The company ESXi infrastructure is hosted on the Cisco UCS-B Blade Servers. The company decided to take advantage of ACI VMM integration to enable consistent enforcement of policies across virtual and physical workloads. The requirement is to prevent the packet loss between the distributed virtual switch and the ACI fabric. Which setting must be implemented on a vSwitch policy to accomplish this goal?
Answer(s): B
Option B is correct because MAC Pinning preserves the VM MAC-to-FE mapping across vNICs, ensuring stable, policy-consistent traffic steering between the distributed virtual switch and the ACI fabric, which is essential to prevent packet loss in VMM-integrated deployments. A) Static Channel is not specific to VM traffic consistency with ACI; it relates to NIC teaming at link aggregation but does not guarantee MAC-to-port stability across fabric integration. C) LACP is a port-channel protocol; while useful for link aggregation, it does not directly address MAC synchronization or policy enforcement between vSwitch and ACI. D) LLDP assists neighbor discovery and topology, but it does not ensure MAC-level pinning necessary for VMM-ACI policy consistency.
An engineer is configuring ACI VMM domain integration with Cisco UCS-B Series. Which type of port channel policy must be configured in the vSwitch policy?
Option B is correct because MAC Pinning in the vSwitch policy is required for proper binding of virtual NICs to a particular UCS-B uplink in an ACI VMM domain integration, ensuring stable VM-to-physical-NNIC mapping and optimal traffic steering.A) Incorrect — LACP Active is not the mandated vSwitch policy for UCS-B VMM integration; ACI typically relies on pinning for stable mapping rather than dynamic link aggregation behavior in this context.C) Incorrect — LACP Passive is not the required setting; active LACP negotiation is not the specified policy for this integration.D) Incorrect — MAC Pinning-Physical-NIC-load is not a standard vSwitch policy term used here; the correct policy is MAC Pinning.
https://www.cisco.com/c/en/us/support/docs/cloud-systems-management/application-policy- infrastructure-controller-apic/118965-config-vmm-aci-ucs-00.html
A Cisco ACI is integrated with a VMware vSphere environment. The port groups must be created automatically in vSphere and propagated to hypervisors when created in the ACI environment. Which action accomplishes this goal?
Answer(s): D
Option D is correct because association of the VMM domain with the EPGs enables VMware vCenter/vSphere integration, allowing ACI to push and synchronize EPG-defined policies and port groups automatically into vCenter, which propagates to ESXi hosts.A) Incorrect — Creating port groups on vCenter manually does not leverage ACI-driven automatic propagation from APIC; it bypasses VMM integration.B) Incorrect — Assigning ESXi uplinks to the vDS created by APIC does not automatically create or synchronize port groups from EPGs to vCenter.C) Incorrect — Configuring contracts governs security/application policies, not automatic port-group provisioning in vCenter/ESXi.
A network engineer is integrating a new Hyperflex storage duster into an existing Cisco ACI fabric. The Hyperflex cluster must be managed by vCenter, so a new vSphere Distributed switch must be created. In addition, the hardware discovery must be performed by a vendor-neutral discovery protocol. Which set of steps meets these requirements?
Option B is correct because LLDP is the vendor-neutral discovery protocol used for hardware discovery in Cisco ACI when integrating external storage like HyperFlex, ensuring discoverability without relying on vendor-specific protocols. The Interface Policy group with LLDP allows consistent interface-level discovery configuration across the new VMware VMM domain.A) Incorrect — CDP is vendor-specific (Cisco Proprietary); using it would not satisfy “vendor-neutral discovery protocol.”C) Incorrect — Switch Policy group is not the required policy type for interface discovery; LLDP is used with Interface Policy groups.D) Incorrect — Although CDP is vendor-specific, the combination here would not meet the vendor-neutral discovery requirement and misalign with the policy type.
What is the result of selecting the On Demand attribute in the Deploy Immediacy feature during VMM domain association to an EPG?
Option D is correct because On Demand in Deploy Immediacy schedules programming of the EPG policy into the hardware policy CAM only when the first data-path packet arrives, ensuring runtime activation. A) Incorrect — policy CAM programming is not triggered merely by policy download; it requires data-path activity. B) Incorrect — leaf programming is not tied to hypervisor attachment or CDP/LLDP adjacency events. C) Incorrect — VM placement in a port group alone does not initiate hardware CAM programming without data-path activity.
An engineer must configure a service graph for the policy-based redirect to redirect traffic to a transparent firewall. The policy must be vendor-agnostic to support any firewall appliance. Which two actions accomplish these goals? (Choose two.)
Answer(s): B,D
Option B is correct because setting Service Type to Other enables a vendor-agnostic service graph in ACI, allowing arbitrary firewall appliances to be integrated without assuming a specific vendor’s API or type. Option D is correct because setting Function Type to L2 ensures the traffic is passed at layer 2, preserving frames for transparent firewall inspection and avoiding L3-specific expectations that would tie to a particular appliance. Incorrect — A: Context Aware to Single is unrelated to vendor neutrality or transparent redirection. C: Promiscuous Mode True is not required for vendor-agnostic policy graphs. E: Managed True implies device management but not the service-graph characteristics needed.
An engineer associates EPG-A with a VMM domain and sets the Deployment and Resolution preferences to Immediate. The host that will generate endpoints for EPG-A is attached to Leaf-101 and Leaf-102 using etht1/1. However, no configuration for EPG-A appears to have been pushed to the leaf switches. Which action must be taken for the configuration to be pushed to Leaf-101 and Leaf-102?
Answer(s): A
Option A is correct because enabling CDP or LLDP on the host allows ABX to discover the host via the VMM domain and propagate endpoint and virtualization data to the APIC/Leaf, triggering the configuration push for EPG-A. Incorrect options: B) LACP on leaf ports is for link aggregation, not related to endpoint discovery or EPG push; C) Cycling eth1/1 on both leaves is not a valid mechanism to push EPG config; D) Trunking configuration on the ports governs VLAN tagging, not the trigger to push EPG configuration from the VMM domain.
A Cisco ACI fabric is integrated with VMware VDS. The fabric must apply a security policy to check the integrity of traffic out of the network adapter. Which action must be taken to drop the packet when the ESXi host discovers a mismatch between the actual source MAC address transmitted by the guest operating system and the effective MAC address of the virtual machine adapter?
Option B is correct because "Reject forged transmits" enforces a policy to drop packets when the source MAC observed on egress does not match the VM’s effective MAC, preventing MAC spoofing/fabric mismatch as part of VDS integration with ACI. Incorrect:A) Reject MAC changes—implies rejecting legitimate MAC changes rather than forged transmits; not the standard policy for VM spoofing in this context.C) Accept MAC changes—allows mismatched MACs, defeating integrity check.D) Accept forged transmits—would permit spoofed packets, contradicting the security requirement.
Post your Comments and Discuss Cisco 300-620 exam prep with other Community members:
Our website is free, but we have to fight against AI bots and content theft. We're sorry for the inconvenience caused by these security measures. You can access the rest of the 300-620 content, but please register or login to continue.