Cisco 300-620 Implementing Cisco Application Centric Infrastructure (DCACI) Online Training
Cisco 300-620 Online Training
The questions for 300-620 were last updated at Nov 01,2025.
- Exam Code: 300-620
 - Exam Name: Implementing Cisco Application Centric Infrastructure (DCACI)
 - Certification Provider: Cisco
 - Latest update: Nov 01,2025
 
Which two protocols are used for fabric discovery in ACI? (Choose two.)
- A . LLDP
 - B . OSPF
 - C . CDP
 - D . DHCP
 - E . ISIS
 
DRAG DROP
Drag and drop the Cisco ACI Layer 4 to Layer 7 service insertion terms on the left to the correct descriptions on the right. 

A company must connect three Cisco ACI data centers by using Cisco ACI Multi-Site. An engineer must configure the Inter-Site Network (ISN) between the existing sites.
Which two configuration steps must be taken to implement the ISN? (Choose two.)
- A . Configure OSPF on subinterfaces on routers that are directly connected with spine nodes.
 - B . Configure ISN site extension on Cisco routers in the network.
 - C . Configure OSPF on all ISN routers.
 - D . Configure BIDIR-PIM on all ISN routers.
 - E . Configure encapsulation VLAN-4 between the routers and spine nodes.
 
Which two actions extend a Layer 2 domain beyond the ACI fabric? (Choose two.)
- A . extending the routed domain out of the ACI fabric
 - B . creating a single homed Layer 3 Out
 - C . creating an external physical network
 - D . extending the bridge domain out of the ACI fabric
 - E . extending the EPG out of the ACI fabric
 
What controls communication between EPGs?
- A . Inter-EPG communication is controlled by BGP.
 - B . Inter-EPG communication is controlled by contracts.
 - C . Inter-EPG communication is controlled by IS-IS.
 - D . Inter-EPG communication is controlled by VXLAN.
 
All workloads in VLAN 1001 have been migrated into EPG-1001. The requirement is to move the gateway address for VLAN 1001 from the core outside the Cisco ACI fabric into the Cisco ACI fabric. The endpoints in EPG-1001 must route traffic to endpoints in other EPGs and minimize flooded traffic in the fabric.
Which configuration set is needed on the bridge domain to meet these requirements?
- A . Disable ARP Flood
Disable Limn Endpoint Learning - B . Enable Hardware Proxy Enable Unicast Routing
 - C . Disable Local IP Learning Limit Disable Unicast Routing
 - D . Enable Flood
Enable Unicast Routing 
As part of a migration, legacy non-ACI switches must be connected to the Cisco ACI fabric. All non-ACI switches run per-VLAN RSTP. After the non-ACI switches are connected to Cisco ACI, the STP convergence caused a microloop and significant CPU spike on all switches.
Which configuration on the interfaces of the external switches that face the Cisco ACI fabric resolves the problem?
- A . BPDU guard
 - B . aggressive STP timers
 - C . BPDU filtering
 - D . STP type link shared
 
A network engineer configures the Cisco ACI fabric to connect to vCenter with these requirements:
Port groups must be automatically created on the distributed virtual switch.
Port groups must use the VLAN allocation in the range between 20-30.
The deployment must optimize the CAM space on the leaf switches.
Which set of actions meets these criteria?
- A . Create a dynamic VLAN pool with the VLAN range of 20-30.
Create a VMM domain and associate it with the VLAN pool.
Create the EPG and associate the domain.
Set the deployment immediacy to On Demand. - B . Create a dynamic VLAN pool with the VLAN range of 20-30.
Create a physical domain and associate it with the VLAN pool.
Create the EPG and associate the domain.
Set the deployment immediacy to On Demand. - C . Create a static VLAN pool with the VLAN range of 20-30.
Create a physical domain and associate it with the VLAN pool.
Create the EPG and associate the domain.
Set the deployment immediacy to Immediate. - D . Create a static VLAN pool with the VLAN range of 20-30.
Create a VMM domain and associate it with the VLAN pool.
Create the EPG and associate the domain.
Set the deployment immediacy to Immediate. 
An engineer is troubleshooting fabric discovery in a newly deployed Cisco ACI fabric and analyzes this output:

Which ACI fabric address is assigned to interface lo1023?
- A . Dynamic tunnel endpoint
 - B . Physical tunnel endpoint
 - C . Fabric tunnel endpoint
 - D . VXLAN tunnel endpoint
 
An engineer configures a one-armed policy-based redirect service Insertion for an unmanaged firewall.
The engineer configures these Cisco ACI objects:
a contract named All_Traffic_Allowed
a Layer 4 to Layer 7 device named FW-Device
a policy-based redirect policy named FW-1Arm-Policy-Based RedirectPolicy
Which configuration set redirects the traffic to the firewall?
- A . Configure a policy-based redirect subject.
Associate the policy-based redirect subject with All_Traffic_Allowed. - B . Configure a firewall bridge domain.
Associate the bridge domain with FW-Device. - C . Configure a device interface policy.
Associate the device interface policy with FW-Device. - D . Configure a service graph.
Associate the service graph with All_Traffic_Allowed. 
	