Refer to the exhibit.A network engineer failed to use VLAN 100 as the encapsulation VLAN for the endpoint group (EPG) named Business.Which action set allows both EPGs to use the same VLANs?
Answer(s): C
To reuse the same VLAN number for multiple EPGs, the VLAN must be locally significant rather than globally unique, so the VLAN pool scope must be set to local. The EPGs must also be separated into different bridge domains and different physical domains so ACI can treat them as distinct connectivity contexts while allowing the same VLAN ID to be reused.
An engineer is extending an EPG out of the ACI fabric using static path binding. Which statement about the endpoints is true?
Answer(s): D
Option D is correct because static path binding extends an EPG to external endpoints while keeping them associated with the same EPG, ensuring policy continuity across fabric and non-fabric endpoints.A) Incorrect — Endpoints can connect via external networking devices or through integration points; not required to connect directly to a leaf port.B) Incorrect — External endpoints associated with the EPG via static path binding are still under the same EPG and policy domain, not a different bridge domain.C) Incorrect — Endpoint learning in ACI includes MAC, IP, and other attributes as applicable; it is not MAC-only.
Which setting prevents the learning of Endpoint IP addresses whose subnet does not match the bridge domain subnet?
Option D is correct because the “Limit IP learning to subnet” setting within the bridge domain prevents learning endpoints whose IPs are not within the bridge domain’s subnet, isolating IP learning to the BD’s configured subnet.A) Incorrect — Limit IP learning to network within a bridge domain would apply broader network boundaries, not specifically enforcing subnet alignment for learned IPs.B) Incorrect — Limit IP learning to subnet within the EPG would affect the EPG scope, not the BD’s subnet alignment for IP learning.C) Incorrect — Limit IP learning to network within the EPG does not enforce subnet-based filtering at the BD level.
https://www.cisco.com/c/en/us/td/docs/switches/datacenter/aci/apic/sw/2-x/L2_config/ b_Cisco_APIC_Layer_2_Configuration_Guide/b_Cisco_APIC_Layer_2_Configuration_Guide_chapter_010.html
Which endpoint learning operation is completed on the egress leaf switch when traffic is received from an L3Out?
Option C is correct because when traffic enters from an L3Out into the egress leaf, the endpoint learning on that leaf does not treat the source as a remote endpoint; source MAC/IP are not learned as remote endpoints in this scenario.A) Incorrect — local endpoint learning would apply to endpoints directly attached, not to the remote L3Out source.B) Incorrect — the traffic from an L3Out does not cause the source to be learned as a remote endpoint on the egress leaf.D) Incorrect — the source IP is not learned as a remote endpoint in this L3Out ingress/egress flow.
Refer to the exhibit. Which two objects are created as a result of the configuration? (Choose two.)
Answer(s): C,E
Option C is correct because configuring ACI with common DCACI constructs creates a bridge domain as a Layer 2 termination domain and an associated VRF for IP routing context, leading to the two objects being established in the APIC-managed fabric.A) Incorrect — application profile is a logical construct associated with EPGs but is not a direct two-object result of this specific configuration.B) Incorrect — attachable EPG (AEP) is a leaf-facing attachment concept, not typically created as part of the two objects in question.D) Incorrect — endpoint group is a primary construct but not one of the two objects created by this configuration without additional context.E) Correct — VRF is created to provide IP routing context for the EPG/BD, matching the expected outcome.
https://www.cisco.com/c/en/us/td/docs/switches/datacenter/aci/apic/sw/2-x/rest_cfg/2_1_x/ b_Cisco_APIC_REST_API_Configuration_Guide/b_Cisco_APIC_REST_API_Configuration_Guide_chapter_01110.html
What must be enabled in the bridge domain to have the endpoint table learn the IP addresses of endpoints?
Option C is correct because enabling unicast routing in the bridge domain allows the endpoint table to learn and populate IP addresses for endpoints through IP routing processes, aligning with DCACI’s endpoint learning behavior. A) Incorrect — L2 unknown unicast: flood does not cause IP learning in the endpoint table; it floods frames at Layer 2 without IP address resolution. B) Incorrect — GARP based detection pertains to address resolution via GARP, not to enabling endpoint IP learning in the bridge domain. D) Incorrect — subnet scope relates to IP subnet containment but does not enable the endpoint IP learning mechanism in the bridge domain.
https://hsvglobalschool.in/dhkycw/cisco-aci-bridge-domain.html
An engineer is extending EPG connectivity to an external network. The external network houses the Layer 3 gateway and other end hosts. Which ACI bridge domain configuration should be used?
Answer(s): B
Option B is correct because the external L3 gateway and end hosts require L3UnknownMulticast Flooding set to Flood in BD with ARP Flooding Enabled, while L2 Unknown Unicast should be Flood to reach the external network; this aligns with DCACI practice for bridging to external networks without ARP suppression. The given choices A, C, and D all specify the same Forwarding: Custom, which does not distinguish the necessary behavior for L2 Unknown Unicast or L3 Unknown Multicast/Flooding/ARP settings, making them incorrect as they do not encode the proper BD-level flooding and ARP policies required for external connectivity.
An engineer configured a bridge domain with the hardware-proxy option for Layer 2 unknown unicast traffic.What occurs in this configuration?
Option D is correct because with hardware-proxy for Layer 2 unknown unicast in a bridge domain, the spine switch is responsible for handling unknown unicast by consulting the COOP (Control Plane Operational Data) database and dropping traffic if the MAC is not learned, ensuring consistent control-plane policy across the fabric. A is incorrect because unknown unicast handling is not performed by dropping at the leaf due to lack of MAC in local tables when hardware-proxy is enabled; the fabric relies on COOP-based decisions. B is incorrect because topology change notification behavior is not the primary consequence described. C is incorrect because forwarding to all leaves is not how hardware-proxy operates in DCACI with COOP.
Post your Comments and Discuss Cisco 300-620 exam prep with other Community members:
Our website is free, but we have to fight against AI bots and content theft. We're sorry for the inconvenience caused by these security measures. You can access the rest of the 300-620 content, but please register or login to continue.