Cisco 300-620 Exam Preparation Guide and PDF Download [Q117-Q134]

Rate this post

Cisco 300-620 Exam Preparation Guide and PDF Download

Verified & Correct 300-620 Practice Test Reliable Source Mar 16, 2026 Updated

Cisco 300-620 exam, also known as Implementing Cisco Application Centric Infrastructure (DCACI), is a certification exam that is designed to test the knowledge and skills of IT professionals who are responsible for implementing and managing Cisco Application Centric Infrastructure (ACI). Implementing Cisco Application Centric Infrastructure certification is intended for those who have experience in data center technologies and possess a good understanding of networking, virtualization, and storage technologies.

Q117. An engineer must set up a Cisco ACI fabric to send Syslog messages related to hardware events, such as chassis line card failures. The messages should be sent to a dedicated Syslog server. Where in the Cisco APIC should the policy be configured to meet this requirement?

uni/tn-common/monepg-default

uni/infra/monifra-default

uni/fabric/monfab-default

uni/fabric/moncommon

https://www.cisco.com/c/en/us/td/docs/switches/datacenter/aci/apic/sw/4-x/aci-fundamentals/Cisco-ACI-Fundamentals-401/Cisco-ACI-Fundamentals-401_chapter_01100.html

Q118. An engineer must perform a Cisco ACI fabric upgrade that minimizes the impact on user traffic and allows only permitted users to perform an upgrade.
Which two configuration steps should be taken to meet these requirements?

Divide Cisco APIC controllers into two or more maintenance groups.

Grant tenant-ext-admin access to a user who performs an upgrade

Combine all switches into an upgrade group.

Divide switches into two or more maintenance groups.

Grant the fabric administrator role to a user who performs an upgrade.

Q119. Cisco ACI fabric is integrated with VMware VDS. The fabric must apply a security policy to check the integrity of traffic out of the network adapter. Which action must be taken to drop the .. when the ESXi host discovers a mismatch between the actual source MAC address transmitted by the guest operating system and the effective MAC address of the virtual machine ….?

Reject MAC changes.

Accept forged transmits.

Accept MAC changes.

Reject forged transmits.

https://docs.vmware.com/en/VMware-vSphere/7.0/com.vmware.vsphere.security.doc/GUID-7DC6486F-5400-44DF-8A62-6273798A2F80.html

Q120. As part of a migration, legacy non-ACI switches must be connected to the Cisco ACI fabric. All non-ACI switches run per-VLAN RSTP. After the non-ACI switches are connected to Cisco ACI, the STP convergence caused a microloop and significant CPU spike on all switches. Which configuration on the interfaces of the external switches that face the Cisco ACI fabric resolves the problem?

BPDU guard

aggressive STP timers

BPDU filtering

STP type link shared

Q121. Which Cisco APIC configuration prevents a remote network that is not configured on the bridge domain from being learned by the fabric?

enable Limit IP Learning to Subnet

enable Unicast Routing

enable IP Data-plane Learning

enable ARP Flooding to BD

The Cisco APIC configuration that prevents a remote network that is not configured on the bridge domain from being learned by the fabric is to enable Limit IP Learning to Subnet2. This setting restricts IP address learning to only those subnets that are defined on the bridge domain2.
Reference:
https://www.cisco.com/c/en/us/solutions/collateral/data-center-virtualization/application-centric-infrastructure/ white-paper-c11-739989.html

Q122. Refer to the exhibit. Which two configuration steps are completed before this output is generated?
(Choose two.)

MCP policy for the interface policy group for Port-channel 12 is enabled.

MCP Instance Policy default in the global access policies is enabled.

Error Disabled Recovery Policy for Loop Indication by MCP is set to True.

BPDU Guard is enabled for the interface policy group for Port-channel 12.

Spanning Tree Policy Region STP_4CAF232E48FF20 is added to the spanning-tree policy of the switch.

For MCP to be enabled, you need to have it enabled globally and on a per-interface basis.
https://unofficialaciguide.com/2018/03/27/using-mcp-miscabling-protocol-for-aci/

Q123. Refer to the exhibit. How are the STP BPDUs forwarded over Cisco ACI fabric?

Cisco ACI acts as the STP root for all three external switches.

STP BPDUs that are generated by Switch2 are received by Switch1 and Switch3

STP BPDUs that are generated by Switch1 are received only by Switch3.

Cisco ACI fabric drops all STP BPDUs that are generated by the external switches.

Q124. The engineer notices frequent MAC and IP address moves between different leaf switch ports. Which action prevents this problem from occurring?

Disable enforce subnet check.

Enable endpoint loop protection.

Enable rogue endpoint control.

Disable IP bridge domain enforcement.

enabling endpoint loop protection can prevent frequent MAC and IP address moves between different leaf switch ports.

Q125. Refer to the exhibit.

Refer to the exhibit. Which two configuration steps are completed before this output is generated? (Choose two.)

MCP policy for the interface policy group for Port-channel 12 is enabled.

MCP Instance Policy default in the global access policies is enabled.

Error Disabled Recovery Policy for Loop Indication by MCP is set to True.

BPDU Guard is enabled for the interface policy group for Port-channel 12.

Spanning Tree Policy Region STP_4CAF232E48FF20 is added to the spanning-tree policy of the switch.

Q126. An engineer must implement management policy and data plane separation in the Cisco ACI fabric. Which ACI object must be created in Cisco APIC to accomplish this goal?

Application profile

Tenant

Contract

Bridge domain

Q127. A customer is deploying a new application across two ACI pods that is sensitive to latency and jitter. The application sets the DSCP values of packets to AF31 and CS6, respectively. Which configuration changes must be made on the APIC to support the new application and prevent packets from being delayed or dropped between pods?

disable DSCP mapping on the IPN devices

disable DSCP translation policy

align the ACI QoS levels and IPN QoS policies

align the custom QoS policy on the EPG site in the customer tenant

This will ensure that the Quality of Service (QoS) levels and policies within the ACI fabric and the IPN devices match, preventing packets from being delayed or dropped between pods.
Additionally, it is important to align the DSCP values of the packets with the configured QoS levels to ensure that the application’s requirements for latency and jitter are met.

Q128. A Cisco ACI fabric is built to monitor and manage APIC devices using SNMP. Which action allows SNMP to receive traps from APIC controllers?

Add a deny any rule under out-of-band contract.

Permit UDP port 162 on the filter entry of the default subject.

Consume out-of-band contract from the common tenant.

Provide a standard contract under the management tenant.

SNMP traps are sent from the APIC to the trap receiver using UDP port 162. To allow these traps to leave the APIC through the management EPG, the filter entry in the default subject must explicitly permit UDP/162, enabling the APIC to send SNMP traps successfully.

Q129. Which type of port is used for in-band management within ACI fabric?

spine switch port

APIC console port

leaf access port

management port

Q130. What must be configured to allow SNMP traffic on the APIC controller?

out-of-band management interface

contract under tenant mgmt

SNMP relay policy

out-of-band bridge domain

Q131. An engineer must configure a service graph for the policy-based redirect to redirect traffic to a transparent firewall. The policy must be vendor-agnostic to support any firewall appliance. Which two actions accomplish these goals? (Choose two.)

Set Context Aware to Single.

Set the Service Type to Other.

Set Promiscuous Mode to True.

Set Function Type to L2.

Set Managed to True.

Q132. Which two actions extend a Layer 2 domain beyond the ACI fabric? (Choose two.)

extending the routed domain out of the ACI fabric

creating a single homed Layer 3 Out

creating an external physical network

extending the bridge domain out of the ACI fabric

extending the EPG out of the ACI fabric

Q133. Which Cisco ACI setting corresponds to the VMware MAC pinning?

route based on MAC hash

route based on IP hash

route based on physical NIC load

route based on originating virtual port

Q134. What is the purpose of the Overlay Multicast TEP in a Cisco ACI Multi-Site deployment?

to source and receive unicast VXLAN data plane traffic

to establish MP-BGP EVPN adjacencies with the spine nodes in remote sites

to encapsulate multicast traffic in a common multicast group

to perform head-end replication for BUM traffic

The purpose of the Overlay Multicast TEP (O-MTEP) in a Cisco ACI Multi-Site deployment is to perform head-end replication for BUM (Broadcast, Unknown unicast, Multicast) traffic. This common anycast address is shared by all the spine nodes in the same site and is used to replicate BUM traffic across the sites4.

Loading …