100% Latest & Updated Cisco 300-420 Practice Test Questions, Exam Dumps & Verified Answers!
30 Days Free Updates, Instant Download!
Question 530
A multicampus network has two equal-cost paths but the design assumes packets always alternate evenly across every individual packet. Which specific risk makes the uncorrected design unacceptable?
- Assuming per-packet balancing can hide uneven utilization and introduce reorder risk.
- Unvalidated WAN MTU/latency can silently fail tunneled endpoint traffic.
- Overlapping domain redistribution without clear ownership causes asymmetric paths and unnecessary delay.
- Confusing LISP control messages with user traffic hides broken data-plane paths.
Explanation
Correct Answer
A:The supported design response is to plan ECMP based on actual per-flow hashing and application sensitivity rather than guaranteed per-packet load balance.
Incorrect Answers
B:That hazard arises in a separate case: A design extends SDA fabric across buildings on a WAN with 1500-byte MTU and assumes local campus performance will continue unchanged. It is not the failure mode evidenced here.
C:That hazard arises in a separate case: A branch aggregation point has both IS-IS and OSPF neighbors with multiple equal-cost exits; traffic unexpectedly hairpins through a data center. It is not the failure mode evidenced here.
D:That hazard arises in a separate case: An SD-Access architect assumes the fabric's LISP control plane transports all user packets like a data-plane tunnel. It is not the failure mode evidenced here.
Question 531
During a branch expansion, the address plan fills every usable subnet identifier and leaves no room for point-to-point links or future aggregation. Which specific risk makes the uncorrected design unacceptable?
- A flat oversized OSPF domain creates unnecessary SPF recalculation and troubleshooting complexity.
- Exhausted or fragmented allocations force route-table growth and emergency renumbering.
- IPv4 literals and protocols lacking compatible translation can bypass or break a NAT64/DNS64 design.
- Uncontrolled default redistribution can reroute traffic through a low-capacity branch.
Explanation
Correct Answer
B:The supported design response is to reserve infrastructure and growth ranges separately within a hierarchical IPv4 and IPv6 allocation plan.
Incorrect Answers
A:That hazard arises in a separate case: An OSPF deployment puts all 600 remote access switches into area 0 and floods changes to every site. It is not the failure mode evidenced here.
C:That hazard arises in a separate case: A new IPv6-only client subnet must access a legacy IPv4-only web endpoint through an enterprise gateway. It is not the failure mode evidenced here.
D:That hazard arises in a separate case: A branch engineer redistributes a static default route into EIGRP and advertises it to every site, overriding the intended hub defaults. It is not the failure mode evidenced here.
Question 532
A hospital uses one leased WAN circuit for critical access, but its architecture report calls the site highly available because it has two LAN switches. Which specific risk makes the uncorrected design unacceptable?
- Redundant LAN switches do not fix a single WAN last-mile failure.
- Misassigned segment identifiers can bypass intended enterprise isolation.
- Interface-up status alone does not prove the remote provider path is usable.
- Overlay encryption overhead can create an otherwise invisible PMTUD blackhole.
Explanation
Correct Answer
A:The supported design response is to add genuinely diverse WAN transport and edge device options consistent with the recovery requirement.
Incorrect Answers
B:That hazard arises in a separate case: An SD-WAN fabric routes guest traffic into the production VPN because a new edge reused the corporate service VPN identifier. It is not the failure mode evidenced here.
C:That hazard arises in a separate case: An enterprise's primary WAN circuit fails but BGP route withdrawal is delayed while the underlay interface remains up. It is not the failure mode evidenced here.
D:That hazard arises in a separate case: A branch uses IPsec overlay on broadband with 1400-byte effective MTU, but an application sends 1500-byte DF-set packets and stalls. It is not the failure mode evidenced here.
Question 533
A fleet telemetry design streams all available operational leaves every second over a constrained management link. Which specific risk makes the uncorrected design unacceptable?
- Unbounded telemetry streams can exhaust collectors and impair network control operations.
- Assuming all leaves support event publication can create silent observability gaps.
- Oversampling can consume bandwidth and CPU without improving the use case.
- Slow periodic polling can miss short-lived congestion incidents.
Explanation
Correct Answer
A:The supported design response is to subscribe only to required model paths with appropriate update mode and cadence.
Incorrect Answers
B:That hazard arises in a separate case: A routing telemetry client assumes every operational counter supports on-change updates and receives no updates on one platform. It is not the failure mode evidenced here.
C:That hazard arises in a separate case: A global WAN telemetry system publishes a complete 10,000-interface snapshot every 100 ms although the target is only five-minute capacity planning. It is not the failure mode evidenced here.
D:That hazard arises in a separate case: An NOC polls every router with SNMP once every ten minutes and misses 30-second interface utilization spikes. It is not the failure mode evidenced here.
Question 534
A core router's production data plane fails, leaving SSH reachable only through the same failed core path. Which specific risk makes the uncorrected design unacceptable?
- In-band-only management is unavailable when the network it depends on fails.
- Ignoring RPF can permit multicast loops or duplicate unwanted traffic.
- OOB cabling alone cannot provide recovery if authentication still relies entirely on failed production.
- Universal RSVP reservations can consume control-plane and operational resources at scale.
Explanation
Correct Answer
A:The supported design response is to provide an independently reachable out-of-band management network and approved emergency access process.
Incorrect Answers
B:That hazard arises in a separate case: A multicast source is reachable through an interface other than the one receiving the packet, but the router still forwards it to all receivers. It is not the failure mode evidenced here.
C:That hazard arises in a separate case: A campus has out-of-band console servers but all consoles depend on the production AAA server reachable only over the failed production network. It is not the failure mode evidenced here.
D:That hazard arises in a separate case: A hospital asks for guaranteed per-flow service across 300 branches and considers IntServ RSVP state on every core router. It is not the failure mode evidenced here.
Question 535
A campus border is configured with two equal-cost external BGP paths but only one is installed for traffic forwarding. Which specific risk makes the uncorrected design unacceptable?
- Ignoring overload can select a router that has not populated a usable forwarding table.
- Misdesigned confederation boundaries can leak internal member-AS details or break route propagation.
- Assuming parallel sessions alone implies BGP load sharing hides the default single-best-path behavior.
- Bidirectional uncontrolled redistribution can create routing loops and unstable metric selection.
Explanation
Correct Answer
C:The supported design response is to enable and validate supported BGP multipath features subject to equal-path eligibility requirements.
Incorrect Answers
A:That hazard arises in a separate case: The IS-IS backbone has a router in overload state after reboot and operators mistake it for an ordinary forwarding transit. It is not the failure mode evidenced here.
B:That hazard arises in a separate case: A merger requires two administrative BGP regions to appear as one external AS while reducing iBGP mesh size internally. It is not the failure mode evidenced here.
D:That hazard arises in a separate case: Branch A and B redistribute external BGP into OSPF, then advertise resulting routes back into BGP at the opposite edge. It is not the failure mode evidenced here.
Question 536
A new MST campus region accidentally has a different VLAN-to-instance mapping on one distribution switch. Which specific risk makes the uncorrected design unacceptable?
- MST region mismatch can create boundary behavior and unexpected spanning-tree paths.
- Extending VLANs across routed-access boundaries negates intended local Layer 2 containment.
- A configured backup switch cannot take over traffic directed at a failed physical gateway address.
- Shared control-plane or backplane faults can defeat assumed physical redundancy.
Explanation
Correct Answer
A:The supported design response is to align MST region name, revision, and VLAN-to-instance mapping on intended peers.
Incorrect Answers
B:That hazard arises in a separate case: A routed-access campus needs equal-cost forwarding to two distribution routers while keeping each VLAN local to one wiring closet. It is not the failure mode evidenced here.
C:That hazard arises in a separate case: A building has two independent distribution switches but hosts use the physical IP of one switch as their default gateway. It is not the failure mode evidenced here.
D:That hazard arises in a separate case: A virtualized distribution pair uses one logical control plane and engineers assume it offers separate failure domains like two chassis in different buildings. It is not the failure mode evidenced here.
Question 537
A small branch must use both Internet and private MPLS, and engineers assume the two underlays cannot coexist on one SD-WAN edge. Which specific risk makes the uncorrected design unacceptable?
- Nominally separate providers can share a single physical failure domain.
- Plain GRE or unencrypted transport does not meet confidentiality requirements.
- A routed tunnel alone cannot guarantee transparent Layer 2 service semantics.
- Incorrect transport labels or reachability can keep one TLOC out of service.
Explanation
Correct Answer
D:The supported design response is to design distinct supported transport interfaces and TLOC colors with centralized path policy.
Incorrect Answers
A:That hazard arises in a separate case: A bank contracts two MPLS providers but both fiber tails enter the building through the same conduit. It is not the failure mode evidenced here.
B:That hazard arises in a separate case: A site-to-site tunnel must protect financial payload confidentiality and integrity across the public internet. It is not the failure mode evidenced here.
C:That hazard arises in a separate case: Two industrial sites require transparent delivery of a small set of Ethernet services and reject routing between their private LANs. It is not the failure mode evidenced here.
Question 538
A multicast network has active PIM neighbors but one edge switch suppresses IGMP reports after an access-layer topology change. Which specific risk makes the uncorrected design unacceptable?
- RP failure or inconsistent RP mapping can interrupt source discovery.
- QoS on one hop cannot undo queueing loss caused at a later bottleneck.
- PIM adjacency alone does not ensure Layer 2 receiver registration.
- A flat shared management network allows lateral movement and overbroad privilege.
Explanation
Correct Answer
C:The supported design response is to correct receiver membership handling and ensure snooping querier or routing interface behavior is consistent.
Incorrect Answers
A:That hazard arises in a separate case: A PIM-SM domain has active receivers but no working rendezvous-point reachability for new source registration. It is not the failure mode evidenced here.
B:That hazard arises in a separate case: A campus designs priority queues only on the access switch but ignores a congested upstream WAN edge. It is not the failure mode evidenced here.
D:That hazard arises in a separate case: Two business units share one management VLAN with unrestricted access to each other's routers. It is not the failure mode evidenced here.
Question 539
A designer proposes unequal-cost EIGRP load sharing for two paths whose topology prevents one path from meeting the feasibility condition. Which specific risk makes the uncorrected design unacceptable?
- Treating variance alone as permission for any alternate can enable loops or ineffective backup behavior.
- Assuming parallel sessions alone implies BGP load sharing hides the default single-best-path behavior.
- Unbounded EIGRP queries across slow or unstable WAN paths can delay convergence and trigger SIA events.
- Allowing a nontransit branch to act as a query/transit path increases instability and query scope.
Explanation
Correct Answer
A:The supported design response is to select feasible successors that meet EIGRP feasibility requirements and use variance only on eligible paths.
Incorrect Answers
B:That hazard arises in a separate case: A campus border is configured with two equal-cost external BGP paths but only one is installed for traffic forwarding. It is not the failure mode evidenced here.
C:That hazard arises in a separate case: An EIGRP core has routes stuck active after one WAN path fails and queries spread into many remote sites. It is not the failure mode evidenced here.
D:That hazard arises in a separate case: A branch EIGRP router advertises remote routes back into its hub and occasionally becomes a transit path between hubs. It is not the failure mode evidenced here.
Question 540
A wireless access-point refresh increases PoE needs above the available 802.3at class on older switches. Which specific risk makes the uncorrected design unacceptable?
- Undersized PoE causes reduced AP capabilities or unstable power negotiation.
- Independently bridging every redundant cable can cause STP blocking or accidental loops.
- Stretching a broad guest broadcast domain enlarges the fault and attack surface.
- Redundancy claims may not match actual hardware or software failover behavior.
Explanation
Correct Answer
A:The supported design response is to specify access switch PoE capabilities and power budget that support the APs' required negotiated power levels.
Incorrect Answers
B:That hazard arises in a separate case: Multiple access switches connect to one distribution block through independent Layer 2 uplinks with a blocked redundant path. It is not the failure mode evidenced here.
C:That hazard arises in a separate case: A fabric site needs a guest wireless SSID without extending the guest Layer 2 domain across the whole enterprise. It is not the failure mode evidenced here.
D:That hazard arises in a separate case: A remote campus uses two distribution switches and requires nonstop gateway access during a planned supervisor replacement. It is not the failure mode evidenced here.
Designing Cisco Enterprise Networks (ENSLD) (300-420) Practice Tests