300-620 Exam Questions and Answers | Exam-Dumps (Page: 6)

QUESTION: 26

DRAG DROP (Drag and Drop is not supported)
Refer to the exhibit. A Cisco ACI fabric is newly deployed, and the security team requires more visibility of all inter EPG traffic flows. All traffic in a VRF must be forwarded to an existing firewall pair. During failover, the standby firewall must continue to use the same IP and MAC as the primary firewall. Drag and drop the steps from the left into the implementation order on the right to configure the service graph that meets the requirements. (Not all steps are used.)
Select and Place:

See Explanation section for answer.

Answer(s): A

Explanation:

Reference:

https://www.cisco.com/c/en/us/td/docs/switches/datacenter/aci/apic/sw/3-x/L4-L7_services_deployment/3_2_1/b_L4L7_Deploy_321/ b_L4L7_Deploy_321_chapter_01001.html

Reveal Solution Next Question

QUESTION: 27

An engineer is extending an EPG out of the ACI fabric using static path binding. Which statement about the endpoints is true?

Endpoints must connect directly to the ACI leaf port.
External endpoints are in a different bridge domain than the endpoints in the fabric.
Endpoint learning encompasses the MAC address only.
External endpoints are in the same EPG as the directly attached endpoints.

Answer(s): D

Reveal Solution Next Question

QUESTION: 28

Which setting prevents the learning of Endpoint IP addresses whose subnet does not match the bridge domain subnet?

"Limit IP learning to network" setting within the bridge domain.
"Limit IP learning to subnet" setting within the EPG.
"Limit IP learning to network" setting within the EPG.
"Limit IP learning to subnet" setting within the bridge domain.

Answer(s): D

Reference:

https://www.cisco.com/c/en/us/td/docs/switches/datacenter/aci/apic/sw/2-x/L2_config/b_Cisco_APIC_Layer_2_Configuration_Guide/ b_Cisco_APIC_Layer_2_Configuration_Guide_chapter_010.html

Reveal Solution Next Question

QUESTION: 29

Which endpoint learning operation is completed on the egress leaf switch when traffic is received from an L3Out?

The source MAC and IP address of the traffic is learned as a local endpoint.
The source MAC address of the traffic is learned as a remote endpoint.
No source MAC or IP address of the traffic is learned as a remote endpoint.
The source IP address of the traffic is learned as a remote endpoint.

Answer(s): C

Reveal Solution Next Question

QUESTION: 30

Refer to the exhibit. Which two objects are created as a result of the configuration? (Choose two.)

application profile
attachable AEP
bridge domain
endpoint group
VRF

Answer(s): C,E

Reference:

https://www.cisco.com/c/en/us/td/docs/switches/datacenter/aci/apic/sw/2-x/rest_cfg/2_1_x/b_Cisco_APIC_REST_API_Configuration_Guide/ b_Cisco_APIC_REST_API_Configuration_Guide_chapter_01110.html

Reveal Solution Next Question

Cisco 300-620 Exam (page: 6) Cisco Implementing Application Centric Infrastructure (DCACI) Updated on: 12-Jan-2026

QUESTION: 26

Explanation:

Reference:

QUESTION: 27

QUESTION: 28

Reference:

QUESTION: 29

QUESTION: 30

Reference:

Cisco 300-620 Exam (page: 6)
Cisco Implementing Application Centric Infrastructure (DCACI)
Updated on: 12-Jan-2026