{"id":21234,"date":"2026-09-24T11:39:17","date_gmt":"2026-09-24T11:39:17","guid":{"rendered":"https:\/\/www.examlabs.com\/certification\/?p=21234"},"modified":"2026-09-24T11:39:17","modified_gmt":"2026-09-24T11:39:17","slug":"cisco-ccnp-data-center-300-620-practice-test-questions-and-exam-dumps-part10-q181-200","status":"publish","type":"post","link":"https:\/\/www.examlabs.com\/certification\/cisco-ccnp-data-center-300-620-practice-test-questions-and-exam-dumps-part10-q181-200\/","title":{"rendered":"Cisco CCNP Data Center 300-620 Practice Test Questions and Exam Dumps Part10 Q181-200"},"content":{"rendered":"

View Full <\/b>Cisco CCNP Data Center 300-620 Exam Dumps<\/b><\/a> and Practice Test Dumps.<\/b><\/h2>\n

 <\/p>\n

Question 181<\/b><\/h3>\n

Which ACI component is responsible for maintaining the centralized policy database and fabric configuration?<\/b><\/p>\n

    \n
  1. Leaf switch<\/span><\/li>\n
  2. Spine switch<\/span><\/li>\n
  3. APIC<\/span><\/li>\n
  4. External router<\/span><\/li>\n<\/ol>\n

    Correct Answer: 3<\/b><\/p>\n

    Explanation<\/b><\/p>\n

    The APIC maintains the centralized policy database and provides the management and policy-control functions for a Cisco ACI fabric. Administrators use APIC to define tenants, VRFs, bridge domains, EPGs, contracts, access policies, and external connectivity. Leaf and spine switches enforce and forward traffic according to the policies distributed by the controllers. External routers provide connectivity outside the fabric but do not maintain the ACI policy database. When troubleshooting configuration inconsistencies, administrators can use APIC to inspect managed objects, faults, health information, and policy relationships. The APIC cluster also provides controller redundancy for continued management availability.<\/span><\/p>\n

    Question 182<\/b><\/h3>\n

    Which ACI object associates an EPG with a specific physical or virtual infrastructure domain?<\/b><\/p>\n

      \n
    1. Domain<\/span><\/li>\n
    2. Contract<\/span><\/li>\n
    3. Filter<\/span><\/li>\n
    4. VRF<\/span><\/li>\n<\/ol>\n

      Correct Answer: 1<\/b><\/p>\n

      Explanation<\/b><\/p>\n

      A domain associates an EPG with the infrastructure where its endpoints reside. A physical domain can connect an EPG to physical access ports, while a VMM domain can integrate the EPG with a supported virtualization environment. Contracts control communication, filters define traffic rules, and VRFs provide routing contexts. When an EPG is not deploying correctly, administrators should verify that the appropriate domain is associated with the EPG and that the domain has the required VLAN pool and access policies. Correct domain configuration ensures that ACI knows where and how the EPG should be deployed for endpoint connectivity.<\/span><\/p>\n

      Question 183<\/b><\/h3>\n

      Which ACI feature can automatically learn endpoint locations from traffic entering a leaf switch?<\/b><\/p>\n

        \n
      1. Route control<\/span><\/li>\n
      2. Endpoint learning<\/span><\/li>\n
      3. Preferred group<\/span><\/li>\n
      4. Application profile<\/span><\/li>\n<\/ol>\n

        Correct Answer: 2<\/b><\/p>\n

        Explanation<\/b><\/p>\n

        Endpoint learning allows ACI leaf switches to discover and maintain information about connected endpoints. The fabric can learn endpoint identities and their locations from traffic and use this information for forwarding decisions. Route-control policies manage external routes, preferred groups define specific communication behavior between EPGs, and application profiles organize EPGs. Endpoint learning is important for dynamic environments where workloads may move or connect through different interfaces. When an endpoint cannot communicate, administrators should verify whether the endpoint is learned, whether the correct encapsulation and EPG are assigned, and whether the relevant interface and bridge-domain policies are functioning properly.<\/span><\/p>\n

        Question 184<\/b><\/h3>\n

        Which ACI object contains subjects that reference filters to define contract traffic rules?<\/b><\/p>\n

          \n
        1. VRF<\/span><\/li>\n
        2. Bridge domain<\/span><\/li>\n
        3. Contract<\/span><\/li>\n
        4. VLAN pool<\/span><\/li>\n<\/ol>\n

          Correct Answer: 4<\/b><\/p>\n

          Explanation<\/b><\/p>\n

          A contract contains subjects, and subjects can reference filters that define the traffic characteristics allowed between EPGs. This structure separates the communication relationship from the specific protocols and ports permitted by the policy. VRFs provide routing contexts, bridge domains provide forwarding domains, and VLAN pools provide VLAN resources. When creating an application security policy, administrators can use a contract to establish communication between consumer and provider EPGs and use filters to specify allowed services. Troubleshooting should include checking the contract, subject, filter entries, and consumer\/provider relationships to ensure the complete policy chain is correctly configured.<\/span><\/p>\n

          Question 185<\/b><\/h3>\n

          Which ACI component is used to represent a logical Layer 3 connection to an external network?<\/b><\/p>\n

            \n
          1. L3Out<\/span><\/li>\n
          2. L2Out<\/span><\/li>\n
          3. VMM domain<\/span><\/li>\n
          4. VLAN pool<\/span><\/li>\n<\/ol>\n

            Correct Answer: 1<\/b><\/p>\n

            Explanation<\/b><\/p>\n

            An L3Out represents external Layer 3 connectivity from an ACI fabric to another routed network. It can use routing protocols such as OSPF or BGP, or other supported routing methods, depending on the design. An L2Out provides external Layer 2 connectivity, while a VMM domain integrates virtualization infrastructure and a VLAN pool supplies encapsulation resources. An L3Out typically includes components such as a logical node profile, logical interface profile, external EPG, and external subnet configuration. When troubleshooting external routing, administrators should verify these components along with the routing protocol state and route-control policies.<\/span><\/p>\n

            Question 186<\/b><\/h3>\n

            Which ACI policy determines how long information about an inactive endpoint is retained?<\/b><\/p>\n

              \n
            1. Interface policy<\/span><\/li>\n
            2. Endpoint retention policy<\/span><\/li>\n
            3. Route control policy<\/span><\/li>\n
            4. Contract subject<\/span><\/li>\n<\/ol>\n

              Correct Answer: 2<\/b><\/p>\n

              Explanation<\/b><\/p>\n

              The endpoint retention policy controls how endpoint information is handled after an endpoint becomes inactive. This policy can help determine how long learned endpoint information remains available before being removed or treated differently. Interface policies control interface characteristics, route-control policies manage route advertisement or import behavior, and contract subjects organize filter-based communication rules. Endpoint retention settings should be considered carefully because overly aggressive removal can affect environments where endpoints temporarily stop sending traffic, while excessive retention can leave stale information. During endpoint troubleshooting, administrators should review endpoint state, retention settings, learning behavior, and associated access policies.<\/span><\/p>\n

              Question 187<\/b><\/h3>\n

              Which ACI bridge-domain setting controls whether ARP requests are flooded within the bridge domain?<\/b><\/p>\n

                \n
              1. Unicast routing<\/span><\/li>\n
              2. Endpoint retention<\/span><\/li>\n
              3. ARP flooding<\/span><\/li>\n
              4. Route control<\/span><\/li>\n<\/ol>\n

                Correct Answer: 3<\/b><\/p>\n

                Explanation<\/b><\/p>\n

                The ARP flooding setting controls how ARP requests are handled within an ACI bridge domain when normal endpoint information is insufficient. Enabling ARP flooding can allow ARP requests to reach destinations that have not been resolved through the fabric’s endpoint information. Unicast routing controls Layer 3 forwarding, endpoint retention affects learned endpoint information, and route control manages external routing behavior. When hosts experience problems resolving IP-to-MAC mappings, administrators should inspect the bridge-domain subnet, endpoint learning, ARP behavior, and related gateway configuration. The correct ARP behavior depends on the application and network design requirements.<\/span><\/p>\n

                Question 188<\/b><\/h3>\n

                Which ACI object defines the physical interfaces selected for an interface profile?<\/b><\/p>\n

                  \n
                1. Contract<\/span><\/li>\n
                2. Interface selector<\/span><\/li>\n
                3. External EPG<\/span><\/li>\n
                4. Bridge domain<\/span><\/li>\n<\/ol>\n

                  Correct Answer: 2<\/b><\/p>\n

                  Explanation<\/b><\/p>\n

                  An interface selector identifies the physical interfaces to which an interface profile’s policies should be applied. It provides the association between configured interface policies and actual switch ports. Contracts define communication relationships, External EPGs represent external destinations, and bridge domains provide Layer 2 forwarding domains. Interface selectors are important in access-policy configuration because an incorrect selector can result in policies being applied to the wrong ports or not being deployed at all. When troubleshooting an access interface, administrators should check the switch profile, interface profile, interface selector, policy group, and physical interface to confirm that the intended policy hierarchy is complete.<\/span><\/p>\n

                  Question 189<\/b><\/h3>\n

                  Which ACI object provides the default gateway subnet for endpoints in a bridge domain?<\/b><\/p>\n

                    \n
                  1. Contract<\/span><\/li>\n
                  2. VLAN pool<\/span><\/li>\n
                  3. Bridge-domain subnet<\/span><\/li>\n
                  4. Physical domain<\/span><\/li>\n<\/ol>\n

                    Correct Answer: 3<\/b><\/p>\n

                    Explanation<\/b><\/p>\n

                    A bridge-domain subnet provides the Layer 3 gateway address used by endpoints within the bridge domain. When unicast routing is enabled, the subnet allows the bridge domain to participate in Layer 3 communication through its associated VRF. Contracts define permitted communication, VLAN pools provide VLAN resources, and physical domains associate EPGs with physical infrastructure. When endpoints cannot reach their default gateway, administrators should verify the bridge-domain subnet, unicast-routing configuration, endpoint attachment, and VRF association. The subnet must also be consistent with the addressing design. Correct gateway configuration is essential for communication between local endpoints and remote networks.<\/span><\/p>\n

                    Question 190<\/b><\/h3>\n

                    Which ACI object can define a reusable collection of permitted protocols and ports?<\/b><\/p>\n

                      \n
                    1. Filter<\/span><\/li>\n
                    2. VRF<\/span><\/li>\n
                    3. Application profile<\/span><\/li>\n
                    4. L3Out<\/span><\/li>\n<\/ol>\n

                      Correct Answer: 1<\/b><\/p>\n

                      Explanation<\/b><\/p>\n

                      A filter defines reusable traffic rules based on characteristics such as protocol and source or destination ports. Filters are referenced by contract subjects and therefore become part of the policy governing communication between EPGs. VRFs provide routing contexts, application profiles organize EPGs, and L3Out provides external Layer 3 connectivity. A well-designed filter can allow only the application services required between workloads, reducing unnecessary communication. When troubleshooting a contract that appears not to permit expected traffic, administrators should inspect the filter entries, protocol definitions, port ranges, subject associations, and contract relationships to verify that the intended traffic is actually included.<\/span><\/p>\n

                      Question 191<\/b><\/h3>\n

                      Which ACI topology uses dedicated spine switches to provide transit between leaf switches?<\/b><\/p>\n

                        \n
                      1. Three-tier hierarchical<\/span><\/li>\n
                      2. Ring<\/span><\/li>\n
                      3. Leaf-and-spine<\/span><\/li>\n
                      4. Hub-and-spoke<\/span><\/li>\n<\/ol>\n

                        Correct Answer: 3<\/b><\/p>\n

                        Explanation<\/b><\/p>\n

                        Cisco ACI uses a leaf-and-spine architecture in which leaf switches connect to endpoints and spine switches provide transit between leaf nodes. Each leaf typically connects to multiple spine switches, creating a predictable and scalable fabric topology. Spine switches generally do not serve as normal endpoint access switches. The architecture provides multiple paths through the fabric and supports efficient traffic forwarding. When troubleshooting fabric connectivity, administrators should verify leaf-to-spine links, fabric membership, interface status, and relevant health information. Understanding the physical topology is important because endpoint traffic normally enters through a leaf and traverses the spine layer before reaching another leaf.<\/span><\/p>\n

                        Question 192<\/b><\/h3>\n

                        Which protocol can be used with an ACI L3Out to exchange routes using a link-state interior gateway protocol?<\/b><\/p>\n

                          \n
                        1. BGP<\/span><\/li>\n
                        2. OSPF<\/span><\/li>\n
                        3. CDP<\/span><\/li>\n
                        4. SNMP<\/span><\/li>\n<\/ol>\n

                          Correct Answer: 2<\/b><\/p>\n

                          Explanation<\/b><\/p>\n

                          OSPF is a link-state interior gateway protocol that can be configured with an ACI L3Out to exchange routes with external routers. OSPF forms neighbor relationships and uses link-state information to calculate routes within the routing domain. BGP is a path-vector routing protocol, while CDP provides neighbor discovery and SNMP supports network monitoring. When configuring OSPF on an L3Out, administrators should verify area configuration, interface settings, neighbor formation, authentication if required, and route-control policies. A healthy OSPF adjacency does not automatically guarantee that all expected routes are exchanged, so route advertisement and import policies should also be checked.<\/span><\/p>\n

                          Question 193<\/b><\/h3>\n

                          Which ACI policy allows selected EPGs to communicate without requiring individual contracts between every pair?<\/b><\/p>\n

                            \n
                          1. Preferred group<\/span><\/li>\n
                          2. Endpoint retention<\/span><\/li>\n
                          3. VLAN pool<\/span><\/li>\n
                          4. Interface selector<\/span><\/li>\n<\/ol>\n

                            Correct Answer: 1<\/b><\/p>\n

                            Explanation<\/b><\/p>\n

                            The preferred group feature can simplify communication between selected EPGs within a VRF by allowing members of the preferred group to communicate according to the configured preferred-group behavior without creating separate contracts for every relationship. Endpoint retention controls learned endpoint information, VLAN pools provide encapsulation resources, and interface selectors identify physical interfaces. Preferred groups should be designed carefully because they can broaden communication compared with tightly defined contract-based policies. Administrators should verify which EPGs are included and ensure that the resulting communication scope matches application requirements. This feature is useful when multiple EPGs require a common trusted communication model.<\/span><\/p>\n

                            Question 194<\/b><\/h3>\n

                            Which ACI component identifies the logical interfaces used by an L3Out logical node?<\/b><\/p>\n

                              \n
                            1. External EPG<\/span><\/li>\n
                            2. Logical interface profile<\/span><\/li>\n
                            3. VLAN pool<\/span><\/li>\n
                            4. Application profile<\/span><\/li>\n<\/ol>\n

                              Correct Answer: 2<\/b><\/p>\n

                              Explanation<\/b><\/p>\n

                              The logical interface profile defines the logical interfaces associated with an L3Out logical node profile. It can contain interface-related information needed to establish external routed connectivity from the ACI fabric. An External EPG represents external destinations, a VLAN pool supplies encapsulation resources, and an application profile organizes internal EPGs. When an L3Out interface does not operate as expected, administrators should inspect the logical node profile, logical interface profile, path association, IP addressing, and external routing configuration. Correctly structuring these objects helps the APIC deploy the intended external connectivity and ensures that the fabric can communicate with the connected routed network.<\/span><\/p>\n

                              Question 195<\/b><\/h3>\n

                              Which ACI object represents a group of application endpoints that share common policy requirements?<\/b><\/p>\n

                                \n
                              1. EPG<\/span><\/li>\n
                              2. VRF<\/span><\/li>\n
                              3. L3Out<\/span><\/li>\n
                              4. VLAN pool<\/span><\/li>\n<\/ol>\n

                                Correct Answer: 4<\/b><\/p>\n

                                Explanation<\/b><\/p>\n

                                An EPG groups endpoints that require similar policy treatment in Cisco ACI. EPGs can represent application tiers, security zones, or other logical groups of workloads. They are typically organized within an application profile and communicate according to contracts or other configured policy relationships. VRFs provide routing contexts, L3Outs provide external Layer 3 connectivity, and VLAN pools provide VLAN resources. When designing EPGs, administrators should group endpoints according to policy requirements rather than simply physical location. This approach allows application communication and security rules to remain consistent even when workloads move between interfaces or underlying infrastructure.<\/span><\/p>\n

                                Question 196<\/b><\/h3>\n

                                Which ACI feature provides a mechanism for collecting event and message information from fabric devices?<\/b><\/p>\n

                                  \n
                                1. BGP<\/span><\/li>\n
                                2. Syslog<\/span><\/li>\n
                                3. OSPF<\/span><\/li>\n
                                4. VXLAN<\/span><\/li>\n<\/ol>\n

                                  Correct Answer: 2<\/b><\/p>\n

                                  Explanation<\/b><\/p>\n

                                  Syslog provides a mechanism for collecting event and message information generated by network devices and services. In an ACI environment, centralized logging can help administrators investigate operational events, configuration changes, and other messages. BGP and OSPF are routing protocols, while VXLAN provides overlay data-plane encapsulation. Logging is especially useful when troubleshooting intermittent conditions because messages can provide timestamps and contextual information that may not be visible from a single current-state view. Administrators should configure appropriate destinations, severity levels, and retention policies so that useful operational information is available without creating unnecessary logging volume.<\/span><\/p>\n

                                  Question 197<\/b><\/h3>\n

                                  Which ACI object can be used to connect an EPG to a physical server-facing interface using a specific VLAN encapsulation?<\/b><\/p>\n

                                    \n
                                  1. Static path binding<\/span><\/li>\n
                                  2. Route control policy<\/span><\/li>\n
                                  3. External EPG<\/span><\/li>\n
                                  4. VRF<\/span><\/li>\n<\/ol>\n

                                    Correct Answer: 1<\/b><\/p>\n

                                    Explanation<\/b><\/p>\n

                                    Static path binding directly associates an EPG with a specific access path and encapsulation, such as a VLAN on a physical interface. This is commonly used for bare-metal servers and other endpoints that are not dynamically integrated through a virtualization manager. Route-control policies manage external routes, External EPGs represent external network destinations, and VRFs provide routing contexts. When configuring static path binding, administrators should verify the leaf, interface path, encapsulation VLAN, deployment settings, domain association, and endpoint learning. Incorrect path or encapsulation settings can prevent the endpoint from being properly attached to the intended EPG.<\/span><\/p>\n

                                    Question 198<\/b><\/h3>\n

                                    Which ACI object provides the logical Layer 3 routing separation between different application environments?<\/b><\/p>\n

                                      \n
                                    1. Filter<\/span><\/li>\n
                                    2. Contract<\/span><\/li>\n
                                    3. VRF<\/span><\/li>\n
                                    4. Interface policy<\/span><\/li>\n<\/ol>\n

                                      Correct Answer: 3<\/b><\/p>\n

                                      Explanation<\/b><\/p>\n

                                      A VRF provides logical Layer 3 routing separation between different application environments. Each VRF maintains its own routing context, allowing networks to remain isolated and, where supported, use overlapping address spaces. Filters define traffic characteristics, contracts establish communication relationships, and interface policies configure interface behavior. VRF design is a fundamental part of ACI tenant architecture because bridge domains are associated with VRFs for Layer 3 forwarding. When troubleshooting unexpected route visibility, administrators should verify bridge-domain-to-VRF associations, external connectivity, route-learning behavior, and any configured route-control policies. Correct VRF separation helps maintain predictable and secure routing boundaries.<\/span><\/p>\n

                                      Question 199<\/b><\/h3>\n

                                      Which ACI feature can provide rapid detection of forwarding-path failures when configured with supported routing protocols?<\/b><\/p>\n

                                        \n
                                      1. BFD<\/span><\/li>\n
                                      2. CDP<\/span><\/li>\n
                                      3. LLDP<\/span><\/li>\n
                                      4. SNMP<\/span><\/li>\n<\/ol>\n

                                        Correct Answer: 1<\/b><\/p>\n

                                        Explanation<\/b><\/p>\n

                                        Bidirectional Forwarding Detection, or BFD, provides rapid detection of forwarding-path failures between supported network devices and protocols. It can detect failures faster than relying only on normal routing protocol timers, allowing supported routing sessions to react more quickly. CDP and LLDP are neighbor-discovery protocols, while SNMP is primarily used for monitoring and management. When implementing BFD, administrators should verify that both sides support and correctly configure the feature and that the associated routing protocol can use BFD. BFD is particularly useful in environments where fast failure detection is important for maintaining routing convergence and service availability.<\/span><\/p>\n

                                        Question 200<\/b><\/h3>\n

                                        Which ACI component is primarily responsible for forwarding traffic between leaf switches?<\/b><\/p>\n

                                          \n
                                        1. External EPG<\/span><\/li>\n
                                        2. Spine switch<\/span><\/li>\n
                                        3. APIC<\/span><\/li>\n
                                        4. VLAN pool<\/span><\/li>\n<\/ol>\n

                                          Correct Answer: 2<\/b><\/p>\n

                                          Explanation<\/b><\/p>\n

                                          Spine switches provide the transit layer between leaf switches in the Cisco ACI fabric. They form the middle layer of the leaf-and-spine architecture and forward traffic between connected leaf nodes. Leaf switches connect to endpoints and provide endpoint-facing interfaces, while APIC controllers provide centralized management and policy functions. VLAN pools define encapsulation resources rather than forwarding traffic. When troubleshooting traffic between endpoints connected to different leaves, administrators should verify the relevant leaf-to-spine links, fabric membership, interface status, endpoint learning, and fabric health. The spine layer provides the high-speed transit path that enables scalable communication across the ACI fabric.<\/span><\/p>\n

                                           <\/p>\n","protected":false},"excerpt":{"rendered":"

                                          View Full Cisco CCNP Data Center 300-620 Exam Dumps and Practice Test Dumps.   Question 181 Which ACI component is responsible for maintaining the centralized policy database and fabric configuration? Leaf switch Spine switch APIC External router Correct Answer: 3 Explanation The APIC maintains the centralized policy database and provides the management and policy-control functions […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":[],"categories":[1648,1647],"tags":[],"_links":{"self":[{"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/posts\/21234"}],"collection":[{"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/comments?post=21234"}],"version-history":[{"count":1,"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/posts\/21234\/revisions"}],"predecessor-version":[{"id":21235,"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/posts\/21234\/revisions\/21235"}],"wp:attachment":[{"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/media?parent=21234"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/categories?post=21234"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.examlabs.com\/certification\/wp-json\/wp\/v2\/tags?post=21234"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}