View Full Cisco CCNP Data Center 300-620 Exam Dumps and Practice Test Dumps.

 

Question 161

Which ACI object is used to identify a collection of external prefixes connected through an L3Out?

1. VRF
2. Filter
3. Application profile
4. External EPG

Correct Answer: 4

Explanation

An External EPG represents external networks reachable through an ACI L3Out. External subnet prefixes can be associated with the External EPG, allowing ACI to classify traffic destined for or originating from those networks. Contracts can then be applied between internal EPGs and the External EPG to control communication. A VRF provides the routing context, filters define permitted traffic, and application profiles organize internal EPGs. When troubleshooting external connectivity, administrators should verify that the correct prefixes are associated with the External EPG and that the L3Out, routing configuration, and required contracts are properly configured.

Question 162

Which ACI object provides the Layer 3 routing context for a bridge domain?

1. VRF
2. VLAN pool
3. EPG
4. Contract

Correct Answer: 1

Explanation

A VRF provides the Layer 3 routing context for a bridge domain in Cisco ACI. The bridge domain is associated with a VRF, and its subnet participates in the routing table of that VRF. Multiple bridge domains can share the same VRF when they need to communicate through a common routing context. VLAN pools provide encapsulation resources, EPGs classify endpoints, and contracts define communication policies. When troubleshooting routing behavior, administrators should confirm that the bridge domain is associated with the intended VRF and that the required subnet and routing settings are configured correctly. Incorrect VRF associations can cause unexpected routing isolation.

Question 163

Which ACI feature is used to provide redundant connectivity from a leaf pair to a dual-homed server?

1. L3Out
2. vPC
3. SNMP
4. LLDP

Correct Answer: 2

Explanation

A virtual Port Channel, or vPC, allows two ACI leaf switches to provide coordinated connectivity to a dual-homed server or other supported endpoint. The endpoint can use links toward both leaf switches, providing redundancy and improved availability. Proper vPC configuration requires appropriate interface policies, physical connectivity, and endpoint policy. L3Out provides external Layer 3 connectivity, SNMP supports monitoring, and LLDP provides neighbor discovery. When troubleshooting a dual-attached server, administrators should verify both physical links, the vPC configuration, interface policy group, EPG association, and endpoint learning information to ensure the complete access path is operational.

Question 164

Which ACI object is used to group multiple interface policies into a reusable interface configuration?

1. Bridge domain
2. Interface policy group
3. External EPG
4. VRF

Correct Answer: 2

Explanation

An interface policy group combines multiple interface policies into a reusable configuration. It can contain policies for characteristics such as CDP, LLDP, speed, link aggregation, or other supported interface behaviors. The policy group is then associated with interfaces through interface profiles and selectors. Bridge domains provide forwarding domains, External EPGs represent outside networks, and VRFs provide routing contexts. Using policy groups allows administrators to apply consistent interface configuration across multiple ports. When troubleshooting access interfaces, administrators should verify the policy group contents as well as the interface selector and interface profile to confirm that the intended configuration is actually being applied.

Question 165

Which ACI setting enables Layer 3 routing functionality for a bridge domain?

1. Unicast routing
2. LLDP
3. Endpoint retention
4. CDP

Correct Answer: 1

Explanation

The unicast routing setting enables Layer 3 routing functionality for an ACI bridge domain. When this feature is enabled and a subnet is configured, the bridge domain can provide a gateway for endpoints and participate in routing through its associated VRF. LLDP and CDP are neighbor-discovery protocols, while endpoint retention controls the handling of learned endpoint information. If hosts can communicate within their local Layer 2 environment but cannot reach remote subnets, administrators should verify the bridge-domain unicast-routing setting, subnet configuration, VRF association, and endpoint gateway configuration. These elements collectively determine whether Layer 3 forwarding is available.

Question 166

Which protocol is commonly configured on an ACI L3Out when external route exchange requires autonomous system numbers?

1. OSPF
2. CDP
3. LLDP
4. BGP

Correct Answer: 4

Explanation

BGP uses autonomous system numbers and can be configured through an ACI L3Out to exchange routes with external routing domains. It provides extensive policy controls for route advertisement and selection and is commonly used when organizations need controlled external routing. OSPF is an interior link-state routing protocol, while CDP and LLDP provide neighbor discovery. When configuring BGP, administrators should verify the local and remote autonomous system numbers, peer addressing, interface reachability, session state, and route-control policies. Correct BGP configuration allows the ACI fabric and external router to exchange the intended prefixes while maintaining the desired routing policy.

Question 167

Which ACI object is used to associate an EPG with a VLAN encapsulation range?

1. Contract
2. VLAN pool
3. Filter
4. VRF

Correct Answer: 2

Explanation

A VLAN pool defines the VLAN IDs or ranges available as encapsulation resources for an ACI domain. The domain is associated with the VLAN pool, and the EPG can use that domain when it is deployed to a physical or virtual environment. Contracts define communication relationships, filters define traffic rules, and VRFs provide routing contexts. Administrators should ensure that the VLAN pool contains the required VLANs and does not conflict with existing infrastructure. If an EPG cannot be deployed or receives an unexpected encapsulation, checking the associated domain and VLAN pool is an important troubleshooting step.

Question 168

Which ACI protocol provides neighbor information and can be used in multi-vendor network environments?

1. CDP
2. BGP
3. LLDP
4. OSPF

Correct Answer: 3

Explanation

LLDP is a vendor-neutral neighbor-discovery protocol that exchanges information between directly connected devices. It is especially useful in environments containing equipment from multiple vendors because it is not limited to Cisco devices. Administrators can use LLDP information to verify device identity, interface connections, and physical topology. CDP also provides neighbor discovery but is primarily associated with Cisco devices. BGP and OSPF are routing protocols. When troubleshooting an ACI interface, checking LLDP can help confirm whether the expected device is connected and whether the physical topology matches the intended design.

Question 169

Which ACI feature controls the behavior of traffic when the destination endpoint is unknown?

1. Unknown unicast behavior
2. Route control
3. Contract subject
4. VMM domain

Correct Answer: 4

Explanation

Unknown-unicast behavior determines how traffic is handled when ACI does not have a known destination endpoint for the packet. This behavior is configured at the bridge-domain level and can influence whether unknown unicast traffic is flooded or handled using another configured method. Route-control policies manage external routes, contract subjects define communication policy, and VMM domains integrate virtual infrastructure. Administrators should understand the application requirements before changing unknown-unicast settings because flooding can increase traffic across the fabric. When investigating unexpected Layer 2 behavior, administrators should review endpoint learning and bridge-domain forwarding settings together.

Question 170

Which ACI object organizes EPGs according to an application or application environment?

1. Application profile
2. VLAN pool
3. Filter
4. Interface selector

Correct Answer: 1

Explanation

An application profile provides a logical container for EPGs that represent application components. For example, separate web, application, and database EPGs can be placed inside one application profile. Contracts can then define the permitted communication between those EPGs. VLAN pools provide encapsulation resources, filters define traffic rules, and interface selectors identify physical interfaces for access policies. Application profiles help administrators organize policy according to application requirements rather than physical topology. During design, administrators should identify meaningful application boundaries and create EPGs that represent workloads requiring similar policy treatment. This approach supports clearer and more manageable ACI configurations.

Question 171

Which ACI feature can be used to restrict direct communication between endpoints in the same EPG?

1. Preferred group
2. L3Out
3. Intra-EPG isolation
4. VLAN pool

Correct Answer: 3

Explanation

Intra-EPG isolation can restrict direct communication between endpoints belonging to the same EPG. This is useful when endpoints share the same policy classification but should not communicate directly with each other. Preferred groups provide broader EPG communication behavior, L3Out provides external connectivity, and VLAN pools supply encapsulation resources. Administrators should enable intra-EPG isolation only when it matches the application’s requirements because some applications depend on communication between endpoints in the same EPG. When troubleshooting connectivity within an EPG, administrators should check isolation settings along with endpoint learning, bridge-domain configuration, and any relevant policy relationships.

Question 172

Which ACI object controls the protocols and ports permitted by a contract?

1. VRF
2. Filter
3. VLAN pool
4. Physical domain

Correct Answer: 2

Explanation

A filter defines the traffic characteristics permitted by an ACI contract. Filter entries can specify protocols and source or destination ports so that communication can be restricted to required application services. The filter is referenced through a contract subject, while the contract establishes the relationship between consumer and provider EPGs. VRFs provide routing contexts, VLAN pools provide encapsulation resources, and physical domains associate EPGs with physical infrastructure. When an application connection is blocked, administrators should verify the filter entry, contract subject, consumer/provider relationship, and EPG association. A correctly designed filter helps enforce precise application-level communication policies.

Question 173

Which ACI feature can apply a common contract relationship across all EPGs in a VRF?

1. Static path binding
2. VMM domain
3. vzAny
4. Interface selector

Correct Answer: 3

Explanation

vzAny represents all EPGs within a VRF for specific contract relationships and can simplify policy administration. It is useful when a common communication rule needs to apply broadly instead of creating separate contracts for many individual EPG relationships. Static path binding controls endpoint attachment, VMM domains integrate virtual environments, and interface selectors identify physical interfaces. Because vzAny can influence many EPGs, administrators should carefully define the contract and verify the intended policy scope. A broad contract can affect multiple applications, so it should be implemented only when the required communication relationship is well understood and consistent with the organization’s security design.

Question 174

Which ACI object provides external Layer 2 connectivity for a bridge domain?

1. L2Out
2. L3Out
3. VRF
4. Contract

Correct Answer: 4

Explanation

L2Out is the ACI object used to provide external Layer 2 connectivity. It allows the fabric to connect a bridge-domain environment to an external Layer 2 network. An L3Out is used for routed external connectivity, a VRF provides a Layer 3 routing context, and a contract controls communication policy. When implementing L2Out, administrators should verify the external interface, VLAN encapsulation, bridge-domain relationship, and required policies. Troubleshooting should also include checking physical interface status and endpoint learning. Proper L2Out configuration allows Layer 2 traffic to move between the ACI fabric and an external network according to the intended design.

Question 175

Which ACI policy controls how routes are imported or exported through an external routing connection?

1. Route control policy
2. Interface policy
3. VLAN pool
4. Application profile

Correct Answer: 1

Explanation

A route control policy controls route import and export behavior associated with external connectivity such as an L3Out. Administrators can use route-control policies to determine which prefixes should be advertised to external routers or accepted from them. Interface policies configure physical interface behavior, VLAN pools provide encapsulation resources, and application profiles organize EPGs. Route control is especially important in environments where only selected prefixes should be exchanged with external networks. When troubleshooting external routing, administrators should review route-control configuration together with the routing protocol, external subnet definitions, and L3Out settings to identify why a particular route is missing or unexpectedly advertised.

Question 176

Which ACI component provides the primary endpoint-facing interfaces in a leaf-and-spine fabric?

1. APIC
2. Spine switch
3. Leaf switch
4. External router

Correct Answer: 3

Explanation

Leaf switches provide the primary endpoint-facing interfaces in Cisco ACI. Servers, appliances, virtualization infrastructure, and other endpoints normally connect directly to leaf switches. The leaf layer applies endpoint-related policies and forwards traffic into the fabric, while spine switches provide transit between leaf nodes. APIC controllers manage policy and configuration, and external routers provide connectivity outside the ACI fabric. When an endpoint experiences connectivity problems, administrators should inspect the relevant leaf interface, access policy, EPG association, encapsulation, and endpoint learning state. Correct leaf configuration is essential because it forms the access point through which endpoints enter the ACI policy and forwarding environment.

Question 177

Which ACI feature provides a logical routing table that can be isolated from other tenants?

1. EPG
2. Contract
3. VRF
4. Filter

Correct Answer: 4

Explanation

A VRF provides an independent Layer 3 routing context and routing table within the ACI fabric. Separate VRFs can isolate routing information between different tenants or application environments. This logical separation can also support overlapping IP address spaces when the overall design permits it. EPGs group endpoints, contracts define communication relationships, and filters specify permitted traffic. When designing tenant isolation, administrators should determine which bridge domains belong to each VRF and ensure that external connections are associated with the correct routing context. Incorrect VRF assignments can result in unexpected route visibility or unintended communication between otherwise separate environments.

Question 178

Which ACI feature provides centralized visibility into faults affecting fabric components?

1. VLAN pool
2. APIC
3. Static path binding
4. Physical domain

Correct Answer: 1

Explanation

APIC provides centralized visibility into faults, events, health information, and operational state across the ACI fabric. Administrators can use the APIC interface to investigate problems affecting switches, interfaces, EPGs, bridge domains, contracts, and other managed objects. VLAN pools provide encapsulation resources, static path bindings define endpoint attachment, and physical domains associate EPGs with physical infrastructure. When troubleshooting an ACI fault, administrators should examine the affected object’s fault details, severity, timestamps, and related events. Centralized visibility through APIC makes it easier to correlate problems across multiple fabric components rather than troubleshooting each switch independently.

Question 179

Which ACI object defines a reusable set of interface behaviors such as CDP or LLDP?

1. Interface policy
2. External EPG
3. VRF
4. Bridge domain

Correct Answer: 2

Explanation

Interface policies define individual interface behaviors such as CDP, LLDP, speed, link settings, or other supported characteristics. These policies can be combined into interface policy groups and then applied to selected interfaces through interface profiles and selectors. External EPGs represent external network destinations, VRFs provide routing contexts, and bridge domains provide forwarding domains. Separating individual interface behaviors into reusable policies allows administrators to build consistent access configurations. When troubleshooting interface behavior, administrators should verify the relevant interface policy, policy group, selector, and interface profile to confirm that the desired settings are correctly associated with the affected port.

Question 180

Which ACI data-plane technology encapsulates traffic between leaf switches across the fabric?

1. OSPF
2. VXLAN
3. CDP
4. SNMP

Correct Answer: 2

Explanation

VXLAN is the overlay data-plane technology used by Cisco ACI to encapsulate traffic across the leaf-and-spine fabric. It allows logical networks and endpoint traffic to traverse the underlying infrastructure while maintaining the required segmentation and forwarding information. Leaf switches perform endpoint-facing functions and encapsulate traffic for transport, while spine switches provide transit between leaf nodes. OSPF provides routing, CDP provides neighbor discovery, and SNMP supports management and monitoring. Understanding VXLAN is important when troubleshooting inter-leaf communication because administrators can examine endpoint learning, fabric connectivity, encapsulation, and policy deployment to determine where traffic forwarding is failing.