100% Latest & Updated Cisco 300-420 Practice Test Questions, Exam Dumps & Verified Answers!
30 Days Free Updates, Instant Download!
Question 80
A provider delegation contains 2001:db8:4200::/48 and the design requires 256 independent /64 LANs across 16 branches. Which design change most directly addresses the stated requirement?
- Introduce an independently reachable redundant aggregation path with planned metrics and bounded query behavior.
- Allocate nonoverlapping hierarchical IPv4 blocks by region and site, reserving summary boundaries and documenting any unavoidable VRF isolation.
- Evaluate a managed IPv6-over-IPv4 tunnel overlay with endpoints, MTU and failure behavior explicitly designed.
- Subdivide the /48 hierarchically by branch and VLAN, with unique /64s and aggregate boundaries that fit the delegation.
Explanation
Correct Answer
D:The design is validated when all advertised LAN /64s are distinct and can be summarized within the delegated /48 where topology permits.
Incorrect Answers
A:That option concerns a separate design case: An EIGRP deployment relies on a single aggregation router and an outage cuts off all downstream branches. The relevant control here is: Subdivide the /48 hierarchically by branch and VLAN, with unique /64s and aggregate boundaries that fit the delegation.
B:That option concerns a separate design case: A retailer adds 70 branches and reused 10.20.0.0/16 at several sites; the MPLS provider cannot distinguish the overlapping prefixes in the enterprise routing table. The relevant control here is: Subdivide the /48 hierarchically by branch and VLAN, with unique /64s and aggregate boundaries that fit the delegation.
C:That option concerns a separate design case: An organization needs to reach an IPv6 island over a provider network that carries IPv4 only for the next year. The relevant control here is: Subdivide the /48 hierarchically by branch and VLAN, with unique /64s and aggregate boundaries that fit the delegation.
Question 81
A routed-access campus needs equal-cost forwarding to two distribution routers while keeping each VLAN local to one wiring closet. Which design change most directly addresses the stated requirement?
- Evaluate a supported SDA transit that preserves virtual network and SGT policy semantics between sites.
- Align MST region name, revision, and VLAN-to-instance mapping on intended peers.
- Provide independent power infrastructure for each redundant network node and validate dual-path resilience.
- Build point-to-point routed access uplinks and use ECMP-capable IGP convergence at the access layer.
Explanation
Correct Answer
D:The design is validated when both routed uplinks forward to the rest of campus and a link failure reroutes traffic without a campus STP event.
Incorrect Answers
A:That option concerns a separate design case: An organization needs consistent segmentation across two SD-Access fabric sites connected by a routed MPLS service. The relevant control here is: Build point-to-point routed access uplinks and use ECMP-capable IGP convergence at the access layer.
B:That option concerns a separate design case: A new MST campus region accidentally has a different VLAN-to-instance mapping on one distribution switch. The relevant control here is: Build point-to-point routed access uplinks and use ECMP-capable IGP convergence at the access layer.
C:That option concerns a separate design case: Two campus distribution routers each have a single power feed from the same rack PDU, yet the architecture counts them as separate fault domains. The relevant control here is: Build point-to-point routed access uplinks and use ECMP-capable IGP convergence at the access layer.
Question 82
A retail chain needs many spokes to make dynamic spoke-to-spoke tunnels without permanent full-mesh configuration. Which design change most directly addresses the stated requirement?
- Apply topology or centralized control policy at the appropriate site/VPN scope.
- Select MPLS L3VPN service with CE-PE routing, per-customer VRFs and explicit route policy.
- Include latency, jitter and loss thresholds appropriate to the application class.
- Evaluate a DMVPN hub/spoke design using NHRP registration and supported dynamic shortcut behavior.
Explanation
Correct Answer
D:The design is validated when approved spoke-to-spoke traffic forms an appropriate direct overlay path after registration.
Incorrect Answers
A:That option concerns a separate design case: A network wants a hub-and-spoke topology for finance traffic but allows any-to-any policy for all service VPNs. The relevant control here is: Evaluate a DMVPN hub/spoke design using NHRP registration and supported dynamic shortcut behavior.
B:That option concerns a separate design case: A regional healthcare group wants routed site separation within a provider-managed private WAN without building its own full mesh of tunnels. The relevant control here is: Evaluate a DMVPN hub/spoke design using NHRP registration and supported dynamic shortcut behavior.
C:That option concerns a separate design case: A video conference SD-WAN policy accepts tunnels with 1% packet loss but ignores sustained jitter above application tolerance. The relevant control here is: Evaluate a DMVPN hub/spoke design using NHRP registration and supported dynamic shortcut behavior.
Question 83
An enterprise edge allows a contracted 50-Mbps guest rate but users report voice degradation during microbursts despite the average staying under 50 Mbps. Which design change most directly addresses the stated requirement?
- Create feasible bandwidth allocations and an explicit priority bandwidth budget that sums within supported scheduler constraints.
- Police untrusted guest ingress traffic to an appropriate rate and violation action at the policy boundary.
- Size admission and queue bandwidth using packetization and encapsulation overhead plus concurrent-call estimates.
- Engineer a policer with an appropriate burst tolerance and separate real-time queue protection.
Explanation
Correct Answer
D:The design is validated when excess guest bursts are contained while voice packet-delay variation remains acceptable.
Incorrect Answers
A:That option concerns a separate design case: A switch QoS scheduler guarantees 30% to backup traffic and 80% to voice under full congestion, exceeding possible link capacity. The relevant control here is: Engineer a policer with an appropriate burst tolerance and separate real-time queue protection.
B:That option concerns a separate design case: A guest wireless SSID creates burst traffic exceeding its contracted share and disrupts campus applications. The relevant control here is: Engineer a policer with an appropriate burst tolerance and separate real-time queue protection.
C:That option concerns a separate design case: A design team calculates voice QoS bandwidth solely from codec payload bit rate and ignores RTP, IP and tunnel overhead. The relevant control here is: Engineer a policer with an appropriate burst tolerance and separate real-time queue protection.
Question 84
A large enterprise wants to contain detailed IS-IS prefixes within buildings while preserving intercampus reachability. Which design change most directly addresses the stated requirement?
- Use a hierarchical IS-IS L1/L2 design and summarization at supported area boundaries where it fits topology.
- Use controlled redistribution policy with route tags and a defined protocol boundary between OSPF and IS-IS.
- Use local preference or another AS-wide BGP policy rather than relying on locally significant weight.
- Set consistent IS-IS link metrics reflecting intended primary and backup capacity and verify resulting shortest paths.
Explanation
Correct Answer
A:The design is validated when building-specific churn stays within the intended area while intercampus summaries remain available.
Incorrect Answers
B:That option concerns a separate design case: IS-IS adjacencies form between distribution switches, but all internal prefixes are redistributed from OSPF without loop prevention. The relevant control here is: Use a hierarchical IS-IS L1/L2 design and summarization at supported area boundaries where it fits topology.
C:That option concerns a separate design case: A BGP operator attempts to influence routes within one AS by changing the weight attribute only on one edge router. The relevant control here is: Use a hierarchical IS-IS L1/L2 design and summarization at supported area boundaries where it fits topology.
D:That option concerns a separate design case: A network uses IS-IS with dual distribution routers and wants predictable traffic away from a low-bandwidth backup path. The relevant control here is: Use a hierarchical IS-IS L1/L2 design and summarization at supported area boundaries where it fits topology.
Question 85
A Cisco-only controller needs platform-specific wireless policies that are not represented by the organization's standard OpenConfig model. Which design change most directly addresses the stated requirement?
- Evaluate a dedicated cloud interconnect or partner/private WAN option with diverse regional termination and routing.
- Select subscription modes according to the actual leaf and device support, using periodic for counters when necessary.
- Distinguish IETF standards-track models from OpenConfig community models and vendor-native schema ownership.
- Use an appropriate Cisco native YANG model for supported platform-specific configuration.
Explanation
Correct Answer
D:The design is validated when the controller successfully reads and writes only the supported wireless policy nodes on target devices.
Incorrect Answers
A:That option concerns a separate design case: A company needs private predictable cloud connectivity to two regions but its design considers only commodity internet VPNs. The relevant control here is: Use an appropriate Cisco native YANG model for supported platform-specific configuration.
B:That option concerns a separate design case: A routing telemetry client assumes every operational counter supports on-change updates and receives no updates on one platform. The relevant control here is: Use an appropriate Cisco native YANG model for supported platform-specific configuration.
C:That option concerns a separate design case: A standards group needs an interoperable interface model but mistakenly calls every IETF YANG module an OpenConfig model. The relevant control here is: Use an appropriate Cisco native YANG model for supported platform-specific configuration.
Question 86
A site cutover retains a withdrawn /24 under an unchanged /20 campus summary and traffic follows an obsolete transit path. Which design change most directly addresses the stated requirement?
- Align advertised costs and path policy with available bandwidth and acceptable backup behavior.
- Size the entire routed underlay MTU for supported encapsulated payloads rather than only endpoint Ethernet frames.
- Evaluate supported multisite design with MTU, latency, encapsulation, and control-plane reachability constraints.
- Update summary ownership and ensure discarded or absent specifics cannot mask the retired destination.
Explanation
Correct Answer
D:The design is validated when probes to live destinations follow correct routes while the decommissioned /24 is no longer misdirected.
Incorrect Answers
A:That option concerns a separate design case: A distribution pair advertises the same summary at two locations, but one has a 100-Mbps backhaul and receives half of campus traffic. The relevant control here is: Update summary ownership and ensure discarded or absent specifics cannot mask the retired destination.
B:That option concerns a separate design case: Fabric edge nodes encapsulate packets, but the underlay path MTU is too small for added VXLAN overhead. The relevant control here is: Update summary ownership and ensure discarded or absent specifics cannot mask the retired destination.
C:That option concerns a separate design case: A design extends SDA fabric across buildings on a WAN with 1500-byte MTU and assumes local campus performance will continue unchanged. The relevant control here is: Update summary ownership and ensure discarded or absent specifics cannot mask the retired destination.
Question 87
A data-center team assigns the same loopback IPv4 address to two route reflectors for convenience but also uses it as unique BGP router identifiers. Which design change most directly addresses the stated requirement?
- Set consistent IS-IS link metrics reflecting intended primary and backup capacity and verify resulting shortest paths.
- Use a legitimately allocated private or global prefix at the remote site and reserve IPv4 link-local for local-only communication.
- Give each route reflector a stable unique loopback/router ID and advertise reachability through the IGP.
- Plan the EIGRP successor and feasible-successor relationship using composite metric and feasibility checks.
Explanation
Correct Answer
C:The design is validated when both reflectors establish independent sessions and logs identify each peer without duplicate router IDs.
Incorrect Answers
A:That option concerns a separate design case: A network uses IS-IS with dual distribution routers and wants predictable traffic away from a low-bandwidth backup path. The relevant control here is: Give each route reflector a stable unique loopback/router ID and advertise reachability through the IGP.
B:That option concerns a separate design case: A remote office assigns clients addresses from 169.254.0.0/16 and expects them to be reachable through a routed WAN. The relevant control here is: Give each route reflector a stable unique loopback/router ID and advertise reachability through the IGP.
D:That option concerns a separate design case: A router receives two EIGRP routes for a prefix with different metrics and the design team wants deterministic failover. The relevant control here is: Give each route reflector a stable unique loopback/router ID and advertise reachability through the IGP.
Question 88
A guest wireless SSID creates burst traffic exceeding its contracted share and disrupts campus applications. Which design change most directly addresses the stated requirement?
- Police untrusted guest ingress traffic to an appropriate rate and violation action at the policy boundary.
- Engineer a policer with an appropriate burst tolerance and separate real-time queue protection.
- Constrain route leaking to the precise management service endpoints and permitted directions.
- Segment management-plane access by role/tenant and enforce ACLs and authentication at the boundaries.
Explanation
Correct Answer
A:The design is validated when guest over-limit traffic is dropped or remarked as specified while protected applications maintain quality.
Incorrect Answers
B:That option concerns a separate design case: An enterprise edge allows a contracted 50-Mbps guest rate but users report voice degradation during microbursts despite the average staying under 50 Mbps. The relevant control here is: Police untrusted guest ingress traffic to an appropriate rate and violation action at the policy boundary.
C:That option concerns a separate design case: A campus firewall isolates management VRFs but its shared-services route leaking exports all loopbacks to the guest VRF. The relevant control here is: Police untrusted guest ingress traffic to an appropriate rate and violation action at the policy boundary.
D:That option concerns a separate design case: Two business units share one management VLAN with unrestricted access to each other's routers. The relevant control here is: Police untrusted guest ingress traffic to an appropriate rate and violation action at the policy boundary.
Question 89
An enterprise replaces a point-to-point GRE tunnel with raw IPsec ESP and expects dynamic multicast routing hellos to work unchanged. Which design change most directly addresses the stated requirement?
- Evaluate DWDM wavelength services with optics, reach, dispersion and protection appropriate to the fiber plant.
- Plan underlay/overlay MTU and MSS handling for encapsulation overhead across the WAN path.
- Use a provider Layer 2 service with customer-controlled Layer 3 adjacencies and monitoring.
- Select a tunnel mechanism or supported IPsec profile that carries required multicast/routing traffic.
Explanation
Correct Answer
D:The design is validated when routed adjacency and encapsulated application flows operate through the secure tunnel.
Incorrect Answers
A:That option concerns a separate design case: Several data centers need high-capacity optical transport over metropolitan dark fiber without converting each tenant VLAN to an IP tunnel. The relevant control here is: Select a tunnel mechanism or supported IPsec profile that carries required multicast/routing traffic.
B:That option concerns a separate design case: A branch uses IPsec overlay on broadband with 1400-byte effective MTU, but an application sends 1500-byte DF-set packets and stalls. The relevant control here is: Select a tunnel mechanism or supported IPsec profile that carries required multicast/routing traffic.
C:That option concerns a separate design case: A financial organization leases a transparent point-to-point Ethernet service but requires independent routing at each site. The relevant control here is: Select a tunnel mechanism or supported IPsec profile that carries required multicast/routing traffic.
Question 90
A multicampus network has two equal-cost paths but the design assumes packets always alternate evenly across every individual packet. Which design change most directly addresses the stated requirement?
- Evaluate supported multisite design with MTU, latency, encapsulation, and control-plane reachability constraints.
- Build point-to-point routed access uplinks and use ECMP-capable IGP convergence at the access layer.
- Plan ECMP based on actual per-flow hashing and application sensitivity rather than guaranteed per-packet load balance.
- Distinguish endpoint mapping/control distribution from VXLAN-encapsulated user-data forwarding.
Explanation
Correct Answer
C:The design is validated when representative flows distribute across eligible next hops while a single ordered flow remains stable.
Incorrect Answers
A:That option concerns a separate design case: A design extends SDA fabric across buildings on a WAN with 1500-byte MTU and assumes local campus performance will continue unchanged. The relevant control here is: Plan ECMP based on actual per-flow hashing and application sensitivity rather than guaranteed per-packet load balance.
B:That option concerns a separate design case: A routed-access campus needs equal-cost forwarding to two distribution routers while keeping each VLAN local to one wiring closet. The relevant control here is: Plan ECMP based on actual per-flow hashing and application sensitivity rather than guaranteed per-packet load balance.
D:That option concerns a separate design case: An SD-Access architect assumes the fabric's LISP control plane transports all user packets like a data-plane tunnel. The relevant control here is: Plan ECMP based on actual per-flow hashing and application sensitivity rather than guaranteed per-packet load balance.
Designing Cisco Enterprise Networks (ENSLD) (300-420) Practice Tests