2026 Actual Cisco 300-620 Dumps, Updated Exam Questions for Guaranteed Pass

300-620 free sample questions and answers

Cisco 300-620 practice quiz with correct answers for search indexing.

1. Question 1

   A network engineer configures the Cisco ACI fabric to connect to vCenter with these requirements:

   Port groups must be automatically created on the distributed virtual switch.

   Port groups must use the VLAN allocation in the range between 20-30.

   The deployment must optimize the CAM space on the leaf switches.

   Which set of actions meets these criteria?

   ACreate a dynamic VLAN pool with the VLAN range of 20-30.
   Create a VMM domain and associate it with the VLAN pool.
   Create the EPG and associate the domain.
   Set the deployment immediacy to On Demand.
   

   BCreate a dynamic VLAN pool with the VLAN range of 20-30.
   Create a physical domain and associate it with the VLAN pool.
   Create the EPG and associate the domain.
   Set the deployment immediacy to On Demand.
   

   CCreate a static VLAN pool with the VLAN range of 20-30.
   Create a physical domain and associate it with the VLAN pool.
   Create the EPG and associate the domain.
   Set the deployment immediacy to Immediate.
   

   DCreate a static VLAN pool with the VLAN range of 20-30.
   Create a VMM domain and associate it with the VLAN pool.
   Create the EPG and associate the domain.
   Set the deployment immediacy to Immediate.
   

   Correct answer: A

   To meet the criteria for configuring the Cisco ACI fabric to connect to vCenter, the following actions should be taken:

   Create a dynamic VLAN pool with the VLAN range of 20-30: This step involves creating a VLAN pool that dynamically assigns VLANs within the specified range to the port groups as they are created1.

   Create a VMM domain and associate it with the VLAN pool: The VMM domain is a representation of the VMware vSphere Distributed Switch (VDS) in ACI, and associating it with the VLAN pool allows for the automatic creation of port groups on the VDS1.

   Create the EPG and associate the domain: An Endpoint Group (EPG) is a logical entity to which workloads are attached.Associating the EPG with the VMM domain ensures that the port groups are automatically created in vCenter when the EPG is associated with a VMM domain1.

   Set the deployment immediacy to On Demand: Setting the deployment immediacy to 'On Demand' optimizes the CAM space on the leaf switches by deploying policies to leaf nodes only when endpoints assigned to this EPG are connected, rather than immediately upon configuration12.

   By following these steps, the network engineer can ensure that the Cisco ACI fabric is correctly configured to connect to vCenter, with port groups being automatically created on the distributed virtual switch, using the VLAN allocation in the range between 20-30, and optimizing the CAM space on the leaf switches.

   
   

2. Question 2

   Which statement about ACI syslog is true or Which statement describes the ACI syslog?

   ANotifications for different scopes of syslog objects can be sent only to one destination.
   

   BSyslog messages are sent to the destination through the spine.
   

   CAll syslog messages are sent to the destination through APIC.
   

   DSwitches send syslog messages directly to the destinations.
   

   Correct answer: C

   The correct statement about ACI syslog is thatall syslog messages are sent to the destination through APIC1.This centralized approach allows for consistent logging and monitoring across the ACI fabric1.

   
   

3. Question 3

   A bridge domain for a new endpoint group in the Cisco ACI fabric must meet these requirements:

   The bridge domain must function as the default gateway for the subnet so that routing remains within the Cisco ACI fabric.

   ARP requests must be managed via Layer 3 unicast packets or be dropped to reduce excessive broadcast traffic.

   The impact of misconfigured virtual machines must be kept to a minimum by preventing IP addresses outside of the configured subnet from being routed.

   Which set of actions must be taken?

   ADisable ARP Flooding.
   Enable Limit IP Learning to Subnet.
   Enable Unicast Routing on the bridge domain and configure a subnet.
   

   BEnable Limit IP Learning to Subnet.
   Enable Unicast Routing on the bridge domain and configure a subnet.
   Set Multi-Destination Flooding to Flood in BD.
   

   CSet Endpoint Retention Policy to default.
   Enable ARP Flooding.
   Enable Unicast Routing on the bridge domain and configure a subnet.
   

   DEnable Unicast Routing on the bridge domain and configure a subnet.
   Set L2 Unknown Unicast to Flood.
   Disable Endpoint Retention Policy.
   

   Correct answer: A

   To meet the requirements for the new endpoint group's bridge domain in the Cisco ACI fabric, the following actions must be taken:

   Disable ARP Flooding: This action prevents ARP requests from being broadcast across the entire bridge domain, which reduces excessive broadcast traffic.

   Enable Limit IP Learning to Subnet: This setting restricts IP address learning to only those IPs within the configured subnet, minimizing the impact of misconfigured virtual machines.

   Enable Unicast Routing on the bridge domain and configure a subnet: Enabling unicast routing allows the bridge domain to function as the default gateway for the subnet, ensuring that routing remains within the Cisco ACI fabric.

   
   

4. Question 4

   Refer to the exhibit.

   

   An engineer is implementing Cisco ACI -- VMware vCenter integration for a blade server that lacks support of bonding. Which port channel mode results in ''route based on originating virtual port'' on the VMware VDS?

   AStatic Channel -- Mode On
   

   BMAC Pinning-Physical-NIC-load
   

   CLACP Passive
   

   DMAC Pinning+
   

   ELACP Active
   

   Correct answer: B

   For a blade server that lacks support of bonding, the port channel mode that results in ''route based on originating virtual port'' on the VMware VDS isMAC Pinning-Physical-NIC-load(Option B).This mode ensures that the virtual machine traffic is distributed across the available uplinks based on the MAC address of the originating virtual port1.

   https://www.cisco.com/c/en/us/td/docs/dcn/aci/apic/6x/virtualization/cisco-aci-virtualization-guide-60x/ACI-Virtualization-Guide-60x-aci-with-vmware-vds.pdf

   
   

5. Question 5

   Cisco ACI fabric contains a tenant called Prod. User_1 must have write access to tenant Prod and full access to the fabric access policy. Which set of actions must be taken to meet these requirements?

   AAssociate User_1 to the fabric access policy.
   Associate the security domain to the fabric access policy.
   Create RBAC for the distinguished name of tenant Prod.
   

   BAssociate User_1 to tenant Prod.
   Associate the security domain to the distinguished name of the fabric access policy.
   Create RBAC for the distinguished name of security domain.
   

   CAssociate User_1 to the distinguished name of the fabric access policy.
   Associate the security domain to RBAC.
   Create RBAC for the distinguished name of User__1.
   

   DAssociate User_1 to the security domain.
   Associate the security domain to tenant Prod.
   Create RBAC for the distinguished name of fabric access policy.
   

   Correct answer: D