Cisco 300-420 Practice Test 38

100% Latest & Updated Cisco 300-420 Practice Test Questions, Exam Dumps & Verified Answers!
30 Days Free Updates, Instant Download!

Question 370

Branch A and B redistribute external BGP into OSPF, then advertise resulting routes back into BGP at the opposite edge. Which observed result would most directly prove the design meets the intended goal?

Required external routes originate inside the NSSA and are translated into the rest of the OSPF domain as designed.
Bidirectional test prefixes appear once with predictable origin and no repeated reimport after failover.
The intended exit preference propagates across internal BGP speakers.
The branch receives the intended interarea destinations and no unwanted external LSAs.

Explanation

Correct Answer

Use explicit route tags, prefix filtering, and redistribution boundaries to block feedback loops. Verify the resulting network behavior rather than relying only on the saved configuration.

Incorrect Answers

This observation relates to a different topology: A remote branch uses an OSPF stub area but a design change introduces an ASBR that must redistribute external routes within it. It does not verify the present outcome.

This observation relates to a different topology: A BGP operator attempts to influence routes within one AS by changing the weight attribute only on one edge router. It does not verify the present outcome.

This observation relates to a different topology: A branch OSPF design selects a totally stubby area but an application requires type-3 interarea routes rather than only the default. It does not verify the present outcome.

Question 371

A switch must remotely wake office PCs overnight, but the access port powers down and the design assumes Wake-on-LAN works regardless of power state. Which observed result would most directly prove the design meets the intended goal?

Rogue DHCP offers from access ports are dropped while authorized client leases succeed.
Only the approved number of endpoint identities can use the port while rogue downstream devices are blocked.
The authorized bridge participates without disabling BPDU protection for unrelated endpoint ports.
Target PCs wake under a controlled off-hours test without exposing unnecessary broadcast reachability.

Explanation

Correct Answer

Preserve a supported link and endpoint power/wake capability along the intended WoL packet delivery path. Verify the resulting network behavior rather than relying only on the saved configuration.

Incorrect Answers

This observation relates to a different topology: A routed campus uses DHCP snooping on access switches but marks every endpoint port trusted for convenience. It does not verify the present outcome.

This observation relates to a different topology: A guest workstation port can learn hundreds of source MAC addresses because an unmanaged mini-switch is connected behind it. It does not verify the present outcome.

This observation relates to a different topology: An access switch's BPDU Guard disables a legitimate downstream bridge, and the network team proposes disabling Guard on every port. It does not verify the present outcome.

Question 372

An industrial site uses 4G LTE as primary WAN, and its routing team assumes public inbound addresses remain reachable through carrier-grade NAT. Which observed result would most directly prove the design meets the intended goal?

Existing permitted edge-to-edge tunnels continue carrying traffic across a management-plane interruption where supported.
The branch establishes the required controlled overlay sessions without depending on unsupported unsolicited inbound access.
Measured throughput and failover meet the contractual envelope across the metro sites.
Services over the optical circuit remain isolated by the appropriate higher-layer controls.

Explanation

Correct Answer

Select an appropriate private APN, outbound-initiated overlay, or routable-address service depending on carrier capabilities. Verify the resulting network behavior rather than relying only on the saved configuration.

Incorrect Answers

This observation relates to a different topology: A multisite SD-WAN deployment uses one manager for configuration and assumes manager reachability is necessary for every packet of user data. It does not verify the present outcome.

This observation relates to a different topology: A city campus needs a 10-Gbps local metro interconnect with SLA and carrier demarcation, but the proposed design assumes standard broadband internet guarantees. It does not verify the present outcome.

This observation relates to a different topology: A WAN team assumes DWDM wavelength multiplexing itself supplies packet-level route isolation between tenants. It does not verify the present outcome.

Question 373

An enterprise WAN receives DSCP values from untrusted guest clients and propagates them unchanged into privileged queues. Which observed result would most directly prove the design meets the intended goal?

Each business traffic class receives the agreed provider class and treatment across the WAN.
Delay-sensitive traffic receives scheduled treatment at both campus and WAN congestion points.
Intended receivers across the routed boundary receive the source stream.
Guest traffic uses its approved classes without consuming the premium real-time queue.

Explanation

Correct Answer

Establish an explicit QoS trust boundary that remarks or rejects unauthorized markings at ingress. Verify the resulting network behavior rather than relying only on the saved configuration.

Incorrect Answers

This observation relates to a different topology: A WAN provider accepts only three traffic classes but headquarters configures eight local DSCP queues and assumes all survive the handoff. It does not verify the present outcome.

This observation relates to a different topology: A campus designs priority queues only on the access switch but ignores a congested upstream WAN edge. It does not verify the present outcome.

This observation relates to a different topology: A source sends multicast through one router but users join from another site and no multicast routing is configured between them. It does not verify the present outcome.

Question 374

A monitoring team tries to exchange gNMI Get and Subscribe messages with a device that only exposes ordinary HTTP REST endpoints. Which observed result would most directly prove the design meets the intended goal?

Deployment responsibilities correctly assign code and app security to the customer while platform maintenance follows provider terms.
A readback of the exact resource confirms only the intended configuration changed.
Approved configuration changes use the negotiated datastore and produce attributable RPC replies.
The client negotiates capabilities and receives model-based Get/Subscribe responses from the intended target.

Explanation

Correct Answer

Use the supported gNMI service transported over gRPC with device capability and identity verification. Verify the resulting network behavior rather than relying only on the saved configuration.

Incorrect Answers

This observation relates to a different topology: A development team consumes a managed runtime that deploys application code without administering underlying servers and calls it raw IaaS. It does not verify the present outcome.

This observation relates to a different topology: A controller issues RESTCONF PATCH to many routers but treats HTTP 200 from a reverse proxy login page as proof that config was changed. It does not verify the present outcome.

This observation relates to a different topology: An automation team expects NETCONF transactions over SSH to behave like stateless HTTP GET calls with no session or lock semantics. It does not verify the present outcome.

Question 375

A branch OSPF adjacency across a pseudowire drops after interface network type changes, even though both neighbors are reachable by ping. Which observed result would most directly prove the design meets the intended goal?

Both peers reach FULL and maintain the expected DR or point-to-point behavior.
Local access failures generate bounded LSDB changes without disrupting unrelated branches.
All advertised LAN /64s are distinct and can be summarized within the delegated /48 where topology permits.
The branch receives the intended interarea destinations and no unwanted external LSAs.

Explanation

Correct Answer

Align compatible OSPF network type, timers, authentication and neighbor discovery model for that link. Verify the resulting network behavior rather than relying only on the saved configuration.

Incorrect Answers

This observation relates to a different topology: An OSPF deployment puts all 600 remote access switches into area 0 and floods changes to every site. It does not verify the present outcome.

This observation would validate a different case: A provider delegation contains 2001:db8:4200::/48 and the design requires 256 independent /64 LANs across 16 branches. It does not establish the target outcome for this topology.

Question 376

A campus has a fabric border but its external firewall cannot distinguish multiple endpoint VNs leaving the fabric. Which observed result would most directly prove the design meets the intended goal?

A single link failure preserves required site connectivity without unnecessary adjacency proliferation.
Endpoint moves are learned through the surviving control-plane node and authorized traffic resumes.
Underlay nodes reach fabric RLOCs while user endpoints are mapped and forwarded through the correct overlay VN.
External routes and flows remain segmented by approved virtual network.

Explanation

Correct Answer

Design VRF-aware border handoffs or supported segmentation-preserving transit consistent with the policy boundary. Verify the resulting network behavior rather than relying only on the saved configuration.

Incorrect Answers

This observation relates to a different topology: Multiple campus cores are connected in a full mesh, creating expensive adjacency and troubleshooting overhead. It does not verify the present outcome.

This observation relates to a different topology: A fabric control-plane node becomes unavailable and endpoint mobility updates stop at one campus site. It does not verify the present outcome.

This observation relates to a different topology: In a planned SD-Access fabric, border nodes can reach edge loopbacks but endpoints fail because the team placed user subnets into the underlay instead of overlay VRFs. It does not verify the present outcome.

Question 377

A branch uses a shaper on voice and bulk traffic together, and the business assumes shaping guarantees that voice always transmits first. Which observed result would most directly prove the design meets the intended goal?

Priority queuing protects genuine voice media while backup traffic no longer occupies the strict-priority class.
All essential classes receive their planned treatment without violating actual egress capacity.
Under congestion, voice receives its intended service while total egress stays within the shaped rate.
End-to-end packet captures and performance tests show the intended DSCP mapping and queue treatment.

Explanation

Correct Answer

Pair shaping with explicit class-based queuing and suitable real-time priority policy. Verify the resulting network behavior rather than relying only on the saved configuration.

Incorrect Answers

This observation relates to a different topology: A campus uses DSCP EF for voice signaling, voice media, and backup traffic, causing priority queue overload. It does not verify the present outcome.

This observation relates to a different topology: A switch QoS scheduler guarantees 30% to backup traffic and 80% to voice under full congestion, exceeding possible link capacity. It does not verify the present outcome.

This observation relates to a different topology: A network architect assumes assigning DSCP CS6 to user browsing guarantees faster internet service from a provider that resets all DSCP. It does not verify the present outcome.

Question 378

Several data centers need high-capacity optical transport over metropolitan dark fiber without converting each tenant VLAN to an IP tunnel. Which observed result would most directly prove the design meets the intended goal?

The required VPN tunnels and critical services establish over cellular during a failure exercise.
Protected optical channels carry authorized client services with measured bit-error and failover performance.
The site retains approved application reachability after losing one WAN edge or carrier path.
A controlled failure of either carrier access route leaves required service operational on the independent path.

Explanation

Correct Answer

Evaluate DWDM wavelength services with optics, reach, dispersion and protection appropriate to the fiber plant. Verify the resulting network behavior rather than relying only on the saved configuration.

Incorrect Answers

This observation relates to a different topology: Backup 5G is installed at a factory but its data plan and APN firewall rules block VPN establishment after primary fiber failure. It does not verify the present outcome.

This observation relates to a different topology: A new SD-WAN site has a single edge appliance and single underlay yet is approved as redundant because controllers run in different data centers. It does not verify the present outcome.

This observation relates to a different topology: A bank contracts two MPLS providers but both fiber tails enter the building through the same conduit. It does not verify the present outcome.

Question 379

A remote campus uses two distribution switches and requires nonstop gateway access during a planned supervisor replacement. Which observed result would most directly prove the design meets the intended goal?

Gateway traffic survives a controlled supervisor transition within the approved outage budget.
Permitted uplinks forward under normal operation and converge cleanly on individual link loss.
Both access links forward as designed and a chassis failure retains authorized connectivity.
Rogue DHCP offers from access ports are dropped while authorized client leases succeed.

Explanation

Correct Answer

Choose a supported redundant supervisor or logical chassis abstraction with explicitly documented switchover behavior. Verify the resulting network behavior rather than relying only on the saved configuration.

Incorrect Answers

This observation relates to a different topology: Multiple access switches connect to one distribution block through independent Layer 2 uplinks with a blocked redundant path. It does not verify the present outcome.

This observation relates to a different topology: Two access switches uplink to a distribution pair; the architecture stretches one port channel across chassis without verifying multi-chassis support. It does not verify the present outcome.

This observation relates to a different topology: A routed campus uses DHCP snooping on access switches but marks every endpoint port trusted for convenience. It does not verify the present outcome.

Question 380

A remote branch uses an OSPF stub area but a design change introduces an ASBR that must redistribute external routes within it. Which observed result would most directly prove the design meets the intended goal?

The branch receives the intended interarea destinations and no unwanted external LSAs.
Local access failures generate bounded LSDB changes without disrupting unrelated branches.
Bidirectional test prefixes appear once with predictable origin and no repeated reimport after failover.
Required external routes originate inside the NSSA and are translated into the rest of the OSPF domain as designed.

Explanation

Correct Answer

Evaluate an NSSA design and associated ABR external-route translation rather than a plain stub area. Verify the resulting network behavior rather than relying only on the saved configuration.

Incorrect Answers

This observation relates to a different topology: An OSPF deployment puts all 600 remote access switches into area 0 and floods changes to every site. It does not verify the present outcome.

This observation relates to a different topology: Branch A and B redistribute external BGP into OSPF, then advertise resulting routes back into BGP at the opposite edge. It does not verify the present outcome.

Cisco 300-420 Exam Dumps, Practice Test Questions

Question 370

Explanation

Correct Answer

Incorrect Answers

Question 371

Explanation

Correct Answer

Incorrect Answers

Question 372

Explanation

Correct Answer

Incorrect Answers

Question 373

Explanation

Correct Answer

Incorrect Answers

Question 374

Explanation

Correct Answer

Incorrect Answers

Question 375

Explanation

Correct Answer

Incorrect Answers

Question 376

Explanation

Correct Answer

Incorrect Answers

Question 377

Explanation

Correct Answer

Incorrect Answers

Question 378

Explanation

Correct Answer

Incorrect Answers

Question 379

Explanation

Correct Answer

Incorrect Answers

Question 380

Explanation

Correct Answer

Incorrect Answers