100% Latest & Updated Cisco 300-420 Practice Test Questions, Exam Dumps & Verified Answers!
30 Days Free Updates, Instant Download!
Question 300
A provider delegation contains 2001:db8:4200::/48 and the design requires 256 independent /64 LANs across 16 branches. Which observed result would most directly prove the design meets the intended goal?
- IPv6 packets traverse the IPv4-only transit without unintended address-family policy leaks.
- Each site advertises unique prefixes and the regional summarization boundary routes traffic to the correct branch.
- All advertised LAN /64s are distinct and can be summarized within the delegated /48 where topology permits.
- Route reachability between distant IS-IS areas is present through level-2 adjacencies.
Explanation
Correct Answer
C:Subdivide the /48 hierarchically by branch and VLAN, with unique /64s and aggregate boundaries that fit the delegation. Verify the resulting network behavior rather than relying only on the saved configuration.
Incorrect Answers
A:This observation relates to a different topology: An organization needs to reach an IPv6 island over a provider network that carries IPv4 only for the next year. It does not verify the present outcome.
B:This observation relates to a different topology: A retailer adds 70 branches and reused 10.20.0.0/16 at several sites; the MPLS provider cannot distinguish the overlapping prefixes in the enterprise routing table. It does not verify the present outcome.
D:This observation relates to a different topology: A service provider backbone runs IS-IS level-1 only across multiple areas, and distant branch routers cannot obtain interarea routes. It does not verify the present outcome.
Question 301
A routed-access campus needs equal-cost forwarding to two distribution routers while keeping each VLAN local to one wiring closet. Which observed result would most directly prove the design meets the intended goal?
- Switches participate in the expected common region and root placement is consistent per instance.
- Approved intersite traffic carries the expected segmentation context without undesired leakage.
- Both routed uplinks forward to the rest of campus and a link failure reroutes traffic without a campus STP event.
- Loss of either PDU leaves the campus default gateway and upstream traffic operating.
Explanation
Correct Answer
C:Build point-to-point routed access uplinks and use ECMP-capable IGP convergence at the access layer. Verify the resulting network behavior rather than relying only on the saved configuration.
Incorrect Answers
A:This observation relates to a different topology: A new MST campus region accidentally has a different VLAN-to-instance mapping on one distribution switch. It does not verify the present outcome.
B:This observation relates to a different topology: An organization needs consistent segmentation across two SD-Access fabric sites connected by a routed MPLS service. It does not verify the present outcome.
D:This observation relates to a different topology: Two campus distribution routers each have a single power feed from the same rack PDU, yet the architecture counts them as separate fault domains. It does not verify the present outcome.
Question 302
A retail chain needs many spokes to make dynamic spoke-to-spoke tunnels without permanent full-mesh configuration. Which observed result would most directly prove the design meets the intended goal?
- Approved spoke-to-spoke traffic forms an appropriate direct overlay path after registration.
- Approved endpoints encrypt traffic while retaining the provider's intended any-to-any routing paths.
- Authorized branch prefixes appear within the appropriate VPN and survive a PE failure as contracted.
- Routed adjacency and encapsulated application flows operate through the secure tunnel.
Explanation
Correct Answer
A:Evaluate a DMVPN hub/spoke design using NHRP registration and supported dynamic shortcut behavior. Verify the resulting network behavior rather than relying only on the saved configuration.
Incorrect Answers
B:This observation relates to a different topology: An organization needs any-to-any group-encrypted private WAN traffic but the new design proposes a traditional hub-and-spoke IPsec overlay with hub hairpins. It does not verify the present outcome.
C:This observation relates to a different topology: A regional healthcare group wants routed site separation within a provider-managed private WAN without building its own full mesh of tunnels. It does not verify the present outcome.
D:This observation relates to a different topology: An enterprise replaces a point-to-point GRE tunnel with raw IPsec ESP and expects dynamic multicast routing hellos to work unchanged. It does not verify the present outcome.
Question 303
An enterprise edge allows a contracted 50-Mbps guest rate but users report voice degradation during microbursts despite the average staying under 50 Mbps. Which observed result would most directly prove the design meets the intended goal?
- Excess guest bursts are contained while voice packet-delay variation remains acceptable.
- Intended receivers across the routed boundary receive the source stream.
- Measured WAN utilization supports peak approved call volume without exceeding the voice service budget.
- All essential classes receive their planned treatment without violating actual egress capacity.
Explanation
Correct Answer
A:Engineer a policer with an appropriate burst tolerance and separate real-time queue protection. Verify the resulting network behavior rather than relying only on the saved configuration.
Incorrect Answers
B:This observation relates to a different topology: A source sends multicast through one router but users join from another site and no multicast routing is configured between them. It does not verify the present outcome.
C:This observation relates to a different topology: A design team calculates voice QoS bandwidth solely from codec payload bit rate and ignores RTP, IP and tunnel overhead. It does not verify the present outcome.
D:This observation relates to a different topology: A switch QoS scheduler guarantees 30% to backup traffic and 80% to voice under full congestion, exceeding possible link capacity. It does not verify the present outcome.
Question 304
A large enterprise wants to contain detailed IS-IS prefixes within buildings while preserving intercampus reachability. Which observed result would most directly prove the design meets the intended goal?
- Observed inbound paths trend toward ISP B from representative external monitors without assuming universal control.
- The intended exit preference propagates across internal BGP speakers.
- Building-specific churn stays within the intended area while intercampus summaries remain available.
- Neighbor discovery and SLAAC operate independently on both VLANs with no on-link ambiguity.
Explanation
Correct Answer
C:Use a hierarchical IS-IS L1/L2 design and summarization at supported area boundaries where it fits topology. Verify the resulting network behavior rather than relying only on the saved configuration.
Incorrect Answers
A:This observation relates to a different topology: A company wants most return traffic for its public prefix to enter ISP B rather than ISP A. It does not verify the present outcome.
B:This observation relates to a different topology: A BGP operator attempts to influence routes within one AS by changing the weight attribute only on one edge router. It does not verify the present outcome.
D:This observation relates to a different topology: A campus plans IPv6 addressing with one /64 shared between two routed VLAN interfaces in different buildings. It does not verify the present outcome.
Question 305
A Cisco-only controller needs platform-specific wireless policies that are not represented by the organization's standard OpenConfig model. Which observed result would most directly prove the design meets the intended goal?
- Authorized cloud prefixes are reachable over intended private paths after one interconnect fails.
- The controller successfully reads and writes only the supported wireless policy nodes on target devices.
- The receiver continues receiving timestamped samples during steady-state operation.
- Schema registry entries identify the correct module namespace and revisions for each controller operation.
Explanation
Correct Answer
B:Use an appropriate Cisco native YANG model for supported platform-specific configuration. Verify the resulting network behavior rather than relying only on the saved configuration.
Incorrect Answers
A:This observation relates to a different topology: A company needs private predictable cloud connectivity to two regions but its design considers only commodity internet VPNs. It does not verify the present outcome.
C:This observation relates to a different topology: A support dashboard needs regular CPU and interface-rate samples even when values remain unchanged. It does not verify the present outcome.
D:This observation relates to a different topology: A standards group needs an interoperable interface model but mistakenly calls every IETF YANG module an OpenConfig model. It does not verify the present outcome.
Question 306
A site cutover retains a withdrawn /24 under an unchanged /20 campus summary and traffic follows an obsolete transit path. Which observed result would most directly prove the design meets the intended goal?
- Encapsulated end-to-end test packets pass between fabric edges without fragmentation blackholes.
- Normal flow distribution avoids congesting the slow backhaul and failover still reaches the destination.
- Intersite overlay flows survive the engineered path and meet their measured size and latency limits.
- Probes to live destinations follow correct routes while the decommissioned /24 is no longer misdirected.
Explanation
Correct Answer
D:Update summary ownership and ensure discarded or absent specifics cannot mask the retired destination. Verify the resulting network behavior rather than relying only on the saved configuration.
Incorrect Answers
A:This observation relates to a different topology: Fabric edge nodes encapsulate packets, but the underlay path MTU is too small for added VXLAN overhead. It does not verify the present outcome.
B:This observation relates to a different topology: A distribution pair advertises the same summary at two locations, but one has a 100-Mbps backhaul and receives half of campus traffic. It does not verify the present outcome.
C:This observation relates to a different topology: A design extends SDA fabric across buildings on a WAN with 1500-byte MTU and assumes local campus performance will continue unchanged. It does not verify the present outcome.
Question 307
A data-center team assigns the same loopback IPv4 address to two route reflectors for convenience but also uses it as unique BGP router identifiers. Which observed result would most directly prove the design meets the intended goal?
- Both reflectors establish independent sessions and logs identify each peer without duplicate router IDs.
- The optimal successor forwards normally and eligible backup takes over without a network-wide query where feasible.
- Clients reach the headquarters destination over the routed path using the approved office prefix.
- Normal forwarding prefers the main path while failover selects the backup when primary reachability disappears.
Explanation
Correct Answer
A:Give each route reflector a stable unique loopback/router ID and advertise reachability through the IGP. Verify the resulting network behavior rather than relying only on the saved configuration.
Incorrect Answers
B:This observation relates to a different topology: A router receives two EIGRP routes for a prefix with different metrics and the design team wants deterministic failover. It does not verify the present outcome.
C:This observation relates to a different topology: A remote office assigns clients addresses from 169.254.0.0/16 and expects them to be reachable through a routed WAN. It does not verify the present outcome.
D:This observation relates to a different topology: A network uses IS-IS with dual distribution routers and wants predictable traffic away from a low-bandwidth backup path. It does not verify the present outcome.
Question 308
A guest wireless SSID creates burst traffic exceeding its contracted share and disrupts campus applications. Which observed result would most directly prove the design meets the intended goal?
- Unit administrators can reach authorized nodes but are denied management of unrelated infrastructure.
- Excess guest bursts are contained while voice packet-delay variation remains acceptable.
- All essential classes receive their planned treatment without violating actual egress capacity.
- Guest over-limit traffic is dropped or remarked as specified while protected applications maintain quality.
Explanation
Correct Answer
D:Police untrusted guest ingress traffic to an appropriate rate and violation action at the policy boundary. Verify the resulting network behavior rather than relying only on the saved configuration.
Incorrect Answers
A:This observation relates to a different topology: Two business units share one management VLAN with unrestricted access to each other's routers. It does not verify the present outcome.
B:This observation relates to a different topology: An enterprise edge allows a contracted 50-Mbps guest rate but users report voice degradation during microbursts despite the average staying under 50 Mbps. It does not verify the present outcome.
C:This observation relates to a different topology: A switch QoS scheduler guarantees 30% to backup traffic and 80% to voice under full congestion, exceeding possible link capacity. It does not verify the present outcome.
Question 309
An enterprise replaces a point-to-point GRE tunnel with raw IPsec ESP and expects dynamic multicast routing hellos to work unchanged. Which observed result would most directly prove the design meets the intended goal?
- Enterprise routers form intended routing neighbors over the circuit while provider internals remain hidden.
- Only authorized multicast receivers on selected sites receive the required production feed.
- Protected traffic crosses an established security association and is unreadable on the public underlay.
- Routed adjacency and encapsulated application flows operate through the secure tunnel.
Explanation
Correct Answer
D:Select a tunnel mechanism or supported IPsec profile that carries required multicast/routing traffic. Verify the resulting network behavior rather than relying only on the saved configuration.
Incorrect Answers
A:This observation relates to a different topology: A financial organization leases a transparent point-to-point Ethernet service but requires independent routing at each site. It does not verify the present outcome.
B:This observation relates to a different topology: A manufacturing WAN requires multicast distribution but the SD-WAN overlay has only validated unicast OMP reachability. It does not verify the present outcome.
C:This observation relates to a different topology: A site-to-site tunnel must protect financial payload confidentiality and integrity across the public internet. It does not verify the present outcome.
Question 310
A multicampus network has two equal-cost paths but the design assumes packets always alternate evenly across every individual packet. Which observed result would most directly prove the design meets the intended goal?
- Representative flows distribute across eligible next hops while a single ordered flow remains stable.
- Both routed uplinks forward to the rest of campus and a link failure reroutes traffic without a campus STP event.
- Intercampus traffic follows authorized shortest feasible paths rather than unwanted data-center detours.
- Control-plane endpoint mappings resolve and separate packet captures show VXLAN data forwarding between fabric edges.
Explanation
Correct Answer
A:Plan ECMP based on actual per-flow hashing and application sensitivity rather than guaranteed per-packet load balance. Verify the resulting network behavior rather than relying only on the saved configuration.
Incorrect Answers
B:This observation relates to a different topology: A routed-access campus needs equal-cost forwarding to two distribution routers while keeping each VLAN local to one wiring closet. It does not verify the present outcome.
C:This observation relates to a different topology: A branch aggregation point has both IS-IS and OSPF neighbors with multiple equal-cost exits; traffic unexpectedly hairpins through a data center. It does not verify the present outcome.
D:This observation relates to a different topology: An SD-Access architect assumes the fabric's LISP control plane transports all user packets like a data-plane tunnel. It does not verify the present outcome.
Designing Cisco Enterprise Networks (ENSLD) (300-420) Practice Tests
