CISCO 300-620 Implementing Cisco Application Centric Infrastructure (DCACI) Free Practice Test — 30 Questions

Question 1

In a multi-tenant environment utilizing Cisco Application Centric Infrastructure (ACI), a network engineer is tasked with ensuring tenant isolation while allowing specific inter-tenant communication for a shared service. The engineer decides to implement a combination of Bridge Domain (BD) and Endpoint Groups (EPGs) to achieve this. Given the following configurations: Tenant A has EPGs configured with a BD that has a subnet of 10.0.0.0/24, while Tenant B has EPGs configured with a BD that has a subnet of 10.0.1.0/24. The engineer needs to allow Tenant A\'s EPG to communicate with a shared service EPG in Tenant B\'s BD without compromising isolation. Which of the following configurations would best achieve this goal while maintaining tenant isolation?

Accepted Answer

Configure a contract between Tenant A's EPG and the shared service EPG in Tenant B, ensuring that the contract specifies the necessary filters for allowed traffic.

Question 2

In a multi-tenant Cisco Application Centric Infrastructure (ACI) environment, a network administrator is tasked with configuring tenant policies to ensure that each tenant can operate independently while sharing the same physical infrastructure. The administrator needs to define the appropriate Application Network Profiles (ANPs) and Endpoint Groups (EPGs) for two tenants, Tenant A and Tenant B. Tenant A requires access to a specific set of services, including web and database services, while Tenant B needs access to a different set of services, including application and storage services. Given this scenario, which of the following configurations would best ensure that both tenants can operate without interference while maintaining optimal resource allocation?

Accepted Answer

Create separate Application Network Profiles for Tenant A and Tenant B, each with their own Endpoint Groups that define the specific services required by each tenant.

Question 3

In a multi-site architecture for a large enterprise, you are tasked with designing a solution that ensures seamless application performance across geographically dispersed data centers. The enterprise has two primary sites, Site A and Site B, each hosting critical applications. The applications must maintain high availability and low latency for users located in different regions. Given the following requirements:

Accepted Answer

Each site must be able to operate independently in case of a failure at the other site.

Question 4

In a data center utilizing Cisco ACI, a network engineer is tasked with designing a scalable application network that adheres to best practices for endpoint groups (EPGs). The engineer must ensure that the EPGs are configured to optimize traffic flow and security policies while minimizing the complexity of the configuration. Given the following requirements: 1) Applications must be isolated from one another, 2) Security policies should be applied at the EPG level, and 3) The design should facilitate easy scaling as new applications are added, which approach should the engineer take to configure the EPGs effectively?

Accepted Answer

Create separate EPGs for each application and apply specific contracts to control communication between them, ensuring that security policies are enforced at the EPG level.

Question 5

In a large enterprise network utilizing Cisco Application Centric Infrastructure (ACI), a network architect is tasked with designing a solution that maximizes application performance while ensuring efficient resource utilization. The architect considers the benefits of ACI\'s policy-driven automation and its ability to provide application-centric visibility. Which of the following scenarios best illustrates how ACI can enhance application performance and resource management in this context?

Accepted Answer

ACI dynamically adjusts network resources based on real-time application performance metrics, allowing for automatic scaling of resources during peak usage times.

Question 6

In a corporate network, a network administrator has implemented DHCP Snooping to enhance security against rogue DHCP servers. The network consists of multiple VLANs, and the administrator has configured trusted and untrusted ports accordingly. During a routine audit, the administrator discovers that a specific untrusted port has been receiving DHCP offers from an unauthorized DHCP server. What is the most effective way to mitigate this issue while ensuring that legitimate DHCP traffic is not disrupted?

Accepted Answer

Configure the untrusted port to drop all DHCP packets and enable DHCP Snooping on all VLANs.

Question 7

In a data center utilizing VMware NSX for network virtualization, a network engineer is tasked with designing a multi-tier application architecture that includes web, application, and database tiers. The engineer must ensure that the application tiers can communicate securely while maintaining isolation from other applications. Which of the following configurations best achieves this goal while leveraging NSX\'s capabilities?

Accepted Answer

Create separate logical switches for each tier and implement distributed firewall rules to control traffic between them.

Question 8

In a data center environment utilizing Cisco Application Centric Infrastructure (ACI), a network engineer is tasked with optimizing the operational efficiency of the application deployment process. The engineer must ensure that the application profiles are correctly configured to leverage the benefits of ACI\'s policy-driven architecture. Given a scenario where multiple application profiles are created, each with specific endpoint groups (EPGs) and contracts, what is the best practice for managing these profiles to ensure minimal disruption during updates and maximum resource utilization?

Accepted Answer

Implement version control for application profiles and use a staging environment for testing changes before deployment.

Question 9

In a multi-tenant data center environment, a network engineer is tasked with configuring Virtual Routing and Forwarding (VRF) instances to ensure that different tenants can operate independently without any overlap in their routing tables. The engineer needs to configure two VRFs: VRF_A for Tenant A and VRF_B for Tenant B. Each tenant requires access to a shared service network, which is also connected to the router. The engineer must ensure that the routing information for the shared service network is correctly propagated to both VRFs while maintaining isolation between the tenants. Which configuration approach should the engineer take to achieve this?

Accepted Answer

Configure route targets for both VRFs and use route leaking to share the service network routes between VRF_A and VRF_B.

Question 10

In a corporate network environment, an administrator has implemented IP Source Guard to enhance security on the access layer switches. The network consists of multiple VLANs, and each VLAN has specific DHCP servers assigned to it. The administrator wants to ensure that only authorized devices can communicate on the network and that they can only use the IP addresses assigned to them by the DHCP servers. If a device attempts to use an IP address that is not in the DHCP binding table, what will be the outcome in terms of traffic flow and network security?

Accepted Answer

The traffic from the unauthorized device will be dropped, preventing it from communicating on the network.

Question 11

In a data center utilizing Cisco Application Centric Infrastructure (ACI), a network engineer is tasked with implementing service chaining for a multi-tier application. The application consists of a web tier, an application tier, and a database tier. The engineer needs to ensure that traffic flows through a firewall and an intrusion detection system (IDS) before reaching the application tier. Given the requirements, which configuration approach should the engineer prioritize to effectively implement service chaining while maintaining optimal performance and security?

Accepted Answer

Utilize ACI's service graph feature to define the service chain and apply it to the relevant endpoint groups (EPGs) for the application tier.

Question 12

In a Cisco ACI environment, a network engineer is troubleshooting an application that is experiencing intermittent connectivity issues. The engineer uses the ACI troubleshooting tools to analyze the application’s health score, which is currently at 70%. The engineer notes that the application is deployed across multiple endpoints and is utilizing a combination of Layer 2 and Layer 3 services. Given that the health score is below the acceptable threshold of 80%, which of the following actions should the engineer prioritize to improve the application’s performance and connectivity?

Accepted Answer

Investigate the endpoint groups (EPGs) and their associated contracts to ensure proper communication and policy enforcement.

Question 13

In a data center environment, a network engineer is tasked with automating the deployment of virtual machines (VMs) across multiple hosts using Cisco Application Centric Infrastructure (ACI). The engineer needs to ensure that the VMs are provisioned with the correct policies and configurations based on the application requirements. Which approach should the engineer take to effectively implement automation and orchestration in this scenario?

Accepted Answer

Utilize Cisco ACI's Application Network Profiles (ANPs) to define the application requirements and automate the provisioning of VMs with the necessary policies and configurations.

Question 14

In a data center utilizing Cisco Application Centric Infrastructure (ACI), a network engineer is tasked with analyzing the performance of a critical application that is experiencing latency issues. The application is deployed across multiple endpoints, and the engineer needs to determine the average latency experienced by users. The engineer collects the following latency data (in milliseconds) from five different endpoints: 20, 25, 30, 35, and 40. What is the average latency, and how can the engineer utilize Cisco ACI\'s Application Visibility and Performance features to further diagnose and optimize the application performance?

Accepted Answer

The average latency is 30 ms, and the engineer can use the Application Performance Monitoring (APM) tools to identify bottlenecks and optimize traffic flows.

Question 15

In a data center utilizing Cisco Application Centric Infrastructure (ACI), a network engineer is tasked with analyzing the performance of a critical application that is experiencing latency issues. The application is deployed across multiple endpoints, and the engineer needs to determine the average latency for the application traffic over a specific period. The engineer collects the following data: during a 10-minute observation window, the application traffic generated 500 packets with a total transmission time of 150 seconds. What is the average latency per packet in milliseconds?

Accepted Answer

300 ms

Question 16

In a data center environment, a network engineer is tasked with capturing and analyzing packets to troubleshoot a performance issue. The engineer uses a packet capture tool to collect data over a period of time and notices a significant number of TCP retransmissions. Given that the capture shows a total of 10,000 packets, with 1,200 of them being retransmissions, what is the percentage of TCP retransmissions in the captured data? Additionally, the engineer needs to determine the potential causes of these retransmissions based on the analysis of the packet capture. Which of the following scenarios best describes the most likely cause of the high retransmission rate?

Accepted Answer

Network congestion leading to packet loss

Question 17

In a multi-tenant data center environment, a network engineer is tasked with configuring Virtual Routing and Forwarding (VRF) instances to ensure that traffic from different tenants remains isolated while still allowing for shared infrastructure. The engineer needs to implement a solution that allows for the routing of tenant A\'s traffic to tenant B\'s services without compromising the security and isolation of their respective networks. Given the following VRF configurations, which approach would best achieve this goal while adhering to best practices for VRF implementation?

Accepted Answer

Configure route targets (RTs) for both VRFs and use route leaking to allow tenant A's VRF to access specific routes in tenant B's VRF while maintaining isolation for other routes.

Question 18

In a data center utilizing Cisco Application Centric Infrastructure (ACI), a network engineer is tasked with configuring a new ACI switch to support a multi-tenant environment. The engineer must ensure that the switch can handle traffic from multiple tenants while maintaining isolation and security. Given that the switch will be configured with multiple Bridge Domains (BDs) and Endpoint Groups (EPGs), how should the engineer approach the configuration to optimize performance and security for each tenant?

Accepted Answer

Configure each tenant's EPG to use a unique Bridge Domain and apply contract rules to control traffic flow between EPGs.

Question 19

In a data center utilizing Cisco Application Centric Infrastructure (ACI), a network engineer is tasked with implementing policy enforcement for a new application that requires specific Quality of Service (QoS) parameters. The application must ensure that voice traffic is prioritized over video traffic, and both must be managed within a defined bandwidth limit of 1 Gbps. The engineer decides to configure a policy that allocates 70% of the bandwidth to voice traffic and 30% to video traffic. If the total bandwidth is $B = 1 \text{ Gbps}$, what are the allocated bandwidths for voice and video traffic, respectively, in Mbps?

Accepted Answer

700 Mbps for voice and 300 Mbps for video

Question 20

In a Cisco ACI environment, a network administrator is tasked with monitoring the performance of the ACI fabric to ensure optimal application delivery. The administrator needs to analyze the health of the fabric by examining the statistics of the leaf switches, specifically focusing on the number of dropped packets and the overall throughput. If the total throughput of a leaf switch is measured at 10 Gbps and the number of dropped packets is 500 over a period of 10 seconds, what is the packet drop rate in percentage? Additionally, if the total number of packets sent during this period is 1,000,000, what is the effective throughput in packets per second after accounting for the dropped packets?

Accepted Answer

0.05% drop rate and 99,950 packets per second effective throughput

Question 21

In a multi-tenant environment utilizing Cisco Application Centric Infrastructure (ACI), a network engineer is tasked with ensuring that tenants are isolated from one another while still allowing for shared services. The engineer decides to implement a combination of Bridge Domain (BD) and Endpoint Groups (EPGs) to achieve this. Given the following configurations:

Accepted Answer

Tenant A has a Bridge Domain configured with a subnet of 10.1.1.0/24 and EPGs for web and database services.

Question 22

In a Cisco Application Centric Infrastructure (ACI) environment, a network administrator is tasked with evaluating the health scores of various application endpoints. The health score is calculated based on several factors, including the number of active connections, the response time of the endpoints, and the overall resource utilization. Given that the health score is defined as follows:

Accepted Answer

ext{Health Score} = \frac{	ext{Active Connections} 	imes 	ext{Response Time Factor}}{	ext{Resource Utilization}} $$

Question 23

In a data center utilizing Cisco Application Centric Infrastructure (ACI), a network engineer is tasked with designing a shared services model that allows multiple tenants to access common resources while maintaining isolation and security. The engineer decides to implement a shared services model using Bridge Domain (BD) and Endpoint Groups (EPGs). Given the following requirements: 1) Each tenant must have access to a shared database service, 2) The database service must be isolated from other services, and 3) The solution must support dynamic scaling of resources. Which configuration approach should the engineer prioritize to meet these requirements effectively?

Accepted Answer

Create a dedicated Bridge Domain for the shared database service and associate it with a specific Endpoint Group that includes all tenant applications needing access to the database while ensuring that the EPGs for other services are configured with appropriate contracts to restrict access.

Question 24

In a multi-tenant environment within Cisco ACI, a network administrator is tasked with configuring tenant isolation while ensuring that shared services can be accessed by multiple tenants. The administrator decides to implement Bridge Domain (BD) and Endpoint Groups (EPGs) to achieve this. Given the following scenario, which configuration would best facilitate tenant isolation while allowing shared services access?

Accepted Answer

Create separate Bridge Domains for each tenant and a shared Bridge Domain for common services, associating the shared Bridge Domain with the relevant EPGs of each tenant.

Question 25

In a Cisco Application Centric Infrastructure (ACI) environment, a network engineer is tasked with configuring endpoint groups (EPGs) to optimize application performance and security. The engineer needs to ensure that endpoints within the same EPG can communicate with each other while restricting access to endpoints in different EPGs. Given the following requirements:

Accepted Answer

Endpoints in the "Web Servers" EPG must communicate freely with each other.

Question 26

In a Cisco Application Policy Infrastructure Controller (APIC) environment, you are tasked with configuring a new tenant that requires specific application profiles and endpoint groups (EPGs) to support a multi-tier application architecture. The application consists of a web tier, an application tier, and a database tier. Each tier must be isolated from one another while allowing specific communication paths. Given the following requirements:

Accepted Answer

The web tier (EPG1) must communicate with the application tier (EPG2) using HTTP (port 80).

Question 27

In a data center utilizing Cisco Application Centric Infrastructure (ACI), a network engineer is tasked with monitoring the performance of various applications across multiple tenants. The engineer decides to implement a monitoring tool that provides real-time analytics and historical data. Which of the following tools would best facilitate this requirement by offering deep visibility into application performance, including metrics such as latency, throughput, and error rates?

Accepted Answer

Cisco AppDynamics

Question 28

In a data center utilizing Cisco Application Centric Infrastructure (ACI), an administrator is tasked with configuring event logs and alerts to monitor the health of the network. The administrator wants to ensure that critical events are logged and that alerts are generated for specific thresholds of network performance metrics. If the threshold for CPU utilization is set at 80%, and the system records CPU utilization at 85% for a sustained period of 10 minutes, which of the following actions should the administrator take to ensure compliance with best practices for event logging and alerting in ACI?

Accepted Answer

Configure the system to generate an alert and log the event for further analysis.

Question 29

In a data center utilizing Cisco Application Centric Infrastructure (ACI), a network engineer is tasked with creating an application profile for a new web application that requires specific network policies. The application is expected to handle a peak load of 10,000 concurrent users, with each user generating an average of 200 KB of data per request. The engineer must ensure that the application profile includes the necessary endpoint groups (EPGs), contracts, and filters to manage this load efficiently. Given this scenario, which of the following configurations would best optimize the application profile for performance and security?

Accepted Answer

Create separate EPGs for web servers and database servers, define contracts that allow HTTP and HTTPS traffic, and implement filters to restrict access based on user roles.

Question 30

In a multi-tenant Cisco Application Centric Infrastructure (ACI) environment, a network administrator is tasked with configuring tenant policies to ensure that application workloads are isolated while still allowing for necessary communication between specific applications. Given the following requirements: Tenant A must communicate with Tenant B for database access, but Tenant C should not have any visibility into either Tenant A or Tenant B. Which configuration approach should the administrator take to achieve this while adhering to best practices in ACI?

Accepted Answer

Create a contract between Tenant A and Tenant B, and ensure that Tenant C is not included in this contract.

CISCO 300-620 Implementing Cisco Application Centric Infrastructure (DCACI) Free Practice Test — 30 Questions

A lot more is already mapped out

About the CISCO 300-620 Implementing Cisco Application Centric Infrastructure (DCACI) Certification