Free Cisco 300-620 Exam Questions

Become Cisco Certified with updated 300-620 exam questions and correct answers

Page: 1 / 59

Total 294 Questions | Updated On: Apr 27, 2026

Add To Cart

Question 1

The existing network and ACI fabric have been connected to support workload migration. Servers will physically terminate at the Cisco ACI, but their gateway must stay in the existing network. The solution needs to adhere to Cisco’s best practices. The engineer started configuring the relevant Bridge Domain and needs to complete the configuration. Which group of settings are required to meet these requirements?

A : L2 Unknown Unicast: Hardware ProxyL3 Unknown Multicast Flooding: FloodMulti Destination Flooding: Flood in BD

B : ARP Flooding: Enable -L2 Unknown Unicast: Flood -L3 Unknown Multicast Flooding: FloodMulti Destination Flooding: Flood in BD

C : ARP Flooding: Enable -L2 Unknown Unicast: Flood -L3 Unknown Multicast Flooding: Optimize FloodMulti Destination Flooding: Flood in BD

D : ARP Flooding: Disable -L2 Unknown Unicast: Hardware ProxyL3 Unknown Multicast Flooding: Optimize FloodMulti Destination Flooding: Flood in BDARP Flooding: Disable

Answer: B

Question 2

An engineer must limit management access to the Cisco ACI fabric that originates from a single subnet where the NOC operates. Access should be limited to SSH and HTTPS only. Where should the policy be configured on the Cisco APIC to meet the requirements?

A : licy in the management tenant

B : L on the console interface

C : L on the management interface of the APIC

D : licy on the management VLAN

Answer: A

Question 3

A network engineer must allow secure access to the Cisco ACI out-of-band (OOB) management only from external subnets 10.0.0.0/24 and 192.168.20.0/25. Which configuration set accomplishes this goal?

A : Create a L3Out in the MGMT tenant in OOB VRF.Set External Management Network Instance Profile as a consumer of the OOB contract.Create an External EPG with two subnet entries with the external subnets.

B : Create a PBR service graph in the MGMT tenant.Create a management Profile with the required OOB EPG.Redirect all traffic going into ACI management to the external firewall.Create two subnet entries under the OOB Bridge domain with the required subnets.

C : Create an EPG and BD in the MGMT tenant in OOB VRF.Set OOB VRF to provide the contract.Set a new EPG to consume the OOB contract.

D : Create an OOB contract that allows the required ports.Provide the contract from the OOB EPG.Consume the contract by the OOB External Management Network Instance Profile.Create two subnet entries in the External Management Network Profile with the required subnets.

Answer: D

Question 4

Which switch type is discovered first in the Cisco ACI fabric discovery process?

A : spine

B : distribution

C : leaf

D : access

Answer: C

Question 5

An engineer is implementing Cisco ACI at a large platform-as-a-service provider using APIC controllers, 9396PX leaf switches, and 9336PQ spine switches. The leaf switch ports are configured as IEEE 802.1p ports. Where does the traffic exit from the EPG in IEEE 802.1p mode in this configuration?

A : om leaf ports tagged as VLAN 0

B : om leaf ports untagged

C : om leaf ports tagged as VLAN 4094

D : om leaf ports tagged as VLAN 1

Answer: A

Page: 1 / 59

Total 294 Questions | Updated On: Apr 27, 2026

Add To Cart