300-620 PDFで合格させるスゴ問題集で300-620最新のリアル試験問題
有効な300-620テスト解答300-620試験PDF問題を試そう
質問 # 100
A data center administrator is upgrading an ACI fabric. There are 3 APIC controllers in the fabric and all the servers are dual-homed to pairs of leaf switches configured in VPC mode. How should the fabric be upgraded to minimize possible traffic impact during the upgrade?
- A. Option C
- B. Option A
- C. Option B
- D. Option D
正解：B
質問 # 101
Refer to the exhibit. The external subnet and internal EPG1 must communicate with each other, and the L3Out traffic must leak into the VRF named "VF1". Which configuration set accomplishes these goals?
- A. Export Route Control Subnet
Shared Security Import Subnet
Aggregate Shared Routes - B. External Subnets for External EPG
Shared Route Control Subnet
Shared Security Import Subnet - C. Export Route Control Subnet
Import Route Control Subnet
Aggregate Shared Routes - D. External Subnets for External EPG
Import Route Control Subnet
Shared Route Control Subnet
正解：D
質問 # 102
Which endpoint learning operation is completed on the egress leaf switch when traffic is received from an L3Out?
- A. The source MAC and IP address of the traffic is learned as a local endpoint.
- B. The source MAC address of the traffic is learned as a remote endpoint.
- C. The source IP address of the traffic is learned as a remote endpoint.
- D. No source MAC or IP address of the traffic is learned as a remote endpoint.
正解：B
解説：
Section: ACI Packet Forwarding
Explanation/Reference: https://www.cisco.com/c/en/us/solutions/collateral/data-center-virtualization/application-centric- infrastructure/white-paper-c11-739989.html
質問 # 103
An engineer configured a bridge domain with the hardware-proxy option for Layer 2 unknown unicast traffic.
Which statement is true about this configuration?
- A. The Layer 2 unknown hardware proxy lacks support of the topology change notification.
- B. The leaf switch forwards the Layers 2 unknown unicast packets to all other leaf switches if it is unable to find the MAC address in its local forwarding tables.
- C. The spine switch drops the Layer 2 unknown unicast packet if it is unable to find the MAC address in the proxy database.
- D. The leaf switch drops the Layer 2 unknown unicast packet if it is unable to find the MAC address in the local forwarding tables.
正解：D
質問 # 104
An engineer must connect a new host to port 101 on Leaf 101. A Cisco ACI fabric has an MOP policy configured but experience excessive Layer 2 loops The engineer wants the Cisco ACI fabric to detect and prevent Layer 2 loops m the fabric Which set of actions accomplishes these goals'?
- A. Option B
- B. Option C
- C. Option A
- D. Option D
正解：A
質問 # 105
An engineer must configure a group of servers with a contract that uses TCP port 80. The EGP that contains the web servers requires an external Layer 3 cloud to initiate communication. Which action must be taken to meet these requirements?
- A. Configure the EGP as a provider and L3 out as consumer of the contract.
- B. Configure a taboo contract and apply it to the EPG.
- C. Configure the EPG as a consumer and L3 out as a provider of the contract.
- D. Configure OSPF to exchange routes between the L3 out and EGP.
正解：A
質問 # 106
Refer to the exhibit.
A systems engineer is implementing the Cisco ACI fabric. However, the Server2 information is missing from the Leaf 101 endpoint table and the COOP database of the spine. The requirement is for the bridge domain configuration to enforce the ACI fabric to forward the unicast packets generated by Server1 destined to Server2. Which action must be taken to meet these requirements?
- A. Set IP Data-Plane Learning to No
- B. Enable Unicast Routing
- C. Enable ARP Flooding
- D. Set L2 Unknown Unicast to Flood
正解：D
解説：
Both servers are in the same subnet. ARP flooding is out if we read the article in the link. Also unicast routing is not needed.
https://www.cisco.com/c/en/us/solutions/collateral/data-center-virtualization/application-centric-infrastructure/white-paper-c11-739989.html
質問 # 107
An engineer is extending EPG connectivity to an external network. The external network houses the Layer 3 gateway and other end hosts. Which ACI bridge domain configuration should be used?
- A. Forwarding: Custom
L2 Unknown Unicast: Flood
L3 Unknown Multicast Flooding: Flood
Multi Destination Flooding: Flood in BD
ARP Flooding: Disabled - B. Forwarding: Custom
L2 Unknown Unicast: Flood
L3 Unknown Multicast Flooding: Flood
Multi Destination Flooding: Flood in BD
ARP Flooding: Enabled - C. Forwarding: Custom
L2 Unknown Unicast: Hardware Proxy
L3 Unknown Multicast Flooding: Flood
Multi Destination Flooding: Flood in BD
ARP Flooding: Disabled - D. Forwarding: Custom
L2 Unknown Unicast: Hardware Proxy
L3 Unknown Multicast Flooding: Flood
Multi Destination Flooding: Flood in BD
ARP Flooding: Enabled
正解：A
解説：
Section: ACI Packet Forwarding
質問 # 108
An engineer must implement management policy and data plane separation in the Cisco ACI fabric. Which ACI object must be created in Cisco APIC to accomplish this goal?
- A. Contract
- B. Bridge domain
- C. Application profile
- D. Tenant
正解：D
質問 # 109
A network engineer must allow secure access to the Cisco ACl out-of-band (OOB) management only from external subnets 10 0 0024 and 192.168 20 G'25. Which configuration set accomplishes this goal?
- A. Option C
- B. Option B
- C. Option A
- D. Option D
正解：A
質問 # 110
What do Pods use to allow Pod-to-Pod communication in a Cisco ACI Multi-Pod environment?
- A. over Layer 3 Out connectivity via border leafs
- B. over Layer 3 directly connected back-to-back spines
- C. over Layer 3 IPN connectivity via border leafs
- D. over Layer 3 IPN connectivity via spines
正解：D
解説：
https://www.cisco.com/c/en/us/solutions/collateral/data-center-virtualization/application-centric-infrastructure/white-paper-c11-737855.html
質問 # 111
A data center administrator is upgrading an ACI fabric. There are 3 APIC controllers in the fabric and all the servers are dual-homed to pairs of leaf switches configured in VPC mode. How should the fabric be upgraded to minimize possible traffic impact during the upgrade?
- A. 1. Create two maintenance groups for the leaf switches: VPC left and VPC right.
2. Upgrade the APIC controllers.
3. Upgrade the first group of leaf switches.
4. Upgrade the second group of leaf switches. - B. 1. Create two maintenance groups for the leaf switches: VPC left and VPC right.
2. Upgrade the first group of switches.
3. Upgrade the second group of switches.
4. Upgrade the APIC controllers. - C. 1. Create two maintenance groups for the APIC controllers: VPC left and VPC right.
2. Upgrade the first group of controllers.
3. Upgrade the second group of controllers.
4. Upgrade the leaf switches. - D. 1. Create two maintenance groups for APIC controllers: VPC left and VPC right.
2. Upgrade the leaf switches.
3. Upgrade the first group of controllers.
4. Upgrade the second group of controllers.
正解：B
質問 # 112
Refer to the exhibit.
Refer to the exhibit. How are the STP BPDUs forwarded over Cisco ACI fabric?
- A. STP BPDUs that are generated by Switch2 are received by Switch1 and Switch3
- B. STP BPDUs that are generated by Switch1 are received only by Switch3.
- C. Cisco ACI fabric drops all STP BPDUs that are generated by the external switches.
- D. Cisco ACI acts as the STP root for all three external switches.
正解：A
質問 # 113
Which type of policy configures the suppression of faults that are generated from a port being down?
- A. fault severity assignment
- B. event severity assignment
- C. fault lifecycle assignment
- D. event lifecycle assignment
正解：A
解説：
Reference:
https://www.cisco.com/c/en/us/td/docs/switches/datacenter/aci/apic/sw/all/faults/guide/ b_APIC_Faults_Errors/b_IFC_Faults_Errors_chapter_01.html
質問 # 114
Refer to the exhibit.
Refer to the exhibit. New e-commerce software is deployed on Cisco ACI fabric. The environment must meet these requirements:
The overall number of contracts must be reduced by reusing the existing contracts within a VRF when possible.
The e-commerce software must communicate only with software EPGs that are part of the same ANP.
The e-commerce software must be prevented from communicating with applications in different ANPs.
Which scope must be selected to meet these requirements?
- A. Endpoint Group
- B. Global
- C. Application Profile
- D. Tenant
正解：C
質問 # 115
In the context of VMM, which protocol between ACI leaf and compute hosts ensures that the policies are pushed to the leaf switches for immediate and on demand resolution immediacy?
- A. VXLAN
- B. STP
- C. LLDP
- D. ISIS
正解：C
解説：
Immediate-Specifies that EPG policies (including contracts and filters) are downloaded to the associated leaf switch software upon ESXi host attachment to a DVS. LLDP or OpFlex permissions are used to resolve the VM controller to leaf node attachments.
The policy will be downloaded to leaf when you add host to the VMM switch. CDP/LLDP neighborship from host to leaf is required.
On Demand-Specifies that a policy (for example, VLAN, VXLAN bindings, contracts, or filters) is pushed to the leaf node only when an ESXi host is attached to a DVS and a VM is placed in the port group (EPG).
The policy will be downloaded to leaf when host is added to VMM switch and virtual machine needs to be placed into port group (EPG). CDP/LLDP neighborship from host to leaf is required.
With both immediate and on demand, if host and leaf lose LLDP/CDP neighborship the policies are removed.
https://www.cisco.com/c/en/us/td/docs/switches/datacenter/aci/apic/sw/1-x/aci-fundamentals/b_ACI-Fundamentals/b_ACI-Fundamentals_chapter_01011.html
質問 # 116
An engineer must add a group of 70 bare-metal ESXi servers to the Cisco ACI fabric, which is integrated with vCenter. These configuration steps are complete:
The configured pool of ESXi hosts is configured with an Attachable Access Entity Profile (AAEP) called AEP_VMM.
The new group uses the AAEP called AEP_BAREMETAL.
Which action extends functional VMM integration to the new nodes?
- A. Update AAEP to AEP_VMM on all policy groups that are used toward bare-metal servers.
- B. Implement a separate VMM domain for the bare-metal servers by using AEP_VMM.
- C. Create a new AAEP container object for policy groups for AEP_VMM.
- D. Add the VMM domain under the AEP_BAREMETAL AAEP object.
正解：D
質問 # 117
Refer to the exhibit.
Refer to the exhibit. A network engineer must complete the Cisco ACI implementation based on the logical system design created by the systems architect. Which Cisco ACI object is required where the dotted line indicates to complete the task?
- A. contract
- B. attachable Access Entity Profile
- C. application profile
- D. context
正解：C
質問 # 118
Drag and drop the Cisco ACI Layer 4 to Layer 7 service insertion terms on the left to the correct descriptions on the right.
正解：
解説：
質問 # 119
Refer to the exhibit.
An engineer must configure an L3Out peering with the backbone network. The L3Out must forward unicast and multicast traffic over the link. Which two methods should be used to configure L3Out to meet these requirements? (Choose two.)
- A. Layer 3 routed port
- B. port channel with SVI
- C. VPC with SVI
- D. Layer 3 floating SVI
https://www.cisco.com/c/en/us/solutions/collateral/data-center-virtualization/application-centricinfrastructure/ guide-c07-743150.html#_L3Out_sStatic_rRoutes - E. Layer 3 routed subinterface
正解：D、E
質問 # 120
A network administrator configures AAA inside the Cisco ACI fabric. The authentication goes through the local users if the TACACS+ server is not reachable. If the Cisco APIC is out of the cluster, the access must be granted through the fallback domain. Which configuration set meets these requirements?
- A. Ping Check: False
Default Authentication Realm: TACACS+
Fallback Check: True - B. Ping Check: False
Default Authentication Realm: Local
Fallback Check: False - C. Ping Check: True
Default Authentication Realm: TACACS+
Fallback Check: False - D. Ping Check: True
Default Authentication Realm: Local
Fallback Check: True
正解：A
質問 # 121
An engineer must configure RADIUS authentication with Cisco ACI for remote authentication with out-of-band management access. Drag and drop the RADIUS configuration steps from the left into the required implementation order on the right. Not all steps are used.
正解：
解説：
質問 # 122
Refer to the exhibit. VM1 and VM2 are in Cisco ACI POD1 and communication takes place. Which event is triggered when VM2 is live migrated from POD1 to POD2?
- A. Spines from POD2 send an MP-BGP EVPN update to the leaves in POD1 about the new location of VM2.
- B. Leaf 201 creates a tunnel with leaf 102 because of the bounced traffic that is destined to VM2.
- C. An MP-BGP EVPN update is received by spines in POD1 announcing the reachability of VM2 via the proxy VTEP address of the spines in POD2.
- D. Leaf 102 installs a bounce entry for VM2 pointing to the PTEP address of leaf 201.
正解：B
質問 # 123
An ACI administrator notices a change in the behavior of the fabric. Which action must be taken to determine if a human intervention introduced the change?
- A. Inspect /var/log/audit_messages on the APIC to see a record of all user actions.
- B. Inspect audit logs in the APIC UI to see all user events.
- C. Inspect event records in the APIC UI to see all actions performed by users.
- D. Inspect the output of show command history in the APIC CLI.
正解：C
解説：
Section: ACI Fabric Infrastructure
質問 # 124
......
300-620問題集はあなたの合格を必ず保証します：https://www.goshiken.com/Cisco/300-620-mondaishu.html
300-620テスト問題集とオンライン試験エンジン：https://drive.google.com/open?id=1bR4gC0swgdTzZT5RHkr4ed_wVdmtjd3U