Cisco 300-620 DCACI Exam Questions Instant Access

Question 1

Refer to the exhibit.

Refer to the exhibit. Which two configuration steps are completed before this output is generated? (Choose two.)

AMCP policy for the interface policy group for Port-channel 12 is enabled.

BMCP Instance Policy default in the global access policies is enabled.

CError Disabled Recovery Policy for Loop Indication by MCP is set to True.

DBPDU Guard is enabled for the interface policy group for Port-channel 12.

ESpanning Tree Policy Region STP_4CAF232E48FF20 is added to the spanning-tree policy of the switch.

Answer : A, B

Question 2

An engineer is creating a configuration import policy that must terminate if the imported configuration is incompatible with the existing system. Which import mode achieves this result?

Amerge

Batomic

Cbest effort

Dreplace

Answer : B

The import mode that must be used to ensure that the import process terminates if the imported configuration is incompatible with the existing system is the 'atomic' mode. This mode ignores shards that contain objects that cannot be imported while proceeding with shards that can be imported.If the incoming configuration's version is incompatible with the existing system, the import process will terminate2.

Question 3

An engineer wants to filter the System Faults page and view only the active faults that are present in the Cisco

ACI fabric. Which two lifecycle stages must be selected for filtering? (Choose two.)

ARaised

BRetaining

CSoaking, Clearing

DRaised, Clearing

ESoaking

Answer : A, D

To filter the System Faults page and view only the active faults present in the Cisco ACI fabric, the two lifecycle stages that must be selected for filtering are:

Raised (Option A): This stage indicates that the fault is currently active and has been raised.

Raised, Clearing (Option D): This combination indicates that the fault is active but is in the process of being cleared.

https://www.cisco.com/c/en/us/td/docs/switches/datacenter/aci/apic/sw/all/faults/guide/b_APIC_Faults_Errors/

b_IFC_Faults_Errors_chapter_01.html

Question 4

Which action sets Layer 2 loop migration in an ACI Fabric with a Layer 2 Out configured?

AEnable MCP on the ACI fabric.

BDisable STP in the external network.

CDisable STP on the ACI fabric.

DEnable STP on the ACI fabric.

Answer : A

To set Layer 2 loop migration in an ACI Fabric with a Layer 2 Out configured,MCP (Misconfiguration Protocol) must be enabledon the ACI fabric56.MCP helps to prevent Layer 2 loops by detecting misconfigurations that could potentially cause loops56.

Question 5

Which endpoint learning operation is completed on the ingress leaf switch when traffic is received from a Layer 3 Out?

AThe source MAC address of the traffic is learned as a local endpoint.

BThe source MAC address of the traffic is learned as a remote endpoint.

CThe source IP address of the traffic is learned as a remote endpoint.

DThe source IP address of the traffic is learned as a local endpoint.

Answer : C

When traffic is received from a Layer 3 Out (L3Out) on the ingress leaf switch in a Cisco ACI fabric, the source IP address of the traffic is learned as a remote endpoint. This is because the traffic is entering the ACI fabric from an external network, and the source IP is considered remote to the fabric.

Question 6

A network administrator configures AAA inside the Cisco ACI fabric. The authentication goes through the local users if the TACACS+ server is not reachable. If the Cisco APIC is out of the cluster, the access must be granted through the fallback domain. Which configuration set meets these requirements?

APing Check: True
Default Authentication Realm: Local
Fallback Check: True

BPing Check: True
Default Authentication Realm: TACACS+
Fallback Check: False

CPing Check: False
Default Authentication Realm: Local
Fallback Check: False

DPing Check: False
Default Authentication Realm: TACACS+
Fallback Check: True

Answer : D

For AAA configuration within the Cisco ACI fabric, where authentication should fall back to local users if the TACACS+ server is unreachable, and access must be granted through the fallback domain if the Cisco APIC is out of the cluster, the configuration set that meets these requirements is to have the Default Authentication Realm set to TACACS+ with Fallback Check enabled.This ensures that when the TACACS+ server cannot be reached, the system will fall back to using local authentication

Question 7

Refer to the exhibit.

Refer to the exhibit. An engineer must disable the communication between the two backup servers in the backup EPG. Which action accomplishes this goal?

ASet Preferred Group Member to Excluded.

BSet the physical domain to None.

CSet a different static binding for the encap VLAN.

DSet Intra EPG Isolation to Enforced.

Answer : D

In Cisco ACI, Intra-EPG Isolation is a feature that prevents communication between endpoints within the same EPG. By default, endpoints in the same EPG can communicate freely without requiring contracts. To disable communication between two backup servers within the same EPG (e.g., in the 'Backup EPG'), you need to enforce Intra-EPG Isolation.

Cisco Implementing Cisco Application Centric Infrastructure 300-620 DCACI Exam Questions