100% Latest & Updated Cisco 300-420 Practice Test Questions, Exam Dumps & Verified Answers!
30 Days Free Updates, Instant Download!
Question 170
A remote office assigns clients addresses from 169.254.0.0/16 and expects them to be reachable through a routed WAN. Which design change most directly addresses the stated requirement?
- Use properly bounded OSPF areas and appropriate summarization at ABRs to contain topology scope.
- Configure an appropriate EIGRP stub design on the branch while allowing its locally connected routes to reach the hubs.
- Assign distinct /64 prefixes per routed IPv6 segment from a hierarchical site allocation.
- Use a legitimately allocated private or global prefix at the remote site and reserve IPv4 link-local for local-only communication.
Explanation
Correct Answer
D:The design is validated when clients reach the headquarters destination over the routed path using the approved office prefix.
Incorrect Answers
A:That option concerns a separate design case: An OSPF deployment puts all 600 remote access switches into area 0 and floods changes to every site. The relevant control here is: Use a legitimately allocated private or global prefix at the remote site and reserve IPv4 link-local for local-only communication.
B:That option concerns a separate design case: A branch EIGRP router advertises remote routes back into its hub and occasionally becomes a transit path between hubs. The relevant control here is: Use a legitimately allocated private or global prefix at the remote site and reserve IPv4 link-local for local-only communication.
C:That option concerns a separate design case: A campus plans IPv6 addressing with one /64 shared between two routed VLAN interfaces in different buildings. The relevant control here is: Use a legitimately allocated private or global prefix at the remote site and reserve IPv4 link-local for local-only communication.
Question 171
A branch aggregation point has both IS-IS and OSPF neighbors with multiple equal-cost exits; traffic unexpectedly hairpins through a data center. Which design change most directly addresses the stated requirement?
- Select supported redundancy mechanisms that separately address link failure and control-plane maintenance transitions.
- Simplify path preference at domain boundaries and choose intended transit points based on actual traffic flows.
- Build point-to-point routed access uplinks and use ECMP-capable IGP convergence at the access layer.
- Apply selective redistribution, tagging and route filtering at clearly defined protocol boundaries.
Explanation
Correct Answer
B:The design is validated when intercampus traffic follows authorized shortest feasible paths rather than unwanted data-center detours.
Incorrect Answers
A:That option concerns a separate design case: A new campus design requires maintaining service during both one uplink failure and one planned software upgrade. The relevant control here is: Simplify path preference at domain boundaries and choose intended transit points based on actual traffic flows.
C:That option concerns a separate design case: A routed-access campus needs equal-cost forwarding to two distribution routers while keeping each VLAN local to one wiring closet. The relevant control here is: Simplify path preference at domain boundaries and choose intended transit points based on actual traffic flows.
D:That option concerns a separate design case: Two intercampus routers redistribute OSPF and EIGRP in both directions, making route origin hard to track. The relevant control here is: Simplify path preference at domain boundaries and choose intended transit points based on actual traffic flows.
Question 172
Two hospitals need their existing Ethernet VLANs extended across a provider circuit but their engineers incorrectly request a routed L3VPN. Which design change most directly addresses the stated requirement?
- Select MPLS L3VPN service with CE-PE routing, per-customer VRFs and explicit route policy.
- Evaluate a provider Layer 2 VPN or Ethernet virtual circuit with explicit loop, MTU and broadcast containment design.
- Align the service's supported VLAN encapsulation and mapping with the carrier's EVC definition.
- Use GRE for appropriate multiprotocol encapsulation and add IPsec separately if confidentiality is required.
Explanation
Correct Answer
B:The design is validated when the approved VLAN service operates end to end without leaking unrelated hospital segments.
Incorrect Answers
A:That option concerns a separate design case: A regional healthcare group wants routed site separation within a provider-managed private WAN without building its own full mesh of tunnels. The relevant control here is: Evaluate a provider Layer 2 VPN or Ethernet virtual circuit with explicit loop, MTU and broadcast containment design.
C:That option concerns a separate design case: Two enterprise buildings use separate Metro Ethernet UNI ports, yet their operators assume the provider will preserve any configured customer VLAN ID. The relevant control here is: Evaluate a provider Layer 2 VPN or Ethernet virtual circuit with explicit loop, MTU and broadcast containment design.
D:That option concerns a separate design case: A lab requires a routed overlay carrying multicast between sites but encryption is not part of the GRE service itself. The relevant control here is: Evaluate a provider Layer 2 VPN or Ethernet virtual circuit with explicit loop, MTU and broadcast containment design.
Question 173
A support dashboard needs regular CPU and interface-rate samples even when values remain unchanged. Which design change most directly addresses the stated requirement?
- Distinguish IETF standards-track models from OpenConfig community models and vendor-native schema ownership.
- Use a periodic telemetry subscription at a measured cadence suitable for trending and capacity planning.
- Design timestamped telemetry with source identification and collector reconnection/backfill policy as supported.
- Use supported on-change telemetry for the interface state leaf where device and model support it.
Explanation
Correct Answer
B:The design is validated when the receiver continues receiving timestamped samples during steady-state operation.
Incorrect Answers
A:That option concerns a separate design case: A standards group needs an interoperable interface model but mistakenly calls every IETF YANG module an OpenConfig model. The relevant control here is: Use a periodic telemetry subscription at a measured cadence suitable for trending and capacity planning.
C:That option concerns a separate design case: A security operations service needs authoritative interface state changes, not a dashboard that replays stale telemetry after collector failure. The relevant control here is: Use a periodic telemetry subscription at a measured cadence suitable for trending and capacity planning.
D:That option concerns a separate design case: An alerting system needs immediate notice of interface administrative status changes but only polls every five minutes. The relevant control here is: Use a periodic telemetry subscription at a measured cadence suitable for trending and capacity planning.
Question 174
A 20-Mbps backup link replaces a 200-Mbps primary WAN but the shaper keeps its 200-Mbps limit after failover. Which design change most directly addresses the stated requirement?
- Create feasible bandwidth allocations and an explicit priority bandwidth budget that sums within supported scheduler constraints.
- Classify traffic by actual application need and reserve EF treatment for suitable expedited traffic.
- Use link-aware QoS policy to update shaping and class allocations for the reduced-capacity backup transport.
- Provide independent telemetry or out-of-band access appropriate to site criticality and budget.
Explanation
Correct Answer
C:The design is validated when backup traffic stays within the 20-Mbps service rate and critical classes remain usable.
Incorrect Answers
A:That option concerns a separate design case: A switch QoS scheduler guarantees 30% to backup traffic and 80% to voice under full congestion, exceeding possible link capacity. The relevant control here is: Use link-aware QoS policy to update shaping and class allocations for the reduced-capacity backup transport.
B:That option concerns a separate design case: A campus uses DSCP EF for voice signaling, voice media, and backup traffic, causing priority queue overload. The relevant control here is: Use link-aware QoS policy to update shaping and class allocations for the reduced-capacity backup transport.
D:That option concerns a separate design case: Network management of a branch uses a VPN over its sole primary WAN, and the organization reports no way to diagnose a provider outage. The relevant control here is: Use link-aware QoS policy to update shaping and class allocations for the reduced-capacity backup transport.
Question 175
Multiple campus cores are connected in a full mesh, creating expensive adjacency and troubleshooting overhead. Which design change most directly addresses the stated requirement?
- Evaluate a supported SDA transit that preserves virtual network and SGT policy semantics between sites.
- Size the entire routed underlay MTU for supported encapsulated payloads rather than only endpoint Ethernet frames.
- Use a topology appropriate to business resilience requirements, such as a structured regional core with redundant distribution paths.
- Design VRF-aware border handoffs or supported segmentation-preserving transit consistent with the policy boundary.
Explanation
Correct Answer
C:The design is validated when a single link failure preserves required site connectivity without unnecessary adjacency proliferation.
Incorrect Answers
A:That option concerns a separate design case: An organization needs consistent segmentation across two SD-Access fabric sites connected by a routed MPLS service. The relevant control here is: Use a topology appropriate to business resilience requirements, such as a structured regional core with redundant distribution paths.
B:That option concerns a separate design case: Fabric edge nodes encapsulate packets, but the underlay path MTU is too small for added VXLAN overhead. The relevant control here is: Use a topology appropriate to business resilience requirements, such as a structured regional core with redundant distribution paths.
D:That option concerns a separate design case: A campus has a fabric border but its external firewall cannot distinguish multiple endpoint VNs leaving the fabric. The relevant control here is: Use a topology appropriate to business resilience requirements, such as a structured regional core with redundant distribution paths.
Question 176
A branch OSPF design selects a totally stubby area but an application requires type-3 interarea routes rather than only the default. Which design change most directly addresses the stated requirement?
- Apply compatible supported OSPF authentication with coordinated keys and rollover on both ends.
- Use explicit route tags, prefix filtering, and redistribution boundaries to block feedback loops.
- Choose the appropriate stub-area variant or redesign to preserve required interarea summaries.
- Use properly bounded OSPF areas and appropriate summarization at ABRs to contain topology scope.
Explanation
Correct Answer
C:The design is validated when the branch receives the intended interarea destinations and no unwanted external LSAs.
Incorrect Answers
A:That option concerns a separate design case: A security design requires authenticating OSPF control packets on shared routed links, but only one neighbor has authentication enabled. The relevant control here is: Choose the appropriate stub-area variant or redesign to preserve required interarea summaries.
B:That option concerns a separate design case: Branch A and B redistribute external BGP into OSPF, then advertise resulting routes back into BGP at the opposite edge. The relevant control here is: Choose the appropriate stub-area variant or redesign to preserve required interarea summaries.
D:That option concerns a separate design case: An OSPF deployment puts all 600 remote access switches into area 0 and floods changes to every site. The relevant control here is: Choose the appropriate stub-area variant or redesign to preserve required interarea summaries.
Question 177
A city campus needs a 10-Gbps local metro interconnect with SLA and carrier demarcation, but the proposed design assumes standard broadband internet guarantees. Which design change most directly addresses the stated requirement?
- Select an appropriate private APN, outbound-initiated overlay, or routable-address service depending on carrier capabilities.
- Evaluate policy-controlled local internet breakout with appropriate security inspection and application path measurement.
- Evaluate a Metro Ethernet service with committed bandwidth, fault demarcation and suitable Ethernet handoff.
- Plan underlay/overlay MTU and MSS handling for encapsulation overhead across the WAN path.
Explanation
Correct Answer
C:The design is validated when measured throughput and failover meet the contractual envelope across the metro sites.
Incorrect Answers
A:That option concerns a separate design case: An industrial site uses 4G LTE as primary WAN, and its routing team assumes public inbound addresses remain reachable through carrier-grade NAT. The relevant control here is: Evaluate a Metro Ethernet service with committed bandwidth, fault demarcation and suitable Ethernet handoff.
B:That option concerns a separate design case: A retail design directs all cloud SaaS traffic through headquarters even though local internet breakout is allowed and latency is poor. The relevant control here is: Evaluate a Metro Ethernet service with committed bandwidth, fault demarcation and suitable Ethernet handoff.
D:That option concerns a separate design case: A branch uses IPsec overlay on broadband with 1400-byte effective MTU, but an application sends 1500-byte DF-set packets and stalls. The relevant control here is: Evaluate a Metro Ethernet service with committed bandwidth, fault demarcation and suitable Ethernet handoff.
Question 178
A branch QoS policy matches all TCP 443 traffic as video, including large software downloads. Which design change most directly addresses the stated requirement?
- Use validated application classification or more precise traffic identity instead of assuming TCP port 443 defines one service.
- Separate delay-critical voice priority from video classes with appropriate bounded queuing and bandwidth guarantees.
- Remap backup traffic to a less-preferred class and protect media queues for their intended applications.
- Protect essential routing/control traffic within bounded QoS classes at actual bottlenecks.
Explanation
Correct Answer
A:The design is validated when only the intended interactive application receives real-time class treatment during a test.
Incorrect Answers
B:That option concerns a separate design case: Video and voice both use one strict-priority queue, causing voice jitter when video surges. The relevant control here is: Use validated application classification or more precise traffic identity instead of assuming TCP port 443 defines one service.
C:That option concerns a separate design case: A QoS controller marks all backup data DSCP AF41 while the provider honors it as a premium video class. The relevant control here is: Use validated application classification or more precise traffic identity instead of assuming TCP port 443 defines one service.
D:That option concerns a separate design case: A campus QoS policy gives low priority to routing keepalives and network monitoring, and routing adjacencies flap during congestion. The relevant control here is: Use validated application classification or more precise traffic identity instead of assuming TCP port 443 defines one service.
Question 179
Two campus distribution routers each have a single power feed from the same rack PDU, yet the architecture counts them as separate fault domains. Which design change most directly addresses the stated requirement?
- Use a validated stack/virtual chassis/MEC design or independent routed uplinks according to supported platform capabilities.
- Keep local VLAN boundaries and provide a scoped supported discovery relay or service registration alternative.
- Provide independent power infrastructure for each redundant network node and validate dual-path resilience.
- Build point-to-point routed access uplinks and use ECMP-capable IGP convergence at the access layer.
Explanation
Correct Answer
C:The design is validated when loss of either PDU leaves the campus default gateway and upstream traffic operating.
Incorrect Answers
A:That option concerns a separate design case: Two access switches uplink to a distribution pair; the architecture stretches one port channel across chassis without verifying multi-chassis support. The relevant control here is: Provide independent power infrastructure for each redundant network node and validate dual-path resilience.
B:That option concerns a separate design case: A campus access layer spans large broadcast domains for print discovery despite an architecture target of small local VLANs. The relevant control here is: Provide independent power infrastructure for each redundant network node and validate dual-path resilience.
D:That option concerns a separate design case: A routed-access campus needs equal-cost forwarding to two distribution routers while keeping each VLAN local to one wiring closet. The relevant control here is: Provide independent power infrastructure for each redundant network node and validate dual-path resilience.
Question 180
A branch EIGRP router advertises remote routes back into its hub and occasionally becomes a transit path between hubs. Which design change most directly addresses the stated requirement?
- Evaluate whether additional-paths or path diversity is required and supported by the topology and platforms.
- Plan the EIGRP successor and feasible-successor relationship using composite metric and feasibility checks.
- Configure an appropriate EIGRP stub design on the branch while allowing its locally connected routes to reach the hubs.
- Apply EIGRP summarization, stub boundaries, and reliable connectivity to limit query scope.
Explanation
Correct Answer
C:The design is validated when hubs avoid querying through the branch as a transit path and branch-local prefixes remain visible.
Incorrect Answers
A:That option concerns a separate design case: An iBGP route reflector sees several candidate routes to the same destination but advertises only its best path to clients. The relevant control here is: Configure an appropriate EIGRP stub design on the branch while allowing its locally connected routes to reach the hubs.
B:That option concerns a separate design case: A router receives two EIGRP routes for a prefix with different metrics and the design team wants deterministic failover. The relevant control here is: Configure an appropriate EIGRP stub design on the branch while allowing its locally connected routes to reach the hubs.
D:That option concerns a separate design case: An EIGRP core has routes stuck active after one WAN path fails and queries spread into many remote sites. The relevant control here is: Configure an appropriate EIGRP stub design on the branch while allowing its locally connected routes to reach the hubs.
Designing Cisco Enterprise Networks (ENSLD) (300-420) Practice Tests