100% Latest & Updated Cisco 300-420 Practice Test Questions, Exam Dumps & Verified Answers!
30 Days Free Updates, Instant Download!
Question 1080
A design extends SDA fabric across buildings on a WAN with 1500-byte MTU and assumes local campus performance will continue unchanged. Choose THREE statements that form the design action, direct verification, and deployment safeguard. (Choose THREE.)
- Intersite overlay flows survive the engineered path and meet their measured size and latency limits.
- Guest clients roam as designed and cannot access restricted enterprise segments.
- Plan ECMP based on actual per-flow hashing and application sensitivity rather than guaranteed per-packet load balance.
- Validate WLC and AP fabric roles against platform support and target mobility scope.
- Test the full supported transit profile rather than relying on basic IP ping success.
- Evaluate supported multisite design with MTU, latency, encapsulation, and control-plane reachability constraints.
Explanation
Correct Answers
A:Intersite overlay flows survive the engineered path and meet their measured size and latency limits. This is the observable acceptance check for the change.
E:Test the full supported transit profile rather than relying on basic IP ping success. This applies directly to the reported network-design requirement.
F:Evaluate supported multisite design with MTU, latency, encapsulation, and control-plane reachability constraints. This is the corrective design for the stated topology.
Incorrect Answers
B:This offered choice, “Guest clients roam as designed and cannot access restricted enterprise segments”, addresses a separate concern. This statement relates to a different requirement: A fabric site needs a guest wireless SSID without extending the guest Layer 2 domain across the whole enterprise. It does not address the condition described here.
C:This statement relates to a different requirement: A multicampus network has two equal-cost paths but the design assumes packets always alternate evenly across every individual packet. It does not address the condition described here.
D:This offered choice, “Validate WLC and AP fabric roles against platform support and target mobility scope”, addresses a separate concern. This statement relates to a different requirement: A fabric site needs a guest wireless SSID without extending the guest Layer 2 domain across the whole enterprise. It does not address the condition described here.
Question 1081
An acquisition introduces 172.16.0.0/12 internal networks but the network must hide finance VLAN prefixes from the partner site. Select TWO statements that together define the best corrective design and its acceptance evidence. (Choose TWO.)
- Align MST region name, revision, and VLAN-to-instance mapping on intended peers.
- Switches participate in the expected common region and root placement is consistent per instance.
- Use targeted route distribution policy and VRF containment for sensitive prefixes.
- Preserve a supported link and endpoint power/wake capability along the intended WoL packet delivery path.
- Partner routing tables contain only the approved shared-services routes.
Explanation
Correct Answers
C:Use targeted route distribution policy and VRF containment for sensitive prefixes. This applies directly to the reported network-design requirement.
E:Partner routing tables contain only the approved shared-services routes. This is the observable acceptance check for the change.
Incorrect Answers
A:This offered choice, “Align MST region name, revision, and VLAN-to-instance mapping on intended peers”, addresses a separate concern. That answer belongs to this other scenario: A new MST campus region accidentally has a different VLAN-to-instance mapping on one distribution switch. It does not establish the necessary change in this case.
B:This offered choice, “Switches participate in the expected common region and root placement is consistent per instance”, addresses a separate concern. That answer belongs to this other scenario: A new MST campus region accidentally has a different VLAN-to-instance mapping on one distribution switch. It does not establish the necessary change in this case.
D:That answer belongs to this other scenario: A switch must remotely wake office PCs overnight, but the access port powers down and the design assumes Wake-on-LAN works regardless of power state. It does not establish the necessary change in this case.
Question 1082
A campus designs priority queues only on the access switch but ignores a congested upstream WAN edge. Choose THREE statements that form the design action, direct verification, and deployment safeguard. (Choose THREE.)
- Receiver ports are present in membership tables and only eligible ports receive the stream.
- Confirm IGMP snooping querier placement and membership timeouts before changing PIM topology.
- Delay-sensitive traffic receives scheduled treatment at both campus and WAN congestion points.
- Extend consistent class scheduling to each actual bottleneck along the end-to-end path.
- Map every potential bottleneck and avoid unnecessary policy complexity on uncongested links.
- Combine trusted traffic classification and marking with a suitable egress priority queue and bandwidth admission design.
Explanation
Correct Answers
C:Delay-sensitive traffic receives scheduled treatment at both campus and WAN congestion points. This is the observable acceptance check for the change.
D:Extend consistent class scheduling to each actual bottleneck along the end-to-end path. This is the corrective design for the stated topology.
E:Map every potential bottleneck and avoid unnecessary policy complexity on uncongested links. This applies directly to the reported network-design requirement.
Incorrect Answers
A:This offered choice, “Receiver ports are present in membership tables and only eligible ports receive the stream”, addresses a separate concern. This statement relates to a different requirement: A multicast network has active PIM neighbors but one edge switch suppresses IGMP reports after an access-layer topology change. It does not address the condition described here.
B:This offered choice, “Confirm IGMP snooping querier placement and membership timeouts before changing PIM topology”, addresses a separate concern. This statement relates to a different requirement: A multicast network has active PIM neighbors but one edge switch suppresses IGMP reports after an access-layer topology change. It does not address the condition described here.
F:This offered choice, “Combine trusted traffic classification and marking with a suitable egress priority queue and bandwidth admission design”, addresses a separate concern. That option relates to this separate design case: A regional WAN prioritizes voice using a DiffServ marking but provides no scheduler preference on its congested egress link. It does not answer the current requirement.
Question 1083
An automation team expects NETCONF transactions over SSH to behave like stateless HTTP GET calls with no session or lock semantics. Select TWO statements that together define the best corrective design and its acceptance evidence. (Choose TWO.)
- Classify the hosted runtime as PaaS and document the application versus platform operations boundary.
- Approved configuration changes use the negotiated datastore and produce attributable RPC replies.
- Design NETCONF operations around capabilities, RPCs, datastores and transactional edit/commit behavior where supported.
- The client negotiates capabilities and receives model-based Get/Subscribe responses from the intended target.
- Use the supported gNMI service transported over gRPC with device capability and identity verification.
Explanation
Correct Answers
B:Approved configuration changes use the negotiated datastore and produce attributable RPC replies. This is the observable acceptance check for the change.
C:Design NETCONF operations around capabilities, RPCs, datastores and transactional edit/commit behavior where supported. This applies directly to the reported network-design requirement.
Incorrect Answers
A:That answer belongs to this other scenario: A development team consumes a managed runtime that deploys application code without administering underlying servers and calls it raw IaaS. It does not establish the necessary change in this case.
D:This offered choice, “The client negotiates capabilities and receives model-based Get/Subscribe responses from the intended target”, addresses a separate concern. That answer belongs to this other scenario: A monitoring team tries to exchange gNMI Get and Subscribe messages with a device that only exposes ordinary HTTP REST endpoints. It does not establish the necessary change in this case.
E:This offered choice, “Use the supported gNMI service transported over gRPC with device capability and identity verification”, addresses a separate concern. That answer belongs to this other scenario: A monitoring team tries to exchange gNMI Get and Subscribe messages with a device that only exposes ordinary HTTP REST endpoints. It does not establish the necessary change in this case.
Question 1084
A global company uses the old terms vSmart, vManage and vBond in documentation but assigns control and management functions to the wrong products. Choose THREE statements that form the design action, direct verification, and deployment safeguard. (Choose THREE.)
- Operations diagrams identify correct components for onboarding, OMP routes and policy distribution.
- Plan underlay/overlay MTU and MSS handling for encapsulation overhead across the WAN path.
- Validate diagrams against the deployed software generation and actual control sessions.
- Large application sessions succeed with correct effective packet sizing over each approved transport.
- Measure path MTU over primary and backup carriers before setting MSS limits.
- Map Cisco SD-WAN Controller, Manager and Validator functions to their actual roles, including legacy labels.
Explanation
Correct Answers
A:Operations diagrams identify correct components for onboarding, OMP routes and policy distribution. This is the observable acceptance check for the change.
C:Validate diagrams against the deployed software generation and actual control sessions. This applies directly to the reported network-design requirement.
F:Map Cisco SD-WAN Controller, Manager and Validator functions to their actual roles, including legacy labels. This is the corrective design for the stated topology.
Incorrect Answers
B:This offered choice, “Plan underlay/overlay MTU and MSS handling for encapsulation overhead across the WAN path”, addresses a separate concern. This statement relates to a different requirement: A branch uses IPsec overlay on broadband with 1400-byte effective MTU, but an application sends 1500-byte DF-set packets and stalls. It does not address the condition described here.
D:This offered choice, “Large application sessions succeed with correct effective packet sizing over each approved transport”, addresses a separate concern. This statement relates to a different requirement: A branch uses IPsec overlay on broadband with 1400-byte effective MTU, but an application sends 1500-byte DF-set packets and stalls. It does not address the condition described here.
E:This offered choice, “Measure path MTU over primary and backup carriers before setting MSS limits”, addresses a separate concern. This statement relates to a different requirement: A branch uses IPsec overlay on broadband with 1400-byte effective MTU, but an application sends 1500-byte DF-set packets and stalls. It does not address the condition described here.
Question 1085
An EIGRP deployment relies on a single aggregation router and an outage cuts off all downstream branches. Select TWO statements that together define the best corrective design and its acceptance evidence. (Choose TWO.)
- Plan the EIGRP successor and feasible-successor relationship using composite metric and feasibility checks.
- Configure an appropriate EIGRP stub design on the branch while allowing its locally connected routes to reach the hubs.
- Introduce an independently reachable redundant aggregation path with planned metrics and bounded query behavior.
- Branch routes remain reachable through the surviving aggregation router after failure.
- The optimal successor forwards normally and eligible backup takes over without a network-wide query where feasible.
Explanation
Correct Answers
C:Introduce an independently reachable redundant aggregation path with planned metrics and bounded query behavior. This applies directly to the reported network-design requirement.
D:Branch routes remain reachable through the surviving aggregation router after failure. This is the observable acceptance check for the change.
Incorrect Answers
A:This offered choice, “Plan the EIGRP successor and feasible-successor relationship using composite metric and feasibility checks”, addresses a separate concern. That answer belongs to this other scenario: A router receives two EIGRP routes for a prefix with different metrics and the design team wants deterministic failover. It does not establish the necessary change in this case.
B:That answer belongs to this other scenario: A branch EIGRP router advertises remote routes back into its hub and occasionally becomes a transit path between hubs. It does not establish the necessary change in this case.
E:This offered choice, “The optimal successor forwards normally and eligible backup takes over without a network-wide query where feasible”, addresses a separate concern. That answer belongs to this other scenario: A router receives two EIGRP routes for a prefix with different metrics and the design team wants deterministic failover. It does not establish the necessary change in this case.
Question 1086
A service provider backbone runs IS-IS level-1 only across multiple areas, and distant branch routers cannot obtain interarea routes. Choose THREE statements that form the design action, direct verification, and deployment safeguard. (Choose THREE.)
- All advertised LAN /64s are distinct and can be summarized within the delegated /48 where topology permits.
- Design an appropriate level-2 backbone with level-1/level-2 routers at area boundaries.
- Route reachability between distant IS-IS areas is present through level-2 adjacencies.
- Check overload and attached-bit behavior before modifying L1/L2 roles.
- Verify NET addressing and adjacency level settings on both ends.
- Align IS-IS area addresses for L1 neighbor formation or use supported level-2 adjacency where the topology requires interarea routing.
Explanation
Correct Answers
B:Design an appropriate level-2 backbone with level-1/level-2 routers at area boundaries. This is the corrective design for the stated topology.
C:Route reachability between distant IS-IS areas is present through level-2 adjacencies. This is the observable acceptance check for the change.
D:Check overload and attached-bit behavior before modifying L1/L2 roles. This applies directly to the reported network-design requirement.
Incorrect Answers
A:This offered choice, “All advertised LAN /64s are distinct and can be summarized within the delegated /48 where topology permits”, addresses a separate concern. This statement concerns a different technical circumstance: A provider delegation contains 2001:db8:4200::/48 and the design requires 256 independent /64 LANs across 16 branches. It is not the needed action, result or safeguard for this case.
E:This offered choice, “Verify NET addressing and adjacency level settings on both ends”, addresses a separate concern. This statement relates to a different requirement: New routers have valid IP addresses but IS-IS peers in separate areas never form a level-1 adjacency. It does not address the condition described here.
F:This offered choice, “Align IS-IS area addresses for L1 neighbor formation or use supported level-2 adjacency where the topology requires interarea routing”, addresses a separate concern. This statement relates to a different requirement: New routers have valid IP addresses but IS-IS peers in separate areas never form a level-1 adjacency. It does not address the condition described here.
Question 1087
A public safety campus requires independent operations from a corporate tenant even when both use the same distribution hardware. Select TWO statements that together define the best corrective design and its acceptance evidence. (Choose TWO.)
- Both paths carry approved traffic and a member failure has no broad STP reconvergence.
- Design separate VRFs and policy boundaries aligned to each tenant's compliance constraints.
- Select supported redundancy mechanisms that separately address link failure and control-plane maintenance transitions.
- Changes to one tenant's routes do not leak or alter the other's forwarding state.
- Use a supported multi-chassis EtherChannel or routed-access design to make redundancy active without a spanning-tree loop.
Explanation
Correct Answers
B:Design separate VRFs and policy boundaries aligned to each tenant's compliance constraints. This applies directly to the reported network-design requirement.
D:Changes to one tenant's routes do not leak or alter the other's forwarding state. This is the observable acceptance check for the change.
Incorrect Answers
A:This offered choice, “Both paths carry approved traffic and a member failure has no broad STP reconvergence”, addresses a separate concern. That answer belongs to this other scenario: A campus design requires both distribution uplinks active but the chosen topology uses classic STP on all Layer 2 connections. It does not establish the necessary change in this case.
C:That answer belongs to this other scenario: A new campus design requires maintaining service during both one uplink failure and one planned software upgrade. It does not establish the necessary change in this case.
E:This offered choice, “Use a supported multi-chassis EtherChannel or routed-access design to make redundancy active without a spanning-tree loop”, addresses a separate concern. That answer belongs to this other scenario: A campus design requires both distribution uplinks active but the chosen topology uses classic STP on all Layer 2 connections. It does not establish the necessary change in this case.
Question 1088
A switch QoS scheduler guarantees 30% to backup traffic and 80% to voice under full congestion, exceeding possible link capacity. Choose THREE statements that form the design action, direct verification, and deployment safeguard. (Choose THREE.)
- Create feasible bandwidth allocations and an explicit priority bandwidth budget that sums within supported scheduler constraints.
- All essential classes receive their planned treatment without violating actual egress capacity.
- Validate classification at trust boundaries and prevent starvation of essential nonvoice traffic.
- Voice latency and packet loss stay within the approved limit during controlled WAN congestion.
- Classify traffic by actual application need and reserve EF treatment for suitable expedited traffic.
- Include control, default, and scavenger classes when totaling reserved bandwidth.
Explanation
Correct Answers
A:Create feasible bandwidth allocations and an explicit priority bandwidth budget that sums within supported scheduler constraints. This is the corrective design for the stated topology.
B:All essential classes receive their planned treatment without violating actual egress capacity. This is the observable acceptance check for the change.
F:Include control, default, and scavenger classes when totaling reserved bandwidth. This applies directly to the reported network-design requirement.
Incorrect Answers
C:This offered choice, “Validate classification at trust boundaries and prevent starvation of essential nonvoice traffic”, addresses a separate concern. This statement relates to a different requirement: A regional WAN prioritizes voice using a DiffServ marking but provides no scheduler preference on its congested egress link. It does not address the condition described here.
D:This offered choice, “Voice latency and packet loss stay within the approved limit during controlled WAN congestion”, addresses a separate concern. This statement relates to a different requirement: A regional WAN prioritizes voice using a DiffServ marking but provides no scheduler preference on its congested egress link. It does not address the condition described here.
E:This offered choice, “Classify traffic by actual application need and reserve EF treatment for suitable expedited traffic”, addresses a separate concern. This statement relates to a different requirement: A campus uses DSCP EF for voice signaling, voice media, and backup traffic, causing priority queue overload. It does not address the condition described here.
Question 1089
GET VPN group members can route between branches but new devices cannot obtain group security policy after a key-server loss. Select TWO statements that together define the best corrective design and its acceptance evidence. (Choose TWO.)
- Surviving key servers provide policies and secure data traffic remains operational through maintenance.
- Select supported WAN edge platforms and onboard them with correctly separated transport and service VPNs.
- Include latency, jitter and loss thresholds appropriate to the application class.
- Selected tunnels meet the approved performance envelope during representative conference traffic.
- Design redundant supported key servers and registration/rekey recovery for the group encryption domain.
Explanation
Correct Answers
A:Surviving key servers provide policies and secure data traffic remains operational through maintenance. This is the observable acceptance check for the change.
E:Design redundant supported key servers and registration/rekey recovery for the group encryption domain. This applies directly to the reported network-design requirement.
Incorrect Answers
B:That answer belongs to this other scenario: Branches will be migrated from static internet VPNs to SD-WAN customer edges but the design omits transport isolation and overlay security. It does not establish the necessary change in this case.
C:This offered choice, “Include latency, jitter and loss thresholds appropriate to the application class”, addresses a separate concern. That answer belongs to this other scenario: A video conference SD-WAN policy accepts tunnels with 1% packet loss but ignores sustained jitter above application tolerance. It does not establish the necessary change in this case.
D:This offered choice, “Selected tunnels meet the approved performance envelope during representative conference traffic”, addresses a separate concern. That answer belongs to this other scenario: A video conference SD-WAN policy accepts tunnels with 1% packet loss but ignores sustained jitter above application tolerance. It does not establish the necessary change in this case.
Question 1090
IP phones and cameras are scheduled for a new closet, but PoE budget is calculated only from the switch's total port count. Choose THREE statements that form the design action, direct verification, and deployment safeguard. (Choose THREE.)
- All approved powered endpoints boot under full load and stay powered after one permitted PSU failure.
- Calculate worst-case powered-device class demand, switch power supply budget, and redundancy headroom.
- Validate device power negotiation and high-priority endpoint allocations before production.
- Apply supported port-security limits and violation behavior aligned to the legitimate endpoint profile.
- The rogue bridge cannot become campus root and protected access interfaces enter their intended security state.
- Consider IP phones, virtual machines and MAC mobility before selecting the maximum.
Explanation
Correct Answers
A:All approved powered endpoints boot under full load and stay powered after one permitted PSU failure. This is the observable acceptance check for the change.
B:Calculate worst-case powered-device class demand, switch power supply budget, and redundancy headroom. This is the corrective design for the stated topology.
C:Validate device power negotiation and high-priority endpoint allocations before production. This applies directly to the reported network-design requirement.
Incorrect Answers
D:This offered choice, “Apply supported port-security limits and violation behavior aligned to the legitimate endpoint profile”, addresses a separate concern. This statement relates to a different requirement: A guest workstation port can learn hundreds of source MAC addresses because an unmanaged mini-switch is connected behind it. It does not address the condition described here.
E:This offered choice, “The rogue bridge cannot become campus root and protected access interfaces enter their intended security state”, addresses a separate concern. This statement relates to a different requirement: An attacker plugs an unmanaged switch into a lobby edge port and advertises superior STP BPDUs, changing the root topology. It does not address the condition described here.
F:This offered choice, “Consider IP phones, virtual machines and MAC mobility before selecting the maximum”, addresses a separate concern. This statement relates to a different requirement: A guest workstation port can learn hundreds of source MAC addresses because an unmanaged mini-switch is connected behind it. It does not address the condition described here.
Designing Cisco Enterprise Networks (ENSLD) (300-420) Practice Tests
