Cisco 300-420 Exam Dumps, Practice Test Questions

100% Latest & Updated Cisco 300-420 Practice Test Questions, Exam Dumps & Verified Answers!
30 Days Free Updates, Instant Download!

Cisco 300-420 Premium Bundle
$79.97
$59.98

300-420 Premium Bundle

  • Premium File: 416 Questions & Answers. Last update: Nov 9, 2026
  • Training Course: 75 Video Lectures
  • Study Guide: 812 Pages
  • Latest Questions
  • 100% Accurate Answers
  • Fast Exam Updates

300-420 Premium Bundle

Cisco 300-420 Premium Bundle
  • Premium File: 416 Questions & Answers. Last update: Nov 9, 2026
  • Training Course: 75 Video Lectures
  • Study Guide: 812 Pages
  • Latest Questions
  • 100% Accurate Answers
  • Fast Exam Updates
$79.97
$59.98

Cisco 300-420 Practice Test 15

Question 140

A branch engineer redistributes a static default route into EIGRP and advertises it to every site, overriding the intended hub defaults. Which design change most directly addresses the stated requirement?

  1. Filter or scope external default advertisements to the authorized EIGRP distribution boundaries.
  2. Remove or constrain the summary when it attracts traffic to networks not reachable through the campus boundary.
  3. Introduce an independently reachable redundant aggregation path with planned metrics and bounded query behavior.
  4. Configure an appropriate EIGRP stub design on the branch while allowing its locally connected routes to reach the hubs.

Explanation

Correct Answer

A:

The design is validated when only intended branches learn the approved default source and backup behavior.

Incorrect Answers

B:

That option concerns a separate design case: A campus advertises a /18 summary into the WAN but has no route for one constituent /24 after a building is decommissioned. The relevant control here is: Filter or scope external default advertisements to the authorized EIGRP distribution boundaries.

C:

That option concerns a separate design case: An EIGRP deployment relies on a single aggregation router and an outage cuts off all downstream branches. The relevant control here is: Filter or scope external default advertisements to the authorized EIGRP distribution boundaries.

D:

That option concerns a separate design case: A branch EIGRP router advertises remote routes back into its hub and occasionally becomes a transit path between hubs. The relevant control here is: Filter or scope external default advertisements to the authorized EIGRP distribution boundaries.

Question 141

A multivendor enterprise wants one consistent YANG representation for interface operational counters but each platform exposes vendor-specific native trees. Which design change most directly addresses the stated requirement?

  1. Evaluate RESTCONF with its YANG-modeled REST resources and authorized HTTP operations.
  2. Select subscription modes according to the actual leaf and device support, using periodic for counters when necessary.
  3. Prefer a supported OpenConfig model for common telemetry and document device-specific augmentations where unavoidable.
  4. Distinguish IETF standards-track models from OpenConfig community models and vendor-native schema ownership.

Explanation

Correct Answer

C:

The design is validated when the collector reads comparable interface fields from Cisco and non-Cisco devices using supported model paths.

Incorrect Answers

A:

That option concerns a separate design case: A Python network tool must update structured interface configuration through web-style requests but the engineer chooses CLI scraping instead of a supported API. The relevant control here is: Prefer a supported OpenConfig model for common telemetry and document device-specific augmentations where unavoidable.

B:

That option concerns a separate design case: A routing telemetry client assumes every operational counter supports on-change updates and receives no updates on one platform. The relevant control here is: Prefer a supported OpenConfig model for common telemetry and document device-specific augmentations where unavoidable.

D:

That option concerns a separate design case: A standards group needs an interoperable interface model but mistakenly calls every IETF YANG module an OpenConfig model. The relevant control here is: Prefer a supported OpenConfig model for common telemetry and document device-specific augmentations where unavoidable.

Question 142

A building has two independent distribution switches but hosts use the physical IP of one switch as their default gateway. Which design change most directly addresses the stated requirement?

  1. Design an appropriate first-hop redundancy protocol with a shared virtual gateway and verified uplink tracking.
  2. Choose a validated loop-free logical bundle or routed-access topology if active-active use is required.
  3. Choose a supported redundant supervisor or logical chassis abstraction with explicitly documented switchover behavior.
  4. Design endpoint identity and SGT policy consistently across fabric edges with appropriate authentication integration.

Explanation

Correct Answer

A:

The design is validated when clients retain gateway reachability after either distribution switch fails.

Incorrect Answers

B:

That option concerns a separate design case: Multiple access switches connect to one distribution block through independent Layer 2 uplinks with a blocked redundant path. The relevant control here is: Design an appropriate first-hop redundancy protocol with a shared virtual gateway and verified uplink tracking.

C:

That option concerns a separate design case: A remote campus uses two distribution switches and requires nonstop gateway access during a planned supervisor replacement. The relevant control here is: Design an appropriate first-hop redundancy protocol with a shared virtual gateway and verified uplink tracking.

D:

That option concerns a separate design case: Users roam between wired fabric edge switches but their identity assignments change with switch port, breaking microsegmentation. The relevant control here is: Design an appropriate first-hop redundancy protocol with a shared virtual gateway and verified uplink tracking.

Question 143

An organization needs any-to-any group-encrypted private WAN traffic but the new design proposes a traditional hub-and-spoke IPsec overlay with hub hairpins. Which design change most directly addresses the stated requirement?

  1. Evaluate GET VPN where supported for group encryption over a trusted routable provider network.
  2. Apply topology or centralized control policy at the appropriate site/VPN scope.
  3. Plan underlay/overlay MTU and MSS handling for encapsulation overhead across the WAN path.
  4. Select MPLS L3VPN service with CE-PE routing, per-customer VRFs and explicit route policy.

Explanation

Correct Answer

A:

The design is validated when approved endpoints encrypt traffic while retaining the provider's intended any-to-any routing paths.

Incorrect Answers

B:

That option concerns a separate design case: A network wants a hub-and-spoke topology for finance traffic but allows any-to-any policy for all service VPNs. The relevant control here is: Evaluate GET VPN where supported for group encryption over a trusted routable provider network.

C:

That option concerns a separate design case: A branch uses IPsec overlay on broadband with 1400-byte effective MTU, but an application sends 1500-byte DF-set packets and stalls. The relevant control here is: Evaluate GET VPN where supported for group encryption over a trusted routable provider network.

D:

That option concerns a separate design case: A regional healthcare group wants routed site separation within a provider-managed private WAN without building its own full mesh of tunnels. The relevant control here is: Evaluate GET VPN where supported for group encryption over a trusted routable provider network.

Question 144

An enterprise uses hundreds of IPv4 /24s and proposes a single /16 summary although several component /24s are outside its administrative control. Which design change most directly addresses the stated requirement?

  1. Select a scalable IPv6-capable routing design with convergence and security matched to the enterprise topology.
  2. Align supported interface MTU and OSPF adjacency parameters rather than suppressing the mismatch blindly.
  3. Advertise only summaries that fully cover owned reachable allocations; retain required exceptions or more-specifics at redistribution boundaries.
  4. Set consistent IS-IS link metrics reflecting intended primary and backup capacity and verify resulting shortest paths.

Explanation

Correct Answer

C:

The design is validated when remote forwarding toward the summary reaches all included owned networks and does not hijack unrelated space.

Incorrect Answers

A:

That option concerns a separate design case: An IPv6 deployment uses static gateways rather than a dynamic protocol across several redundant campus links. The relevant control here is: Advertise only summaries that fully cover owned reachable allocations; retain required exceptions or more-specifics at redistribution boundaries.

B:

That option concerns a separate design case: Two OSPF neighbors on a routed core link are stuck in EXSTART/EXCHANGE and one endpoint uses an incompatible MTU. The relevant control here is: Advertise only summaries that fully cover owned reachable allocations; retain required exceptions or more-specifics at redistribution boundaries.

D:

That option concerns a separate design case: A network uses IS-IS with dual distribution routers and wants predictable traffic away from a low-bandwidth backup path. The relevant control here is: Advertise only summaries that fully cover owned reachable allocations; retain required exceptions or more-specifics at redistribution boundaries.

Question 145

A 10,000-receiver IPTV deployment requires one-to-many traffic from known sources but still uses RP discovery for each stream. Which design change most directly addresses the stated requirement?

  1. Evaluate Source-Specific Multicast using supported IGMPv3/MLDv2 and PIM-SSM where available.
  2. Align SSM membership to include the desired (S,G) source/group relationship.
  3. Evaluate controlled multicast service reflection or translation with explicit source/group mappings.
  4. Segment management-plane access by role/tenant and enforce ACLs and authentication at the boundaries.

Explanation

Correct Answer

A:

The design is validated when authorized receivers join named sources and receive streams without relying on RP registration.

Incorrect Answers

B:

That option concerns a separate design case: A new multicast source uses group 232.1.1.1 but the client sends only (*,G) membership instead of a source-specific join. The relevant control here is: Evaluate Source-Specific Multicast using supported IGMPv3/MLDv2 and PIM-SSM where available.

C:

That option concerns a separate design case: An enterprise wants to expose a multicast stream to one receiver group but the original source uses a group address conflicting with a remote application. The relevant control here is: Evaluate Source-Specific Multicast using supported IGMPv3/MLDv2 and PIM-SSM where available.

D:

That option concerns a separate design case: Two business units share one management VLAN with unrestricted access to each other's routers. The relevant control here is: Evaluate Source-Specific Multicast using supported IGMPv3/MLDv2 and PIM-SSM where available.

Question 146

A BGP customer has two provider uplinks and wants automatic loss-of-transport detection when the BGP session remains Established over a stale recursive path. Which design change most directly addresses the stated requirement?

  1. Evaluate a managed IPv6-over-IPv4 tunnel overlay with endpoints, MTU and failure behavior explicitly designed.
  2. Apply a scoped outbound prefix filter that blocks private/internal routes from the external BGP adjacency.
  3. Pair next-hop reachability and supported BFD or track-based detection with appropriate BGP convergence settings.
  4. Set consistent IS-IS link metrics reflecting intended primary and backup capacity and verify resulting shortest paths.

Explanation

Correct Answer

C:

The design is validated when failure of the primary underlay forces traffic to a tested eligible secondary path within the service objective.

Incorrect Answers

A:

That option concerns a separate design case: An organization needs to reach an IPv6 island over a provider network that carries IPv4 only for the next year. The relevant control here is: Pair next-hop reachability and supported BFD or track-based detection with appropriate BGP convergence settings.

B:

That option concerns a separate design case: A partner BGP session accidentally advertises a sensitive 10.0.0.0/8 internal route to an external ASN. The relevant control here is: Pair next-hop reachability and supported BFD or track-based detection with appropriate BGP convergence settings.

D:

That option concerns a separate design case: A network uses IS-IS with dual distribution routers and wants predictable traffic away from a low-bandwidth backup path. The relevant control here is: Pair next-hop reachability and supported BFD or track-based detection with appropriate BGP convergence settings.

Question 147

Multiple access switches connect to one distribution block through independent Layer 2 uplinks with a blocked redundant path. Which design change most directly addresses the stated requirement?

  1. Choose a validated loop-free logical bundle or routed-access topology if active-active use is required.
  2. Design an appropriate first-hop redundancy protocol with a shared virtual gateway and verified uplink tracking.
  3. Choose a supported redundant supervisor or logical chassis abstraction with explicitly documented switchover behavior.
  4. Design separate VRFs and policy boundaries aligned to each tenant's compliance constraints.

Explanation

Correct Answer

A:

The design is validated when permitted uplinks forward under normal operation and converge cleanly on individual link loss.

Incorrect Answers

B:

That option concerns a separate design case: A building has two independent distribution switches but hosts use the physical IP of one switch as their default gateway. The relevant control here is: Choose a validated loop-free logical bundle or routed-access topology if active-active use is required.

C:

That option concerns a separate design case: A remote campus uses two distribution switches and requires nonstop gateway access during a planned supervisor replacement. The relevant control here is: Choose a validated loop-free logical bundle or routed-access topology if active-active use is required.

D:

That option concerns a separate design case: A public safety campus requires independent operations from a corporate tenant even when both use the same distribution hardware. The relevant control here is: Choose a validated loop-free logical bundle or routed-access topology if active-active use is required.

Question 148

A video conference SD-WAN policy accepts tunnels with 1% packet loss but ignores sustained jitter above application tolerance. Which design change most directly addresses the stated requirement?

  1. Design redundant supported key servers and registration/rekey recovery for the group encryption domain.
  2. Include latency, jitter and loss thresholds appropriate to the application class.
  3. Apply topology or centralized control policy at the appropriate site/VPN scope.
  4. Use the SD-WAN control-plane and key distribution capabilities appropriate to the supported solution.

Explanation

Correct Answer

B:

The design is validated when selected tunnels meet the approved performance envelope during representative conference traffic.

Incorrect Answers

A:

That option concerns a separate design case: GET VPN group members can route between branches but new devices cannot obtain group security policy after a key-server loss. The relevant control here is: Include latency, jitter and loss thresholds appropriate to the application class.

C:

That option concerns a separate design case: A network wants a hub-and-spoke topology for finance traffic but allows any-to-any policy for all service VPNs. The relevant control here is: Include latency, jitter and loss thresholds appropriate to the application class.

D:

That option concerns a separate design case: A network team manually builds static IPsec tunnels between every SD-WAN edge even though centralized overlay policy is available. The relevant control here is: Include latency, jitter and loss thresholds appropriate to the application class.

Question 149

A design team calculates voice QoS bandwidth solely from codec payload bit rate and ignores RTP, IP and tunnel overhead. Which design change most directly addresses the stated requirement?

  1. Engineer a policer with an appropriate burst tolerance and separate real-time queue protection.
  2. Extend consistent class scheduling to each actual bottleneck along the end-to-end path.
  3. Classify traffic by actual application need and reserve EF treatment for suitable expedited traffic.
  4. Size admission and queue bandwidth using packetization and encapsulation overhead plus concurrent-call estimates.

Explanation

Correct Answer

D:

The design is validated when measured WAN utilization supports peak approved call volume without exceeding the voice service budget.

Incorrect Answers

A:

That option concerns a separate design case: An enterprise edge allows a contracted 50-Mbps guest rate but users report voice degradation during microbursts despite the average staying under 50 Mbps. The relevant control here is: Size admission and queue bandwidth using packetization and encapsulation overhead plus concurrent-call estimates.

B:

That option concerns a separate design case: A campus designs priority queues only on the access switch but ignores a congested upstream WAN edge. The relevant control here is: Size admission and queue bandwidth using packetization and encapsulation overhead plus concurrent-call estimates.

C:

That option concerns a separate design case: A campus uses DSCP EF for voice signaling, voice media, and backup traffic, causing priority queue overload. The relevant control here is: Size admission and queue bandwidth using packetization and encapsulation overhead plus concurrent-call estimates.

Question 150

Branch A and B redistribute external BGP into OSPF, then advertise resulting routes back into BGP at the opposite edge. Which design change most directly addresses the stated requirement?

  1. Configure an appropriate EIGRP stub design on the branch while allowing its locally connected routes to reach the hubs.
  2. Use explicit route tags, prefix filtering, and redistribution boundaries to block feedback loops.
  3. Use local preference or another AS-wide BGP policy rather than relying on locally significant weight.
  4. Evaluate an NSSA design and associated ABR external-route translation rather than a plain stub area.

Explanation

Correct Answer

B:

The design is validated when bidirectional test prefixes appear once with predictable origin and no repeated reimport after failover.

Incorrect Answers

A:

That option concerns a separate design case: A branch EIGRP router advertises remote routes back into its hub and occasionally becomes a transit path between hubs. The relevant control here is: Use explicit route tags, prefix filtering, and redistribution boundaries to block feedback loops.

C:

That option concerns a separate design case: A BGP operator attempts to influence routes within one AS by changing the weight attribute only on one edge router. The relevant control here is: Use explicit route tags, prefix filtering, and redistribution boundaries to block feedback loops.

D:

That option concerns a separate design case: A remote branch uses an OSPF stub area but a design change introduces an ASBR that must redistribute external routes within it. The relevant control here is: Use explicit route tags, prefix filtering, and redistribution boundaries to block feedback loops.

Designing Cisco Enterprise Networks (ENSLD) (300-420) Practice Tests

UP

SPECIAL OFFER: GET 10% OFF

This is ONE TIME OFFER

ExamSnap Discount Offer
Enter Your Email Address to Receive Your 10% Off Discount Code

A confirmation link will be sent to this email address to verify your login. *We value your privacy. We will not rent or sell your email address.

Download Free Demo of VCE Exam Simulator

Experience Avanset VCE Exam Simulator for yourself.

Simply submit your e-mail address below to get started with our interactive software demo of your free trial.

Free Demo Limits: In the demo version you will be able to access only first 5 questions from exam.