Refer to the exhibit. Which Adjacency Type value should be set when the client endpoint and the service node interface are in a different subnet?
Answer(s): D
Option D is correct because when the client endpoint and the service node interface are in different subnets, the adjacency type must reflect Layer 3 routing between endpoints, i.e., L3. Options A (Routed) and C (L3Out) are not the standard ACICDCACI Adjacency Type terms for this scenario; they imply different constructs or scopes. Option B (Unicast) does not describe an adjacency type and is not used to differentiate subnet locality in this context. Therefore, L3 (Option D) correctly indicates routing across subnets between endpoints.
Which endpoint learning operation is completed on the ingress leaf switch when traffic is received from a Layer 3 Out?
Answer(s): A
Option A is correct because on ingress to the leaf switch when traffic arrives from L3 Out, ACI learns the source MAC as a local endpoint, associating it with the local leaf’s EPG and using it for local host tracking and policy enforcement. Option B is incorrect: remote endpoint learning would apply to traffic learned from other leafs via the APIC fabric, not on ingress L3 Out toward the local leaf. Option C is incorrect: IP learning as a remote/local endpoint is not the primary endpoint learning mechanism in this context; MAC-based local endpoint learning takes precedence for on-wire locality. Option D is incorrect: IP address learning as a local endpoint is not how ACI handles initial endpoint learning on ingress L3 Out.
An engineer must connect Cisco ACI fabric using Layer 2 with external third-party switches. The third-party switches are configured using 802.1s protocol. Which two constructs are required to complete the task? (Choose two.)
Answer(s): A,D
Option A is correct because 802.1s (MST) requires mapping MST instances to VLANs when interworking with external switches; a spanning-tree policy is used to align MST instances with VLANs, enabling Layer 2 connectivity in an ACI fabric with third-party switches. Option D is correct because a dedicated EPG for the native VLAN ensures proper handling of untagged traffic in a mixed environment, avoiding misinterpretation of native VLAN frames between ACI and external devices. Incorrect options: B is wrong because MCP policy with PDU per VLAN is not a standard requirement for MST/native-VLAN interworking. C is wrong since MCP instance policy with administrative state disabled would disable necessary MCP control. E is wrong because static binding of native VLAN in all EPGs is not required and can constrain dynamic policy.
Refer to the exhibit. An engineer must configure an L3Out peering with the backbone network. The L3Out must forward unicast and multicast traffic over the link. Which two methods should be used to configure L3Out to meet these requirements? (Choose two.)
Option A is correct because a Layer 3 routed port is used to terminate an L3Out on the spine/leaf fabric for unicast routing to the backbone, enabling direct L3 adjacency and unicast forwarding.Option D is correct because a Layer 3 routed subinterface can be used on a routed physical interface to handle L3Out peering with distinct VRFs or address spaces, enabling multicast and unicast routing via subinterfaces.Option B is incorrect: VPC with SVI implies a virtual Port-Channel with a shared VLAN SVI, not a standard L3Out peering method for backbone unicast/multicast.Option C is incorrect: Port channel with SVI combines L2 redundancy with an SVI, not suitable for L3Out peering in this context.Option E is incorrect: Layer 3 floating SVI is used for hot-standby SVI scenarios, not typical L3Out backbone peering for unicast/multicast.
An engineer must configure a group of servers with a contract that uses TCP port 80. The EPG that contains the web servers requires an external Layer 3 cloud to initiate communication. Which action must be taken to meet these requirements?
Option D is correct because in ACI, to allow external L3 connectivity from an EPG, the EPG must be configured as a consumer of the contract and the L3 out (external network) as the provider. This enables the web servers (EPG) to initiate communication to the external L3 cloud while the contract enforces TCP port 80.A) Incorrect — reversing roles (EPG as provider, L3 out as consumer) would not permit the EPG to initiate traffic to the external L3 cloud.B) Incorrect — OSPF is not used for contract semantics or EPG-to-L3-out reachability in ACI.C) Incorrect — a taboo contract blocks traffic; it does not implement the required allow/port-80 behavior.
The unicast routing feature is enabled on the bridge domain. Which two conditions enable the Cisco ACI leaf to learn a source IP as a local endpoint? (Choose two.)
Answer(s): B,E
Option B is correct because when unicast routing is enabled on a bridge domain, an SVI (Layer 3 interface) can route IP traffic; the source IP observed on the local SVI becomes a local endpoint learned by the leaf. Option E is correct because ARP on an SVI reveals the IP-to-ME mapping for endpoints, enabling the leaf to learn the source IP as local. A is incorrect because Ethernet traffic alone to the bridge domain does not imply source IP learning as local without routing context. C is incorrect because VXLAN traffic on uplinks does not by itself establish local SVI-originated source IP. D is incorrect because L3 Out routing does not directly influence local endpoint learning within the bridge domain.
When does the Cisco ACI leaf learn a source IP or MAC as a remote endpoint?
Option D is correct because the leaf learns a remote endpoint (EP) when VXLAN traffic arrives from the spine with the inner source IP in the bridge domain subnet range, indicating an external (remote) endpoint within that BD. Options A and B are incorrect because they reference the outer source IP and EPG subnet ranges, which pertain to control-plane or non-BD scope rather than the BD’s internal IP space for remote endpoints. Option C is incorrect because it mentions the inner source IP being in the Layer 3 Out EPG subnet range, which does not align with how ACI associates remote endpoints with bridge-domain-scoped subnets for BD-endpoint learning. INSUFFICIENT_KNOWLEDGE
Refer to the exhibit. An engineer is deploying a Cisco ACI environment but experiences a STP loop between SW1 and SW2. Which configuration step is needed to break the STP loop?
Answer(s): B
Option B is correct because enabling the native VLAN on the interfaces facing the MST switches and using static ports in a dedicated EPG prevents spanning-tree from rebroadcasting BPDUs on those links, thereby breaking the STP loop between SW1 and SW2 in an ACI fabric with MST regions. A) Configuring a Layer 2 external bridged network on MST-facing interfaces is unrelated to native VLAN handling and may extend loops. C) BPDU filter can suppress BPDUs but is not recommended in ACI fabric edge-to-MST connections and can cause connectivity issues. D) STP instance to VLAN mapping is not a standard ACI remedy for this loop scenario.
Post your Comments and Discuss Cisco 300-620 exam prep with other Community members:
Our website is free, but we have to fight against AI bots and content theft. We're sorry for the inconvenience caused by these security measures. You can access the rest of the 300-620 content, but please register or login to continue.