Cisco 300-420 Exam Dumps, Practice Test Questions

100% Latest & Updated Cisco 300-420 Practice Test Questions, Exam Dumps & Verified Answers!
30 Days Free Updates, Instant Download!

Cisco 300-420 Premium Bundle
$79.97
$59.98

300-420 Premium Bundle

  • Premium File: 416 Questions & Answers. Last update: Nov 9, 2026
  • Training Course: 75 Video Lectures
  • Study Guide: 812 Pages
  • Latest Questions
  • 100% Accurate Answers
  • Fast Exam Updates

300-420 Premium Bundle

Cisco 300-420 Premium Bundle
  • Premium File: 416 Questions & Answers. Last update: Nov 9, 2026
  • Training Course: 75 Video Lectures
  • Study Guide: 812 Pages
  • Latest Questions
  • 100% Accurate Answers
  • Fast Exam Updates
$79.97
$59.98

Cisco 300-420 Practice Test 10

Question 90

A multicampus network has two equal-cost paths but the design assumes packets always alternate evenly across every individual packet. Which design change most directly addresses the stated requirement?

  1. Evaluate supported multisite design with MTU, latency, encapsulation, and control-plane reachability constraints.
  2. Build point-to-point routed access uplinks and use ECMP-capable IGP convergence at the access layer.
  3. Plan ECMP based on actual per-flow hashing and application sensitivity rather than guaranteed per-packet load balance.
  4. Distinguish endpoint mapping/control distribution from VXLAN-encapsulated user-data forwarding.

Explanation

Correct Answer

C:

The design is validated when representative flows distribute across eligible next hops while a single ordered flow remains stable.

Incorrect Answers

A:

That option concerns a separate design case: A design extends SDA fabric across buildings on a WAN with 1500-byte MTU and assumes local campus performance will continue unchanged. The relevant control here is: Plan ECMP based on actual per-flow hashing and application sensitivity rather than guaranteed per-packet load balance.

B:

That option concerns a separate design case: A routed-access campus needs equal-cost forwarding to two distribution routers while keeping each VLAN local to one wiring closet. The relevant control here is: Plan ECMP based on actual per-flow hashing and application sensitivity rather than guaranteed per-packet load balance.

D:

That option concerns a separate design case: An SD-Access architect assumes the fabric's LISP control plane transports all user packets like a data-plane tunnel. The relevant control here is: Plan ECMP based on actual per-flow hashing and application sensitivity rather than guaranteed per-packet load balance.

Question 91

During a branch expansion, the address plan fills every usable subnet identifier and leaves no room for point-to-point links or future aggregation. Which design change most directly addresses the stated requirement?

  1. Use properly bounded OSPF areas and appropriate summarization at ABRs to contain topology scope.
  2. Reserve infrastructure and growth ranges separately within a hierarchical IPv4 and IPv6 allocation plan.
  3. Filter or scope external default advertisements to the authorized EIGRP distribution boundaries.
  4. Evaluate a suitable NAT64/DNS64 or application-proxy boundary with supported protocol assumptions.

Explanation

Correct Answer

B:

The design is validated when new links and sites receive nonoverlapping prefixes without renumbering established regional summaries.

Incorrect Answers

A:

That option concerns a separate design case: An OSPF deployment puts all 600 remote access switches into area 0 and floods changes to every site. The relevant control here is: Reserve infrastructure and growth ranges separately within a hierarchical IPv4 and IPv6 allocation plan.

C:

That option concerns a separate design case: A branch engineer redistributes a static default route into EIGRP and advertises it to every site, overriding the intended hub defaults. The relevant control here is: Reserve infrastructure and growth ranges separately within a hierarchical IPv4 and IPv6 allocation plan.

D:

That option concerns a separate design case: A new IPv6-only client subnet must access a legacy IPv4-only web endpoint through an enterprise gateway. The relevant control here is: Reserve infrastructure and growth ranges separately within a hierarchical IPv4 and IPv6 allocation plan.

Question 92

A hospital uses one leased WAN circuit for critical access, but its architecture report calls the site highly available because it has two LAN switches. Which design change most directly addresses the stated requirement?

  1. Use supported failure detection/track or BFD mechanisms with explicit failover policy and reasonable timers.
  2. Separate service VPNs/segments and apply centralized policy matching approved guest and corporate destinations.
  3. Add genuinely diverse WAN transport and edge device options consistent with the recovery requirement.
  4. Plan underlay/overlay MTU and MSS handling for encapsulation overhead across the WAN path.

Explanation

Correct Answer

C:

The design is validated when the branch reaches core services after failure of the original carrier handoff.

Incorrect Answers

A:

That option concerns a separate design case: An enterprise's primary WAN circuit fails but BGP route withdrawal is delayed while the underlay interface remains up. The relevant control here is: Add genuinely diverse WAN transport and edge device options consistent with the recovery requirement.

B:

That option concerns a separate design case: An SD-WAN fabric routes guest traffic into the production VPN because a new edge reused the corporate service VPN identifier. The relevant control here is: Add genuinely diverse WAN transport and edge device options consistent with the recovery requirement.

D:

That option concerns a separate design case: A branch uses IPsec overlay on broadband with 1400-byte effective MTU, but an application sends 1500-byte DF-set packets and stalls. The relevant control here is: Add genuinely diverse WAN transport and edge device options consistent with the recovery requirement.

Question 93

A fleet telemetry design streams all available operational leaves every second over a constrained management link. Which design change most directly addresses the stated requirement?

  1. Select subscription modes according to the actual leaf and device support, using periodic for counters when necessary.
  2. Use appropriately sampled or on-change model-driven telemetry for the monitored signals, with a scalable receiver architecture.
  3. Subscribe only to required model paths with appropriate update mode and cadence.
  4. Increase the periodic interval and narrow the subscribed paths to the needed capacity metrics.

Explanation

Correct Answer

C:

The design is validated when the collector receives actionable measurements without saturating management transport or device CPU.

Incorrect Answers

A:

That option concerns a separate design case: A routing telemetry client assumes every operational counter supports on-change updates and receives no updates on one platform. The relevant control here is: Subscribe only to required model paths with appropriate update mode and cadence.

B:

That option concerns a separate design case: An NOC polls every router with SNMP once every ten minutes and misses 30-second interface utilization spikes. The relevant control here is: Subscribe only to required model paths with appropriate update mode and cadence.

D:

That option concerns a separate design case: A global WAN telemetry system publishes a complete 10,000-interface snapshot every 100 ms although the target is only five-minute capacity planning. The relevant control here is: Subscribe only to required model paths with appropriate update mode and cadence.

Question 94

A core router's production data plane fails, leaving SSH reachable only through the same failed core path. Which design change most directly addresses the stated requirement?

  1. Design OOB authentication and recovery with an approved bounded fallback independent of production paths.
  2. Verify correct Reverse Path Forwarding behavior and IGP unicast route alignment for multicast sources.
  3. Provide an independently reachable out-of-band management network and approved emergency access process.
  4. Compare IntServ reservation scalability with a DiffServ class-based design that better matches the enterprise scale.

Explanation

Correct Answer

C:

The design is validated when operators can reach device management after production routing is intentionally removed.

Incorrect Answers

A:

That option concerns a separate design case: A campus has out-of-band console servers but all consoles depend on the production AAA server reachable only over the failed production network. The relevant control here is: Provide an independently reachable out-of-band management network and approved emergency access process.

B:

That option concerns a separate design case: A multicast source is reachable through an interface other than the one receiving the packet, but the router still forwards it to all receivers. The relevant control here is: Provide an independently reachable out-of-band management network and approved emergency access process.

D:

That option concerns a separate design case: A hospital asks for guaranteed per-flow service across 300 branches and considers IntServ RSVP state on every core router. The relevant control here is: Provide an independently reachable out-of-band management network and approved emergency access process.

Question 95

A campus border is configured with two equal-cost external BGP paths but only one is installed for traffic forwarding. Which design change most directly addresses the stated requirement?

  1. Enable and validate supported BGP multipath features subject to equal-path eligibility requirements.
  2. Use explicit route tags, prefix filtering, and redistribution boundaries to block feedback loops.
  3. Select feasible successors that meet EIGRP feasibility requirements and use variance only on eligible paths.
  4. Apply a scoped outbound prefix filter that blocks private/internal routes from the external BGP adjacency.

Explanation

Correct Answer

A:

The design is validated when both eligible next hops appear in the forwarding table and share representative flows.

Incorrect Answers

B:

That option concerns a separate design case: Branch A and B redistribute external BGP into OSPF, then advertise resulting routes back into BGP at the opposite edge. The relevant control here is: Enable and validate supported BGP multipath features subject to equal-path eligibility requirements.

C:

That option concerns a separate design case: A designer proposes unequal-cost EIGRP load sharing for two paths whose topology prevents one path from meeting the feasibility condition. The relevant control here is: Enable and validate supported BGP multipath features subject to equal-path eligibility requirements.

D:

That option concerns a separate design case: A partner BGP session accidentally advertises a sensitive 10.0.0.0/8 internal route to an external ASN. The relevant control here is: Enable and validate supported BGP multipath features subject to equal-path eligibility requirements.

Question 96

A new MST campus region accidentally has a different VLAN-to-instance mapping on one distribution switch. Which design change most directly addresses the stated requirement?

  1. Align MST region name, revision, and VLAN-to-instance mapping on intended peers.
  2. Build point-to-point routed access uplinks and use ECMP-capable IGP convergence at the access layer.
  3. Design an appropriate first-hop redundancy protocol with a shared virtual gateway and verified uplink tracking.
  4. Evaluate physical fault domains and provide independent power, links, and control-plane recovery within the chosen abstraction.

Explanation

Correct Answer

A:

The design is validated when switches participate in the expected common region and root placement is consistent per instance.

Incorrect Answers

B:

That option concerns a separate design case: A routed-access campus needs equal-cost forwarding to two distribution routers while keeping each VLAN local to one wiring closet. The relevant control here is: Align MST region name, revision, and VLAN-to-instance mapping on intended peers.

C:

That option concerns a separate design case: A building has two independent distribution switches but hosts use the physical IP of one switch as their default gateway. The relevant control here is: Align MST region name, revision, and VLAN-to-instance mapping on intended peers.

D:

That option concerns a separate design case: A virtualized distribution pair uses one logical control plane and engineers assume it offers separate failure domains like two chassis in different buildings. The relevant control here is: Align MST region name, revision, and VLAN-to-instance mapping on intended peers.

Question 97

A small branch must use both Internet and private MPLS, and engineers assume the two underlays cannot coexist on one SD-WAN edge. Which design change most directly addresses the stated requirement?

  1. Design distinct supported transport interfaces and TLOC colors with centralized path policy.
  2. Evaluate an appropriately isolated L2VPN or pseudowire with defined loop, bandwidth and MTU constraints.
  3. Choose a supported IPsec design with appropriate IKE authentication, encryption proposals and key rotation.
  4. Require physical route and carrier diversity, including demarcation and access-path audits.

Explanation

Correct Answer

A:

The design is validated when the edge establishes intended tunnels over both transports and applications use their approved paths.

Incorrect Answers

B:

That option concerns a separate design case: Two industrial sites require transparent delivery of a small set of Ethernet services and reject routing between their private LANs. The relevant control here is: Design distinct supported transport interfaces and TLOC colors with centralized path policy.

C:

That option concerns a separate design case: A site-to-site tunnel must protect financial payload confidentiality and integrity across the public internet. The relevant control here is: Design distinct supported transport interfaces and TLOC colors with centralized path policy.

D:

That option concerns a separate design case: A bank contracts two MPLS providers but both fiber tails enter the building through the same conduit. The relevant control here is: Design distinct supported transport interfaces and TLOC colors with centralized path policy.

Question 98

A multicast network has active PIM neighbors but one edge switch suppresses IGMP reports after an access-layer topology change. Which design change most directly addresses the stated requirement?

  1. Segment management-plane access by role/tenant and enforce ACLs and authentication at the boundaries.
  2. Extend consistent class scheduling to each actual bottleneck along the end-to-end path.
  3. Correct receiver membership handling and ensure snooping querier or routing interface behavior is consistent.
  4. Provide independent telemetry or out-of-band access appropriate to site criticality and budget.

Explanation

Correct Answer

C:

The design is validated when receiver ports are present in membership tables and only eligible ports receive the stream.

Incorrect Answers

A:

That option concerns a separate design case: Two business units share one management VLAN with unrestricted access to each other's routers. The relevant control here is: Correct receiver membership handling and ensure snooping querier or routing interface behavior is consistent.

B:

That option concerns a separate design case: A campus designs priority queues only on the access switch but ignores a congested upstream WAN edge. The relevant control here is: Correct receiver membership handling and ensure snooping querier or routing interface behavior is consistent.

D:

That option concerns a separate design case: Network management of a branch uses a VPN over its sole primary WAN, and the organization reports no way to diagnose a provider outage. The relevant control here is: Correct receiver membership handling and ensure snooping querier or routing interface behavior is consistent.

Question 99

A designer proposes unequal-cost EIGRP load sharing for two paths whose topology prevents one path from meeting the feasibility condition. Which design change most directly addresses the stated requirement?

  1. Select feasible successors that meet EIGRP feasibility requirements and use variance only on eligible paths.
  2. Configure an appropriate EIGRP stub design on the branch while allowing its locally connected routes to reach the hubs.
  3. Apply EIGRP summarization, stub boundaries, and reliable connectivity to limit query scope.
  4. Enable and validate supported BGP multipath features subject to equal-path eligibility requirements.

Explanation

Correct Answer

A:

The design is validated when traffic shares only across qualified routes and failed successors do not create a loop.

Incorrect Answers

B:

That option concerns a separate design case: A branch EIGRP router advertises remote routes back into its hub and occasionally becomes a transit path between hubs. The relevant control here is: Select feasible successors that meet EIGRP feasibility requirements and use variance only on eligible paths.

C:

That option concerns a separate design case: An EIGRP core has routes stuck active after one WAN path fails and queries spread into many remote sites. The relevant control here is: Select feasible successors that meet EIGRP feasibility requirements and use variance only on eligible paths.

D:

That option concerns a separate design case: A campus border is configured with two equal-cost external BGP paths but only one is installed for traffic forwarding. The relevant control here is: Select feasible successors that meet EIGRP feasibility requirements and use variance only on eligible paths.

Question 100

A wireless access-point refresh increases PoE needs above the available 802.3at class on older switches. Which design change most directly addresses the stated requirement?

  1. Design supported fabric wireless segmentation with dedicated VNs/SGTs and appropriate wireless control integration.
  2. Specify access switch PoE capabilities and power budget that support the APs' required negotiated power levels.
  3. Choose a supported redundant supervisor or logical chassis abstraction with explicitly documented switchover behavior.
  4. Evaluate a supported SDA transit that preserves virtual network and SGT policy semantics between sites.

Explanation

Correct Answer

B:

The design is validated when each AP enables its intended radio features at full load without power denial or downshift.

Incorrect Answers

A:

That option concerns a separate design case: A fabric site needs a guest wireless SSID without extending the guest Layer 2 domain across the whole enterprise. The relevant control here is: Specify access switch PoE capabilities and power budget that support the APs' required negotiated power levels.

C:

That option concerns a separate design case: A remote campus uses two distribution switches and requires nonstop gateway access during a planned supervisor replacement. The relevant control here is: Specify access switch PoE capabilities and power budget that support the APs' required negotiated power levels.

D:

That option concerns a separate design case: An organization needs consistent segmentation across two SD-Access fabric sites connected by a routed MPLS service. The relevant control here is: Specify access switch PoE capabilities and power budget that support the APs' required negotiated power levels.

Designing Cisco Enterprise Networks (ENSLD) (300-420) Practice Tests

UP

SPECIAL OFFER: GET 10% OFF

This is ONE TIME OFFER

ExamSnap Discount Offer
Enter Your Email Address to Receive Your 10% Off Discount Code

A confirmation link will be sent to this email address to verify your login. *We value your privacy. We will not rent or sell your email address.

Download Free Demo of VCE Exam Simulator

Experience Avanset VCE Exam Simulator for yourself.

Simply submit your e-mail address below to get started with our interactive software demo of your free trial.

Free Demo Limits: In the demo version you will be able to access only first 5 questions from exam.