Which resolution immediacy setting allows a policy to be downloaded to the Cisco ACI leaf switch software regardless of CDP/LLDP neighborship?
Answer(s): C
The Pre-Provision resolution mode causes the policy to be sent straight to the leaf's software database immediately - without waiting for CDP/LLDP discovery - whereas On-Demand holds off until a neighbor is detected.
Refer to the exhibit.A Cisco ACI fabric has four access policy groups. The VPC reciprocal protection group has been defined. The N9K1 trunks VLANs 10-20 to ACI leaf switches. Which policy group must be associated with Eth1/1 and Eth1/2 to complete the deployment?
Answer(s): B
The fabric links from N9K1 to two separate ACI leaves form a VPC-style multi-node port channel. You must use the policy group with lagT = node (PEGRMET12_PolGrp) so that both Eth1/1 and Eth1/2 are treated as one portchannel across leaf1 and leaf2.
Which function does spine switch perform in the Cisco ACI fabric?
In an ACI fabric the spine's role is purely L3 - it terminates the VXLANGPE tunnels from the leaves, removes the outer VXLAN header (decapsulation), routes the packet to the correct leaf, then re-encapsulates it for onward delivery. The leaf switches handle bridging and policy enforcement, and neither store the full endpoint- to-VTEP mapping nor connect directly to traditional Ethernet devices.
Refer to the exhibit.A company deployed Cisco ACI and plans to migrate the first servers to the Cisco ACI fabric. The current network setup experiences a small number of silent hosts. What is the Cisco recommended bridge domain configuration to support the network topology presented?
When you extend an existing L3-switched network into ACI and keep the original SVI as the gateway, enabling Unicast Routing on the bridge domain lets the fabric advertise its host routes back to that SVI. Setting L2 Unknown Unicast to HW Proxy ensures the spine/leaf fabric will proxy ARP and unknown-unicast MAC requests for those migrated servers so that "silent" hosts are reachable without flooding.
An EPG is associated with a VMM domain. Which option must be set to allow the bridge domain and the VRF of the EPG to be instantiated on all leaf switches that discovered the ESXi host?
Setting the EPG's Deployment immediacy to On-Demand ensures that the bridge domain and VRF are only pushed down to - and instantiated on - the leaf switches that actually see the ESXi host, rather than all leaves up front.
On which endpoint type is the host tracking feature performed in the Cisco ACI fabric?
Answer(s): D
The host-tracking feature in ACI issues ARP/ND probes only for remote endpoints (those learned via unicast routing), in order to verify ongoing reachability. It does not run against purely local, bounce, or on-peer endpoint types.
A Cisco ACI fabric has detected EP1 with IP address 192.168.1.1 to MAC M1 on interface Eth1/1. The fabric is designed so that when EP1 is down, a new EP2 receives the same IP address with a different MAC M2 on the same interface Eth1/1. Which two features must be enabled to meet this requirement? (Choose two.)
Answer(s): A,D
ARP Flooding must be enabled on the Bridge Domain so that gratuitous ARPs from the replacement host actually flood through the fabric (otherwise the leafs' default proxy behavior would swallow them).GARP-Based Detection uses those flooded gratuitous ARP frames to detect the IP/MAC change and promptly clear the old endpoint entry when the new host comes up on the same port.
Refer to the exhibit.An engineer migrates a legacy data center to a new Cisco ACI fabric. The new deployment must raise a fault if a Layer 2 loop is detected from the external networking devices. Due to the large number of workloads still running on the legacy network, the interconnection links must not be disabled. The engineer has already enabled the MCP globally. Which configuration completes the configuration?
By default, Mis-Cabling Protocol (MCP) BPDUs are only sent in the native VLAN. To detect loops in the other VLANs carried across your legacy trunk, you must enable per-VLAN MCP so that an MCP PDU is transmitted in each VLAN on those interfaces; this raises the loopdetection fault without disabling the ports.
Share your comments for Cisco 300-620 exam with other users:
i need ielts general training audio guide questions
please make this content available
content is good
latest dumps please
aside from pdf the test engine software is helpful. the interface is user-friendly and intuitive, making it easy to navigate and find the questions.
questions and options are correct, but the answers are wrong sometimes. so please check twice or refer some other platform for the right answer
90% of questions was there but i failed the exam, i marked the answers as per the guide but looks like they are not accurate , if not i would have passed the exam given that i saw about 45 of 50 questions from dump
answer to this question "what administrative safeguards should be implemented to protect the collected data while in use by manasa and her product management team? " it should be (c) for the following reasons: this administrative safeguard involves controlling access to collected data by ensuring that only individuals who need the data for their job responsibilities have access to it. this helps minimize the risk of unauthorized access and potential misuse of sensitive information. while other options such as (a) documenting data flows and (b) conducting a privacy impact assessment (pia) are important steps in data protection, implementing a "need to know" access policy directly addresses the issue of protecting data while in use by limiting access to those who require it for legitimate purposes. (d) is not directly related to safeguarding data during use; it focuses on data transfers and location.
password lockout being the correct answer for question 37 does not make sense. it should be geofencing.
for question 4, the righr answer is :recover automatically from failures
question number 4s answer is 3, option c. i
very good questions
i am confused about the answers to the questions. are the answers correct?
very usefull
need certification.
great exam prep
i require dump
good morning, could you please upload this exam again,
hi can you please upload the dumps for sap contingent module. thanks
good questions
looking forward to the real exam
good ones for exam preparation
this is a good experience
hi everyone
waiting for the dump. please upload.
upload cks exam questions
awesome training material
where is dump
q. 289 - the correct answer should be b not d, since the question asks for the most secure way to provide access to a s3 bucket (a single one), and by principle of the least privilege you should not be giving access to all buckets.
please i need if possible h12-831,
good collection of questions and solution for pl500 certification
i would like to appear the exam.
i am very happy as i cleared my comptia a+ 220-1101 exam. i studied from as it has all exam dumps and mock tests available. i got 91% on the test.
need this dump
Keeping this site free takes real effort. We constantly battle automated scraping and unauthorized content copying. A quick account helps us protect the community and keep the site free.
To continue studying for your 300-620, please sign in or create a free account.