100% Latest & Updated Cisco 300-420 Practice Test Questions, Exam Dumps & Verified Answers!
30 Days Free Updates, Instant Download!
Question 100
A wireless access-point refresh increases PoE needs above the available 802.3at class on older switches. Which design change most directly addresses the stated requirement?
- Design supported fabric wireless segmentation with dedicated VNs/SGTs and appropriate wireless control integration.
- Specify access switch PoE capabilities and power budget that support the APs' required negotiated power levels.
- Choose a supported redundant supervisor or logical chassis abstraction with explicitly documented switchover behavior.
- Evaluate a supported SDA transit that preserves virtual network and SGT policy semantics between sites.
Explanation
Correct Answer
B:The design is validated when each AP enables its intended radio features at full load without power denial or downshift.
Incorrect Answers
A:That option concerns a separate design case: A fabric site needs a guest wireless SSID without extending the guest Layer 2 domain across the whole enterprise. The relevant control here is: Specify access switch PoE capabilities and power budget that support the APs' required negotiated power levels.
C:That option concerns a separate design case: A remote campus uses two distribution switches and requires nonstop gateway access during a planned supervisor replacement. The relevant control here is: Specify access switch PoE capabilities and power budget that support the APs' required negotiated power levels.
D:That option concerns a separate design case: An organization needs consistent segmentation across two SD-Access fabric sites connected by a routed MPLS service. The relevant control here is: Specify access switch PoE capabilities and power budget that support the APs' required negotiated power levels.
Question 101
A partner BGP session accidentally advertises a sensitive 10.0.0.0/8 internal route to an external ASN. Which design change most directly addresses the stated requirement?
- Apply a scoped outbound prefix filter that blocks private/internal routes from the external BGP adjacency.
- Enable and validate supported BGP multipath features subject to equal-path eligibility requirements.
- Use controlled redistribution policy with route tags and a defined protocol boundary between OSPF and IS-IS.
- Remove or constrain the summary when it attracts traffic to networks not reachable through the campus boundary.
Explanation
Correct Answer
A:The design is validated when peer-received advertisements exclude the protected prefix while approved public routes remain.
Incorrect Answers
B:That option concerns a separate design case: A campus border is configured with two equal-cost external BGP paths but only one is installed for traffic forwarding. The relevant control here is: Apply a scoped outbound prefix filter that blocks private/internal routes from the external BGP adjacency.
C:That option concerns a separate design case: IS-IS adjacencies form between distribution switches, but all internal prefixes are redistributed from OSPF without loop prevention. The relevant control here is: Apply a scoped outbound prefix filter that blocks private/internal routes from the external BGP adjacency.
D:That option concerns a separate design case: A campus advertises a /18 summary into the WAN but has no route for one constituent /24 after a building is decommissioned. The relevant control here is: Apply a scoped outbound prefix filter that blocks private/internal routes from the external BGP adjacency.
Question 102
A routing telemetry client assumes every operational counter supports on-change updates and receives no updates on one platform. Which design change most directly addresses the stated requirement?
- Align gNMI encoding and model path interpretation with supported YANG JSON_IETF semantics.
- Select subscription modes according to the actual leaf and device support, using periodic for counters when necessary.
- Subscribe only to required model paths with appropriate update mode and cadence.
- Negotiate supported YANG model names/revisions and update payload paths accordingly.
Explanation
Correct Answer
B:The design is validated when the receiver obtains the expected measurement updates for every required signal.
Incorrect Answers
A:That option concerns a separate design case: A telemetry receiver supports gRPC but cannot decode the device's gNMI JSON_IETF path data and classifies every update as malformed. The relevant control here is: Select subscription modes according to the actual leaf and device support, using periodic for counters when necessary.
C:That option concerns a separate design case: A fleet telemetry design streams all available operational leaves every second over a constrained management link. The relevant control here is: Select subscription modes according to the actual leaf and device support, using periodic for counters when necessary.
D:That option concerns a separate design case: A script writes `ietf-interfaces` fields to a platform supporting only a different module revision and receives an unknown-element error. The relevant control here is: Select subscription modes according to the actual leaf and device support, using periodic for counters when necessary.
Question 103
A WAN team assumes DWDM wavelength multiplexing itself supplies packet-level route isolation between tenants. Which design change most directly addresses the stated requirement?
- Use GRE for appropriate multiprotocol encapsulation and add IPsec separately if confidentiality is required.
- Design control/management resilience separately from WAN edge data-plane forwarding.
- Separate optical multiplexing requirements from routing or Ethernet tenant segmentation carried over the wavelengths.
- Select an appropriate private APN, outbound-initiated overlay, or routable-address service depending on carrier capabilities.
Explanation
Correct Answer
C:The design is validated when services over the optical circuit remain isolated by the appropriate higher-layer controls.
Incorrect Answers
A:That option concerns a separate design case: A lab requires a routed overlay carrying multicast between sites but encryption is not part of the GRE service itself. The relevant control here is: Separate optical multiplexing requirements from routing or Ethernet tenant segmentation carried over the wavelengths.
B:That option concerns a separate design case: A multisite SD-WAN deployment uses one manager for configuration and assumes manager reachability is necessary for every packet of user data. The relevant control here is: Separate optical multiplexing requirements from routing or Ethernet tenant segmentation carried over the wavelengths.
D:That option concerns a separate design case: An industrial site uses 4G LTE as primary WAN, and its routing team assumes public inbound addresses remain reachable through carrier-grade NAT. The relevant control here is: Separate optical multiplexing requirements from routing or Ethernet tenant segmentation carried over the wavelengths.
Question 104
A campus uses DSCP EF for voice signaling, voice media, and backup traffic, causing priority queue overload. Which design change most directly addresses the stated requirement?
- Remap backup traffic to a less-preferred class and protect media queues for their intended applications.
- Separate delay-critical voice priority from video classes with appropriate bounded queuing and bandwidth guarantees.
- Classify traffic by actual application need and reserve EF treatment for suitable expedited traffic.
- Create feasible bandwidth allocations and an explicit priority bandwidth budget that sums within supported scheduler constraints.
Explanation
Correct Answer
C:The design is validated when priority queuing protects genuine voice media while backup traffic no longer occupies the strict-priority class.
Incorrect Answers
A:That option concerns a separate design case: A QoS controller marks all backup data DSCP AF41 while the provider honors it as a premium video class. The relevant control here is: Classify traffic by actual application need and reserve EF treatment for suitable expedited traffic.
B:That option concerns a separate design case: Video and voice both use one strict-priority queue, causing voice jitter when video surges. The relevant control here is: Classify traffic by actual application need and reserve EF treatment for suitable expedited traffic.
D:That option concerns a separate design case: A switch QoS scheduler guarantees 30% to backup traffic and 80% to voice under full congestion, exceeding possible link capacity. The relevant control here is: Classify traffic by actual application need and reserve EF treatment for suitable expedited traffic.
Question 105
Two campus VRRP gateways both claim master after their shared advertisement path is partitioned, and clients receive inconsistent ARP responses. Which design change most directly addresses the stated requirement?
- Correct VRRP group identity, priorities, advertisement reachability, and L2 path consistency.
- Select supported redundancy mechanisms that separately address link failure and control-plane maintenance transitions.
- Add supported object or route tracking so upstream reachability can influence HSRP active gateway selection.
- Update summary ownership and ensure discarded or absent specifics cannot mask the retired destination.
Explanation
Correct Answer
A:The design is validated when exactly one intended master serves the virtual gateway in stable conditions and transitions during failure.
Incorrect Answers
B:That option concerns a separate design case: A new campus design requires maintaining service during both one uplink failure and one planned software upgrade. The relevant control here is: Correct VRRP group identity, priorities, advertisement reachability, and L2 path consistency.
C:That option concerns a separate design case: HSRP gateways remain reachable locally after their active router loses the only routed upstream uplink. The relevant control here is: Correct VRRP group identity, priorities, advertisement reachability, and L2 path consistency.
D:That option concerns a separate design case: A site cutover retains a withdrawn /24 under an unchanged /20 campus summary and traffic follows an obsolete transit path. The relevant control here is: Correct VRRP group identity, priorities, advertisement reachability, and L2 path consistency.
Question 106
An EIGRP core has routes stuck active after one WAN path fails and queries spread into many remote sites. Which design change most directly addresses the stated requirement?
- Apply EIGRP summarization, stub boundaries, and reliable connectivity to limit query scope.
- Align supported interface MTU and OSPF adjacency parameters rather than suppressing the mismatch blindly.
- Evaluate whether additional-paths or path diversity is required and supported by the topology and platforms.
- Configure an appropriate EIGRP stub design on the branch while allowing its locally connected routes to reach the hubs.
Explanation
Correct Answer
A:The design is validated when failed-route convergence completes without broad stuck-in-active propagation.
Incorrect Answers
B:That option concerns a separate design case: Two OSPF neighbors on a routed core link are stuck in EXSTART/EXCHANGE and one endpoint uses an incompatible MTU. The relevant control here is: Apply EIGRP summarization, stub boundaries, and reliable connectivity to limit query scope.
C:That option concerns a separate design case: An iBGP route reflector sees several candidate routes to the same destination but advertises only its best path to clients. The relevant control here is: Apply EIGRP summarization, stub boundaries, and reliable connectivity to limit query scope.
D:That option concerns a separate design case: A branch EIGRP router advertises remote routes back into its hub and occasionally becomes a transit path between hubs. The relevant control here is: Apply EIGRP summarization, stub boundaries, and reliable connectivity to limit query scope.
Question 107
An NSF-capable router pair loses a control-plane process briefly and the design assumes all neighboring routers will preserve forwarding. Which design change most directly addresses the stated requirement?
- Distinguish endpoint mapping/control distribution from VXLAN-encapsulated user-data forwarding.
- Plan NSF graceful-restart interoperability with compatible neighbors and realistic convergence timeouts.
- Evaluate supported multisite design with MTU, latency, encapsulation, and control-plane reachability constraints.
- Evaluate physical fault domains and provide independent power, links, and control-plane recovery within the chosen abstraction.
Explanation
Correct Answer
B:The design is validated when neighbor relationships recover while supported forwarding state remains stable during the tested restart.
Incorrect Answers
A:That option concerns a separate design case: An SD-Access architect assumes the fabric's LISP control plane transports all user packets like a data-plane tunnel. The relevant control here is: Plan NSF graceful-restart interoperability with compatible neighbors and realistic convergence timeouts.
C:That option concerns a separate design case: A design extends SDA fabric across buildings on a WAN with 1500-byte MTU and assumes local campus performance will continue unchanged. The relevant control here is: Plan NSF graceful-restart interoperability with compatible neighbors and realistic convergence timeouts.
D:That option concerns a separate design case: A virtualized distribution pair uses one logical control plane and engineers assume it offers separate failure domains like two chassis in different buildings. The relevant control here is: Plan NSF graceful-restart interoperability with compatible neighbors and realistic convergence timeouts.
Question 108
A PIM-SM domain has active receivers but no working rendezvous-point reachability for new source registration. Which design change most directly addresses the stated requirement?
- Verify correct Reverse Path Forwarding behavior and IGP unicast route alignment for multicast sources.
- Design reliable RP placement or supported RP redundancy with consistent mapping.
- Correct receiver membership handling and ensure snooping querier or routing interface behavior is consistent.
- Evaluate supported MSDP-based source active exchange or a modern supported interdomain design.
Explanation
Correct Answer
B:The design is validated when new sources register and receiver joins build the intended multicast distribution tree.
Incorrect Answers
A:That option concerns a separate design case: A multicast source is reachable through an interface other than the one receiving the packet, but the router still forwards it to all receivers. The relevant control here is: Design reliable RP placement or supported RP redundancy with consistent mapping.
C:That option concerns a separate design case: A multicast network has active PIM neighbors but one edge switch suppresses IGMP reports after an access-layer topology change. The relevant control here is: Design reliable RP placement or supported RP redundancy with consistent mapping.
D:That option concerns a separate design case: Two independent PIM-SM domains each use local rendezvous points but remote sources must be discovered across the domains. The relevant control here is: Design reliable RP placement or supported RP redundancy with consistent mapping.
Question 109
A new SD-WAN site has a single edge appliance and single underlay yet is approved as redundant because controllers run in different data centers. Which design change most directly addresses the stated requirement?
- Separate service VPNs/segments and apply centralized policy matching approved guest and corporate destinations.
- Align the signed device identity, organization name and controller trust requirements for supported secure onboarding.
- Evaluate DWDM wavelength services with optics, reach, dispersion and protection appropriate to the fiber plant.
- Provide independent edge and transport paths when required; treat controller redundancy as a separate failure domain.
Explanation
Correct Answer
D:The design is validated when the site retains approved application reachability after losing one WAN edge or carrier path.
Incorrect Answers
A:That option concerns a separate design case: An SD-WAN fabric routes guest traffic into the production VPN because a new edge reused the corporate service VPN identifier. The relevant control here is: Provide independent edge and transport paths when required; treat controller redundancy as a separate failure domain.
B:That option concerns a separate design case: A new WAN edge receives a bootstrap but its control connections fail because the certificate trust chain and organization name differ. The relevant control here is: Provide independent edge and transport paths when required; treat controller redundancy as a separate failure domain.
C:That option concerns a separate design case: Several data centers need high-capacity optical transport over metropolitan dark fiber without converting each tenant VLAN to an IP tunnel. The relevant control here is: Provide independent edge and transport paths when required; treat controller redundancy as a separate failure domain.
Question 110
A campus design requires both distribution uplinks active but the chosen topology uses classic STP on all Layer 2 connections. Which design change most directly addresses the stated requirement?
- Design separate VRFs and policy boundaries aligned to each tenant's compliance constraints.
- Use a supported multi-chassis EtherChannel or routed-access design to make redundancy active without a spanning-tree loop.
- Intentionally distribute primary FHRP roles across VLAN groups while preserving corresponding upstream capacity and failover policy.
- Choose a supported redundant supervisor or logical chassis abstraction with explicitly documented switchover behavior.
Explanation
Correct Answer
B:The design is validated when both paths carry approved traffic and a member failure has no broad STP reconvergence.
Incorrect Answers
A:That option concerns a separate design case: A public safety campus requires independent operations from a corporate tenant even when both use the same distribution hardware. The relevant control here is: Use a supported multi-chassis EtherChannel or routed-access design to make redundancy active without a spanning-tree loop.
C:That option concerns a separate design case: A campus with several hundred VLANs uses one active HSRP gateway for all VLANs while another distribution router remains mostly idle. The relevant control here is: Use a supported multi-chassis EtherChannel or routed-access design to make redundancy active without a spanning-tree loop.
D:That option concerns a separate design case: A remote campus uses two distribution switches and requires nonstop gateway access during a planned supervisor replacement. The relevant control here is: Use a supported multi-chassis EtherChannel or routed-access design to make redundancy active without a spanning-tree loop.
Designing Cisco Enterprise Networks (ENSLD) (300-420) Practice Tests