[Feb 08, 2023] New Cisco 300-630 Dumps with Test Engine and PDF (New Questions)
Pass Your 300-630 Exam Easily - Real 300-630 Practice Dump Updated
NEW QUESTION 22
A cloud provider must make a pair of firewalls available to all tenants. Each tenant defines its own service graph. Where should the Layer 4 to Layer 7 service be configured to accomplish this goal?
- A. management tenant
- B. common tenant
- C. infrastructure tenant
- D. user tenant
Answer: D
NEW QUESTION 23
A network engineer configured an active-active firewall cluster that is stretched across separate pods in the Cisco ACI fabric. Which two implementation setups for anycast services are available? (Choose two.)
- A. Deploy a Layer 4 to Layer 7 service graph with PBR
- B. Configure the firewalls behind an EPG subnet
- C. Modify the MAC address on the second firewall
- D. Modify the Cisco ACI contract scope
- E. Deselect No Default SVI Gateway under EPG Subnet
Answer: B,C
Explanation:
Section: Multipod
NEW QUESTION 24
An engineer must migrate servers from a legacy data center infrastructure to a Cisco ACI fabric. Drag and drop the steps from the left into the order that they must be completed on the right to ensure the least amount of downtime.
Answer:
Explanation:
NEW QUESTION 25
Refer to the exhibit.
Two application profiles are configured in the same tenant and different VRFs. Which contract scope is configured to allow communication between the two application profiles?
- A. application
- B. VRF
- C. global
- D. tenant
Answer: D
NEW QUESTION 26
An engineer must migrate servers from a legacy data center infrastructure to a Cisco ACI fabric. Drag and drop the steps from the left into the order that they must be completed on the right to ensure the least amount of downtime.
Answer:
Explanation:
NEW QUESTION 27
Which action must be taken to connect two nonsilient servers in active/standby mode to two ACI leaves?
- A. Implement a virtual PortChannel on ACI leaves
- B. Enable ARP flooding for the bridge domain if the MAC address of the active interface changes after NIC failover
- C. Disable dataplane learning to avoid endpoint flapping
- D. Configure ARP flooding for the bridge domain if the MAC address of the active interface stays identical after a NIC failover
Answer: D
NEW QUESTION 28 
Refer to the exhibit. A customer implements Cisco ACI Multi-Site with default MTU settings between two sites.
Which configuration should be applied on the interface Eth1/10 on the ISN-1 device?
- A.

- B.

- C.

- D.

Answer: C
Explanation:
Section: Multisite
NEW QUESTION 29 
Refer to the exhibit. A customer experiences resource overconsumption on one of its border leaf switches.
Which action should be taken to reduce the consumption on this switch?
- A. Disable VRF Policy Control Enforcement
- B. Disable IP Data Plane Learning
- C. Migrate L3Outs to another switch
- D. Disable Remote EP Learning
Answer: B
Explanation:
Section: Advanced ACI Policies and Integrations
NEW QUESTION 30
Refer to the exhibit.
The 0.0.0.0/0 is configured as a default static route on L3Out-1. Which action should be taken for the 0.0.0.0/0 prefix to advertise out on L3Out-2 OSPF?
- A. Enable Shared Security Import Subnet
- B. Enable Export Route Control Subnet
- C. Enable Shared Route Control Subnet
- D. Enable Aggregate Export Subnet
Answer: D
NEW QUESTION 31
What is the purpose of the Forwarding Tag (FTAG) in Cisco ACI?
- A. FTAG is used in Cisco ACI to add a label to the VXLAN traffic in the fabric to apply the correct policy.
- B. FTAG trees in Cisco ACI are used to load balance unicast traffic.
- C. FTAG is used in Cisco ACI to add a label to the iVXLAN traffic in the fabric to apply the correct policy.
- D. FTAG trees in Cisco ACI are used to load balance mutli-destination traffic.
Answer: D
Explanation:
Section: ACI Packet Forwarding
Explanation/Reference: https://www.cisco.com/c/en/us/td/docs/switches/datacenter/aci/apic/sw/1-x/aci-fundamentals/ b_ACI-Fundamentals/b_ACI- Fundamentals_chapter_010010.html#concept_1E8BF286E1C043EF839D80935FDF9F50
NEW QUESTION 32 
Refer to the exhibit. The 0.0.0.0/0 is configured as a default static route on L3Out-1. Which action should be taken for the 0.0.0.0/0 prefix to advertise out on L3Out-2 OSPF?
- A. Enable Shared Security Import Subnet
- B. Enable Export Route Control Subnet
- C. Enable Shared Route Control Subnet
- D. Enable Aggregate Export Subnet
Answer: D
Explanation:
Section: Advanced ACI Policies and Integrations
NEW QUESTION 33
Refer to the exhibit.
The client endpoint uses the load-balancer VIP as the destination address to send traffic to the server endpoint. If the load balancer does not do source NAT, which set of configurations must be applied on Cisco ACI to allow only the return traffic to be redirected to the service node?
- A. Create a contract with a filter matching "IP" only Create a L4-L7 device, function type "GoThrough" Create a L4-L7 Policy-Based Redirect Policy with "Anycast Endpoint" enabled and the L3 Destination set to the load-balancer inside IP/MAC Create a service graph template that references the previously created contract and L4-L7 device Apply the service graph template. Select "L3 Destination" and reference L4-L7 Policy-Based Redirect Policy on the consumer and provider
- B. Create a contract linked to the common/default filter Create a L4-L7 device, function type "GoTo" Create a L4-L7 Policy-Based Redirect Policy with "Anycast Endpoint" enabled and the L3 Destination set to the load-balancer inside IP/MAC Create a service graph template that references the previously created contract and L4-L7 device Apply the service graph template. Select "L3 Destination" and reference L4-L7 Policy-Based Redirect Policy on the consumer connector only
- C. Create a contract with a filter matching "IP" only Create a L4-L7 device, function type "GoTo" Create a L4-L7 Policy-Based Redirect Policy with the L3 Destination set to the load-balancer inside IP/ MAC Create a service graph template that references the previously created contract and L4-L7 device Apply the service graph template. Select "L3 Destination" and reference L4-L7 Policy-Based Redirect Policy on the provider connector only
- D. Create a contract linked to the common/default filter Create a L4-L7 device, function type "GoThrough" Create a L4-L7 Policy-Based Redirect Policy with the L3 Destination set to the load-balancer inside IP/ MAC Create a service graph template that references the previously created contract and L4-L7 device Apply the service graph template. Select "L3 Destination" and reference L4-L7 Policy-Based Redirect Policy on the consumer and provider connector
Answer: A
NEW QUESTION 34
An engineer deployed a Cisco ACI fabric and noticed that the fabric learns endpoints from subnets that are not configured on a bridge domain. To meet strict security requirements, the engineer must prevent this behavior. Which action must be taken to prevent this behavior?
- A. Configure Static Binding
- B. Implement Pervasive Gateway
- C. Activate Enable Data Plane Endpoint Learning
- D. Enable Enforce Subnet Check
Answer: D
NEW QUESTION 35
Which action reduces the impact on workload when migrating from the existing Cisco NX-OS VXLAN network infrastructure to the Cisco ACI fabric?
- A. Set the default gateway in the Cisco ACI and VXLAN fabrics
- B. Disable bridge domain unicast routing while a default gateway is in VXLAN infrastructure
- C. Use ACI spines for the Cisco ACI and VXLAN fabrics
- D. Configure vPC between the standalone Nexus and the Cisco ACI leaf
Answer: A
NEW QUESTION 36
An existing Cisco ACI Multi-Site setup with default fabric settings contains endpoints that communicate with an MTU of 1500. What is the minimum MTU value that must be supported by the ISN to allow control plane endpoint information exchange between sites?
- A. 0
- B. 1
- C. 2
- D. 3
Answer: A
NEW QUESTION 37 
Refer to the exhibit. How is the ARP request from VM1 forwarded when VM2 is not learned in the Cisco ACI fabric?
- A. Leaf 101 switch consumes the ARP reply of VM2 to update the local endpoint table.
- B. Leaf 101 encapsulates the ARP request into a multicast packet that is destined to 225.0.37.192.
- C. POD1 spine responds to the ARP request after the POD1 COOP is updated with the VM2 location.
- D. Leaf 101 forwards the ARP request to one of the proxy VTEP spines.
Answer: D
Explanation:
Section: ACI Packet Forwarding
NEW QUESTION 38
An organization expands a Cisco ACI Multi-Pod from two to six pods and must ensure that the control plane scales. What should be configured in the IPN to ensure that BUM traffic is forwarded efficiently across the IPN?
- A. spine headend replication
- B. BIDIR-PIM
- C. MSDP
- D. MP-BGP
Answer: B
Explanation:
Section: Multipod
Explanation/Reference: https://www.cisco.com/c/en/us/solutions/collateral/data-center-virtualization/application-centric- infrastructure/white-paper-c11-737855.html
NEW QUESTION 39
A cloud provider must make a pair of firewalls available to all tenants. Each tenant defines its own service graph. Where should the Layer 4 to Layer 7 service be configured to accomplish this goal?
- A. management tenant
- B. common tenant
- C. infrastructure tenant
- D. user tenant
Answer: D
Explanation:
Section: Advanced ACI Policies and Integrations
Explanation
NEW QUESTION 40 

Refer to the exhibits. Which subject must be configured for the All_noSSH contract to allow all IP traffic except SSH between the two EPGs?
- A.

- B.

- C.

- D.

Answer: C
Explanation:
Section: Advanced ACI Policies and Integrations
Explanation/Reference: https://www.cisco.com/c/en/us/td/docs/switches/datacenter/aci/apic/sw/1-x/ACI_Best_Practices/ b_ACI_Best_Practices/b_ACI_Best_Practices_chapter_010.html
NEW QUESTION 41
......
DumpsTorrent just published the Cisco 300-630 exam dumps!: https://guidetorrent.dumpstorrent.com/300-630-exam-prep.html