Free Cisco 300-620 DCACI Practice Questions 2026 Part1

Question #1

Refer to the exhibit.An engineer configures a Layer 4 to Layer 7 device object. The device is a virtual firewall with a single network adapter and it must be deployed in routed mode. Which action completes the configuration of the device object?

A. Enable Promiscuous Mode

B. Change Function Type to GoTo

C. Change context awareness to Multiple

D. Add an outside interface to the cluster interfaces

View answer

Correct Answer: B

Question #2

Which two protocols are used for fabric discovery in ACI? (Choose two.)

A. LLDP

B. OSPF

C. CDP

D. DHCP

E. ISIS

F. Reveal Answer

View answer

Correct Answer: AD

Question #3

An engineer must configure a Layer 3 connection to the WAN router. The hosts in production VRF must access WAN subnets. The engineer associates EPGs in the production VRF with the external routed domain. Which action completes the task?

A. onfigure the Export Route Control Subnet scope for the external EPG

B. onfigure the External Subnets for the External EPG scope for the external EPG

C. onfigure the Shared Route Control Subnet scope for the external EPG

D. onfigure the Import Route Control Subnet scope for the external EPG

View answer

Correct Answer: B

Question #4

A network engineer must design a method to allow the Cisco ACI to redirect traffic to the firewalls. Only traffic that matches specific L4-L7 policy rules should be redirected. The load must be distributed across multiple firewalls to scale the performance horizontally. Which action must be taken to meet these requirements?

A. Configure ACI Service Graph with Unidirectional PBR

B. Implement ACI Service Graph with GIPo

C. Implement ACI Service Graph Two Nodes with GIPo

D. Configure ACI Service Graph with Symmetric PBR

View answer

Correct Answer: D

Question #5

An ACI administrator notices a change in the behavior of the fabric. Which action must be taken to determine if a human intervention introduced the change?

A. Inspect event records in the APIC UI to see all actions performed by users

B. Inspect /var/log/audit_messages on the APIC to see a record of all user actions

C. Inspect audit logs in the APIC UI to see all user events

D. Inspect the output of show command history in the APIC CLI

View answer

Correct Answer: C

Question #6

The company's Cisco ACI fabric hosts multiple customer tenants. To meet a service level agreement, the company is constantly monitoring the Cisco ACI environment. Syslog is one of the methods used for monitoring. Only events related to leaf and spine environmental information without specific customer data should be logged. To which ACI object must the configuration be applied to meet these requirements?

A. infra tenant

B. access policy

C. switch profile

D. fabric policy

View answer

Correct Answer: D

Question #7

How is an EPG extended outside of the ACI fabric?

A. Create an external bridged network that is assigned to a leaf port

B. Create an external routed network that is assigned to an EPG

C. Enable unicast routing within an EPG

D. Statically assign a VLAN ID to a leaf port in an EPG

View answer

Correct Answer: D

Question #8

Refer to the exhibit. An engineer must configure a bridge domain inside the Cisco ACI fabric called BD. The configuration must permit EP2 and EP3 to reach EP1. Which configuration must be applied on the bridge domain to accomplish this goal?

A. Define the Pervasive gateway on BD

B. Enable L2 Unknown unicast flooding

C. Optimize L2 Unknown unicast traffic

D. Configure unicast routing within B

View answer

Correct Answer: B

Question #9

Which switch type is discovered first in the Cisco ACI fabric discovery process?

A. spine

B. distribution

C. leaf

D. access

View answer

Correct Answer: C

Question #10

Which Cisco APIC configuration prevents a remote network that is not configured on the bridge domain from being learned by the fabric?

A. enable Limit IP Learning to Subnet

B. enable Unicast Routing

C. enable IP Data-plane Learning

D. enable ARP Flooding to BD

View answer

Correct Answer: A

Question #11

Refer to the exhibit. An engineer must configure a bridge domain inside the Cisco ACI fabric called BD. The configuration must permit EP2 and EP3 to reach EP1. Which configuration must be applied on the bridge domain to accomplish this goal?

A. Define the Pervasive gateway on BD

B. Enable L2 Unknown unicast flooding

C. Optimize L2 Unknown unicast traffic

D. Configure unicast routing within B

View answer

Correct Answer: B

Question #12

Refer to the exhibit.An engineer configures a Layer 4 to Layer 7 device object. The device is a virtual firewall with a single network adapter and it must be deployed in routed mode. Which action completes the configuration of the device object?

A. Enable Promiscuous Mode

B. Change Function Type to GoTo

C. Change context awareness to Multiple

D. Add an outside interface to the cluster interfaces

View answer

Correct Answer: B

Question #13

Refer to the exhibit. An engineer configures connectivity for a bare metal server called SVR-15. EPG-15 is associated with a physical domain named phys_dom-15. The VPC member port is statically bound to EPG-15 with Encapsulation VLAN-1500. Which step must the engineer take to ensure that SVR-15 is connected to the Cisco ACI fabric?

A. Associate an LACP interface policy to phys_dom-15 for VLAN-1500

B. Enable dynamic VLAN assignment for the VLAN pool that is associated with phys_dom-15

C. Configure a VPC explicit protection group for VLAN-1500 on the VPC member ports

D. Confirm that the VLAN pool that is associated with phys_dom-15 includes VLAN-1500

View answer

Correct Answer: D

Question #14

A situation causes a fault to be raised on the APIC. The ACI administrator does not want that fault to be raised because it is not directly relevant to the environment. Which action should the administrator take to prevent the fault from appearing?

A. nder System -> Faults, right-click on the fault and select Acknowledge Fault so that acknowledged faults will immediately disappear

B. reate a stats threshold policy with both rising and falling thresholds defined so that the critical severity threshold matches the squelched threshold

C. nder System -> Faults, right-click on the fault and select Ignore Fault to create a fault severity assignment policy that hides the fault

D. reate a new global health score policy that ignores specific faults as identified by their unique fault code

View answer

Correct Answer: C

Question #15

An engineer wants to monitor all configuration changes, threshold crossing, and link-state transitions in a Cisco ACI fabric. Which action must be taken to receive the required messages?

A. Add Faults and Events to the monitor policy

B. Add Session Logs and Audit Logs to the monitor policy

C. Include Audit Logs and Events in the Syslog source policy

D. Include Events and Session Logs in the Syslog source policy

View answer

Correct Answer: C

Question #16

What does a bridge domain represent?

A. Layer 3 cloud

B. Layer 2 forwarding construct

C. tenant

D. physical domain

View answer

Correct Answer: B

Question #17

What is the minimum number of APICs does Cisco recommend to deploy in a production cluster?

A.

B.

C.

D.

View answer

Correct Answer: A

Question #18

Which switch type is discovered first in the Cisco ACI fabric discovery process?

A. spine

B. distribution

C. leaf

D. access

View answer

Correct Answer: C

Question #19

A situation causes a fault to be raised on the APIC. The ACI administrator does not want that fault to be raised because it is not directly relevant to the environment. Which action should the administrator take to prevent the fault from appearing?

A. nder System -> Faults, right-click on the fault and select Acknowledge Fault so that acknowledged faults will immediately disappear

B. reate a new global health score policy that ignores specific faults as identified by their unique fault code

C. nder System -> Faults, right-click on the fault and select Ignore Fault to create a fault severity assignment policy that hides the fault

D. reate a stats threshold policy with both rising and falling thresholds defined so that the critical severity threshold matches the squelched threshold

View answer

Correct Answer: C

Question #20

Which two types of interfaces are supported on border leaf switches to connect to an external router? (Choose two.)

A. subinterface with VXLAN tagging

B. subinterface with 802

C. FEX host interface

D. out of band interface

E. Switch Virtual Interface

View answer

Correct Answer: BE

Question #21

What is a requirement for Cisco ACI IPN to manage multidestination traffic?

A. pervasive gateway

B. unicast routing

C. anycast gateway

D. multicast routing

E. Reveal Answer

View answer

Correct Answer: D

Question #22

Which device is the pervasive gateway shown installed on?

A. proxy spine switch

B. VMM switch

C. leaf switch

D. spine switch

View answer

Correct Answer: C

Question #23

Which type of profile needs to be created to deploy an access port policy group?

A. ttachable entity

B. od

C. odule

D. eaf interface

View answer

Correct Answer: D

Question #24

A network engineer configured a Cisco ACI fabric as follows:· An EPG called EPG-A is created and associated with a VMM domain called North. · The EPG-A is associated with BD-A and is in an application profile called Apps-A.· The BD-A is associated with VRF-1 in the Prod tenant.Which port group must be selected to place VMs in EPG-A?

A. Prod|Apps-A|EPG-A

B. Prod|Apps-A|North|EPG-A

C. Prod|Business_Apps|BD-A|EPG-A

D. Prod|VRF-1|Apps-A|EPG-A

View answer

Correct Answer: A

Question #25

An engineer needs to deploy a leaf access port policy group in ACI Fabric to support the following requirements:Control the amount of application data flowing into the systemAllow the newly connected device to auto-negotiate link speed with the leaf switchWhich two ACI policies must be configured to achieve these requirements? (Choose two.)

A. link level policy

B. L2 interface policy

C. slow drain policy

D. ingress data plane policing policy

E. ingress control plane policing policy

View answer

Correct Answer: AD

Question #26

Refer to the exhibit. An engineer must configure a bridge domain inside the Cisco ACI fabric called BD. The configuration must permit EP2 and EP3 to reach EP1. Which configuration must be applied on the bridge domain to accomplish this goal?

A. Define the Pervasive gateway on BD

B. Enable L2 Unknown unicast flooding

C. Optimize L2 Unknown unicast traffic

D. Configure unicast routing within B

View answer

Correct Answer: B

Question #27

When a pre-provision immediacy is used, when is the policy downloaded to the Cisco ACI leaf switch?

A. The policy is downloaded and programmed in the hardware policy CAM when the change is implemented on the Cisco APIC

B. The policy is programmed in the hardware policy CAM when the policy is downloaded in the leaf software

C. The policy is programmed in the hardware policy CAM when the first packet is received through the data path

D. The policy is downloaded to the associated leaf switch software when the ESXi host is attached to a DVS

E. Reveal Answer

View answer

Correct Answer: D

Question #28

A Cisco ACI fabric contains a tenant called Prod. User_1 must have write access to tenant Prod and full access to the fabric access policy. Which set of actions must be taken to meet these requirements?

A. Associate User_1 to tenant Prod

B. Associate User_1 to the distinguished name of the fabric access policy

C. Associate User_1 to the fabric access policy

D. Associate User_1 to the security domain

View answer

Correct Answer: D

Question #29

A RADIUS user resolves its role via the Cisco AV Pair. What object does the Cisco AV Pair resolve to?

A. enant

B. ecurity domain

C. rimary Cisco APIC

D. anaged object class

View answer

Correct Answer: B

Question #30

Refer to the exhibit. A four-node APIC cluster is deployed across two data centers. What happens to the database shards when DC1 with APIC1 and APIC2 fail?

A. The blue shard remains in read-write mode, and green and red are inaccessible

B. The blue shard becomes primary, and green and red are standby

C. The blue shard remains in read-write mode, and green and red are in read-only mode

D. The red shard becomes primary, and blue and red are standby

View answer

Correct Answer: C

Question #31

A network engineer configured a Cisco ACI fabric as follows:· An EPG called EPG-A is created and associated with a VMM domain called North. · The EPG-A is associated with BD-A and is in an application profile called Apps-A.· The BD-A is associated with VRF-1 in the Prod tenant.Which port group must be selected to place VMs in EPG-A?

A. Prod|Apps-A|EPG-A

B. Prod|Apps-A|North|EPG-A

C. Prod|Business_Apps|BD-A|EPG-A

D. Prod|VRF-1|Apps-A|EPG-A

View answer

Correct Answer: A

Question #32

An engineer must advertise a bridge domain subnet out of the ACI fabric to an OSPF neighbor. Which two configuration steps are required? (Choose two.)

A. Add External Subnet for External EPG flag under External EPG

B. Configure Subnet scope to Advertised Externally

C. Configure the Subnet under the EPG level

D. Create Route Control Profile with the export direction under External EPG

E. Add L3Out profile to the bridge domain using Associated L3Outs section

View answer

Correct Answer: BE

Question #33

Which tenant is used when configuring in-band management IP addresses for Cisco APICs, leaf nodes, and spine nodes?

A. default

B. infra

C. common

D. mgmt

View answer

Correct Answer: D

Question #34

Which role do interfaces Ethernet-50 have in this output?

A. leaf fabric ports

B. server fabric ports

C. leaf access ports

D. server uplink ports

View answer

Correct Answer: A

Question #35

Which feature allows firewall ACLs to be configured automatically when new endpoints are attachedto an EPG?

A. RP gleaning

B. ynamic endpoint attach

C. ardware proxy

D. etwork-stitching

View answer

Correct Answer: A

Question #36

Which components must be configured for the BGP Route Reflector policy to take effect?

A. spine fabric interface overrides and profiles

B. access policies and profiles

C. pod policy groups and profiles

D. leaf fabric interface overrides and profiles

View answer

Correct Answer: C

Question #37

Which type of policy configures the suppression of faults that are generated from a port being down?

A. fault lifecycle assignment

B. event lifecycle assignment

C. fault severity assignment

D. event severity assignment

View answer

Correct Answer: C

Question #38

The existing network and ACI fabric have been connected to support workload migration. Servers will physically terminate at the Cisco ACI, but their gateway must stay in the existing network. The solution needs to adhere to Cisco's best practices. The engineer started configuring the relevant Bridge Domain and needs to complete the configuration. Which group of settings are required to meet these requirements?

A. L2 Unknown Unicast: Hardware ProxyL3 Unknown Multicast Flooding: FloodMulti Destination Flooding: Flood in BDARP Flooding: Enable

B. L2 Unknown Unicast: FloodL3 Unknown Multicast Flooding: FloodMulti Destination Flooding: Flood in BDARP Flooding: Enable

C. L2 Unknown Unicast: FloodL3 Unknown Multicast Flooding: Optimize FloodMulti Destination Flooding: Flood in BDARP Flooding: Disable

D. L2 Unknown Unicast: Hardware ProxyL3 Unknown Multicast Flooding: Optimize FloodMulti Destination Flooding: Flood in BDARP Flooding: Disable

View answer

Correct Answer: B

Question #39

An engineer is implementing a Cisco ACI environment that consists of more than 20 servers. Two of the servers support only Cisco Discovery Protocol with no other link discovery protocol. The engineer wants the servers to be discovered automatically by the Cisco ACI fabric when connected. Which action must be taken to meet this requirement?

A. Create an override policy that enables Cisco Discovery Protocol after LLDP is enabled in the default policy group

B. Configure a higher order interface policy that enables Cisco Discovery Protocol for the interface on the desired leaf switch

C. Configure a lower order policy group that enables Cisco Discovery Protocol for the interface on the desired leaf switch

D. Create an interface profile for the interface that disables LLDP on the desired switch that is referenced by the interface policy group

View answer

Correct Answer: B

Question #40

What is the function of an HTTP GET request during Cisco ACI fabric discovery?

A. It allows neighbor discovery of leaf switches

B. It downloads firmware image on leaf switches

C. It pushes policy elements from Cisco APIC to leaf switches

D. It assigns VTEP IPs to leaf switches

View answer

Correct Answer: A

Question #41

Refer to the exhibit. An engineer configures connectivity for a bare metal server called SVR-15. EPG-15 is associated with a physical domain named phys_dom-15. The VPC member port is statically bound to EPG-15 with Encapsulation VLAN-1500. Which step must the engineer take to ensure that SVR-15 is connected to the Cisco ACI fabric?

A. Associate an LACP interface policy to phys_dom-15 for VLAN-1500

B. Enable dynamic VLAN assignment for the VLAN pool that is associated with phys_dom-15

C. Configure a VPC explicit protection group for VLAN-1500 on the VPC member ports

D. Confirm that the VLAN pool that is associated with phys_dom-15 includes VLAN-1500

View answer

Correct Answer: D

Question #42

Refer to the exhibit. An engineer must configure a bridge domain inside the Cisco ACI fabric called BD. The configuration must permit EP2 and EP3 to reach EP1. Which configuration must be applied on the bridge domain to accomplish this goal?

A. Define the Pervasive gateway on BD

B. Enable L2 Unknown unicast flooding

C. Optimize L2 Unknown unicast traffic

D. Configure unicast routing within B

View answer

Correct Answer: B

Question #43

Which statement describes the initial APIC cluster discovery process?

A. The APIC uses an internal IP address from a pool to communicate with the nodes

B. Every switch is assigned a unique AV by the APIC

C. The APIC discovers the IP address of the other APIC controllers by using Cisco Discovery Protocol

D. The ACI fabric is discovered starting with the spine switches

View answer

Correct Answer: A

Question #44

What is the function of an HTTP GET request during Cisco ACI fabric discovery?

A. It allows neighbor discovery of leaf switches

B. It downloads firmware image on leaf switches

C. It pushes policy elements from Cisco APIC to leaf switches

D. It assigns VTEP IPs to leaf switches

View answer

Correct Answer: A

Question #45

Refer to the exhibit. An engineer must implement the inter-tenant service graph. Which set of actions must be taken to accomplish this goal?

A. · Define the contract in the provider tenant and export it to the consumer tenant

B. · Define the contract in the provider tenant and export it to the consumer tenant

C. · Define the contract in the consumer tenant and export it to the provider tenant

D. · Define the contract in the consumer tenant and export it to the provider tenant

View answer

Correct Answer: A

Question #46

Which role do interfaces Ethernet-50 have in this output?

A. leaf fabric ports

B. server fabric ports

C. leaf access ports

D. server uplink ports

View answer

Correct Answer: A

Question #47

Which role do interfaces Ethernet-50 have in this output?

A. leaf fabric ports

B. server fabric ports

C. leaf access ports

D. server uplink ports

View answer

Correct Answer: A

Question #48

Which device is the pervasive gateway shown installed on?

A. proxy spine switch

B. VMM switch

C. leaf switch

D. spine switch

View answer

Correct Answer: C

DON'T WANT TO MISS A THING?

Latest Cisco, PMP, AWS, CompTIA, Microsoft Materials on SALE
Get Now

Free Cisco 300-620 DCACI Practice Questions 2026 Part1

View The Updated 300-620 Exam Questions

View Answers after Submission

DON'T WANT TO MISS A THING?

Latest Cisco, PMP, AWS, CompTIA, Microsoft Materials on SALE Get Now

Free Cisco 300-620 DCACI Practice Questions 2026 Part1

View The Updated 300-620 Exam Questions

View Answers after Submission

Latest Cisco, PMP, AWS, CompTIA, Microsoft Materials on SALE
Get Now