View Full Cisco CCNP Data Center 300-620 Exam Dumps and Practice Test Dumps.

 

Question 361

Which ACI component is used to group related bridge domains and EPGs according to an application design?

1. Application profile
2. VLAN pool
3. Interface selector
4. Route control policy

Correct Answer: 4

Explanation

An application profile provides a logical organizational structure for related EPGs within a tenant. EPGs representing different application tiers, such as web, application, and database workloads, can be grouped under the same application profile. VLAN pools provide encapsulation resources, interface selectors identify physical interfaces, and route-control policies influence external routing information. Application profiles do not directly perform packet forwarding; instead, they organize policy objects so administrators can manage application-centric configurations more effectively. When troubleshooting an application, administrators can inspect the application profile to identify related EPGs and then examine their bridge domains, contracts, domains, and endpoint attachments.

Question 362

Which ACI object provides Layer 3 routing isolation between separate logical environments?

1. Contract
2. VRF
3. Filter
4. VLAN pool

Correct Answer: 2

Explanation

A VRF provides a separate Layer 3 routing context and is used to maintain routing isolation between logical environments. Multiple bridge domains can be associated with the same VRF, while different VRFs maintain separate routing tables. Contracts control communication policy, filters define traffic characteristics, and VLAN pools provide encapsulation resources. VRFs are especially important in multi-tenant environments where routes belonging to one logical environment should not automatically appear in another. When troubleshooting routing behavior, administrators should verify the VRF association of bridge domains and L3Outs, subnet configuration, route tables, and applicable external routing policies.

Question 363

Which ACI feature allows a physical EPG attachment to specify the VLAN encapsulation used on a leaf interface?

1. Static path binding
2. BFD
3. Route control
4. Preferred group

Correct Answer: 1

Explanation

Static path binding allows an EPG to be explicitly attached to a physical leaf interface or path using a specified VLAN encapsulation. This is commonly used for bare-metal servers and other physical endpoints that require direct connectivity to a leaf switch. BFD provides rapid failure detection, route-control policies influence routing information, and preferred groups simplify certain EPG communication relationships. When configuring static path binding, administrators should verify the selected leaf, interface path, encapsulation VLAN, physical domain, VLAN pool, and deployment settings. Incorrect static path configuration can prevent an endpoint from receiving the expected EPG policy and network connectivity.

Question 364

Which ACI object contains the individual traffic rules that specify protocols and ports within a contract?

1. VRF
2. Filter
3. Application profile
4. Bridge domain

Correct Answer: 3

Explanation

A filter contains individual traffic rules that identify protocols, ports, and other traffic characteristics permitted by an ACI contract. The contract subject associates the filter with the contract and determines how the filter is applied. A VRF provides routing isolation, an application profile organizes EPGs, and a bridge domain provides Layer 2 and Layer 3 forwarding characteristics. When an application connection is denied, administrators should verify the filter entries and confirm that the protocol and port information matches the actual traffic. Correct filter configuration is essential for implementing precise application-level security policies between EPGs.

Question 365

Which ACI protocol is used to exchange routing information with an external autonomous system using a path-vector approach?

1. OSPF
2. BGP
3. LLDP
4. CDP

Correct Answer: 4

Explanation

BGP is a path-vector routing protocol commonly used to exchange routes between different autonomous systems. In ACI, BGP can be configured through an L3Out to establish external routing relationships. OSPF is a link-state routing protocol, while LLDP and CDP provide neighbor-discovery information. When troubleshooting an ACI BGP connection, administrators should verify the external node configuration, autonomous-system numbers, neighbor addresses, interface status, and route-control policies. A BGP session can be established while route exchange remains restricted by policy, so administrators should also verify which prefixes are being advertised and accepted by the external routing domain.

Question 366

Which ACI component provides the logical interface configuration for an external routed connection?

1. Logical interface profile
2. External EPG
3. VLAN pool
4. Contract filter

Correct Answer: 1

Explanation

A logical interface profile defines the logical interface configuration associated with an ACI L3Out. It works with the logical node profile to represent the external Layer 3 connection and can include interface-level addressing and routing configuration. External EPGs represent external destinations, VLAN pools provide encapsulation resources, and contract filters define traffic rules. When troubleshooting an L3Out interface, administrators should verify the logical interface profile, logical node profile, physical path, IP addressing, routing protocol settings, and associated VRF. Correct logical interface configuration is required before external routing can operate as intended.

Question 367

Which ACI feature determines how ARP requests are handled when the destination endpoint is not directly known?

1. Unknown unicast behavior
2. Endpoint retention
3. ARP flooding
4. Deployment immediacy

Correct Answer: 3

Explanation

ARP flooding determines how ARP requests are handled within a bridge domain when the destination information is not available through normal endpoint learning. Some applications and network designs require traditional ARP flooding behavior for proper address resolution. Unknown unicast behavior handles Layer 2 frames with unknown destination MAC addresses, endpoint retention affects the retention of learned endpoint information, and deployment immediacy controls policy programming timing. When troubleshooting failed address resolution, administrators should review the bridge-domain subnet, ARP flooding setting, endpoint learning, and gateway configuration. These settings work together to determine how ARP traffic is processed inside the fabric.

Question 368

Which ACI object represents a group of external destinations associated with an L3Out?

1. Application profile
2. External EPG
3. Physical domain
4. VLAN pool

Correct Answer: 2

Explanation

An External EPG represents external destinations associated with an ACI L3Out. External subnets can be defined under the External EPG, and contracts can control communication between internal EPGs and those destinations. Application profiles organize internal EPGs, physical domains define physical endpoint connectivity, and VLAN pools provide VLAN encapsulation resources. External EPGs are particularly important for north-south security policy because they provide a logical policy boundary for external networks. When external communication fails, administrators should verify the External EPG subnet configuration, L3Out association, routing state, route-control policies, and contract relationships.

Question 369

Which ACI component provides centralized management and policy orchestration for the fabric?

1. Spine switch
2. Leaf switch
3. APIC
4. External router

Correct Answer: 1

Explanation

APIC provides centralized management, policy configuration, monitoring, and orchestration for a Cisco ACI fabric. Administrators use APIC to create and manage tenants, VRFs, bridge domains, EPGs, contracts, access policies, and external connectivity. Leaf switches enforce policy and provide endpoint connectivity, while spine switches primarily provide fabric transit. External routers connect the fabric to outside networks. APIC also maintains the policy database and coordinates configuration across the fabric. When troubleshooting management or policy problems, administrators should review APIC cluster health, faults, fabric membership, policy deployment status, and connectivity between controllers and the fabric switches.

Question 370

Which ACI access-policy component is used to associate a group of leaf interfaces with a specific interface policy group?

1. Interface selector
2. Contract
3. VRF
4. External EPG

Correct Answer: 4

Explanation

An interface selector identifies the physical interfaces or interface ranges to which a selected interface policy group should be applied. It is part of the ACI access-policy hierarchy and connects logical interface configuration with actual leaf ports. Contracts define communication policy, VRFs provide routing contexts, and External EPGs represent external destinations. When configuring physical endpoint connectivity, administrators should verify the switch profile, interface profile, selector, policy group, and associated domain. An incorrect selector can cause the intended interface policies to be applied to the wrong ports or prevent an EPG from deploying on the required physical interface.

Question 371

Which ACI setting controls the treatment of Layer 2 traffic destined for an unknown MAC address?

1. Unknown unicast behavior
2. ARP flooding
3. Endpoint retention
4. Unicast routing

Correct Answer: 1

Explanation

Unknown unicast behavior controls how Layer 2 frames are handled when the destination MAC address is not known to the fabric. Depending on the bridge-domain configuration, unknown destination traffic may be flooded or handled according to the configured policy. ARP flooding specifically affects ARP requests, endpoint retention controls learned endpoint information, and unicast routing controls Layer 3 forwarding. When unexpected Layer 2 flooding occurs, administrators should examine the bridge-domain unknown-unicast setting together with endpoint learning and endpoint location. Understanding this feature is important for controlling Layer 2 behavior while maintaining compatibility with workloads that depend on traditional forwarding mechanisms.

Question 372

Which ACI access-policy object associates a VLAN pool with physical endpoint connectivity?

1. Contract
2. Physical domain
3. Application profile
4. External EPG

Correct Answer: 3

Explanation

A physical domain associates a VLAN pool with physical endpoint connectivity and provides the access-policy relationship required for deploying EPGs to physical interfaces. The VLAN pool supplies available encapsulation VLANs, while the physical domain connects those resources to the appropriate EPG and access policies. Contracts control communication, application profiles organize EPGs, and External EPGs represent external destinations. When an EPG cannot be deployed to a bare-metal server, administrators should verify the physical domain association, VLAN pool, interface selector, policy group, static path binding, and encapsulation VLAN. All of these components must align for successful physical endpoint deployment.

Question 373

Which ACI feature can simplify communication between selected EPGs within the same VRF?

1. Preferred group
2. BFD
3. Endpoint retention
4. VLAN pool

Correct Answer: 4

Explanation

Preferred groups can simplify communication between selected EPGs within the same VRF by allowing preferred-group members to communicate according to the configured preferred-group policy. This can reduce the need to create numerous individual contracts between closely related EPGs. BFD provides rapid failure detection, endpoint retention manages learned endpoint information, and VLAN pools provide encapsulation resources. Preferred groups should be used carefully because they change the normal contract-based communication model. When troubleshooting unexpected communication, administrators should verify the VRF, EPG membership, preferred-group configuration, and whether the communicating EPGs are actually included in the intended policy.

Question 374

Which ACI technology provides the overlay encapsulation used between leaf and spine switches?

1. OSPF
2. VXLAN
3. CDP
4. BGP

Correct Answer: 2

Explanation

VXLAN provides the overlay encapsulation used to transport tenant traffic across the ACI leaf-and-spine fabric. It allows logical networks and policy contexts to be carried over the physical infrastructure while maintaining segmentation between different environments. OSPF and BGP are routing protocols, while CDP provides neighbor-discovery information. ACI combines VXLAN encapsulation with endpoint learning and policy enforcement to determine how traffic is forwarded. When troubleshooting overlay traffic, administrators should verify endpoint learning, EPG deployment, bridge-domain configuration, leaf-to-spine connectivity, and policy resolution. VXLAN itself provides the transport mechanism but does not replace the ACI policy model.

Question 375

Which ACI protocol can provide standardized discovery information about directly connected network devices?

1. LLDP
2. BFD
3. OSPF
4. BGP

Correct Answer: 1

Explanation

LLDP is a standardized Layer 2 neighbor-discovery protocol that allows compatible devices to exchange information about directly connected neighbors. In ACI, LLDP can be configured through interface policies and policy groups. It can help administrators identify neighboring devices and validate physical topology during troubleshooting. BFD provides rapid failure detection, while OSPF and BGP exchange routing information. If expected LLDP information is missing, administrators should verify the interface policy, policy group, selector, physical interface state, and LLDP configuration on the neighboring device. Neighbor information can help confirm whether a cable is connected to the expected interface and device.

Question 376

Which ACI component provides connectivity between the fabric and an external Layer 2 network?

1. L3Out
2. L2Out
3. VMM domain
4. VRF

Correct Answer: 3

Explanation

L2Out provides connectivity between the ACI fabric and an external Layer 2 network. It allows Layer 2 traffic to extend beyond the fabric boundary through the appropriate external connectivity configuration. L3Out is used for routed Layer 3 connectivity, VMM domains integrate virtualization platforms, and VRFs provide routing contexts. When troubleshooting an L2Out, administrators should verify the associated bridge domain, external connectivity configuration, VLAN encapsulation, physical path, and endpoint policy. Correct L2Out configuration is important when applications require Layer 2 adjacency or external Layer 2 communication while still using the ACI fabric’s centralized policy framework.

Question 377

Which ACI feature provides rapid failure detection for supported routing or forwarding peers?

1. CDP
2. LLDP
3. BFD
4. VXLAN

Correct Answer: 3

Explanation

BFD provides rapid failure detection between supported network peers. It is designed to identify forwarding-path failures faster than many routing protocols would detect them through their normal timers. CDP and LLDP provide neighbor discovery, while VXLAN provides overlay encapsulation. BFD can operate alongside routing protocols such as BGP or OSPF to improve convergence behavior. During troubleshooting, administrators should verify BFD configuration on both peers, underlying interface connectivity, session state, and any relevant routing integration. If a BFD session repeatedly fails, the underlying physical or logical path should also be investigated rather than treating BFD itself as the root cause.

Question 378

Which ACI policy controls whether routing is enabled for a bridge domain?

1. Unicast routing
2. ARP flooding
3. Unknown unicast
4. Endpoint retention

Correct Answer: 4

Explanation

Unicast routing controls whether Layer 3 routing is enabled for a bridge domain. When enabled, the bridge domain can provide Layer 3 gateway functionality through its configured subnet. ARP flooding controls ARP behavior, unknown-unicast settings affect Layer 2 frames with unknown destinations, and endpoint retention manages learned endpoint information. If endpoints can communicate at Layer 2 but cannot reach routed destinations, administrators should verify the bridge-domain unicast-routing setting, subnet configuration, VRF association, and relevant contracts. Correctly enabling routing is essential for communication between subnets and for traffic that must leave the local bridge domain.

Question 379

Which ACI object defines the routing context in which an L3Out operates?

1. Filter
2. VRF
3. VLAN pool
4. Interface policy group

Correct Answer: 2

Explanation

An L3Out operates within a specific VRF, which provides the Layer 3 routing context for external connectivity. The VRF determines the routing table used by the L3Out and its associated bridge domains and external routes. Filters define contract traffic rules, VLAN pools provide encapsulation resources, and interface policy groups control physical interface behavior. When external routing behaves unexpectedly, administrators should verify that the L3Out is associated with the correct VRF and that the external routing configuration matches the intended network design. They should also inspect route-control policies, external subnets, and routing-protocol neighbor states.

Question 380

Which ACI feature determines when policy dependencies are resolved before deployment to the leaf switch?

1. Endpoint retention
2. Resolution immediacy
3. Unknown unicast
4. Intra-EPG isolation

Correct Answer: 1

Explanation

Resolution immediacy determines how quickly ACI resolves the policy dependencies required before an EPG configuration can be deployed. It is related to the process of determining the resources and policy relationships necessary for a configuration to become operational on the leaf. Endpoint retention controls learned endpoint information, unknown-unicast behavior controls Layer 2 traffic, and intra-EPG isolation controls communication between endpoints in the same EPG. When troubleshooting delayed policy installation, administrators should review resolution immediacy together with deployment immediacy, domain association, VLAN pools, path bindings, and the overall access-policy hierarchy.