100% Latest & Updated Cisco 300-420 Practice Test Questions, Exam Dumps & Verified Answers!
30 Days Free Updates, Instant Download!
Question 380
A remote branch uses an OSPF stub area but a design change introduces an ASBR that must redistribute external routes within it. Which observed result would most directly prove the design meets the intended goal?
- The branch receives the intended interarea destinations and no unwanted external LSAs.
- Local access failures generate bounded LSDB changes without disrupting unrelated branches.
- Bidirectional test prefixes appear once with predictable origin and no repeated reimport after failover.
- Required external routes originate inside the NSSA and are translated into the rest of the OSPF domain as designed.
Explanation
Correct Answer
D:Evaluate an NSSA design and associated ABR external-route translation rather than a plain stub area. Verify the resulting network behavior rather than relying only on the saved configuration.
Incorrect Answers
A:This observation relates to a different topology: A branch OSPF design selects a totally stubby area but an application requires type-3 interarea routes rather than only the default. It does not verify the present outcome.
B:This observation relates to a different topology: An OSPF deployment puts all 600 remote access switches into area 0 and floods changes to every site. It does not verify the present outcome.
C:This observation relates to a different topology: Branch A and B redistribute external BGP into OSPF, then advertise resulting routes back into BGP at the opposite edge. It does not verify the present outcome.
Question 381
A security design requires authenticating OSPF control packets on shared routed links, but only one neighbor has authentication enabled. Which observed result would most directly prove the design meets the intended goal?
- A genuine path failure is detected within the target interval while benign load does not flap sessions.
- The neighbors reach FULL and application packets traverse without fragmentation problems.
- OSPF adjacencies establish only between intended authenticated peers and survive planned key changes.
- Neighbor discovery and SLAAC operate independently on both VLANs with no on-link ambiguity.
Explanation
Correct Answer
C:Apply compatible supported OSPF authentication with coordinated keys and rollover on both ends. Verify the resulting network behavior rather than relying only on the saved configuration.
Incorrect Answers
A:This observation relates to a different topology: A design team wants fast OSPF failure detection on long-running optical links without dropping stable adjacencies during occasional control-plane delay. It does not verify the present outcome.
B:This observation relates to a different topology: Two OSPF neighbors on a routed core link are stuck in EXSTART/EXCHANGE and one endpoint uses an incompatible MTU. It does not verify the present outcome.
D:This observation relates to a different topology: A campus plans IPv6 addressing with one /64 shared between two routed VLAN interfaces in different buildings. It does not verify the present outcome.
Question 382
A campus firewall isolates management VRFs but its shared-services route leaking exports all loopbacks to the guest VRF. Which observed result would most directly prove the design meets the intended goal?
- Guest routing tables contain no unauthorized management loopback routes.
- An emergency administrator maintains workable session latency while backup transfer runs.
- A WAN outage still produces actionable diagnostics and authorized operator access.
- Multiple authorized sources reach receiver sets through the designed bidirectional shared tree.
Explanation
Correct Answer
A:Constrain route leaking to the precise management service endpoints and permitted directions. Verify the resulting network behavior rather than relying only on the saved configuration.
Incorrect Answers
B:This observation relates to a different topology: A low-bandwidth remote management VPN carries huge nightly backup transfers that prevent emergency SSH access. It does not verify the present outcome.
C:This observation relates to a different topology: Network management of a branch uses a VPN over its sole primary WAN, and the organization reports no way to diagnose a provider outage. It does not verify the present outcome.
D:This observation relates to a different topology: A many-to-many trading network has multiple multicast senders and a scalable shared-tree forwarding requirement. It does not verify the present outcome.
Question 383
A financial application needs multicast delivery across SDA sites, but all validation has covered unicast endpoint maps only. Which observed result would most directly prove the design meets the intended goal?
- Authorized multicast receivers obtain packets while uninvolved VNs and sites remain isolated.
- The corporate campus receives only the approved default from designated egress nodes.
- Guest clients roam as designed and cannot access restricted enterprise segments.
- Approved intersite traffic carries the expected segmentation context without undesired leakage.
Explanation
Correct Answer
A:Design supported multicast replication and routed multicast services across the intended fabric transit. Verify the resulting network behavior rather than relying only on the saved configuration.
Incorrect Answers
B:This observation relates to a different topology: A branch router redistributes a static default to the campus IGP without approval, causing arbitrary sites to shift egress. It does not verify the present outcome.
C:This observation relates to a different topology: A fabric site needs a guest wireless SSID without extending the guest Layer 2 domain across the whole enterprise. It does not verify the present outcome.
D:This observation relates to a different topology: An organization needs consistent segmentation across two SD-Access fabric sites connected by a routed MPLS service. It does not verify the present outcome.
Question 384
A branch has broadband backup with no QoS controls and a voice service drops under failover saturation. Which observed result would most directly prove the design meets the intended goal?
- Guest prefixes and traffic stay isolated from production routes and data tunnels.
- Multicast protocol control and user traffic traverse the overlay while mandated encryption tests also pass where enabled.
- Measured throughput and failover meet the contractual envelope across the metro sites.
- Voice sessions remain inside the approved quality budget over the constrained backup link.
Explanation
Correct Answer
D:Define a backup-class QoS and application admission design appropriate to smaller available bandwidth. Verify the resulting network behavior rather than relying only on the saved configuration.
Incorrect Answers
A:This observation relates to a different topology: An SD-WAN fabric routes guest traffic into the production VPN because a new edge reused the corporate service VPN identifier. It does not verify the present outcome.
B:This observation relates to a different topology: A lab requires a routed overlay carrying multicast between sites but encryption is not part of the GRE service itself. It does not verify the present outcome.
C:This observation relates to a different topology: A city campus needs a 10-Gbps local metro interconnect with SLA and carrier demarcation, but the proposed design assumes standard broadband internet guarantees. It does not verify the present outcome.
Question 385
A security operations service needs authoritative interface state changes, not a dashboard that replays stale telemetry after collector failure. Which observed result would most directly prove the design meets the intended goal?
- The receiver continues receiving timestamped samples during steady-state operation.
- A controlled status change reaches the collector promptly without waiting for the next periodic poll.
- Schema registry entries identify the correct module namespace and revisions for each controller operation.
- A controlled interface-down event arrives with correct device identity and event ordering after reconnection.
Explanation
Correct Answer
D:Design timestamped telemetry with source identification and collector reconnection/backfill policy as supported. Verify the resulting network behavior rather than relying only on the saved configuration.
Incorrect Answers
A:This observation relates to a different topology: A support dashboard needs regular CPU and interface-rate samples even when values remain unchanged. It does not verify the present outcome.
B:This observation relates to a different topology: An alerting system needs immediate notice of interface administrative status changes but only polls every five minutes. It does not verify the present outcome.
C:This observation relates to a different topology: A standards group needs an interoperable interface model but mistakenly calls every IETF YANG module an OpenConfig model. It does not verify the present outcome.
Question 386
A router receives two EIGRP routes for a prefix with different metrics and the design team wants deterministic failover. Which observed result would most directly prove the design meets the intended goal?
- The intended exit preference propagates across internal BGP speakers.
- Hubs avoid querying through the branch as a transit path and branch-local prefixes remain visible.
- Observed inbound paths trend toward ISP B from representative external monitors without assuming universal control.
- The optimal successor forwards normally and eligible backup takes over without a network-wide query where feasible.
Explanation
Correct Answer
D:Plan the EIGRP successor and feasible-successor relationship using composite metric and feasibility checks. Verify the resulting network behavior rather than relying only on the saved configuration.
Incorrect Answers
A:This observation relates to a different topology: A BGP operator attempts to influence routes within one AS by changing the weight attribute only on one edge router. It does not verify the present outcome.
B:This observation relates to a different topology: A branch EIGRP router advertises remote routes back into its hub and occasionally becomes a transit path between hubs. It does not verify the present outcome.
C:This observation relates to a different topology: A company wants most return traffic for its public prefix to enter ISP B rather than ISP A. It does not verify the present outcome.
Question 387
A fabric control-plane node becomes unavailable and endpoint mobility updates stop at one campus site. Which observed result would most directly prove the design meets the intended goal?
- Endpoint moves are learned through the surviving control-plane node and authorized traffic resumes.
- A tested hardware or supervisor failure meets application recovery objectives without unexpected shared dependencies.
- External routes and flows remain segmented by approved virtual network.
- Neighbor relationships recover while supported forwarding state remains stable during the tested restart.
Explanation
Correct Answer
A:Plan redundant supported fabric control-plane nodes with resilient underlay reachability. Verify the resulting network behavior rather than relying only on the saved configuration.
Incorrect Answers
B:This observation relates to a different topology: A virtualized distribution pair uses one logical control plane and engineers assume it offers separate failure domains like two chassis in different buildings. It does not verify the present outcome.
C:This observation relates to a different topology: A campus has a fabric border but its external firewall cannot distinguish multiple endpoint VNs leaving the fabric. It does not verify the present outcome.
D:This observation relates to a different topology: An NSF-capable router pair loses a control-plane process briefly and the design assumes all neighboring routers will preserve forwarding. It does not verify the present outcome.
Question 388
Two enterprise buildings use separate Metro Ethernet UNI ports, yet their operators assume the provider will preserve any configured customer VLAN ID. Which observed result would most directly prove the design meets the intended goal?
- The approved VLAN service operates end to end without leaking unrelated hospital segments.
- Expected tagged traffic traverses the authorized EVC and unrelated tags are isolated.
- Each branch exchanges only authorized VPN routes while the provider backbone transports traffic without L2 extension.
- Approved Ethernet frames reach the remote service endpoint while unrelated VLANs remain excluded.
Explanation
Correct Answer
B:Align the service's supported VLAN encapsulation and mapping with the carrier's EVC definition. Verify the resulting network behavior rather than relying only on the saved configuration.
Incorrect Answers
A:This observation relates to a different topology: Two hospitals need their existing Ethernet VLANs extended across a provider circuit but their engineers incorrectly request a routed L3VPN. It does not verify the present outcome.
C:This observation relates to a different topology: A customer needs private route separation for 12 branches over a shared provider backbone, not a single Ethernet broadcast domain. It does not verify the present outcome.
D:This observation relates to a different topology: Two industrial sites require transparent delivery of a small set of Ethernet services and reject routing between their private LANs. It does not verify the present outcome.
Question 389
A SaaS contact center requires both 200-ms maximum application response and clear separation of media and control classes. Which observed result would most directly prove the design meets the intended goal?
- Authorized receivers join named sources and receive streams without relying on RP registration.
- Voice delay stays within SLA during video bursts while other classes retain scheduled service.
- Intended receivers obtain the translated stream while unrelated multicast groups remain separate.
- End-to-end probes confirm intended latency and drop treatment for each business-critical class.
Explanation
Correct Answer
D:Map actual application traffic to appropriate DiffServ classes and engineering budget across each congested hop. Verify the resulting network behavior rather than relying only on the saved configuration.
Incorrect Answers
A:This observation relates to a different topology: A 10,000-receiver IPTV deployment requires one-to-many traffic from known sources but still uses RP discovery for each stream. It does not verify the present outcome.
B:This observation relates to a different topology: Video and voice both use one strict-priority queue, causing voice jitter when video surges. It does not verify the present outcome.
C:This observation relates to a different topology: An enterprise wants to expose a multicast stream to one receiver group but the original source uses a group address conflicting with a remote application. It does not verify the present outcome.
Question 390
A remote office assigns clients addresses from 169.254.0.0/16 and expects them to be reachable through a routed WAN. Which observed result would most directly prove the design meets the intended goal?
- Clients reach the headquarters destination over the routed path using the approved office prefix.
- Neighbor discovery and SLAAC operate independently on both VLANs with no on-link ambiguity.
- Local access failures generate bounded LSDB changes without disrupting unrelated branches.
- The intended adjacency comes up at the correct level and interarea destinations remain reachable.
Explanation
Correct Answer
A:Use a legitimately allocated private or global prefix at the remote site and reserve IPv4 link-local for local-only communication. Verify the resulting network behavior rather than relying only on the saved configuration.
Incorrect Answers
B:This observation relates to a different topology: A campus plans IPv6 addressing with one /64 shared between two routed VLAN interfaces in different buildings. It does not verify the present outcome.
C:This observation relates to a different topology: An OSPF deployment puts all 600 remote access switches into area 0 and floods changes to every site. It does not verify the present outcome.
D:This observation relates to a different topology: New routers have valid IP addresses but IS-IS peers in separate areas never form a level-1 adjacency. It does not verify the present outcome.
Designing Cisco Enterprise Networks (ENSLD) (300-420) Practice Tests
