI fabric. Drag and drop the products used to create VMM domain from the bottom into the sequence in which they should be implemented at the top. Products are used more than once.
正解：
解説：
質問 # 216
Refer to the exhibit.
A client reports that the ACI domain connectivity to the fiber channel storage is experiencing a B2B credit oversubscription. The environment has a SYSLOG server for state collection messages. Which value should be chosen to clear the critical fault?
- A. 0
- B. 1
- C. 2
- D. 3
正解：C
解説：
To clear the critical fault related to B2B credit oversubscription in the ACI domain connectivity to the fiber channel storage, the value that should be chosen is 5101. This value is set to address the issue of B2B credit oversubscription and clear the critical fault as reported by the client1.
質問 # 217
A Cisco ACI fabric must detect all silent endpoints for the Layer 3 bridge domain. Which actions accomplish this goal?
- A. Enable Unicast Routing.
Disable ARP Flooding. - B. Disable Unicast Routing.
Enable L2 Unknown Unicast Hardware Proxy. - C. Disable Unicast Routing.
Enable L2 Unknown Unicast Flood. - D. Enable Unicast Routing.
Enable ARP Flooding.
正解：A
解説：
A silent host in Cisco ACI is an endpoint that does not actively send traffic (like ARP requests) but still needs to be detected by the fabric. Cisco ACI can detect silent endpoints using data plane learning when routing is enabled.
- Enable Unicast Routing:
This allows ACI to learn endpoints through Layer 3 mechanisms such as ARP Gleaning and routing lookups.
If Unicast Routing is enabled, the fabric can track and detect silent hosts based on ARP requests and replies.
- Disable ARP Flooding:
Disabling ARP flooding ensures that ARP requests are handled in a more controlled way using the ARP Gleaning mechanism rather than being flooded across the fabric.
This allows ACI to learn about silent hosts without requiring them to send out ARP requests.
質問 # 218
A customer migrates a legacy environment to Cisco ACI. A Layer 2 trunk is configured to interconnect the two environments. The customer also builds ACI fabric in an application-centric mode. Which feature should be enabled in the bridge domain to reduce instability during the migration?
- A. Set Multi-Destination Flooding to Flood in Encapsulation.
- B. Disable Endpoint Dataplane Learning
- C. Set Multi-Destination Flooding to Flood in BD.
- D. Enable Flood in Encapsulation.
正解：C
解説：
To reduce instability during the migration of a legacy environment to Cisco ACI, the feature that should be enabled in the bridge domain is to Set Multi-Destination Flooding to Flood in BD (Option A). This setting allows unknown multicast, broadcast, and unknown unicast traffic to be flooded within the bridge domain, which can help prevent traffic loss during the migration process.
質問 # 219
A network engineer must optimize a Cisco ACI multi-pod deployment. Both pods are using the same pod policy group. The customer requirement is to avoid inter-pod traffic loss in case of planned or unplanned spine reload. Which action accomplishes this goal?
- A. Configure all spines as Route Reflectors in the BGP Route Reflector Policy.
- B. Configure MACsec in the MACsec Fabric Interface Policy.
- C. Configure the COOP type as compatible in COOP Group Policy.
- D. Configure a lower IS-IS metric for redistributed routes in ISIS Policy.
正解：D
解説：
https://community.cisco.com/t5/data-center-and-cloud-blogs/aci-multi-pods-caveats-and- considerations/ba-p/3837927
質問 # 220
Refer to the exhibit.
An engineer must implement the inter-tenant service graph. Which set of actions must be taken to accomplish this goal?
- A. * Define the contract in the provider tenant and export it to the provider tenant.
* Define the L4-L7 device, service graph template, and ASA bridge domains in the consumer tenant. - B. * Define the contract in the provider tenant and export it to the consumer tenant.
* Define the L4-L7 device and service graph template in the provider tenant and the ASA bridge domains in the consumer tenant. - C. * Define the contract in the provider tenant and export it to the provider tenant.
* Define the L4-L7 device and service graph template in the provider tenant and the ASA bridge domains in the consumer tenant. - D. * Define the contract in the provider tenant and export it to the consumer tenant.
* Define the L4-L7 device, service graph template, and ASA bridge domains in the provider tenant.
正解：B
質問 # 221
An engineer needs to deploy a leaf access port policy group in ACI Fabric to support the following requirements:
* Control the amount of application data flowing into the system
* Allow the newly connected device to auto-negotiate link speed with the leaf switch Which two ACI policies must be configured to achieve these requirements? (Choose two.)
- A. ingress control plane policing policy
- B. L2 interface policy
- C. ingress data plane policing policy
Slow Drain handles FCoE packets that are causing traffic congestion on ACI fabric. So, it is wrong.
Ingress control plane is wrong, because the request is for "application data flowing".
L2 interface policy is concerned about QinQ and VLAN scope. - D. link level policy
- E. slow drain policy
正解：C、D
質問 # 222
Refer to the exhibit.
Refer to the exhibit. A Cisco ACI fabric displays this fault. Which set of actions modifies the event to be displayed as a warning in the future?
- A. Navigate to the ACI Events tab.
Create a new record. - B. Navigate to the ACI Fault tab.
Change the severity level. - C. Navigate to the ACI Fault tab.
Create a new record. - D. Navigate to the ACI Events tab.
Change the severity level.
正解：D
質問 # 223
What is the name of the automatically configured VLAN 3600 presented during Cisco ACI fabric discovery?
- A. Transit VLAN
- B. Loopback VLAN
- C. Infrastructure VLAN
- D. Fabric VLAN
正解：C
解説：
The Infrastructure VLAN is automatically configured during the Cisco ACI fabric discovery process. This VLAN, often referred to as the "infra VLAN," is used to enable internal communication between the ACI fabric components, such as the leaf and spine nodes. It is vital for the overlay network and the control plane functionality. In the provided output, VLAN 3600 represents the Infrastructure VLAN, which is configured for inter-node communication.
質問 # 224
Which two statements regarding ACI Multi-Site are true? (Choose two.)
- A. Routers in the Inter-Site network must run OSPF, DHCP relay, and MP-BGP.
- B. The Multi-Site orchestrator must be directly attached to one ACI leaf.
- C. ACI Multi-Site is a solution that allows one APIC cluster to manage multiple ACI sites.
- D. The Inter-Site network routers should run OSPF to establish peering with the spines.
- E. ACI Multi-Site is a solution that supports a dedicated APIC cluster per site.
正解：C、E
解説：
The two true statements regarding ACI Multi-Site are:
ACI Multi-Site is a solution that supports a dedicated APIC cluster per site1.
ACI Multi-Site is a solution that allows one APIC cluster to manage multiple ACI sites1.
質問 # 225
......
300-620プレミアム試験エンジンPDFをダウンロード：https://www.goshiken.com/Cisco/300-620-mondaishu.html
300-620試験 [2025] 問題集でCiscoのPDF問題：https://drive.google.com/open?id=1HBn0wNMKY_XQmkrzgQmRkvLI9B91zQAE