Free 300-620 Exam Braindumps
Implementing Cisco Application Centric Infrastructure (DCACI) Questions 121–128 (page: 17)

Updated On: 11-May-2026

Refer to the exhibit.



A customer is running an application that collects data from multiple servers. The application does not support acknowledgments back to the servers. The customer environment is approaching its TCAM limits. The customer must implement a contract that will allow this communication and limit the number of TCAM entries.
Which configuration meets these requirements?

  1. Contract CTR-4:
    Consumer: EPG-2, EPG-3

    Provider: EPG-1
    Subject:
    Apply Both Direction: enabled
    Reverse Filter Ports: enabled
    Protocol: UDP, Src Port: Any, Dst Port: 5000
  2. Contract CTR-3:
    Consumer: EPG-1
    Provider: EPG-2, EPG-3
    Subject:
    Apply Both Direction: enabled
    Reverse Filter Ports: enabled
    Protocol: UDP, Src Port: Any, Dst Port: 5000
  3. Contract CTR-2:
    Consumer: EPG-1
    Provider: EPG-2, EPG-3
    Subject:
    Apply Both Direction: disabled
    Reverse Filter Ports: disabled
    Filter from Consumer to Provider:
    Protocol: UDP, Src Port: Any, Dst Port: 5000
    Filter from Provider to Consumer: empty
  4. Contract CTR-1:
    Consumer: EPG-2, EPG-3
    Provider: EPG-1
    Subject:
    Apply Both Direction: disabled
    Reverse Filter Ports: disabled
    Filter from Consumer to Provider:
    Protocol: UDP, Src Port: Any, Dst Port: 5000
    Filter from Provider to Consumer: empty

Answer(s): D

Explanation:

You want a single, unidirectional contract where the servers (EPG-2 & EPG-3) act as consumers and the collecting application (EPG-1) is the provider of UDP port 5000.
Disabling Apply Both Directions and Reverse Filter Ports means no reversepath TCAM entries are created (since the app never replies), minimizing TCAM use.
Defining only one filter for ConsumerProvider (UDP any 5000) and leaving the ProviderConsumer side empty achieves exactly the required traffic flow and TCAM efficiency.



How does a Cisco ACI fabric update endpoint information when an endpoint transitions between two Cisco ACI leaf switches?

  1. The original leaf reports the move to the COOP database on spine switches.
  2. COOP creates a bounce entry in the new leaf instead of data plane learning.
  3. The new leaf updates the COOP database on spine switches with the new endpoint.
  4. The spine switch pushes all endpoint database entries to each leaf switch.

Answer(s): C

Explanation:

When an endpoint moves to a new leaf, that new leaf performs data-plane learning and then updates the
COOP database on the spine, allowing the fabric to redirect future traffic to the new location.



Which two objects are part of a Cisco ACI contract? (Choose two.)

  1. policy
  2. filter
  3. constraint
  4. subject
  5. version

Answer(s): B,D

Explanation:

A contract is composed of subjects, which define how communication occurs, and filters, which specify the permitted traffic within that contract.



What does the "L" flag indicate in this output?

  1. learned
  2. local
  3. local-aged
  4. learned-aged

Answer(s): A

Explanation:

In Cisco ACI endpoint tables, the flag "L" indicates that the endpoint was learned by the leaf switch (data-plane learning).



Refer to the exhibit.



An engineer configures EPG-A and BD-A. The BD-A is configured for flooding and the VRF is configured as unenforced.

Which action must be taken to permit traffic between VM-A and VM-B?

  1. Add a contract preferred group.
  2. Enable Unicast Routing.
  3. Set Hardware Proxy.
  4. Configure a consumer contract.

Answer(s): B

Explanation:

The endpoints are in different subnets, so Layer 3 forwarding is required for communication between them.
Enabling unicast routing on the bridge domain allows ACI to route traffic between the two bridge domains within the same VRF. Since the VRF is configured as unenforced, no contract is needed for this communication.



Refer to the exhibit.



HOST A and HOST B are connected to the same bridge domain with data plane learning and hardware proxy enabled. HOST B sends a packet to HOST A. If LEAF102 does not know the MAC address for HOST A, what is the forwarding mechanism?

  1. to forward the packet to the spine
  2. to flood the packet in the same bridge domain
  3. to look up its endpoint manager table cache
  4. to query the CO-OP database on the spine

Answer(s): D

Explanation:

With hardware proxy enabled, ACI suppresses unknown unicast flooding and uses the spine proxy function instead. If LEAF102 does not have the destination MAC for HOST A locally, it queries the COOP database on the spine to resolve the endpoint location and then forwards the traffic accordingly.



Refer to the exhibit.



Which setting must be configured in the Cisco ACI bridge domain to enable learning of source MAC addresses for endpoints in the configured subnet?

  1. L2 Unknown Unicast to Flood
  2. Multi-Destination Flooding to Flood in BD
  3. L2 Unknown Unicast to Hardware Proxy
  4. Multi-Destination Flooding to Flood in Encapsulation

Answer(s): A

Explanation:

Setting L2 Unknown Unicast to Flood allows the fabric to flood unknown unicast traffic within the bridge domain, which enables the leaf switches to learn source MAC addresses for endpoints in that subnet from the arriving traffic. Hardware proxy suppresses that unknown-unicast flooding behavior, so it does not provide this learning method.





Refer to the exhibit. A Cisco ACI fabric connects with the same L3Out to SW1 and SW2. The fabric has a single tenant and single VRF. Which two actions must be taken to allow Host1 to communicate with the external EPG subnet? (Choose two.)

  1. Disable unicast routing on bridge domain Telco_BD.
  2. Add subnet 2a01:8c8:03a0:3::2/64 under Telco_EPG.
  3. Advertise externally 2a01:8c8:03a0:3::1/64 on Telco_BD.
  4. Associate bridge domain Telco_BD to L3out_Telco.
  5. Check the box of No Default SVI Gateway under Telco_BD.

Answer(s): C,D

Explanation:

The bridge-domain subnet that contains Host1 and its default gateway (2a01:8c8:03a0:3::1/64) must be configured as advertised externally so it is reachable via the L3Out.
The bridge domain Telco_BD must be associated with L3out_Telco so that routing between Host1's subnet and the external EPG subnet can occur.



Viewing page 17 of 50
Viewing questions 129 - 136 out of 404 questions


Post your Comments and Discuss Cisco 300-620 exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!