Free Cisco 300-620 Exam Questions

Become Cisco Certified with updated 300-620 exam questions and correct answers

Page: 1 / 59

Total 294 Questions | Updated On: Jul 01, 2026

Add To Cart

Question 1

Refer to the exhibit. An engineer is configuring a production Multi-Site solution to provide connectivity from EPGs from a specific site to networks reachable through a remote site L3OUT. All required schema and template objects are already defined. Which additional configuration must be implemented in the Multi-Site Orchestrator to support the cross-site connectivity?

A : Configure a routable TEP pool for SITE1.

B : Enable CloudSec for intersite traffic encryption.

C : Add a new stretched external EPG to the existing L3OUT.

D : Implement a policy-based redirect using a service graph.

Answer: A

Question 2

A Cisco ACI is integrated with a VMware vSphere environment. The port groups must be created automatically in vSphere and propagated to hypervisors when created in the ACI environment. Which action accomplishes this goal?

A : eate the port groups on the vCenter that reflect the EPG names in the APIC

B : ign the uplinks of the ESXi hosts to the vDS that the APIC created

C : nfigure contracts for the EPGs that are required on the ESXi hosts

D : ociate the VMM domain with the EPGs that must be available in vCenter

Answer: D

Question 3

Refer to the exhibit. An engineer connects a Cisco ACI fabric to two different Cisco Nexus 9000 Series Switches. The fabric must be configured to ensure a loop-free topology and N9K1 must be configured as the root bridge for VLAN 10. Which action meets these requirements?

A : Enable STP on ports between the leaf and spine.

B : Set BPDU Guard on ports between the leaf and Nexus 9000 Series Switches.

C : Enable Cisco Discovery Protocol on ports between the leaf and spine.

D : Activate MCP on ports between the leaf and Nexus 9000 Series Switches.

Answer: D

Question 4

A network engineer must integrate VMware vCenter cluster with Cisco ACI. The requirement is for the management traffic of the hypervisors and VM controllers to use the virtual switch associated with the Cisco Application Policy. The EPG called "Vmware-MGMT" with VLAN 300 has been created for this purpose. Which set of steps must be taken to complete the configuration?

A : • Add VLAN 300 with static allocation to the VLAN POOL that is used for VMM integration.• Attach the VMM domain to the target EPG with resolution preprovision, mode static, untagged access VLAN, and Port-Encap 300.

B : • Associate the target EPG with the VMM domain with default settings.• Enable Infrastructure VLAN on AAEP used toward VMware hypervisors.

C : • Enable Infrastructure VLAN on AAEP used toward VMware hypervisors.• Associate the target EPG with the VMM domain with default settings.

D : • Enable Infrastructure VLAN on AAEP used toward VMware hypervisors.• Create a static binding in the target EPG toward VMware hypervisors with VLAN 300, untagged access VLAN, and Untagged 802.1P mode.

Answer: A

Question 5

An engineer must limit management access to the Cisco ACI fabric that originates from a single subnet where the NOC operates. Access should be limited to SSH and HTTPS only. Where should the policy be configured on the Cisco APIC to meet the requirements?

A : licy in the management tenant

B : L on the console interface

C : L on the management interface of the APIC

D : licy on the management VLAN

Answer: A

Page: 1 / 59

Total 294 Questions | Updated On: Jul 01, 2026

Add To Cart