[Aug 04, 2026] Pass Cisco 300-620 Exam Info and Free Practice Test [Q85-Q101]

Q85. Refer to the exhibit.

A Cisco ACI fabric is newly deployed, and the security team requires more visibility of all inter-EPG traffic flows. All traffic in a VRF must be forwarded to an existing firewall pair. During fallover, the standby firewall must continue to use the same IP and MAC as the primary firewall. Drag and drop the steps from the left Into the Implementation order on the right to configure the service graph that meets the requirements. (Not all steps are used.)

Q86. Which protocol is used in a Multi-Pod topology to synchronize reachability information across pods?

Q87. What must be enabled in the bridge domain to have the endpoint table learn the IP addresses of endpoints?

Q88. Cisco APICs utilize sharding to provide what function for an ACI fabric?

Q89. When the subnet is configured on a bridge domain, on which physical devices is the gateway IP address configured?

Q90. An engineer must configure a new local user inside a Cisco ACI. The new user must meet these criteria:
– Must be provided with complete read-only access to the tenant.
– Must be permitted to create and delete EPGs within a specific tenant.
– Must not be allowed to modify any other objects within that tenant.
The tenant and security domain association is already in place. Which configuration set configures the new tenant?

Q91. An engineer configured a bridge domain with the hardware-proxy option for Layer 2 unknown unicast traffic. Which statement is true about this configuration?

Q92. An engineer deploys a two-pod Cisco ACI Multi-Pod environment. Why should no more than two Cisco APIC controllers be deployed in the same pod?

Q93. Which type of port is used for in-band management within ACI fabric?

Q94. An engineer must attach an ESXi host to the Cisco ACI fabric. The host is connected to Leaf 1 and has its gateway IP address 10.10.10.254/24 configured inside the ACI fabric. A new wall is attached to Leaf 2 and mapped to the same EPG and BD as the ESXi host. The engineer must migrate the gateway of the ESXi host to the firewall. Which configuration set complishes this goal?

Q95. An engineer is implementing Cisco ACI at a large platform-as-a-service provider using APIC controllers,
9396PX leaf switches, and 9336PQ spine switches. The leaf switch ports are configured as IEEE 802.1p ports.
Where does the traffic exit from the EPG in IEEE 802.1p mode in this configuration?

Q96. On which two interface types should a user configure storm control to protect against broadcast traffic? (Choose two.)

Q97. All workloads in VLAN 1001 have been migrated into EPG-1001. The requirement is to move the gateway address for VLAN 1001 from the core outside the Cisco ACI fabric into the Cisco ACI fabric. The endpoints in EPG-1001 must route traffic to endpoints in other EPGs and minimize flooded traffic in the fabric. Which configuration set is needed on the bridge domain to meet these requirements?

Q98. Refer to the exhibit.

An engineer is implementing Cisco ACI – VMware vCenter integration for a blade server that lacks support of bonding. Which port channel mode results in “route based on originating virtual port” on the VMware VDS?

Q99. In Cisco ACI, what enables inter-End Point Group communications?

Q100. A network engineer is implementing a Layer 3 Out in the Cisco ACI fabric. The data center core switches must connect to a pair of leaf switches and exchange routes via a routing protocol. In addition, the implementation must meet these criteria:
– The external switch interface must use 802.1Q tagging.
– Access to the Internet for the ACI fabric must be the L3Out.
– The L3Out must use a routing protocol that has rapid convergence time and low CPU usage.
Which configuration set meets these requirements?

Q101. A network engineer is integrating a new Hyperflex storage duster into an existing Cisco ACI fabric The Hyperflex cluster must be managed by vCenter so a new vSphere Distributed switch must be created In addition the hardware discovery must be performed by a vendor-neutral discovery protocol Which set of steps meets these requirements’?