View Full Cisco CCNP Data Center 300-620 Exam Dumps and Practice Test Dumps.

 

Question 381

Which ACI component provides the centralized interface for configuring tenants, EPGs, contracts, and fabric policies?

1. Spine switch
2. APIC
3. Leaf switch
4. External router

Correct Answer: 2

Explanation

APIC provides the centralized management and policy interface for Cisco ACI. Administrators use APIC to configure tenants, VRFs, bridge domains, EPGs, contracts, access policies, external connectivity, and monitoring settings. Leaf switches enforce policy and provide endpoint connectivity, while spine switches primarily provide fabric transit. External routers provide connectivity to networks outside the ACI fabric. APIC also maintains the policy database and coordinates configuration across the fabric. When troubleshooting configuration issues, administrators can use APIC to inspect faults, health scores, policy deployment, endpoint information, and fabric status. This centralized approach supports consistent policy management throughout the ACI environment.

Question 382

Which ACI object defines the Layer 3 routing context for a collection of bridge domains?

1. Filter
2. Contract
3. VRF
4. VLAN pool

Correct Answer: 3

Explanation

A VRF defines the Layer 3 routing context for bridge domains in ACI. Multiple bridge domains can share the same VRF and therefore participate in the same logical routing table. Separate VRFs provide routing isolation between different environments or tenants. Filters define traffic characteristics, contracts establish communication policies, and VLAN pools provide encapsulation resources. When troubleshooting routing between bridge domains, administrators should verify that the bridge domains are associated with the intended VRF and that their subnets and routing policies are configured correctly. Proper VRF design prevents unintended route sharing and supports logical segmentation within the ACI fabric.

Question 383

Which ACI feature is used to explicitly attach an EPG to a physical leaf interface with a specified encapsulation VLAN?

1. Static path binding
2. Preferred group
3. Route control
4. BFD

Correct Answer: 1

Explanation

Static path binding explicitly associates an EPG with a physical leaf interface or path and specifies the VLAN encapsulation used for the connection. It is commonly used for bare-metal servers and other physical endpoints. Preferred groups influence communication between selected EPGs, route-control policies influence external routing, and BFD provides rapid failure detection. When configuring static path binding, administrators should verify the target leaf, interface, encapsulation VLAN, physical domain, VLAN pool, and deployment settings. A mismatch in any of these components can prevent the endpoint from receiving the intended EPG policy. Static bindings therefore provide precise physical endpoint attachment within ACI.

Question 384

Which ACI policy object determines which application protocols and ports are permitted by a contract?

1. VRF
2. Bridge domain
3. Filter
4. Application profile

Correct Answer: 4

Explanation

A filter defines the specific traffic characteristics that a contract can permit, including protocols and source or destination ports. Filters are associated with contract subjects, which determine how the traffic rules are applied. A VRF provides routing separation, a bridge domain provides forwarding characteristics, and an application profile organizes related EPGs. When an application cannot communicate despite having a contract relationship, administrators should inspect the filter entries carefully. The configured protocol and port values must match the application’s actual traffic. Filter-based contracts provide a reusable way to implement application-level security without configuring individual endpoint ACLs.

Question 385

Which ACI access-policy component provides VLAN resources to a physical or virtual domain?

1. Contract
2. VLAN pool
3. External EPG
4. Interface selector

Correct Answer: 2

Explanation

A VLAN pool provides VLAN identifiers that can be allocated to physical or virtual connectivity domains. The domain references the VLAN pool so that the appropriate encapsulation resources are available when EPGs are deployed. Contracts control communication policy, External EPGs represent external destinations, and interface selectors identify physical interfaces. If an EPG cannot deploy because an encapsulation is unavailable, administrators should inspect the associated domain and VLAN pool configuration. They should verify that the required VLAN exists in the pool and that the pool is correctly associated with the domain. Proper VLAN resource planning helps avoid access-policy deployment problems.

Question 386

Which ACI feature allows selected EPGs within the same VRF to communicate without requiring individual contracts for every relationship?

1. Endpoint retention
2. Preferred group
3. ARP flooding
4. Resolution immediacy

Correct Answer: 4

Explanation

Preferred groups provide a mechanism for selected EPGs within the same VRF to communicate according to preferred-group policy without requiring individual contracts for every relationship. This can simplify policy design when several EPGs have similar communication requirements. Endpoint retention manages learned endpoint information, ARP flooding controls ARP behavior, and resolution immediacy affects policy dependency resolution. Administrators should carefully define preferred-group membership because it changes the normal contract-based communication model. When troubleshooting preferred-group connectivity, they should verify the EPG membership, VRF association, preferred-group configuration, and whether the intended EPGs are actually included in the policy.

Question 387

Which ACI component represents an external network destination for policy purposes?

1. External EPG
2. Application profile
3. Physical domain
4. VLAN pool

Correct Answer: 1

Explanation

An External EPG represents external network destinations connected through ACI external connectivity. External subnets can be associated with an External EPG, allowing contracts to control communication between internal EPGs and external networks. Application profiles organize internal EPGs, physical domains provide physical endpoint connectivity, and VLAN pools provide VLAN encapsulation resources. External EPGs are commonly used with L3Out configurations to establish policy boundaries for north-south traffic. If internal workloads cannot communicate with an external network, administrators should check the External EPG subnet definitions, L3Out configuration, routing state, route-control policies, and contracts.

Question 388

Which ACI routing technology can be configured on an L3Out to exchange routes using a link-state protocol?

1. BGP
2. OSPF
3. CDP
4. LLDP

Correct Answer: 3

Explanation

OSPF is a link-state routing protocol that can be configured through an ACI L3Out to exchange routes with external OSPF-speaking devices. It establishes neighbor relationships and exchanges link-state information to construct routing knowledge. BGP is a path-vector routing protocol, while CDP and LLDP provide neighbor-discovery information rather than route exchange. When troubleshooting OSPF through an L3Out, administrators should verify the area configuration, interface addressing, neighbor state, routing policy, and route-control settings. A healthy OSPF adjacency does not necessarily mean the desired application routes are available, so route advertisement and import policies should also be checked.

Question 389

Which ACI component provides direct physical connectivity for servers attached to the fabric?

1. APIC
2. Spine switch
3. Leaf switch
4. External router

Correct Answer: 4

Explanation

Leaf switches provide direct physical connectivity for servers, appliances, and other endpoints attached to the ACI fabric. They are responsible for endpoint attachment and policy enforcement before traffic is forwarded through the spine layer. APIC provides management and policy orchestration, spine switches provide fabric transit, and external routers connect the ACI environment to outside networks. When an endpoint cannot connect, administrators should check the leaf interface, interface policy, EPG attachment, VLAN encapsulation, endpoint learning, and bridge-domain configuration. Because endpoints normally connect directly to leaf switches, the leaf is a critical starting point for physical and policy troubleshooting.

Question 390

Which ACI setting controls whether a bridge domain performs Layer 3 forwarding?

1. Unknown unicast
2. Endpoint retention
3. Unicast routing
4. ARP flooding

Correct Answer: 3

Explanation

The unicast routing setting determines whether Layer 3 routing is enabled for a bridge domain. When enabled, the bridge domain can provide Layer 3 gateway functionality through its configured subnet. Unknown-unicast behavior controls Layer 2 frames with unknown destinations, endpoint retention controls learned endpoint information, and ARP flooding controls ARP request handling. If endpoints can communicate locally but cannot reach other subnets, administrators should verify unicast routing, the bridge-domain subnet, VRF association, and relevant contracts. Correct configuration ensures that the bridge domain can participate in Layer 3 forwarding and provide the expected gateway functionality to connected endpoints.

Question 391

Which ACI feature controls how ARP requests are flooded within a bridge domain?

1. Deployment immediacy
2. ARP flooding
3. Route control
4. Preferred group

Correct Answer: 2

Explanation

ARP flooding controls the handling of ARP requests within a bridge domain when traditional flooding behavior is required. Certain applications and network designs depend on ARP requests reaching other endpoints in the broadcast domain. Deployment immediacy controls when policy is programmed, route control influences external routing, and preferred groups simplify selected EPG communication. When an endpoint cannot resolve another endpoint’s IP address, administrators should review ARP flooding along with the bridge-domain subnet, endpoint learning, and gateway configuration. Correct ARP behavior can be important for applications that rely on conventional Layer 2 address resolution within their network segment.

Question 392

Which ACI access-policy object combines multiple interface policies such as CDP, LLDP, and link aggregation settings?

1. Interface policy group
2. Interface selector
3. Switch profile
4. Physical domain

Correct Answer: 1

Explanation

An interface policy group combines multiple individual interface policies into a reusable configuration for a physical interface. Depending on the design, it can include policies for CDP, LLDP, speed, link aggregation, storm control, and other interface behaviors. The interface selector identifies which interfaces receive the policy group, the switch profile associates configuration with leaf switches, and the physical domain provides endpoint connectivity resources. When troubleshooting a physical port, administrators should inspect the policy group and verify that its constituent policies match the intended interface behavior. Proper grouping simplifies access-policy management and promotes consistent configuration across multiple interfaces.

Question 393

Which ACI object is used to organize multiple EPGs belonging to the same application?

1. VRF
2. Application profile
3. Contract
4. VLAN pool

Correct Answer: 2

Explanation

An application profile organizes multiple EPGs that belong to the same application or logical service. For example, an application profile can contain separate EPGs for web, application, and database tiers. A VRF provides the routing context, contracts define communication policy, and VLAN pools provide encapsulation resources. Application profiles help administrators manage policy in an application-centric manner rather than organizing configurations solely around physical network locations. When troubleshooting an application, administrators can begin with the application profile and inspect its EPGs, contracts, bridge domains, domains, and endpoint attachments to determine where a policy or connectivity problem exists.

Question 394

Which ACI object provides the logical interface configuration for an L3Out connection?

1. External EPG
2. Logical interface profile
3. Application profile
4. Contract subject

Correct Answer: 4

Explanation

A logical interface profile defines the logical interface configuration associated with an ACI L3Out. It works with the logical node profile to represent the external routed connection and can contain interface-specific addressing and routing configuration. External EPGs represent external destinations, application profiles organize internal EPGs, and contract subjects define how filters are applied. When troubleshooting an external interface, administrators should verify the logical interface profile, logical node profile, physical interface path, IP configuration, routing protocol, and VRF. Correct logical interface configuration is necessary for establishing the intended Layer 3 relationship between the ACI fabric and an external network.

Question 395

Which ACI feature provides rapid detection of failures between supported network peers?

1. BFD
2. CDP
3. LLDP
4. VXLAN

Correct Answer: 1

Explanation

BFD provides rapid detection of forwarding-path failures between supported peers. It can operate with routing protocols to reduce the time required to detect a failed path compared with relying only on normal routing-protocol timers. CDP and LLDP provide neighbor discovery, while VXLAN provides overlay encapsulation. When troubleshooting a BFD session, administrators should verify the underlying interface connectivity, peer configuration, BFD parameters, and session state. A BFD failure can indicate an underlying path problem rather than an isolated BFD configuration issue. Proper BFD deployment can improve convergence behavior when supported routing or forwarding connections fail.

Question 396

Which ACI management method uses a dedicated management network separate from the production fabric?

1. In-band management
2. Out-of-band management
3. Preferred-group management
4. Contract-based management

Correct Answer: 4

Explanation

Out-of-band management uses a dedicated management network that is separate from the production data-plane fabric. This provides an alternative management path that can remain available when certain production-fabric forwarding or policy problems occur. In-band management uses the ACI fabric itself to transport management traffic, while preferred groups and contracts are policy constructs rather than management methods. When designing operational access, administrators should consider the availability requirements and failure scenarios of each method. Out-of-band management can be particularly useful during severe fabric troubleshooting because management access does not depend on normal production traffic forwarding.

Question 397

Which ACI object controls the communication relationship between consumer and provider EPGs?

1. Contract
2. VLAN pool
3. Physical domain
4. Interface selector

Correct Answer: 3

Explanation

A contract controls the communication relationship between a consumer EPG and a provider EPG. It defines which services or traffic types the consumer is allowed to access through subjects and filters. VLAN pools provide encapsulation resources, physical domains associate EPGs with physical connectivity, and interface selectors identify physical interfaces. When a consumer cannot reach a provider application, administrators should verify that the provider is actually providing the intended contract and that the consumer is consuming it. They should also inspect the contract subject, filter entries, VRF association, and endpoint connectivity. Contracts provide reusable, policy-based security between application groups.

Question 398

Which ACI overlay technology is used to carry tenant traffic across the leaf-and-spine fabric?

1. OSPF
2. BGP
3. VXLAN
4. CDP

Correct Answer: 3

Explanation

VXLAN is the overlay encapsulation technology used by ACI to transport tenant traffic across the leaf-and-spine fabric. It allows logical networks and endpoint policies to be carried across the physical infrastructure while maintaining segmentation. OSPF and BGP are routing protocols, while CDP is used for neighbor discovery. VXLAN works together with ACI endpoint learning and policy enforcement to determine how traffic is forwarded. When troubleshooting overlay communication, administrators should verify endpoint learning, EPG deployment, bridge-domain settings, leaf-to-spine connectivity, and policy resolution. VXLAN provides the transport mechanism, while ACI policy determines how endpoints communicate.

Question 399

Which ACI component represents a collection of external IP prefixes that can be used in policy relationships?

1. External EPG
2. Interface policy group
3. VMM domain
4. Application profile

Correct Answer: 4

Explanation

An External EPG can contain external subnet definitions representing networks outside the ACI fabric. These external destinations can participate in contract-based policy relationships with internal EPGs. Interface policy groups define physical interface behavior, VMM domains integrate virtualization platforms, and application profiles organize internal EPGs. External EPGs are commonly used with L3Out configurations to provide a policy boundary for north-south traffic. When external connectivity fails, administrators should verify the External EPG subnet definitions, L3Out association, VRF, routing protocol state, route-control policies, and contracts. Correct configuration ensures that external prefixes are represented properly within the ACI policy model.

Question 400

Which ACI feature determines when an EPG’s required policy resources are resolved before deployment?

1. Endpoint retention
2. Resolution immediacy
3. Unknown unicast behavior
4. Intra-EPG isolation

Correct Answer: 2

Explanation

Resolution immediacy controls how quickly ACI resolves the policy dependencies required for an EPG before the policy can be deployed. It is part of the EPG deployment behavior and can affect how quickly the fabric determines the resources and relationships needed for policy installation. Endpoint retention controls learned endpoint information, unknown-unicast behavior controls Layer 2 handling, and intra-EPG isolation controls communication among endpoints in the same EPG. When an EPG policy does not appear on the expected leaf, administrators should review resolution immediacy together with deployment immediacy, domain association, VLAN pools, path bindings, and interface policies.