100% Latest & Updated Cisco 300-420 Practice Test Questions, Exam Dumps & Verified Answers!
30 Days Free Updates, Instant Download!
Question 990
A campus design requires both distribution uplinks active but the chosen topology uses classic STP on all Layer 2 connections. Choose THREE statements that form the design action, direct verification, and deployment safeguard. (Choose THREE.)
- Review platform compatibility and perform a maintenance-window failover test before promising hitless service.
- Use a supported multi-chassis EtherChannel or routed-access design to make redundancy active without a spanning-tree loop.
- Validate LACP partner system IDs and split-brain protection for the chosen solution.
- Both paths carry approved traffic and a member failure has no broad STP reconvergence.
- Changes to one tenant's routes do not leak or alter the other's forwarding state.
- Design separate VRFs and policy boundaries aligned to each tenant's compliance constraints.
Explanation
Correct Answers
B:Use a supported multi-chassis EtherChannel or routed-access design to make redundancy active without a spanning-tree loop. This is the corrective design for the stated topology.
C:Validate LACP partner system IDs and split-brain protection for the chosen solution. This applies directly to the reported network-design requirement.
D:Both paths carry approved traffic and a member failure has no broad STP reconvergence. This is the observable acceptance check for the change.
Incorrect Answers
A:This offered choice, “Review platform compatibility and perform a maintenance-window failover test before promising hitless service”, addresses a separate concern. This statement relates to a different requirement: A remote campus uses two distribution switches and requires nonstop gateway access during a planned supervisor replacement. It does not address the condition described here.
E:This offered choice, “Changes to one tenant's routes do not leak or alter the other's forwarding state”, addresses a separate concern. This statement relates to a different requirement: A public safety campus requires independent operations from a corporate tenant even when both use the same distribution hardware. It does not address the condition described here.
F:This offered choice, “Design separate VRFs and policy boundaries aligned to each tenant's compliance constraints”, addresses a separate concern. This statement relates to a different requirement: A public safety campus requires independent operations from a corporate tenant even when both use the same distribution hardware. It does not address the condition described here.
Question 991
A company wants most return traffic for its public prefix to enter ISP B rather than ISP A. Select TWO statements that together define the best corrective design and its acceptance evidence. (Choose TWO.)
- Observed inbound paths trend toward ISP B from representative external monitors without assuming universal control.
- Design an explicit IPv4/IPv6 translation or application-layer gateway at the interconnection boundary.
- Authorized IPv4 partner sessions reach the selected IPv6 service through the documented translation path.
- Plan the EIGRP successor and feasible-successor relationship using composite metric and feasibility checks.
- Assess supported inbound traffic engineering such as scoped AS-path prepending or provider communities, recognizing remote-AS policy discretion.
Explanation
Correct Answers
A:Observed inbound paths trend toward ISP B from representative external monitors without assuming universal control. This is the observable acceptance check for the change.
E:Assess supported inbound traffic engineering such as scoped AS-path prepending or provider communities, recognizing remote-AS policy discretion. This applies directly to the reported network-design requirement.
Incorrect Answers
B:This offered choice, “Design an explicit IPv4/IPv6 translation or application-layer gateway at the interconnection boundary”, addresses a separate concern. That answer belongs to this other scenario: A company wants to expose IPv6 resources to a partner with IPv4-only routing and assumes dual stack at headquarters solves the partner boundary. It does not establish the necessary change in this case.
C:This offered choice, “Authorized IPv4 partner sessions reach the selected IPv6 service through the documented translation path”, addresses a separate concern. That answer belongs to this other scenario: A company wants to expose IPv6 resources to a partner with IPv4-only routing and assumes dual stack at headquarters solves the partner boundary. It does not establish the necessary change in this case.
D:This offered choice, “Plan the EIGRP successor and feasible-successor relationship using composite metric and feasibility checks”, addresses a separate concern. That answer belongs to this other scenario: A router receives two EIGRP routes for a prefix with different metrics and the design team wants deterministic failover. It does not establish the necessary change in this case.
Question 992
Two DMVPN spokes can reach the hub but never build a direct shortcut after new spoke routes are learned. Choose THREE statements that form the design action, direct verification, and deployment safeguard. (Choose THREE.)
- Test NAT, authentication and both spoke failure paths before enabling shortcuts broadly.
- Guest prefixes and traffic stay isolated from production routes and data tunnels.
- Confirm NHRP authentication, routing protocol compatibility and suitable tunnel security.
- Align DMVPN phase/design, NHRP mappings and redirect/shortcut behavior with the intended topology.
- Traffic flows through the permitted direct spoke tunnel where expected while hub fallback still works.
- Separate service VPNs/segments and apply centralized policy matching approved guest and corporate destinations.
Explanation
Correct Answers
A:Test NAT, authentication and both spoke failure paths before enabling shortcuts broadly. This applies directly to the reported network-design requirement.
D:Align DMVPN phase/design, NHRP mappings and redirect/shortcut behavior with the intended topology. This is the corrective design for the stated topology.
E:Traffic flows through the permitted direct spoke tunnel where expected while hub fallback still works. This is the observable acceptance check for the change.
Incorrect Answers
B:This offered choice, “Guest prefixes and traffic stay isolated from production routes and data tunnels”, addresses a separate concern. This statement relates to a different requirement: An SD-WAN fabric routes guest traffic into the production VPN because a new edge reused the corporate service VPN identifier. It does not address the condition described here.
C:This offered choice, “Confirm NHRP authentication, routing protocol compatibility and suitable tunnel security”, addresses a separate concern. This statement relates to a different requirement: A retail chain needs many spokes to make dynamic spoke-to-spoke tunnels without permanent full-mesh configuration. It does not address the condition described here.
F:This offered choice, “Separate service VPNs/segments and apply centralized policy matching approved guest and corporate destinations”, addresses a separate concern. This statement relates to a different requirement: An SD-WAN fabric routes guest traffic into the production VPN because a new edge reused the corporate service VPN identifier. It does not address the condition described here.
Question 993
An NOC polls every router with SNMP once every ten minutes and misses 30-second interface utilization spikes. Select TWO statements that together define the best corrective design and its acceptance evidence. (Choose TWO.)
- Increase the periodic interval and narrow the subscribed paths to the needed capacity metrics.
- Use supported on-change telemetry for the interface state leaf where device and model support it.
- A controlled status change reaches the collector promptly without waiting for the next periodic poll.
- Collector time series captures the brief spikes with timestamped relevant YANG measurements.
- Use appropriately sampled or on-change model-driven telemetry for the monitored signals, with a scalable receiver architecture.
Explanation
Correct Answers
D:Collector time series captures the brief spikes with timestamped relevant YANG measurements. This is the observable acceptance check for the change.
E:Use appropriately sampled or on-change model-driven telemetry for the monitored signals, with a scalable receiver architecture. This applies directly to the reported network-design requirement.
Incorrect Answers
A:That answer belongs to this other scenario: A global WAN telemetry system publishes a complete 10,000-interface snapshot every 100 ms although the target is only five-minute capacity planning. It does not establish the necessary change in this case.
B:This offered choice, “Use supported on-change telemetry for the interface state leaf where device and model support it”, addresses a separate concern. That answer belongs to this other scenario: An alerting system needs immediate notice of interface administrative status changes but only polls every five minutes. It does not establish the necessary change in this case.
C:This offered choice, “A controlled status change reaches the collector promptly without waiting for the next periodic poll”, addresses a separate concern. That answer belongs to this other scenario: An alerting system needs immediate notice of interface administrative status changes but only polls every five minutes. It does not establish the necessary change in this case.
Question 994
A campus QoS policy gives low priority to routing keepalives and network monitoring, and routing adjacencies flap during congestion. Choose THREE statements that form the design action, direct verification, and deployment safeguard. (Choose THREE.)
- Critical signaling and voice meet their performance targets while bulk sync proceeds on its class.
- Control-plane adjacencies and monitoring remain stable during representative congestion.
- Verify traffic profile and congestion points before adjusting class percentages.
- Allocate queue scheduling according to measured application criticality and minimum bandwidth needs.
- Prevent uncontrolled high-rate management flows from abusing the protected class.
- Protect essential routing/control traffic within bounded QoS classes at actual bottlenecks.
Explanation
Correct Answers
B:Control-plane adjacencies and monitoring remain stable during representative congestion. This is the observable acceptance check for the change.
E:Prevent uncontrolled high-rate management flows from abusing the protected class. This applies directly to the reported network-design requirement.
F:Protect essential routing/control traffic within bounded QoS classes at actual bottlenecks. This is the corrective design for the stated topology.
Incorrect Answers
A:This offered choice, “Critical signaling and voice meet their performance targets while bulk sync proceeds on its class”, addresses a separate concern. This statement relates to a different requirement: A branch policy gives every queue an equal share although its database synchronization is delaying emergency call signaling. It does not address the condition described here.
C:This offered choice, “Verify traffic profile and congestion points before adjusting class percentages”, addresses a separate concern. This statement relates to a different requirement: A branch policy gives every queue an equal share although its database synchronization is delaying emergency call signaling. It does not address the condition described here.
D:This offered choice, “Allocate queue scheduling according to measured application criticality and minimum bandwidth needs”, addresses a separate concern. This statement relates to a different requirement: A branch policy gives every queue an equal share although its database synchronization is delaying emergency call signaling. It does not address the condition described here.
Question 995
A fabric site needs a guest wireless SSID without extending the guest Layer 2 domain across the whole enterprise. Select TWO statements that together define the best corrective design and its acceptance evidence. (Choose TWO.)
- Evaluate a supported SDA transit that preserves virtual network and SGT policy semantics between sites.
- Specify access switch PoE capabilities and power budget that support the APs' required negotiated power levels.
- Guest clients roam as designed and cannot access restricted enterprise segments.
- Design supported fabric wireless segmentation with dedicated VNs/SGTs and appropriate wireless control integration.
- Approved intersite traffic carries the expected segmentation context without undesired leakage.
Explanation
Correct Answers
C:Guest clients roam as designed and cannot access restricted enterprise segments. This is the observable acceptance check for the change.
D:Design supported fabric wireless segmentation with dedicated VNs/SGTs and appropriate wireless control integration. This applies directly to the reported network-design requirement.
Incorrect Answers
A:This offered choice, “Evaluate a supported SDA transit that preserves virtual network and SGT policy semantics between sites”, addresses a separate concern. That answer belongs to this other scenario: An organization needs consistent segmentation across two SD-Access fabric sites connected by a routed MPLS service. It does not establish the necessary change in this case.
B:That answer belongs to this other scenario: A wireless access-point refresh increases PoE needs above the available 802.3at class on older switches. It does not establish the necessary change in this case.
E:This offered choice, “Approved intersite traffic carries the expected segmentation context without undesired leakage”, addresses a separate concern. That answer belongs to this other scenario: An organization needs consistent segmentation across two SD-Access fabric sites connected by a routed MPLS service. It does not establish the necessary change in this case.
Question 996
A network with 80 iBGP routers becomes difficult to operate because every router forms a full mesh of peer sessions. Choose THREE statements that form the design action, direct verification, and deployment safeguard. (Choose THREE.)
- Route reflector clients learn authorized prefixes without maintaining a full mesh of all client sessions.
- Validate route-reflector originator/cluster-loop prevention and redundant peer reachability.
- Configure an appropriate EIGRP stub design on the branch while allowing its locally connected routes to reach the hubs.
- Design redundant BGP route reflectors with consistent cluster IDs and reflector-client relationships.
- Test withdrawal of the default and preserve the required local and internal routes.
- Hubs avoid querying through the branch as a transit path and branch-local prefixes remain visible.
Explanation
Correct Answers
A:Route reflector clients learn authorized prefixes without maintaining a full mesh of all client sessions. This is the observable acceptance check for the change.
B:Validate route-reflector originator/cluster-loop prevention and redundant peer reachability. This applies directly to the reported network-design requirement.
D:Design redundant BGP route reflectors with consistent cluster IDs and reflector-client relationships. This is the corrective design for the stated topology.
Incorrect Answers
C:This offered choice, “Configure an appropriate EIGRP stub design on the branch while allowing its locally connected routes to reach the hubs”, addresses a separate concern. This statement relates to a different requirement: A branch EIGRP router advertises remote routes back into its hub and occasionally becomes a transit path between hubs. It does not address the condition described here.
E:This offered choice, “Test withdrawal of the default and preserve the required local and internal routes”, addresses a separate concern. This statement relates to a different requirement: An edge router receives a full BGP table where the security policy allows only the provider's approved default. It does not address the condition described here.
F:This offered choice, “Hubs avoid querying through the branch as a transit path and branch-local prefixes remain visible”, addresses a separate concern. This statement relates to a different requirement: A branch EIGRP router advertises remote routes back into its hub and occasionally becomes a transit path between hubs. It does not address the condition described here.
Question 997
A retail design directs all cloud SaaS traffic through headquarters even though local internet breakout is allowed and latency is poor. Select TWO statements that together define the best corrective design and its acceptance evidence. (Choose TWO.)
- Approved SaaS sessions use the closer permitted breakout and remain governed by the security policy.
- Evaluate a Metro Ethernet service with committed bandwidth, fault demarcation and suitable Ethernet handoff.
- Voice traffic uses an eligible lower-latency transport while other applications retain their separate routing requirements.
- Use the SD-WAN control-plane and key distribution capabilities appropriate to the supported solution.
- Evaluate policy-controlled local internet breakout with appropriate security inspection and application path measurement.
Explanation
Correct Answers
A:Approved SaaS sessions use the closer permitted breakout and remain governed by the security policy. This is the observable acceptance check for the change.
E:Evaluate policy-controlled local internet breakout with appropriate security inspection and application path measurement. This applies directly to the reported network-design requirement.
Incorrect Answers
B:That answer belongs to this other scenario: A city campus needs a 10-Gbps local metro interconnect with SLA and carrier demarcation, but the proposed design assumes standard broadband internet guarantees. It does not establish the necessary change in this case.
C:That answer belongs to this other scenario: A voice application has a 120-ms latency budget, but SD-WAN traffic follows the cheapest internet path despite BFD reporting 220-ms delay. It does not establish the necessary change in this case.
D:This offered choice, “Use the SD-WAN control-plane and key distribution capabilities appropriate to the supported solution”, addresses a separate concern. That answer belongs to this other scenario: A network team manually builds static IPsec tunnels between every SD-WAN edge even though centralized overlay policy is available. It does not establish the necessary change in this case.
Question 998
A regional WAN prioritizes voice using a DiffServ marking but provides no scheduler preference on its congested egress link. Choose THREE statements that form the design action, direct verification, and deployment safeguard. (Choose THREE.)
- Voice latency and packet loss stay within the approved limit during controlled WAN congestion.
- Create feasible bandwidth allocations and an explicit priority bandwidth budget that sums within supported scheduler constraints.
- Combine trusted traffic classification and marking with a suitable egress priority queue and bandwidth admission design.
- Validate classification at trust boundaries and prevent starvation of essential nonvoice traffic.
- Include control, default, and scavenger classes when totaling reserved bandwidth.
- All essential classes receive their planned treatment without violating actual egress capacity.
Explanation
Correct Answers
A:Voice latency and packet loss stay within the approved limit during controlled WAN congestion. This is the observable acceptance check for the change.
C:Combine trusted traffic classification and marking with a suitable egress priority queue and bandwidth admission design. This is the corrective design for the stated topology.
D:Validate classification at trust boundaries and prevent starvation of essential nonvoice traffic. This applies directly to the reported network-design requirement.
Incorrect Answers
B:This offered choice, “Create feasible bandwidth allocations and an explicit priority bandwidth budget that sums within supported scheduler constraints”, addresses a separate concern. This statement relates to a different requirement: A switch QoS scheduler guarantees 30% to backup traffic and 80% to voice under full congestion, exceeding possible link capacity. It does not address the condition described here.
E:This offered choice, “Include control, default, and scavenger classes when totaling reserved bandwidth”, addresses a separate concern. This statement relates to a different requirement: A switch QoS scheduler guarantees 30% to backup traffic and 80% to voice under full congestion, exceeding possible link capacity. It does not address the condition described here.
F:This offered choice, “All essential classes receive their planned treatment without violating actual egress capacity”, addresses a separate concern. This statement relates to a different requirement: A switch QoS scheduler guarantees 30% to backup traffic and 80% to voice under full congestion, exceeding possible link capacity. It does not address the condition described here.
Question 999
The IS-IS backbone has a router in overload state after reboot and operators mistake it for an ordinary forwarding transit. Select TWO statements that together define the best corrective design and its acceptance evidence. (Choose TWO.)
- Honor the IS-IS overload-bit signaling and restore normal transit eligibility only when routing readiness is confirmed.
- Both eligible next hops appear in the forwarding table and share representative flows.
- Other routers avoid using the overloaded node as unintended transit until it is ready.
- Use local preference or another AS-wide BGP policy rather than relying on locally significant weight.
- Configure an appropriate EIGRP stub design on the branch while allowing its locally connected routes to reach the hubs.
Explanation
Correct Answers
A:Honor the IS-IS overload-bit signaling and restore normal transit eligibility only when routing readiness is confirmed. This applies directly to the reported network-design requirement.
C:Other routers avoid using the overloaded node as unintended transit until it is ready. This is the observable acceptance check for the change.
Incorrect Answers
B:This offered choice, “Both eligible next hops appear in the forwarding table and share representative flows”, addresses a separate concern. That answer belongs to this other scenario: A campus border is configured with two equal-cost external BGP paths but only one is installed for traffic forwarding. It does not establish the necessary change in this case.
D:This offered choice, “Use local preference or another AS-wide BGP policy rather than relying on locally significant weight”, addresses a separate concern. That answer belongs to this other scenario: A BGP operator attempts to influence routes within one AS by changing the weight attribute only on one edge router. It does not establish the necessary change in this case.
E:That answer belongs to this other scenario: A branch EIGRP router advertises remote routes back into its hub and occasionally becomes a transit path between hubs. It does not establish the necessary change in this case.
Question 1000
A port used only for workstations undergoes lengthy spanning-tree transitions whenever a client reconnects. Choose THREE statements that form the design action, direct verification, and deployment safeguard. (Choose THREE.)
- Combine edge behavior with BPDU protection and verify which interfaces can attach network devices.
- All approved powered endpoints boot under full load and stay powered after one permitted PSU failure.
- Validate device power negotiation and high-priority endpoint allocations before production.
- Calculate worst-case powered-device class demand, switch power supply budget, and redundancy headroom.
- Apply a supported edge/PortFast designation only to validated endpoint-facing interfaces.
- Client ports forward promptly while bridged uplinks still receive normal loop protection.
Explanation
Correct Answers
A:Combine edge behavior with BPDU protection and verify which interfaces can attach network devices. This applies directly to the reported network-design requirement.
E:Apply a supported edge/PortFast designation only to validated endpoint-facing interfaces. This is the corrective design for the stated topology.
F:Client ports forward promptly while bridged uplinks still receive normal loop protection. This is the observable acceptance check for the change.
Incorrect Answers
B:This offered choice, “All approved powered endpoints boot under full load and stay powered after one permitted PSU failure”, addresses a separate concern. This statement relates to a different requirement: IP phones and cameras are scheduled for a new closet, but PoE budget is calculated only from the switch's total port count. It does not address the condition described here.
C:This offered choice, “Validate device power negotiation and high-priority endpoint allocations before production”, addresses a separate concern. This statement relates to a different requirement: IP phones and cameras are scheduled for a new closet, but PoE budget is calculated only from the switch's total port count. It does not address the condition described here.
D:This offered choice, “Calculate worst-case powered-device class demand, switch power supply budget, and redundancy headroom”, addresses a separate concern. This statement relates to a different requirement: IP phones and cameras are scheduled for a new closet, but PoE budget is calculated only from the switch's total port count. It does not address the condition described here.
Designing Cisco Enterprise Networks (ENSLD) (300-420) Practice Tests
