Free 300-620 Practice Test Questions 2026

An engineer must allow multiple external networks to communicate with internal ACI subnets. Which action should the engineer take to assign the prefix to the class ID of the external Endpoint Group?

A. Enable the Export Route Control Subnet for the External Endpoint Group flag.

B. Enable an L30ut with Shared Route Control Subnet.

C. Configure subnets with the External Subnets for External EPG flag enabled.

D. Configure subnets with the Import Route Control Subnet flag enabled.

The company’s Cisco ACI fabric hosts multiple customer tenants. To meet a service level agreement, the company is constantly monitoring the Cisco ACI environment. Syslog is one of the methods used for monitoring. Only events related to leaf and spine environmental information without specific customer data should be logged. To which ACI object must the configuration be applied to meet these requirements?

A. access policy

B. infra tenant

C. switch profile

D. fabric policy

Which switch type is discovered first in the Cisco ACI fabric discovery process?

A. leaf

B. access

C. distribution

D. spine

In-band is currently configured and used to manage the Cisco ACI fabric. The requirement is for leaf and spine switches to use out-of-band management for NTP protocol. Which action accomplishes this goal?

A. Select Out-of-Band as Management EPG in the default DateTimePolicy.

B. Create an Override Policy with NTP Out-of-Band for leaf and spine switches.

C. Change the interface used for APIC external connectivity to ooband.

D. Add a new filter to the utilized Out-of-Band-Contract to allow NTP protocol.

A network engineer must allow secure access to the Cisco ACl out-of-band (OOB) management only from external subnets 10 0 0024 and 192.168 20 G'25. Which configuration set accomplishes this goal?

A. Option A

B. Option B

C. Option C

D. Option D

How is broadcast forwarded in Cisco ACI Multi-Pod after ARP flooding is enabled?

A. Ingress replication is used on the spines to forward broadcast frames in the IPN infrastructure.

B. Within a pod, the ingress leaf switch floods the broadcast frame on all fabric ports.

C. Broadcast frames are forwarded inside the pod and across the IPN using the multicast address that is associated to the bridge domain.

D. For the specific bridge domain, all spines forward the broadcast frames to IPN routers.

Refer to the exhibit. The 0.0.0.0/0 is configured as a default static route on L3Out-1. Which action should be taken for the 0.0.0.0/0 prefix to advertise out on L3Out-2 OSPF?

A. Enable Export Route Control Subnet.

B. Enable Shared Security Import Subnet.

C. Enable Shared Route Control Subnet.

D. Enable Aggregate Export Subnet.

A customer implements RBAC on a Cisco APIC using a Windows RADIUS server that is configured with network control policies. The APIC is as follows:

Tenant = TenantX

Security Domain = Tenantx-SD

User = X

The customer requires User X to have access to TenantX only, without any extra privilege in the Cisco ACI fabric domain. Which Cisco AV pair must be implemented on the RADIUS server to meet these requirement?

A. shell:domains = TenantX-SD/fabric-admin/,common//read-all

B. shell:domains = TenantX-SD/tenant-admin

C. shell:domains = TenantX-SD/tenant-ext-admin/,common//read-all

D. shell:domains = TenantX-SD/tenant-admin/,common//read-all

An engineer must advertise a selection of external networks learned from a BGP neighbor into the ACI fabric. Which L3Out subnet configuration option creates an inbound route map for route filtering?

A. External Subnets for the External EPG

B. Shared Route Control Subnet

C. Import Route Control Subnet

D. Shared Security Import Subnet

Which class of ACI object is presented in this output?

A. Contract

B. Bridge Domain

C. Tenant

D. Endpoint

An administrator must migrate the vSphere Management VMkernel of all ESXi hosts in the production cluster from the standard default virtual switch to a VDS that is integrated with APIC in a VMM domain. Which action must be completed in this scenario?

A. The Management VMkernel EPG resolution must be set to Pre-Provosion.

B. The administrator must create an in-band VMM Management EPG before performing the migration.

C. The administrator must set the Management VMkernel BD resolution immediacy to On- Demand.

D. The VMkernel Management BD must be located under the Management Tenant.

Cisco ACI fabric is integrated with VMware VDS. The fabric must apply a security policy to check the integrity of traffic out of the network adapter. Which action must be taken to drop the .. when the ESXi host discovers a mismatch between the actual source MAC address transmitted by the guest operating system and the effective MAC address of the virtual machine ….?

A. Reject MAC changes.

B. Accept forged transmits.

C. Accept MAC changes.

D. Reject forged transmits.