DRAG DROP (Drag and Drop is not supported)An engineer is configuring a VRF for a tenant named Cisco. Drag and drop the child objects on the left onto the correct containers on the right for this configuration.Select and Place:
Answer(s): A
Which feature dynamically assigns or modifies the EPG association of virtual machines based on their attributes?
Answer(s): D
Option D is correct because uSeg EPGs (universal segmentation EPGs) dynamically assign or modify VM-to-EPG associations based on VM attributes, enabling policy-driven placement without manual reconfiguration. A) vzAny contracts are dynamic filters for consuming contracts but do not control EPG VM-to-EPG mapping. B) standard contracts define how endpoints in EPGs exchange policy, not dynamic VM-to-EPG assignment. C) application EPGs are logical groupings but do not inherently implement attribute-based dynamic association of VMs to EPGs.
Which feature allows firewall ACLs to be configured automatically when new endpoints are attached to an EPG?
Answer(s): B
Option B is correct because dynamic endpoint attach enables automatic creation and association of firewall ACLs when new endpoints join an EPG, aligning security policies with endpoint attachment events in ACI.A) Incorrect — ARP gleaning relates to learning MAC/IP mappings for ARP requests, not automatic ACL propagation on endpoint attach.C) Incorrect — hardware proxy (or vPC/hardware proxy) involves forwarding behaviors or policy proxies, not automatic ACL generation on EPG attachment.D) Incorrect — network-stitching refers to extending L3 networks across fabrics, not automatic ACLs tied to EPG endpoint attachment.
An engineer is implementing Cisco ACI at a large platform-as-a-service provider using APIC controllers, 9396PX leaf switches, and 9336PQ spine switches. The leaf switch ports are configured as IEEE 802.1p ports. Where does the traffic exit from the EPG in IEEE 802.1p mode in this configuration?
Option A is correct because in IEEE 802.1p mode, EPG traffic is sent egressing through leaf ports that are configured as VLAN 0 (PVID 0) to preserve the QoS class tagging at the edge of the fabric. Incorrect — B: IEEE 802.1p mode uses VLAN tagging to carry DSCP/priority, not untagged egress. Incorrect — C: VLAN 4094 is not used as the standard egress VLAN for 802.1p mode in ACI. Incorrect — D: VLAN 1 is not the designated egress VLAN for 802.1p mode in this topology.
How is an EPG extended outside of the ACI fabric?
Option D) correct — Extending an EPG outside the ACI fabric is achieved by statically assigning a VLAN ID to a leaf port in an EPG, which maps the EPG to a specific external VLAN, enabling connectivity to external networks.A) Incorrect — Creating an external bridged network on a leaf port is not the standard EPG extension method; ACI uses VLAN mappings rather than a separate “external bridged network” construct for EPG extension.B) Incorrect — External routed networks are not the mechanism for extending an EPG; EPG-to-external connectivity relies on VLAN mappings, not an external routed network assignment.C) Incorrect — Enabling unicast routing within an EPG pertains to internal IP reachability, not extending the EPG to external networks via VLAN tagging.
https://www.dclessons.com/l2-external-network-with-aci
DRAG DROP (Drag and Drop is not supported)Drag and drop the Cisco ACI filter entry options from the left onto the correct categories on the right indicating what are required or optional parameters.Select and Place:
https://www.cisco.com/c/en/us/td/docs/switches/datacenter/aci/apic/sw/1-x/Operating_ACI/guide/ b_Cisco_Operating_ACI/b_Cisco_Operating_ACI_chapter_01000.html
Where is the COOP database located?
Option B is correct because the COOP (Cisco One Operational Processor) database is associated with the Spine/COOP data plane in DCACI architectures, aligning with controller and fabric coordination roles at the spine layer. A) Incorrect — leaf nodes host leaf switch data/control, not COOP DB. C) Incorrect — APIC is the management/control plane in DCACI but COOP DB location is not there. D) Incorrect — endpoint devices are endpoints, not where COOP DB resides.
https://www.cisco.com/c/en/us/solutions/collateral/data-center-virtualization/application-centric- infrastructure/white-paper-c11-739989.html
Which statement describes the initial APIC cluster discovery process?
Option A is correct because during initial APIC cluster discovery, the APIC uses an internal IP address assigned from a management pool to communicate with and bootstrap the cluster, enabling node discovery and controller communication. Incorrect — B: AVs (authority/attribute values) are not assigned to switches by the APIC in initial discovery. Incorrect — C: CDP is not used for APIC-to-APIC cluster discovery in ACI; fabric discovery relies on out-of-band management and API/ECMP mechanisms, not CDP. Incorrect — D: Fabric discovery starts from leaf/spine role awareness, but the initial cluster bootstrap is driven by APIC management IPs, not fabric-wide discovery from spine first.
https://www.cisco.com/c/en/us/td/docs/switches/datacenter/aci/apic/sw/1-x/aci-fundamentals/b_ACI- Fundamentals/m_provisioning.html#concept_
Share your comments for Cisco 300-620 exam with other users:
need 1z0-1105-22 exam
this is a beautiful tool. passed after a week of studying.
can you please upload the dumps for 1z0-1096-23 for oracle
its intresting, i would like to learn more abouth this
q252: dns poisoning is the correct answer, not locator redirection. beaconing is detected from a host. this indicates that the system has been infected with malware, which could be the source of local dns poisoning. location redirection works by either embedding the redirection in the original websites code or having a user click on a url that has an embedded redirect. since users at a different office are not getting redirected, it isnt an embedded redirection on the original website and since the user is manually typing in the url and not clicking a link, it isnt a modified link.
helpful dump questions
question 423 eigrp uses metric
hello nice dumps
good resource for learning
very useful
physical tempering techniques
its giving best technical knowledge
please upload
great question with explanation thanks!!
does this exam have lab sections?
please upload the braindump for .net
i need this exam 1z0-1107-2. please.
very useful!
for this question - "which three type of basic patient or member information is displayed on the patient info component? (choose three.)", list of conditions is not displayed (it is displayed in patient card, not patient info). so should be thumbnail of chatter photo
q52 should be d. vm storage controller bandwidth represents the amount of data (in terms of bandwidth) that a vms storage controller is using to read and write data to the storage fabric.
nice questions
question # 208: failure logs is not an example of operational metadata.
good questions
thank you for the test materials!
its very helpful
good questons
i need the dumb of the hcip security v4.0 exam
upload the dump please
yes, iam looking this
please upload cima e2 managing performance dumps
wonderful questions