Refer to the exhibit. A customer is deploying a WAN with these requirements:· Routers 1 and 2 must receive only routes 192.168.11.0/24 and 192.168.21.0/24 from the Cisco ACI fabric. · Reachability to the WAN users must be permitted only for the servers that are located in vrf_prod.Which settings must be configured to meet these objectives?
Answer(s): C
Option C is correct because 192.168.11.0/24 and 192.168.21.0/24 must be configured as Advertised Externally to allow them to be exported to the WAN from the ACI fabric, enabling router 1/2 to receive only these routes. Incorrect options A and B label the subnets as Private to VRF, which would restrict export/import and prevent selective WAN routing. Incorrect option D labels them as Advertised Externally but repeats the same as C; however, the question requires that only those networks be advertised externally for WAN reachability, not other configurations. Therefore, only C satisfies the requirement.
Refer to the exhibit. An engineer is deploying a Cisco ACI fabric with an L2Out to external switches. The Cisco ACI fabric has just been deployed and follows the default forwarding behavior. Which two actions accomplish a loop free topology? (Choose two.)
Answer(s): A,C
Option A is correct because aggregating Eth1/1 and Eth1/2 into an LACP port channel prevents a single failure from creating a loop and ensures a single upstream path toward the L2Out, aligning with default ACI L2Out behavior for loop-free topology.Option C is correct because disconnecting the link between Leaf3 and Leaf4 eliminates a potential alternate path that could form a loop in the fabric when a loop exists through external L2 connectivity.Option B is incorrect because MCP (Multi-Chassis Port) is not a concept in Cisco ACI fabric to prevent L2 loops; ACI uses EPHereops PF (port channel/LACP) and spanning behavior, not MCP.Option D is incorrect because LLDP on Leaf1/Leaf2 ports is not required to prevent loops in ACI L2Out; ACI relies on its own flood control and path selection, not LLDP enforcement for loop prevention.Option E is incorrect because BPDU guard on Catalyst ports is a switch-side protection, but ACI fabric topology already prevents loops; BPDU guard is not a fabric-level loop prevention mechanism.
When Layer 3 routed traffic is destined to a Cisco ACI fabric, which mechanism does ACI use to detect silent hosts?
Answer(s): B
Option B is correct because ARP gleaning is the ACI mechanism used to detect silent hosts by listening to ARP traffic and updating MAC-to-IP mappings without requiring explicit host communication. Incorrect — A) gratuitous ARP: used for rapid host presence announcements, not specifically silent-host detection in L3 routing within ACI. Incorrect — C) proxy ARP: answers for forwarding to non-local subnets; not used for silent-host detection. Incorrect — D) inverse ARP: deprecated in many environments and not the ACI method for detecting silent hosts in L3 routed traffic.
An engineer configures an L3Out in VRF-1 that was configured for Import Route Control Enforcement. The L3Out uses OSPF to peer with a core switch. The L3Out has one external EPG, and it has been configured with a subnet 10.1.0.0/24. Which scope must be set to force 10.1.0.0/24 to populate in the routing table for VRF-1?
Answer(s): A
Option A is correct because Import Route Control Enforcement requires the subnet to be explicitly allowed into VRF routing via the Import Route Control Subnet. This ensures 10.1.0.0/24 is imported into VRF-1’s routing table for OSPF advertisement to the core switch. Incorrect:B) External Subnet for External EPG pertains to external EPG subnet visibility, not the VRF import policy.C) Shared Route for External EPG does not influence routing table population via Import Route Control.D) Export Route Control Subnet governs what routes leaving the L3Out are exported, not what is imported into VRF-1.
https://www.cisco.com/c/en/us/td/docs/switches/datacenter/aci/apic/sw/5-x/l3-configuration/cisco- apic-layer-3-networking-configuration-guide-50x/route-and-subnet-scope-50x.pdf
Refer to the exhibit.The Cisco ACI fabric is built with L2Out to the N9K1 and N9K2 switches. The switches run the RSTP protocol. The requirement is for the Cisco ACI fabric to detect loops from the N9K and for the fabric to be protected against loops. Which set of actions must be taken to meet the requirements?
Option C is correct because configuring the N9K STP link type as shared is required to enable loop detection and protection for multi-access links in an ACI fabric with L2Out to N9K. Shared links allow spanning-tree to detect and suppress potential loops across multiple N9K devices, aligning with MCP (Multi-Chassis Point-to-Point) semantics in ACI for loop avoidance.A) Incorrect — point-to-point STP link type is used for dedicated single links, not multi-access L2Out paths where loop detection is needed.B) Incorrect — shared link was not the required STP setting in this context; it does not align with MCP behavior for loop protection in ACI.D) Incorrect — duplicates option A; point-to-point is not the correct setting for this scenario.
Refer to the exhibit. A legacy data center has a group of VLANs from 10 to 20 that must be migrated to the existing Cisco ACI fabric. The fabric must be configured such that the traffic remains undisrupted in the process, and the communication is allowed between migrated endpoints and host 1. A contract called Legacy_ACI_CTR is provided by Telco_EPG, and the VLAN pool [10-100] called "Physical_VLAN_Po" is configured. Which two actions must be taken to meet these requirements? (Choose two.)
Answer(s): A,B
MAP VLAN pool Physical_VLAN_Po under physical domain: To extend the VLANs from the legacy data center into the Cisco ACI fabric, the VLAN pool (in this case, "Physical_VLAN_Po" covering VLANs 10-100) must be mapped to the appropriate physical domain. This ensures the ACI fabric recognizes and associates the legacy VLANs with the correct physical connections.Extend EPG Telco_EPG over the configured path binding: To allow seamless communication between the legacy VLANs and the Cisco ACI environment, the Telco_EPG must be extended to the external paths connecting the legacy VLANs. Path binding ensures the VLANs can forward traffic to the host in the ACI fabric without disruption.
Refer to the exhibit. A Cisco ACI fabric has an L3Out OSPF connectivity with router R1. The Cisco ACI fabric must have only subnet 192.168.1.0/24 installed in the routing table. Which two configurations must be selected to accomplish this goal? (Choose two.)
Answer(s): B,C
Import Route Control Subnet: This option allows you to specify which external subnets should be imported into the ACI fabric's routing table. In this case, only the 192.168.1.0/24 subnet should be configured under Import Route Control Subnet.Import Route Control Enforcement: This setting ensures that the configured route control policies (such as the subnet filter for 192.168.1.0/24) are enforced when importing routes from the external router (R1) into the ACI fabric.
A Cisco ACI fabric has L3Out using BGP with the maximum number of BGP prefixes configured as 1000. The fabric must raise the fault when 1001 prefixes are learned and the prefix 1002 must not be learned. Which BGP peer prefix action accomplishes this goal?
The reject action raises the fault when the 1001st prefix arrives (exceeding the 1000-prefix limit) and then refuses any further prefixes, so prefix 1002 is not learned.
Post your Comments and Discuss Cisco 300-620 exam prep with other Community members:
Our website is free, but we have to fight against AI bots and content theft. We're sorry for the inconvenience caused by these security measures. You can access the rest of the 300-620 content, but please register or login to continue.