Free Cisco 300-620 Exam Practice Questions & Explanations

Last updated on: Oct 30, 2026
Prepared & Reviewed by the ValidExamDumps Editorial Team

At ValidExamDumps, we consistently monitor updates to the Cisco 300-620 exam questions by Cisco. Whenever our team identifies changes in the exam questions, objectives, focus areas or requirements, We immediately update our exam questions for both PDF and online practice exams. This commitment ensures our customers always have access to the most current and accurate questions. By preparing with these up to date and 100% exam domain coverage questions, our customers can successfully pass the Cisco Implementing Cisco Application Centric Infrastructure exam on their first attempt without needing additional materials or study guides.

Other certification materials providers often include outdated or removed questions by Cisco in their 300-620 exam. These outdated questions lead to customers failing their Cisco Implementing Cisco Application Centric Infrastructure exam. In contrast, we ensure our questions bank includes only precise and up-to-date questions. Our main priority is your success in the Cisco 300-620 exam, not profiting from selling obsolete exam questions in PDF or Online Practice Test.

Question 1

An engineer is troubleshooting fabric discovery in a newly deployed Cisco ACI fabric and analyzes this output:

Which ACI fabric address is assigned to interface lo1023?

Answer Options

ADynamic tunnel endpoint

BPhysical tunnel endpoint

CFabric tunnel endpoint

DVXLAN tunnel endpoint

Correct Answer: C

Explanation

In Cisco ACI, the interface lo1023 is assigned as a fabric tunnel endpoint (FTEP). This is a pervasive address found on every leaf and it's always the same.It is used mostly for AVS (Application Virtual Switch) when the infra VXLAN is extended out of the fabric1. The FTEP is crucial for the internal operation of the fabric, particularly for scenarios where the infrastructure VXLAN needs to be extended outside of the ACI fabric.

Default IP interfaces on Fabric nodes - Cisco Community1

Question 2

An ACI engineer is implementing a Layer 3 out inside the Cisco ACI fabric that must meet these requirements:

The data center core switch must be connected to one of the leaf switches with a single 1G link.

The routes must be exchanged using a link-state routing protocol that supports hierarchical network design.

The data center core switch interface must be using 802.1Q tagging, and each vlan will be configured with a dedicated IP address.

Which set of steps accomplishes these goals?

Answer Options

ASet up the ElGRP Protocol policy with the selected Autonomous System number. Set up the Routed External Network object ana Node Profile, selecting ElGRP Create the Switch profile, selecting Port-channel and the appropriate interfaces Create the default network and associate it with the Routed Outside object.

BSet up the BGP Protocol policy with the Autonomous System number of 0.
Configure an interface policy and an External Bridged Domain.
Create an External Bridged Network using the configured VLAN pool.
Build the Leaf profile, selecting Routed sub-interface and the appropriate VLAN.

CConfigure the OSPF Protocol policy with an area of 0.
Create Routed Outside object and Node Profile, selecting OSPF as the routing protocol. Build the Interface profile, selecting Routed Sub-interface and the appropriate VLAN. Configure the External Network object with a network of 0.0.0.0/0.

DSet up the ElGRP Protocol policy with the selected Autonomous System number. Create the Routed Outside object and Node Profile selecting ElGRP Configure the Interface profile selecting Routed Interface and the appropriate interfaces. Create the External Network object with a network of 0.0.0.0/0.

Correct Answer: C

Explanation

To implement a Layer 3 out (L3Out) inside the Cisco ACI fabric that meets the specified requirements, the following steps should be taken:

Configure the OSPF Protocol policy with an area of 0: This step involves setting up OSPF, a link-state routing protocol that supports hierarchical network design, as the routing protocol for the L3Out1.

Create Routed Outside object and Node Profile, selecting OSPF: This step involves creating a Routed Outside object and associating it with a Node Profile that specifies OSPF as the routing protocol1.

Build the Interface profile, selecting Routed Sub-interface and the appropriate VLAN: This step involves creating an Interface profile for the connection to the data center core switch, using 802.1Q tagging for VLAN separation2.

Configure the External Network object with a network of 0.0.0.0/0: This step involves setting up the External Network object to advertise routes to the rest of the network1.

Question 3

A network engineer demonstrates Cisco ACI to a customer. One of the test cases is to validate a disaster

recovery event by resetting the ACI fabric to factory and then restoring the fabric to the state it was in before

the event. Which setting must be enabled on ACI to export all configuration parameters that are necessary to

meet these requirements?

Answer Options

Aenabled AES encryption

Bgenerated a tech-support file

Cencrypted export destination

Denabled JSON format export

Correct Answer: D

Explanation

To export all configuration parameters necessary for disaster recovery in Cisco ACI, the setting that must be enabled isenabled JSON format export1.This format allows for a complete and structured export of the configuration that can be used for recovery purposes1.

https://www.cisco.com/c/en/us/td/docs/switches/datacenter/aci/apic/sw/kb/b_KB_Using_Import_Export_to_Recover_Config_States.html

Question 4

Which setting prevents the learning of Endpoint IP addresses whose subnet does not match the bridge domain subnet?

Answer Options

A''Limit IP learning to network'' setting within the bridge domain.

B''Limit IP learning to subnet'' setting within the EPG.

C''Limit IP learning to network'' setting within the EPG.

D''Limit IP learning to subnet'' setting within the bridge domain.

Correct Answer: D

Explanation

The setting that prevents the learning of Endpoint IP addresses whose subnet does not match the bridge domain subnet is the''Limit IP learning to subnet''setting within the bridge domain1.This setting ensures that only IP addresses belonging to the subnets configured on the bridge domain are learned, preventing mis-learning of IP addresses that may not belong to the fabric1.

Question 5

Refer to the exhibit.

Refer to the exhibit. An engineer configures a Layer 4 to Layer 7 device object. The device is a virtual firewall with a single network adapter and it must be deployed in routed mode. Which .. completes the configuration of the device object?

Answer Options

AChange Function Type to GoTo.

BAdd an outside interface to the cluster interfaces.

CChange context awareness to Multiple.

DEnable Promiscuous Mode.

Correct Answer: A

Explanation

https://www.cisco.com/c/en/us/td/docs/dcn/aci/apic/6x/l4-l7-configuration/cisco-apic-layer-4-to-layer-7-services-deployment-guide-60x/defining-a-logical-device-60x.html