Free Cisco 300-620 Exam Dumps Questions & Answers

Refer to the exhibit. An engineer must divert the traffic between VM-1 and VM-2 by using a Multi- Node service graph. The solution should prevent an insufficient number of available Layer 4 to Layer 7 devices in the first cluster. Which configuration set accomplishes this goal?

• A.  PBR node tracking
  tracking threshold with action permit
  unidirectional PBR
  resilient hashing
• B.  PBR node tracking
  tracking threshold with action permit
  symmetric PBR
  resilient hashing
• C.  PBR node tracking
  tracking threshold with action deny
  symmetric PBR
  unidirectional PBR
• D.  PBR node tracking
  tracking threshold with action bypass
  symmetric PBR
  resilient hashing

A network engineer must allow secure access to the Cisco ACI out-of-band (OOB) management only from external subnets 10.0.0.0/24 and 192.168.20.0/25. Which configuration set accomplishes this goal?

• A.  Create a L3Out in the MGMT tenant in OOB VRF.
  Set External Management Network Instance Profile as a consumer of the OOB contract.
  Create an External EPG with two subnet entries with the external subnets.
• B.  Create a PBR service graph in the MGMT tenant.
  Create a management Profile with the required OOB EPG.
  Redirect all traffic going into ACI management to the external firewall.
  Create two subnet entries under the OOB Bridge domain with the required subnets.
• C.  Create an OOB contract that allows the required ports.
  Provide the contract from the OOB EPG.
  Consume the contract by the OOB External Management Network Instance Profile.
  Create two subnet entries in the External Management Network Profile with the required subnets.
• D.  Create an EPG and BD in the MGMT tenant in OOB VRF.
  Set OOB VRF to provide the contract.
  Set a new EPG to consume the OOB contract.

A network engineer must backup the PRODUCTION tenant. The configuration backup should be stored on the APIC using a markup language and contain all secure information. Which export policy must be used to meet these requirement?

• A. 
• B. 
• C. 
• D. 

A Cisco ACI fabric is integrated with VMware VDS. The fabric must apply a security policy to check the integrity of traffic out of the network adapter. Which action must be taken to drop the packet when the ESXi host discovers a mismatch between the actual source MAC address transmitted by the guest operating system and the effective MAC address of the virtual machine adapter?

• A.  Accept MAC changes.
• B.  Accept forged transmits.
• C.  Reject MAC changes.
• D.  Reject forged transmits.

The engineer notices frequent MAC and IP address moves between different leaf switch ports.
Which action prevents this problem from occurring?

• A.  Disable enforce subnet check.
• B.  Disable IP bridge domain enforcement.
• C.  Enable endpoint loop protection.
• D.  Enable rogue endpoint control.