Cisco 300-420 Exam Dumps, Practice Test Questions

100% Latest & Updated Cisco 300-420 Practice Test Questions, Exam Dumps & Verified Answers!
30 Days Free Updates, Instant Download!

Cisco 300-420 Premium Bundle
$79.97
$59.98

300-420 Premium Bundle

  • Premium File: 416 Questions & Answers. Last update: Nov 9, 2026
  • Training Course: 75 Video Lectures
  • Study Guide: 812 Pages
  • Latest Questions
  • 100% Accurate Answers
  • Fast Exam Updates

300-420 Premium Bundle

Cisco 300-420 Premium Bundle
  • Premium File: 416 Questions & Answers. Last update: Nov 9, 2026
  • Training Course: 75 Video Lectures
  • Study Guide: 812 Pages
  • Latest Questions
  • 100% Accurate Answers
  • Fast Exam Updates
$79.97
$59.98

Cisco 300-420 Practice Test 16

Question 150

Branch A and B redistribute external BGP into OSPF, then advertise resulting routes back into BGP at the opposite edge. Which design change most directly addresses the stated requirement?

  1. Configure an appropriate EIGRP stub design on the branch while allowing its locally connected routes to reach the hubs.
  2. Use explicit route tags, prefix filtering, and redistribution boundaries to block feedback loops.
  3. Use local preference or another AS-wide BGP policy rather than relying on locally significant weight.
  4. Evaluate an NSSA design and associated ABR external-route translation rather than a plain stub area.

Explanation

Correct Answer

B:

The design is validated when bidirectional test prefixes appear once with predictable origin and no repeated reimport after failover.

Incorrect Answers

A:

That option concerns a separate design case: A branch EIGRP router advertises remote routes back into its hub and occasionally becomes a transit path between hubs. The relevant control here is: Use explicit route tags, prefix filtering, and redistribution boundaries to block feedback loops.

C:

That option concerns a separate design case: A BGP operator attempts to influence routes within one AS by changing the weight attribute only on one edge router. The relevant control here is: Use explicit route tags, prefix filtering, and redistribution boundaries to block feedback loops.

D:

That option concerns a separate design case: A remote branch uses an OSPF stub area but a design change introduces an ASBR that must redistribute external routes within it. The relevant control here is: Use explicit route tags, prefix filtering, and redistribution boundaries to block feedback loops.

Question 151

A switch must remotely wake office PCs overnight, but the access port powers down and the design assumes Wake-on-LAN works regardless of power state. Which design change most directly addresses the stated requirement?

  1. Preserve a supported link and endpoint power/wake capability along the intended WoL packet delivery path.
  2. Reclassify the specific supported bridge-facing port and retain edge protection elsewhere.
  3. Use BPDU Guard on approved edge ports and root-protection policy where appropriate for uplinks.
  4. Trust only legitimate DHCP server/uplink paths and keep edge client ports untrusted.

Explanation

Correct Answer

A:

The design is validated when target PCs wake under a controlled off-hours test without exposing unnecessary broadcast reachability.

Incorrect Answers

B:

That option concerns a separate design case: An access switch's BPDU Guard disables a legitimate downstream bridge, and the network team proposes disabling Guard on every port. The relevant control here is: Preserve a supported link and endpoint power/wake capability along the intended WoL packet delivery path.

C:

That option concerns a separate design case: An attacker plugs an unmanaged switch into a lobby edge port and advertises superior STP BPDUs, changing the root topology. The relevant control here is: Preserve a supported link and endpoint power/wake capability along the intended WoL packet delivery path.

D:

That option concerns a separate design case: A routed campus uses DHCP snooping on access switches but marks every endpoint port trusted for convenience. The relevant control here is: Preserve a supported link and endpoint power/wake capability along the intended WoL packet delivery path.

Question 152

An industrial site uses 4G LTE as primary WAN, and its routing team assumes public inbound addresses remain reachable through carrier-grade NAT. Which design change most directly addresses the stated requirement?

  1. Select an appropriate private APN, outbound-initiated overlay, or routable-address service depending on carrier capabilities.
  2. Introduce deliberate recovery policy or dampening to prevent repeated unstable failback.
  3. Design control/management resilience separately from WAN edge data-plane forwarding.
  4. Separate optical multiplexing requirements from routing or Ethernet tenant segmentation carried over the wavelengths.

Explanation

Correct Answer

A:

The design is validated when the branch establishes the required controlled overlay sessions without depending on unsupported unsolicited inbound access.

Incorrect Answers

B:

That option concerns a separate design case: A dual-carrier WAN design changes to backup but automatically switches back on every momentary primary heartbeat recovery. The relevant control here is: Select an appropriate private APN, outbound-initiated overlay, or routable-address service depending on carrier capabilities.

C:

That option concerns a separate design case: A multisite SD-WAN deployment uses one manager for configuration and assumes manager reachability is necessary for every packet of user data. The relevant control here is: Select an appropriate private APN, outbound-initiated overlay, or routable-address service depending on carrier capabilities.

D:

That option concerns a separate design case: A WAN team assumes DWDM wavelength multiplexing itself supplies packet-level route isolation between tenants. The relevant control here is: Select an appropriate private APN, outbound-initiated overlay, or routable-address service depending on carrier capabilities.

Question 153

An enterprise WAN receives DSCP values from untrusted guest clients and propagates them unchanged into privileged queues. Which design change most directly addresses the stated requirement?

  1. Establish an explicit QoS trust boundary that remarks or rejects unauthorized markings at ingress.
  2. Extend consistent class scheduling to each actual bottleneck along the end-to-end path.
  3. Map internal DSCP classes onto the provider-supported service groups explicitly and consistently.
  4. Constrain route leaking to the precise management service endpoints and permitted directions.

Explanation

Correct Answer

A:

The design is validated when guest traffic uses its approved classes without consuming the premium real-time queue.

Incorrect Answers

B:

That option concerns a separate design case: A campus designs priority queues only on the access switch but ignores a congested upstream WAN edge. The relevant control here is: Establish an explicit QoS trust boundary that remarks or rejects unauthorized markings at ingress.

C:

That option concerns a separate design case: A WAN provider accepts only three traffic classes but headquarters configures eight local DSCP queues and assumes all survive the handoff. The relevant control here is: Establish an explicit QoS trust boundary that remarks or rejects unauthorized markings at ingress.

D:

That option concerns a separate design case: A campus firewall isolates management VRFs but its shared-services route leaking exports all loopbacks to the guest VRF. The relevant control here is: Establish an explicit QoS trust boundary that remarks or rejects unauthorized markings at ingress.

Question 154

A monitoring team tries to exchange gNMI Get and Subscribe messages with a device that only exposes ordinary HTTP REST endpoints. Which design change most directly addresses the stated requirement?

  1. Classify the hosted runtime as PaaS and document the application versus platform operations boundary.
  2. Design NETCONF operations around capabilities, RPCs, datastores and transactional edit/commit behavior where supported.
  3. Validate authenticated RESTCONF resource responses and follow-up model reads, not merely transport-level success.
  4. Use the supported gNMI service transported over gRPC with device capability and identity verification.

Explanation

Correct Answer

D:

The design is validated when the client negotiates capabilities and receives model-based Get/Subscribe responses from the intended target.

Incorrect Answers

A:

That option concerns a separate design case: A development team consumes a managed runtime that deploys application code without administering underlying servers and calls it raw IaaS. The relevant control here is: Use the supported gNMI service transported over gRPC with device capability and identity verification.

B:

That option concerns a separate design case: An automation team expects NETCONF transactions over SSH to behave like stateless HTTP GET calls with no session or lock semantics. The relevant control here is: Use the supported gNMI service transported over gRPC with device capability and identity verification.

C:

That option concerns a separate design case: A controller issues RESTCONF PATCH to many routers but treats HTTP 200 from a reverse proxy login page as proof that config was changed. The relevant control here is: Use the supported gNMI service transported over gRPC with device capability and identity verification.

Question 155

A branch OSPF adjacency across a pseudowire drops after interface network type changes, even though both neighbors are reachable by ping. Which design change most directly addresses the stated requirement?

  1. Align compatible OSPF network type, timers, authentication and neighbor discovery model for that link.
  2. Subdivide the /48 hierarchically by branch and VLAN, with unique /64s and aggregate boundaries that fit the delegation.
  3. Choose the appropriate stub-area variant or redesign to preserve required interarea summaries.
  4. Use properly bounded OSPF areas and appropriate summarization at ABRs to contain topology scope.

Explanation

Correct Answer

A:

The design is validated when both peers reach FULL and maintain the expected DR or point-to-point behavior.

Incorrect Answers

B:

This alternative is aimed at a different design constraint: A provider delegation contains 2001:db8:4200::/48 and the design requires 256 independent /64 LANs across 16 branches. The relevant control for this case is: Align compatible OSPF network type, timers, authentication and neighbor discovery model for that link.

C:

That option concerns a separate design case: A branch OSPF design selects a totally stubby area but an application requires type-3 interarea routes rather than only the default. The relevant control here is: Align compatible OSPF network type, timers, authentication and neighbor discovery model for that link.

D:

That option concerns a separate design case: An OSPF deployment puts all 600 remote access switches into area 0 and floods changes to every site. The relevant control here is: Align compatible OSPF network type, timers, authentication and neighbor discovery model for that link.

Question 156

A campus has a fabric border but its external firewall cannot distinguish multiple endpoint VNs leaving the fabric. Which design change most directly addresses the stated requirement?

  1. Design VRF-aware border handoffs or supported segmentation-preserving transit consistent with the policy boundary.
  2. Use VRF-based routing separation with explicitly controlled route leaking for shared services.
  3. Keep underlay IP reachability independent of endpoint addressing and establish the intended overlay virtual networks.
  4. Plan redundant supported fabric control-plane nodes with resilient underlay reachability.

Explanation

Correct Answer

A:

The design is validated when external routes and flows remain segmented by approved virtual network.

Incorrect Answers

B:

That option concerns a separate design case: Two tenants use 10.0.0.0/8 addressing and share the same campus core but require separate routing and firewall policies. The relevant control here is: Design VRF-aware border handoffs or supported segmentation-preserving transit consistent with the policy boundary.

C:

That option concerns a separate design case: In a planned SD-Access fabric, border nodes can reach edge loopbacks but endpoints fail because the team placed user subnets into the underlay instead of overlay VRFs. The relevant control here is: Design VRF-aware border handoffs or supported segmentation-preserving transit consistent with the policy boundary.

D:

That option concerns a separate design case: A fabric control-plane node becomes unavailable and endpoint mobility updates stop at one campus site. The relevant control here is: Design VRF-aware border handoffs or supported segmentation-preserving transit consistent with the policy boundary.

Question 157

A branch uses a shaper on voice and bulk traffic together, and the business assumes shaping guarantees that voice always transmits first. Which design change most directly addresses the stated requirement?

  1. Pair shaping with explicit class-based queuing and suitable real-time priority policy.
  2. Classify traffic by actual application need and reserve EF treatment for suitable expedited traffic.
  3. Segment management-plane access by role/tenant and enforce ACLs and authentication at the boundaries.
  4. Negotiate supported carrier class-of-service and align enterprise markings to the actual WAN service contract.

Explanation

Correct Answer

A:

The design is validated when under congestion, voice receives its intended service while total egress stays within the shaped rate.

Incorrect Answers

B:

That option concerns a separate design case: A campus uses DSCP EF for voice signaling, voice media, and backup traffic, causing priority queue overload. The relevant control here is: Pair shaping with explicit class-based queuing and suitable real-time priority policy.

C:

That option concerns a separate design case: Two business units share one management VLAN with unrestricted access to each other's routers. The relevant control here is: Pair shaping with explicit class-based queuing and suitable real-time priority policy.

D:

That option concerns a separate design case: A network architect assumes assigning DSCP CS6 to user browsing guarantees faster internet service from a provider that resets all DSCP. The relevant control here is: Pair shaping with explicit class-based queuing and suitable real-time priority policy.

Question 158

Several data centers need high-capacity optical transport over metropolitan dark fiber without converting each tenant VLAN to an IP tunnel. Which design change most directly addresses the stated requirement?

  1. Evaluate DWDM wavelength services with optics, reach, dispersion and protection appropriate to the fiber plant.
  2. Provide independent edge and transport paths when required; treat controller redundancy as a separate failure domain.
  3. Use a provider Layer 2 service with customer-controlled Layer 3 adjacencies and monitoring.
  4. Validate backup access, overlay establishment and route activation under simulated primary loss.

Explanation

Correct Answer

A:

The design is validated when protected optical channels carry authorized client services with measured bit-error and failover performance.

Incorrect Answers

B:

That option concerns a separate design case: A new SD-WAN site has a single edge appliance and single underlay yet is approved as redundant because controllers run in different data centers. The relevant control here is: Evaluate DWDM wavelength services with optics, reach, dispersion and protection appropriate to the fiber plant.

C:

That option concerns a separate design case: A financial organization leases a transparent point-to-point Ethernet service but requires independent routing at each site. The relevant control here is: Evaluate DWDM wavelength services with optics, reach, dispersion and protection appropriate to the fiber plant.

D:

That option concerns a separate design case: Backup 5G is installed at a factory but its data plan and APN firewall rules block VPN establishment after primary fiber failure. The relevant control here is: Evaluate DWDM wavelength services with optics, reach, dispersion and protection appropriate to the fiber plant.

Question 159

A remote campus uses two distribution switches and requires nonstop gateway access during a planned supervisor replacement. Which design change most directly addresses the stated requirement?

  1. Design an appropriate first-hop redundancy protocol with a shared virtual gateway and verified uplink tracking.
  2. Trust only legitimate DHCP server/uplink paths and keep edge client ports untrusted.
  3. Intentionally distribute primary FHRP roles across VLAN groups while preserving corresponding upstream capacity and failover policy.
  4. Choose a supported redundant supervisor or logical chassis abstraction with explicitly documented switchover behavior.

Explanation

Correct Answer

D:

The design is validated when gateway traffic survives a controlled supervisor transition within the approved outage budget.

Incorrect Answers

A:

That option concerns a separate design case: A building has two independent distribution switches but hosts use the physical IP of one switch as their default gateway. The relevant control here is: Choose a supported redundant supervisor or logical chassis abstraction with explicitly documented switchover behavior.

B:

That option concerns a separate design case: A routed campus uses DHCP snooping on access switches but marks every endpoint port trusted for convenience. The relevant control here is: Choose a supported redundant supervisor or logical chassis abstraction with explicitly documented switchover behavior.

C:

That option concerns a separate design case: A campus with several hundred VLANs uses one active HSRP gateway for all VLANs while another distribution router remains mostly idle. The relevant control here is: Choose a supported redundant supervisor or logical chassis abstraction with explicitly documented switchover behavior.

Question 160

A remote branch uses an OSPF stub area but a design change introduces an ASBR that must redistribute external routes within it. Which design change most directly addresses the stated requirement?

  1. Define controlled redistribution policy, route tags, and appropriate metric type to avoid redundant uncontrolled advertisements.
  2. Evaluate an NSSA design and associated ABR external-route translation rather than a plain stub area.
  3. Use explicit route tags, prefix filtering, and redistribution boundaries to block feedback loops.
  4. Use properly bounded OSPF areas and appropriate summarization at ABRs to contain topology scope.

Explanation

Correct Answer

B:

The design is validated when required external routes originate inside the NSSA and are translated into the rest of the OSPF domain as designed.

Incorrect Answers

A:

That option concerns a separate design case: An OSPF redistribution boundary introduces the same connected subnet from two ASBRs, resulting in inconsistent egress selection. The relevant control here is: Evaluate an NSSA design and associated ABR external-route translation rather than a plain stub area.

C:

That option concerns a separate design case: Branch A and B redistribute external BGP into OSPF, then advertise resulting routes back into BGP at the opposite edge. The relevant control here is: Evaluate an NSSA design and associated ABR external-route translation rather than a plain stub area.

D:

That option concerns a separate design case: An OSPF deployment puts all 600 remote access switches into area 0 and floods changes to every site. The relevant control here is: Evaluate an NSSA design and associated ABR external-route translation rather than a plain stub area.

Designing Cisco Enterprise Networks (ENSLD) (300-420) Practice Tests

UP

SPECIAL OFFER: GET 10% OFF

This is ONE TIME OFFER

ExamSnap Discount Offer
Enter Your Email Address to Receive Your 10% Off Discount Code

A confirmation link will be sent to this email address to verify your login. *We value your privacy. We will not rent or sell your email address.

Download Free Demo of VCE Exam Simulator

Experience Avanset VCE Exam Simulator for yourself.

Simply submit your e-mail address below to get started with our interactive software demo of your free trial.

Free Demo Limits: In the demo version you will be able to access only first 5 questions from exam.