Why Study with PlanetCert?
The Latest Questions
Practice questions and exam topics aligned with the current exam objectives.
Detailed Explanations
Go beyond the answer. Master the material with comprehensive learning and professional explanations for every concept.
AI-Powered Insights
Personalized preparation guidance that adapts to your performance and identifies weak spots automatically.
Exam Information
Official specifications published by Cisco
Exam Format
Registration
Validity
Skills this practice test covers
- Build a tenant with a VRF, bridge domains, EPGs and contracts for a three-tier application.
- Set bridge domain options for unicast routing, Layer 2 unknown unicast and ARP flooding.
- Connect the fabric to outside routers with an L3Out and to legacy switches at Layer 2.
- Integrate VMware vCenter and Nutanix through VMM domains and choose immediacy settings.
- Back up the fabric with configuration snapshots and config import and export jobs.
- Pick Remote Leaf, Multi-Pod or Multi-Site for a fabric that spans more than one location.
Explore related topics
300-620 exam content
6 domains · 43 topics · 145 of 363 questions are written for 300-620
ACI Fabric Infrastructure20%42 questions
This domain covers the base of every ACI fabric: the leaf-spine hardware, the APIC, the object model, fabric discovery, and access and fabric policies. Candidates then build the logical constructs an application needs, from tenants to Endpoint Security Groups.
Skills tested
- Describe the leaf-spine topology, the role of each hardware component and the Virtual APIC option.
- Find objects in the management information tree by their distinguished names.
- Use faults, events, audit logs and health scores to judge the state of the fabric.
- Register new switches during fabric discovery and configure access and fabric policies.
- Build tenants, VRFs, bridge domains, EPGs, contracts and ESGs for a multi-tier application.
Questions by topic
- EPG and Bridge Domain Relationship3
- ACI Logical Constructs6
- ACI Policies2
- ACI Object Model2
- vzAny Contracts2
- Contract Scopes3
- ACI Topology Options3
- Access Policies6
- Fabric Discovery and Initialization5
- Fabric Policies6
- Endpoint Security Groups (ESGs)4
ACI Packet Forwarding15%20 questions
This domain explains how traffic moves inside the fabric. Candidates describe how leaf switches learn endpoints, and choose the bridge domain settings that decide how unknown unicast and ARP traffic is handled.
Skills tested
- Explain how a leaf learns local and remote endpoints and how endpoint aging works.
- Choose hardware proxy or flooding for Layer 2 unknown unicast in a bridge domain.
- Decide when to enable ARP flooding and unicast routing, and when to limit IP learning to the subnet.
- Troubleshoot an endpoint that is missing from the fabric or moving between leaf switches.
Questions by topic
- Bridge Domain Configuration4
- COOP Protocol3
- Endpoint Learning Troubleshooting3
- Pervasive Gateway4
- Bridge Domain ARP Handling3
- Bridge Domain Forwarding Modes2
- Endpoint Learning1
External Network Connectivity20%21 questions
This domain links the fabric to outside networks at Layer 2, with STP and MCP basics and EPG port bindings. It also covers Layer 3 outs that exchange routes with outside routers. Transit routing and VRF route leaking are out of scope.
Skills tested
- Extend an EPG to an outside Layer 2 network with static port bindings.
- Explain how MCP and STP handling protect the fabric from Layer 2 loops.
- Configure an L3Out with a routing protocol such as OSPF, EIGRP or BGP, plus its external EPG.
- Advertise bridge domain subnets to outside routers and apply route control policies.
Questions by topic
- L3Out OSPF Configuration3
- L3Out Preferred Group2
- L2Out STP/MCP4
- L3Out Route Advertisement4
- Shared L3Out Configuration5
- L3Out Interface Types3
Integrations15%17 questions
This domain connects ACI to the virtual platforms and network services around it. It covers VMM integration with VMware vCenter DVS and Nutanix, resolution and deployment immediacy, and service graphs that insert Layer 4 to 7 devices.
Skills tested
- Create a VMM domain so ACI builds a vCenter distributed switch and its port groups.
- Connect a Nutanix environment to the fabric through a Nutanix VMM domain.
- Choose resolution and deployment immediacy to control when policy reaches a leaf and its hardware.
- Insert a firewall or load balancer between EPGs with a service graph.
Questions by topic
- Service Graph Troubleshooting3
- VMM Domain Microsegmentation2
- Resolution Immediacy3
- VMM Domain Policies3
- Nutanix AHV integration2
- Service Graph Implementation3
- Kubernetes/OpenShift integration1
ACI Management20%32 questions
This domain is the daily running of the fabric: management access, monitoring, backups, user rights and upgrades. Monitoring includes syslog and SNMP as well as AI-assisted analysis in Nexus Dashboard Insights.
Skills tested
- Set up out-of-band and in-band management access for the APIC and the switches.
- Send syslog and SNMP data to outside servers and read Nexus Dashboard Insights findings.
- Take configuration snapshots and run config import and export jobs.
- Configure AAA providers such as LDAP, and limit rights with RBAC roles and security domains.
- Plan a fabric upgrade from the firmware repository, starting with the APIC cluster.
Questions by topic
- Audit Logs and Syslog3
- Firmware Management4
- RBAC and Security Domains4
- Troubleshooting Tools7
- Out-of-Band Management3
- Configuration Management4
- Configuration Snapshots6
- SNMP and Syslog1
ACI Anywhere10%13 questions
The smallest domain asks candidates to describe designs that stretch ACI past one site. It compares Multi-Pod, Multi-Site and Remote Leaf and what each needs from the network between locations.
Skills tested
- Describe a Multi-Pod fabric and what the Inter-Pod Network must provide.
- Explain how Nexus Dashboard Orchestrator defines policy across Multi-Site fabrics.
- Describe when Remote Leaf suits a small site that has no spines of its own.
Questions by topic
- ACI Multi-Pod IPN Requirements4
- ACI Multi-Site Orchestrator (NDO) Configuration4
- Remote Leaf Architecture4
- Cloud ACI1
Requirements
- No formal prerequisites: anyone can book the exam.
- Recommended: networking fundamentals at the level of CCNA, plus a working knowledge of data center technologies.
- Recommended: hands-on time with Cisco Nexus switches, virtualization and policy-based infrastructure.
About the 300-620 exam
300-620 DCACI is Cisco's exam for engineers who configure, implement and manage Cisco switches in Application Centric Infrastructure (ACI) mode. In ACI, a cluster of controllers called APICs turns policy objects, such as tenants, endpoint groups (EPGs) and contracts, into switch configuration. The v1.2 topics include Virtual APIC, Endpoint Security Groups, Nutanix VMM integration and AI-assisted monitoring with Nexus Dashboard Insights. Passing earns the Cisco Certified Specialist - Data Center ACI Implementation certification and counts as the concentration exam for CCNP Data Center.
The PlanetCert practice test follows the six domains and gives ACI Fabric Infrastructure the most questions, from fabric discovery to contracts, vzAny and ESGs. The explanations matter most where two settings look alike, such as hardware proxy and flooding, or VRF and tenant contract scope. Study Mode suits access policies, where each object points to the next one. Brainy AI Assistant can trace how a leaf learns an endpoint, or explain why an L3Out does not advertise a bridge domain subnet.
How to earn the certification
- Earns
- Cisco Certified Specialist - Data Center ACI ImplementationProfessional
The certifications stay valid for three years, and passing this exam can also count toward recertification.
- Before
- 200-301 Cisco Certified Network Associate (CCNA)
Not required. Its routing and switching basics help with bridge domain and L3Out questions.
- 200-301 Cisco Certified Network Associate (CCNA)
- After
- 350-601 Implementing and Operating Cisco Data Center Core Technologies (DCCOR)
The core exam: together with DCACI it completes CCNP Data Center. It is also the qualifying exam for CCIE Data Center.
- 350-601 Implementing and Operating Cisco Data Center Core Technologies (DCCOR)
How to prepare for 300-620
- 1
Get time on a lab APIC
Use a Cisco ACI simulator or a lab fabric and click through tenants, access policies and L3Outs. Reading alone hides how one object points to the next.
- 2
Build one port from scratch
Create a VLAN pool, a physical domain, an AAEP, an interface policy group and an interface profile. Then bind an EPG to the port with a static binding. Many configuration questions depend on this chain.
- 3
Give the fabric domain the most hours
ACI Fabric Infrastructure, External Network Connectivity and ACI Management carry the most weight. In the fabric domain, practise contracts, vzAny, preferred groups and ESGs until each choice is clear.
- 4
Break and repair an L3Out
Set up an L3Out with OSPF or BGP. Then remove one setting at a time: the external EPG subnet, or the Advertised Externally flag on a bridge domain subnet. Note which route disappears each time.
- 5
Close with timed DCACI practice
Take the 300-620 practice test in Timed Mode once every domain has been studied. Review each missed explanation, and ask Brainy AI Assistant about any object relationship that is still unclear.
Start a timed 300-620run
Cisco's official course is Implementing Cisco Application Centric Infrastructure (DCACI). It runs as instructor-led training, as e-learning and as a guided learning path in Cisco U.
Who 300-620 is for
- Network engineers who build or run Cisco ACI fabrics in a data center.
- Engineers working toward CCNP Data Center who pick ACI as their concentration.
- Systems and virtualization engineers who connect vCenter or Nutanix clusters to ACI.
- Network architects who plan Multi-Pod, Multi-Site or Remote Leaf designs.
Typical job titles: Data center network engineer · Network engineer · Network architect · Systems engineer · Technical solutions architect · Network administrator
300-620 glossary
20 terms from the exam objectives and the vendor's official material, each defined in a sentence.
- AAEP (Attachable Access Entity Profile)
- The access policy object that links interface policy groups to domains, and through them to VLAN pools.
- Application Policy Infrastructure Controller
- The APIC: the clustered controller that holds the ACI policy model and pushes configuration to the fabric switches.
- ARP flooding
- A bridge domain setting that floods ARP requests through the bridge domain instead of sending them only toward the target.
- Bridge domain
- A Layer 2 forwarding domain inside a VRF that can hold subnets and act as the gateway for its endpoints.
- Contract scope
- The setting that decides how far a contract reaches: one application profile, a VRF, a tenant or all tenants.
- Distinguished Names (DN)
- The unique name of an object in the management information tree, built from its path, such as uni/tn-Sales for a tenant.
- Endpoint Security Groups
- Groups of endpoints picked by selectors, such as an IP subnet or a tag, that apply contracts across bridge domains in one VRF.
- Hardware proxy
- A bridge domain mode that sends unknown unicast traffic to the spines, which look up the destination instead of flooding it.
- Health scores
- Values from 0 to 100 that ACI gives to objects and to the whole fabric. Active faults lower them.
- IPN (Inter-Pod Network)
- The routed network that joins the pods of a Multi-Pod fabric so that they work as one fabric.
- L3Out
- The ACI object that connects a VRF to outside routers and exchanges routes with them, statically or through OSPF, EIGRP or BGP.
- Management Information Tree (MIT)
- The tree of managed objects in which ACI stores the configuration and state of the whole fabric.
- MCP
- Mis-Cabling Protocol: an ACI feature that sends test frames out of edge ports to find Layer 2 loops and can disable a looped port.
- Nexus Dashboard Orchestrator
- The tool that defines policies once and deploys them to several ACI fabrics in a Multi-Site design.
- Preferred group
- A VRF option that lets its member EPGs talk to each other freely, without contracts between them.
- Resolution immediacy
- The VMM setting that decides when the APIC sends a policy to a leaf switch: pre-provision, immediate or on-demand.
- Service graph
- An ACI template that places Layer 4 to 7 devices, such as firewalls and load balancers, in the path between EPGs.
- Virtual APIC
- An APIC that runs as a virtual machine instead of on a dedicated physical server.
- VMM domain
- The link between ACI and a virtual machine manager such as vCenter, through which ACI turns EPGs into port groups.
- vzAny
- An object that stands for every EPG in a VRF, so one contract can apply to all of them at once.
Related practice tests
- 300-535Automating and Programming Cisco Service Provider Solutions (SPAUTO)
- 200-901CCNA Automation (DevNet Associate)
- 200-201CCNA Cybersecurity (CyberOps Associate)
- 200-301Cisco Certified Network Associate (CCNA)
- 300-420Designing Cisco Enterprise Networks (ENSLD)