Which resolution immediacy setting allows a policy to be downloaded to the Cisco ACI leaf switch software regardless of CDP/LLDP neighborship?
Answer(s): C
The Pre-Provision resolution mode causes the policy to be sent straight to the leaf's software database immediately - without waiting for CDP/LLDP discovery - whereas On-Demand holds off until a neighbor is detected.
Refer to the exhibit.A Cisco ACI fabric has four access policy groups. The VPC reciprocal protection group has been defined. The N9K1 trunks VLANs 10-20 to ACI leaf switches. Which policy group must be associated with Eth1/1 and Eth1/2 to complete the deployment?
Answer(s): B
The fabric links from N9K1 to two separate ACI leaves form a VPC-style multi-node port channel. You must use the policy group with lagT = node (PEGRMET12_PolGrp) so that both Eth1/1 and Eth1/2 are treated as one portchannel across leaf1 and leaf2.
Which function does spine switch perform in the Cisco ACI fabric?
In an ACI fabric the spine's role is purely L3 - it terminates the VXLANGPE tunnels from the leaves, removes the outer VXLAN header (decapsulation), routes the packet to the correct leaf, then re-encapsulates it for onward delivery. The leaf switches handle bridging and policy enforcement, and neither store the full endpoint- to-VTEP mapping nor connect directly to traditional Ethernet devices.
Refer to the exhibit.A company deployed Cisco ACI and plans to migrate the first servers to the Cisco ACI fabric. The current network setup experiences a small number of silent hosts. What is the Cisco recommended bridge domain configuration to support the network topology presented?
When you extend an existing L3-switched network into ACI and keep the original SVI as the gateway, enabling Unicast Routing on the bridge domain lets the fabric advertise its host routes back to that SVI. Setting L2 Unknown Unicast to HW Proxy ensures the spine/leaf fabric will proxy ARP and unknown-unicast MAC requests for those migrated servers so that "silent" hosts are reachable without flooding.
An EPG is associated with a VMM domain. Which option must be set to allow the bridge domain and the VRF of the EPG to be instantiated on all leaf switches that discovered the ESXi host?
Setting the EPG's Deployment immediacy to On-Demand ensures that the bridge domain and VRF are only pushed down to - and instantiated on - the leaf switches that actually see the ESXi host, rather than all leaves up front.
On which endpoint type is the host tracking feature performed in the Cisco ACI fabric?
Answer(s): D
The host-tracking feature in ACI issues ARP/ND probes only for remote endpoints (those learned via unicast routing), in order to verify ongoing reachability. It does not run against purely local, bounce, or on-peer endpoint types.
A Cisco ACI fabric has detected EP1 with IP address 192.168.1.1 to MAC M1 on interface Eth1/1. The fabric is designed so that when EP1 is down, a new EP2 receives the same IP address with a different MAC M2 on the same interface Eth1/1. Which two features must be enabled to meet this requirement? (Choose two.)
Answer(s): A,D
ARP Flooding must be enabled on the Bridge Domain so that gratuitous ARPs from the replacement host actually flood through the fabric (otherwise the leafs' default proxy behavior would swallow them).GARP-Based Detection uses those flooded gratuitous ARP frames to detect the IP/MAC change and promptly clear the old endpoint entry when the new host comes up on the same port.
Refer to the exhibit.An engineer migrates a legacy data center to a new Cisco ACI fabric. The new deployment must raise a fault if a Layer 2 loop is detected from the external networking devices. Due to the large number of workloads still running on the legacy network, the interconnection links must not be disabled. The engineer has already enabled the MCP globally. Which configuration completes the configuration?
By default, Mis-Cabling Protocol (MCP) BPDUs are only sent in the native VLAN. To detect loops in the other VLANs carried across your legacy trunk, you must enable per-VLAN MCP so that an MCP PDU is transmitted in each VLAN on those interfaces; this raises the loopdetection fault without disabling the ports.
Share your comments for Cisco 300-620 exam with other users:
good questions with simple explanation
admin guide (windows) respond to malicious causality chains. when the cortex xdr agent identifies a remote network connection that attempts to perform malicious activity—such as encrypting endpoint files—the agent can automatically block the ip address to close all existing communication and block new connections from this ip address to the endpoint. when cortex xdrblocks an ip address per endpoint, that address remains blocked throughout all agent profiles and policies, including any host-firewall policy rules. you can view the list of all blocked ip addresses per endpoint from the action center, as well as unblock them to re-enable communication as appropriate. this module is supported with cortex xdr agent 7.3.0 and later. select the action mode to take when the cortex xdr agent detects remote malicious causality chains: enabled (default)—terminate connection and block ip address of the remote connection. disabled—do not block remote ip addresses. to allow specific and known s
very inciting
question 5, it seems a instead of d, because: - care plan = case - patient = person account - product = product2;
it look like real one
i am taking oracle fcc certification test next two days, pls share question dumps
i need dumps
its time to comptia sec+
question 35 has an answer for a different question. i believe the answer is "a" because it shut off the firewall. "0" in registry data means that its false (aka off).
helpful content
oracle 19c is complex db
helpful for practice
support team is fast and deeply knowledgeable. i appreciate that a lot.
helpful questions
thanks for question
the software is provided for free so this is a big change. all other sites are charging for that. also that fucking examtopic site that says free is not free at all. you are hit with a pay-wall.
i need exam questions nca 6.5 any help please ?
just took the comptia cybersecurity analyst (cysa+) - wished id seeing this before my exam
very helpful
i need this exam
nice questions... are these questions the same of the exam?
need to view
highly appreciate for your sharing.
kindly share this dump. thank you
link plz for download
data quality oecd
rman is one good recovery technology
need it thx
good questions
good one nice revision
i love this thank you i need
question # 142: data governance is not one of the deliverables in the document and content management context diagram.
most answers not correct here
what % of questions do we get in the real exam?
Keeping this site free takes real effort. We constantly battle automated scraping and unauthorized content copying. A quick account helps us protect the community and keep the site free.
To continue studying for your 300-620, please sign in or create a free account.