100% Latest & Updated Cisco 300-420 Practice Test Questions, Exam Dumps & Verified Answers!
30 Days Free Updates, Instant Download!
Question 360
A branch engineer redistributes a static default route into EIGRP and advertises it to every site, overriding the intended hub defaults. Which observed result would most directly prove the design meets the intended goal?
- Only intended branches learn the approved default source and backup behavior.
- Branch routers no longer send packets for the retired /24 into a blackhole created by the former summary.
- Hubs avoid querying through the branch as a transit path and branch-local prefixes remain visible.
- Branch routes remain reachable through the surviving aggregation router after failure.
Explanation
Correct Answer
A:Filter or scope external default advertisements to the authorized EIGRP distribution boundaries. Verify the resulting network behavior rather than relying only on the saved configuration.
Incorrect Answers
B:This observation relates to a different topology: A campus advertises a /18 summary into the WAN but has no route for one constituent /24 after a building is decommissioned. It does not verify the present outcome.
C:This observation relates to a different topology: A branch EIGRP router advertises remote routes back into its hub and occasionally becomes a transit path between hubs. It does not verify the present outcome.
D:This observation relates to a different topology: An EIGRP deployment relies on a single aggregation router and an outage cuts off all downstream branches. It does not verify the present outcome.
Question 361
A multivendor enterprise wants one consistent YANG representation for interface operational counters but each platform exposes vendor-specific native trees. Which observed result would most directly prove the design meets the intended goal?
- The collector reads comparable interface fields from Cisco and non-Cisco devices using supported model paths.
- Schema registry entries identify the correct module namespace and revisions for each controller operation.
- The receiver continues receiving timestamped samples during steady-state operation.
- The receiver obtains the expected measurement updates for every required signal.
Explanation
Correct Answer
A:Prefer a supported OpenConfig model for common telemetry and document device-specific augmentations where unavoidable. Verify the resulting network behavior rather than relying only on the saved configuration.
Incorrect Answers
B:This observation relates to a different topology: A standards group needs an interoperable interface model but mistakenly calls every IETF YANG module an OpenConfig model. It does not verify the present outcome.
C:This observation relates to a different topology: A support dashboard needs regular CPU and interface-rate samples even when values remain unchanged. It does not verify the present outcome.
D:This observation relates to a different topology: A routing telemetry client assumes every operational counter supports on-change updates and receives no updates on one platform. It does not verify the present outcome.
Question 362
A building has two independent distribution switches but hosts use the physical IP of one switch as their default gateway. Which observed result would most directly prove the design meets the intended goal?
- Gateway traffic survives a controlled supervisor transition within the approved outage budget.
- Clients retain gateway reachability after either distribution switch fails.
- A moved endpoint retains its intended policy and access to only approved destinations.
- Permitted uplinks forward under normal operation and converge cleanly on individual link loss.
Explanation
Correct Answer
B:Design an appropriate first-hop redundancy protocol with a shared virtual gateway and verified uplink tracking. Verify the resulting network behavior rather than relying only on the saved configuration.
Incorrect Answers
A:This observation relates to a different topology: A remote campus uses two distribution switches and requires nonstop gateway access during a planned supervisor replacement. It does not verify the present outcome.
C:This observation relates to a different topology: Users roam between wired fabric edge switches but their identity assignments change with switch port, breaking microsegmentation. It does not verify the present outcome.
D:This observation relates to a different topology: Multiple access switches connect to one distribution block through independent Layer 2 uplinks with a blocked redundant path. It does not verify the present outcome.
Question 363
An organization needs any-to-any group-encrypted private WAN traffic but the new design proposes a traditional hub-and-spoke IPsec overlay with hub hairpins. Which observed result would most directly prove the design meets the intended goal?
- Large application sessions succeed with correct effective packet sizing over each approved transport.
- Approved endpoints encrypt traffic while retaining the provider's intended any-to-any routing paths.
- Authorized overlay tunnels form between intended peers without manually maintained full-mesh IKE policy.
- Authorized branch prefixes appear within the appropriate VPN and survive a PE failure as contracted.
Explanation
Correct Answer
B:Evaluate GET VPN where supported for group encryption over a trusted routable provider network. Verify the resulting network behavior rather than relying only on the saved configuration.
Incorrect Answers
A:This observation relates to a different topology: A branch uses IPsec overlay on broadband with 1400-byte effective MTU, but an application sends 1500-byte DF-set packets and stalls. It does not verify the present outcome.
C:This observation relates to a different topology: A network team manually builds static IPsec tunnels between every SD-WAN edge even though centralized overlay policy is available. It does not verify the present outcome.
D:This observation relates to a different topology: A regional healthcare group wants routed site separation within a provider-managed private WAN without building its own full mesh of tunnels. It does not verify the present outcome.
Question 364
An enterprise uses hundreds of IPv4 /24s and proposes a single /16 summary although several component /24s are outside its administrative control. Which observed result would most directly prove the design meets the intended goal?
- Branch routes remain reachable through the surviving aggregation router after failure.
- Remote forwarding toward the summary reaches all included owned networks and does not hijack unrelated space.
- The neighbors reach FULL and application packets traverse without fragmentation problems.
- IPv6 next-hop changes recover after a tested uplink failure without manual reconfiguration.
Explanation
Correct Answer
B:Advertise only summaries that fully cover owned reachable allocations; retain required exceptions or more-specifics at redistribution boundaries. Verify the resulting network behavior rather than relying only on the saved configuration.
Incorrect Answers
A:This observation relates to a different topology: An EIGRP deployment relies on a single aggregation router and an outage cuts off all downstream branches. It does not verify the present outcome.
C:This observation relates to a different topology: Two OSPF neighbors on a routed core link are stuck in EXSTART/EXCHANGE and one endpoint uses an incompatible MTU. It does not verify the present outcome.
D:This observation relates to a different topology: An IPv6 deployment uses static gateways rather than a dynamic protocol across several redundant campus links. It does not verify the present outcome.
Question 365
A 10,000-receiver IPTV deployment requires one-to-many traffic from known sources but still uses RP discovery for each stream. Which observed result would most directly prove the design meets the intended goal?
- Intended receivers obtain the translated stream while unrelated multicast groups remain separate.
- Packets arriving on incorrect RPF interfaces are rejected and legitimate receiver traffic passes.
- Packet captures across both sites show correct class markings before and after provider handoff.
- Authorized receivers join named sources and receive streams without relying on RP registration.
Explanation
Correct Answer
D:Evaluate Source-Specific Multicast using supported IGMPv3/MLDv2 and PIM-SSM where available. Verify the resulting network behavior rather than relying only on the saved configuration.
Incorrect Answers
A:This observation relates to a different topology: An enterprise wants to expose a multicast stream to one receiver group but the original source uses a group address conflicting with a remote application. It does not verify the present outcome.
B:This observation relates to a different topology: A multicast source is reachable through an interface other than the one receiving the packet, but the router still forwards it to all receivers. It does not verify the present outcome.
C:This observation relates to a different topology: Two sites use different DSCP mappings for the same video stream and one class is downgraded at the carrier boundary. It does not verify the present outcome.
Question 366
A BGP customer has two provider uplinks and wants automatic loss-of-transport detection when the BGP session remains Established over a stale recursive path. Which observed result would most directly prove the design meets the intended goal?
- Peer-received advertisements exclude the protected prefix while approved public routes remain.
- IPv6 packets traverse the IPv4-only transit without unintended address-family policy leaks.
- Failure of the primary underlay forces traffic to a tested eligible secondary path within the service objective.
- Observed inbound paths trend toward ISP B from representative external monitors without assuming universal control.
Explanation
Correct Answer
C:Pair next-hop reachability and supported BFD or track-based detection with appropriate BGP convergence settings. Verify the resulting network behavior rather than relying only on the saved configuration.
Incorrect Answers
A:This observation relates to a different topology: A partner BGP session accidentally advertises a sensitive 10.0.0.0/8 internal route to an external ASN. It does not verify the present outcome.
B:This observation relates to a different topology: An organization needs to reach an IPv6 island over a provider network that carries IPv4 only for the next year. It does not verify the present outcome.
D:This observation relates to a different topology: A company wants most return traffic for its public prefix to enter ISP B rather than ISP A. It does not verify the present outcome.
Question 367
Multiple access switches connect to one distribution block through independent Layer 2 uplinks with a blocked redundant path. Which observed result would most directly prove the design meets the intended goal?
- Gateway traffic survives a controlled supervisor transition within the approved outage budget.
- Permitted uplinks forward under normal operation and converge cleanly on individual link loss.
- Clients retain gateway reachability after either distribution switch fails.
- Both paths carry approved traffic and a member failure has no broad STP reconvergence.
Explanation
Correct Answer
B:Choose a validated loop-free logical bundle or routed-access topology if active-active use is required. Verify the resulting network behavior rather than relying only on the saved configuration.
Incorrect Answers
A:This observation relates to a different topology: A remote campus uses two distribution switches and requires nonstop gateway access during a planned supervisor replacement. It does not verify the present outcome.
C:This observation relates to a different topology: A building has two independent distribution switches but hosts use the physical IP of one switch as their default gateway. It does not verify the present outcome.
D:This observation relates to a different topology: A campus design requires both distribution uplinks active but the chosen topology uses classic STP on all Layer 2 connections. It does not verify the present outcome.
Question 368
A video conference SD-WAN policy accepts tunnels with 1% packet loss but ignores sustained jitter above application tolerance. Which observed result would most directly prove the design meets the intended goal?
- Selected tunnels meet the approved performance envelope during representative conference traffic.
- Services over the optical circuit remain isolated by the appropriate higher-layer controls.
- Surviving key servers provide policies and secure data traffic remains operational through maintenance.
- Authorized overlay tunnels form between intended peers without manually maintained full-mesh IKE policy.
Explanation
Correct Answer
A:Include latency, jitter and loss thresholds appropriate to the application class. Verify the resulting network behavior rather than relying only on the saved configuration.
Incorrect Answers
B:This observation relates to a different topology: A WAN team assumes DWDM wavelength multiplexing itself supplies packet-level route isolation between tenants. It does not verify the present outcome.
C:This observation relates to a different topology: GET VPN group members can route between branches but new devices cannot obtain group security policy after a key-server loss. It does not verify the present outcome.
D:This observation relates to a different topology: A network team manually builds static IPsec tunnels between every SD-WAN edge even though centralized overlay policy is available. It does not verify the present outcome.
Question 369
A design team calculates voice QoS bandwidth solely from codec payload bit rate and ignores RTP, IP and tunnel overhead. Which observed result would most directly prove the design meets the intended goal?
- An emergency administrator maintains workable session latency while backup transfer runs.
- Delay-sensitive traffic receives scheduled treatment at both campus and WAN congestion points.
- Excess guest bursts are contained while voice packet-delay variation remains acceptable.
- Measured WAN utilization supports peak approved call volume without exceeding the voice service budget.
Explanation
Correct Answer
D:Size admission and queue bandwidth using packetization and encapsulation overhead plus concurrent-call estimates. Verify the resulting network behavior rather than relying only on the saved configuration.
Incorrect Answers
A:This observation relates to a different topology: A low-bandwidth remote management VPN carries huge nightly backup transfers that prevent emergency SSH access. It does not verify the present outcome.
B:This observation relates to a different topology: A campus designs priority queues only on the access switch but ignores a congested upstream WAN edge. It does not verify the present outcome.
C:This observation relates to a different topology: An enterprise edge allows a contracted 50-Mbps guest rate but users report voice degradation during microbursts despite the average staying under 50 Mbps. It does not verify the present outcome.
Question 370
Branch A and B redistribute external BGP into OSPF, then advertise resulting routes back into BGP at the opposite edge. Which observed result would most directly prove the design meets the intended goal?
- Required external routes originate inside the NSSA and are translated into the rest of the OSPF domain as designed.
- Bidirectional test prefixes appear once with predictable origin and no repeated reimport after failover.
- The intended exit preference propagates across internal BGP speakers.
- The branch receives the intended interarea destinations and no unwanted external LSAs.
Explanation
Correct Answer
B:Use explicit route tags, prefix filtering, and redistribution boundaries to block feedback loops. Verify the resulting network behavior rather than relying only on the saved configuration.
Incorrect Answers
A:This observation relates to a different topology: A remote branch uses an OSPF stub area but a design change introduces an ASBR that must redistribute external routes within it. It does not verify the present outcome.
C:This observation relates to a different topology: A BGP operator attempts to influence routes within one AS by changing the weight attribute only on one edge router. It does not verify the present outcome.
D:This observation relates to a different topology: A branch OSPF design selects a totally stubby area but an application requires type-3 interarea routes rather than only the default. It does not verify the present outcome.
Designing Cisco Enterprise Networks (ENSLD) (300-420) Practice Tests
