View Full Cisco CCNP Data Center 300-620 Exam Dumps and Practice Test Dumps.

 

Question 221

Which ACI object defines the routing context used by multiple bridge domains that need to communicate?

1. Contract
2. VRF
3. Filter
4. EPG

Correct Answer: 2

Explanation

A VRF provides the Layer 3 routing context for bridge domains in Cisco ACI. Multiple bridge domains can be associated with the same VRF when they need to participate in a common routing domain. The VRF maintains the routing table and provides logical separation from other VRFs. Contracts define communication policy, filters specify traffic characteristics, and EPGs group endpoints according to policy requirements. When designing an ACI environment, administrators should carefully determine which bridge domains should share a VRF. During troubleshooting, checking the bridge-domain-to-VRF association can help identify unexpected routing isolation or route visibility problems between application networks.

Question 222

Which ACI object is used to define a collection of endpoint groups that belong to an application?

1. L3Out
2. VLAN pool
3. Application profile
4. Physical domain

Correct Answer: 3

Explanation

An application profile provides a logical container for related EPGs. These EPGs can represent different application tiers, such as web, application, and database components. The application profile itself organizes the policy structure, while contracts and filters determine how EPGs communicate. L3Out provides external Layer 3 connectivity, VLAN pools provide encapsulation resources, and physical domains associate EPGs with physical infrastructure. Using application profiles makes large ACI configurations easier to understand and manage because related EPGs can be grouped logically. Administrators should create application profiles around meaningful application or service boundaries rather than simply organizing objects according to physical switch locations.

Question 223

Which ACI object controls communication between a consumer EPG and a provider EPG?

1. Contract
2. VLAN pool
3. Bridge domain
4. Switch profile

Correct Answer: 1

Explanation

A contract controls communication between consumer and provider EPGs in Cisco ACI. It defines the policy relationship and can contain subjects that reference filters specifying permitted protocols and ports. VLAN pools provide VLAN resources, bridge domains provide forwarding domains, and switch profiles define access-policy associations. Contracts are fundamental to ACI’s policy model because EPG membership alone does not automatically establish communication between unrelated EPGs. When troubleshooting application connectivity, administrators should verify that the correct EPG is configured as the consumer or provider, the contract is associated properly, and its subjects and filters allow the required traffic.

Question 224

Which ACI object defines the VLAN encapsulation resources available to a domain?

1. VRF
2. VLAN pool
3. Contract
4. External EPG

Correct Answer: 2

Explanation

A VLAN pool defines the VLAN IDs or ranges that can be used as encapsulation resources by an associated domain. Physical and VMM domains can reference VLAN pools so that EPGs have suitable encapsulation values when deployed. VRFs provide routing contexts, contracts define communication policies, and External EPGs represent external network destinations. If an EPG cannot be deployed with its expected VLAN, administrators should verify the domain association and confirm that the required VLAN is present in the referenced pool. VLAN pool design should also avoid overlapping or conflicting allocations that could create deployment problems or unexpected connectivity behavior.

Question 225

Which ACI component is used to associate an EPG with a physical server network?

1. VMM domain
2. Physical domain
3. External EPG
4. L3Out

Correct Answer: 2

Explanation

A physical domain associates an EPG with physical infrastructure such as bare-metal servers connected to ACI leaf switches. It references the required VLAN pool and can be used with access policies to deploy the EPG on appropriate physical interfaces. A VMM domain is intended for virtualization integration, while External EPG and L3Out objects provide external network connectivity. When a bare-metal endpoint cannot communicate, administrators should verify the physical domain, VLAN pool, static path binding, interface policy group, and EPG configuration. These objects work together to establish the endpoint’s physical attachment and policy classification.

Question 226

Which ACI feature provides integration between EPGs and a supported virtualization platform?

1. VMM domain
2. L2Out
3. Route control policy
4. Filter

Correct Answer: 1

Explanation

A VMM domain provides integration between Cisco ACI and a supported virtualization environment. It allows ACI policies and EPGs to be associated with virtual infrastructure so that virtual workloads can receive the appropriate network connectivity and policy. L2Out provides external Layer 2 connectivity, route-control policies manage route exchange, and filters define traffic rules. When configuring a VMM domain, administrators should verify the virtualization controller connection, VLAN or encapsulation configuration, associated EPGs, and required access policies. Proper integration allows application policies to remain consistent while workloads are created, moved, or managed within the virtual environment.

Question 227

Which ACI setting determines whether a bridge domain performs Layer 3 forwarding for its endpoints?

1. ARP flooding
2. Unknown unicast
3. Unicast routing
4. Endpoint retention

Correct Answer: 3

Explanation

The unicast routing setting determines whether a bridge domain provides Layer 3 forwarding functionality. When enabled with an appropriate subnet, the bridge domain can provide a gateway for endpoints and participate in routing through its associated VRF. ARP flooding controls ARP request handling, unknown-unicast settings control traffic for unresolved destinations, and endpoint retention affects learned endpoint information. If an endpoint can communicate locally but cannot reach another subnet, administrators should verify that unicast routing is enabled, the bridge-domain subnet is configured correctly, and the associated VRF is correct. These settings collectively determine the bridge domain’s Layer 3 behavior.

Question 228

Which ACI object identifies the external network prefixes associated with an L3Out?

1. External EPG
2. Application profile
3. VLAN pool
4. Interface policy group

Correct Answer: 1

Explanation

An External EPG represents external network destinations associated with an L3Out. External subnet prefixes can be configured under the External EPG so that ACI can apply policy to traffic moving between internal EPGs and external networks. Application profiles organize internal EPGs, VLAN pools provide encapsulation resources, and interface policy groups configure interface behavior. External EPGs are important for north-south policy because contracts can be applied between internal EPGs and external destinations. When external traffic is not working, administrators should verify the External EPG prefixes, L3Out association, routing protocol state, route-control policy, and contract configuration.

Question 229

Which ACI protocol is commonly used to exchange routes with an external router using autonomous system numbers?

1. LLDP
2. BGP
3. CDP
4. SNMP

Correct Answer: 2

Explanation

BGP uses autonomous system numbers and can be configured on an ACI L3Out for external route exchange. It provides extensive routing-policy capabilities and can be used when controlled advertisement and reception of network prefixes are required. LLDP and CDP are neighbor-discovery protocols, while SNMP provides monitoring information. When establishing BGP connectivity, administrators should verify the local and remote AS numbers, peer addresses, interface reachability, session state, and route-control configuration. A successfully established BGP session does not necessarily mean all expected prefixes are being exchanged, so route advertisements and import or export policies should also be examined.

Question 230

Which ACI feature can isolate endpoints within the same EPG from directly communicating with one another?

1. Preferred group
2. Intra-EPG isolation
3. L3Out
4. VLAN pool

Correct Answer: 2

Explanation

Intra-EPG isolation can prevent endpoints belonging to the same EPG from directly communicating with each other. This feature is useful when endpoints share a common policy classification but should remain isolated from one another. Preferred groups address broader EPG communication behavior, L3Out provides external Layer 3 connectivity, and VLAN pools provide VLAN encapsulation resources. Administrators should enable intra-EPG isolation only when the application design requires it because some workloads depend on communication between endpoints in the same EPG. If unexpected communication occurs within an EPG, administrators should review isolation settings along with endpoint learning and bridge-domain configuration.

Question 231

Which ACI object is responsible for defining specific protocols and port numbers permitted by a contract?

1. Filter
2. VRF
3. Domain
4. Bridge domain

Correct Answer: 1

Explanation

A filter defines specific traffic characteristics such as IP protocols and source or destination ports. It is referenced by a contract subject and therefore becomes part of the communication policy between EPGs. VRFs provide routing contexts, domains associate EPGs with infrastructure, and bridge domains provide forwarding domains. Filters allow administrators to create precise policies, such as permitting HTTPS while denying unrelated services. When troubleshooting a contract, administrators should inspect the filter entries first and then confirm that the filter is referenced by the correct subject and contract. They should also verify that the consumer and provider EPG relationship is configured correctly.

Question 232

Which ACI object provides external Layer 2 connectivity?

1. L3Out
2. VMM domain
3. L2Out
4. Physical domain

Correct Answer: 3

Explanation

L2Out provides external Layer 2 connectivity from an ACI bridge-domain environment to an external Layer 2 network. It differs from L3Out, which provides routed Layer 3 connectivity. VMM domains integrate virtualization environments, while physical domains associate EPGs with physical infrastructure. When deploying an L2Out, administrators need to verify the external interface, VLAN encapsulation, bridge-domain relationship, and required policy configuration. Troubleshooting should include physical interface status, VLAN configuration, endpoint learning, and bridge-domain behavior. A correctly configured L2Out allows Layer 2 traffic to cross the ACI boundary according to the intended network design.

Question 233

Which ACI object defines the physical or logical interface path for an external routed connection?

1. Logical interface profile
2. Filter
3. Application profile
4. VLAN pool

Correct Answer: 1

Explanation

The logical interface profile defines interface-related information for an L3Out logical node and is used to establish the external routed connection. It works with the logical node profile and other L3Out components to define how the fabric reaches the external router. Filters define contract traffic rules, application profiles organize EPGs, and VLAN pools provide encapsulation resources. When an L3Out interface is not functioning, administrators should verify the logical node profile, logical interface profile, physical path, IP addressing, routing protocol, and associated external EPG. Correct interface-profile configuration is essential for establishing the intended external connectivity.

Question 234

Which ACI feature can provide a common communication policy for all EPGs within a VRF?

1. Static path binding
2. vzAny
3. Interface selector
4. Endpoint retention

Correct Answer: 2

Explanation

vzAny represents all EPGs within a VRF for contract relationships and can simplify policies that need to apply broadly across multiple EPGs. Instead of creating individual relationships for many EPG combinations, administrators can use vzAny with suitable contracts to establish a common policy scope. Static path binding controls endpoint attachment, interface selectors identify physical interfaces, and endpoint retention manages learned endpoint information. Because vzAny can affect many EPGs, administrators should carefully evaluate the scope of every associated contract. Broad policies should be used only when the intended communication requirements are clearly understood.

Question 235

Which ACI architecture component normally connects directly to servers and other endpoints?

1. Spine switch
2. APIC
3. Leaf switch
4. External router

Correct Answer: 3

Explanation

Leaf switches provide the endpoint-facing interfaces in the ACI fabric. Servers, appliances, virtualization infrastructure, and other devices normally connect directly to leaf switches. Spine switches provide transit between leaf switches, APIC controllers provide management and policy functions, and external routers provide connectivity outside the fabric. Leaf switches also apply endpoint-related policy and perform forwarding functions according to the ACI configuration. When troubleshooting an endpoint connection, administrators should inspect the physical leaf interface, interface policy group, EPG association, encapsulation, endpoint learning, and bridge-domain configuration to determine whether the endpoint has been correctly attached to the fabric.

Question 236

Which ACI protocol provides neighbor discovery primarily for Cisco network devices?

1. BGP
2. CDP
3. OSPF
4. SNMP

Correct Answer: 2

Explanation

Cisco Discovery Protocol, or CDP, provides neighbor information for directly connected Cisco devices. It can reveal details such as the neighboring device identity, platform, interface, and other capabilities. BGP and OSPF are routing protocols, while SNMP is used for monitoring and management. CDP can help administrators validate physical connectivity and confirm that the expected Cisco device is connected to a particular interface. When troubleshooting ACI access ports, administrators can compare CDP information with interface configuration, LLDP information, and access-policy settings. This can help identify incorrect cabling or unexpected neighboring devices.

Question 237

Which ACI policy controls how external prefixes are accepted or advertised through an L3Out?

1. Route control policy
2. Interface policy
3. Endpoint retention policy
4. VLAN pool

Correct Answer: 1

Explanation

A route control policy controls the import and export behavior of routes associated with external connectivity. Through an L3Out, administrators can use route-control policies to determine which prefixes are advertised to external routers and which external prefixes are accepted into the fabric. Interface policies control physical interface characteristics, endpoint retention policies affect learned endpoint information, and VLAN pools provide encapsulation resources. Route-control policies are important when an organization requires selective route exchange rather than unrestricted advertisement. During troubleshooting, administrators should compare route-control rules with external subnet definitions and routing protocol status to determine why expected routes are absent or unexpected routes appear.

Question 238

Which ACI object is used to associate a bridge domain with a Layer 3 routing context?

1. Contract
2. Filter
3. VRF
4. VLAN pool

Correct Answer: 3

Explanation

A bridge domain is associated with a VRF to establish its Layer 3 routing context. The VRF determines which routing table the bridge-domain subnet participates in and provides logical separation from other routing domains. Contracts define communication policy, filters define traffic rules, and VLAN pools provide encapsulation resources. When a bridge domain cannot communicate with another routed network, administrators should first verify its VRF association and subnet configuration. They should then check whether unicast routing is enabled and whether appropriate external routing and contracts are configured. Correct VRF association is fundamental to predictable Layer 3 forwarding in ACI.

Question 239

Which ACI object is used to associate an EPG with a particular access path and encapsulation on a leaf?

1. Static path binding
2. External EPG
3. Route control policy
4. Application profile

Correct Answer: 1

Explanation

Static path binding associates an EPG with a specific leaf access path and encapsulation, commonly for physical or bare-metal endpoints. It identifies where the EPG should be deployed and which VLAN encapsulation should be used. External EPGs represent outside networks, route-control policies manage external route behavior, and application profiles organize EPGs. When configuring a static binding, administrators should verify the leaf interface path, encapsulation VLAN, deployment immediacy, domain association, and interface policy. Incorrect path or encapsulation settings can prevent an endpoint from receiving the intended EPG policy and connectivity.

Question 240

Which ACI data-plane technology is used to transport encapsulated endpoint traffic across the fabric?

1. OSPF
2. BGP
3. VXLAN
4. LLDP

Correct Answer: 3

Explanation

VXLAN provides the overlay data-plane encapsulation used to transport endpoint traffic across the Cisco ACI fabric. It allows traffic from endpoints attached to different leaf switches to traverse the spine infrastructure while maintaining logical segmentation. OSPF and BGP can provide routing functions for supported control-plane or external connectivity scenarios, while LLDP provides neighbor discovery. When troubleshooting inter-leaf traffic, administrators should verify endpoint learning, fabric connectivity, encapsulation information, bridge-domain configuration, and applicable policy. Understanding VXLAN helps explain how traffic moves across the fabric while preserving the logical network and policy context assigned to endpoints.