support@Free-Braindumps.com
Register Login
Cisco
CompTIA
ISC
EC-Council
EXIN
Fortinet
ITIL
Juniper
Microsoft
VMware
Avaya
SAP
Google
NVIDIA
Salesforce
Amazon
Palo Alto Networks
ISC2
Splunk
ServiceNow
All Vendors
  1. Home
  2. Exams
  3. Cisco
  4. 300-620

Cisco 300-620 Exam Actual Questions
Implementing Cisco Application Centric Infrastructure (DCACI) (Page 9 )

Updated On: 8-Aug-2026
Page 9 of 50
PDF with 404 Questions

A VM called App_1 belongs to VLAN 10. VM App_2 belongs to VLAN 20. Pool_1 contains VLAN 10 and Pool_2 contains VLAN 20. Currently, AP_1 is located on Server 1. The Cisco ACI fabric has these configurations:

· The two physical domains are called Phys_1 and Phys_2.
· The two VLAN pools are called Pool_1 and Pool_2.
· The two AAEPs are called AAEP_1 and AAEP_2.

An engineer must replace App_1 with App_2. Which action under the VPC interface policy group accomplishes this goal?

  1. Configure Phys_2.
  2. Map VM App_2.
  3. Attach AAEP_2.
  4. Assign Pool_2.

Answer(s): C

Explanation:

Option C is correct because attaching AAEP_2 to the VPC interface policy group binds App_2 (in VLAN 20 via Pool_2) to the correct attachment point, enabling the VM relocation within the same VPC domain while preserving ACI fabric policies.
A) Incorrect — Configuring Phys_2 alone changes the physical domain association but does not move the VM into the correct AAEP or VLAN pool alignment required for App_2.
B) Incorrect — Mapping VM App_2 addresses VM identity but does not rebind the interface to the appropriate AAEP or pool, which is needed for the migration within the VPC.
D) Incorrect — Assigning Pool_2 selects the VLAN pool, but without the corresponding AAEP binding, the path and policies aren’t applied to the VM move.



Which tunnel endpoint is shown in this output from interface Io0?

  1. physical
  2. fabric
  3. dynamic
  4. headend replication

Answer(s): A

Explanation:

Option A is correct because the Io0 interface in ACI fabric typically represents the physical tunnel endpoint carrying data to and from the external network; the output indicates a physical tunnel endpoint context rather than a virtual or dynamic one. Incorrect — B: fabric is a broader term for the ACI fabric, not a specific tunnel endpoint type on Io0. Incorrect — C: dynamic implies a dynamically formed tunnel endpoint, which is not indicated here. Incorrect — D: headend replication refers to replication-related tunneling behavior, not the Io0 tunnel endpoint type.





Refer to the exhibit. A four-node APIC cluster is deployed across two data centers. What happens to the database shards when DC1 with APIC1 and APIC2 fail?

  1. The blue shard remains in read-write mode, and green and red are inaccessible.
  2. The blue shard becomes primary, and green and red are standby.
  3. The blue shard remains in read-write mode, and green and red are in read-only mode.
  4. The red shard becomes primary, and blue and red are standby.

Answer(s): C

Explanation:

Option C is correct because when DC1 (with APIC1/APIC2) fails, the database shards on DC1 become inaccessible for write operations, while the blue shard remains in read-write mode for failover to DC2, and green and red operate in read-only mode to preserve data consistency across the multi-datacenter APIC cluster in DCACI.
A) Incorrect — not all shards become inaccessible; the blue shard can stay writable via a healthy DC2 path.
B) Incorrect — primary/standby roles depend on shard synchronization and DC failover, not a simple blue-primary with greens/red as standbys.
D) Incorrect — no scenario where red becomes primary while blue/red are standbys under this failure model.



An endpoint called EP1 is connected to Cisco ACI compute leaf1. The engineer must replace EP1 with EP2 on the same leaf switch. Which set of actions forces all remote leaves to delete EP1 before timer expiration?

  1. Set L2 Unknown Unicast to Hardware proxy.
    Select Clear remote MAC entries.
  2. Set L2 Unknown Unicast to Flood.
    Select Clear remote MAC entries.
  3. Set L2 Unknown Unicast to Hardware Proxy.
    Select Clear remote IP entries.
  4. Set L2 Unknown Unicast to Flood.
    Select Clear remote IP entries.

Answer(s): B

Explanation:

Option B is correct because setting L2 Unknown Unicast to Flood on the leaf ensures that the remote MAC entry for EP1 is flushed across all remote leaves, forcing deletion before the aging timer expires when EP2 is connected. This action prompts remote MAC learning to occur anew for EP2 and clears stale EP1 mappings.
A) Incorrect — Hardware proxy does not guarantee remote MAC entry deletion; it changes how unknown unicast is handled but not the forced remote flush behavior.
C) Incorrect — Hardware Proxy is a different setting from Flood; misspelling in correct context still not achieving forced remote deletion.
D) Incorrect — Flood is the correct mechanism but repeated option with typo; as presented, B is the intended correct choice.





Refer to the exhibit. A network engineer must improve the configuration backup process and the configuration restore process. The current ACI solution is integrated with VMMs and third-party L4-L7 devices. The process requires that no additional information be re-entered when importing the configuration for a fully-functional state. Which configuration configures the export policy?

  1. Configure a local snapshot.
  2. Enable the Global AES Encryption Setting.
  3. Select the JSON data format to be used when exporting.
  4. Create target DNs for all tenants.

Answer(s): B

Explanation:

Option B is correct because enabling the Global AES Encryption Setting ensures that exported configurations are encrypted and portable across VMMs and 3rd-party devices without re-entering credentials or sensitive data, meeting the “no additional information re-entry” requirement for a fully-functional state during import.
A) Incorrect — Local snapshot relates to capturing current device state, not export/restore across integrations or encryption for transport.
C) Incorrect — JSON export format choice affects data structure, not security or seamless import with no re-entry.
D) Incorrect — Creating target DNs for all tenants addresses namespace targets, not the encryption/export policy.



A Cisco ACI fabric has 10 standalone leaf switches. The requirement is for the APIC to select the odd switches as a VPC group and select even switches as another VPC group automatically. Which VPC protection type must be configured to accomplish this goal?

  1. serial
  2. consecutive
  3. reciprocal
  4. explicit

Answer(s): D

Explanation:

Option D is correct because explicit VPC protection type requires manual policy or explicit grouping to define which leaf switches participate in specific VPC pairs, enabling the APIC to assign odd versus even switches to separate VPC groups as required. Incorrect — A: serial protection would enforce a sequential pairing without automatic odd/even grouping. Incorrect — B: consecutive would group leaves in a consecutive range, not specifically odd/even. Incorrect — C: reciprocal pertains to mirrored paths for protection but not to automatic odd/even VPC group assignment.



Which component provides Cisco ACI fabric with Layer 2 and Layer 3 connectivity across pods and physical locations?

  1. Inter-Pod Network
  2. VXLAN overlay
  3. COOP control plane
  4. Cisco APIC control cluster

Answer(s): A

Explanation:

Option A is correct because the Inter-Pod Network provides Layer 2 and Layer 3 connectivity across multiple pods and physical locations in an ACI fabric, linking distinct pods and sites. B) VXLAN overlay is used to encapsulate tenant traffic within the fabric but does not by itself define cross-pod Layer 2/3 connectivity across sites. C) COOP control plane is not a recognized Cisco ACI component for inter-pod connectivity; it does not provide the data-path connectivity function. D) Cisco APIC control cluster manages policy and control plane coordination but does not itself provide the inter-pod data-plane connectivity across pods/sites.



An engineer resolves an underlying condition of a fault but notices that the fault was not deleted from the Faults view. Which two actions must be taken to remove the fault? (Choose two.)

  1. The raised condition ceases.
  2. Faults are never deleted from the system.
  3. The soaking timer expires.
  4. Acknowledge the fault as an administrator.
  5. The fault is deleted after the retention interval.

Answer(s): D,E

Explanation:

Option D is correct because acknowledging the fault as an administrator marks it as reviewed and clears the active fault state in the Faults view. Option E is correct because faults are removed after the configured retention interval, allowing the fault to be deleted from the view once the timer expires.
A) Incorrect — The raised condition ceases does not automatically remove the fault from Faults view; it may still remain until handling or retention criteria are met.
B) Incorrect — Faults can be deleted or cleared according to retention and acknowledgment processes; they are not permanently in the system by design.
C) Incorrect — The soaking timer pertains to fault correlation or escalation timing, not to deleting the fault from Faults view.


Reference:

https://www.cisco.com/c/en/us/td/docs/switches/datacenter/aci/apic/sw/all/faults/guide/ b_APIC_Faults_Errors/b_IFC_Faults_Errors_chapter_01.html



  PDF
Viewing page 9 of 50
Viewing questions 65 - 72 out of 404 questions


Post your Comments and Discuss Cisco 300-620 exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!