Home
Cisco
300-620: Implementing Cisco Application Centric Infrastructure Dumps

Free Cisco 300-620 Exam Dumps October 2026

Here you can find all the free questions related with Cisco Implementing Cisco Application Centric Infrastructure (300-620) exam. You can also find on this page links to recently updated premium files with which you can practice for actual Cisco Implementing Cisco Application Centric Infrastructure Exam. These premium versions are provided as 300-620 exam practice tests, both as desktop software and browser based application, you can use whatever suits your style. Feel free to try the Implementing Cisco Application Centric Infrastructure Exam premium files for free, Good luck with your Cisco Implementing Cisco Application Centric Infrastructure Exam.

Question No: 1

An engineer must configure a service graph for the policy-based redirect to redirect traffic to a transparent firewall. The policy must be vendor-agnostic to support any firewall appliance, Which two actions accomplish these goals? (Choose two.)

ASet the Service Type to Other.

BSet Promiscuous Mode to True.

CSet Function Type to L2.

DSet Managed to True.

ESet Context Aware to Single.

Show Answer

Suggested Answer: A, C Explanation:

Question No: 2

MultipleChoice

What are two descriptions of ACI multi-site? (Choose two.)

Options

AThe Inter-Site network routers should run OSPF to establish peering with the spines.

BThe Multi-Site orchestrator must be directly attached to one ACI leaf.

CRouters in the inter-Site network must run OSPF. DHCP relay, and MP-BGP

DACI Multi-Site is a solution that allows one APIC cluster to manage multiple ACI sites

EACI Multi-Site is a solution that supports a dedicated APIC cluster per site

Answer
D, EExplanation

ACI Multi-Site architecture is designed to interconnect geographically dispersed data centers and extend Layer 2 and Layer 3 connectivity between those locations with consistent policy enforcement. It allows for either a single APIC cluster to manage multiple ACI sites or supports a dedicated APIC cluster per site.This architecture ensures a scalable and flexible approach to managing multiple data center sites, providing a unified policy framework and operational model across the sites34.

Cisco Multi-Site Deployment Guide for ACI Fabrics3

Cisco ACI Multi-Site Architecture White Paper4

Question No: 3

MultipleChoice

An application team tells the Cisco ACI network administrator that it wants to monitor the statistics of the unicast and BUM traffic that are seen in a certain EPG. Which statement describes the collection statistics?

Options

AAll EPGs in the Cisco ACI tenant object must be enabled for statistics to be collected.

BCisco ACI does not capture statistics at the EPG level. Only statistics that pass through ACI contracts can be monitored.

CEPG statistics can be collected only for VMM domains. If a physical domain exists, statistics are not collected.

DThe collection of statistics is enabled on the EPG level by enabling the statistics for unicast and BUM traffic.

Answer
DExplanation

To monitor the statistics of unicast and BUM traffic seen in a certain EPG, the collection of statistics must be enabled at the EPG level.This is done by enabling the statistics specifically for unicast and BUM traffic within the EPG settings3.

https://www.cisco.com/c/en/us/td/docs/switches/datacenter/aci/apic/sw/1-x/Operating_ACI/guide/b_Cisco_Operating_ACI/b_Cisco_Operating_ACI_chapter_01011.html

Question No: 4

MultipleChoice

Refer to the exhibit.

An application called App_1 is hosted on the server called S1. A silent host application. App_2. is hosted on S2. Both applications use the same VLAN encapsulation, which action forces Cisco ACI fabric to learn App_2 on ACI leaf 2?

Options

ASet Multi-Destination Flooding to Drop.

BSet Unicast Routing to Hardware Proxy.

CSet L2 Unknown Unicast to Flood.

DSet L3 Unknown Multicast to Optimized flood.

Answer
CExplanation

The scenario involves an application (App_1) on server S1 and a silent host application (App_2) on S2, both using the same VLAN encapsulation. The task is to force the ACI fabric to learn App_2 on Leaf-2. A silent host does not generate traffic, so special handling is needed.

Requirement Analysis

A silent host requires flooding (e.g., ARP or unknown unicast) to be learned by the fabric when it moves or is detected.

The goal is to ensure Leaf-2 learns App_2's endpoint.

Option Evaluation

A . Set Multi-Destination Flooding to Drop:

Dropping multi-destination traffic prevents learning, which is counterproductive for a silent host.

B . Set Unicast Routing to Hardware Proxy:

Hardware proxy optimizes unicast routing but does not force learning of a silent host via flooding.

C . Set L2 Unknown Unicast to Flood:

Enabling L2 unknown unicast flooding causes the fabric to flood traffic (e.g., ARP) across the bridge domain, allowing Leaf-2 to learn App_2's MAC address even if it is silent.

D . Set L3 Unknown Multicast to Optimized Flood:

This applies to multicast traffic and is irrelevant for learning a silent host's MAC address.

Final Answer Justification

C is correct because flooding L2 unknown unicast traffic ensures the ACI fabric learns App_2 on Leaf-2 by propagating ARP or other discovery traffic.

Primary Cisco Reference:

Cisco ACI Endpoint Learning Guide, 'Flooding for Silent Hosts.'

Cisco APIC Bridge Domain Configuration Guide.

Question No: 5

MultipleChoice

What is the effect of enabling the disable Remote EP learn feature?

Options

AIt disables remote IP endpoint learning on all leaf nodes in the fabric.

BIt disables remote IP endpoint learning on leaf switches that do not have L3Outs.

CIt limits learning of compute leaf endpoints on border leaves.

DIt prevents border leaf switches from receiving routes through peering with external routers.

Answer
DExplanation

Enabling the ''disable Remote EP learn'' feature in Cisco ACI has the effect of preventing border leaf switches from receiving routes through peering with external routers. This feature is particularly useful when there is a mix of Gen1 and Gen2 hardware in the fabric, as it clears all the remote endpoints from the border leaf only.Traffic will still use hardware proxy if the endpoint is not learned on the border leaf, ensuring no operational impact12.

ACI Fabric Endpoint Learning White Paper2

Cisco Community Discussion on Disable Remote EP Learn

https://unofficialaciguide.com/2018/11/29/aci-best-practice-configurations/

Question No: 6

MultipleChoice

Regarding the MTU value of MP-BGP EVPN control plane packets in Cisco ACI, which statement about communication between spine nodes in different sites is true?

Options

ABy default, spine nodes generate 9000-bytes packets to exchange endpoints routing information. As a result, the Inter-Site network should be able to carry 9000-bytes packets.

BBy default, spine nodes generate 1500-bytes packets to exchange endpoints routing information. As a result, the Inter-Site network should be able to carry 1800-bytes packets.

CBy default, spine nodes generate 1500-bytes packets to exchange endpoints routing information. As a result, the Inter-Site network should be able to carry 1500-bytes packets.

DBy default, spine nodes generate 9000-bytes packets to exchange endpoints routing information. As a result, the Inter-Site network should be able to carry 9100-bytes packets.

Answer
AExplanation

The statement about the MTU value of MP-BGP EVPN control plane packets in Cisco ACI that is true for communication between spine nodes in different sites is that by default, spine nodes generate9000-bytes packetsto exchange endpoints routing information.As a result, the Inter-Site network should be able to carry9000-bytes packets2.This ensures that the control plane traffic, which is not VXLAN encapsulated, can be properly handled across the sites2.

Question No: 7

MultipleChoice

An administrator must migrate the vSphere Management VMkernel of all ESXi hosts in the production cluster from the standard default virtual switch to a VDS that is integrated with APIC in a VMM domain. Which action must be completed in this scenario?

Options

AThe Management VMkernel EPG resolution must be set to Pre-Provosion.

BThe administrator must create an in-band VMM Management EPG before performing the migration.

CThe administrator must set the Management VMkernel BD resolution immediacy to On-Demand.

DThe VMkernel Management BD must be located under the Management Tenant.

Answer
AExplanation

When migrating the vSphere Management VMkernel of all ESXi hosts from the standard default virtual switch to a Virtual Distributed Switch (VDS) that is integrated with APIC in a VMM domain, it is essential to set the Management VMkernel EPG resolution to Pre-Provision. This action ensures that the necessary policies are in place on the ACI fabric before the migration occurs, allowing for a seamless transition and continuous management connectivity.

Question No: 8

MultipleChoice

New ESXi hosts are procured in a data center compute expansion project. An engineer must update the

configuration on the Cisco APIC controllers to support the addition of the new servers to the existing VMM

domain. Which action should be taken to support this change?

Options

ACreate a range of internal VLANs in the associated VLAN pool.

BSet the encapsulation mode as VXLAN.

CEnable infrastructure VLAN in the associated AEP.

DMap the leaf interface selector to the AEP that is associated with the VMM domain.

Answer
DExplanation

To support the addition of new ESXi hosts to the existing VMM domain, the action that should be taken is tomap the leaf interface selector to the AEP that is associated with the VMM domain (Option D). This ensures that the correct policies are applied to the interfaces where the new ESXi hosts are connected.

Question No: 9

MultipleChoice

Refer to the exhibit. The external subnet and internal EPG1 must communicate with each other, and the L3Out traffic must leak into the VRF named 'VF1'. Which configuration set accomplishes these goals?

Options

AExport Route Control Subnet
Import Route Control Subnet
Aggregate Shared Routes

BExternal Subnets for External EPG
Shared Route Control Subnet
Shared Security Import Subnet

CExternal Subnets for External EPG
Import Route Control Subnet
Shared Route Control Subnet

DExport Route Control Subnet
Shared Security Import Subnet
Aggregate Shared Routes

Answer
C

Question No: 10

MultipleChoice

Refer to the exhibit.

Refer to the exhibit. A Cisco APIC raises an error when the EPG must accept endpoints from a VMM domain created. Which action clears the fault?

Options

AExpand the VLAN pool for the VMM domain.

BCreate a bridge domain for the VMM domain.

CAssociate the EPG with the VMM domain.

DAssociate the VLAN pool with the VMM domain.

Answer
A

Question No: 11

MultipleChoice

Refer to the exhibit.

Refer to the exhibit. The Cisco ACI fabric has an egress L3Out from Leaf-101 and Leaf-102 to CORE-1. VLAN 102 is used to form the OSPF adjacency. The workloads must be migrated into EPG-101, and the static port binding is configured to Leaf-103 e1/1 with encap VLAN 101. An engineer completes the port binding and receives an MCP fault. Which action clears the fault?

Options

AUse VLAN 101 for OSPF adjacency on the egress L3Out.

BUse VLAN 102 as the encap VLAN on the EPG-101 static port binding.

CAdd VLAN 102 to the VLAN pool that is used by the static port binding.

DPrune VLAN 101 from the VLAN pool that is used by the egress L3Out.

Answer
B

Question No: 12

MultipleChoice

Refer to the exhibit.

Refer to the exhibit A Cisco ACI fabric is using out-of-band management connectivity The APIC must access a routable host with an IP address of 192 168 11 2 Which action accomplishes this goal?

Options

AChange the switch APIC Connectivity Preference to in-band management

BRemove the in-band management address from the APIC.

CAdd a Fabric Access Policy to allow management connections.

DModify the Pod Profile to use the default Management Access Policy

Answer
B

Question No: 13

MultipleChoice

Refer to the exhibit A Cisco ACI fabric is using out-of-band management connectivity The APIC must access a routable host with an IP address of 192 168 11 2 Which action accomplishes this goal?

Options

AChange the switch APIC Connectivity Preference to in-band management

BRemove the in-band management address from the APIC.

CAdd a Fabric Access Policy to allow management connections.

DModify the Pod Profile to use the default Management Access Policy

Answer
B

Question No: 14

MultipleChoice

Refer to the exhibit A customer must back up the current Cisco ACl configuration securely to the remote location using encryption and authentication. The backup job must run once per day The customer s security policy mandates that any sensitive information including passwords, must not be exported from the device Which set of steps meets these requirements?

Options

AOption A

BOption B

COption C

DOption D

Answer
B

Question No: 15

MultipleChoice

When the subnet is configured on a bridge domain, on which physical devices is the gateway IP address configured?

Options

Aall leaf switches and all spine nodes

Bonly spine switches where the bridge domain of the tenant is present

Conly leaf switches where the bridge domain of the tenant is present

Dall border leaf nodes where the bridge domain of the tenant is present

Answer
CExplanation

https://www.cisco.com/c/en/us/td/docs/switches/datacenter/aci/apic/sw/1-x/Operating_ACI/guide/b_Cisco_Operating_ACI/b_Cisco_Operating_ACI_chapter_0111.html

Question No: 16

MultipleChoice

Refer to the exhibit, An engineer is deploying a Cisco ACI environment but experiences a STP loop between switch1 and switch2. Which configuration step is needed to break the STP loop?

Options

AConfigure the STP instance to VLAN mapping under the switch STP policy.

BConfigure a Layer 2 external bridged network on the interfaces facing the MST switches.

CEnable the native VLAN on the interfaces facing the MST switches using static pons in a dedicated EPG.

DEnable BPDU filter under the STP interface policy on the Interfaces lacing the MST switches.

Answer
C

Question No: 17

MultipleChoice

Which statement about ACI syslog is true?

Options

ANotifications for different scopes of syslog objects can be sent only to one destination.

BSyslog messages are sent to the destination through the spine.

CAll syslog messages are sent to the destination through APIC.

DSwitches send syslog messages directly to the destinations.

Answer
D

Limited Time Offer

25%

Off

Get Premium 300-620 Questions as Interactive Web-Based Practice Test or PDF