100% Latest & Updated Cisco 300-420 Practice Test Questions, Exam Dumps & Verified Answers!
30 Days Free Updates, Instant Download!
Question 140
A branch engineer redistributes a static default route into EIGRP and advertises it to every site, overriding the intended hub defaults. Which design change most directly addresses the stated requirement?
- Filter or scope external default advertisements to the authorized EIGRP distribution boundaries.
- Remove or constrain the summary when it attracts traffic to networks not reachable through the campus boundary.
- Introduce an independently reachable redundant aggregation path with planned metrics and bounded query behavior.
- Configure an appropriate EIGRP stub design on the branch while allowing its locally connected routes to reach the hubs.
Explanation
Correct Answer
A:The design is validated when only intended branches learn the approved default source and backup behavior.
Incorrect Answers
B:That option concerns a separate design case: A campus advertises a /18 summary into the WAN but has no route for one constituent /24 after a building is decommissioned. The relevant control here is: Filter or scope external default advertisements to the authorized EIGRP distribution boundaries.
C:That option concerns a separate design case: An EIGRP deployment relies on a single aggregation router and an outage cuts off all downstream branches. The relevant control here is: Filter or scope external default advertisements to the authorized EIGRP distribution boundaries.
D:That option concerns a separate design case: A branch EIGRP router advertises remote routes back into its hub and occasionally becomes a transit path between hubs. The relevant control here is: Filter or scope external default advertisements to the authorized EIGRP distribution boundaries.
Question 141
A multivendor enterprise wants one consistent YANG representation for interface operational counters but each platform exposes vendor-specific native trees. Which design change most directly addresses the stated requirement?
- Evaluate RESTCONF with its YANG-modeled REST resources and authorized HTTP operations.
- Select subscription modes according to the actual leaf and device support, using periodic for counters when necessary.
- Prefer a supported OpenConfig model for common telemetry and document device-specific augmentations where unavoidable.
- Distinguish IETF standards-track models from OpenConfig community models and vendor-native schema ownership.
Explanation
Correct Answer
C:The design is validated when the collector reads comparable interface fields from Cisco and non-Cisco devices using supported model paths.
Incorrect Answers
A:That option concerns a separate design case: A Python network tool must update structured interface configuration through web-style requests but the engineer chooses CLI scraping instead of a supported API. The relevant control here is: Prefer a supported OpenConfig model for common telemetry and document device-specific augmentations where unavoidable.
B:That option concerns a separate design case: A routing telemetry client assumes every operational counter supports on-change updates and receives no updates on one platform. The relevant control here is: Prefer a supported OpenConfig model for common telemetry and document device-specific augmentations where unavoidable.
D:That option concerns a separate design case: A standards group needs an interoperable interface model but mistakenly calls every IETF YANG module an OpenConfig model. The relevant control here is: Prefer a supported OpenConfig model for common telemetry and document device-specific augmentations where unavoidable.
Question 142
A building has two independent distribution switches but hosts use the physical IP of one switch as their default gateway. Which design change most directly addresses the stated requirement?
- Design an appropriate first-hop redundancy protocol with a shared virtual gateway and verified uplink tracking.
- Choose a validated loop-free logical bundle or routed-access topology if active-active use is required.
- Choose a supported redundant supervisor or logical chassis abstraction with explicitly documented switchover behavior.
- Design endpoint identity and SGT policy consistently across fabric edges with appropriate authentication integration.
Explanation
Correct Answer
A:The design is validated when clients retain gateway reachability after either distribution switch fails.
Incorrect Answers
B:That option concerns a separate design case: Multiple access switches connect to one distribution block through independent Layer 2 uplinks with a blocked redundant path. The relevant control here is: Design an appropriate first-hop redundancy protocol with a shared virtual gateway and verified uplink tracking.
C:That option concerns a separate design case: A remote campus uses two distribution switches and requires nonstop gateway access during a planned supervisor replacement. The relevant control here is: Design an appropriate first-hop redundancy protocol with a shared virtual gateway and verified uplink tracking.
D:That option concerns a separate design case: Users roam between wired fabric edge switches but their identity assignments change with switch port, breaking microsegmentation. The relevant control here is: Design an appropriate first-hop redundancy protocol with a shared virtual gateway and verified uplink tracking.
Question 143
An organization needs any-to-any group-encrypted private WAN traffic but the new design proposes a traditional hub-and-spoke IPsec overlay with hub hairpins. Which design change most directly addresses the stated requirement?
- Evaluate GET VPN where supported for group encryption over a trusted routable provider network.
- Apply topology or centralized control policy at the appropriate site/VPN scope.
- Plan underlay/overlay MTU and MSS handling for encapsulation overhead across the WAN path.
- Select MPLS L3VPN service with CE-PE routing, per-customer VRFs and explicit route policy.
Explanation
Correct Answer
A:The design is validated when approved endpoints encrypt traffic while retaining the provider's intended any-to-any routing paths.
Incorrect Answers
B:That option concerns a separate design case: A network wants a hub-and-spoke topology for finance traffic but allows any-to-any policy for all service VPNs. The relevant control here is: Evaluate GET VPN where supported for group encryption over a trusted routable provider network.
C:That option concerns a separate design case: A branch uses IPsec overlay on broadband with 1400-byte effective MTU, but an application sends 1500-byte DF-set packets and stalls. The relevant control here is: Evaluate GET VPN where supported for group encryption over a trusted routable provider network.
D:That option concerns a separate design case: A regional healthcare group wants routed site separation within a provider-managed private WAN without building its own full mesh of tunnels. The relevant control here is: Evaluate GET VPN where supported for group encryption over a trusted routable provider network.
Question 144
An enterprise uses hundreds of IPv4 /24s and proposes a single /16 summary although several component /24s are outside its administrative control. Which design change most directly addresses the stated requirement?
- Select a scalable IPv6-capable routing design with convergence and security matched to the enterprise topology.
- Align supported interface MTU and OSPF adjacency parameters rather than suppressing the mismatch blindly.
- Advertise only summaries that fully cover owned reachable allocations; retain required exceptions or more-specifics at redistribution boundaries.
- Set consistent IS-IS link metrics reflecting intended primary and backup capacity and verify resulting shortest paths.
Explanation
Correct Answer
C:The design is validated when remote forwarding toward the summary reaches all included owned networks and does not hijack unrelated space.
Incorrect Answers
A:That option concerns a separate design case: An IPv6 deployment uses static gateways rather than a dynamic protocol across several redundant campus links. The relevant control here is: Advertise only summaries that fully cover owned reachable allocations; retain required exceptions or more-specifics at redistribution boundaries.
B:That option concerns a separate design case: Two OSPF neighbors on a routed core link are stuck in EXSTART/EXCHANGE and one endpoint uses an incompatible MTU. The relevant control here is: Advertise only summaries that fully cover owned reachable allocations; retain required exceptions or more-specifics at redistribution boundaries.
D:That option concerns a separate design case: A network uses IS-IS with dual distribution routers and wants predictable traffic away from a low-bandwidth backup path. The relevant control here is: Advertise only summaries that fully cover owned reachable allocations; retain required exceptions or more-specifics at redistribution boundaries.
Question 145
A 10,000-receiver IPTV deployment requires one-to-many traffic from known sources but still uses RP discovery for each stream. Which design change most directly addresses the stated requirement?
- Evaluate Source-Specific Multicast using supported IGMPv3/MLDv2 and PIM-SSM where available.
- Align SSM membership to include the desired (S,G) source/group relationship.
- Evaluate controlled multicast service reflection or translation with explicit source/group mappings.
- Segment management-plane access by role/tenant and enforce ACLs and authentication at the boundaries.
Explanation
Correct Answer
A:The design is validated when authorized receivers join named sources and receive streams without relying on RP registration.
Incorrect Answers
B:That option concerns a separate design case: A new multicast source uses group 232.1.1.1 but the client sends only (*,G) membership instead of a source-specific join. The relevant control here is: Evaluate Source-Specific Multicast using supported IGMPv3/MLDv2 and PIM-SSM where available.
C:That option concerns a separate design case: An enterprise wants to expose a multicast stream to one receiver group but the original source uses a group address conflicting with a remote application. The relevant control here is: Evaluate Source-Specific Multicast using supported IGMPv3/MLDv2 and PIM-SSM where available.
D:That option concerns a separate design case: Two business units share one management VLAN with unrestricted access to each other's routers. The relevant control here is: Evaluate Source-Specific Multicast using supported IGMPv3/MLDv2 and PIM-SSM where available.
Question 146
A BGP customer has two provider uplinks and wants automatic loss-of-transport detection when the BGP session remains Established over a stale recursive path. Which design change most directly addresses the stated requirement?
- Evaluate a managed IPv6-over-IPv4 tunnel overlay with endpoints, MTU and failure behavior explicitly designed.
- Apply a scoped outbound prefix filter that blocks private/internal routes from the external BGP adjacency.
- Pair next-hop reachability and supported BFD or track-based detection with appropriate BGP convergence settings.
- Set consistent IS-IS link metrics reflecting intended primary and backup capacity and verify resulting shortest paths.
Explanation
Correct Answer
C:The design is validated when failure of the primary underlay forces traffic to a tested eligible secondary path within the service objective.
Incorrect Answers
A:That option concerns a separate design case: An organization needs to reach an IPv6 island over a provider network that carries IPv4 only for the next year. The relevant control here is: Pair next-hop reachability and supported BFD or track-based detection with appropriate BGP convergence settings.
B:That option concerns a separate design case: A partner BGP session accidentally advertises a sensitive 10.0.0.0/8 internal route to an external ASN. The relevant control here is: Pair next-hop reachability and supported BFD or track-based detection with appropriate BGP convergence settings.
D:That option concerns a separate design case: A network uses IS-IS with dual distribution routers and wants predictable traffic away from a low-bandwidth backup path. The relevant control here is: Pair next-hop reachability and supported BFD or track-based detection with appropriate BGP convergence settings.
Question 147
Multiple access switches connect to one distribution block through independent Layer 2 uplinks with a blocked redundant path. Which design change most directly addresses the stated requirement?
- Choose a validated loop-free logical bundle or routed-access topology if active-active use is required.
- Design an appropriate first-hop redundancy protocol with a shared virtual gateway and verified uplink tracking.
- Choose a supported redundant supervisor or logical chassis abstraction with explicitly documented switchover behavior.
- Design separate VRFs and policy boundaries aligned to each tenant's compliance constraints.
Explanation
Correct Answer
A:The design is validated when permitted uplinks forward under normal operation and converge cleanly on individual link loss.
Incorrect Answers
B:That option concerns a separate design case: A building has two independent distribution switches but hosts use the physical IP of one switch as their default gateway. The relevant control here is: Choose a validated loop-free logical bundle or routed-access topology if active-active use is required.
C:That option concerns a separate design case: A remote campus uses two distribution switches and requires nonstop gateway access during a planned supervisor replacement. The relevant control here is: Choose a validated loop-free logical bundle or routed-access topology if active-active use is required.
D:That option concerns a separate design case: A public safety campus requires independent operations from a corporate tenant even when both use the same distribution hardware. The relevant control here is: Choose a validated loop-free logical bundle or routed-access topology if active-active use is required.
Question 148
A video conference SD-WAN policy accepts tunnels with 1% packet loss but ignores sustained jitter above application tolerance. Which design change most directly addresses the stated requirement?
- Design redundant supported key servers and registration/rekey recovery for the group encryption domain.
- Include latency, jitter and loss thresholds appropriate to the application class.
- Apply topology or centralized control policy at the appropriate site/VPN scope.
- Use the SD-WAN control-plane and key distribution capabilities appropriate to the supported solution.
Explanation
Correct Answer
B:The design is validated when selected tunnels meet the approved performance envelope during representative conference traffic.
Incorrect Answers
A:That option concerns a separate design case: GET VPN group members can route between branches but new devices cannot obtain group security policy after a key-server loss. The relevant control here is: Include latency, jitter and loss thresholds appropriate to the application class.
C:That option concerns a separate design case: A network wants a hub-and-spoke topology for finance traffic but allows any-to-any policy for all service VPNs. The relevant control here is: Include latency, jitter and loss thresholds appropriate to the application class.
D:That option concerns a separate design case: A network team manually builds static IPsec tunnels between every SD-WAN edge even though centralized overlay policy is available. The relevant control here is: Include latency, jitter and loss thresholds appropriate to the application class.
Question 149
A design team calculates voice QoS bandwidth solely from codec payload bit rate and ignores RTP, IP and tunnel overhead. Which design change most directly addresses the stated requirement?
- Engineer a policer with an appropriate burst tolerance and separate real-time queue protection.
- Extend consistent class scheduling to each actual bottleneck along the end-to-end path.
- Classify traffic by actual application need and reserve EF treatment for suitable expedited traffic.
- Size admission and queue bandwidth using packetization and encapsulation overhead plus concurrent-call estimates.
Explanation
Correct Answer
D:The design is validated when measured WAN utilization supports peak approved call volume without exceeding the voice service budget.
Incorrect Answers
A:That option concerns a separate design case: An enterprise edge allows a contracted 50-Mbps guest rate but users report voice degradation during microbursts despite the average staying under 50 Mbps. The relevant control here is: Size admission and queue bandwidth using packetization and encapsulation overhead plus concurrent-call estimates.
B:That option concerns a separate design case: A campus designs priority queues only on the access switch but ignores a congested upstream WAN edge. The relevant control here is: Size admission and queue bandwidth using packetization and encapsulation overhead plus concurrent-call estimates.
C:That option concerns a separate design case: A campus uses DSCP EF for voice signaling, voice media, and backup traffic, causing priority queue overload. The relevant control here is: Size admission and queue bandwidth using packetization and encapsulation overhead plus concurrent-call estimates.
Question 150
Branch A and B redistribute external BGP into OSPF, then advertise resulting routes back into BGP at the opposite edge. Which design change most directly addresses the stated requirement?
- Configure an appropriate EIGRP stub design on the branch while allowing its locally connected routes to reach the hubs.
- Use explicit route tags, prefix filtering, and redistribution boundaries to block feedback loops.
- Use local preference or another AS-wide BGP policy rather than relying on locally significant weight.
- Evaluate an NSSA design and associated ABR external-route translation rather than a plain stub area.
Explanation
Correct Answer
B:The design is validated when bidirectional test prefixes appear once with predictable origin and no repeated reimport after failover.
Incorrect Answers
A:That option concerns a separate design case: A branch EIGRP router advertises remote routes back into its hub and occasionally becomes a transit path between hubs. The relevant control here is: Use explicit route tags, prefix filtering, and redistribution boundaries to block feedback loops.
C:That option concerns a separate design case: A BGP operator attempts to influence routes within one AS by changing the weight attribute only on one edge router. The relevant control here is: Use explicit route tags, prefix filtering, and redistribution boundaries to block feedback loops.
D:That option concerns a separate design case: A remote branch uses an OSPF stub area but a design change introduces an ASBR that must redistribute external routes within it. The relevant control here is: Use explicit route tags, prefix filtering, and redistribution boundaries to block feedback loops.
Designing Cisco Enterprise Networks (ENSLD) (300-420) Practice Tests