Refer to the exhibit.
Which action should be taken to ensure authentication if the RADIUS servers are unavailable?
A.
Adjust the priority of server 10.1.1.1 to 1.
B.
Set the fallback login to local.
C.
Assign the user to the default role.
D.
Set the default login realm to LDAP
Set the fallback login to local.
Explanation: Changing the server priority is not logical answer.
The command “aaa user default-role no-login” means that remote users who do not have a
user role cannot login. This means that assigning the user to default role will not be able to
login.
The “aaa authentication login default” and “aaa authentication login fallback” has identical
configuration. The fallback uses RADIUS server. We should change is to local.
An engineer wants to filter the System Faults page and view only the active faults that are
present in the Cisco
ACI fabric. Which two lifecycle stages must be selected for filtering? (Choose two.)
A.
Raised
B.
Retaining
C.
Soaking, Clearing
D.
Raised, Clearing
E.
Soaking
Raised
Raised, Clearing
Reference:
https://www.cisco.com/c/en/us/td/docs/switches/datacenter/aci/apic/sw/all/faults/guide/b_A
PIC_Faults_Errors/
b_IFC_Faults_Errors_chapter_01.html
Refer to the exhibit.
Which two components should be configured as route reflectors in the ACI fabric? (Choose
two.)
A.
Spine1
B.
apic1
C.
Spine2
D.
Leaf1
E.
Leaf2
F.
apic2
Spine1
Spine2
A RADIUS user resolves its role via the Cisco AV Pair. What object does the Cisco AV Pair
resolve to?
A.
tenant
B.
security domain
C.
primary Cisco APIC
D.
managed object class
managed object class
Reference: https://www.cisco.com/c/en/us/td/docs/switches/datacenter/aci/apic/sw/2-
x/Security_config/
b_Cisco_APIC_Security_Configuration_Guide/b_Cisco_APIC_Security_Guide_chapter_01
011.html
Refer to the exhibit
An engineer configures the Cisco ACI fabric for VMM integration with ESXi servers that are
to be connected to the ACI leaves. The server team requires the network switches to
initiate the LACP negotiation as opposed to the servers. The LAG group consists of two 10
Gigabit Ethernet links. The server learn also wants to evenly distribute traffic across all
available links. Which two enhanced LAG policies meet these requirements? (Choose two.)
A.
LACP Mode: LACP Standby
B.
LB Mode: Destination IP Address and TCP/UDP Port
C.
LB Mode: Source and Destination MAC Address
D.
LB Mode: Source IP Address and TCP/UDP Port
E.
LACP Mode: LACP Active
LB Mode: Source and Destination MAC Address
LACP Mode: LACP Active
An engineer configured Layer 2 extension from the ACI fabric and changed the Layer 2
unknown unicast policy from Flood to Hardware Proxy. How does this change affect the
flooding of the L2 unknown unicast traffic?
A.
It is forwarded to one of the spines to perform as a spine proxy.
B.
It is flooded within the whole fabric.
C.
It is dropped by the leaf when the destination endpoint is not present in the endpoint table.
D.
It is forwarded to one of the APICs to perform as a proxy.
It is forwarded to one of the spines to perform as a spine proxy.
Reference: https://www.cisco.com/c/en/us/td/docs/switches/datacenter/aci/apic/sw/2-
x/L2_config/ b_Cisco_APIC_Layer_2_Configuration_Guide/
b_Cisco_APIC_Layer_2_Configuration_Guide_chapter_010.html
A data center administrator is upgrading an ACI fabric. There are 3 APIC controllers in the
fabric and all the servers are dual-homed to pairs of leaf switches configured in VPC mode.
How should the fabric be upgraded to minimize possible traffic impact during the upgrade?
A.
Option A
B.
Option B
C.
Option C
D.
Option D
Option A
An engineer is configuring a VRF for a tenant named Cisco. Drag and drop the child objects on the left onto the correct containers on the right for this configuration

An engineer is extending an EPG out of the ACI fabric using static path binding. Which statement about the endpoints is true?
A.
Endpoints must connect directly to the ACI leaf port.
B.
External endpoints are in a different bridge domain than the endpoints in the fabric.
C.
Endpoint learning encompasses the MAC address only.
D.
External endpoints are in the same EPG as the directly attached endpoints
Endpoint learning encompasses the MAC address only.
Refer to the exhibit
An engineer must configure an L3Out peering with the backbone network. The L3Out must
forward unicast and multicast traffic over the link. Which two methods should be used to
configure L3Out to meet these requirements? (Choose two.)
A.
Layer 3 routed port
B.
VPC with SVI
C.
port channel with SVI
D.
Layer 3 routed subinterface
E.
Layer 3 floating SVI
Layer 3 routed subinterface
Layer 3 floating SVI
Explanation: https://www.cisco.com/c/en/us/solutions/collateral/data-centervirtualization/
application-centricinfrastructure/
guide-c07-743150.html#_L3Out_sStatic_rRoutes
Drag and drop the Cisco ACI Layer 4 to Layer 7 service insertion terms on the left to the
correct descriptions on the right.

Which tenant is used when configuring in-band management IP addresses for Cisco APICs, leaf nodes, and spine nodes?
A.
default
B.
infra
C.
common
D.
mgmt
infra
Reference: https://www.cisco.com/c/en/us/td/docs/switches/datacenter/aci/apic/sw/kb/
b_KB_Configuring_Static_Management_Access.html#concept_CFF63FEBE947424291B0
| Page 3 out of 21 Pages |
| 1234567 |
| 300-620 Practice Test Home |
Real-World Scenario Mastery: Our 300-620 practice exam don't just test definitions. They present you with the same complex, scenario-based problems you'll encounter on the actual exam.
Strategic Weakness Identification: Each practice session reveals exactly where you stand. Discover which domains need more attention, before Implementing Cisco Application Centric Infrastructure (300-620 DCACI) exam day arrives.
Confidence Through Familiarity: There's no substitute for knowing what to expect. When you've worked through our comprehensive 300-620 practice exam questions pool covering all topics, the real exam feels like just another practice session.