New ESXi hosts are procured in a data center compute expansion project. An engineer must update the configuration on the Cisco APIC controllers to support the addition of the new servers to the existing VMM domain. Which action should be taken to support this change?
Answer(s): D
Option D is correct because mapping the leaf interface selector to the AEP associated with the VMM domain ensures the new ESXi hosts’ NICs are properly associated to the correct AEP and VMM domain, allowing APIC to program MAC/IP/Encapsulation path updates for the new compute resources. A) Creating a range of internal VLANs in the VLAN pool is not required for expanding a VMM domain; VLAN pools control scope of VLAN IDs but do not attach new hosts to a VMM domain. B) Setting encapsulation to VXLAN is relevant for VXLAN fabric traffic, but VMM domain expansion relies on AEP/Leaf mapping, not encapsulation mode. C) Enabling infrastructure VLAN in the AEP is not the mechanism to attach new servers to an existing VMM domain; it governs infra connectivity, not domain enrollment.
DRAG DROP (Drag and Drop is not supported)Refer to the exhibit. A Cisco ACI fabric is newly deployed, and the security team requires more visibility of all inter EPG traffic flows. All traffic in a VRF must be forwarded to an existing firewall pair. During failover, the standby firewall must continue to use the same IP and MAC as the primary firewall. Drag and drop the steps from the left into the implementation order on the right to configure the service graph that meets the requirements. (Not all steps are used.)Select and Place:
Answer(s): A
https://www.cisco.com/c/en/us/td/docs/switches/datacenter/aci/apic/sw/3-x/L4- L7_services_deployment/3_2_1/b_L4L7_Deploy_321/b_L4L7_Deploy_321_chapter_01001.html
An engineer must advertise a selection of external networks learned from a BGP neighbor into the ACI fabric. Which L3Out subnet configuration option creates an inbound route map for route filtering?
Answer(s): C
Option C is correct because Import Route Control Subnet enables the creation of an inbound route map for filtering routes learned from an external BGP neighbor into the ACI fabric via L3Out, allowing selective import policies. Incorrect — A: External Subnets for the External EPG defines which external subnets are associated with the EPG, not route-filtering inbound via a map. Incorrect — B: Shared Route Control Subnet is used for shared route control but does not specify an inbound route-map mechanism. Incorrect — D: Shared Security Import Subnet pertains to security import scope, not route filtering for L3Out.
An engineer must set up a Cisco ACI fabric to send Syslog messages related to hardware events, such as chassis line card failures. The messages should be sent to a dedicated Syslog server. Where in the Cisco APIC should the policy be configured to meet this requirement?
Option C is correct because Syslog configuration for hardware events in an APIC-driven ACI fabric is applied under the fabric monitoring scope, specifically uni/fabric/monfab-default, which governs fabric-wide monitoring policies and destinations for event streams such as chassis/hardware faults to a dedicated Syslog server.A) uni/tn-common/monepg-default is for tenant-level monitor/export policies, not fabric-wide hardware event Syslog targets.B) uni/infra/monifra-default covers infrastructure monitoring at the infra level but not the fabric-wide Syslog destination.D) uni/fabric/moncommon represents common fabric monitoring but is not the defined default for fabric-wide Syslog server destinations.
The existing network and ACI fabric have been connected to support workload migration. Servers will physically terminate at the Cisco ACI, but their gateway must stay in the existing network. The solution needs to adhere to Cisco's best practices. The engineer started configuring the relevant Bridge Domain and needs to complete the configuration. Which group of settings are required to meet these requirements?
Answer(s): B
Option B is correct because L2 Unknown Unicast: Flood is the appropriate default for bridging in an ACI-BD integration when host gateways reside outside but endpoints are in the BD; it ensures unknown unicast frames are flooded within the BD while keeping known unicast efficient handling for in-fabric paths.A) Incorrect — Hardware Proxy is not required here; it offloads unknown unicast handling to endpoints and is not aligned with the described gateway separation or best practice for this scenario.C) Incorrect — Repeats B with the same label; duplication not allowed in this context and does not change behavior.D) Incorrect — Hardware Proxy is not applicable to this configuration as described; it does not reflect the needed flood behavior for unknown unicast in the BD.
An engineer must implement management policy and data plane separation in the Cisco ACI fabric. Which ACI object must be created in Cisco APIC to accomplish this goal?
Option B is correct because a Tenant in Cisco ACI provides the top-level administrative boundary and isolation for management and data plane policies, enabling separation between different domains. Application profiles (A) define how endpoints consume services but do not by themselves enforce management/data plane separation. Contracts (C) control inter-EPG communication but sit under a tenant and do not establish isolation boundaries. Bridge domains (D) represent L2 forwarding domains within an EPG but not the overarching isolation boundary between management and data planes. INSUFFICIENT_KNOWLEDGE
An engineer is implementing a Cisco ACI environment that consists of more than 20 servers. Two of the servers support only Cisco Discovery Protocol with no other link discovery protocol. The engineer wants the servers to be discovered automatically by the Cisco ACI fabric when connected. Which action must be taken to meet this requirement?
Option B is correct because Cisco ACI uses policy-based automation where higher-order interface policies can enable specific L2/L3 features like Cisco Discovery Protocol (CDP) for the interface on the leaf. Elevating the policy ensures CDP is active on the port to allow discovery of the servers that support only CDP.A is incorrect because an override policy is not the correct mechanism to enable CDP at the interface level for automatic discovery; overrides are for exceptions, not standard auto-discovery activation.C is incorrect because a lower-order policy group would not guarantee CDP activation when needed; policy precedence requires a higher-order config.D is incorrect because disabling LLDP via an interface profile would not enable CDP-based discovery; LLDP affects LLDP, not CDP discovery behavior.
An engineer wants to monitor all configuration changes, threshold crossing, and link-state transitions in a Cisco ACI fabric. Which action must be taken to receive the required messages?
Option C is correct because including Audit Logs and Events in the Syslog source policy ensures messages about configuration changes, threshold crossings, and link-state transitions are sent to the Syslog server for comprehensive monitoring in ACI.A) Incorrect — Faults and Events in the monitor policy do not guarantee the full range of configuration-change and link-state transition messages; rely on Syslog for centralized logging.B) Incorrect — Session Logs and Audit Logs alone do not map to the Syslog source policy for all event types described; Syslog policy is needed.D) Incorrect — Events and Session Logs in the Syslog source policy do not cover all required audit and configuration-change messages as Audit Logs are essential.
Share your comments for Cisco 300-620 exam with other users:
I have to say this is really close to real exam. Passed my exam with this.
good analytics question
this looks accurate
question 46, the answer should be data "virtualization" (not visualization).
its useful.
Pass this exam 3 days ago. The PDF version and the Xengine App is quite useful.
informative for me.
question 134s answer shoule be "dlp"
in 72 the answer must be [sys_user_has_role] table.
i appreciated the mix of multiple-choice and short answer questions. i passed my exam this morning.
great to find this website, thanks
examination questions seem to be relevant.
planning to take psm test
please allow to download
please provide dumps
is the answer to question 15 correct ? i feel like the answer should be b
its getting more technical
i think these questions are what i need.
helpful assessment
i am confused about the answers to the questions. do you know if the answers are correct?
hi, please make the dumps available for my upcoming examination.
good practice
so far it is really informative
hi i want it please please upload it
am preparing for exam ,just nice questions
please upload c_tadm_23 exam
can we get tdvan4 vantage data engineering pdf?
want to clear the exam.
could you please upload the dumps of sap c_sac_2302
asm management configuration is about storage
kool thumb up
just passed the az-500 exam this last friday. most of the questions in this exam dumps are in the exam. i bought the full version and noticed some of the questions which were answered wrong in the free version are all corrected in the full version. this site is good but i wish the had it in an interactive version like a test engine simulator.
i can practice for exam
please i need this exam.