View Full Cisco CCNP Data Center 300-620 Exam Dumps and Practice Test Dumps.

 

Question 81

Which ACI object defines the external Layer 3 connection from the fabric to an outside network?

1. L3Out
2. EPG
3. VLAN pool
4. Application profile

Correct Answer: 1

Explanation

An L3Out provides Layer 3 connectivity between the Cisco ACI fabric and external routed networks. It is associated with a VRF and can contain logical node profiles, logical interface profiles, external EPGs, and routing protocol configurations. Depending on the design, an L3Out can use static routing, OSPF, BGP, or other supported mechanisms. EPGs organize endpoints within the fabric, VLAN pools provide encapsulation resources, and application profiles organize EPGs. When configuring external connectivity, administrators should verify the L3Out association, external interfaces, routing configuration, and route-control policies to ensure that traffic is correctly exchanged with external networks.

Question 82

Which ACI object defines the Layer 2 broadcast domain associated with a subnet and forwarding behavior?

1. Contract
2. Bridge domain
3. Filter
4. Tenant

Correct Answer: 2

Explanation

A bridge domain represents a Layer 2 forwarding domain within Cisco ACI. It can contain one or more subnets and is associated with a VRF for Layer 3 routing. Bridge-domain settings can control behaviors such as unicast routing, ARP flooding, unknown-unicast handling, and endpoint learning. Contracts and filters control policy between EPGs, while a tenant provides a broader administrative boundary. Proper bridge-domain configuration is important because it determines how endpoints within an EPG communicate at Layer 2 and Layer 3. Administrators should review gateway addresses, VRF association, and forwarding settings when troubleshooting communication within or beyond a subnet.

Question 83

Which ACI object contains the filters and subjects that define how a contract is enforced?

1. VLAN pool
2. VRF
3. Contract
4. Physical domain

Correct Answer: 3

Explanation

A contract contains subjects that define the communication rules between consumer and provider EPGs. Subjects can reference filters that specify permitted traffic characteristics such as protocols and ports. This structure allows ACI administrators to implement application-specific communication policies instead of permitting unrestricted connectivity. VLAN pools allocate encapsulation resources, VRFs provide routing contexts, and physical domains associate EPGs with physical connectivity. When troubleshooting a contract-related communication problem, administrators should examine the contract relationship, subject configuration, referenced filters, and consumer/provider roles. A correctly configured contract ensures that only the intended traffic is allowed between the relevant EPGs.

Question 84

Which ACI domain type is specifically intended for connecting physical servers and other bare-metal devices?

1. VMM domain
2. Physical domain
3. L3Out
4. Management domain

Correct Answer: 2

Explanation

A physical domain is used to associate ACI policies with physical or bare-metal endpoints. It can be linked with a VLAN pool and attached to EPGs so that physical interfaces can provide connectivity to servers, appliances, and other non-virtualized devices. A VMM domain is intended for virtual machine environments, while an L3Out provides external routed connectivity. The management domain serves management-related functions. When deploying bare-metal servers, administrators should verify the physical domain association, VLAN pool, interface policy configuration, and static path or dynamic attachment requirements. These components work together to provide the correct endpoint connectivity and policy deployment.

Question 85

Which ACI feature is used to integrate policy with a supported virtualization platform such as VMware?

1. Physical domain
2. VMM domain
3. L2Out
4. Contract filter

Correct Answer: 2

Explanation

A Virtual Machine Manager domain, or VMM domain, integrates Cisco ACI with supported virtualization platforms such as VMware environments. The VMM domain allows ACI policies to be associated with virtual networking infrastructure and virtual machine workloads. Depending on the integration, the virtualization controller and ACI can exchange information about virtual networking and endpoint placement. Physical domains are designed for bare-metal connectivity, while L2Out provides external Layer 2 connectivity and contract filters define permitted traffic. Administrators should verify the VMM controller configuration, associated VLAN pool, credentials, and EPG domain association when troubleshooting virtual machine connectivity.

Question 86

Which ACI setting determines whether IP routing is enabled within a bridge domain?

1. Unicast routing
2. LLDP
3. CDP
4. Endpoint retention

Correct Answer: 1

Explanation

The unicast routing setting on a bridge domain determines whether the bridge domain provides Layer 3 routing functionality for its endpoints. When enabled, the bridge domain can use its configured subnet as a gateway and participate in routing through its associated VRF. CDP and LLDP are discovery protocols, while endpoint retention controls the handling of learned endpoint information. Administrators should understand the routing requirement of the application before changing this setting. If routing is disabled where Layer 3 communication is required, hosts may remain locally connected but fail to communicate with destinations outside their local Layer 2 forwarding domain.

Question 87

Which ACI protocol is primarily used to discover directly connected Cisco neighbors?

1. BGP
2. OSPF
3. CDP
4. SNMP

Correct Answer: 3

Explanation

Cisco Discovery Protocol, or CDP, is used to discover information about directly connected Cisco devices. It can provide details such as device identity, interface information, platform, and capabilities. CDP is useful when validating physical topology and troubleshooting connectivity between Cisco network devices. BGP and OSPF are routing protocols, while SNMP is primarily used for monitoring and management. In an ACI environment, administrators can configure CDP through interface policies and policy groups. When troubleshooting a physical connection, checking CDP information can help confirm that the expected neighbor is connected to the intended interface and that the physical topology matches the design.

Question 88

Which ACI feature provides discovery information for neighboring devices from different vendors?

1. Contract
2. LLDP
3. L3Out
4. EPG

Correct Answer: 2

Explanation

Link Layer Discovery Protocol, or LLDP, is a vendor-neutral protocol used to exchange device and interface information with neighboring network devices. It can help administrators identify directly connected equipment, interface relationships, and system information. LLDP is particularly useful in multi-vendor environments because it is not limited to Cisco devices. Contracts control application communication, L3Out provides external Layer 3 connectivity, and EPGs group endpoints according to policy. When troubleshooting an ACI access connection, administrators can use LLDP information to confirm the connected neighbor and verify that the physical topology corresponds with the intended design.

Question 89

Which ACI object groups endpoints that share common policy requirements?

1. EPG
2. VRF
3. VLAN pool
4. L3Out

Correct Answer: 1

Explanation

An Endpoint Group, or EPG, groups endpoints that should receive similar policy treatment in Cisco ACI. Membership can be based on physical, virtual, or other supported attachment mechanisms. EPGs are contained within application profiles and can communicate with other EPGs through contracts. A VRF defines a routing context, a VLAN pool provides encapsulation resources, and an L3Out connects the fabric to external routed networks. Proper EPG design helps administrators express application relationships clearly. When troubleshooting policy behavior, administrators should verify endpoint membership, domain association, contracts, and bridge-domain relationships to ensure that the endpoint has received the intended policy.

Question 90

Which ACI object provides an external representation of a network connected through an L3Out?

1. Filter
2. External EPG
3. VLAN pool
4. Interface policy

Correct Answer: 2

Explanation

An External EPG, or external EPG, represents external networks reachable through an L3Out. It allows administrators to apply policy to traffic entering or leaving the ACI fabric through external Layer 3 connectivity. External EPGs can participate in contracts just like internal EPGs, enabling controlled communication between internal application groups and external destinations. Filters define permitted traffic, VLAN pools provide encapsulation resources, and interface policies configure interface behavior. When configuring external access, administrators should ensure that the external EPG contains the appropriate external subnets and that the required contracts and route-control policies are correctly configured.

Question 91

Which ACI feature can restrict communication between endpoints belonging to the same EPG?

1. Intra-EPG isolation
2. VLAN pool
3. L3Out
4. Route control policy

Correct Answer: 1

Explanation

Intra-EPG isolation can be used to restrict direct communication between endpoints that belong to the same EPG. By default, endpoints within the same EPG may communicate according to the applicable forwarding behavior, but isolation provides an additional mechanism when endpoint-to-endpoint communication must be restricted. VLAN pools manage encapsulation resources, L3Out provides external routed connectivity, and route-control policies influence route advertisement or learning. This feature can be useful for workloads that should share a common policy classification while remaining isolated from one another. Administrators should evaluate application dependencies carefully before enabling endpoint isolation.

Question 92

Which ACI object is used to control which routes are advertised or accepted through an external routing connection?

1. Application profile
2. Route control policy
3. EPG
4. VLAN pool

Correct Answer: 2

Explanation

Route control policies provide policy-based control over route advertisement and route learning associated with external connectivity. They can be used with L3Out configurations to influence which prefixes are imported or exported between the ACI fabric and external routing domains. Application profiles organize EPGs, EPGs classify endpoints, and VLAN pools provide encapsulation resources. Route control is important when an organization does not want every available route to be exchanged with an external network. Administrators should carefully review route-control configuration, route prefixes, direction, and associated L3Out objects when troubleshooting unexpected route advertisement or missing external routes.

Question 93

Which ACI object provides a logical grouping of EPGs that represent an application?

1. Application profile
2. VLAN pool
3. Physical domain
4. Contract filter

Correct Answer: 1

Explanation

An application profile provides a logical container for EPGs that belong to the same application or application environment. For example, a three-tier application can use separate web, application, and database EPGs within one application profile. Contracts can then define communication relationships among those EPGs. VLAN pools provide encapsulation resources, physical domains support bare-metal connectivity, and contract filters define permitted traffic. Organizing EPGs within application profiles makes the ACI policy model easier to understand and manage. Administrators can represent application dependencies logically while allowing the underlying fabric to implement the required forwarding and policy behavior.

Question 94

Which ACI policy is associated with a contract to specify protocols and ports that are permitted?

1. Filter
2. VRF
3. Bridge domain
4. VLAN pool

Correct Answer: 1

Explanation

A filter defines the traffic characteristics that can be permitted through a contract. Filter entries can specify protocols and port ranges, allowing administrators to create precise communication rules. The contract subject references the filter and determines how that traffic policy is applied between consumer and provider EPGs. VRFs provide routing separation, bridge domains define Layer 2 forwarding domains, and VLAN pools allocate encapsulation resources. When an application requires access to a specific service, administrators can create a filter that permits the necessary protocol and ports rather than allowing unrestricted traffic. This provides more controlled application communication within the ACI policy model.

Question 95

Which ACI object is responsible for providing a Layer 3 routing context for multiple bridge domains?

1. Tenant
2. VRF
3. EPG
4. Contract

Correct Answer: 2

Explanation

A Virtual Routing and Forwarding instance, or VRF, provides the Layer 3 routing context for bridge domains in ACI. Multiple bridge domains can be associated with the same VRF, allowing them to participate in a shared routing domain while maintaining their individual Layer 2 forwarding boundaries. A tenant provides administrative organization, EPGs classify endpoints, and contracts control communication policies. VRFs are especially useful when separate applications or organizations require independent routing tables. Administrators should verify the bridge-domain-to-VRF association when diagnosing routing problems, overlapping address spaces, or unexpected reachability between application environments.

Question 96

Which ACI access-policy object combines multiple interface policies into a reusable configuration for an interface?

1. Interface policy group
2. External EPG
3. Bridge domain
4. Route control policy

Correct Answer: 1

Explanation

An interface policy group combines multiple interface policies into a reusable configuration that can be applied to one or more interfaces. Depending on the deployment, a policy group can include settings for speed, CDP, LLDP, link aggregation, and other interface behaviors. Interface selectors then associate the policy group with specific physical interfaces. External EPGs represent external networks, bridge domains define forwarding domains, and route-control policies influence routing advertisements. Reusable policy groups simplify configuration and improve consistency across many interfaces. When troubleshooting an access port, administrators should verify that the expected policy group is associated with the correct selector and interface profile.

Question 97

Which ACI fabric topology connects every leaf switch to every spine switch?

1. Ring
2. Hierarchical tree
3. Full mesh between leaf and spine layers
4. Bus

Correct Answer: 3

Explanation

Cisco ACI uses a leaf-and-spine architecture in which each leaf connects to the spine layer, creating a highly connected fabric topology. This design provides multiple forwarding paths between leaf switches and supports predictable traffic movement through the fabric. Endpoints normally connect to leaf switches, while spine switches provide transit between leaf nodes. The topology is not based on a traditional hierarchical access-distribution-core arrangement or a bus design. During deployment, administrators must ensure that the required leaf-to-spine connections are established and operational. A failure of an individual link should generally be handled through the fabric’s remaining available paths.

Question 98

Which ACI management option uses the management interfaces of the fabric nodes rather than the production data path?

1. In-band management
2. Out-of-band management
3. VXLAN forwarding
4. Endpoint learning

Correct Answer: 2

Explanation

Out-of-band management uses dedicated management connectivity rather than relying on the production data path of the ACI fabric. This approach can provide administrators with management access even when problems affect normal application forwarding. In-band management uses the fabric’s data-plane infrastructure for management traffic. VXLAN is used for fabric data forwarding, while endpoint learning maintains information about connected endpoints. Administrators should plan management addressing, gateway configuration, and external management connectivity carefully. A well-designed out-of-band management network can simplify troubleshooting because administrators may retain access to infrastructure devices during incidents affecting production traffic.

Question 99

Which ACI feature allows an EPG to be deployed on a specific physical switch interface without requiring dynamic endpoint discovery?

1. Static path binding
2. BGP
3. SNMP
4. LLDP

Correct Answer: 1

Explanation

Static path binding allows an administrator to explicitly associate an EPG with a specific physical path, interface, or port-channel. This is commonly used for bare-metal servers and other devices where the endpoint location is known and should receive a specific EPG policy. BGP provides routing, SNMP supports monitoring, and LLDP provides neighbor discovery. Static bindings can also specify an encapsulation VLAN according to the deployment design. When configuring static path bindings, administrators should verify the selected leaf, interface or port-channel, encapsulation, domain association, and deployment settings to ensure that the endpoint receives the intended EPG policy.

Question 100

Which ACI feature provides overlay forwarding between leaf switches using VXLAN encapsulation?

1. CDP
2. SNMP
3. VXLAN data plane
4. DHCP

Correct Answer: 3

Explanation

Cisco ACI uses a VXLAN-based data plane to transport traffic across the fabric between leaf switches. VXLAN encapsulation allows the fabric to carry tenant and endpoint traffic across the IP-based infrastructure while preserving the required logical segmentation. The leaf switches perform endpoint-facing functions and encapsulate traffic for transport through the fabric, while spine switches provide transit. CDP and SNMP serve discovery and monitoring purposes, and DHCP provides address assignment. Understanding the VXLAN data plane is important when troubleshooting forwarding behavior, endpoint reachability, and traffic movement between different leaf switches within the ACI fabric.