What is the 300-620 ACI exam and what does it cover?

The 300-620 exam is a Cisco certification test focused on implementing Cisco Application Centric Infrastructure (ACI). It covers topics including ACI fabric design, policy configuration, object model concepts, and deployment of ACI solutions in enterprise environments.

What are the prerequisites for taking the 300-620 exam?

While there are no strict prerequisites, Cisco recommends having a solid understanding of networking fundamentals, familiarity with data center concepts, and preferably holding the CCNA certification or equivalent knowledge. Some hands-on experience with ACI or similar SDN platforms is beneficial.

How long is the 300-620 exam and what is the passing score?

The 300-620 exam is 120 minutes long with approximately 55-65 questions. The passing score is typically 70-75% depending on the exam version, though Cisco does not publicly disclose the exact cutoff score.

What study materials and resources are recommended for 300-620 exam preparation?

Cisco recommends official training courses, documentation on Cisco Learning Network, practice exams, hands-on labs with ACI simulators, and study guides from reputable certification providers. The official Cisco ACI configuration and implementation guides are essential reference materials.

What job roles and career benefits does the 300-620 certification provide?

The 300-620 certification validates expertise for roles such as ACI Solution Architect, Network Engineer, and Data Center Engineer. It demonstrates proficiency in modern data center networking and SDN technologies, enhancing career prospects in enterprise infrastructure roles.

Free Cisco 300-620 Exam Questions

Q1 MultipleChoice

A customer creates Layer 3 connectivity to the outside network. However, only border leaf switches start receiving destination updates to other networks from the newly created L3Out. The updates must also be propagated to other Cisco ACI leaf switches. The L3Out is linked with the EPGs via a contract. Which action must be taken in the pod policy group to accomplish this goal?

AApply a BGP route reflector policy.

BEnable a COOP policy.

CConfigure an IS-IS policy.

DImplement an access management policy.

Correct Answer: A

Explanation:

To ensure that destination updates from a newly created L3Out are propagated to all Cisco ACI leaf switches, a BGP route reflector policy should be applied.This policy allows the border leaf switches, which act as BGP route reflectors, to redistribute the learned routes to other leaf switches within the fabric1.

Q2 MultipleChoice

Which Cisco ACI setting corresponds to the VMware MAC pinning?

Aroute based on IP hash

Broute based on originating virtual port

Croute based on physical NIC load

Droute based on MAC hash

Correct Answer: B

Explanation:

In VMware vSphere, 'MAC Pinning' refers to the 'Route based on originating virtual port' load-balancing algorithm. This method assigns each virtual machine (VM) vNIC to a specific uplink (pNIC) and ensures that all traffic from that VM consistently exits through the same uplink.

Q3 MultipleChoice

A network engineer must configure a Cisco ACI system to detect network loops for untagged and tagged traffic The loop must be detected and slopped by disabling an interface within 4 seconds Which configuration must be used?

AOption A

BOption B

COption C

Correct Answer: B

Explanation:

To configure a Cisco ACI system to detect network loops for both untagged and tagged traffic and to stop the loop by disabling an interface within 4 seconds, the following configuration must be used:

Enable Mis-Cabling Protocol (MCP): MCP detects loops from external sources and will err-disable the interface on which Cisco ACI receives its own packet.This is crucial for preventing loops in the network1.

Configure MCP Transmit Frequency: Set the MCP transmit frequency to a value that allows for quick loop detection. The Cisco ACI fabric provides faster loop detection with transmit frequencies from 100 milliseconds to 300 seconds.To meet the requirement of detecting and stopping a loop within 4 seconds, you would set the transmit frequency to a value less than 4 seconds2.

Set Action on Loop Detection: Configure the MCP policies to identify loops and decide how to act upon them.You can set the policy to generate a syslog message or disable the port upon loop detection2.

Implement Error Disabled Recovery Policy: Configure an error disabled recovery policy to automatically re-enable ports that were disabled due to loop detection after a configurable interval2.

By implementing these configurations, the Cisco ACI system will be able to detect and stop network loops quickly and efficiently, ensuring network stability and preventing potential disruptions.

Cisco APIC Online Help - Loop Detection2

Cisco ACI Best Practices Quick Summary

Q4 MultipleChoice

An engineer configures a one-armed policy-based redirect service Insertion for an unmanaged firewall. The engineer configures these Cisco ACI objects:

a contract named All_Traffic_Allowed

a Layer 4 to Layer 7 device named FW-Device

a policy-based redirect policy named FW-1Arm-Policy-Based RedirectPolicy

Which configuration set redirects the traffic to the firewall?

AConfigure a policy-based redirect subject.
Associate the policy-based redirect subject with All_Traffic_Allowed.

BConfigure a firewall bridge domain.
Associate the bridge domain with FW-Device.

CConfigure a device interface policy.
Associate the device interface policy with FW-Device.

DConfigure a service graph.
Associate the service graph with All_Traffic_Allowed.

Correct Answer: D

Explanation:

To redirect traffic to the firewall using a one-armed policy-based redirect service insertion, the following configuration set should be used:

Configure a service graph: This involves defining the service graph template that represents the logical flow of traffic through network services.

Associate the service graph with All_Traffic_Allowed: By associating the service graph with the contract named All_Traffic_Allowed, traffic that matches the contract will be redirected through the service graph to the firewall device.

Cisco ACI Fabric Administration Guide, Release 4.2(1)

Cisco ACI Virtualization Guide, Release 4.2(1)

Q5 MultipleChoice

What is the effect of enabling the disable Remote EP learn feature?

AIt disables remote IP endpoint learning on all leaf nodes in the fabric.

BIt disables remote IP endpoint learning on leaf switches that do not have L3Outs.

CIt limits learning of compute leaf endpoints on border leaves.

DIt prevents border leaf switches from receiving routes through peering with external routers.

Correct Answer: D

Explanation:

Enabling the ''disable Remote EP learn'' feature in Cisco ACI has the effect of preventing border leaf switches from receiving routes through peering with external routers. This feature is particularly useful when there is a mix of Gen1 and Gen2 hardware in the fabric, as it clears all the remote endpoints from the border leaf only.Traffic will still use hardware proxy if the endpoint is not learned on the border leaf, ensuring no operational impact12.

ACI Fabric Endpoint Learning White Paper2

Cisco Community Discussion on Disable Remote EP Learn

https://unofficialaciguide.com/2018/11/29/aci-best-practice-configurations/

300-620 Exam Questions & Answers

Sample 300-620 Questions

Frequently Asked Questions

Pass 300-620 First Time