A network engineer configured a Cisco ACI fabric as follows:· An EPG called EPG-A is created and associated with a VMM domain called North. · The EPG-A is associated with BD-A and is in an application profile called Apps-A.· The BD-A is associated with VRF-1 in the Prod tenant.Which port group must be selected to place VMs in EPG-A?
Answer(s): A
Option A is correct because in Cisco ACI, VM placement into an EPG is determined by the combination of Tenant|Application Profile|EPG. Since EPG-A is in Apps-A and associated to the Prod tenant, selecting Prod|Apps-A|EPG-A places VMs into that EPG. B) Incorrect — North is a VMM domain not part of the EPG selection path for VM placement; VMM domains are used for integration with external hypervisors, not as port groups for EPG binding. C) Incorrect — BD-A is an internal construct; the port group must reference the application profile and EPG, not the BD name. D) Incorrect — VRF-1 belongs to the BD’s contract scope but is not used in the port group path to assign VMs to an EPG.
Which switch type is discovered first in the Cisco ACI fabric discovery process?
Answer(s): C
Option C is correct because leaf switches are discovered first in the ACI fabric discovery process as the initial tenant-facing devices before spine and distribution roles are established. A) spine is discovered later as the fabric core interconnects after leafs, not first. B) distribution switches are not the initial discovery target; they are part of the aggregation layer discovered after leaves. D) access is not a switch type in ACI fabric discovery; access terms apply to user interfaces, not the fabric’s discovery sequence.
Refer to the exhibit.An engineer configures a Layer 4 to Layer 7 device object. The device is a virtual firewall with a single network adapter and it must be deployed in routed mode. Which action completes the configuration of the device object?
Answer(s): B
Option B is correct because in Cisco ACI L4-L7 device objects, selecting Function Type as GoTo completes the routed-mode configuration by directing traffic to the next hop rather than performing inline filtering, aligning with a virtual firewall in routed mode. Incorrect — A: Promiscuous Mode is not required to deploy a single-NIC L4-L7 device in routed mode. Incorrect — C: Context awareness to Multiple is not applicable to basic routed-mode device object setup. Incorrect — D: Adding an outside interface to cluster interfaces is not part of configuring a single-NIC L4-L7 device in routed mode; cluster interfaces relate to multi-homed or external connectivity not needed here.
https://www.cisco.com/c/en/us/td/docs/dcn/aci/apic/6x/l4-l7-configuration/cisco-apic-layer-4-to-layer- 7-services-deployment-guide-60x/defining-a-logical-device-60x.html
Which role do interfaces Ethernet-50 have in this output?
Option A is correct because Ethernet -50 in this DCACI output denotes leaf fabric ports connected to the spine leaf pair, functioning as the primary leaf fabric ports. Incorrect — B: server fabric ports would indicate connections to servers, not leaf-to-spine fabric links. Incorrect — C: leaf access ports imply edge ports that connect to endpoints inside a leaf, not inter-fabric links. Incorrect — D: server uplink ports would be toward servers or upstream devices, not the leaf-to-spine fabric interconnect role.
Refer to the exhibit. An engineer must configure a bridge domain inside the Cisco ACI fabric called BD. The configuration must permit EP2 and EP3 to reach EP1. Which configuration must be applied on the bridge domain to accomplish this goal?
In a Cisco ACI fabric, when silent hosts are present (e.g., EP2 in this case), they do not send any initial traffic to announce their presence to the fabric. As a result, their MAC address is not learned on the leaf switch. To ensure that traffic can be delivered to silent hosts, enabling Layer 2 (L2) Unknown Unicast Flooding on the bridge domain is required. This allows unicast traffic destined for unknown MAC addresses (such as EP2 initially) to be flooded within the bridge domain, ensuring that EP1 can communicate with EP2 and EP3.
Refer to the exhibit. An engineer configures connectivity for a bare metal server called SVR-15. EPG-15 is associated with a physical domain named phys_dom-15. The VPC member port is statically bound to EPG-15 with Encapsulation VLAN-1500. Which step must the engineer take to ensure that SVR-15 is connected to the Cisco ACI fabric?
Answer(s): D
To ensure proper connectivity for SVR-15 to the Cisco ACI fabric:1. The VLAN used for the static port binding (VLAN-1500) must be part of the VLAN pool associated with the physical domain (phys_dom-15).2. If VLAN-1500 is not included in the associated VLAN pool, the ACI fabric will not allow traffic for that VLAN, resulting in a lack of connectivity for SVR-15.
What is the function of an HTTP GET request during Cisco ACI fabric discovery?
During the Cisco ACI fabric discovery process, an HTTP GET request is used by the APIC to communicate with connected leaf switches. This request facilitates the discovery of neighbors by retrieving information about connected devices. The discovery process identifies the topology and relationships between fabric components (spines, leaves, and APICs), which is essential for building the ACI fabric infrastructure.
Which device is the pervasive gateway shown installed on?
In Cisco ACI, the pervasive gateway is a distributed gateway architecture that enables all leaf switches to act as Layer 3 gateways for endpoints. This means that the default gateway IP address for a bridge domain (BD) is available on all leaf switches where the BD is deployed. The configuration in the exhibit, showing VLAN information with associated interfaces, indicates that the pervasive gateway is installed on the leaf switch as part of this distributed gateway architecture. This allows endpoints connected to the leaf to communicate with the gateway locally, reducing latency and improving scalability.
Share your comments for Cisco 300-620 exam with other users:
it is very nice
i gave the amazon dva-c02 tests today and passed. very helpful.
there is an incorrect word in the problem statement. for example, in question 1, there is the word "speci c". this is "specific. in the other question, there is the word "noti cation". this is "notification. these mistakes make this site difficult for me to use.
passed my az-120 certification exam today with 90% marks. studied using the dumps highly recommended to all.
i need it, plz make it available
q47: intrusion prevention system is the correct answer, not patch management. by definition, there are no patches available for a zero-day vulnerability. the way to prevent an attacker from exploiting a zero-day vulnerability is to use an ips.
this is simple but tiugh as well
questão 4, segundo meu compilador local e o site https://www.jdoodle.com/online-java-compiler/, a resposta correta é "c" !
its very useful
i mastered my skills and aced the comptia 220-1102 exam with a score of 920/1000. i give the credit to for my success.
real questions
very helpful assessments
hi there, i would like to get dumps for this exam
i studied for the microsoft azure az-204 exam through it has 100% real questions available for practice along with various mock tests. i scored 900/1000.
please upload 1z0-1072-23 exam dups
i was hoping if you could please share the pdf as i’m currently preparing to give the exam.
i am looking for oracle 1z0-116 exam
where we can get the answer to the questions
nice questions
question 129 is completely wrong.
i need dump
love the site.
can you please upload it back?
could you please re-upload this exam? thanks a lot!
great about shared quiz
goood helping
pay attention to questions. they are very tricky. i waould say about 80 to 85% of the questions are in this exam dump.
wish you would allow more free questions
great simulation
very g inood
q35 should be a
sap c_ts450_2021
ecellent materil for unserstanding