🌐 Data Center Networking - DCCOR Practice Questions

Study Cisco Nexus platforms, VPC, FabricPath, VXLAN with EVPN, OTV, and data center network design patterns including spine-leaf architecture.

17Questions Available
1Exam Domains

Practice DC Networking Questions Now

Start a timed practice session focusing on Data Center Networking topics from the DCCOR question bank.

Start DCCOR Practice Quiz →

DCCOR DC Networking Question Bank (17 Questions)

Browse all 17 practice questions covering Data Center Networking for the DCCOR certification exam. Each question includes the full answer and a detailed explanation to help you understand the concepts.

  1. Question 1Networking

    Which routing protocol is most commonly used as the underlay in a VXLAN BGP EVPN data center fabric?

    ARIPv2
    BEIGRP
    COSPF or IS-IS✓
    DStatic routing
    Show Answer & Explanation
    Correct Answer: C
    Explanation:

    OSPF or IS-IS are the recommended underlay IGP protocols for VXLAN BGP EVPN fabrics. They provide fast convergence and scalability for advertising loopback addresses (VTEPs) used by the VXLAN overlay.

  2. Question 2Networking

    What is the primary purpose of VXLAN in a data center fabric?

    ATo provide Layer 3 routing between VRFs
    BTo extend Layer 2 segments over a Layer 3 infrastructure using UDP encapsulation✓
    CTo compress data packets for WAN optimization
    DTo encrypt east-west traffic between servers
    Show Answer & Explanation
    Correct Answer: B
    Explanation:

    VXLAN (Virtual Extensible LAN) encapsulates Layer 2 Ethernet frames in UDP packets, allowing Layer 2 segments to be extended across a Layer 3 routed underlay network. It uses a 24-bit VNI, supporting up to 16 million segments.

  3. Question 3Networking

    What is Overlay Transport Virtualization (OTV) used for in data center networking?

    ATo extend Layer 2 connectivity between data center sites over a Layer 3 network✓
    BTo provide server virtualization
    CTo encrypt all inter-data-center traffic
    DTo load-balance server workloads
    Show Answer & Explanation
    Correct Answer: A
    Explanation:

    OTV extends Layer 2 domains across data center sites over any transport (Layer 3 IP). It uses MAC-in-IP encapsulation and includes built-in loop prevention, making it safer than traditional L2 extension methods like EoMPLS.

  4. Question 4Networking

    What does a Cisco Nexus virtual port channel (vPC) provide?

    AEncryption between two Nexus switches
    BA port channel that spans two physical Nexus switches, appearing as one to downstream devices✓
    CVirtual routing instances on a single switch
    DA tunnel for inter-VLAN routing
    Show Answer & Explanation
    Correct Answer: B
    Explanation:

    vPC allows links that are physically connected to two different Nexus switches to appear as a single port channel to a downstream device. This eliminates STP blocked ports and provides active-active forwarding with redundancy.

  5. Question 5Networking

    In a VXLAN BGP EVPN fabric, what does the EVPN control plane provide?

    AStatic VXLAN tunnel configuration
    BDynamic distribution of MAC and IP reachability information using BGP✓
    CSTP-based loop prevention
    DManual ARP table management
    Show Answer & Explanation
    Correct Answer: B
    Explanation:

    BGP EVPN provides a standards-based control plane for VXLAN that distributes MAC addresses, IP addresses, and multi-homing information using BGP route types. This eliminates the need for flood-and-learn behavior.

  6. Question 6Networking

    What is the purpose of a spine-leaf architecture in data centers?

    AHierarchical three-tier design
    BA two-tier topology where every leaf connects to every spine, providing consistent latency and bandwidth for east-west traffic✓
    CStar topology
    DRing topology
    Show Answer & Explanation
    Correct Answer: B
    Explanation:

    Spine-leaf provides equal-cost paths between any two leaf switches, consistent low latency, and scalable bandwidth for the east-west traffic patterns dominant in modern data centers.

  7. Question 7Security

    Which AAA protocol is recommended for device administration on Cisco Nexus data center switches?

    ARADIUS
    BTACACS+✓
    CKerberos
    DLDAP
    Show Answer & Explanation
    Correct Answer: B
    Explanation:

    TACACS+ is recommended for device administration because it separates authentication, authorization, and accounting, provides command-level authorization, and encrypts the entire payload. RADIUS is typically used for network access.

  8. Question 8Networking

    Which multicast protocol is commonly used in data center fabrics for BUM traffic handling in VXLAN environments?

    APIM Sparse Mode with multicast underlay✓
    BDVMRP
    CMOSPF
    DPIM Dense Mode
    Show Answer & Explanation
    Correct Answer: A
    Explanation:

    In VXLAN multicast mode, PIM Sparse Mode in the underlay creates multicast distribution trees for BUM (Broadcast, Unknown unicast, Multicast) traffic. However, modern fabrics often use ingress replication with BGP EVPN instead.

  9. Question 9Security

    What does MACsec provide between Cisco Nexus switches in a data center fabric?

    AApplication-layer encryption
    BHop-by-hop Layer 2 encryption, integrity, and replay protection on inter-switch links✓
    CSSL certificate management
    DVXLAN encapsulation
    Show Answer & Explanation
    Correct Answer: B
    Explanation:

    MACsec (802.1AE) on Nexus switches provides hop-by-hop Layer 2 encryption between directly connected switches. It encrypts the entire Ethernet frame payload, providing confidentiality, data integrity, and replay attack protection on inter-switch links.

  10. Question 10Networking

    What is the purpose of VXLAN in a data center network?

    AEncrypt east-west traffic
    BExtend Layer 2 networks over a Layer 3 infrastructure using UDP encapsulation✓
    CProvide DNS services
    DManage IP addresses
    Show Answer & Explanation
    Correct Answer: B
    Explanation:

    VXLAN encapsulates Layer 2 Ethernet frames in UDP packets for transport across a Layer 3 network, enabling Layer 2 adjacency between endpoints in different subnets or data centers.

  11. Question 11Security

    Which Cisco data center security feature provides micro-segmentation within a VXLAN fabric?

    AStandard ACLs
    BSGT (Security Group Tags) with Cisco TrustSec✓
    CPort security
    DDHCP snooping
    Show Answer & Explanation
    Correct Answer: B
    Explanation:

    Security Group Tags with TrustSec provide micro-segmentation in VXLAN fabrics by classifying traffic based on identity and enforcing policies at SGT boundaries rather than IP-based ACLs.

  12. Question 12Networking

    What is VXLAN and why is it used in data centers?

    AA VLAN extension
    BAn overlay network protocol that encapsulates L2 frames in UDP/IP, extending L2 segments over L3 infrastructure with 16M segment IDs✓
    CA VPN protocol
    DA QoS mechanism
    Show Answer & Explanation
    Correct Answer: B
    Explanation:

    VXLAN (Virtual Extensible LAN) provides L2 overlay over L3 underlay, supporting up to 16 million segments (vs. 4096 VLANs), enabling multi-tenant data center fabrics and VM mobility.

  13. Question 13Networking

    What is the benefit of a distributed anycast gateway in a VXLAN EVPN fabric?

    AIt requires only one leaf to handle all routing
    BEvery leaf switch acts as the default gateway for local hosts, enabling optimal east-west routing✓
    CIt eliminates the need for IP addresses
    DIt provides firewall functionality on each leaf
    Show Answer & Explanation
    Correct Answer: B
    Explanation:

    Distributed anycast gateway assigns the same gateway IP and MAC to all VTEP leaf switches. Each leaf acts as the first-hop gateway for locally attached hosts, enabling optimal routing without hair-pinning traffic through a centralized gateway.

  14. Question 14Networking

    Which technology provides first-hop gateway redundancy in a VXLAN EVPN fabric?

    AHSRP
    BVRRP
    CAnycast gateway (distributed gateway)✓
    DGLBP
    Show Answer & Explanation
    Correct Answer: C
    Explanation:

    Anycast gateway provides a distributed default gateway across all leaf switches using the same virtual IP and MAC address, eliminating the need for HSRP/VRRP and enabling optimal east-west traffic flow.

  15. Question 15Networking

    What is the role of MP-BGP EVPN in a VXLAN fabric?

    AUnderlay routing
    BOverlay control plane for distributing MAC/IP reachability information✓
    CDNS resolution
    DQoS marking
    Show Answer & Explanation
    Correct Answer: B
    Explanation:

    MP-BGP EVPN serves as the control plane for VXLAN, distributing MAC and IP address reachability information between VTEPs, replacing flood-and-learn with a more scalable approach.

  16. Question 16Networking

    What is a vPC (virtual PortChannel) on Nexus switches?

    AA virtual private cloud
    BA feature allowing two physical Nexus switches to appear as a single logical switch for downstream devices using port channels✓
    CA VPN connection
    DA virtual port
    Show Answer & Explanation
    Correct Answer: B
    Explanation:

    vPC eliminates STP blocked ports by allowing a downstream device to form a port channel across two independent Nexus switches, providing active-active forwarding with redundancy.

  17. Question 17Networking

    What is EVPN in a VXLAN fabric?

    AEthernet VPN using traditional L2
    BA control plane protocol using MP-BGP to distribute MAC/IP and VNI-to-VTEP mappings, replacing flood-and-learn in VXLAN✓
    CAn encryption protocol
    DA monitoring tool
    Show Answer & Explanation
    Correct Answer: B
    Explanation:

    EVPN provides an efficient control plane for VXLAN, distributing MAC/IP addresses via MP-BGP route types, eliminating unnecessary BUM flooding and enabling optimal forwarding.

Key DC Networking Concepts for DCCOR

nexusvpcvxlanevpnfabricpathotvspine-leafdata center

DCCOR DC Networking Exam Tips

Data Center Networking questions in DCCOR are typically scenario-based. Focus on service-level decision making aligned to official exam objectives. Priority concepts: nexus, vpc, vxlan, evpn, fabricpath, otv.

What DCCOR Expects

  • Anchor your answer in select the most practical, secure, and scalable answer for the stated scenario.
  • DC Networking scenarios for DCCOR are frequently mapped to Domain 1 (25%), so read the objective carefully before picking controls or architecture.
  • Expect multi-service scenarios where DC Networking interacts with IAM, networking, storage, or observability patterns rather than appearing as an isolated service question.
  • When two options are both technically valid, prefer the choice that best aligns with the exam's operational scope (Professional) and managed-service best practices.

High-Value DC Networking Concepts

  • Know the core DC Networking building blocks cold: nexus, vpc, vxlan, evpn.
  • Review the edge-case features and limits for fabricpath, otv; these details are commonly used to differentiate answer choices.
  • Practice service-integration reasoning: how DC Networking pairs with DC Compute, DC Automation in real deployment patterns.
  • For DCCOR, explain why the chosen DC Networking design meets reliability, security, and cost expectations better than the alternatives.

Common DCCOR Traps

  • Watch for answers that partially solve the requirement but miss operational constraints.
  • Questions in Networking often include distractors that look correct for DC Networking but violate least-privilege, durability, or availability requirements.
  • Avoid picking options purely by feature name; validate data path, failure handling, and governance impact before answering.
  • If the prompt hints at automation or repeatability, eliminate manual-only operational answers first.

Fast Review Checklist

  • Can you compare at least two DC Networking implementation paths and justify which one best fits the scenario?
  • Can you map the chosen answer back to Networking (25%) outcomes for DCCOR?
  • Can you explain security and access boundaries for DC Networking without relying on default-open assumptions?
  • Can you describe how DC Networking integrates with DC Compute and DC Automation during failure, scaling, and monitoring events?

Exam Domains Covering DC Networking

Domain 1Networking25%

Related Resources

🎯 Free DCCOR Mock Exam📝 DC Compute Questions📝 DC Automation Questions

More DCCOR Study Resources

← DCCOR Study Hub30-Day Study PlanFull Practice Exam