View Full Cisco CCNP Data Center 300-620 Exam Dumps and Practice Test Dumps.

 

Question 101

Which ACI component is responsible for discovering and maintaining information about fabric nodes during initial fabric setup?

1. APIC fabric discovery process
2. Contract
3. External EPG
4. VLAN pool

Correct Answer: 4

Explanation

Fabric discovery allows APIC to identify and incorporate switches into the ACI fabric. During deployment, the APIC controllers establish communication with fabric nodes and administrators assign appropriate node IDs and other fabric parameters. This process is fundamental because the fabric must know which leaf and spine switches are participating before normal policy deployment can occur. Contracts control endpoint communication, external EPGs represent external networks, and VLAN pools provide encapsulation resources. When adding a new switch, administrators should verify cabling, discovery status, node identification, and fabric membership. Successful discovery ensures that the switch can participate in the intended ACI topology.

Question 102

Which ACI component provides centralized management of the entire fabric through a cluster of controllers?

1. Leaf switch
2. APIC cluster
3. Spine switch
4. External router

Correct Answer: 2

Explanation

The APIC cluster provides centralized management and policy orchestration for a Cisco ACI fabric. Multiple APIC controllers work together to provide management availability and maintain the fabric’s policy and configuration information. Administrators use APIC to create tenants, VRFs, bridge domains, EPGs, contracts, access policies, and external connectivity. Leaf and spine switches implement the resulting policies and forwarding behavior, while external routers provide connectivity outside the fabric. Maintaining proper APIC cluster operation is important because controller availability affects management and policy operations. Administrators should monitor controller health, cluster membership, faults, and communication status during normal operations.

Question 103

Which ACI setting controls whether unknown unicast traffic is flooded within a bridge domain?

1. Unknown unicast behavior
2. Route control policy
3. Interface policy group
4. VMM domain

Correct Answer: 1

Explanation

Unknown unicast behavior determines how a bridge domain handles unicast traffic when the destination endpoint is not known in the endpoint database. Depending on the configuration, the traffic can be flooded or handled according to the selected forwarding behavior. This setting is part of bridge-domain configuration and can affect how traffic reaches endpoints whose location has not yet been learned. Route control policies manage external routing, interface policy groups define interface behavior, and VMM domains integrate virtualization environments. Administrators should understand the application’s requirements before modifying unknown-unicast behavior because unnecessary flooding can affect traffic efficiency and fabric resource usage.

Question 104

Which ACI object can be used to define a set of external IP prefixes for policy enforcement?

1. Interface profile
2. External EPG
3. VLAN pool
4. Endpoint retention policy

Correct Answer: 3

Explanation

An External EPG represents external network destinations connected through an L3Out and can contain external subnet definitions used for policy classification. These external subnets allow ACI to identify traffic associated with outside networks and apply contracts accordingly. Interface profiles define access interfaces, VLAN pools provide encapsulation resources, and endpoint retention policies control learned endpoint handling. When configuring external connectivity, administrators should place the correct external prefixes in the appropriate external EPG and associate the required contracts. This allows communication between internal EPGs and external destinations to be controlled according to the organization’s security and application requirements.

Question 105

Which ACI feature can dynamically learn the location of an endpoint connected to a leaf switch?

1. Contract subject
2. Endpoint learning
3. VLAN pool
4. Application profile

Correct Answer: 2

Explanation

Endpoint learning allows ACI leaf switches to identify endpoint information such as MAC and IP addresses and associate that information with a location in the fabric. This information is important for forwarding traffic to the correct destination. Endpoint learning can occur through normal traffic observation and supported discovery mechanisms. Contracts define policy relationships, VLAN pools provide encapsulation resources, and application profiles organize EPGs. Administrators can inspect endpoint information through APIC when troubleshooting connectivity or endpoint movement. If an endpoint is missing from the expected location, checking interface configuration, EPG deployment, bridge-domain settings, and endpoint learning state can help identify the problem.

Question 106

Which routing protocol is commonly used when an organization requires policy-based route exchange between separate autonomous systems?

1. OSPF
2. RIP
3. CDP
4. BGP

Correct Answer: 4

Explanation

BGP is designed to exchange routing information between autonomous systems and provides extensive policy controls for route selection and advertisement. In Cisco ACI, BGP can be configured through L3Out for external connectivity when the network design requires BGP peering. Administrators can control route advertisements using appropriate policies and prefix controls. OSPF is commonly used as an interior routing protocol, CDP is a discovery protocol, and RIP is an older distance-vector routing protocol. When troubleshooting BGP connectivity, administrators should verify peer addressing, autonomous system numbers, interface reachability, session state, and route-control configuration.

Question 107

Which ACI policy object associates a group of EPGs with common Layer 3 routing information?

1. VRF
2. Filter
3. Interface selector
4. VLAN pool

Correct Answer: 3

Explanation

The VRF provides the Layer 3 routing context used by bridge domains and their associated EPGs. It determines which routing table is used for Layer 3 forwarding and provides logical separation between different routing environments. Filters define permitted traffic within contracts, interface selectors identify interfaces for access policies, and VLAN pools provide encapsulation resources. A single VRF can support multiple bridge domains while maintaining a shared routing context. Administrators should carefully plan VRF boundaries when designing multi-tenant environments or applications that require routing isolation. Incorrect VRF associations can cause unexpected routing behavior or prevent communication with intended destinations.

Question 108

Which ACI object determines the physical or virtual connectivity options available to an EPG?

1. Domain
2. Contract
3. Filter
4. Route control policy

Correct Answer: 1

Explanation

An ACI domain defines the connectivity environment to which an EPG can be deployed. Physical domains support bare-metal connectivity, while VMM domains support virtualized environments. Domains are associated with VLAN pools and other configuration elements needed to provide endpoint connectivity. Contracts and filters control communication policies, while route-control policies influence external routing. When an EPG is not deploying correctly, administrators should verify that the appropriate domain is associated with the EPG and that the domain has a valid VLAN pool and required configuration. Correct domain association ensures that the fabric can apply the EPG policy to the intended endpoint environment.

Question 109

Which ACI feature allows a contract to be applied broadly to multiple EPGs within the same VRF?

1. Static path binding
2. Interface selector
3. vzAny
4. Endpoint retention

Correct Answer: 4

Explanation

The vzAny construct allows a contract relationship to be applied to all EPGs within a VRF according to the configured policy. This can simplify policy management when a common communication rule must apply broadly rather than being configured individually for many EPG relationships. Static path bindings control endpoint attachment, interface selectors identify interfaces for access policies, and endpoint retention controls learned endpoint behavior. Administrators should use broad contract application carefully because it can affect many EPGs simultaneously. Before implementing vzAny policies, the intended traffic scope and security requirements should be reviewed to avoid unintentionally permitting communication between applications.

Question 110

Which ACI feature provides policy-based segmentation between workloads even when they share the same physical infrastructure?

1. CDP
2. VLAN pool
3. Contract-based EPG policy
4. LLDP

Correct Answer: 3

Explanation

Contract-based EPG policy provides logical segmentation between workloads while allowing them to share the same physical ACI fabric. Endpoints are assigned to EPGs based on their connectivity and policy requirements, and contracts determine which EPGs can communicate. This approach separates application policy from the underlying physical topology. CDP and LLDP provide neighbor discovery, while VLAN pools supply encapsulation resources. Proper segmentation requires administrators to identify application groups, define appropriate EPGs, and create contracts that permit only required communication. This policy-driven approach can support multi-tenant environments and application security without requiring separate physical switching infrastructure for every workload.

Question 111

Which ACI object is used to define the logical interface configuration on a leaf connection toward an external routed device?

1. Logical interface profile
2. Application profile
3. Filter
4. Tenant

Correct Answer: 1

Explanation

A logical interface profile is part of an ACI L3Out configuration and represents the logical interface settings associated with a physical or logical connection toward an external device. It works with logical node profiles and interface configuration to establish external connectivity. Application profiles organize EPGs, filters define traffic characteristics, and tenants provide administrative boundaries. When configuring an L3Out, administrators should ensure that the correct leaf node, interface, encapsulation, IP addressing, and routing configuration are associated with the logical interface profile. Incorrect interface-profile configuration can prevent external adjacency formation or cause traffic to use an unintended external connection.

Question 112

Which ACI object defines the leaf nodes that participate in an L3Out connection?

1. Filter
2. Logical node profile
3. EPG
4. VLAN pool

Correct Answer: 2

Explanation

A logical node profile identifies the leaf nodes that participate in an L3Out configuration. It is used together with logical interface profiles to define the external connectivity structure. The logical node profile can include the relevant leaf switches and their external routing information. Filters define traffic characteristics, EPGs group endpoints, and VLAN pools provide encapsulation resources. When configuring external connectivity, administrators should ensure that the correct leaf nodes are included and that the associated logical interfaces and routing protocol settings match the external network. A mismatch in node or interface configuration can prevent the expected external connectivity from operating correctly.

Question 113

Which ACI bridge-domain option determines whether ARP requests can be flooded when the destination endpoint is not known?

1. Endpoint retention
2. ARP flooding
3. BGP
4. Contract subject

Correct Answer: 4

Explanation

ARP flooding is a bridge-domain setting that controls how ACI handles ARP requests when the required destination information is not available through endpoint learning. Enabling appropriate ARP behavior can be important for applications or environments that depend on broadcast-style ARP processing. Endpoint retention controls how learned endpoint information is maintained, BGP handles routing, and contract subjects define communication policy. Administrators should select ARP behavior according to the application and network design because unnecessary flooding can increase traffic across the environment. Troubleshooting ARP problems should include checking the bridge domain, subnet, endpoint learning, and associated policy configuration.

Question 114

Which ACI access-policy component identifies a specific range of physical interfaces on a leaf?

1. Interface selector
2. External EPG
3. VRF
4. Contract

Correct Answer: 1

Explanation

An interface selector identifies specific physical interfaces on a leaf switch and associates those interfaces with the required access policy. It is normally used together with an interface profile and interface policy group. This hierarchical structure allows administrators to apply consistent configuration to selected interfaces without manually configuring every port. External EPGs represent external networks, VRFs provide routing contexts, and contracts control communication between policy groups. When an access policy is not being applied as expected, administrators should verify the leaf switch profile, interface profile, selector range, and associated policy group. Accurate interface selection ensures that endpoints receive the intended configuration.

Question 115

Which ACI feature can be used to control whether an EPG is immediately deployed on a selected path?

1. Deployment immediacy
2. Route control
3. Endpoint retention
4. SNMP

Correct Answer: 3

Explanation

Deployment immediacy controls when an EPG policy is programmed on a selected path. Depending on the configuration, the policy can be deployed immediately or according to the selected deployment behavior. This setting can affect how quickly an endpoint receives the necessary policy after attachment. Route control manages routing information, endpoint retention affects learned endpoint handling, and SNMP provides monitoring information. Administrators should understand deployment behavior when troubleshooting an EPG that appears correctly configured but does not immediately become active on an interface. Checking deployment settings together with domain association and static path binding can help identify policy deployment issues.

Question 116

Which ACI component is used to connect the fabric to an external Layer 2 network?

1. L2Out
2. VRF
3. VMM domain
4. Filter

Correct Answer: 4

Explanation

An L2Out provides Layer 2 connectivity between an ACI fabric and an external Layer 2 network. It can be used when the external environment must remain part of the same Layer 2 communication domain rather than using routed Layer 3 connectivity. VRFs provide routing contexts, VMM domains integrate virtualization environments, and filters define traffic characteristics for contracts. Administrators should configure the appropriate external connection, bridge-domain relationship, VLAN encapsulation, and policy controls when deploying an L2Out. Troubleshooting should include checking external interface status, encapsulation configuration, bridge-domain settings, and endpoint learning to verify that Layer 2 traffic is being handled correctly.

Question 117

Which ACI object can provide a gateway address for endpoints within a bridge domain?

1. Contract
2. Bridge-domain subnet
3. VLAN pool
4. Interface selector

Correct Answer: 1

Explanation

A bridge-domain subnet can provide the gateway address used by endpoints for Layer 3 communication. The subnet is configured within the bridge domain and is associated with the bridge domain’s VRF. This allows endpoints to use the ACI fabric as their default gateway when Layer 3 routing is enabled. Contracts control communication policy, VLAN pools allocate encapsulation resources, and interface selectors identify physical interfaces. When troubleshooting default-gateway problems, administrators should verify the bridge-domain subnet, gateway address, unicast-routing setting, VRF association, and endpoint attachment. A correctly configured gateway is essential for communication outside the local subnet.

Question 118

Which ACI feature is used to monitor the operational health of fabric objects and policy components?

1. VLAN pool
2. Health score
3. Static path binding
4. Filter

Correct Answer: 4

Explanation

ACI uses health scores and related fault information to provide visibility into the operational condition of fabric objects and policies. APIC can display health information for tenants, applications, EPGs, switches, interfaces, and other managed objects. Health scores can help administrators identify areas requiring investigation, while detailed faults provide additional information about the underlying issue. VLAN pools, static path bindings, and filters serve configuration purposes rather than overall health monitoring. When troubleshooting an ACI environment, administrators should examine both the health score and the associated faults, events, and operational state instead of relying on a single indicator.

Question 119

Which ACI component is responsible for forwarding traffic between leaf switches through the fabric?

1. Spine switches
2. APIC controllers
3. External routers
4. Endpoints

Correct Answer: 2

Explanation

Spine switches provide the transit layer between leaf switches in the Cisco ACI fabric. Endpoints connect primarily to leaf switches, and traffic destined for an endpoint attached to another leaf can traverse the spine layer. APIC controllers manage policy and configuration rather than forwarding normal application traffic, while external routers provide connectivity outside the fabric. The leaf-and-spine architecture provides multiple available paths and predictable forwarding behavior. When troubleshooting traffic between endpoints on different leaves, administrators should verify leaf-to-spine connectivity, endpoint learning, fabric health, and policy deployment. Problems in the spine layer can affect communication across multiple leaf switches.

Question 120

Which ACI feature allows administrators to define a preferred group of EPGs that can communicate without requiring individual contracts between every member?

1. L3Out
2. VLAN pool
3. Preferred group
4. Interface selector

Correct Answer: 3

Explanation

The preferred group feature allows selected EPGs within a VRF to communicate according to the preferred-group configuration without requiring individual contract relationships between every participating EPG. This can simplify policy configuration when a set of application groups requires broad mutual communication. L3Out provides external connectivity, VLAN pools supply encapsulation resources, and interface selectors identify physical interfaces. Preferred groups should still be designed carefully because they can broaden communication beyond what individual contracts would permit. Administrators should verify which EPGs are included and ensure that the resulting communication scope matches the application’s security and connectivity requirements.