Cisco 300-630 DCACIA Exam Dumps

Pdfprep2021-04-17T01:46:01+00:00

Implementing Cisco Application Centric Infrastructure-Advanced 300-630 DCACIA exam is the new number of 600-600 DCACIA test. Cisco 300-630 DCACIA exam tests your advanced knowledge and skills of Cisco switches in ACI mode including configuration, implementation, management, and troubleshooting.

The latest Cisco certification 300-630 DCACIA exam dumps are available for you to prepare this Implementing Cisco Application Centric Infrastructure-Advanced 300-630 DCACIA test. Cisco 300-630 DCACIA exam cover the following topics: ACI Packet Forwarding, Advanced ACI Policies and Integrations, Multipod, Multisite and Traditional network with ACI. Test Cisco 300-630 DCACIA exam free dumps below.

Page 1 of 6

1. An engineer deployed a Cisco ACI fabric and noticed that the fabric learns endpoints from subnets that are not configured on a bridge domain. To meet strict security requirements, the engineer must prevent this behavior .

Which action must be taken to prevent this behavior?

Activate Enable Data Plane Endpoint Learning

Implement Pervasive Gateway

Configure Static Binding

Enable Enforce Subnet Check

2. Refer to the exhibit.

图示

描述已自动生成

Which configuration must be implemented on L3Out EBGP to advertise out of the fabric 172.16.2.0/24 network that is learned from L3Out OSPF?

表格

描述已自动生成

Option A

Option B

Option C

Option D

3. Which firewall connection allows for the integration of service nodes in transparent mode with a Cisco ACI Multi-Pod setup?

active-standby mode across pods

active-active mode per pods for communication between internal endpoints

active-standby mode per pods for communication between endpoints and external networks

active-active mode across pods

4. A customer is deploying a new application across two ACI pods that is sensitive to latency and jitter. The application sets the DSCP values of packets to AF31 and CS6, respectively .

Which configuration changes must be made on the APIC to support the new application and prevent packets from being delayed or dropped between pods?

disable DSCP translation policy

align the ACI QoS levels and IPN QoS policies

disable DSCP mapping on the IPN devices

align the custom QoS policy on the EPG site in the customer tenant

5. What is the advantage of implementing an active-active firewall cluster that is stretched across separate pods when anycast services are configured?

A different MAC/IP combination can be configured for the firewall in each pod.

The local pod anycast node is preferred by the local spines.

A cluster can be deployed in transparent mode across pods.

Local traffic in a pod is load-balanced between the clustered firewalls.

6. Refer to the exhibit.

图示

描述已自动生成

Which configuration mode must be selected for the VMM vSwitch Port Channel policy to avoid MAC flapping on the Cisco UCS Fls and Cisco ACI leaf switches?

LACP Passive

MAC Pinning

LACP Active

Static Channel C Mode On

7. Refer to the exhibits.

图形用户界面, 表格

描述已自动生成

Which subject must be configured for the All_noSSH contract to allow all IP traffic except SSH between the two EPGs?

表格

描述已自动生成

Option A

Option B

Option C

Option D

8. Which action must be taken to connect two nonsilient servers in active/standby mode to two ACI leaves?

Implement a virtual PortChannel on ACI leaves

Enable ARP flooding for the bridge domain if the MAC address of the active interface changes after NIC failover

Configure ARP flooding for the bridge domain if the MAC address of the active interface stays identical after a NIC failover

Disable dataplane learning to avoid endpoint flapping

9. Which action should be taken in Cisco ACI to reassign a unique globally scoped pcTag to an EPG that provides a global contract?

Configure subnets that are treated as virtual IP

Configure subnets that advertise externally

Configure subnets that are shared between VRFs

Configure subnets that are private to VRF

10. Refer to the exhibit.

图示

描述已自动生成

Which two configuration steps are required in ISN for Cisco ACI Multi-Site setup? (Choose two.)

Connect Spine2 to ISN routers.

Configure BIDIR-PIM throughout the ISN

Increase ISN MTU to support the maximum MTU that is sent by endpoints

Configure OSPF between spines and ISN routers

Enable IGMPv3 on ISN routers

Page 2 of 6

11. Refer to the exhibit.

图示

描述已自动生成

Which feature is available across sites if EPGs are stretched?

active-active high-availability firewall clustering

Layer 3 routing between sites

Layer 2 flooding across sites

live virtual machine migration

12. Where are STP BPDUs flooded in Cisco ACI fabric?

in the bridge domain VLAN

in the native VLAN ID

in the access encapsulation VLAN part of different VLAN pools

in the VNID that is assigned to the FD VLAN

13. Refer to the exhibit.

图形用户界面, 文本, 应用程序

描述已自动生成

A network engineer configures a Layer 4 to Layer 7 device for an outside routed firewall that is connected to POD-1 inside a Cisco ACI fabric that consists of two pods. All traffic from POD-1 or POD-2 that uses the L3Out should pass through the routed firewall .

Which Function Type must be implemented in the service graph for POD-2 to use L3Out?

GoThrough

GoTo

14. An engineer designs a Cisco ACI Multi-Pod solution that requires a pair of active-standby firewalls in different pods for external connectivity .

How should the firewalls be implemented?

PBR for routed firewalls

separate L3Out peerings for routed firewalls

routed firewall for the default gateway

transparent firewalls

15. Refer to the exhibit.

图示

描述已自动生成

The client endpoint uses the load-balancer VIP as the destination address to send traffic to the server endpoint.

If the load balancer does not do source NAT, which set of configurations must be applied on Cisco ACI to allow only the return traffic to be redirected to the service node?

Create a contract with a filter matching “IP” only Create a L4-L7 device, function type “GoTo” Create a L4-L7 Policy-Based Redirect Policy with the L3 Destination set to the load- balancer inside IP/MAC Create a service graph template that references the previously created contract and L4-L7 device Apply the service graph template. Select “L3 Destination” and reference L4-L7 Policy-Based Redirect Policy on the provider connector only

Create a contract linked to the common/default filter Create a L4-L7 device, function type “GoThrough” Create a L4-L7 Policy-Based Redirect Policy with the L3 Destination set to the load-balancer inside IP/MAC Create a service graph template that references the previously created contract and L4-L7 device Apply the service graph template. Select “L3 Destination” and reference L4-L7 Policy-Based Redirect Policy on the consumer and provider connector

Create a contract linked to the common/default filter Create a L4-L7 device, function type “GoTo” Create a L4-L7 Policy-Based Redirect Policy with “Anycast Endpoint” enabled and the L3 Destination set to the load-balancer inside IP/MAC Create a service graph template that references the previously created contract and L4-L7 device Apply the service graph template. Select “L3 Destination” and reference L4-L7 Policy-Based Redirect Policy on the consumer connector only

Create a contract with a filter matching “IP” only Create a L4-L7 device, function type “GoThrough” Create a L4-L7 Policy-Based Redirect Policy with “Anycast Endpoint” enabled and the L3 Destination set to the load-balancer inside IP/MAC Create a service graph template that references the previously created contract and L4-L7 device Apply the service graph template. Select “L3 Destination” and reference L4-L7 Policy-Based Redirect Policy on the consumer and provider

16. Which two actions should be taken to ensure a scalable solution when multiple EPGs in a VRF require unrestricted communication? (Choose two.)

Configure a taboo contract between the EPGs that require unrestricted communication between each other.

Enable Preferred Group Member under the EPG Collection for VRF section.

Set the VRF policy control enforcement preference to Unenforced.

Set the EPGs that require unrestricted communication between each other as preferred group members.

Set the EPGs that require policy enforcement between each other as preferred group members.

17. What is a use of the Overlay Multicast TEP in Cisco ACI Multi-Site communication?

to perform headend replication

to act as the source IP for BUM traffic

to establish MP-BGP adjacencies with remote spines

to send and receive unicast VXLAN data plane traffic

18. Refer to the exhibit.

A customer experiences resource overconsumption on one of its border leaf switches .

Which action should be taken to reduce the consumption on this switch?

Disable VRF Policy Control Enforcement

Disable IP Data Plane Learning

Migrate L3Outs to another switch

Disable Remote EP Learning

19. Which action reduces the impact on workload when migrating from the existing Cisco NX-OS VXLAN network infrastructure to the Cisco ACI fabric?

Disable bridge domain unicast routing while a default gateway is in VXLAN infrastructure

Set the default gateway in the Cisco ACI and VXLAN fabrics

Use ACI spines for the Cisco ACI and VXLAN fabrics

Configure vPC between the standalone Nexus and the Cisco ACI leaf

20. An engineer must limit local and remote endpoint learning to the bridge domain subnet .

Which action should be taken inside the Cisco APIC?

Disable Remote EP Learn

Enable Enforce Subnet Check

Disable Endpoint Dataplane Learning

Enable Limit IP Learning to Subnet

Page 3 of 6

21. Refer to the exhibit.

图示

描述已自动生成

Between Cisco UCS Fls and Cisco ACI leaf switches, CDP is disabled, the LLDP is enabled, and LACP is in Active mode .

Which two discovery protocols and load-balancing mechanism combinations can be implemented for the DVS? (Choose two.)

CDP enabled, LLDP disabled, and LACP Active

CDP disabled, LLDP enabled, and MAC Pinning

CDP enabled, LLDP disabled, and MAC Pinning

CDP enabled, LLDP enabled, and LACP Active

CDP enabled, LLDP disabled, and LACP Passive

CDP disabled, LLDP enabled, and LACP Passive

22. Refer to the exhibit.

图示

描述已自动生成

What must be configured in the service graph to redirect HTTP traffic between the EPG client and EPG server to go through the Cisco ASA firewall?

contract filter to allow ARP and HTTP

precise filter to allow only HTTP traffic

contract with no filter

permit-all contract filter

23. An engineer configures a new Cisco ACI Multi-Pod and must set up the link between the spine and the IPN device .

Which three actions should be taken to accomplish this goal? (Choose three.)

Enable MP-BGP routing

Enable BIDIR-PIM protocol

Enable PIM-SM protocol

Enable OSPF routing

Enable IS-IS routing

Enable DHCP relay

24. What are two characteristics of Cisco ACI interaction with MSTP? (Choose two.)

A Cisco ACI leaf flushes all local endpoints in the received EPG when an MSTP TCN frame is received.

A static path binding is required for native VLAN to carry the MST BPDUs in existing EPGs.

Mis-cabling protocol is used to snoop the MSTP TCN packets.

A dedicated EPG must be created for the native VLAN ID with static bindings toward the MSTP-enabled switches.

The PVST simulation must be configured on external network switches to support MST

25. Refer to the exhibit.

图示

描述已自动生成

An engineer must have communication between EPG1 in VRF1 and External EPG in VRF2 .

Which three actions should be taken for the defined subnets in the L3Out External EPG to accomplish this goal? (Choose three.)

Enable Shared Route Control Subnet

Enable External Subnets for External EPG

Enable Export Route Control Subnet

Enable Shared Security Import Subnet

Enable Aggregate Shared Routes

Enable Import Route Control Subnet

26. Refer to the exhibit.

图示

描述已自动生成

The 0.0.0.0/0 is configured as a default static route on L3Out-1 .

Which action should be taken for the 0.0.0.0/0 prefix to advertise out on L3Out-2 OSPF?

Enable Shared Security Import Subnet

Enable Aggregate Export Subnet

Enable Shared Route Control Subnet

Enable Export Route Control Subnet

27. How is broadcast forwarded in Cisco ACI Multi-Pod after ARP flooding is enabled?

For the specific bridge domain, all spines forward the broadcast frames to IPN routers

Broadcast frames are forwarded inside the pod and across the IPN using the multicast address that is associated to the bridge domain

Within a pod, the ingress leaf switch floods the broadcast frame on all fabric ports

Ingress replication is used on the spines to forward broadcast frames in the IPN infrastructure

28. How is multicast traffic managed in a Cisco ACI fabric?

FTag trees are rooted at the spine nodes. Cisco APIC determines the roots.

FTag trees are rooted at the leaf nodes. Cisco APIC determines the roots.

FTag trees are rooted at the leaf nodes. The roots must be configured manually.

FTag trees are rooted at the spine nodes. The roots must be configured manually.

29. DRAG DROP

An engineer must migrate servers from a legacy data center infrastructure to a Cisco ACI fabric.

Drag and drop the steps from the left into the order that they must be completed on the right to ensure the least amount of downtime.

表格

中度可信度描述已自动生成

30. Which feature should be disabled on a bridge domain when a default gateway for endpoints is on an external device instead of a Cisco ACI bridge domain SVI?

unicast routing

ARP flooding

unknown unicast flooding

proxy ARP

Page 4 of 6

31. What are two characteristics of Cisco ACI interaction with MSTP? (Choose two.)

A Cisco ACI leaf flushes all local endpoints in the received EPG when an MSTP TCN frame is received.

A static path binding is required for native VLAN to carry the MST BPDUs in existing EPGs.

Mis-cabling protocol is used to snoop the MSTP TCN packets.

A dedicated EPG must be created for the native VLAN ID with static bindings toward the MSTP-enabled switches.

The PVST simulation must be configured on external network switches to support MST

32. Refer to the exhibit.

Which combination of flags in the Cisco ACI contract allows a client in WebClient EPG to establish an HTTP connection toward a server in WebServer EPG?

Apply Both Direction ENABLED and Reverse Port Filter ENABLED

Apply Both Direction DISABLED and Reverse Port Filter DISABLED

Apply Both Direction DISABLED and Reverse Port Filter ENABLED

Apply Both Direction ENABLED and Reverse Port Filter DISABLED

33. Refer to the exhibit.

What must be configured to allow the PBR node (LB-int) to monitor the availability of the endpoint that is in the EPG server?

Endpoint Dataplane Learning

Unicast Route disabled for client and server bridge domains

PBR node tracking

Direct Connect in the service graph template

34. What is the purpose of the Forwarding Tag (FTAG) in Cisco ACI?

FTAG is used in Cisco ACI to add a label to the iVXLAN traffic in the fabric to apply the correct policy.

FTAG is used in Cisco ACI to add a label to the VXLAN traffic in the fabric to apply the correct policy.

FTAG trees in Cisco ACI are used to load balance unicast traffic.

FTAG trees in Cisco ACI are used to load balance mutli-destination traffic.

35. What is a characteristic of a stretched bridge domain solution between Cisco ACI sites with Layer 2 flood disabled?

The application profile that is associated to the bridge domain have local significance in each site.

The tenant and VRF that associated to the bridge domain have local significance in each site.

Headend replication is used for BUM traffic between sites.

IP mobility is ensured between sites for disaster recovery.

36. Refer to the exhibit.

A network engineer configures a Layer 4 to Layer 7 device for an outside routed firewall that is connected to POD-1 inside a Cisco ACI fabric that consists of two pods. All traffic from POD-1 or POD-2 that uses the L3Out should pass through the routed firewall.

Which Function Type must be implemented in the service graph for POD-2 to use L3Out?

GoThrough

GoTo

37. An engineer designers a Cisco ACI Multi-Pod solution that requires a pair of active-standby firewalls in different pods for external connectivity.

How should the firewalls be implemented?

PBR for routed firewalls

separate L3Out peerings for routed firewalls

routed firewall for the default gateway

transparent firewalls

38. Refer to the exhibit.

Two application profiles are configured in the same tenant and different VRFs.

Which contract scope is configured to allow communication between the two application profiles?

global

VRF

application

tenant

39. Which approach does Cisco ACI use to achieve multidestination packet forwarding between leaf switches in the same fabric?

Map VXLAN VTEP to the multicast group

Map VXLAN to PIM-SM protocol

Map VXLAN VNI to the multicast group

Map VXLAN to PIM-DM protocol

40. Which two components must be configured as stretched to establish intra-VRF communication between two EPGs that are deployed in different sites and different bridge domains? (Choose two.)

contract

tenant

application profile

bridge domain

EPG

Page 5 of 6

41. Cisco ACI fabric is migrated from network-centric mode to application-centric mode.

What is possible in an application-centric design?

remapping of VLAN pools

migration of bare metal servers to virtual machines

creation of additional EPGs under one bridge domain

Cisco ACI VMM integration with hypervisors

42. An engineer configures a Cisco ACI Multi-Pod for disaster recovery.

Which action should be taken for the new nodes to be discoverable by the existing Cisco APICs?

Enable subinterfaces with dot1q tagging on all links between the IPN routers.

Configure IGMPv3 on the interfaces of IPN routers that face the Cisco ACI spine.

Enable DHCP relay on all links that are connected to Cisco ACI spines on IPN devices.

Configure BGP as the underlay protocol in IP

43. Which firewall connection allows for the integration of service nodes in transparent mode with a Cisco ACI Multi-Pod setup?

active-standby mode across pods

active-active mode per pods for communication between internal endpoints

active-standby mode per pods for communication between endpoints and external networks

active-active mode across pods

44. Refer to the exhibits.

Which subject must be configured for the All_noSSH contract to allow all IP traffic except

SSH between the two EPGs?

Option A

Option B

Option C

Option D

45. A network engineer configured an active-active firewall cluster that is stretched across separate pods in the Cisco ACI fabric.

Which two implementation setups for anycast services are available? (Choose two.)

Modify the Cisco ACI contract scope

Modify the MAC address on the second firewall

Configure the firewalls behind an EPG subnet

Deselect No Default SVI Gateway under EPG Subnet

Deploy a Layer 4 to Layer 7 service graph with PBR

46. Refer to the exhibit.

What must be configured in the service graph to redirect HTTP traffic between the EPG client and EPG server to go through the Cisco ASA firewall?

contract filter to allow ARP and HTTP

precise filter to allow only HTTP traffic

contract with no filter

permit-all contract filter

47. Refer to the exhibit.

An engineer extends a Cisco ACI Multi-Pod setup to a Cisco ACI Multi-Site implementation.

Which action allows the interconnection?

Configure BIDIR-PIM in the IPN and ISN

Use dedicated uplinks on Site 1 spines for ISN connections

Connect all spines to the IPN and ISN

Filter the advertisement of the Site 2 TEP pool into the IPN

48. What does the VXLAN source port add to the overlay packet forwarding when it uses the hash of Layer 2, Layer 3, and Layer 4 headers of the inner packet?

ECMP

TCP optimization

disabled fragmentation

jumbo frames

49. Refer to the exhibit.

An engineer must have communication between EPG1 in VRF1 and External EPG in VRF2.

Which three actions should be taken for the defined subnets in the L3Out External EPG to accomplish this goal? (Choose three.)

Enable Shared Route Control Subnet

Enable External Subnets for External EPG

Enable Export Route Control Subnet

Enable Shared Security Import Subnet

Enable Aggregate Shared Routes

Enable Import Route Control Subnet

50. Which action should be taken in Cisco ACI to reassign a unique globally scoped pcTag to an EPG that provides a global contract?

Configure subnets that are treated as virtual IP

Configure subnets that advertise externally

Configure subnets that are shared between VRFs

Configure subnets that are private to VRF

Page 6 of 6

51. Refer to the exhibit.

A customer implements Cisco ACI Multi-Site with default MTU settings between two sites.

Which configuration should be applied on the interface Eth1/10 on the ISN-1 device?

Option A

Option B

Option C

Option D

52. An engineer configures a new Cisco ACI Multi-Pod and must set up the link between the spine and the IPN device.

Which three actions should be taken to accomplish this goal? (Choose three.)

Enable MP-BGP routing

Enable BIDIR-PIM protocol

Enable PIM-SM protocol

Enable OSPF routing

Enable IS-IS routing

Enable DHCP relay

53. Refer to the exhibit.

The 0.0.0.0/0 is configured as a default static route on L3Out-1.

Which action should be taken for the 0.0.0.0/0 prefix to advertise out on L3Out-2 OSPF?

Enable Shared Security Import Subnet

Enable Aggregate Export Subnet

Enable Shared Route Control Subnet

Enable Export Route Control Subnet

54. Which two actions are the Cisco best practices to configure NIC teaming load balancing for Cisco UCS B-Series blades that are connected to the Cisco ACI leaf switches? (Choose two.)

Create vPC+

Enable LACP active mode

Create PAgP

Create vPC

Enable MAC pinning

Cisco 300-630 DCACIA Exam Dumps

Author

Leave a Reply Cancel reply