View Full Cisco CCNP Data Center 300-620 Exam Dumps and Practice Test Dumps.

 

Question 201

Which ACI component provides centralized policy management for the entire fabric?

1. Spine switch
2. Leaf switch
3. External router
4. APIC

Correct Answer: 4

Explanation

The Application Policy Infrastructure Controller, or APIC, provides centralized management and policy control for the Cisco ACI fabric. Administrators use APIC to configure tenants, VRFs, bridge domains, EPGs, contracts, access policies, external connectivity, and monitoring settings. Leaf and spine switches enforce the policies distributed by APIC, while external routers provide connectivity beyond the fabric. APIC also maintains configuration information and provides visibility into faults and health. When troubleshooting an ACI configuration, administrators can use APIC to inspect policy relationships, operational state, endpoint information, and fault messages. This centralized model simplifies management across the entire fabric.

Question 202

Which ACI object provides a logical boundary for routing and Layer 3 isolation?

1. VRF
2. EPG
3. Contract
4. Filter

Correct Answer: 1

Explanation

A VRF provides a logical routing boundary within Cisco ACI. It maintains an independent routing context and allows networks to be separated from other routing domains. Bridge domains are associated with VRFs, allowing their subnets to participate in the appropriate routing table. EPGs classify endpoints, contracts control communication, and filters define specific traffic rules. VRFs are especially important in multi-tenant environments because they help prevent unwanted route sharing. When troubleshooting routing problems, administrators should confirm that the bridge domain is associated with the correct VRF and that external connections, subnets, and routing policies use the intended routing context.

Question 203

Which ACI feature is used to represent endpoints outside the fabric that need policy-controlled communication with internal EPGs?

1. Application profile
2. External EPG
3. Physical domain
4. VLAN pool

Correct Answer: 2

Explanation

An External EPG represents external networks or destinations connected through an ACI external connection such as an L3Out. It allows external prefixes to participate in ACI policy relationships and contracts. Internal EPGs can consume or provide contracts to an External EPG, controlling which traffic is allowed between internal workloads and external networks. Application profiles organize internal EPGs, physical domains associate EPGs with physical infrastructure, and VLAN pools provide VLAN resources. When troubleshooting external access, administrators should verify the External EPG, external subnet configuration, L3Out association, routing state, and contract relationships.

Question 204

Which ACI feature provides connectivity from the fabric to an external routed Layer 3 network?

1. L2Out
2. Physical domain
3. L3Out
4. VMM domain

Correct Answer: 3

Explanation

L3Out provides external Layer 3 connectivity from an ACI fabric to routed networks. It can support routing protocols such as OSPF and BGP and can also be configured for other supported routing methods. L2Out is used for external Layer 2 connectivity, while physical and VMM domains associate EPGs with different types of infrastructure. An L3Out normally includes logical node and interface profiles, external EPGs, and external subnet definitions. When troubleshooting external routing, administrators should inspect these objects together with routing neighbors, route-control policies, interface status, and the associated VRF to identify configuration or reachability problems.

Question 205

Which ACI object groups endpoints that should receive similar application-level policy treatment?

1. EPG
2. VRF
3. Bridge domain
4. L3Out

Correct Answer: 1

Explanation

An Endpoint Group, or EPG, groups endpoints that require similar policy treatment within an ACI environment. EPGs can represent application tiers, security zones, or groups of workloads with common communication requirements. They are usually organized within an application profile and can communicate with other EPGs through contracts. A VRF provides routing separation, a bridge domain provides Layer 2 forwarding and gateway functionality, and an L3Out provides external Layer 3 connectivity. EPG design should be based primarily on policy requirements rather than physical location. This allows administrators to apply consistent policy even when workloads move between different access locations.

Question 206

Which ACI feature is used to exchange routes with an external network using a path-vector routing protocol?

1. OSPF
2. BFD
3. CDP
4. BGP

Correct Answer: 4

Explanation

BGP is a path-vector routing protocol that can be configured on an ACI L3Out to exchange routes with external networks. It uses autonomous system information and provides extensive route-selection and policy capabilities. OSPF is a link-state routing protocol, BFD provides rapid failure detection, and CDP provides neighbor discovery. When configuring BGP through an L3Out, administrators should verify local and remote autonomous system numbers, peer addresses, interface reachability, session state, and route-control policies. A BGP session can be established while expected routes remain unavailable, so administrators should also inspect prefix advertisement and import or export policies.

Question 207

Which ACI object supplies VLAN identifiers that can be allocated to endpoints through an associated domain?

1. VLAN pool
2. Contract
3. Filter
4. VRF

Correct Answer: 1

Explanation

A VLAN pool provides the VLAN IDs or VLAN ranges that ACI can use as encapsulation resources for associated domains. Physical and VMM domains can reference VLAN pools, allowing EPGs to obtain appropriate encapsulations when deployed. Contracts define communication relationships, filters specify traffic characteristics, and VRFs provide routing contexts. When an EPG cannot be deployed with the expected VLAN, administrators should inspect the domain association, VLAN pool range, encapsulation settings, and access policy configuration. Proper VLAN pool design prevents resource conflicts and ensures that the required VLAN identifiers are available for endpoint connectivity.

Question 208

Which ACI protocol can provide vendor-neutral discovery of directly connected neighbors?

1. CDP
2. LLDP
3. BGP
4. OSPF

Correct Answer: 2

Explanation

LLDP is a vendor-neutral Layer 2 neighbor-discovery protocol that allows directly connected devices to exchange information about their identity, interfaces, and capabilities. It is particularly useful in multi-vendor environments because it is based on an open standard. CDP is commonly associated with Cisco equipment, while BGP and OSPF are routing protocols. In an ACI environment, LLDP information can help administrators verify physical connectivity and identify unexpected connections. When troubleshooting an interface, checking LLDP neighbors alongside interface status and access-policy configuration can help determine whether the physical topology matches the intended design.

Question 209

Which ACI object provides the Layer 2 forwarding domain associated with a subnet and VRF?

1. Bridge domain
2. Contract
3. Filter
4. External EPG

Correct Answer: 1

Explanation

A bridge domain provides the Layer 2 forwarding domain in ACI and can contain a subnet that provides the gateway address for endpoints. The bridge domain is associated with a VRF, which provides its Layer 3 routing context. Contracts control communication between EPGs, filters define allowed traffic, and External EPGs represent external networks. Bridge-domain settings can also influence behavior such as unicast routing, ARP flooding, and unknown unicast handling. When troubleshooting endpoint connectivity, administrators should verify the bridge-domain association, subnet configuration, VRF, forwarding settings, and endpoint attachment to ensure that Layer 2 and Layer 3 behavior matches the intended design.

Question 210

Which ACI feature determines how traffic is handled when the destination MAC address is not known?

1. Contract
2. Unknown unicast behavior
3. Route control
4. Endpoint retention

Correct Answer: 2

Explanation

Unknown unicast behavior determines how ACI handles Layer 2 traffic when the destination endpoint is not known in the fabric’s endpoint information. Depending on the bridge-domain configuration, such traffic can be flooded or handled according to another supported behavior. Contracts define policy relationships, route-control policies manage external route behavior, and endpoint retention controls learned endpoint information. Administrators should understand the application requirements before modifying unknown-unicast settings because flooding can increase traffic across the network. If unknown destinations are causing unexpected traffic patterns, reviewing endpoint learning and bridge-domain forwarding settings can help identify the cause.

Question 211

Which ACI object establishes a communication relationship between consumer and provider EPGs?

1. VLAN pool
2. Contract
3. Physical domain
4. Interface profile

Correct Answer: 2

Explanation

A contract establishes the policy relationship between consumer and provider EPGs in Cisco ACI. The contract can contain subjects, and subjects can reference filters that define the protocols and ports allowed for communication. VLAN pools provide encapsulation resources, physical domains associate EPGs with physical infrastructure, and interface profiles organize interface configuration. Contracts are a central part of ACI’s application-centric security model because they explicitly define permitted communication rather than relying solely on physical connectivity. When application traffic is blocked, administrators should verify the consumer and provider relationships, contract association, subjects, filters, and EPG configuration.

Question 212

Which ACI access-policy object identifies a range of physical interfaces on a leaf switch?

1. Contract
2. VLAN pool
3. Interface selector
4. External EPG

Correct Answer: 3

Explanation

An interface selector identifies specific physical interfaces or interface ranges on a leaf switch within an interface profile. It determines where the associated interface policy configuration is applied. Contracts control EPG communication, VLAN pools provide encapsulation resources, and External EPGs represent external networks. Interface selectors are part of the ACI access-policy hierarchy and work with switch profiles, interface profiles, and interface policy groups. If an interface does not receive the expected configuration, administrators should verify the selector’s interface range, policy-group association, switch association, and physical interface state. Correct selector configuration ensures consistent deployment of access policies.

Question 213

Which ACI feature can provide rapid detection of a forwarding-path failure for supported protocols?

1. BFD
2. LLDP
3. SNMP
4. Syslog

Correct Answer: 1

Explanation

Bidirectional Forwarding Detection, or BFD, provides rapid detection of forwarding-path failures between supported network devices. It can work with supported routing protocols to reduce failure-detection time compared with relying only on standard routing protocol timers. LLDP provides neighbor discovery, SNMP provides monitoring information, and Syslog collects messages and events. BFD is useful when applications require rapid reaction to network failures. Administrators should verify support on both endpoints, correct configuration, and integration with the relevant routing protocol. When troubleshooting BFD, checking session state and underlying interface reachability is important because BFD cannot remain operational when the required forwarding path is unavailable.

Question 214

Which ACI object represents external network prefixes that can participate in contract-based policy?

1. Application profile
2. Bridge domain
3. External EPG
4. VLAN pool

Correct Answer: 3

Explanation

An External EPG represents external network destinations associated with an ACI external connection. External subnet prefixes can be associated with the External EPG so that contracts can control communication between internal EPGs and external networks. Application profiles organize internal EPGs, bridge domains provide forwarding domains, and VLAN pools supply VLAN resources. External EPGs are therefore an important part of ACI security policy for north-south traffic. When external communication fails, administrators should verify that the appropriate prefixes are associated with the External EPG, the L3Out is correctly configured, routing is operational, and the required contract relationships are present.

Question 215

Which ACI policy controls the amount of time endpoint information can remain available after an endpoint becomes inactive?

1. Contract subject
2. Endpoint retention policy
3. VLAN pool
4. Route control policy

Correct Answer: 2

Explanation

The endpoint retention policy controls how ACI handles endpoint information after an endpoint becomes inactive. It helps determine when learned endpoint information should be retained or removed according to the configured policy. Contract subjects define communication policy structure, VLAN pools provide encapsulation resources, and route-control policies manage external route behavior. Endpoint retention is useful in environments where endpoint activity can change frequently. During troubleshooting, administrators should determine whether an endpoint is currently learned, whether its information is stale, and how the retention policy affects its removal. This can help distinguish an endpoint-learning problem from an actual physical or policy connectivity issue.

Question 216

Which ACI component allows multiple physical links to operate as a redundant logical connection for a dual-attached endpoint?

1. vPC
2. L3Out
3. SNMP
4. Syslog

Correct Answer: 1

Explanation

Virtual Port Channel, or vPC, allows a supported endpoint to connect through two leaf switches while treating the links as a coordinated logical connection. This provides redundancy and can improve availability if one physical path fails. L3Out provides external routed connectivity, SNMP supports monitoring, and Syslog collects event messages. ACI vPC configurations require appropriate leaf-pair relationships, interface policy groups, and endpoint attachment settings. When troubleshooting a dual-homed server, administrators should check both physical links, vPC state, policy-group configuration, encapsulation, and endpoint learning. Correct vPC configuration helps prevent connectivity loss caused by a single access-link failure.

Question 217

Which ACI object organizes EPGs into a logical application structure?

1. VRF
2. Application profile
3. VLAN pool
4. L2Out

Correct Answer: 2

Explanation

An application profile provides a logical organizational structure for EPGs that belong to an application or service. For example, web, application, and database EPGs can be grouped within the same application profile while still maintaining separate policy identities. VRFs provide routing separation, VLAN pools provide encapsulation resources, and L2Out provides external Layer 2 connectivity. Application profiles make policy easier to manage because administrators can organize related EPGs according to application requirements. They do not themselves define communication permissions; contracts, filters, and related policy objects determine how the EPGs are allowed to communicate.

Question 218

Which ACI feature allows administrators to define selected routes that can be advertised through an L3Out?

1. Endpoint retention
2. Interface selector
3. Route control policy
4. VMM domain

Correct Answer: 3

Explanation

A route control policy allows administrators to control which routes are imported or exported through external routing connections such as an L3Out. This provides greater control over route advertisement and route acceptance rather than automatically exchanging every available prefix. Endpoint retention manages learned endpoint information, interface selectors identify physical interfaces, and VMM domains integrate virtualization environments. Route-control policies are particularly useful when an organization wants to advertise only specific internal networks or accept only approved external prefixes. During troubleshooting, administrators should examine route-control configuration together with external subnet definitions and routing protocol status to determine why a route is missing or unexpectedly present.

Question 219

Which ACI management option uses the production fabric interfaces for controller and endpoint-related management traffic?

1. Out-of-band management
2. In-band management
3. Console management
4. Dedicated serial management

Correct Answer: 2

Explanation

In-band management uses the ACI production fabric and associated network infrastructure for management communication. It differs from out-of-band management, which uses dedicated management connectivity separate from the production data path. In-band management can be useful when organizations want management traffic to use the existing fabric infrastructure. Administrators must ensure that the required bridge domains, management EPGs, contracts, and routing are properly configured. If in-band management becomes unavailable, troubleshooting should include checking the management EPG, bridge-domain and subnet configuration, contracts, fabric connectivity, and routing. Proper separation and policy design are important for reliable management access.

Question 220

Which ACI feature provides centralized monitoring information about device health and policy-related faults?

1. VLAN pool
2. Static path binding
3. Health scores and faults
4. Interface selector

Correct Answer: 3

Explanation

ACI health scores and faults provide centralized information about the operational condition of fabric components and policy objects. APIC calculates health information and presents faults associated with switches, interfaces, policies, endpoints, and other managed objects. VLAN pools provide encapsulation resources, static path bindings attach EPGs to access paths, and interface selectors identify physical interfaces. Health information can help administrators prioritize troubleshooting by identifying affected objects and related faults. When investigating a problem, administrators should examine the fault severity, affected object, timestamp, and related events rather than relying only on the overall health score. This provides better operational context for resolving the underlying issue.