300-620 Practice Questions Free – 50 Exam-Style Questions to Sharpen Your Skills
Are you preparing for the 300-620 certification exam? Kickstart your success with our 300-620 Practice Questions Free – a carefully selected set of 50 real exam-style questions to help you test your knowledge and identify areas for improvement.
Practicing with 300-620 practice questions free gives you a powerful edge by allowing you to:
- Understand the exam structure and question formats
- Discover your strong and weak areas
- Build the confidence you need for test day success
Below, you will find 50 free 300-620 practice questions designed to match the real exam in both difficulty and topic coverage. They’re ideal for self-assessment or final review. You can click on each Question to explore the details.
A Cisco APIC is configured with RADIUS authentication as the default. The network administrator must ensure that users can access the APIC GUI with a local account if the RADIUS server is unreachable. Which action must be taken to accomplish this goal?
A. Associate console authentication with the “RADIUS” realm
B. Reference the “local” realm in the fallback domain
C. Create an additional login domain that references local accounts
D. Enable the fallback check with the default authentication domain
An engineer is extending an EPG out of the ACI fabric using static path binding. Which statement about the endpoints is true?
A. Endpoints must connect directly to the ACI leaf port.
B. External endpoints are in a different bridge domain than the endpoints in the fabric.
C. Endpoint learning encompasses the MAC address only.
D. External endpoints are in the same EPG as the directly attached endpoints.
Refer to the exhibit. The VMs called VM1 and VM2 are deployed on the ESXi Server in a Cisco ACI environment. VM1 has MAC address A and an IP address 192.168.1.1/24, and VM2 has MAC address B. VM1 has been shut down. Which set of actions must be taken to detect the movement of IP address 192.168.1.1/24 to MAC address B?
A. Enable ARP flooding.Disable unicast routing.Enable GARP-based detection.
B. Disable ARP flooding.Disable unicast routing.Disable GARP-based detection.
C. Disable ARP flooding.Enable unicast routing.Disable GARP-based detection.
D. Enable ARP flooding.Enable unicast routing.Enable GARP-based detection.
An engineer wants to monitor all configuration changes, threshold crossing, and link-state transitions in a Cisco ACI fabric. Which action must be taken to receive the required messages?
A. Add Faults and Events to the monitor policy.
B. Add Session Logs and Audit Logs to the monitor policy.
C. Include Audit Logs and Events in the Syslog source policy.
D. Include Events and Session Logs in the Syslog source policy.
Refer to the exhibit. What must be configured in the service graph to redirect HTTP traffic between the EPG client and EPG server to go through the Cisco ASA firewall?
A. precise filter to allow only HTTP traffic
B. permit-all contract filter
C. contract with no filter
D. contract filter to allow ARP and HTTP.
A network engineer must allow secure access to the Cisco ACI out-of-band (OOB) management only from external subnets 10.0.0.0/24 and 192.168.20.0/25. Which configuration set accomplishes this goal?
A. Create a L3Out in the MGMT tenant in OOB VRF.Set External Management Network Instance Profile as a consumer of the OOB contract.Create an External EPG with two subnet entries with the external subnets.
B. Create a PBR service graph in the MGMT tenant.Create a management Profile with the required OOB EPG.Redirect all traffic going into ACI management to the external firewall.Create two subnet entries under the OOB Bridge domain with the required subnets.
C. Create an EPG and BD in the MGMT tenant in OOB VRF.Set OOB VRF to provide the contract.Set a new EPG to consume the OOB contract.
D. Create an OOB contract that allows the required ports.Provide the contract from the OOB EPG.Consume the contract by the OOB External Management Network Instance Profile.Create two subnet entries in the External Management Network Profile with the required subnets.
When creating a subnet within a bridge domain, which configuration option is used to specify the network visibility of the subnet?
A. limit IP learning to subnet
B. scope
C. gateway IP
D. subnet control
Refer to the exhibit. The 0.0.0.0/0 is configured as a default static route on L3Out-1. Which action should be taken for the 0.0.0.0/0 prefix to advertise out on L3Out-2 OSPF?
A. Enable Export Route Control Subnet.
B. Enable Shared Security Import Subnet.
C. Enable Shared Route Control Subnet.
D. Enable Aggregate Export Subnet.
Where are STP BPDUSs flooded in Cisco ACI fabric?
A. in the access encapsulation VLAN part of different VLAN pools
B. in the bridge domain VLAN
C. in the native VLAN ID
D. in the VNID that is assigned to the FD VLAN
A bridge domain for a new endpoint group in the Cisco ACI fabric must meet these requirements: • The bridge domain must function as the default gateway for the subnet so that routing remains within the Cisco ACI fabric. • ARP requests must be managed via Layer 3 unicast packets or be dropped to reduce excessive broadcast traffic. • The impact of misconfigured virtual machines must be kept to a minimum by preventing IP addresses outside of the configured subnet from being routed. Which set of actions must be taken?
A. Disable ARP Flooding.Enable Limit IP Learning to Subnet.Enable Unicast Routing on the bridge domain and configure a subnet.
B. Enable Limit IP Learning to Subnet.Enable Unicast Routing on the bridge domain and configure a subnet.Set Multi-Destination Flooding to Flood in BD.
C. Set Endpoint Retention Policy to default.Enable ARP Flooding.Enable Unicast Routing on the bridge domain and configure a subnet.
D. Enable Unicast Routing on the bridge domain and configure a subnet.Set L2 Unknown Unicast to Flood.Disable Endpoint Retention Policy.
Refer to the exhibit. All nodes in the Cisco ACI fabric have been statically assigned out-of-band management IP addresses in the 10.100.180.0/24 range. An engineer is attempting to SSH into Leaf101 using a laptop with an IP address of 10.101.180.100/24. Which configuration change must be performed to allow the engineer to SSH using the laptop?
A. Add a contract filter to oobbrc-default that allows SSH.
B. Change the Leaf101 IP address to 10.101.180.101.
C. Change the allowed subnets.
D. Select the default QoS Class policy.
A network engineer must backup the PRODUCTION tenant. The configuration backup should be stored on the APIC using a markup language and contain all secure information. Which export policy must be used to meet these requirement?
A.
B.
C.
D.
When the subnet is configured on a bridge domain, on which physical devices is the gateway IP address configured?
A. all leaf switches and all spine nodes
B. only spine switches where the bridge domain of the tenant is present
C. only leaf switches where the bridge domain of the tenant is present
D. all border leaf nodes where the bridge domain of the tenant is present
An engineer must add a group of 70 bare-metal ESXi servers to the Cisco ACI fabric, which is integrated with vCenter. These configuration steps are complete: • The configured pool of ESXi hosts is configured with an Attachable Access Entity Profile (AAEP) called AEP_VMM. • The new group uses the AAEP called AEP_BAREMETAL. Which action extends functional VMM integration to the new nodes?
A. Update AAEP to AEP_VMM on all policy groups that are used toward bare-metal servers.
B. Create a new AAEP container object for policy groups for AEP_VMM.
C. Implement a separate VMM domain for the bare-metal servers by using AEP_VMM.
D. Add the VMM domain under the AEP_BAREMETAL AAEP object.
Refer to the exhibit. An engineer plans to upgrade the Cisco ACI fabric. Leaf1 and Leaf2 are deployed in a VPC. The fabric is peering with R1 using BGP protocol. Which two actions upgrade the fabric nondisruptively? (Choose two.)
A. Configure the Graceful upgrade option.
B. Disable the BGP neighborship between Cisco ACI fabric and R1.
C. Enable the Graceful Insertion and Removal option.
D. Configure one maintenance group for every leaf.
E. Create one update group for all spines.
The engineer notices frequent MAC and IP address moves between different leaf switch ports. Which action prevents this problem from occurring?
A. Disable enforce subnet check.
B. Enable endpoint loop protection.
C. Enable rogue endpoint control.
D. Disable IP bridge domain enforcement.
![]()
Refer to the exhibit. A network engineer deploys Cisco APIC for the first time. Which connectivity type must be used to connect a Cisco ACI APIC node to connect to an out-of-band segment?
A. 4. 1-Gb Ethernet dedicated management port
B. 5. Serial port (RJ-45 connector)
C. 9. VIC 1455 with external 10/25-Gigabit Ethernet ports
D. 2. Dual 1-Gb/10-Gb Ethernet ports (LAN1 and LAN2)
Refer to the exhibit. The default route is not present in the routing tables of the Cisco ACI leaf switches. All static and direct routes are currently being redistributed and advertised. Which action must be taken to advertise a default route on the eBGP L3Out?
A. Enable a BGP peer prefix policy set to Always.
B. Configure a static default route on the ACI node profiles with next-hop null.
C. Create a Default Route Leak Policy on the L3Out.
D. Implement an export route map matching 0.0.0.0/0.
Refer to the exhibit. The EPG-100 must be extended to the vCenter as a port group with a tagged VLAN ID of 100. Which set of actions accomplishes this goal?
A. 1. Define a static VLAN range (from 100-200) under a VLAN pool that is associated with the dc1vcdev domain.2. Associate the dc1vcdev domain with EPG and select these settings:• Untagged VLAN Access: unselected• VLAN Mode: Static with Encap: 100
B. 1. Define a static VLAN range (from 100-200) under a VLAN pool that is associated with the dc1vcdev domain.2. Associate the dc2vcdev domain with EPG and select these settings:• Untagged VLAN Access: selected• VLAN Mode: Static with Encap: 100
C. 1. Define a dynamic VLAN range (from 100-200) under a VLAN pool that is associated with the delvdev domain.2. Associate the dc1vcdev domain with EPG and select these settings:• Untagged VLAN Access: unselected• VLAN Mode: Static with Encap: 100
D. 1. Define a dynamic VLAN range (from 100-200) under a VLAN pool that is associated with the dc1vdev domain.2. Associate the dc2vcdev domain with EPG and select these settings:• Untagged VLAN Access: selected• VLAN Mode: Static with Encap: 100
What is the result of the pcEnPref flag configured on the epg-App_EPG?
A. Any configuration changes to the private network are validated.
B. Access control rules for the L3Out network are applied.
C. Access control rules for the private network are applied.
D. Any changes to the underlying EPG objects are forbidden.
For which type of endpoint entry does a Cisco ACI leaf switch keep the original TEP source address instead of rewriting the outer source IP address to its TEP address?
A. local entry
B. remote entry
C. bounce entry
D. COOP entry
Refer to the exhibit. A customer is deploying a WAN with these requirements: • Routers 1 and 2 must receive only routes 192.168.11.0/24 and 192.168.21.0/24 from the Cisco ACI fabric. • Reachability to the WAN users must be permitted only for the servers that are located in vrf_prod. Which settings must be configured to meet these objectives?
A. Configure the subnets 192.168.11.0/24 and 192.168.21.0/24 as Private to VRF.Configure the subnet 192.168.31.0/24 as Advertised Externally.Configure an EPG subnet 0.0.0.0/0 as Shared Route Control Subnet.
B. Configure the subnets 192.168.11.0/24 and 192.168.21.0/24 as Private to VRF.Configure the subnet 192.168.31.0/24 as Advertised Externally.Configure an EPG subnet 0.0.0.0/0 as External Subnets for External EPG.
C. Configure the subnets 192.168.11.0/24 and 192.168.21.0/24 as Advertised Externally.Configure the subnet 192.168.31.0/24 as Private to VRF.Configure an EPG subnet 0.0.0.0/0 as External Subnets for External EPG.
D. Configure the subnets 192.168.11.0/24 and 192.168.21.0/24 as Advertised Externally.Configure the subnet 192.168.31.0/24 as Private to VRF.Configure an EPG subnet 0.0.0.0/0 as Shared Route Control Subnet.
Refer to the exhibit. A Cisco APIC raises this fault when connectivity for EPG-3 is configured. Which action clears the fault?
A. Associate BD-3 to VRF-1.
B. Implement a domain for EPG-3.
C. Configure a subnet on BD-3.
D. Create BD-3 for EPG-3.
An administrator must migrate the vSphere Management VMkernel of all ESXi hosts in the production cluster from the standard default virtual switch to a VDS that is integrated with APIC in a VMM domain. Which action must be completed in this scenario?
A. The Management VMkernel EPG resolution must be set to Pre-Provision.
B. The administrator must create an in-band VMM Management EPG before performing the migration.
C. The administrator must set the Management VMkernel BD resolution immediacy to On-Demand.
D. The VMkernel Management BD must be located under the Management Tenant.
How is an EPG extended outside of the ACI fabric?
A. Create an external bridged network that is assigned to a leaf port.
B. Create an external routed network that is assigned to an EPG.
C. Enable unicast routing within an EPG.
D. Statically assign a VLAN ID to a leaf port in an EPG.
A network engineer demonstrates Cisco ACI to a customer. One of the test cases is to validate a disaster recovery event by resetting the ACI fabric to factory and then restoring the fabric to the state it was in before the event. Which setting must be enabled on ACI to export all configuration parameters that are necessary to meet these requirements?
A. enabled AES encryption
B. generated a tech-support file
C. encrypted export destination
D. enabled JSON format export
Refer to the exhibit. Endpoint-A must communicate with Endpoint-B, but Leaf-101 has not learned the location of Endpoint-B. Which step must Leaf-101 take before sending the data?
A. Leaf-101 forwards the packet to the anycast proxy VTEP IP.
B. Leaf-101 creates an eVXLAN tunnel to Leaf-104.
C. Leaf-101 sends the packet to the Spine-201.
D. Leaf-101 broadcasts an ARP request on a link to one of the spines.
Which table holds IP address, MAC address and VXLAN/VLAN information on a Cisco ACI leaf?
A. endpoint
B. adjacency
C. RIB
D. ARP
Refer to the exhibit. A Cisco ACI fabric displays this fault. Which set of actions modifies the event to be displayed as a warning in the future?
A. Navigate to the ACI Events tab.Create a new record.
B. Navigate to the ACI Fault tab.Create a new record.
C. Navigate to the ACI Events tab.Change the severity level.
D. Navigate to the ACI Fault tab.Change the severity level.
Which new construct must a user create when configuring in-band management?
A. VLAN pool
B. management contract
C. management tenant
D. bridge domain
Refer to the exhibit.The Cisco ACI fabric is built with L2Out to the N9K1 and N9K2 switches. The switches run the RSTP protocol. The requirement is for the Cisco ACI fabric to detect loops from the N9K and for the fabric to be protected against loops. Which set of actions must be taken to meet the requirements?
A. Configure the N9K STP link type as point-to-point link.Enable MCP on ACI globally.
B. Configure the N9K STP link type as a shared link.Enable MCP on ACI globally.
C. Configure the N9K STP link type as a shared link.Enable MCP on the ACI leaf interfaces.
D. Configure the N9K STP link type as a point-to-point link.Enable MCP on the ACI leaf interfaces.
A Cisco ACI leaf switch learns the source IP address of a packet that enters the front panel port of the switch. Which bridge domain setting is used?
A. ARP Flooding
B. L3 Unknown Multicast Flooding – Flood
C. L2 Unknown Unicast – Hardware proxy
D. Unicast Routing
An engineer must configure a Cisco ACI bridge domain to prevent flooding from unknown unicast frames. Which action must be configured in Cisco ACI to accomplish this goal?
A. Set the bridge domain option to Flood in Encapsulation.
B. Configure Clear Remote MAC Entries in the bridge domain mode.
C. Set Disable Remote EP Learn in the Fabric Wide Setting Policy.
D. Configure the bridge domain to operate in optimized mode.
An engineer plans a Cisco ACI firmware upgrade. The ACI fabric consists of three Cisco APIC controllers, two spine switches, and four leaf switches. Two leaf switches have 1-Gb copper ports for bare metal servers, and the other two leaf switches have 10-Gb SFP ports to connect storage. Which set of actions accomplishes an upgrade with minimal disruptions?
A. Upgrade the APIC controllers by selecting the desired firmware and choosing Upgrade Now.Divide the switches into two upgrade groups: spines and leaves.Start the firmware upgrade on the spine upgrade group and then proceed with the leaf upgrade group.
B. Upgrade the APIC controllers by initiating the upgrade process that uses the most recent uploaded firmware.Divide the switches into three upgrade groups: spines, 1-Gb switches, and 10-Gb switches.Start the firmware upgrade on the spine upgrade group and then proceed with the other two groups.
C. Upgrade the APIC controllers by selecting the desired firmware and choosing Upgrade Now.Divide the switches into two upgrade groups with one spine, one 1-Gb switch, and one 10-Gb switch per group.Start the firmware upgrade on the first upgrade group and when it finishes, start the second upgrade group.
D. Upgrade the APIC controllers as a single group by selecting the firmware and choosing Upgrade Now.Divide the switches into four upgrade groups with one switch per group.Start the firmware upgrade on each upgrade group in succession until all four are complete.
An ACI engineer is implementing a Layer 3 Out inside the Cisco ACI fabric that must meet these requirements: • The data center core switch must be connected to one of the leaf switches with a single 1G link. • The routes must be exchanged using a link-state routing protocol that supports hierarchical network design. • The data center core switch interface must be using 802.1Q tagging, and each VLAN will be configured with a dedicated IP address. Which set of steps accomplishes this goals?
A. Set up the EIGRP Protocol policy with the selected Autonomous System number.Create the Routed Outside object and Node Profile, selecting EIGRP.Configure the Interface profile, selecting Routed Interface and the appropriate interfaces.Create the External Network object with a network of 0.0.0 0/0.
B. Set up the EIGRP Protocol policy with the selected Autonomous System number.Set up the Routed External Network object and Node Profile, selecting EIGRP.Create the Switch profile, selecting Port-channel and the appropriate interfaces.Create the default network and associate it with the Routed Outside object.
C. Set up the BGP Protocol policy with the Autonomous System number of 0.Configure an Interface policy and an External Bridged Domain.Create an External Bridged Network using the configured VLAN pool.Build the Leaf profile, selecting Routed sub-interface and the appropriate VLAN.
D. Configure the OSPF Protocol policy with an area of 0.Create Routed Outside object and Node Profile, selecting OSPF as the routing protocol.Build the Interface profile, selecting Routed Sub-interface and the appropriate VLAN.Configure the External Network object with a network of 0 0.0 0/0.
Refer to the exhibit. An engineer is deploying a Cisco ACI fabric with an L2Out to external switches. The Cisco ACI fabric has just been deployed and follows the default forwarding behavior. Which two actions accomplish a loop free topology? (Choose two.)
A. Add ports Eth1/1 and Eth1/2 to the LACP port channel.
B. Enable MCP on the ports between the leafs and spine switches.
C. Disconnect the link between Leaf3 and Leaf4.
D. Implement LLDP on ports Eth1/1 and Eth1/2 on Leaf2.
E. Configure BPDU guard on Catalyst switch ports.
What do Pods use to allow Pod-to-Pod communication in a Cisco ACI Multi-Pod environment?
A. over Layer 3 directly connected back-to-back spines
B. over Layer 3 Out connectivity via border leafs
C. over Layer 3 IPN connectivity via border leafs
D. over Layer 3 IPN connectivity via spines
A network engineer configures the Cisco ACI fabric to connect to vCenter with these requirements: • Port groups must be automatically created on the distributed virtual switch. • Port groups must use the VLAN allocation in the range between 20-30. • The deployment must optimize the CAM space on the leaf switches. Which set of actions meets these criteria?
A. Create a dynamic VLAN pool with the VLAN range of 20-30.Create a VMM domain and associate it with the VLAN pool.Create the EPG and associate the domain.Set the deployment immediacy to On Demand.
B. Create a dynamic VLAN pool with the VLAN range of 20-30.Create a physical domain and associate it with the VLAN pool.Create the EPG and associate the domain.Set the deployment immediacy to On Demand.
C. Create a static VLAN pool with the VLAN range of 20-30.Create a physical domain and associate it with the VLAN pool.Create the EPG and associate the domain.Set the deployment immediacy to Immediate.
D. Create a static VLAN pool with the VLAN range of 20-30.Create a VMM domain and associate it with the VLAN pool.Create the EPG and associate the domain.Set the deployment immediacy to Immediate.
All nodes in a Cisco ACI fabric are raising NTP faults. The Date and Time policy is configured with the IP address of two NTP servers and both servers are reachable via the out-of-band management network. Also, the out-of-band EPG has been selected as the management EPG. Which configuration clears the NTP faults?
A. Add the NTP server IPs to the external management instance profile.
B. Create a node management address policy that includes all nodes in the fabric.
C. Configure and apply an out-of-band contract to the out-of-band EPG.
D. Directly attach both NTP servers to the Cisco ACI fabric via a leaf switch.
An engineer configures SNMP for an ACI fabric and created an SNMP Monitoring Destination Group called snmp_dgroup1. Snmp_dgroup1 is configured with the server hostname and community password. An SNMP policy called snmp_podpolicy1 is configured to enable SNMP and add an SNMP Client Group Profile called snmp_clgroup1. Snmp_podpolicy1 is associated the default pod profile via a pod policy group named pod1. Which configuration set must the engineer enable to complete the SNMP configuration?
A. Configure the OOB management contract to permit UDP 162.Associate snmp_dgroup1 with the OOB management EPG.
B. Configure an SNMP management contract to permit all traffic.Associate snmp_podpolicy1 with an SNMP pod profile.
C. Configure an SNMP management contract to permit UDP 162.Associate the SNMP Source to snmp_clgroup1.
D. Configure the OOB management contract to permit all traffic.Associate snmp_clgroup1 with the SNMP management EPG.
An SNMP monitoring service is added to a Cisco ACI fabric. The solution must meet these requirements: • The notification must be generated when significant events occur during hardware-related events. • The notification system must be redundant by using multiple servers to receive the notifications. Which set of actions meets these requirements?
A. Implement an SNMP Monitoring Destination Group.Associate the SNMP policy to the desired pod in the Pod Policies section under the Fabric tab.
B. Configure an SNMP policy with community policies in the Tenant section of the common tenant.Link the SNMP policy to the common tenant in the Monitoring Policies section under the Fabric tab.
C. Define an SNMP policy with community policies in the Fabric Policies section under the Fabric tab.Implement an SNMP Client Group Profile.
D. Configure an SNMP Monitoring Destination Group.Define an SNMP source by using the previously defined group in the Access Policies section under the Fabric tab.
What are two descriptions of ACI Multi-Site? (Choose two.)
A. Routers in the Inter-Site network must run OSPF, DHCP relay, and MP-BGP
B. ACI Multi-Site is a solution that allows one APIC cluster to manage multiple ACI sites
C. The Multi-Site orchestrator must be directly attached to one ACI leaf
D. ACI Multi-Site is a solution that supports a dedicated APIC cluster per site
E. The Inter-Site network routers should run OSPF to establish peering with the spines
The Application team reports that a previously existing port group has disappeared from vCenter. An engineer confirms that the VMM domain association for the EPG is no longer present. Which action determines which user is responsible for the change?
A. Check the EPG audit logs for the “deletion” action and compare the affected object and user.
B. Evaluate the potential faults that are raised for that EPG.
C. Examine the health score and drill down to an object that affects the EPG combined score.
D. Inspect the server logs to see who was logging in to the APIC during the last few hours.
An engineer discovered an outage on the mgmt0 port of Leaf113 and Leaf114. Both leaf switches were recently registered in the fabric and have health scores of 100. The engineer discovers there is no IP address assigned to the mgmt0 interface of the switches. Which action resolves the outage?
A. Statically bind the mgmt0 interface of Leaf113 and Leaf114 to the oob-default EPG.
B. Enable Leaf113 and Leaf114 mgmt0 under the leaf switch.
C. Associate the oobbrc-default contract to Leaf113 and Leaf114.
D. Add Leaf113 and Leaf114 to the node management address policy.
In a Cisco ACI fabric, an endpoint moves between two leaf switches during a virtual machine migration. Which action does Cisco ACI take to minimize the impact to traffic during this event?
A. A new leaf switch updates a COOP database on the spine, which causes the old leaf switch to install a bounce entry.
B. A new leaf switch sends a COOP message to the Cisco APIC cluster to populate a new location of the endpoint.
C. A new leaf switch sends a COOP message directly to the old leaf switch to update it with new information about the endpoint move.
D. A new leaf switch floods GARP to every other leaf switch in the fabric, which advertises a new endpoint location to the fabric.
On which two interface types should a user configure storm control to protect against broadcast traffic? (Choose two.)
A. APIC facing interfaces
B. port channel on a single leaf switch
C. all interfaces on the leaf switches in the fabric
D. endpoint-facing trunk interface
E. fabric uplink interfaces on the leaf switches
Which feature should be disabled on a bridge domain when a default gateway for endpoints is on an external device instead of a Cisco ACI bridge domain SVI?
A. unknown unicast flooding
B. ARP flooding
C. unicast routing
D. proxy ARP
An engineer configures port-12 on Leaf-101 and Leaf-102 to connect to a new server called SVR-12. This server will belong to a new EPG-12 and needs to use Encapsulation VLAN-12. An already existing server, which is named SVR-10, is also connected to the same leaf switches. SVR-10 belongs to EPG-10 and also uses Encapsulation VLAN-12. Which step must the engineer take to configure connectivity for SVR-12 and EPG-12?
A. Associate EPG-12 to the same BD as EPG-10.
B. Enable port local VLAN scope.
C. Disable native VLAN on both EPGs.
D. Assign the IP address of SVR-12 to a different subnet.
An organization deploys active-active data centers and active-standby firewalls in each data center. Which action should be taken in a Cisco ACI Multi-Pod to maintain traffic symmetry through the firewalls?
A. Disable Resilient Hashing.
B. Disable service node Health Tracking.
C. Enable Pod ID Aware Redirection.
D. Enable Endpoint Dataplane Learning.
Which two statements regarding ACI Multi-Site are true? (Choose two.)
A. The Multi-Site orchestrator must be directly attached to one ACI leaf.
B. Routers in the Inter-Site network must run OSPF, DHCP relay, and MP-BGP.
C. ACI Multi-Site is a solution that supports a dedicated APIC cluster per site.
D. ACI Multi-Site is a solution that allows one APIC cluster to manage multiple ACI sites.
E. The Inter-Site network routers should run OSPF to establish peering with the spines.
Free Access Full 300-620 Practice Questions Free
Want more hands-on practice? Click here to access the full bank of 300-620 practice questions free and reinforce your understanding of all exam objectives.
We update our question sets regularly, so check back often for new and relevant content.
Good luck with your 300-620 certification journey!