Cisco 300-620 Exam Questions
Implementing Cisco Application Centric Infrastructure (DCACI) (Page 3 )

Updated On: 17-May-2026

DRAG DROP (Drag and Drop is not supported)

An engineer is configuring a VRF for a tenant named Cisco. Drag and drop the child objects on the left onto the correct containers on the right for this configuration.

Select and Place:

  1. See Explanation section for answer.

Answer(s): A

Explanation:



Which feature dynamically assigns or modifies the EPG association of virtual machines based on their attributes?

  1. vzAny contracts
  2. standard contracts
  3. application EPGs
  4. uSeg EPGs

Answer(s): D

Explanation:

Option D is correct because uSeg EPGs (universal segmentation EPGs) dynamically assign or modify VM-to-EPG associations based on VM attributes, enabling policy-driven placement without manual reconfiguration. A) vzAny contracts are dynamic filters for consuming contracts but do not control EPG VM-to-EPG mapping. B) standard contracts define how endpoints in EPGs exchange policy, not dynamic VM-to-EPG assignment. C) application EPGs are logical groupings but do not inherently implement attribute-based dynamic association of VMs to EPGs.



Which feature allows firewall ACLs to be configured automatically when new endpoints are attached to an EPG?

  1. ARP gleaning
  2. dynamic endpoint attach
  3. hardware proxy
  4. network-stitching

Answer(s): B

Explanation:

Option B is correct because dynamic endpoint attach enables automatic creation and association of firewall ACLs when new endpoints join an EPG, aligning security policies with endpoint attachment events in ACI.
A) Incorrect — ARP gleaning relates to learning MAC/IP mappings for ARP requests, not automatic ACL propagation on endpoint attach.
C) Incorrect — hardware proxy (or vPC/hardware proxy) involves forwarding behaviors or policy proxies, not automatic ACL generation on EPG attachment.
D) Incorrect — network-stitching refers to extending L3 networks across fabrics, not automatic ACLs tied to EPG endpoint attachment.



An engineer is implementing Cisco ACI at a large platform-as-a-service provider using APIC controllers, 9396PX leaf switches, and 9336PQ spine switches. The leaf switch ports are configured as IEEE 802.1p ports. Where does the traffic exit from the EPG in IEEE 802.1p mode in this configuration?

  1. from leaf ports tagged as VLAN 0
  2. from leaf ports untagged
  3. from leaf ports tagged as VLAN 4094
  4. from leaf ports tagged as VLAN 1

Answer(s): A

Explanation:

Option A is correct because in IEEE 802.1p mode, EPG traffic is sent egressing through leaf ports that are configured as VLAN 0 (PVID 0) to preserve the QoS class tagging at the edge of the fabric. Incorrect — B: IEEE 802.1p mode uses VLAN tagging to carry DSCP/priority, not untagged egress. Incorrect — C: VLAN 4094 is not used as the standard egress VLAN for 802.1p mode in ACI. Incorrect — D: VLAN 1 is not the designated egress VLAN for 802.1p mode in this topology.



How is an EPG extended outside of the ACI fabric?

  1. Create an external bridged network that is assigned to a leaf port.
  2. Create an external routed network that is assigned to an EPG.
  3. Enable unicast routing within an EPG.
  4. Statically assign a VLAN ID to a leaf port in an EPG.

Answer(s): D

Explanation:

Option D) correct — Extending an EPG outside the ACI fabric is achieved by statically assigning a VLAN ID to a leaf port in an EPG, which maps the EPG to a specific external VLAN, enabling connectivity to external networks.
A) Incorrect — Creating an external bridged network on a leaf port is not the standard EPG extension method; ACI uses VLAN mappings rather than a separate “external bridged network” construct for EPG extension.
B) Incorrect — External routed networks are not the mechanism for extending an EPG; EPG-to-external connectivity relies on VLAN mappings, not an external routed network assignment.
C) Incorrect — Enabling unicast routing within an EPG pertains to internal IP reachability, not extending the EPG to external networks via VLAN tagging.


Reference:

https://www.dclessons.com/l2-external-network-with-aci



DRAG DROP (Drag and Drop is not supported)

Drag and drop the Cisco ACI filter entry options from the left onto the correct categories on the right indicating what are required or optional parameters.

Select and Place:

  1. See Explanation section for answer.

Answer(s): A

Explanation:


Reference:

https://www.cisco.com/c/en/us/td/docs/switches/datacenter/aci/apic/sw/1-x/Operating_ACI/guide/ b_Cisco_Operating_ACI/b_Cisco_Operating_ACI_chapter_01000.html



Where is the COOP database located?

  1. leaf
  2. spine
  3. APIC
  4. endpoint

Answer(s): B

Explanation:

Option B is correct because the COOP (Cisco One Operational Processor) database is associated with the Spine/COOP data plane in DCACI architectures, aligning with controller and fabric coordination roles at the spine layer. A) Incorrect — leaf nodes host leaf switch data/control, not COOP DB. C) Incorrect — APIC is the management/control plane in DCACI but COOP DB location is not there. D) Incorrect — endpoint devices are endpoints, not where COOP DB resides.


Reference:

https://www.cisco.com/c/en/us/solutions/collateral/data-center-virtualization/application-centric- infrastructure/white-paper-c11-739989.html



Which statement describes the initial APIC cluster discovery process?

  1. The APIC uses an internal IP address from a pool to communicate with the nodes.
  2. Every switch is assigned a unique AV by the APIC.
  3. The APIC discovers the IP address of the other APIC controllers by using Cisco Discovery Protocol.
  4. The ACI fabric is discovered starting with the spine switches.

Answer(s): A

Explanation:

Option A is correct because during initial APIC cluster discovery, the APIC uses an internal IP address assigned from a management pool to communicate with and bootstrap the cluster, enabling node discovery and controller communication. Incorrect — B: AVs (authority/attribute values) are not assigned to switches by the APIC in initial discovery. Incorrect — C: CDP is not used for APIC-to-APIC cluster discovery in ACI; fabric discovery relies on out-of-band management and API/ECMP mechanisms, not CDP. Incorrect — D: Fabric discovery starts from leaf/spine role awareness, but the initial cluster bootstrap is driven by APIC management IPs, not fabric-wide discovery from spine first.


Reference:

https://www.cisco.com/c/en/us/td/docs/switches/datacenter/aci/apic/sw/1-x/aci-fundamentals/b_ACI- Fundamentals/m_provisioning.html#concept_



Viewing page 3 of 50
Viewing questions 17 - 24 out of 389 questions


300-620 Exam Discussions & Posts (Share your experience with others)

AI Tutor AI Tutor 👋 I’m here to help!