ベストな準備プラン300-620試験2023年最新のCCNP Data Center無制限194問題 [Q64-Q85]

ベストな準備プラン300-620試験2023年最新のCCNP Data Center無制限194問題

注目すべき時短になる300-620オールインワン試験ガイド

シスコ300-620認定試験は、約60-70の質問から構成される90分のコンピュータベースのテストです。この試験は、ACIファブリックインフラストラクチャ、ACIポリシー、エンドポイントグループ（EPG）、仮想化、L4-L7サービス統合など、さまざまなトピックをカバーしています。また、試験では、候補者がACI展開の問題をトラブルシューティングし、ソリューションを推奨する能力も評価されます。

質問 # 64
The engineer notices frequent MAC and IP address moves between different leaf switch ports. Which action prevents this problem from occurring?

A. Enable endpoint loop protection.
B. Enable rogue endpoint control.
C. Disable enforce subnet check.
D. Disable IP bridge domain enforcement.

正解：A

解説：
enabling endpoint loop protection can prevent frequent MAC and IP address moves between different leaf switch ports.

質問 # 65
A network engineer must configure a Cisco ACI system to detect network loops for untagged and tagged traffic The loop must be detected and slopped by disabling an interface within 4 seconds Which configuration must be used?

A. Option C
B. Option B
C. Option A

正解：B

質問 # 66
Which two components are essential parts of a Cisco ACI Virtual Machine Manager (VMM) domain policy configuration? (Choose two.)

A. VMM domain profile
B. IP address pool association
C. EPG static port binding
D. EPG association
E. Layer 3 outside interface association

正解：A、D

解説：
https://www.cisco.com/c/en/us/td/docs/switches/datacenter/aci/apic/sw/1-x/aci-fundamentals/b_ACI-Fundamentals/b_ACI-Fundamentals_chapter_01011.html#concept_74EFC437C0AA44A391676F70ACE59DF3

質問 # 67
What must be configured to redistribute externally learned OSPF routes within the ACI fabric?

A. Route Control Profile
B. BGP Inter-leak Route Map
C. BGP Route Reflector
D. PIM Sparse Mode

正解：C

質問 # 68
Which two statements regarding ACI Multi-Site are true? (Choose two.)

A. Routers in the Inter-Site network must run OSPF, DHCP relay, and MP-BGP.
B. The Multi-Site orchestrator must be directly attached to one ACI leaf.
C. The Inter-Site network routers should run OSPF to establish peering with the spines.
D. ACI Multi-Site is a solution that supports a dedicated APIC cluster per site.
E. ACI Multi-Site is a solution that allows one APIC cluster to manage multiple ACI sites.

正解：B、C

質問 # 69
What are two requirements for the IPN network when implementing a Multi-Pod ACI fabric? (Choose two.)

A. PIM ASM multicast routing
B. BGP routing
C. VLAN ID 4
D. OSPF routing
E. EIGRP routing

正解：C、D

質問 # 70
An engineer must deploy Cisco ACI across 10 geographically separated data centers. Which ACI site deployment feature enables the engineer to control which bridge domains contain Layer 2 flooding?

A. GOLF
B. Multi-Site
C. Stretched Fabric
D. Multi-Pod

正解：B

質問 # 71
A RADIUS user resolves its role via the Cisco AV Pair. What object does the Cisco AV Pair resolve to?

A. tenant
B. security domain
C. primary Cisco APIC
D. managed object class

正解：D

質問 # 72
An engineer wants to monitor all configuration changes, threshold crossing, and link-state transitions in a Cisco ACI fabric. Which action must be taken to receive the required messages?

A. Add Faults and Events to the monitor policy.
B. Include Events and Session Logs in the Syslog source policy.
C. Include Audit Logs and Events in the Syslog source policy.
D. Add Session Logs and Audit Logs to the monitor policy.

正解：D

解説：
After searching, there is nothing called "syslog source policy" in ACI. Syslog source policy exists in UCS Central. The choices now are on "Monitoring Policy" that exits on A and C.
https://community.cisco.com/legacyfs/online/attachments/blog/technote-aci-syslog_external-latest.pdf
https://www.cisco.com/c/en/us/td/docs/switches/datacenter/aci/apic/sw/all/faults/guide/b_APIC_Faults_Errors/b_IFC_Faults_Errors_chapter_010.html

質問 # 73
How is an EPG extended outside of the ACI fabric?

A. Create an external routed network that is assigned to an EPG.
B. Create an external bridged network that is assigned to a leaf port.
C. Enable unicast routing within an EPG.
D. Statically assign a VLAN ID to a leaf port in an EPG.

正解：D

解説：
Section: ACI Fabric Infrastructure
Explanation/Reference: https://www.dclessons.com/l2-external-network-with-aci

質問 # 74
Which Cisco APIC configuration prevents a remote network that is not configured on the bridge domain from being learned by the fabric?

A. enable Unicast Routing
B. enable ARP Flooding to BD
C. enable IP Data-plane Learning
D. enable Limit IP Learning to Subnet

正解：D

解説：
Reference:
https://www.cisco.com/c/en/us/solutions/collateral/data-center-virtualization/application-centric-infrastructure/ white-paper-c11-739989.html

質問 # 75

When the subnet is configured on a bridge domain, on which physical devices is the gateway IP address configured?

A. all border leaf nodes where the bridge domain of the tenant is present
B. only spine switches where the bridge domain of the tenant is present
C. only leaf switches where the bridge domain of the tenant is present
D. all leaf switches and all spine nodes

正解：C

解説：
Section: ACI Packet Forwarding
Explanation/Reference: http://www.netdesignarena.com/index.php/2016/06/16/aci-tenant-building-blocks-forwarding-logic/

質問 # 76
Which components must be configured for the BGP Route Reflector policy to take effect?

A. leaf fabric interface overrides and profiles
B. pod policy groups and profiles
C. access policies and profiles
D. spine fabric interface overrides and profiles

正解：B

質問 # 77
Refer to the exhibit.

An engineer is implementing Cisco ACI - VMware vCenter integration for a blade server that lacks support of bonding. Which port channel mode results in "route based on originating virtual port" on the VMware VDS?

A. Static Channel - Mode On
B. LACP Active
C. LACP Passive
D. MAC Pinning-Physical-NIC-load
E. MAC Pinning+

正解：E

質問 # 78
A customer must upgrade the Cisco ACI fabric to use a feature from the new code release. However, there is no direct path from the current release to the desired one. Based on the Cisco APIC Upgrade/Downgrade Support Matrix, the administrator must go through one intermediate release.
Which set of steps must be taken to upgrade the fabric to the new release?

A. Upgrade the APICs to an interim release.
Upgrade the leaf switches directly to the targeted release.
Upgrade the spine switches directly to the targeted release.
Upgrade the APICs to the targeted release.
B. Upgrade the APICs directly to the targeted release.
Upgrade the switches to an interim release.
When all switches are operational, upgrade the leaf switches to the targeted release.
Upgrade the spine switches to the targeted release.
C. Upgrade the APICs to an interim release and then switches to an interim release.
When all switches are operational, upgrade leaf switches to the targeted release.
Upgrade the spine switches to the targeted release.
Upgrade the APICs to the targeted release.
D. Upgrade the APICs to an interim release.
Upgrade the switches to an interim release.
Upgrade the APICs to the targeted release.
Upgrade the leaf and spine switches to the targeted release.

正解：D

質問 # 79
What must be configured to allow SNMP traffic on the APIC controller?

A. SNMP relay policy
B. out-of-band bridge domain
C. out-of-band management interface
D. contract under tenant mgmt

正解：D

質問 # 80
Refer to the exhibit.

Which two objects are created as a result of the configuration? (Choose two.)

A. application profile
B. attachable AEP
C. bridge domain
D. VRF
E. endpoint group

正解：C、D

質問 # 81
An engineer needs to deploy a leaf access port policy group in ACI Fabric to support the following requirements:
* Control the amount of application data flowing into the system
* Allow the newly connected device to auto-negotiate link speed with the leaf switch Which two ACI policies must be configured to achieve these requirements? (Choose two.)

A. ingress data plane policing policy
B. slow drain policy
C. L2 interface policy
D. ingress control plane policing policy
E. link level policy

正解：A、E

解説：
Explanation

Slow Drain handles FCoE packets that are causing traffic congestion on ACI fabric. So, it is wrong.
Ingress control plane is wrong, because the request is for "application data flowing".
L2 interface policy is concerned about QinQ and VLAN scope.

質問 # 82
An engineer needs to deploy a leaf access port policy group in ACI Fabric to support the following requirements:
* Control the amount of application data flowing into the system
* Allow the newly connected device to auto-negotiate link speed with the leaf switch Which two ACI policies must be configured to achieve these requirements? (Choose two.)

A. ingress data plane policing policy
B. slow drain policy
C. L2 interface policy
D. ingress control plane policing policy
E. link level policy

正解：A、E

解説：
Section: ACI Fabric Infrastructure
Explanation/Reference:
https://www.cisco.com/c/en/us/td/docs/switches/datacenter/aci/apic/sw/kb/ b_Cisco_ACI_and_Forward_Error_Correction.html
https://www.cisco.com/c/en/us/td/docs/switches/datacenter/aci/apic/sw/4-x/security/Cisco-APIC-Security- Configuration-Guide-401/b_Cisco_APIC_Security_Guide_chapter_01110.html#:~:text=Use%20data%20plane
%20policing%20(DPP,dropping%20of%20packets%20occurs%20immediately.

質問 # 83
Drag and drop the Cisco ACI filter entry options from the left onto the correct categories on the right indicating what are required or optional parameters.

正解：

解説：

Reference:
https://www.cisco.com/c/en/us/td/docs/switches/datacenter/aci/apic/sw/1-x/Operating_ACI/guide/ b_Cisco_Operating_ACI/b_Cisco_Operating_ACI_chapter_01000.html

質問 # 84
An engineer is implementing Cisco ACI at a large platform-as-a-service provider using APIC controllers, 9396PX leaf switches, and 9336PQ spine switches. The leaf switch ports are configured as IEEE 802.1p ports. Where does the traffic exit from the EPG in IEEE 802.1p mode in this configuration?