Cisco 300-620 Dumps Updated Apr 12, 2026 WIith 391 Questions [Q32-Q50]

4.5/5 - (2 votes)

Cisco 300-620 Dumps Updated Apr 12, 2026 WIith 391 Questions

View All 300-620 Actual Free Exam Questions Apr 12, 2026 Updated

Q32. When Cisco ACI connects to an outside Layers 2 network, where does the ACI fabric flood the STP BPDU frame?

within the bridge domain

within the APIC

within the access encap VLAN

between all the spine and leaf switches

Q33. Refer to the exhibit.

Refer to the exhibit. A Cisco ACI fabric displays this fault. Which set of actions modifies the event to be displayed as a warning in the future?

Navigate to the ACI Events tab.
Create a new record.

Navigate to the ACI Fault tab.
Create a new record.

Navigate to the ACI Events tab.
Change the severity level.

Navigate to the ACI Fault tab.
Change the severity level.

Q34. How is broadcast forwarded in Cisco ACI Multi-Pod after ARP flooding is enabled?

Ingress replication is used on the spines to forward broadcast frames in the IPN infrastructure.

Within a pod, the ingress leaf switch floods the broadcast frame on all fabric ports.

Broadcast frames are forwarded inside the pod and across the IPN using the multicast address that is associated to the bridge domain.

For the specific bridge domain, all spines forward the broadcast frames to IPN routers.

Q35. A network engineer must allow secure access to the Cisco ACl out-of-band (OOB) management only from external subnets 10 0 0024 and 192.168 20 G’25. Which configuration set accomplishes this goal?

Option A

Option B

Option C

Option D

Q36. An engineer must configure a group of servers with a contract that uses TCP port 80. The EGP that contains the web servers requires an external Layer 3 cloud to initiate communication. Which action must be taken to meet these requirements?

Configure the EGP as a provider and L3 out as consumer of the contract.

Configure OSPF to exchange routes between the L3 out and EGP.

Configure a taboo contract and apply it to the EPG.

Configure the EPG as a consumer and L3 out as a provider of the contract.

Q37. What must be configured to redistribute externally learned OSPF routes within the ACI fabric?

Route Control Profile

BGP Route Reflector

BGP Inter-leak Route Map

PIM Sparse Mode

Q38. An engineer wants to configure Cisco ACI switches to use authenticated ZMQ when communicating with the proxy spine. Which configuration allows MD5 ZMQ messages only?

COOP Group policy in strict mode

IS-IS password using MD5

BGP password using MD5

COOP Group policy in compatible mode

Q39. Refer to the exhibit. VM1 and VM2 are in Cisco ACI POD1 and communication takes place.
Which event is triggered when VM2 is live migrated from POD1 to POD2?

Leaf 102 installs a bounce entry for VM2 pointing to the PTEP address of leaf 201.

Leaf 201 creates a tunnel with leaf 102 because of the bounced traffic that is destined to VM2.

Spines from POD2 send an MP-BGP EVPN update to the leaves in POD1 about the new location of VM2.

An MP-BGP EVPN update is received by spines in POD1 announcing the reachability of VM2 via the proxy VTEP address of the spines in POD2.

Q40. Drag and drop the Cisco ACI Layer 4 to Layer 7 service insertion terms on the left to the correct descriptions on the right.

Q41. Refer to the exhibit.

A client reports that the ACI domain connectivity to the fiber channel storage is experiencing a B2B credit oversubscription. The environment has a SYSLOG server for state collection messages. Which value should be chosen to clear the critical fault?

300

410

350

510

Q42. An engineer must limit management access to me Cisco ACI fabric that originates from a single subnet where the NOC operates. Access should be limited to SSH and HTTPS only. Where should the policy be configured on the Cisco APIC to meet the requirements?

policy In the management tenant

policy on the management VLAN

ACL on the management interface of the APIC

ACL on the console interface

Q43. An engineer is configuring a VRF for a tenant named Cisco. Drag and drop the child objects on the left onto the correct containers on the right for this configuration.

Q44. An organization deploys active-active data centers and active-standby firewalls in each data center. Which action should be taken in a Cisco ACI Multi-Pod to maintain traffic symmetry through the firewalls?

Disable Resilient Hashing.

Disable service node Health Tracking.

Enable Pod ID Aware Redirection.

Enable Endpoint Dataplane Learning.

Q45. Refer to the exhibit A Cisco ACI fabric is using out-of-band management connectivity.
The APIC must access a routable host with an IP address of 192.168.11.2.
Which action accomplishes this goal?

Change the switch APIC Connectivity Preference to in-band management

Remove the in-band management address from the APIC.

Add a Fabric Access Policy to allow management connections.

Modify the Pod Profile to use the default Management Access Policy

Q46. What does a bridge domain represent?

Layer 3 cloud

Layer 2 forwarding construct

tenant

physical domain

Q47. A Cisco APIC is configured to authenticate users by using RADIUS by default. The network administrator must ensure that the users can access the APIC GUI with a local account if the RADIUS server is unreachable. Which action achieves this goal?

Enable Fallback Check for Default Authentication.

Configure the fallback login domain to reference Local Realm.

Set RADIUS Realm to connect with Console Authentication.

Create an additional login domain to associate with local accounts.

Q48. Which Cisco ACI setting corresponds to the VMware MAC pinning?

route based on MAC hash

route based on IP hash

route based on physical NIC load

route based on originating virtual port

Q49. Which endpoint learning operation is completed on the egress leaf switch when traffic is received from an L3Out?

The source MAC and IP address of the traffic is learned as a local endpoint.

The source MAC address of the traffic is learned as a remote endpoint.

No source MAC or IP address of the traffic is learned as a remote endpoint.

The source IP address of the traffic is learned as a remote endpoint.

Q50. Drag and drop the Cisco ACI filter entry options from the left onto the correct categories on the right indicating what are required or optional parameters.

To prepare for the Cisco 300-620 certification exam, candidates can take advantage of various resources such as study materials, online courses, and practice exams. Cisco also offers a range of training courses designed to help candidates prepare for the exam. With the right preparation and dedication, candidates can pass the Cisco 300-620 certification exam and take their career to the next level.

New 300-620 Exam Questions Real Cisco Dumps: https://www.actualcollection.com/300-620-exam-questions.html

Leave a comment Cancel reply