Cisco 300-620 Exam Questions
Implementing Cisco Application Centric Infrastructure (DCACI) (Page 4 )

Updated On: 17-May-2026



Refer to the exhibit. Which two components should be configured as route reflectors in the ACI fabric? (Choose two.)

  1. Spine1
  2. apic1
  3. Spine2
  4. Leaf1
  5. Leaf2
  6. apic2

Answer(s): A,C

Explanation:

Option A is correct because Spine1 functions as a route reflector in a typical ACI fabric design, providing BGP route reflections for external routes and maintaining control plane efficiency. Option C is correct because Spine2 also acts as a route reflector to ensure redundancy and full-mesh IBGP propagation of routing information between leaf and spine pairs.
Incorrect — B) apic1: APIC controllers are not route reflectors in standard ACI BGP fabric; they manage policy and fabric control, not RR duties. Incorrect — D) Leaf1: Leafs do not reflect routes; they are endpoints for host connectivity. Incorrect — E) Leaf2: Same as Leaf1; not a route reflector. Incorrect — F) apic2: APICs are management/control plane components, not RRs. (Insufficient knowledge line omitted per instruction)



When creating a subnet within a bridge domain, which configuration option is used to specify the network visibility of the subnet?

  1. limit IP learning to subnet
  2. scope
  3. gateway IP
  4. subnet control

Answer(s): B

Explanation:

Option B is correct because the scope setting within a bridge domain subnet defines the network visibility, controlling which endpoints and routes are visible within that subnet in ACI. Incorrect — A) limit IP learning to subnet is not a standard ACI subnet visibility parameter. Incorrect — C) gateway IP specifies next-hop rather than visibility scope. Incorrect — D) subnet control is not the term used to designate network visibility in a subnet within a bridge domain.


Reference:

https://www.cisco.com/c/en/us/td/docs/switches/datacenter/aci/apic/sw/1-x/Operating_ACI/guide/ b_Cisco_Operating_ACI/
b_Cisco_Operating_ACI_chapter_0111.html#concept_



What does a bridge domain represent?

  1. Layer 3 cloud
  2. Layer 2 forwarding construct
  3. tenant
  4. physical domain

Answer(s): B

Explanation:

Option B is correct because a bridge domain in ACI represents a Layer 2 forwarding construct within an EPG/tenant, used to forward frames within a broadcast domain. Incorrect — A: Layer 3 cloud refers to routable IP networks, not L2 forwarding domains. Incorrect — C: tenant denotes a management boundary containing APIC objects, not the L2 forwarding construct itself. Incorrect — D: physical domain describes the physical topology or fabric nodes, not the L2 bridge domain concept.


Reference:

https://www.cisco.com/c/en/us/td/docs/switches/datacenter/aci/apic/sw/2-x/L2_config/ b_Cisco_APIC_Layer_2_Configuration_Guide/b_Cisco_APIC_Layer_2_Configuration_Guide_chapter_010.html



Which table holds IP address, MAC address and VXLAN/VLAN information on a Cisco ACI leaf?

  1. endpoint
  2. adjacency
  3. RIB
  4. ARP

Answer(s): A

Explanation:

Option A is correct because the endpoint table in Cisco ACI stores host identity information including IP address, MAC address, and VXLAN/VLAN mapping for endpoints learned on the leaf. B) adjacency is not a standard ACI table for endpoint identity; it represents neighbor relationships in routing contexts, not endpoint mappings. C) RIB stores routing information, not per-endpoint MAC/IP to VXLAN/VLAN mappings. D) ARP relates IP-to-MAC resolution but is not a persistent ACI table that holds VXLAN/VLAN associations for endpoints. INSUFFICIENT_KNOWLEDGE


Reference:

https://www.cisco.com/c/en/us/solutions/collateral/data-center-virtualization/application-centric- infrastructure/white-paper-c11-739989.html



Which two types of interfaces are supported on border leaf switches to connect to an external router? (Choose two.)

  1. subinterface with VXLAN tagging
  2. subinterface with 802.1Q tagging
  3. FEX host interface
  4. out of band interface
  5. Switch Virtual Interface

Answer(s): B,E

Explanation:

Option B is correct because border leaves connect to external routers using 802.1Q subinterfaces to carry VXLAN/VTEP traffic and route over VLANs, aligning with DCACI border adjacency requirements. Option E is correct since a Switch Virtual Interface (SVI) on border leaves provides Layer 3 termination for interconnecting routers and external networks.
A) Incorrect — subinterface with VXLAN tagging: DCACI uses VXLAN overlay, but external router connectivity relies on 802.1Q subinterfaces, not VXLAN tagging on the external border link.
C) Incorrect — FEX host interface: FEX is for fabric expansion, not for external router connectivity on border leaves.
D) Incorrect — out of band interface: Out-of-band management is separate from data-plane border connectivity.
A) Incomplete/B is correct.



Which Cisco APIC configuration prevents a remote network that is not configured on the bridge domain from being learned by the fabric?

  1. enable Limit IP Learning to Subnet
  2. enable Unicast Routing
  3. enable IP Data-plane Learning
  4. enable ARP Flooding to BD

Answer(s): A

Explanation:

Option A is correct because enabling Limit IP Learning to Subnet confines IP learning to the configured subnets within the bridge domain, preventing learning of remote networks not defined on the BD. Incorrect — B: enable Unicast Routing affects routing behavior, not limiting IP learning by subnet scope. Incorrect — C: enable IP Data-plane Learning governs how IPs are learned on the data plane but does not enforce subnet-based learning boundaries for remote networks. Incorrect — D: enable ARP Flooding to BD controls ARP flooding behavior, not IP learning scope for remote networks.


Reference:

https://www.cisco.com/c/en/us/solutions/collateral/data-center-virtualization/application-centric-infrastructure/ white-paper-c11-739989.html



An engineer needs to deploy a leaf access port policy group in ACI Fabric to support the following requirements:

Control the amount of application data flowing into the system



Allow the newly connected device to auto-negotiate link speed with the leaf switch



Which two ACI policies must be configured to achieve these requirements? (Choose two.)

  1. link level policy
  2. L2 interface policy
  3. slow drain policy
  4. ingress data plane policing policy
  5. ingress control plane policing policy

Answer(s): A,D

Explanation:

Option A is correct because a link level policy in ACI governs per-link characteristics such as allowed speeds and auto-negotiate behavior between the host/edge device and the leaf switch, satisfying the auto-negotiation requirement for the leaf access port policy group. Option D is correct because an ingress data plane policing (DPP) policy controls and limits the amount of application data entering the fabric, meeting the data-flow control requirement.
Incorrect:
B) L2 interface policy governs basic Layer 2 interface settings but does not specifically enforce data-rate control or auto-negotiation behavior.
C) slow drain policy pertains to buffering and draining excess traffic, not to auto-negotiation or ingress data-rate control at the link level.
E) ingress control plane policing policy is used to limit control plane traffic, not general data-plane application data ingress.


Reference:

https://www.cisco.com/c/en/us/td/docs/switches/datacenter/aci/apic/sw/kb/ b_Cisco_ACI_and_Forward_Error_Correction.html
https://www.cisco.com/c/en/us/td/docs/switches/datacenter/aci/apic/sw/4-x/security/Cisco-APIC-Security- Configuration-Guide-401/b_Cisco_APIC_Security_Guide_chapter_01110.html#:~:text=Use%20data%20plane %20policing%20(DPP,dropping%20of%20packets%20occurs%20immediately.



A customer migrates a legacy environment to Cisco ACI. A Layer 2 trunk is configured to interconnect the two environments. The customer also builds ACI fabric in an application-centric mode. Which feature should be enabled in the bridge domain to reduce instability during the migration?

  1. Set Multi-Destination Flooding to Flood in BD.
  2. Enable Flood in Encapsulation.
  3. Set Multi-Destination Flooding to Flood in Encapsulation.
  4. Disable Endpoint Dataplane Learning

Answer(s): C

Explanation:

Option C is correct because enabling Multi-Destination Flooding to Flood in Encapsulation ensures that unknown or multicast traffic across the bridge domain is flooded consistently when bridging between legacy L2 and ACI in application-centric mode, reducing instability during migration. This accommodates mixed environments where some endpoints may not yet be learned or correctly migrated, preventing blackholing or selective flooding issues.
A) Incorrect — Flood in BD is not specifically tied to encapsulation behavior and may not address cross-encap instability during migration.
B) Incorrect — Flood in Encapsulation is not the designated behavior for BD instability in this scenario.
D) Incorrect — Disabling Endpoint Dataplane Learning would hinder mobility and learning, increasing instability.



Viewing page 4 of 50
Viewing questions 25 - 32 out of 389 questions


300-620 Exam Discussions & Posts (Share your experience with others)

AI Tutor AI Tutor 👋 I’m here to help!