DON'T WANT TO MISS A THING?

Certification Exam Passing Tips

Latest exam news and discount info

Curated and up-to-date by our experts

Yes, send me the newsletter

Free Cisco 300-620 DCACI Practice Questions 2026 Part2

Are you preparing for the Cisco 300-620 certification exam? SPOTO offers the Cisco 300-620 Premium File; all questions are aligned with the latest exam content and come with expert-provided answers. Our question banks cover the latest question types, core concepts, and detailed explanations, helping you familiarize yourself with the exam format and difficulty level. Whether you are reviewing core concepts or simulating a real exam environment, these resources will rapidly boost your confidence and readiness.
For over two decades, SPOTO has successfully helped numerous IT professionals secure their ideal positions at Fortune 500 companies. Download now to start practicing efficiently and ensure a high score on the actual exam. Don't miss this opportunity to pass your certification exam with ease!
Take other online exams
Question #1
Which feature dynamically assigns or modifies the EPG association of virtual machines based on their attributes?
A. vzAny contracts
B. standard contracts
C. application EPGs
D. uSeg EPGs
View answer
Correct Answer: D

View The Updated 300-620 Exam Questions

SPOTO Provides 100% Real 300-620 Exam Questions for You to Pass Your 300-620 Exam!

Contact Us Get 300-620 Practice Test
Question #2
Which device is the pervasive gateway shown installed on?
A. proxy spine switch
B. VMM switch
C. leaf switch
D. spine switch
View answer
Correct Answer: C
Question #3
Refer to the exhibit. An engineer must configure a bridge domain inside the Cisco ACI fabric called BD. The configuration must permit EP2 and EP3 to reach EP1. Which configuration must be applied on the bridge domain to accomplish this goal?
A. Define the Pervasive gateway on BD
B. Enable L2 Unknown unicast flooding
C. Optimize L2 Unknown unicast traffic
D. Configure unicast routing within B
View answer
Correct Answer: B
Question #4
A RADIUS user resolves its role via the Cisco AV Pair. What object does the Cisco AV Pair resolve to?
A. tenant
B. security domain
C. primary Cisco APIC
D. managed object class
View answer
Correct Answer: B
Question #5
Which role do interfaces Ethernet-50 have in this output?
A. leaf fabric ports
B. server fabric ports
C. leaf access ports
D. server uplink ports
View answer
Correct Answer: A
Question #6
Refer to the exhibit. An engineer configures connectivity for a bare metal server called SVR-15. EPG-15 is associated with a physical domain named phys_dom-15. The VPC member port is statically bound to EPG-15 with Encapsulation VLAN-1500. Which step must the engineer take to ensure that SVR-15 is connected to the Cisco ACI fabric?
A. Associate an LACP interface policy to phys_dom-15 for VLAN-1500
B. Enable dynamic VLAN assignment for the VLAN pool that is associated with phys_dom-15
C. Configure a VPC explicit protection group for VLAN-1500 on the VPC member ports
D. Confirm that the VLAN pool that is associated with phys_dom-15 includes VLAN-1500
View answer
Correct Answer: D
Question #7
Refer to the exhibit.An engineer configures a Layer 4 to Layer 7 device object. The device is a virtual firewall with a single network adapter and it must be deployed in routed mode. Which action completes the configuration of the device object?
A. Enable Promiscuous Mode
B. Change Function Type to GoTo
C. Change context awareness to Multiple
D. Add an outside interface to the cluster interfaces
View answer
Correct Answer: B
Question #8
Which switch type is discovered first in the Cisco ACI fabric discovery process?
A. spine
B. distribution
C. leaf
D. access
View answer
Correct Answer: C
Question #9
A virtualization administrator integrates VMware vCenter with Cisco ACI and wants APIC to create port groups in vCenter automatically. Which vCenter object is created by this integration?
A. datacenter
B. VMware vSphere Distributed Switch
C. ESXi cluster
D. standard vSwitch
View answer
Correct Answer: B
Question #10
Refer to the exhibit. An engineer must configure a bridge domain inside the Cisco ACI fabric called BD. The configuration must permit EP2 and EP3 to reach EP1. Which configuration must be applied on the bridge domain to accomplish this goal?
A. Define the Pervasive gateway on BD
B. Enable L2 Unknown unicast flooding
C. Optimize L2 Unknown unicast traffic
D. Configure unicast routing within B
View answer
Correct Answer: B
Question #11
Refer to the exhibit.An engineer configures a Layer 4 to Layer 7 device object. The device is a virtual firewall with a single network adapter and it must be deployed in routed mode. Which action completes the configuration of the device object?
A. Enable Promiscuous Mode
B. Change Function Type to GoTo
C. Change context awareness to Multiple
D. Add an outside interface to the cluster interfaces
View answer
Correct Answer: B
Question #12
Refer to the exhibit. The Cisco ACI fabric has an egress L3Out from Leaf-101 and Leaf-102 to CORE-1. VLAN 102 is used to form the OSPF adjacency. The workloads must be migrated into EPG-101, and the static port binding is configured to Leaf-103 e1/1 with encap VLAN 101. An engineer completes the port binding and receives an MCP fault. Which action clears the fault?
A. rune VLAN 101 from the VLAN pool that is used by the egress L3Out
B. se VLAN 101 for OSPF adjacency on the egress L3Out
C. se VLAN 102 as the encap VLAN on the EPG-101 static port binding
D. dd VLAN 102 to the VLAN pool that is used by the static port binding
View answer
Correct Answer: A
Question #13
All workloads in VLAN 1001 have been migrated into EPG-1001. The requirement is to move the gateway address for VLAN 1001 from the core outside the Cisco ACI fabric into the Cisco ACI fabric. The endpoints in EPG-1001 must route traffic to endpoints in other EPGs and minimize flooded traffic in the fabric. Which configuration set is needed on the bridge domain to meet these requirements?
A. Disable ARP FloodDisable Limn Endpoint Learning
B. Enable Hardware Proxy Enable Unicast Routing
C. Disable Local IP Learning Limit Disable Unicast Routing
D. Enable FloodEnable Unicast Routing
View answer
Correct Answer: B
Question #14
Which components must be configured for the BGP Route Reflector policy to take effect?
A. spine fabric interface overrides and profiles
B. access policies and profiles
C. pod policy groups and profiles
D. leaf fabric interface overrides and profiles
View answer
Correct Answer: D
Question #15
An engineer must perform a Cisco ACI fabric upgrade that minimizes the impact on user traffic and allows only permitted users to perform an upgrade. Which two configuration steps should be taken to meet these requirements?
A. Divide Cisco APIC controllers into two or more maintenance groups
B. Grant tenant-ext-admin access to a user who performs an upgrade
C. Combine all switches into an upgrade group
D. Divide switches into two or more maintenance groups
E. Grant the fabric administrator role to a user who performs an upgrade
F. Reveal Answer
View answer
Correct Answer: DE
Question #16
Refer to the exhibit. An engineer is implementing a BPDU filter on external switch interfaces that face the Cisco ACI fabric to prevent excessive TCNs from impacting the fabric. Which configuration must be applied on Cisco ACI to avoid a Layer 2 loop?
A. Configure MCP globally
B. Implement BPDU Guard
C. Apply an MSTP instance on Cisco ACI
D. Enable STP on downlinks
View answer
Correct Answer: A
Question #17
Which switch type is discovered first in the Cisco ACI fabric discovery process?
A. spine
B. distribution
C. leaf
D. access
View answer
Correct Answer: C
Question #18
An engineer resolves an underlying condition of a fault but notices that the fault was not deleted from the Faults view. Which two actions must be taken to remove the fault? (Choose two.)
A. The raised condition ceases
B. Faults are never deleted from the system
C. The soaking timer expires
D. Acknowledge the fault as an administrator
E. The fault is deleted after the retention interval
View answer
Correct Answer: DE
Question #19
Refer to the exhibit.An engineer configures a Layer 4 to Layer 7 device object. The device is a virtual firewall with a single network adapter and it must be deployed in routed mode. Which action completes the configuration of the device object?
A. Enable Promiscuous Mode
B. Change Function Type to GoTo
C. Change context awareness to Multiple
D. Add an outside interface to the cluster interfaces
View answer
Correct Answer: B
Question #20
Which components must be configured for the BGP Route Reflector policy to take effect?
A. pine fabric interface overrides and profiles
B. ccess policies and profiles
C. od policy groups and profiles
D. eaf fabric interface overrides and profiles
View answer
Correct Answer: C
Question #21
How is an EPG extended outside of the ACI fabric?
A. reate an external bridged network that is assigned to a leaf port
B. reate an external routed network that is assigned to an EPG
C. nable unicast routing within an EPG
D. tatically assign a VLAN ID to a leaf port in an EPG
View answer
Correct Answer: D
Question #22
All workloads in VLAN 1001 have been migrated into EPG-1001. The requirement is to move the gateway address for VLAN 1001 from the core outside the Cisco ACI fabric into the Cisco ACI fabric. The endpoints in EPG-1001 must route traffic to endpoints in other EPGs and minimize flooded traffic in the fabric. Which configuration set is needed on the bridge domain to meet these requirements?
A. Enable FloodEnable Unicast Routing
B. Disable Local IP Learning LimitDisable Unicast Routing
C. Disable ARP FloodDisable Limit Endpoint Learning
D. Enable Hardware ProxyEnable Unicast Routing
View answer
Correct Answer: D
Question #23
An engineer implements a configuration backup on the Cisco APIC. The backup job must meet these requirements:- The backup must transfer the encrypted data to the remote server.- The transfer must be resumed if the connection is interruptedWhich configuration set meets these requirements?
A. elect protocol TFTP in Create Remote Location
B. elect protocol SFTP in Create Remote Location
C. elect protocol FTP in Create Remote Location
D. elect protocol HTTP in Create Remote Location
View answer
Correct Answer: B
Question #24
Which role do interfaces Ethernet-50 have in this output?
A. leaf fabric ports
B. server fabric ports
C. leaf access ports
D. server uplink ports
View answer
Correct Answer: A
Question #25
Which type of profile needs to be created to deploy an access port policy group?
A. attachable entity
B. Pod
C. module
D. leaf interface
View answer
Correct Answer: D
Question #26
Which role do interfaces Ethernet-50 have in this output?
A. leaf fabric ports
B. server fabric ports
C. leaf access ports
D. server uplink ports
View answer
Correct Answer: A
Question #27
A network engineer configured a Cisco ACI fabric as follows:· An EPG called EPG-A is created and associated with a VMM domain called North. · The EPG-A is associated with BD-A and is in an application profile called Apps-A.· The BD-A is associated with VRF-1 in the Prod tenant.Which port group must be selected to place VMs in EPG-A?
A. Prod|Apps-A|EPG-A
B. Prod|Apps-A|North|EPG-A
C. Prod|Business_Apps|BD-A|EPG-A
D. Prod|VRF-1|Apps-A|EPG-A
View answer
Correct Answer: A
Question #28
An engineer is configuring ACI VMM domain integration with Cisco UCS-B Series. Which type of port channel policy must be configured in the vSwitch policy?
A. LACP Active
B. MAC Pinning
C. LACP Passive
D. MAC Pinning-Physical-NIC-load
E. Reveal Answer
View answer
Correct Answer: A
Question #29
Refer to the exhibit. A client is configuring a new Cisco ACI fabric. All VLANs will be extended during the migration phase using the VPC connections on leaf switches 3, 4 and leaf switches 5, 6 toward the legacy network. The migration phase has these requirements:The legacy switches must be able to transfer BPDUs through the ACI fabric.If the legacy switches fail to break a loop, Cisco ACI must break the loop.Which group settings must be configured on VPC interface policy groups ipg_vpc-legacy_1 and ipg_vpc- legacy_2 to meet these requirements?
A. MCP: enabledBPDU Guard: disabledBPDU Filter: disabled
B. MCP: disabledBPDU Guard: enabledBPDU Filter: enabled
C. MCP: enabledBPDU Guard: enabledBPDU Filter: disabled
D. MCP: disabledBPDU Guard: disabledBPDU Filter: enabled
View answer
Correct Answer: A
Question #30
Refer to the exhibit. An engineer must configure a bridge domain inside the Cisco ACI fabric called BD. The configuration must permit EP2 and EP3 to reach EP1. Which configuration must be applied on the bridge domain to accomplish this goal?
A. Define the Pervasive gateway on BD
B. Enable L2 Unknown unicast flooding
C. Optimize L2 Unknown unicast traffic
D. Configure unicast routing within B
View answer
Correct Answer: B
Question #31
Refer to the exhibit. An engineer connects a Cisco ACI fabric to two different Cisco Nexus 9000 Series Switches. The fabric must be configured to ensure a loop-free topology and N9K1 must be configured as the root bridge for VLAN 10. Which action meets these requirements?
A. Enable STP on ports between the leaf and spine
B. Set BPDU Guard on ports between the leaf and Nexus 9000 Series Switches
C. Enable Cisco Discovery Protocol on ports between the leaf and spine
D. Activate MCP on ports between the leaf and Nexus 9000 Series Switches
View answer
Correct Answer: D
Question #32
When creating a subnet within a bridge domain, which configuration option is used to specify thenetwork visibility of the subnet?
A. imit IP learning to subnet
B. cope
C. ateway IP
D. ubnet control
View answer
Correct Answer: B
Question #33
A network engineer configured a Cisco ACI fabric as follows:· An EPG called EPG-A is created and associated with a VMM domain called North. · The EPG-A is associated with BD-A and is in an application profile called Apps-A.· The BD-A is associated with VRF-1 in the Prod tenant.Which port group must be selected to place VMs in EPG-A?
A. Prod|Apps-A|EPG-A
B. Prod|Apps-A|North|EPG-A
C. Prod|Business_Apps|BD-A|EPG-A
D. Prod|VRF-1|Apps-A|EPG-A
View answer
Correct Answer: A
Question #34
When creating a subnet within a bridge domain, which configuration option is used to specify the network visibility of the subnet?
A. limit IP learning to subnet
B. scope
C. gateway IP
D. subnet control
View answer
Correct Answer: B
Question #35
Which switch type is discovered first in the Cisco ACI fabric discovery process?
A. spine
B. distribution
C. leaf
D. access
View answer
Correct Answer: C
Question #36
A network engineer configured a Cisco ACI fabric as follows:· An EPG called EPG-A is created and associated with a VMM domain called North. · The EPG-A is associated with BD-A and is in an application profile called Apps-A.· The BD-A is associated with VRF-1 in the Prod tenant.Which port group must be selected to place VMs in EPG-A?
A. Prod|Apps-A|EPG-A
B. Prod|Apps-A|North|EPG-A
C. Prod|Business_Apps|BD-A|EPG-A
D. Prod|VRF-1|Apps-A|EPG-A
View answer
Correct Answer: A
Question #37
How does Cisco ACI manage the old endpoint information on the original leaf switch after an endpoint moves between two Cisco ACI leaf switches?
A. A bounce entry is created by COOP communication instead of data plane learning
B. A remote endpoint is created to represent the endpoint on another leaf
C. Cisco APIC deletes an endpoint after receiving GARP packets from the new leaf
D. The spine switch pushes all endpoint database entries to all leaf switches
View answer
Correct Answer: A
Question #38
An engineer is creating a configuration import policy that must terminate if the imported configuration is incompatible with the existing system. Which import mode achieves this result?
A. merge
B. atomic
C. best effort
D. replace
View answer
Correct Answer: B
Question #39
An engineer must implement management policy and data plane separation in the Cisco ACI fabric. Which ACI object must be created in Cisco APIC to accomplish this goal?
A. Application profile
B. Tenant
C. Contract
D. Bridge domain
View answer
Correct Answer: B
Question #40
Refer to the exhibit. An engineer must configure a bridge domain inside the Cisco ACI fabric called BD. The configuration must permit EP2 and EP3 to reach EP1. Which configuration must be applied on the bridge domain to accomplish this goal?
A. Define the Pervasive gateway on BD
B. Enable L2 Unknown unicast flooding
C. Optimize L2 Unknown unicast traffic
D. Configure unicast routing within B
View answer
Correct Answer: B
Question #41
Which type of policy configures the suppression of faults that are generated from a port being down?
A. fault lifecycle assignment
B. event lifecycle assignment
C. fault severity assignment
D. event severity assignment
View answer
Correct Answer: C
Question #42
A RADIUS user resolves its role via the Cisco AV Pair. What object does the Cisco AV Pair resolve to?
A. tenant
B. security domain
C. primary Cisco APIC
D. managed object class
View answer
Correct Answer: D
Question #43
An engineer is implementing Cisco ACI at a large platform-as-a-service provider using APICcontrollers, 9396PX leaf switches, and 9336PQ spine switches. The leaf switch ports are configured asIEEE 802.1p ports. Where does the traffic exit from the EPG in IEEE 802.1p mode in thisconfiguration?
A. rom leaf ports tagged as VLAN 0
B. rom leaf ports untagged
C. rom leaf ports tagged as VLAN 4094
D. rom leaf ports tagged as VLAN 1
View answer
Correct Answer: B
Question #44
Refer to the exhibit.An engineer configures a Layer 4 to Layer 7 device object. The device is a virtual firewall with a single network adapter and it must be deployed in routed mode. Which action completes the configuration of the device object?
A. Enable Promiscuous Mode
B. Change Function Type to GoTo
C. Change context awareness to Multiple
D. Add an outside interface to the cluster interfaces
View answer
Correct Answer: B
Question #45
Refer to the exhibit.An engineer configures a Layer 4 to Layer 7 device object. The device is a virtual firewall with a single network adapter and it must be deployed in routed mode. Which action completes the configuration of the device object?
A. Enable Promiscuous Mode
B. Change Function Type to GoTo
C. Change context awareness to Multiple
D. Add an outside interface to the cluster interfaces
View answer
Correct Answer: B
Question #46
Refer to the exhibit.An engineer configures a Layer 4 to Layer 7 device object. The device is a virtual firewall with a single network adapter and it must be deployed in routed mode. Which action completes the configuration of the device object?
A. Enable Promiscuous Mode
B. Change Function Type to GoTo
C. Change context awareness to Multiple
D. Add an outside interface to the cluster interfaces
View answer
Correct Answer: B
Question #47
A network engineer configures the Cisco ACI fabric to connect to vCenter with these requirements: Port groups must be automatically created on the distributed virtual switch. Port groups must use the VLAN allocation in the range between 20-30. The deployment must optimize the CAM space on the leaf switches. Which set of actions meets these criteria?
A. ACreate a dynamic VLAN pool with the VLAN range of 20-30
B. BCreate a dynamic VLAN pool with the VLAN range of 20-30
C. CCreate a static VLAN pool with the VLAN range of 20-30
D. DCreate a static VLAN pool with the VLAN range of 20-30
View answer
Correct Answer: A
Question #48
Which feature allows firewall ACLs to be configured automatically when new endpoints are attached to an EPG?
A. ARP gleaning
B. dynamic endpoint attach
C. hardware proxy
D. network-stitching
View answer
Correct Answer: B
Question #49
Which role do interfaces Ethernet-50 have in this output?
A. leaf fabric ports
B. server fabric ports
C. leaf access ports
D. server uplink ports
View answer
Correct Answer: A
Question #50
The existing network and ACI fabric have been connected to support workload migration. Servers will physically terminate at the Cisco ACI, but their gateway must stay in the existing network. The solution needs to adhere to Cisco's best practices. The engineer started configuring the relevant Bridge Domain and needs to complete the configuration. Which group of settings are required to meet these requirements?
A. L2 Unknown Unicast: Hardware Proxy L3 Unknown Multicast Flooding: Flood Multi Destination Flooding: Flood in BD ARP Flooding: Enable
B. L2 Unknown Unicast: Flood L3 Unknown Multicast Flooding: Flood Multi Destination Flooding: Flood in BD ARP Flooding: Enable
C. L2 Unknown Unicast: Flood L3 Unknown Multicast Flooding: Optimize Flood Multi Destination Flooding: Flood in BD ARP Flooding: Disable
D. L2 Unknown Unicast: Hardware Proxy L3 Unknown Multicast Flooding: Optimize Flood Multi Destination Flooding: Flood in BD ARP Flooding: Disable
View answer
Correct Answer: B
Question #51
A Cisco ACI fabric is connected to an external Cisco Catalyst switch. Which set of actions must be taken for Cisco ACI leaf and spine switches to be managed from the management port?
A. Provide default/common contract by external management network under tenant mgmt
B. Provide default/mgmt contract by out-of-band EPG
C. Provide default/mgmt contract by external management network under tenant common
D. Provide default/common contract by out-of-band EPG
View answer
Correct Answer: D

View Answers after Submission

Please submit your email and WhatsApp to get the answers of questions.

Note: Please make sure your email ID and Whatsapp are valid so that you can get the correct exam results.

Email:
Whatsapp/phone number:
Contact Us


Copyright © 2024. Designer by SPOTO Official Website. All Rights Reserved.