What is MP-BGP used for in Cisco ACI fabric?
Answer(s): C
Option C is correct because MP-BGP VPNv4 AF is used to propagate L3Out routes that are learned from an external border leaf into the ACI fabric, enabling interconnection of external networks with internal endpoints. A is incorrect: L3Out routing adjacency to external routers uses VPNv4 directly on border connections, but the propagation into the fabric is the MP-BGP VPNv4 AF’s role, not the external peering itself. B is incorrect: Layer 2 EVPN AF handles L2 reachability and EVPN signaling, not L3Out route propagation into the fabric. D is incorrect: MP-BGP VPNv4 AF between spines in a Multi-Pod fabric is not about propagating L3Out routes from a border leaf into the fabric.
What are two descriptions of ACI Multi-Site? (Choose two.)
Answer(s): D,E
Option D is correct because ACI Multi-Site supports a dedicated APIC cluster per site to manage each site independently while enabling inter-site policy and fabric consistency.Option E is correct because the Inter-Site network routers must run OSPF to establish and maintain peering with the spine and to exchange routing information between sites.A) Incorrect — OSPF, DHCP relay, and MP-BGP are not a mandatory combined requirement for all Inter-Site routers in Multi-Site; specifics can vary by design and are not the defining descriptions.B) Incorrect — Multi-Site is not described as a single APIC cluster managing multiple sites; it uses site-specific APIC clusters coordinated for inter-site operations.C) Incorrect — The Multi-Site orchestrator is not required to be directly attached to one ACI leaf; topology specifics place orchestrator components per design but not as stated.
Refer to the exhibit. A Cisco ACI fabric is created with L2Out to N7K1 and N7K2 switches. The switches are running MSTP with native VLAN 10. The N7K1 and N7K2 act as the root bridge for VLAN 20. An EPG named Data has been created. The ACI fabric must be configured with these requirements:The ACI fabric must receive MSTP BPDU.The N7K1 switch must act as the root bridge for VLAN 20.Which set of actions accomplishes these goals?
Option C is correct because MSTP BPDU receipt and root bridging for VLAN 20 require the EPG Data to be encapsulated with VLAN 10 in this topology, ensuring the native MSTP VLAN is carried as the control plane and that N7K1 remains the root for VLAN 20. Incorrect:A) Encapsulate with VLAN 20 would place data on the non-native MSTP control plane VLAN, not propagating BPDU per the native VLAN 10.B) Repeats VLAN 10 but misstates requirement for 802.1P; MSTP BPDU handling relies on native VLAN, not data VLAN 20.D) Encapsulate with VLAN 20 contradicts the root-bridge requirement and native VLAN 10 usage.
Refer to the exhibit. An engineer configures a static port binding for EPG-3. These Cisco ACI objects are already configured:The EPG-3 is associated with a physical domain.The physical domain is associated with a VLAN pool called VLP-1.The VLAN pool contains VLANs 200-250.Which step completes the configuration?
Answer(s): A
Option A is correct because a static port binding in APIC requires associating an interface policy group with an interface selector for the physical port (eth1/2) to bind the EPG-3 to the specific interface on the leaf, completing the binding to the VLAN pool 200-250 via the physical domain.B is incorrect because linking a switch profile to an interface profile via an interface policy is not the final step for a static port binding; it precedes or configures broader policy, not the per-port EPG binding.C is incorrect because AEP association of a domain to an interface selector is not the required step for static port binding; the binding is done through the interface policy group and selector.D is incorrect because attaching an interface policy group to a switch profile for Node-101 does not directly accomplish the per-port static binding to EPG-3; it operates at a different scope.
Refer to the exhibit. A Cisco ACI fabric uses L3Out to connect with R1. The 192.168.1.0/24 subnet is received over the physical interface Eth1/1 of Leaf1 and Leaf2. Which set of actions must be taken to receive the 2001:db8::2:1 subnet over the interface Eth1/1 interface?
Answer(s): B
Option B is correct because it requires applying a new interface profile to enable IPv6 route control on the L3Out connection, ensuring the 2001:db8::2:1 subnet is imported/exported per IPv6 RFC route-control semantics. A and B (both say Create a new interface profile) are ambiguous in text; ensure a new interface profile is used for IPv6 route-control configuration. C and D (Use the current interface profile) are incorrect because reusing an existing profile may not enable the necessary IPv6 route-control export/import settings for the L3Out connection. Incorrect options are marked as such with reasons, aligning with ACI practice for per-subnet route-control configuration.
Refer to the exhibit. An engineer applies an OSPF L3Out between a Cisco ACI fabric and an external router. Router1 must receive a default route from the Cisco ACI via OSPF. Which action ensures that the ACI fabric is the Layer 3 gateway for Router1?
Option A is correct because a default route leak policy in the L3Out is the mechanism to advertise a default route from the ACI fabric to the external router via OSPF, making the fabric the Layer 3 gateway for Router1. Incorrect — B: An OSPF interface policy governs OSPF interface settings, not default route advertisement. Incorrect — C: Contract association controls policy for traffic between EPGs, not L3Out default routes. Incorrect — D: OSPF route summarization policy affects route aggregation, not the act of leaking a default route from fabric to external router.
Refer to the exhibit. The default route is not present in the routing tables of the Cisco ACI leaf switches. All static and direct routes are currently being redistributed and advertised.Which action must be taken to advertise a default route on the eBGP L3Out?
Option C is correct because a Default Route Leak Policy on the L3Out is the Cisco ACI mechanism to advertise a default route (0.0.0.0/0) into eBGP for external peers when default routes are not being learned or redistributed by default. This policy selectively leaks a default route from internal VRFs to the external BGP, enabling eBGP L3Out to advertise a default route.A) Incorrect — BGP peer prefix policy Always would not by itself force a default advertisement; it controls prefix processing but does not create or leak a default route into eBGP.B) Incorrect — A static default on node profiles is not how ACI leaks defaults into eBGP for L3Out; default leakage is policy-based.D) Incorrect — An export route map for 0.0.0.0/0 is not the ACI-native method to advertise a default via L3Out unless paired with a proper leak policy.
An engineer configures port-12 on Leaf-101 and Leaf-102 to connect to a new server called SVR-12. This server will belong to a new EPG-12 and needs to use Encapsulation VLAN-12. An already existing server, which is named SVR-10, is also connected to the same leaf switches. SVR-10 belongs to EPG-10 and also uses Encapsulation VLAN-12. Which step must the engineer take to configure connectivity for SVR-12 and EPG-12?
Option B is correct because enabling port local VLAN scope on Leaf-101/Leaf-102 allows the new EPG-12 to use Encapsulation VLAN-12 without conflicting with other BDs or EPGs, ensuring proper L2 connectivity for SVR-12 on the same leaf network as SVR-10. A) Incorrect — Associating EPG-12 to the same BD as EPG-10 is not required and may cause unintended EPG sharing; separate BD assignment is typical for distinct EPGs.C) Incorrect — Disabling native VLANs is not a prerequisite for this connectivity and can disrupt management/traffic separation.D) Incorrect — SVR-12 can be on the same subnet as SVR-10 within the same Encapsulation VLAN; changing subnet is unnecessary.
Post your Comments and Discuss Cisco 300-620 exam prep with other Community members:
Our website is free, but we have to fight against AI bots and content theft. We're sorry for the inconvenience caused by these security measures. You can access the rest of the 300-620 content, but please register or login to continue.