Cisco 300-420 Exam Dumps, Practice Test Questions

100% Latest & Updated Cisco 300-420 Practice Test Questions, Exam Dumps & Verified Answers!
30 Days Free Updates, Instant Download!

Cisco 300-420 Premium Bundle
$79.97
$59.98

300-420 Premium Bundle

  • Premium File: 416 Questions & Answers. Last update: Nov 9, 2026
  • Training Course: 75 Video Lectures
  • Study Guide: 812 Pages
  • Latest Questions
  • 100% Accurate Answers
  • Fast Exam Updates

300-420 Premium Bundle

Cisco 300-420 Premium Bundle
  • Premium File: 416 Questions & Answers. Last update: Nov 9, 2026
  • Training Course: 75 Video Lectures
  • Study Guide: 812 Pages
  • Latest Questions
  • 100% Accurate Answers
  • Fast Exam Updates
$79.97
$59.98

Cisco 300-420 Practice Test 18

Question 170

A remote office assigns clients addresses from 169.254.0.0/16 and expects them to be reachable through a routed WAN. Which design change most directly addresses the stated requirement?

  1. Use properly bounded OSPF areas and appropriate summarization at ABRs to contain topology scope.
  2. Configure an appropriate EIGRP stub design on the branch while allowing its locally connected routes to reach the hubs.
  3. Assign distinct /64 prefixes per routed IPv6 segment from a hierarchical site allocation.
  4. Use a legitimately allocated private or global prefix at the remote site and reserve IPv4 link-local for local-only communication.

Explanation

Correct Answer

D:

The design is validated when clients reach the headquarters destination over the routed path using the approved office prefix.

Incorrect Answers

A:

That option concerns a separate design case: An OSPF deployment puts all 600 remote access switches into area 0 and floods changes to every site. The relevant control here is: Use a legitimately allocated private or global prefix at the remote site and reserve IPv4 link-local for local-only communication.

B:

That option concerns a separate design case: A branch EIGRP router advertises remote routes back into its hub and occasionally becomes a transit path between hubs. The relevant control here is: Use a legitimately allocated private or global prefix at the remote site and reserve IPv4 link-local for local-only communication.

C:

That option concerns a separate design case: A campus plans IPv6 addressing with one /64 shared between two routed VLAN interfaces in different buildings. The relevant control here is: Use a legitimately allocated private or global prefix at the remote site and reserve IPv4 link-local for local-only communication.

Question 171

A branch aggregation point has both IS-IS and OSPF neighbors with multiple equal-cost exits; traffic unexpectedly hairpins through a data center. Which design change most directly addresses the stated requirement?

  1. Select supported redundancy mechanisms that separately address link failure and control-plane maintenance transitions.
  2. Simplify path preference at domain boundaries and choose intended transit points based on actual traffic flows.
  3. Build point-to-point routed access uplinks and use ECMP-capable IGP convergence at the access layer.
  4. Apply selective redistribution, tagging and route filtering at clearly defined protocol boundaries.

Explanation

Correct Answer

B:

The design is validated when intercampus traffic follows authorized shortest feasible paths rather than unwanted data-center detours.

Incorrect Answers

A:

That option concerns a separate design case: A new campus design requires maintaining service during both one uplink failure and one planned software upgrade. The relevant control here is: Simplify path preference at domain boundaries and choose intended transit points based on actual traffic flows.

C:

That option concerns a separate design case: A routed-access campus needs equal-cost forwarding to two distribution routers while keeping each VLAN local to one wiring closet. The relevant control here is: Simplify path preference at domain boundaries and choose intended transit points based on actual traffic flows.

D:

That option concerns a separate design case: Two intercampus routers redistribute OSPF and EIGRP in both directions, making route origin hard to track. The relevant control here is: Simplify path preference at domain boundaries and choose intended transit points based on actual traffic flows.

Question 172

Two hospitals need their existing Ethernet VLANs extended across a provider circuit but their engineers incorrectly request a routed L3VPN. Which design change most directly addresses the stated requirement?

  1. Select MPLS L3VPN service with CE-PE routing, per-customer VRFs and explicit route policy.
  2. Evaluate a provider Layer 2 VPN or Ethernet virtual circuit with explicit loop, MTU and broadcast containment design.
  3. Align the service's supported VLAN encapsulation and mapping with the carrier's EVC definition.
  4. Use GRE for appropriate multiprotocol encapsulation and add IPsec separately if confidentiality is required.

Explanation

Correct Answer

B:

The design is validated when the approved VLAN service operates end to end without leaking unrelated hospital segments.

Incorrect Answers

A:

That option concerns a separate design case: A regional healthcare group wants routed site separation within a provider-managed private WAN without building its own full mesh of tunnels. The relevant control here is: Evaluate a provider Layer 2 VPN or Ethernet virtual circuit with explicit loop, MTU and broadcast containment design.

C:

That option concerns a separate design case: Two enterprise buildings use separate Metro Ethernet UNI ports, yet their operators assume the provider will preserve any configured customer VLAN ID. The relevant control here is: Evaluate a provider Layer 2 VPN or Ethernet virtual circuit with explicit loop, MTU and broadcast containment design.

D:

That option concerns a separate design case: A lab requires a routed overlay carrying multicast between sites but encryption is not part of the GRE service itself. The relevant control here is: Evaluate a provider Layer 2 VPN or Ethernet virtual circuit with explicit loop, MTU and broadcast containment design.

Question 173

A support dashboard needs regular CPU and interface-rate samples even when values remain unchanged. Which design change most directly addresses the stated requirement?

  1. Distinguish IETF standards-track models from OpenConfig community models and vendor-native schema ownership.
  2. Use a periodic telemetry subscription at a measured cadence suitable for trending and capacity planning.
  3. Design timestamped telemetry with source identification and collector reconnection/backfill policy as supported.
  4. Use supported on-change telemetry for the interface state leaf where device and model support it.

Explanation

Correct Answer

B:

The design is validated when the receiver continues receiving timestamped samples during steady-state operation.

Incorrect Answers

A:

That option concerns a separate design case: A standards group needs an interoperable interface model but mistakenly calls every IETF YANG module an OpenConfig model. The relevant control here is: Use a periodic telemetry subscription at a measured cadence suitable for trending and capacity planning.

C:

That option concerns a separate design case: A security operations service needs authoritative interface state changes, not a dashboard that replays stale telemetry after collector failure. The relevant control here is: Use a periodic telemetry subscription at a measured cadence suitable for trending and capacity planning.

D:

That option concerns a separate design case: An alerting system needs immediate notice of interface administrative status changes but only polls every five minutes. The relevant control here is: Use a periodic telemetry subscription at a measured cadence suitable for trending and capacity planning.

Question 174

A 20-Mbps backup link replaces a 200-Mbps primary WAN but the shaper keeps its 200-Mbps limit after failover. Which design change most directly addresses the stated requirement?

  1. Create feasible bandwidth allocations and an explicit priority bandwidth budget that sums within supported scheduler constraints.
  2. Classify traffic by actual application need and reserve EF treatment for suitable expedited traffic.
  3. Use link-aware QoS policy to update shaping and class allocations for the reduced-capacity backup transport.
  4. Provide independent telemetry or out-of-band access appropriate to site criticality and budget.

Explanation

Correct Answer

C:

The design is validated when backup traffic stays within the 20-Mbps service rate and critical classes remain usable.

Incorrect Answers

A:

That option concerns a separate design case: A switch QoS scheduler guarantees 30% to backup traffic and 80% to voice under full congestion, exceeding possible link capacity. The relevant control here is: Use link-aware QoS policy to update shaping and class allocations for the reduced-capacity backup transport.

B:

That option concerns a separate design case: A campus uses DSCP EF for voice signaling, voice media, and backup traffic, causing priority queue overload. The relevant control here is: Use link-aware QoS policy to update shaping and class allocations for the reduced-capacity backup transport.

D:

That option concerns a separate design case: Network management of a branch uses a VPN over its sole primary WAN, and the organization reports no way to diagnose a provider outage. The relevant control here is: Use link-aware QoS policy to update shaping and class allocations for the reduced-capacity backup transport.

Question 175

Multiple campus cores are connected in a full mesh, creating expensive adjacency and troubleshooting overhead. Which design change most directly addresses the stated requirement?

  1. Evaluate a supported SDA transit that preserves virtual network and SGT policy semantics between sites.
  2. Size the entire routed underlay MTU for supported encapsulated payloads rather than only endpoint Ethernet frames.
  3. Use a topology appropriate to business resilience requirements, such as a structured regional core with redundant distribution paths.
  4. Design VRF-aware border handoffs or supported segmentation-preserving transit consistent with the policy boundary.

Explanation

Correct Answer

C:

The design is validated when a single link failure preserves required site connectivity without unnecessary adjacency proliferation.

Incorrect Answers

A:

That option concerns a separate design case: An organization needs consistent segmentation across two SD-Access fabric sites connected by a routed MPLS service. The relevant control here is: Use a topology appropriate to business resilience requirements, such as a structured regional core with redundant distribution paths.

B:

That option concerns a separate design case: Fabric edge nodes encapsulate packets, but the underlay path MTU is too small for added VXLAN overhead. The relevant control here is: Use a topology appropriate to business resilience requirements, such as a structured regional core with redundant distribution paths.

D:

That option concerns a separate design case: A campus has a fabric border but its external firewall cannot distinguish multiple endpoint VNs leaving the fabric. The relevant control here is: Use a topology appropriate to business resilience requirements, such as a structured regional core with redundant distribution paths.

Question 176

A branch OSPF design selects a totally stubby area but an application requires type-3 interarea routes rather than only the default. Which design change most directly addresses the stated requirement?

  1. Apply compatible supported OSPF authentication with coordinated keys and rollover on both ends.
  2. Use explicit route tags, prefix filtering, and redistribution boundaries to block feedback loops.
  3. Choose the appropriate stub-area variant or redesign to preserve required interarea summaries.
  4. Use properly bounded OSPF areas and appropriate summarization at ABRs to contain topology scope.

Explanation

Correct Answer

C:

The design is validated when the branch receives the intended interarea destinations and no unwanted external LSAs.

Incorrect Answers

A:

That option concerns a separate design case: A security design requires authenticating OSPF control packets on shared routed links, but only one neighbor has authentication enabled. The relevant control here is: Choose the appropriate stub-area variant or redesign to preserve required interarea summaries.

B:

That option concerns a separate design case: Branch A and B redistribute external BGP into OSPF, then advertise resulting routes back into BGP at the opposite edge. The relevant control here is: Choose the appropriate stub-area variant or redesign to preserve required interarea summaries.

D:

That option concerns a separate design case: An OSPF deployment puts all 600 remote access switches into area 0 and floods changes to every site. The relevant control here is: Choose the appropriate stub-area variant or redesign to preserve required interarea summaries.

Question 177

A city campus needs a 10-Gbps local metro interconnect with SLA and carrier demarcation, but the proposed design assumes standard broadband internet guarantees. Which design change most directly addresses the stated requirement?

  1. Select an appropriate private APN, outbound-initiated overlay, or routable-address service depending on carrier capabilities.
  2. Evaluate policy-controlled local internet breakout with appropriate security inspection and application path measurement.
  3. Evaluate a Metro Ethernet service with committed bandwidth, fault demarcation and suitable Ethernet handoff.
  4. Plan underlay/overlay MTU and MSS handling for encapsulation overhead across the WAN path.

Explanation

Correct Answer

C:

The design is validated when measured throughput and failover meet the contractual envelope across the metro sites.

Incorrect Answers

A:

That option concerns a separate design case: An industrial site uses 4G LTE as primary WAN, and its routing team assumes public inbound addresses remain reachable through carrier-grade NAT. The relevant control here is: Evaluate a Metro Ethernet service with committed bandwidth, fault demarcation and suitable Ethernet handoff.

B:

That option concerns a separate design case: A retail design directs all cloud SaaS traffic through headquarters even though local internet breakout is allowed and latency is poor. The relevant control here is: Evaluate a Metro Ethernet service with committed bandwidth, fault demarcation and suitable Ethernet handoff.

D:

That option concerns a separate design case: A branch uses IPsec overlay on broadband with 1400-byte effective MTU, but an application sends 1500-byte DF-set packets and stalls. The relevant control here is: Evaluate a Metro Ethernet service with committed bandwidth, fault demarcation and suitable Ethernet handoff.

Question 178

A branch QoS policy matches all TCP 443 traffic as video, including large software downloads. Which design change most directly addresses the stated requirement?

  1. Use validated application classification or more precise traffic identity instead of assuming TCP port 443 defines one service.
  2. Separate delay-critical voice priority from video classes with appropriate bounded queuing and bandwidth guarantees.
  3. Remap backup traffic to a less-preferred class and protect media queues for their intended applications.
  4. Protect essential routing/control traffic within bounded QoS classes at actual bottlenecks.

Explanation

Correct Answer

A:

The design is validated when only the intended interactive application receives real-time class treatment during a test.

Incorrect Answers

B:

That option concerns a separate design case: Video and voice both use one strict-priority queue, causing voice jitter when video surges. The relevant control here is: Use validated application classification or more precise traffic identity instead of assuming TCP port 443 defines one service.

C:

That option concerns a separate design case: A QoS controller marks all backup data DSCP AF41 while the provider honors it as a premium video class. The relevant control here is: Use validated application classification or more precise traffic identity instead of assuming TCP port 443 defines one service.

D:

That option concerns a separate design case: A campus QoS policy gives low priority to routing keepalives and network monitoring, and routing adjacencies flap during congestion. The relevant control here is: Use validated application classification or more precise traffic identity instead of assuming TCP port 443 defines one service.

Question 179

Two campus distribution routers each have a single power feed from the same rack PDU, yet the architecture counts them as separate fault domains. Which design change most directly addresses the stated requirement?

  1. Use a validated stack/virtual chassis/MEC design or independent routed uplinks according to supported platform capabilities.
  2. Keep local VLAN boundaries and provide a scoped supported discovery relay or service registration alternative.
  3. Provide independent power infrastructure for each redundant network node and validate dual-path resilience.
  4. Build point-to-point routed access uplinks and use ECMP-capable IGP convergence at the access layer.

Explanation

Correct Answer

C:

The design is validated when loss of either PDU leaves the campus default gateway and upstream traffic operating.

Incorrect Answers

A:

That option concerns a separate design case: Two access switches uplink to a distribution pair; the architecture stretches one port channel across chassis without verifying multi-chassis support. The relevant control here is: Provide independent power infrastructure for each redundant network node and validate dual-path resilience.

B:

That option concerns a separate design case: A campus access layer spans large broadcast domains for print discovery despite an architecture target of small local VLANs. The relevant control here is: Provide independent power infrastructure for each redundant network node and validate dual-path resilience.

D:

That option concerns a separate design case: A routed-access campus needs equal-cost forwarding to two distribution routers while keeping each VLAN local to one wiring closet. The relevant control here is: Provide independent power infrastructure for each redundant network node and validate dual-path resilience.

Question 180

A branch EIGRP router advertises remote routes back into its hub and occasionally becomes a transit path between hubs. Which design change most directly addresses the stated requirement?

  1. Evaluate whether additional-paths or path diversity is required and supported by the topology and platforms.
  2. Plan the EIGRP successor and feasible-successor relationship using composite metric and feasibility checks.
  3. Configure an appropriate EIGRP stub design on the branch while allowing its locally connected routes to reach the hubs.
  4. Apply EIGRP summarization, stub boundaries, and reliable connectivity to limit query scope.

Explanation

Correct Answer

C:

The design is validated when hubs avoid querying through the branch as a transit path and branch-local prefixes remain visible.

Incorrect Answers

A:

That option concerns a separate design case: An iBGP route reflector sees several candidate routes to the same destination but advertises only its best path to clients. The relevant control here is: Configure an appropriate EIGRP stub design on the branch while allowing its locally connected routes to reach the hubs.

B:

That option concerns a separate design case: A router receives two EIGRP routes for a prefix with different metrics and the design team wants deterministic failover. The relevant control here is: Configure an appropriate EIGRP stub design on the branch while allowing its locally connected routes to reach the hubs.

D:

That option concerns a separate design case: An EIGRP core has routes stuck active after one WAN path fails and queries spread into many remote sites. The relevant control here is: Configure an appropriate EIGRP stub design on the branch while allowing its locally connected routes to reach the hubs.

Designing Cisco Enterprise Networks (ENSLD) (300-420) Practice Tests

UP

SPECIAL OFFER: GET 10% OFF

This is ONE TIME OFFER

ExamSnap Discount Offer
Enter Your Email Address to Receive Your 10% Off Discount Code

A confirmation link will be sent to this email address to verify your login. *We value your privacy. We will not rent or sell your email address.

Download Free Demo of VCE Exam Simulator

Experience Avanset VCE Exam Simulator for yourself.

Simply submit your e-mail address below to get started with our interactive software demo of your free trial.

Free Demo Limits: In the demo version you will be able to access only first 5 questions from exam.