For which type of endpoint entry does a Cisco ACI leaf switch keep the original TEP source address instead of rewriting the outer source IP address to its TEP address?
Answer(s): C
Option C is correct because bounce entries preserve the original host IP as the source, enabling L3 forwarding without rewriting to the leaf’s TEP address, which is used for other entry types. Incorrect — A (local entry): traffic uses local TEP rewriting for intra-ASIC forwarding, not preserving original source. Incorrect — B (remote entry): typically involves TEP rewriting to the local TEP for reachability of remote endpoints, not preserving original source. Incorrect — D (COOP entry): COOP handling relates to control-plane operations and does not describe preserving the original source in the TEP path.
Refer to the exhibit. An engineer is implementing a BPDU filter on external switch interfaces that face the Cisco ACI fabric to prevent excessive TCNs from impacting the fabric. Which configuration must be applied on Cisco ACI to avoid a Layer 2 loop?
Answer(s): A
Option A is correct because MCP (Maximum Control Plane) globally configured on ACI suppresses legacy BPDU processing and prevents TCN floods from external switches from creating Layer 2 loops with the fabric. Incorrect — B: BPDU Guard on endpoints blocks unexpected BPDUs but does not address fabric-wide TCN propagation into the ACI leaf/spine domain. Incorrect — C: MSTP on ACI is not applicable; ACI uses its own OVN/Spine-Leaf topology and does not require MSTP instances to prevent loops. Incorrect — D: Enabling STP on downlinks is not a recommended approach in ACI, which relies on EVPN/VXLAN and BPDU filtering rather than enabling traditional STP.
Refer to the exhibit. An engineer must migrate workloads from the brownfield network to the Cisco ACI fabric. The VLAN 10 default gateway remains in the router located in the brownfield network. The bridge domain has already been associated with L2Out. Which two actions must be taken to migrate the workloads? (Choose two.)
Answer(s): A,D
Option A is correct because enabling ARP Flooding allows hosts in the L2Out-connected bridge domain to learn the default gateway MAC address via ARP requests flooding, which is necessary when the gateway IP remains in the brownfield router and not learned through the fabric.Option D is correct because setting L2 Unknown Unicast Flood ensures unknown destination MACs (including the default gateway) are flooded within the bridge domain, enabling reachability during migration.Option B is incorrect because Multi-Destination Flood in Encapsulation is not a standard DCACI action for this scenario and does not address default gateway learning.Option C is incorrect because limiting IP learning to a subnet would prevent necessary learning of the gateway MAC across the L2Out path.Option E is incorrect because mapping the MAC of the default gateway to the bridge domain is not a supported or required action for this migration.
Which protocol is used in the Cisco ACI fabric for automatic discovery?
Option A is correct because LLDP is used in Cisco ACI for automatic discovery of endpoints and neighboring devices, enabling the fabric to learn neighbor information and construct the IGP-like topology without manual configuration. Incorrect — B: IS-IS is an interior gateway protocol used for routing within the fabric, not for automatic discovery of neighbors in ACI. Incorrect — C: CFS (Fabric Discovery Service) is not a standard protocol used for automatic discovery in ACI. Incorrect — D: COOP is a protocol related to fabric operations but not the automatic discovery mechanism used by ACI.
A Cisco ACI fabric is integrated with a Cisco ASA firewall using a service graph under the tenant called Operations. The fabric must permit the firewall used on tenant Operations to be referenced by the tenant called Management. Which export action must be used to accomplish this goal?
Answer(s): D
Option D is correct because Layer4-Layer7 devices (L4-L7) represent external security services like firewalls in ACI, and exporting a service graph to another tenant (Management) requires exposing an L4-L7 service as a consumer/exported object via an L4-L7 device relationship in the export policy.A) device selection policies are used to choose devices for service graphs, not to export across tenants. B) service graph template defines the blueprint, not the cross-tenant export mechanism. C) router configurations pertain to routing policies, not service graph export between tenants.
Refer to the exhibit. An engineer connects a Cisco ACI fabric to two different Cisco Nexus 9000 Series Switches. The fabric must be configured to ensure a loop-free topology and N9K1 must be configured as the root bridge for VLAN 10. Which action meets these requirements?
Option D is correct because enabling MCP (Multichassis Converged Port) on leaf-to-Nexus 9000 ports provides loop prevention and correct root election behavior in an ACI fabric when connecting to external Nexus switches, ensuring a loop-free topology and proper root bridge placement for VLAN 10 as N9K1. A) Enabling STP on leaf-spine links is not applicable in ACI, where SPAN and SPBM controls differ and Root Bridge is determined by ACI policy. B) BPDU Guard is for protecting against rogue devices, not for fabric loop prevention or root bridge configuration. C) CDP on leaf-spine links does not influence ACI loop prevention or root bridge.
How does Cisco ACI manage the old endpoint information on the original leaf switch after an endpoint moves between two Cisco ACI leaf switches?
Option A is correct because COOP (Continuity of Operation) communications propagate a bounce entry to indicate the endpoint’s prior location on the original leaf, preventing stale data from affecting policy decisions after movement; this avoids relying solely on data-plane learning for endpoint mobility. Incorrect — B: Remote endpoint concepts are not used to represent a moved endpoint on another leaf in Cisco ACI; endpoint movement is handled through COOP bounce entries and controller-driven updates, not a separate remote-endpoint object. Incorrect — C: Deleting endpoints via GARP is not how ACI manages moved endpoints; ACI uses COOP bounce mechanisms and fine-grained learning updates rather than relying on GARP-triggered deletions. Incorrect — D: Spines do not push endpoint DB entries to all leaves; endpoint learning and movement are orchestrated by the leafs and APIC via COOP, not distribution from spine to leaves.
Refer to the exhibit. An engineer must migrate the web servers and backup servers from the legacy network to a Cisco ACI environment in the corresponding EPGs. The requirement is to allow communication between the servers in the web EPG and the backup EPG without creating contracts. Which action meets the requirements?
Option D is correct because setting Policy Control Enforcement to Unenforced allows traffic between the web EPG and the backup EPG without a contract, satisfying the requirement for transparent communication across EPGs during migration.A) Enforced Bridge Domain status flag is unrelated to inter-EPG communication without contracts and governs BD behavior, not contract enforcement between EPGs.B) Direction of Policy Enforcement to Egress affects from-EPG to to-EPG traffic flow semantics but does not enable cross-EPG communication without a contract.C) IP Data-plane learning is about learning IPs at the data plane; it does not bypass contract requirements between EPGs.
Share your comments for Cisco 300-620 exam with other users:
great questions
its realy good
oracle 1z0-1059-22 dumps
please share me the pdf..
q50: which two functions can be used by an end user when pivoting an interactive report? the correct answer is a, c because we do not have rank in the function pivoting you can check in the apex app
best to practice
so far it is good
please provide me the dump
i failed the cisa exam today. but i have found all the questions that were on the exam to be on this site.
in question 272 the right answer states that an autonomous acces point is "configured and managed by the wlc" but this is not what i have learned in my ccna course. is this a mistake? i understand that lightweight aps are managed by wlc while autonomous work as standalones on the wlan.
it was helpful
good question
really nice
please i need dumps for isc2 cybersecuity
ans is coldline i think
very helpful
can you please provide dumps so that it helps me more
thank you for providing me with the updated question and answers. this version has all the questions from the exam. i just saw them in my exam this morning. i passed my exam today.
how i can see exam questions?
can you please upload please?
question 75: option c is correct answer
please add this exam
please upoad
has anyone recently attended safe 6.0 certification? is it the samq question from here.
expository experience
52 should be b&c. controller failure has nothing to do with this type of issue. degraded state tells us its a raid issue, and if the os is missing then the bootable device isnt found. the only other consideration could be data loss but thats somewhat broad whereas b&c show understanding of the specific issues the question is asking about.
great help!!!
very useful tools
looks a good platform to prepare az-104
want to pass the exam
good resource
question 11 : d
only the free dumps will be enough for pass, or have to purchase the premium one. please suggest.
good questions. thanks.