Free 300-620 Practice Test Questions 2026

A network engineer must backup the PRODUCTION tenant. The configuration backup should be stored on the APIC using a markup language and contain all secure information. Which export policy must be used to meet these requirement?

A. Option A

B. Option B

C. Option D

D. Option D

An engineer deploys a two-pod Cisco ACI Multi-Pod environment. Why should no more than two Cisco APIC controllers be deployed in the same pod?

A. to enable equal capacity to scale in each pod

B. to avoid losing all replicas of a shard if a pod fails

C. to avoid hair-pinning traffic that is destined for the primary APIC controller between pods

D. to ensure that all nodes in all pods have local access to a controller

A network administrator configures AAA inside the Cisco ACI fabric. The authentication goes through the local users if the TACACS+ server is not reachable. If the Cisco APIC is out of the cluster, the access must be granted through the fallback domain. Which configuration set meets these requirements?

A. Ping Check: True
Default Authentication Realm: Local
Fallback Check: True

B. Ping Check: True
Default Authentication Realm: TACACS+
Fallback Check: False

C. Ping Check: False
Default Authentication Realm: Local
Fallback Check: False

D. Ping Check: False
Default Authentication Realm: TACACS+
Fallback Check: True

What is the effect of enabling the disable Remote EP learn feature?

A. It disables remote IP endpoint learning on all leaf nodes in the fabric.

B. It disables remote IP endpoint learning on leaf switches that do not have L3Outs.

C. It limits learning of compute leaf endpoints on border leaves.

D. It prevents border leaf switches from receiving routes through peering with external routers.

Refer to the exhibit. An engineer configures an L3Out but receives the error presented. Which action clears the fault?

A. Acknowledge the QoS-related error.

B. Associate a custom QoS class.

C. Create a custom QoS policy.

D. Set the QoS policy to Level 3.

A network engineer is implementing a Layer 3 Out in the Cisco ACI fabric. The data center core switches must connect to a pair of leaf switches and exchange routes via a routing protocol. In addition, the implementation must meet these criteria;

• The external switch interface must use 802.1Q tagging.

• Access to the internet for the ACI fabric must be the L30ut.

• The L30ut must use a routing protocol that has rapid convergence time and low CPU usage.

Which configuration set meets these requirements?

A. Configure the OSPF Protocol policy with an area of 0.
Set up the Routed External Network object and Node Profile and select OSPF. Create the Switch profile and select VPC with the appropriate interfaces. Create the default network and associate it with the Routed Outside object.

B. Configure the BGP Protocol policy with the appropriate Autonomous System number.
Configure an Interface policy and an External Bridged Domain. Create an External Bridged Network and use the configured VLAN pool. Build the Leaf profile and select the Routed sub-interface with the appropriate VLAN.

C. Implement the IS-IS Protocol policy with the selected Autonomous System number.
Create the Routed Outside object and Node Profile and select IS-IS. Configure the Interface profile and select the Routed Interface with the appropriate interfaces. Create the External Network object.

D. Implement the EIGRP Protocol policy with the selected Autonomous System number.
Create Routed Outside object and Node Profile and select EIGRP as the routing protocol.
Build the Interface profile and select SVI and the appropriate VPC. Configure the External Network object with a network of 0.0.0.070.

What are two descriptions of ACI multi-site? (Choose two.)

A. The Inter-Site network routers should run OSPF to establish peering with the spines.

B. The Multi-Site orchestrator must be directly attached to one ACI leaf.

C. Routers in the inter-Site network must run OSPF. DHCP relay, and MP-BGP

D. ACI Multi-Site is a solution that allows one APIC cluster to manage multiple ACI sites

E. ACI Multi-Site is a solution that supports a dedicated APIC cluster per site

An engineer must configure a service graph for the policy-based redirect to redirect traffic to a transparent firewall. The policy must be vendor-agnostic to support any firewall appliance, Which two actions accomplish these goals? (Choose two.)

A. Set the Service Type to Other.

B. Set Promiscuous Mode to True.

C. Set Function Type to L2.

D. Set Managed to True.

E. Set Context Aware to Single.

An engineer must securely export Cisco APIC configuration snapshots to a secure, offsite location The exported configuration must be transferred using an encrypted tunnel and encoded with a platform-agnostic data format that provides namespace support Which configuration set must be used?

A. Option A

B. Option B

C. Option C

D. Option D

An application called App_1 is hosted on the server called S1. A silent host application. App_2. is hosted on S2. Both applications use the same VLAN encapsulation, which action forces Cisco ACI fabric to learn App_2 on ACI leaf 2?

A. Set Multi-Destination Flooding to Drop.

B. Set Unicast Routing to Hardware Proxy.

C. Set L2 Unknown Unicast to Flood.

D. Set L3 Unknown Multicast to Optimized flood.

An engineer implements a configuration backup on the Cisco APIC. The backup job must meet these requirements:

• The backup must transfer the encrypted data to the remote server.

• The transfer must be resumed if the connection is interrupted.

Which configuration set meets these requirements?

A. Select protocol HTTP in Create Remote Location. Choose JSON format in Configuration Export Policy.

B. Select protocol TFTP in Create Remote Location. Choose JSON format in Configuration Export Policy

C. Select protocol FTP in Create Remote Location. Choose XML format in Configuration Export Policy.

D. Select protocol SFTP in Create Remote Location. Choose XML format in Configuration Export Policy.

What is MP-BGP used for in Cisco ACl fabric?

A. MP-BGP VPNv4 AF is used to propagate L3Out routes that are received from a border leaf to the fabric.

B. MP-BGP VPNv4 AF is used between spines in an ACI Multi-Pod fabric to propagate the endpoint

C. MP-BGP VPNv4 AF is used as protocol on L3Out between a border leaf and an external router

D. MP-BGP Layer 2 VPN EVPN AF is used to propagate L30ut routes that are received from a border leaf.