Refer to the exhibit. Which two components should be configured as route reflectors in the ACI fabric? (Choose two.)
Answer(s): A,C
Option A is correct because Spine1 functions as a route reflector in a typical ACI fabric design, providing BGP route reflections for external routes and maintaining control plane efficiency. Option C is correct because Spine2 also acts as a route reflector to ensure redundancy and full-mesh IBGP propagation of routing information between leaf and spine pairs.Incorrect — B) apic1: APIC controllers are not route reflectors in standard ACI BGP fabric; they manage policy and fabric control, not RR duties. Incorrect — D) Leaf1: Leafs do not reflect routes; they are endpoints for host connectivity. Incorrect — E) Leaf2: Same as Leaf1; not a route reflector. Incorrect — F) apic2: APICs are management/control plane components, not RRs. (Insufficient knowledge line omitted per instruction)
When creating a subnet within a bridge domain, which configuration option is used to specify the network visibility of the subnet?
Answer(s): B
Option B is correct because the scope setting within a bridge domain subnet defines the network visibility, controlling which endpoints and routes are visible within that subnet in ACI. Incorrect — A) limit IP learning to subnet is not a standard ACI subnet visibility parameter. Incorrect — C) gateway IP specifies next-hop rather than visibility scope. Incorrect — D) subnet control is not the term used to designate network visibility in a subnet within a bridge domain.
https://www.cisco.com/c/en/us/td/docs/switches/datacenter/aci/apic/sw/1-x/Operating_ACI/guide/ b_Cisco_Operating_ACI/b_Cisco_Operating_ACI_chapter_0111.html#concept_
What does a bridge domain represent?
Option B is correct because a bridge domain in ACI represents a Layer 2 forwarding construct within an EPG/tenant, used to forward frames within a broadcast domain. Incorrect — A: Layer 3 cloud refers to routable IP networks, not L2 forwarding domains. Incorrect — C: tenant denotes a management boundary containing APIC objects, not the L2 forwarding construct itself. Incorrect — D: physical domain describes the physical topology or fabric nodes, not the L2 bridge domain concept.
https://www.cisco.com/c/en/us/td/docs/switches/datacenter/aci/apic/sw/2-x/L2_config/ b_Cisco_APIC_Layer_2_Configuration_Guide/b_Cisco_APIC_Layer_2_Configuration_Guide_chapter_010.html
Which table holds IP address, MAC address and VXLAN/VLAN information on a Cisco ACI leaf?
Answer(s): A
Option A is correct because the endpoint table in Cisco ACI stores host identity information including IP address, MAC address, and VXLAN/VLAN mapping for endpoints learned on the leaf. B) adjacency is not a standard ACI table for endpoint identity; it represents neighbor relationships in routing contexts, not endpoint mappings. C) RIB stores routing information, not per-endpoint MAC/IP to VXLAN/VLAN mappings. D) ARP relates IP-to-MAC resolution but is not a persistent ACI table that holds VXLAN/VLAN associations for endpoints. INSUFFICIENT_KNOWLEDGE
https://www.cisco.com/c/en/us/solutions/collateral/data-center-virtualization/application-centric- infrastructure/white-paper-c11-739989.html
Which two types of interfaces are supported on border leaf switches to connect to an external router? (Choose two.)
Answer(s): B,E
Option B is correct because border leaves connect to external routers using 802.1Q subinterfaces to carry VXLAN/VTEP traffic and route over VLANs, aligning with DCACI border adjacency requirements. Option E is correct since a Switch Virtual Interface (SVI) on border leaves provides Layer 3 termination for interconnecting routers and external networks.A) Incorrect — subinterface with VXLAN tagging: DCACI uses VXLAN overlay, but external router connectivity relies on 802.1Q subinterfaces, not VXLAN tagging on the external border link.C) Incorrect — FEX host interface: FEX is for fabric expansion, not for external router connectivity on border leaves.D) Incorrect — out of band interface: Out-of-band management is separate from data-plane border connectivity.A) Incomplete/B is correct.
Which Cisco APIC configuration prevents a remote network that is not configured on the bridge domain from being learned by the fabric?
Option A is correct because enabling Limit IP Learning to Subnet confines IP learning to the configured subnets within the bridge domain, preventing learning of remote networks not defined on the BD. Incorrect — B: enable Unicast Routing affects routing behavior, not limiting IP learning by subnet scope. Incorrect — C: enable IP Data-plane Learning governs how IPs are learned on the data plane but does not enforce subnet-based learning boundaries for remote networks. Incorrect — D: enable ARP Flooding to BD controls ARP flooding behavior, not IP learning scope for remote networks.
https://www.cisco.com/c/en/us/solutions/collateral/data-center-virtualization/application-centric-infrastructure/ white-paper-c11-739989.html
An engineer needs to deploy a leaf access port policy group in ACI Fabric to support the following requirements:Control the amount of application data flowing into the systemAllow the newly connected device to auto-negotiate link speed with the leaf switchWhich two ACI policies must be configured to achieve these requirements? (Choose two.)
Answer(s): A,D
Option A is correct because a link level policy in ACI governs per-link characteristics such as allowed speeds and auto-negotiate behavior between the host/edge device and the leaf switch, satisfying the auto-negotiation requirement for the leaf access port policy group. Option D is correct because an ingress data plane policing (DPP) policy controls and limits the amount of application data entering the fabric, meeting the data-flow control requirement.Incorrect:B) L2 interface policy governs basic Layer 2 interface settings but does not specifically enforce data-rate control or auto-negotiation behavior.C) slow drain policy pertains to buffering and draining excess traffic, not to auto-negotiation or ingress data-rate control at the link level.E) ingress control plane policing policy is used to limit control plane traffic, not general data-plane application data ingress.
https://www.cisco.com/c/en/us/td/docs/switches/datacenter/aci/apic/sw/kb/ b_Cisco_ACI_and_Forward_Error_Correction.htmlhttps://www.cisco.com/c/en/us/td/docs/switches/datacenter/aci/apic/sw/4-x/security/Cisco-APIC-Security- Configuration-Guide-401/b_Cisco_APIC_Security_Guide_chapter_01110.html#:~:text=Use%20data%20plane %20policing%20(DPP,dropping%20of%20packets%20occurs%20immediately.
A customer migrates a legacy environment to Cisco ACI. A Layer 2 trunk is configured to interconnect the two environments. The customer also builds ACI fabric in an application-centric mode. Which feature should be enabled in the bridge domain to reduce instability during the migration?
Answer(s): C
Option C is correct because enabling Multi-Destination Flooding to Flood in Encapsulation ensures that unknown or multicast traffic across the bridge domain is flooded consistently when bridging between legacy L2 and ACI in application-centric mode, reducing instability during migration. This accommodates mixed environments where some endpoints may not yet be learned or correctly migrated, preventing blackholing or selective flooding issues.A) Incorrect — Flood in BD is not specifically tied to encapsulation behavior and may not address cross-encap instability during migration.B) Incorrect — Flood in Encapsulation is not the designated behavior for BD instability in this scenario.D) Incorrect — Disabling Endpoint Dataplane Learning would hinder mobility and learning, increasing instability.
Post your Comments and Discuss Cisco 300-620 exam prep with other Community members: