最新 [2023年07月12日] 100%合格率を保証します素晴らしい300-620試験問題PDF
300-620認定有効な試験問題集解答で学習ガイド！（最新の194問題)
シスコシステムズ社が提供するシスコ300-620（Implementing Cisco Application Centric Infrastructure）試験は、シスコのアプリケーションセントリックインフラストラクチャ（ACI）を実装、設定、および管理に関心を持つITプロフェッショナル向けの認定試験です。この試験は、インフラストラクチャを近代化し、より俊敏性、柔軟性、およびセキュリティを高めたい企業にとって高く評価される入門レベルの認定試験です。
質問 # 31
Refer to the exhibit.
Which action should be taken to ensure authentication if the RADIUS servers are unavailable?
- A. Set the fallback login to local.
- B. Set the default login realm to LDAP
- C. Assign the user to the default role.
- D. Adjust the priority of server 10.1.1.1 to 1.
正解：A
解説：
Changing the server priority is not logical answer.
The command "aaa user default-role no-login" means that remote users who do not have a user role cannot login. This means that assigning the user to default role will not be able to login.
The "aaa authentication login default" and "aaa authentication login fallback" has identical configuration. The fallback uses RADIUS server. We should change is to local.
質問 # 32
In a Cisco ACI Multi-Site fabric, the Inter-Site BUM Traffic Allow option is enabled in a specific stretched bridge domain. What is used to forward BUM traffic to all endpoints in the same broadcast domain?
- A. ingress replication on the spines in the source site
- B. ingress replication on the spines in the destination site
- C. egress replication on the destination leaf switches
- D. egress replication on the source leaf switches
正解：D
質問 # 33
All workloads in VLAN 1001 have been migrated into EPG-1001. The requirement is to move the gateway address for VLAN 1001 from the core outside the Cisco ACI fabric into the Cisco ACI fabric. The endpoints in EPG-1001 must route traffic to endpoints in other EPGs and minimize flooded traffic in the fabric. Which configuration set is needed on the bridge domain to meet these requirements?
- A. Enable Hardware Proxy Enable Unicas! Routing
- B. Enable Flood
Enable Unicast Routing - C. Disable ARP Flood
Disable Limn Endpoint Learning - D. Disable Local IP Learning Limit Disable Unicast Routing
正解：A
質問 # 34
An engineer must configure RADIUS authentication with Cisco ACI for remote authentication with out-of-band management access. Drag and drop the RADIUS configuration steps from the left into the required implementation order on the right. Not all steps are used.
正解：
解説：
質問 # 35
A data center administrator is upgrading an ACI fabric. There are 3 APIC controllers in the fabric and all the servers are dual-homed to pairs of leaf switches configured in VPC mode. How should the fabric be upgraded to minimize possible traffic impact during the upgrade?
- A. Option D
- B. Option C
- C. Option B
- D. Option A
正解：D
質問 # 36
Refer to the exhibit.
Refer to the exhibit. How are the STP BPDUs forwarded over Cisco ACI fabric?
- A. Cisco ACI acts as the STP root for all three external switches.
- B. STP BPDUs that are generated by Switch2 are received by Switch1 and Switch3
- C. Cisco ACI fabric drops all STP BPDUs that are generated by the external switches.
- D. STP BPDUs that are generated by Switch1 are received only by Switch3.
正解：B
質問 # 37
An engineer is implementing Cisco ACI at a large platform-as-a-service provider using APIC controllers, 9396PX leaf switches, and 9336PQ spine switches. The leaf switch ports are configured as IEEE 802.1p ports. Where does the traffic exit from the EPG in IEEE 802.1p mode in this configuration?
- A. from leaf ports tagged as VLAN 4094
- B. from leaf ports tagged as VLAN 1
- C. from leaf ports untagged
- D. from leaf ports tagged as VLAN 0
正解：D
質問 # 38
Which attribute should be configured for each user to enable RADIUS for external authentication in Cisco ACI?
- A. cisco-av-pair
- B. cisco-auth-features
- C. cisco-aci-role
- D. cisco-security domain
正解：A
質問 # 39
An engineer is configuring ACI VMM domain integration with Cisco UCS-B Series. Which type of port channel policy must be configured in the vSwitch policy?
- A. LACP Passive
- B. MAC Pinning-Physical-NIC-load
- C. LACP Active
- D. MAC Pinning
正解：C
質問 # 40
Refer to the exhibit.
Refer to the exhibit. An engineer configures an L3Out but receives the error presented. Which action clears the fault?
- A. Set the QoS policy to Level 3.
- B. Create a custom QoS policy.
- C. Acknowledge the QoS-related error.
- D. Associate a custom QoS class.
正解：C
質問 # 41
Refer to the exhibit.
Refer to the exhibit. The EPG-100 must be extended to the vCenter as a port group with a tagged VLAN ID of 100. Which set of actions accomplishes this goal?
- A. Define a static VLAN range (from 100-200) under a VLAN pool that is associated with the dc1vcdev domain.
Associate the dc1vcdev domain with EPG and select these settings:
Untagged VLAN Access: unselected
VLAN Mode: Static with Encap: 100 - B. Define a dynamic VLAN range (from 100-200) under a VLAN pool that is associated with the del vdev domain.
Associate the dc1vcdev domain with EPG and select these settings:
Untagged VLAN Access: unselected
VLAN Mode: Static with Encap: 100 - C. Define a static VLAN range (from 100-200) under a VLAN pool that is associated with the dc1vcdev domain.
Associate the dc2vcdev domain with EPG and select these settings:
Untagged VLAN Access: selected
VLAN Mode: Static with Encap: 100 - D. Define a dynamic VLAN range (from 100-200) under a VLAN pool that is associated with the dc1vdev domain.
Associate the dc2vcdev domain with EPG and select these settings:
Untagged VLAN Access: selected
VLAN Mode: Static with Encap: 100
正解：D
質問 # 42 
Refer to the exhibit. Which Adjacency Type value should be set when the client endpoint and the service node interface are in a different subnet?
- A. Routed
- B. L3
- C. L3Out
- D. Unicast
正解：B
解説：
Section: External Network Connectivity
質問 # 43
An engineer has set the VMM resolution immediacy to pre-provision in a Cisco ACI environment. No Cisco Discovery Protocol neighborship has been formed between the hypervisors and the ACI fabric leaf nodes. How does this affect the download policies to the leaf switches?
- A. No policies are downloaded because LLDP is the only supported discovery protocol.
- B. Policies are downloaded when the hypervisor host is connected to the VMM VDS.
- C. Policies are downloaded to the ACI leaf switch regardless of Cisco Discovery Protocol neighborship.
- D. No policies are downloaded because there is no discovery protocol neighborship.
正解：C
解説：
Section: Integrations
質問 # 44
Which type of profile needs to be created to deploy an access port policy group?
- A. leaf interface
- B. module
- C. attachable entity
- D. Pod
正解：C
質問 # 45
Which protocol does ACI use to securely sane the configuration in a remote location?
- A. TFTP
- B. SCP
- C. FTP
- D. HTTPS
正解：B
解説：
Section: ACI Management
Explanation/Reference: https://www.cisco.com/c/en/us/td/docs/switches/datacenter/aci/apic/sw/kb/ b_KB_Using_Import_Export_to_Recover_Config_States.html
質問 # 46
An engineer needs to deploy a leaf access port policy group in ACI Fabric to support the following requirements:
* Control the amount of application data flowing into the system
* Allow the newly connected device to auto-negotiate link speed with the leaf switch Which two ACI policies must be configured to achieve these requirements? (Choose two.)
- A. link level policy
- B. ingress data plane policing policy
- C. L2 interface policy
- D. ingress control plane policing policy
- E. slow drain policy
正解：A、B
解説：
Slow Drain handles FCoE packets that are causing traffic congestion on ACI fabric. So, it is wrong.
Ingress control plane is wrong, because the request is for "application data flowing".
L2 interface policy is concerned about QinQ and VLAN scope.
質問 # 47
A Cisco ACI bridge domain and VRF are configured with a default data-plane learning configuration. Which two endpoint attributes are programmed in the leaf switch when receiving traffic? (Choose two.)
- A. Remote IP
- B. Remote MAC. IP
- C. Local IP, not MAC
- D. Local MAC, IP
- E. Remote Subnet
- F. Local Subnet
正解：B、D
質問 # 48
An engineer configured a bridge domain with the hardware-proxy option for Layer 2 unknown unicast traffic. Which statement is true about this configuration?
- A. The leaf switch drops the Layer 2 unknown unicast packet if it is unable to find the MAC address in the local forwarding tables.
- B. The Layer 2 unknown hardware proxy lacks support of the topology change notification.
- C. The leaf switch forwards the Layers 2 unknown unicast packets to all other leaf switches if it is unable to find the MAC address in its local forwarding tables.
- D. The spine switch drops the Layer 2 unknown unicast packet if it is unable to find the MAC address in the proxy database.
正解：A
質問 # 49
On which two interface types should a user configure storm control to protect against broadcast traffic?
(Choose two.)
- A. all interfaces on the leaf switches in the fabric
- B. fabric uplink interfaces on the leaf switches
- C. endpoint-facing trunk interface
- D. APIC facing interfaces
- E. port channel on a single leaf switch
正解：C、E
解説：
Section: External Network Connectivity
Explanation/Reference: https://www.cisco.com/c/en/us/td/docs/switches/datacenter/aci/apic/sw/2-x/L2_config/ b_Cisco_APIC_Layer_2_Configuration_Guide/ b_Cisco_APIC_Layer_2_Configuration_Guide_chapter_01010.html
質問 # 50
Refer to the exhibit.
An engineer configures the Cisco ACI fabric for VMM integration with ESXi servers that are to be connected to the ACI leaves. The server team requires the network switches to initiate the LACP negotiation as opposed to the servers. The LAG group consists of two 10 Gigabit Ethernet links. The server learn also wants to evenly distribute traffic across all available links. Which two enhanced LAG policies meet these requirements? (Choose two.)
- A. LACP Mode: LACP Standby
- B. LB Mode: Source and Destination MAC Address
- C. LACP Mode: LACP Active
- D. LB Mode: Source IP Address and TCP/UDP Port
- E. LB Mode: Destination IP Address and TCP/UDP Port
正解：B、C
解説：
Reference:
https://www.cisco.com/c/en/us/td/docs/switches/datacenter/aci/aci_virtual_edge/configuration/2-x/Cisco-ACIVirtual- Edge-Configuration-Guide-202/Cisco-ACI-Virtual-Edge-Configuration-Guide-202_chapter_0100.html
質問 # 51
......
300-620時間限定！無料アクセス：https://jp.fast2test.com/300-620-premium-file.html
300-620問題集で2023年最新のCisco 300-620試験問題はここ：https://drive.google.com/open?id=1pLJoAhK_kaYVD2GRsrXij9vJjCtp7xh3