300-620 Practice Test

Question 26

Refer to the exhibit. A Cisco ACI fabric is newly deployed, and the security team requires more visibility of all inter EPG traffic flows. All traffic in a VRF must be forwarded to an existing firewall pair. During failover, the standby firewall must continue to use the same IP and MAC as the primary firewall. Drag and drop the steps from the left into the implementation order on the right to configure the service graph that meets the requirements. (Not all steps are used.) Select and Place:

Question 27

An engineer is extending an EPG out of the ACI fabric using static path binding. Which statement about the endpoints is true?

1. Endpoints must connect directly to the ACI leaf port.
2. External endpoints are in a different bridge domain than the endpoints in the fabric.
3. Endpoint learning encompasses the MAC address only.
4. External endpoints are in the same EPG as the directly attached endpoints.

Question 28

Which setting prevents the learning of Endpoint IP addresses whose subnet does not match the bridge domain subnet?

1. "Limit IP learning to network" setting within the bridge domain.
2. "Limit IP learning to subnet" setting within the EPG.
3. "Limit IP learning to network" setting within the EPG.
4. "Limit IP learning to subnet" setting within the bridge domain.

Question 29

Which endpoint learning operation is completed on the egress leaf switch when traffic is received from an L3Out?

1. The source MAC and IP address of the traffic is learned as a local endpoint.
2. The source MAC address of the traffic is learned as a remote endpoint.
3. No source MAC or IP address of the traffic is learned as a remote endpoint.
4. The source IP address of the traffic is learned as a remote endpoint.

Question 30

Refer to the exhibit. Which two objects are created as a result of the configuration? (Choose two.)

1. application profile
2. attachable AEP
3. bridge domain
4. endpoint group
5. VRF