100% Latest & Updated Cisco 300-420 Practice Test Questions, Exam Dumps & Verified Answers!
30 Days Free Updates, Instant Download!
Question 330
A campus design requires both distribution uplinks active but the chosen topology uses classic STP on all Layer 2 connections. Which observed result would most directly prove the design meets the intended goal?
- Changes to one tenant's routes do not leak or alter the other's forwarding state.
- Gateway traffic survives a controlled supervisor transition within the approved outage budget.
- Both paths carry approved traffic and a member failure has no broad STP reconvergence.
- Permitted uplinks forward under normal operation and converge cleanly on individual link loss.
Explanation
Correct Answer
C:Use a supported multi-chassis EtherChannel or routed-access design to make redundancy active without a spanning-tree loop. Verify the resulting network behavior rather than relying only on the saved configuration.
Incorrect Answers
A:This observation relates to a different topology: A public safety campus requires independent operations from a corporate tenant even when both use the same distribution hardware. It does not verify the present outcome.
B:This observation relates to a different topology: A remote campus uses two distribution switches and requires nonstop gateway access during a planned supervisor replacement. It does not verify the present outcome.
D:This observation relates to a different topology: Multiple access switches connect to one distribution block through independent Layer 2 uplinks with a blocked redundant path. It does not verify the present outcome.
Question 331
A company wants most return traffic for its public prefix to enter ISP B rather than ISP A. Which observed result would most directly prove the design meets the intended goal?
- The peer can exchange authorized reachability without exhausting edge memory during an erroneous advertisement surge.
- The optimal successor forwards normally and eligible backup takes over without a network-wide query where feasible.
- Authorized IPv4 partner sessions reach the selected IPv6 service through the documented translation path.
- Observed inbound paths trend toward ISP B from representative external monitors without assuming universal control.
Explanation
Correct Answer
D:Assess supported inbound traffic engineering such as scoped AS-path prepending or provider communities, recognizing remote-AS policy discretion. Verify the resulting network behavior rather than relying only on the saved configuration.
Incorrect Answers
A:This observation relates to a different topology: A company accepts routes from a newly merged BGP AS without maximum-prefix limits, and the peer mistakenly sends hundreds of thousands of prefixes. It does not verify the present outcome.
B:This observation relates to a different topology: A router receives two EIGRP routes for a prefix with different metrics and the design team wants deterministic failover. It does not verify the present outcome.
C:This observation relates to a different topology: A company wants to expose IPv6 resources to a partner with IPv4-only routing and assumes dual stack at headquarters solves the partner boundary. It does not verify the present outcome.
Question 332
Two DMVPN spokes can reach the hub but never build a direct shortcut after new spoke routes are learned. Which observed result would most directly prove the design meets the intended goal?
- Traffic flows through the permitted direct spoke tunnel where expected while hub fallback still works.
- Finance sites reach only designated hubs while approved other segments preserve their intended paths.
- Guest prefixes and traffic stay isolated from production routes and data tunnels.
- Approved spoke-to-spoke traffic forms an appropriate direct overlay path after registration.
Explanation
Correct Answer
A:Align DMVPN phase/design, NHRP mappings and redirect/shortcut behavior with the intended topology. Verify the resulting network behavior rather than relying only on the saved configuration.
Incorrect Answers
B:This observation relates to a different topology: A network wants a hub-and-spoke topology for finance traffic but allows any-to-any policy for all service VPNs. It does not verify the present outcome.
C:This observation relates to a different topology: An SD-WAN fabric routes guest traffic into the production VPN because a new edge reused the corporate service VPN identifier. It does not verify the present outcome.
D:This observation relates to a different topology: A retail chain needs many spokes to make dynamic spoke-to-spoke tunnels without permanent full-mesh configuration. It does not verify the present outcome.
Question 333
An NOC polls every router with SNMP once every ten minutes and misses 30-second interface utilization spikes. Which observed result would most directly prove the design meets the intended goal?
- Collector time series captures the brief spikes with timestamped relevant YANG measurements.
- Data volumes fall while five-minute trend accuracy still meets planning requirements.
- Schema registry entries identify the correct module namespace and revisions for each controller operation.
- A controlled status change reaches the collector promptly without waiting for the next periodic poll.
Explanation
Correct Answer
A:Use appropriately sampled or on-change model-driven telemetry for the monitored signals, with a scalable receiver architecture. Verify the resulting network behavior rather than relying only on the saved configuration.
Incorrect Answers
B:This observation relates to a different topology: A global WAN telemetry system publishes a complete 10,000-interface snapshot every 100 ms although the target is only five-minute capacity planning. It does not verify the present outcome.
C:This observation relates to a different topology: A standards group needs an interoperable interface model but mistakenly calls every IETF YANG module an OpenConfig model. It does not verify the present outcome.
D:This observation relates to a different topology: An alerting system needs immediate notice of interface administrative status changes but only polls every five minutes. It does not verify the present outcome.
Question 334
A campus QoS policy gives low priority to routing keepalives and network monitoring, and routing adjacencies flap during congestion. Which observed result would most directly prove the design meets the intended goal?
- Only the intended interactive application receives real-time class treatment during a test.
- Critical signaling and voice meet their performance targets while bulk sync proceeds on its class.
- Voice delay stays within SLA during video bursts while other classes retain scheduled service.
- Control-plane adjacencies and monitoring remain stable during representative congestion.
Explanation
Correct Answer
D:Protect essential routing/control traffic within bounded QoS classes at actual bottlenecks. Verify the resulting network behavior rather than relying only on the saved configuration.
Incorrect Answers
A:This observation relates to a different topology: A branch QoS policy matches all TCP 443 traffic as video, including large software downloads. It does not verify the present outcome.
B:This observation relates to a different topology: A branch policy gives every queue an equal share although its database synchronization is delaying emergency call signaling. It does not verify the present outcome.
C:This observation relates to a different topology: Video and voice both use one strict-priority queue, causing voice jitter when video surges. It does not verify the present outcome.
Question 335
A fabric site needs a guest wireless SSID without extending the guest Layer 2 domain across the whole enterprise. Which observed result would most directly prove the design meets the intended goal?
- Approved intersite traffic carries the expected segmentation context without undesired leakage.
- Each AP enables its intended radio features at full load without power denial or downshift.
- Guest clients roam as designed and cannot access restricted enterprise segments.
- Intersite overlay flows survive the engineered path and meet their measured size and latency limits.
Explanation
Correct Answer
C:Design supported fabric wireless segmentation with dedicated VNs/SGTs and appropriate wireless control integration. Verify the resulting network behavior rather than relying only on the saved configuration.
Incorrect Answers
A:This observation relates to a different topology: An organization needs consistent segmentation across two SD-Access fabric sites connected by a routed MPLS service. It does not verify the present outcome.
B:This observation relates to a different topology: A wireless access-point refresh increases PoE needs above the available 802.3at class on older switches. It does not verify the present outcome.
D:This observation relates to a different topology: A design extends SDA fabric across buildings on a WAN with 1500-byte MTU and assumes local campus performance will continue unchanged. It does not verify the present outcome.
Question 336
A network with 80 iBGP routers becomes difficult to operate because every router forms a full mesh of peer sessions. Which observed result would most directly prove the design meets the intended goal?
- Hubs avoid querying through the branch as a transit path and branch-local prefixes remain visible.
- External peers see the intended confederation identifier while internal sub-AS sessions provide approved reachability.
- The accepted RIB contains the permitted default and no unintended provider prefixes.
- Route reflector clients learn authorized prefixes without maintaining a full mesh of all client sessions.
Explanation
Correct Answer
D:Design redundant BGP route reflectors with consistent cluster IDs and reflector-client relationships. Verify the resulting network behavior rather than relying only on the saved configuration.
Incorrect Answers
A:This observation relates to a different topology: A branch EIGRP router advertises remote routes back into its hub and occasionally becomes a transit path between hubs. It does not verify the present outcome.
B:This observation relates to a different topology: A merger requires two administrative BGP regions to appear as one external AS while reducing iBGP mesh size internally. It does not verify the present outcome.
C:This observation relates to a different topology: An edge router receives a full BGP table where the security policy allows only the provider's approved default. It does not verify the present outcome.
Question 337
A retail design directs all cloud SaaS traffic through headquarters even though local internet breakout is allowed and latency is poor. Which observed result would most directly prove the design meets the intended goal?
- Approved SaaS sessions use the closer permitted breakout and remain governed by the security policy.
- Measured throughput and failover meet the contractual envelope across the metro sites.
- Voice traffic uses an eligible lower-latency transport while other applications retain their separate routing requirements.
- Authorized overlay tunnels form between intended peers without manually maintained full-mesh IKE policy.
Explanation
Correct Answer
A:Evaluate policy-controlled local internet breakout with appropriate security inspection and application path measurement. Verify the resulting network behavior rather than relying only on the saved configuration.
Incorrect Answers
B:This observation relates to a different topology: A city campus needs a 10-Gbps local metro interconnect with SLA and carrier demarcation, but the proposed design assumes standard broadband internet guarantees. It does not verify the present outcome.
C:This observation relates to a different topology: A voice application has a 120-ms latency budget, but SD-WAN traffic follows the cheapest internet path despite BFD reporting 220-ms delay. It does not verify the present outcome.
D:This observation relates to a different topology: A network team manually builds static IPsec tunnels between every SD-WAN edge even though centralized overlay policy is available. It does not verify the present outcome.
Question 338
A regional WAN prioritizes voice using a DiffServ marking but provides no scheduler preference on its congested egress link. Which observed result would most directly prove the design meets the intended goal?
- All essential classes receive their planned treatment without violating actual egress capacity.
- Voice latency and packet loss stay within the approved limit during controlled WAN congestion.
- Priority queuing protects genuine voice media while backup traffic no longer occupies the strict-priority class.
- Backup traffic stays within the 20-Mbps service rate and critical classes remain usable.
Explanation
Correct Answer
B:Combine trusted traffic classification and marking with a suitable egress priority queue and bandwidth admission design. Verify the resulting network behavior rather than relying only on the saved configuration.
Incorrect Answers
A:This observation relates to a different topology: A switch QoS scheduler guarantees 30% to backup traffic and 80% to voice under full congestion, exceeding possible link capacity. It does not verify the present outcome.
C:This observation relates to a different topology: A campus uses DSCP EF for voice signaling, voice media, and backup traffic, causing priority queue overload. It does not verify the present outcome.
D:This observation relates to a different topology: A 20-Mbps backup link replaces a 200-Mbps primary WAN but the shaper keeps its 200-Mbps limit after failover. It does not verify the present outcome.
Question 339
The IS-IS backbone has a router in overload state after reboot and operators mistake it for an ordinary forwarding transit. Which observed result would most directly prove the design meets the intended goal?
- Both eligible next hops appear in the forwarding table and share representative flows.
- Other routers avoid using the overloaded node as unintended transit until it is ready.
- The intended exit preference propagates across internal BGP speakers.
- Branch routes remain reachable through the surviving aggregation router after failure.
Explanation
Correct Answer
B:Honor the IS-IS overload-bit signaling and restore normal transit eligibility only when routing readiness is confirmed. Verify the resulting network behavior rather than relying only on the saved configuration.
Incorrect Answers
A:This observation relates to a different topology: A campus border is configured with two equal-cost external BGP paths but only one is installed for traffic forwarding. It does not verify the present outcome.
C:This observation relates to a different topology: A BGP operator attempts to influence routes within one AS by changing the weight attribute only on one edge router. It does not verify the present outcome.
D:This observation relates to a different topology: An EIGRP deployment relies on a single aggregation router and an outage cuts off all downstream branches. It does not verify the present outcome.
Question 340
A port used only for workstations undergoes lengthy spanning-tree transitions whenever a client reconnects. Which observed result would most directly prove the design meets the intended goal?
- All approved powered endpoints boot under full load and stay powered after one permitted PSU failure.
- A moved endpoint retains its intended policy and access to only approved destinations.
- Client ports forward promptly while bridged uplinks still receive normal loop protection.
- The rogue bridge cannot become campus root and protected access interfaces enter their intended security state.
Explanation
Correct Answer
C:Apply a supported edge/PortFast designation only to validated endpoint-facing interfaces. Verify the resulting network behavior rather than relying only on the saved configuration.
Incorrect Answers
A:This observation relates to a different topology: IP phones and cameras are scheduled for a new closet, but PoE budget is calculated only from the switch's total port count. It does not verify the present outcome.
B:This observation relates to a different topology: Users roam between wired fabric edge switches but their identity assignments change with switch port, breaking microsegmentation. It does not verify the present outcome.
D:This observation relates to a different topology: An attacker plugs an unmanaged switch into a lobby edge port and advertises superior STP BPDUs, changing the root topology. It does not verify the present outcome.
Designing Cisco Enterprise Networks (ENSLD) (300-420) Practice Tests
