Free Practice Questions for Cisco 300-630 Exam

 To allow communication between two application profiles that are configured in the same tenant but different VRFs, the contract scope must be set to ‘tenant.’ This is because the contract scope defines the level at which the contract is enforced. A ‘tenant’ scope means the contract applies to all application profiles within the same tenant, regardless of the VRFs they are in. This allows for the necessary route-leaking between the provider and consumer VRFs to enable communication between the application profiles.

When a host connected to a Cisco ACI fabric leaf switch sends an ARP request, the ingress leaf switch uses a broadcast transmission method to send the ARP requests. This is because ARP requests are meant to discover the MAC address associated with a specific IP address within the same network broadcast domain. The ingress leaf switch does not know the destination MAC address, so it broadcasts the ARP request to all devices within the broadcast domain1.

References := ( Implementing Cisco Application Centric Infrastructure Official Cert Guide )

To ensure the Cisco ACI fabric adheres to strict security protocols and only learns endpoints from configured subnets on a bridge domain, the “Enforce Subnet Check” feature must be enabled. This feature restricts endpoint learning to IP addresses belonging to the subnets defined in the bridge domain associated with the endpoint’s VLAN, enhancing security by preventing learning of endpoints from unconfigured subnets. References: Implementing Cisco Application Centric Infrastructure Official Cert Guide

In a Cisco ACI Multi-Site deployment, proper configuration of the inter-site link is crucial for traffic to pass between different sites. The MTU size is particularly important; if it’s not set correctly, packets may be dropped or fragmented, leading to connectivity issues. By configuring the MTU on the link to be at least 100 bytes larger than that of the ACI fabrics, you allow for encapsulation overhead without packet drops due to exceeding MTU limits. Additionally, configuring the link as a routed subinterface using VLAN-4 is necessary for routing across different broadcast domains, which is essential for inter-site communication in an ACI fabric. References: Implementing Cisco Application Centric Infrastructure Official Cert Guide

 Migrating from Cisco NX-OS VXLAN to Cisco ACI fabric involves several considerations to minimize impact on workloads. Disabling bridge domain unicast routing while the default gateway remains in the VXLAN infrastructure ensures that the migration does not disrupt the existing traffic flow. This approach allows for a smoother transition by maintaining the current routing paths until the migration is complete123.

References := Implementing Cisco Application Centric Infrastructure Official Cert Guide

 Deploying a new Cisco ACI Multi-Pod setup involves configuring the TEP pool of the new pod to be routable across the IPN (B) and increasing the interface MTU on all IPN routers to support VXLAN traffic (D). Configuring anycast RP (A) and MP-BGP on IPN routers © are not specific actions for deploying a Multi-Pod setup. Connecting all spines to the IPN (E) is not a required action for deployment3. References := (ACI Multi-Pod White Paper

To prevent MAC flapping on Cisco UCS Fabric Interconnects and ACI leaf switches, MAC Pinning should be selected for the VMM vSwitch Port Channel policy. This ensures consistent uplink usage for each virtual machine’s traffic, avoiding MAC address movement across multiple uplinks.

References := Implementing Cisco Application Centric Infrastructure Official Cert Guide

To enable SSH communication between Web_EPG (Web Endpoint Group) and App_EPG (Application Endpoint Group), it’s necessary to apply a configuration that allows bidirectional communication while not restricting ports based on their directionality. By enabling “Apply Both Directions” and disabling “Reverse Filter Ports,” this ensures that the filter allows SSH packets to flow from Web_EPG to App_EPG and vice versa without any restrictions based on the port’s direction, which is essential for establishing an SSH session. References := ( Implementing Cisco Application Centric Infrastructure Official Cert Guide )

 In a Cisco ACI fabric, when configuring a Layer 4 to Layer 7 device for routing traffic through an external firewall connected to the inside of the fabric, the appropriate Function Type in the service graph must be selected to ensure that traffic from both POD-1 and POD-2 passes through the routed firewall when using L3Out. The “GoTo” Function Type is used in scenarios where all traffic destined for L3Out needs to be redirected through a service node like a firewall. This ensures that regardless of the source pod, traffic will traverse the service node before exiting the fabric. References: Implementing Cisco Application Centric Infrastructure Official Cert Guide

In a network-centric design within Cisco ACI, there is open communication between EPGs, and a bridge domain typically has one subnet and one EPG. This design is often used for initial migrations and is based on traditional networking concepts.

References := Network Centric to ACI Centric Migration - Cisco