100% Latest & Updated Cisco 300-420 Practice Test Questions, Exam Dumps & Verified Answers!
30 Days Free Updates, Instant Download!
Question 260
A campus wants deterministic STP roots but all switches retain default bridge priorities. Which observed result would most directly prove the design meets the intended goal?
- The corporate campus receives only the approved default from designated egress nodes.
- Root bridge elections and forwarding paths match the documented campus topology.
- The unintended default is absent from production campus RIBs while valid branch summaries propagate.
- Clients retain gateway reachability after either distribution switch fails.
Explanation
Correct Answer
B:Place primary and secondary STP root roles at the appropriate distribution devices for the planned VLAN sets. Verify the resulting network behavior rather than relying only on the saved configuration.
Incorrect Answers
A:This observation relates to a different topology: A branch router redistributes a static default to the campus IGP without approval, causing arbitrary sites to shift egress. It does not verify the present outcome.
C:This observation relates to a different topology: A regional core accepts all branch routes and one lab site leaks its test 0.0.0.0/0 default into the global table. It does not verify the present outcome.
D:This observation relates to a different topology: A building has two independent distribution switches but hosts use the physical IP of one switch as their default gateway. It does not verify the present outcome.
Question 261
An edge router receives a full BGP table where the security policy allows only the provider's approved default. Which observed result would most directly prove the design meets the intended goal?
- The accepted RIB contains the permitted default and no unintended provider prefixes.
- The intended exit preference propagates across internal BGP speakers.
- Internal BGP best-path selection prefers ISP A where the intended routes are otherwise eligible.
- The optimal successor forwards normally and eligible backup takes over without a network-wide query where feasible.
Explanation
Correct Answer
A:Filter inbound BGP announcements using an explicit default-only prefix policy and appropriate session safeguards. Verify the resulting network behavior rather than relying only on the saved configuration.
Incorrect Answers
B:This observation relates to a different topology: A BGP operator attempts to influence routes within one AS by changing the weight attribute only on one edge router. It does not verify the present outcome.
C:This observation relates to a different topology: A dual-provider BGP edge must prefer ISP A for outbound traffic, but inbound updates from A have a lower MED than B and engineers assume MED dictates every decision. It does not verify the present outcome.
D:This observation relates to a different topology: A router receives two EIGRP routes for a prefix with different metrics and the design team wants deterministic failover. It does not verify the present outcome.
Question 262
A new multicast source uses group 232.1.1.1 but the client sends only (*,G) membership instead of a source-specific join. Which observed result would most directly prove the design meets the intended goal?
- Intended receivers across the routed boundary receive the source stream.
- The receiver sends a source-specific join and obtains only the authorized stream.
- Multicast forwarding resumes on the newly valid upstream with no persistent duplicates.
- Intended receivers obtain the translated stream while unrelated multicast groups remain separate.
Explanation
Correct Answer
B:Align SSM membership to include the desired (S,G) source/group relationship. Verify the resulting network behavior rather than relying only on the saved configuration.
Incorrect Answers
A:This observation relates to a different topology: A source sends multicast through one router but users join from another site and no multicast routing is configured between them. It does not verify the present outcome.
C:This observation relates to a different topology: The RPF interface changes after a unicast route failover, but the multicast router retains stale upstream join state. It does not verify the present outcome.
D:This observation relates to a different topology: An enterprise wants to expose a multicast stream to one receiver group but the original source uses a group address conflicting with a remote application. It does not verify the present outcome.
Question 263
A global WAN telemetry system publishes a complete 10,000-interface snapshot every 100 ms although the target is only five-minute capacity planning. Which observed result would most directly prove the design meets the intended goal?
- Collector time series captures the brief spikes with timestamped relevant YANG measurements.
- Data volumes fall while five-minute trend accuracy still meets planning requirements.
- The receiver obtains the expected measurement updates for every required signal.
- A controlled status change reaches the collector promptly without waiting for the next periodic poll.
Explanation
Correct Answer
B:Increase the periodic interval and narrow the subscribed paths to the needed capacity metrics. Verify the resulting network behavior rather than relying only on the saved configuration.
Incorrect Answers
A:This observation relates to a different topology: An NOC polls every router with SNMP once every ten minutes and misses 30-second interface utilization spikes. It does not verify the present outcome.
C:This observation relates to a different topology: A routing telemetry client assumes every operational counter supports on-change updates and receives no updates on one platform. It does not verify the present outcome.
D:This observation relates to a different topology: An alerting system needs immediate notice of interface administrative status changes but only polls every five minutes. It does not verify the present outcome.
Question 264
HSRP gateways remain reachable locally after their active router loses the only routed upstream uplink. Which observed result would most directly prove the design meets the intended goal?
- Uplink failure triggers the intended gateway takeover and remote application sessions recover.
- The corporate campus receives only the approved default from designated egress nodes.
- Neighbor relationships recover while supported forwarding state remains stable during the tested restart.
- Both routers carry planned VLAN traffic in steady state and provide gateway redundancy during outages.
Explanation
Correct Answer
A:Add supported object or route tracking so upstream reachability can influence HSRP active gateway selection. Verify the resulting network behavior rather than relying only on the saved configuration.
Incorrect Answers
B:This observation relates to a different topology: A branch router redistributes a static default to the campus IGP without approval, causing arbitrary sites to shift egress. It does not verify the present outcome.
C:This observation relates to a different topology: An NSF-capable router pair loses a control-plane process briefly and the design assumes all neighboring routers will preserve forwarding. It does not verify the present outcome.
D:This observation relates to a different topology: A campus with several hundred VLANs uses one active HSRP gateway for all VLANs while another distribution router remains mostly idle. It does not verify the present outcome.
Question 265
A network wants a hub-and-spoke topology for finance traffic but allows any-to-any policy for all service VPNs. Which observed result would most directly prove the design meets the intended goal?
- Finance sites reach only designated hubs while approved other segments preserve their intended paths.
- Authorized overlay tunnels form between intended peers without manually maintained full-mesh IKE policy.
- Guest prefixes and traffic stay isolated from production routes and data tunnels.
- Surviving key servers provide policies and secure data traffic remains operational through maintenance.
Explanation
Correct Answer
A:Apply topology or centralized control policy at the appropriate site/VPN scope. Verify the resulting network behavior rather than relying only on the saved configuration.
Incorrect Answers
B:This observation relates to a different topology: A network team manually builds static IPsec tunnels between every SD-WAN edge even though centralized overlay policy is available. It does not verify the present outcome.
C:This observation relates to a different topology: An SD-WAN fabric routes guest traffic into the production VPN because a new edge reused the corporate service VPN identifier. It does not verify the present outcome.
D:This observation relates to a different topology: GET VPN group members can route between branches but new devices cannot obtain group security policy after a key-server loss. It does not verify the present outcome.
Question 266
A hospital campus uses policy-based routing shortcuts for every building but ordinary routing still lacks resilient interbuilding reachability. Which observed result would most directly prove the design meets the intended goal?
- Gateway traffic survives a controlled supervisor transition within the approved outage budget.
- Rogue DHCP offers from access ports are dropped while authorized client leases succeed.
- Regular traffic retains resilient routed reachability without depending on per-building PBR hacks.
- Both paths carry approved traffic and a member failure has no broad STP reconvergence.
Explanation
Correct Answer
C:Build a coherent Layer 3 topology first, then use narrow policy routing only for genuine exceptions. Verify the resulting network behavior rather than relying only on the saved configuration.
Incorrect Answers
A:This observation relates to a different topology: A remote campus uses two distribution switches and requires nonstop gateway access during a planned supervisor replacement. It does not verify the present outcome.
B:This observation relates to a different topology: A routed campus uses DHCP snooping on access switches but marks every endpoint port trusted for convenience. It does not verify the present outcome.
D:This observation relates to a different topology: A campus design requires both distribution uplinks active but the chosen topology uses classic STP on all Layer 2 connections. It does not verify the present outcome.
Question 267
A campus OSPF area 0 is split into disconnected islands connected only by another area; route distribution is unstable. Which observed result would most directly prove the design meets the intended goal?
- Local access failures generate bounded LSDB changes without disrupting unrelated branches.
- The prefix exits through the intended ASBR and remains loop-free on failover.
- Allowed external routes appear without reentering their origin routing domain on an alternate border.
- All ABRs maintain backbone reachability and interarea routes converge through the intended topology.
Explanation
Correct Answer
D:Restore contiguous area-0 connectivity with a supported physical or carefully justified virtual-link design. Verify the resulting network behavior rather than relying only on the saved configuration.
Incorrect Answers
A:This observation relates to a different topology: An OSPF deployment puts all 600 remote access switches into area 0 and floods changes to every site. It does not verify the present outcome.
B:This observation relates to a different topology: An OSPF redistribution boundary introduces the same connected subnet from two ASBRs, resulting in inconsistent egress selection. It does not verify the present outcome.
C:This observation relates to a different topology: IS-IS adjacencies form between distribution switches, but all internal prefixes are redistributed from OSPF without loop prevention. It does not verify the present outcome.
Question 268
A 1-Gbps campus uplink feeds a 100-Mbps WAN access circuit and packets drop in unpredictable bursts at the provider policer. Which observed result would most directly prove the design meets the intended goal?
- Measured traffic conforms to the allowed profile and application packet loss decreases under load.
- Delay-sensitive traffic receives scheduled treatment at both campus and WAN congestion points.
- Unit administrators can reach authorized nodes but are denied management of unrelated infrastructure.
- Burst traffic drains within a controlled rate envelope with fewer avoidable losses.
Explanation
Correct Answer
A:Apply appropriate egress shaping near the WAN handoff to control offered rate and bursts within the contract. Verify the resulting network behavior rather than relying only on the saved configuration.
Incorrect Answers
B:This observation relates to a different topology: A campus designs priority queues only on the access switch but ignores a congested upstream WAN edge. It does not verify the present outcome.
C:This observation relates to a different topology: Two business units share one management VLAN with unrestricted access to each other's routers. It does not verify the present outcome.
D:This observation relates to a different topology: A design asks to smooth backup traffic to a slow WAN circuit but deploys a policer that simply drops excess packets. It does not verify the present outcome.
Question 269
A manufacturing WAN requires multicast distribution but the SD-WAN overlay has only validated unicast OMP reachability. Which observed result would most directly prove the design meets the intended goal?
- Enterprise routers form intended routing neighbors over the circuit while provider internals remain hidden.
- Multicast protocol control and user traffic traverse the overlay while mandated encryption tests also pass where enabled.
- Only authorized multicast receivers on selected sites receive the required production feed.
- Routed adjacency and encapsulated application flows operate through the secure tunnel.
Explanation
Correct Answer
C:Select supported multicast design and replication behavior for the deployed SD-WAN platform and service VPN. Verify the resulting network behavior rather than relying only on the saved configuration.
Incorrect Answers
A:This observation relates to a different topology: A financial organization leases a transparent point-to-point Ethernet service but requires independent routing at each site. It does not verify the present outcome.
B:This observation relates to a different topology: A lab requires a routed overlay carrying multicast between sites but encryption is not part of the GRE service itself. It does not verify the present outcome.
D:This observation relates to a different topology: An enterprise replaces a point-to-point GRE tunnel with raw IPsec ESP and expects dynamic multicast routing hellos to work unchanged. It does not verify the present outcome.
Question 270
In a planned SD-Access fabric, border nodes can reach edge loopbacks but endpoints fail because the team placed user subnets into the underlay instead of overlay VRFs. Which observed result would most directly prove the design meets the intended goal?
- Control-plane endpoint mappings resolve and separate packet captures show VXLAN data forwarding between fabric edges.
- Underlay nodes reach fabric RLOCs while user endpoints are mapped and forwarded through the correct overlay VN.
- External routes and flows remain segmented by approved virtual network.
- Encapsulated end-to-end test packets pass between fabric edges without fragmentation blackholes.
Explanation
Correct Answer
B:Keep underlay IP reachability independent of endpoint addressing and establish the intended overlay virtual networks. Verify the resulting network behavior rather than relying only on the saved configuration.
Incorrect Answers
A:This observation relates to a different topology: An SD-Access architect assumes the fabric's LISP control plane transports all user packets like a data-plane tunnel. It does not verify the present outcome.
C:This observation relates to a different topology: A campus has a fabric border but its external firewall cannot distinguish multiple endpoint VNs leaving the fabric. It does not verify the present outcome.
D:This observation relates to a different topology: Fabric edge nodes encapsulate packets, but the underlay path MTU is too small for added VXLAN overhead. It does not verify the present outcome.
Designing Cisco Enterprise Networks (ENSLD) (300-420) Practice Tests
