Free 300-620 Exam Braindumps
Implementing Cisco Application Centric Infrastructure (DCACI) Questions 129–136 (page: 18)

Updated On: 11-May-2026

Which action sets Layer 2 loop migration in an ACI Fabric with a Layer 2 Out configured?

  1. Enable MCP on the ACI fabric.
  2. Disable STP in the external network.
  3. Disable STP on the ACI fabric.
  4. Enable STP on the ACI fabric.

Answer(s): A

Explanation:

Option A is correct because enabling MCP (Migration Control Protocol) on the ACI fabric is the action that initiates Layer 2 loop migration when a Layer 2 Out is configured, allowing the fabric to migrate loops without traffic disruption. Incorrect — B: Disabling STP in the external network does not trigger loop migration by itself; it merely affects external topology convergence and does not engage ACI loop-migration mechanisms. Incorrect — C: Disabling STP on the ACI fabric prevents standard loop protection within the fabric but does not specifically set up Layer 2 loop migration in a Layer 2 Out scenario. Incorrect — D: Enabling STP on the ACI fabric would enable spanning tree within the fabric, not the loop-migration process used with Layer 2 Out.



An engineer is implementing a connection that represents an external bridged network. Which two configurations are used? (Choose two.)

  1. Layer 2 remote fabric
  2. Layer 2 outside
  3. Layers 2 internal
  4. Static path binding
  5. VXLAN outside

Answer(s): B,D

Explanation:

Option B is correct because Layer 2 outside represents an external bridged network boundary in ACI, bridging external VLANs into the fabric consistently with outside connectivity. Option D is correct because Static path binding is used to define fixed, non-dynamic paths to external networks, ensuring deterministic reachability for the bridged external segment.
A) Incorrect — Layer 2 remote fabric is used for extending Layer 2 across fabric boundaries but does not specifically define the “outside” bridging boundary.
C) Incorrect — Layers 2 internal pertains to internal fabric segmentation, not external bridged networks.
E) Incorrect — VXLAN outside is not a standard term; VXLAN is used for encapsulation inside the fabric, but “outside” configuration is captured by Layer 2 outside and static binding in this context.


Reference:

https://www.cisco.com/c/en/us/solutions/collateral/data-center-virtualization/application-centric- infrastructure/white-paper-c07-732033.html#_Toc395143568



Which two actions extend a Layer 2 domain beyond the ACI fabric? (Choose two.)

  1. extending the routed domain out of the ACI fabric
  2. creating a single homed Layer 3 Out
  3. creating an external physical network
  4. extending the bridge domain out of the ACI fabric
  5. extending the EPG out of the ACI fabric

Answer(s): D,E

Explanation:

Option D is correct because extending the bridge domain (BD) out of the ACI fabric directly expands Layer 2 connectivity beyond the fabric boundary, which is the purpose of a L2 extension in ACI. Option E is correct because extending the EPG (endpoint group) out of the fabric also preserves L2 semantics for associated endpoints, effectively extending L2 to external networks when used with appropriate bridging constructs. A is incorrect because extending the routed domain out of the fabric involves Layer 3, not L2. B is incorrect because a single homed L3Out does not extend L2 domains. C is incorrect because an external physical network alone does not specify L2 extension via ACI constructs.



When Cisco ACI connects to an outside Layers 2 network, where does the ACI fabric flood the STP BPDU frame?

  1. within the bridge domain
  2. within the APIC
  3. within the access encap VLAN
  4. between all the spine and leaf switches

Answer(s): C

Explanation:

Option C is correct because when ACI connects to an external Layer 2 network, STP BPDUs are flooded inside the access encapsulation VLAN (encap VLAN) to isolate and manage traffic between external L2 networks and the ACI fabric without leaking into the overlay.
A) within the bridge domain — Incorrect — STP BPDUs are not flooded inside a bridge domain; BD is an L3/overlay construct and uses VXLAN for fabric traffic, not STP propagation.
B) within the APIC — Incorrect — APIC is an out-of-band management/control plane; STP BPDUs are not flooded to or through APIC.
D) between all the spine and leaf switches — Incorrect — The fabric floods BPDU handling is confined to the access encapsulation VLAN, not spines/leaf inter-switch forwarding.



On which two interface types should a user configure storm control to protect against broadcast traffic? (Choose two.)

  1. APIC facing interfaces
  2. port channel on a single leaf switch
  3. all interfaces on the leaf switches in the fabric
  4. endpoint-facing trunk interface
  5. fabric uplink interfaces on the leaf switches

Answer(s): B,D

Explanation:

Option B is correct because storm control is typically configured on a port-channel on a single leaf switch to centrally protect aggregated access paths from broadcast storms, aligning with DCACI best practices for limiting broadcast flood across a bundle.
Option D is correct because endpoint-facing trunk interfaces are where user traffic enters the fabric; applying storm control here protects client VLANs and prevents broadcast storms from impacting the fabric ingress.
A) Incorrect — APIC facing interfaces are management/control links, not primary paths for user broadcast flooding control.
C) Incorrect — configuring storm control on all leaf interfaces or fabric-wide is unnecessary and can degrade performance; you apply where needed (e.g., user-facing/trunked paths).
E) Incorrect — fabric uplink interfaces are high-capacity inter-switch links; storm control typically not applied there, as drops are better handled by at the access/aggregation points.


Reference:

https://www.cisco.com/c/en/us/td/docs/switches/datacenter/aci/apic/sw/2-x/L2_config/ b_Cisco_APIC_Layer_2_Configuration_Guide/
b_Cisco_APIC_Layer_2_Configuration_Guide_chapter_01010.html



Which two dynamic routing protocols are supported when using Cisco ACI to connect to an external Layer 3 network? (Choose two.)

  1. iBGP
  2. VXLAN
  3. IS-IS
  4. RIPv2
  5. eBGP

Answer(s): A,E

Explanation:

Option A is correct because iBGP is supported for external L3 connectivity when using Cisco ACI with external networks; it handles route reflection and loop avoidance in BGP neighbor relationships across ACI and external devices.
Option E is correct because eBGP is the other supported dynamic routing protocol for external L3 connectivity in ACI, enabling exchange of routes with non-ACI devices over a separate AS.
Option B is incorrect because VXLAN is a data-plane encapsulation/transport mechanism, not a routing protocol.
Option C is incorrect because IS-IS is not listed as a supported external dynamic routing protocol in this specific ACI integration.
Option D is incorrect because RIPv2 is not supported for external L3 connectivity in this context.


Reference:

https://www.cisco.com/c/en/us/td/docs/switches/datacenter/aci/apic/sw/1-x/ACI_Best_Practices/ b_ACI_Best_Practices/b_ACI_Best_Practices_chapter_010010.html



What must be configured to redistribute externally learned OSPF routes within the ACI fabric?

  1. Route Control Profile
  2. BGP Route Reflector
  3. BGP Inter-leak Route Map
  4. PIM Sparse Mode

Answer(s): B

Explanation:

Option B is correct because BGP Route Reflector configuration is required to redistribute externally learned OSPF routes into the ACI fabric, enabling proper route propagation between external OSPF domains and the fabric’s BGP-based routing. A) Route Control Profile is not used specifically for redistributing externally learned OSPF routes. C) BGP Inter-leak Route Map is not the standard mechanism for this redistribution in ACI DCACI. D) PIM Sparse Mode relates to multicast routing, not redistribution of OSPF routes into ACI. INSUFFICIENT_KNOWLEDGE


Reference:

https://www.cisco.com/c/en/us/td/docs/switches/datacenter/aci/apic/sw/1-x/ACI_Best_Practices/ b_ACI_Best_Practices/b_ACI_Best_Practices_chapter_010010.html



Regarding the MTU value of MP-BGP EVPN control plane packets in Cisco ACI, which statement about communication between spine nodes in different sites is true?

  1. By default, spine nodes generate 9000-bytes packets to exchange endpoints routing information. As a result, the Inter-Site network should be able to carry 9000-bytes packets.
  2. By default, spine nodes generate 1500-bytes packets to exchange endpoints routing information. As a result, the Inter-Site network should be able to carry 1800-bytes packets.
  3. By default, spine nodes generate 1500-bytes packets to exchange endpoints routing information. As a result, the Inter-Site network should be able to carry 1500-bytes packets.
  4. By default, spine nodes generate 9000-bytes packets to exchange endpoints routing information. As a result, the Inter-Site network should be able to carry 9100-bytes packets.

Answer(s): A

Explanation:

Option A is correct because MP-BGP EVPN control-plane packets between spine nodes in different sites use 9000-byte MTU by default for Ethernet VPN control traffic, requiring the Inter-Site network to support 9000-byte frames. This aligns with ACI's large-packet forwarding to accommodateEVPN NLRI and BGP attributes across sites.
B) Incorrect — cites 1500-byte default but then claims 1800-byte requirement, which is inconsistent with MTU negotiation for 9k-enabled EVPN across Inter-Site.
C) Incorrect — claims 1500-byte default and 1500-byte Inter-Site requirement, contradicting the 9k MTU behavior needed for cross-site EVPN control-plane.
D) Incorrect — pairs 9000-byte packets with 9100-byte Inter-Site requirement, which misstates standard MTU sizing for EVPN control-plane.



Viewing page 18 of 50
Viewing questions 137 - 144 out of 404 questions


Post your Comments and Discuss Cisco 300-620 exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!