Cisco 300-620 DCACI Exam Questions Instant Access

Question 1

Refer to the exhibit.

An engineer must implement the inter-tenant service graph. Which set of actions must be taken to accomplish this goal?

A* Define the contract in the provider tenant and export it to the consumer tenant.
* Define the L4-L7 device, service graph template, and ASA bridge domains in the provider tenant.

B* Define the contract in the provider tenant and export it to the consumer tenant.
* Define the L4-L7 device and service graph template in the provider tenant and the ASA bridge domains in the consumer tenant.

C* Define the contract in the provider tenant and export it to the provider tenant.
* Define the L4-L7 device and service graph template in the provider tenant and the ASA bridge domains in the consumer tenant.

D* Define the contract in the provider tenant and export it to the provider tenant.
* Define the L4-L7 device, service graph template, and ASA bridge domains in the consumer tenant.

Answer : B

To implement the inter-tenant service graph, the set of actions that must be taken are:

Define the contract in the provider tenant and export it to the consumer tenant (Option B).

Define the L4-L7 device and service graph template in the provider tenant and the ASA bridge domains in the consumer tenant (Option B).

This approach allows for the proper configuration and association of the service graph between the provider and consumer tenants, ensuring that the services are correctly applied to the traffic flowing between them.

Question 2

Which statement about ACI syslog is true or Which statement describes the ACI syslog?

ANotifications for different scopes of syslog objects can be sent only to one destination.

BSyslog messages are sent to the destination through the spine.

CAll syslog messages are sent to the destination through APIC.

DSwitches send syslog messages directly to the destinations.

Answer : C

The correct statement about ACI syslog is thatall syslog messages are sent to the destination through APIC1.This centralized approach allows for consistent logging and monitoring across the ACI fabric1.

Question 3

Which feature allows firewall ACLs to be configured automatically when new endpoints are attached to an EPG?

AARP gleaning

Bdynamic endpoint attach

Chardware proxy

Dnetwork-stitching

Answer : A

The feature that allows firewall ACLs to be configured automatically when new endpoints are attached to an EPG isARP gleaning.This feature helps in identifying the endpoints and applying the necessary ACLs to them as they are discovered

Question 4

A network engineer must design a method to allow the Cisco ACI to redirect traffic to the firewalls. Only traffic that matches specific L4-L7 policy rules should be redirected. The load must be distributed across multiple firewalls to scale the performance horizontally. Which action must be taken to meet these requirements?

AConfigure ACI Service Graph with Unidirectional PBR.

BImplement ACI Service Graph with GIPo.

CImplement ACI Service Graph Two Nodes with GIPo.

DConfigure ACI Service Graph with Symmetric PBR.

Answer : A

To design a method that allows the Cisco ACI to redirect traffic to the firewalls based on specific L4-L7 policy rules and distribute the load across multiple firewalls, the action that must be taken is toConfigure ACI Service Graph with Unidirectional PBR (

https://www.cisco.com/c/en/us/solutions/collateral/data-center-virtualization/application-centric-infrastructure/white-paper-c11-739971.html

Question 5

Which type of port is used for in-band management within ACI fabric?

Aspine switch port

BAPIC console port

Cleaf access port

Dmanagement port

Answer : A

The type of port used for in-band management within ACI fabric is thespine switch port4.

Question 6

An organization has encountered many STP-related issues in the past due to failed hardware components. They are in the process of long-term migration to a newly deployed ACI fabric. Senior engineers are worried that spanning-tree loops in the existing network may be extended to the ACI fabric. Which feature must be enabled on the ACI leaf ports to protect the fabric from spanning-tree loops?

ABPDU Guard

Bper-VLANMCP

CStorm Control

DBPDU Filter

Answer : A

o protect the ACI fabric from spanning-tree loops, the feature that must be enabled on the ACI leaf ports isBPDU Guard

Question 7

When Cisco ACI connects to an outside Layers 2 network, where does the ACI fabric flood the STP BPDU frame?

Awithin the bridge domain

Bwithin the APIC

Cwithin the access encap VLAN

Dbetween all the spine and leaf switches

Answer : A

When Cisco ACI connects to an outside Layer 2 network, the ACI fabric floods the STP BPDU framewithin the bridge domain (Option A)5.This ensures that BPDUs are properly propagated within the relevant VLAN encapsulation associated with the bridge domain5.

Cisco Implementing Cisco Application Centric Infrastructure 300-620 DCACI Exam Questions