100% Latest & Updated Cisco 300-420 Practice Test Questions, Exam Dumps & Verified Answers!
30 Days Free Updates, Instant Download!
Question 970
A multicampus network has two equal-cost paths but the design assumes packets always alternate evenly across every individual packet. Choose THREE statements that form the design action, direct verification, and deployment safeguard. (Choose THREE.)
- Validate hash entropy and elephant-flow effects before sizing links.
- Representative flows distribute across eligible next hops while a single ordered flow remains stable.
- Evaluate supported multisite design with MTU, latency, encapsulation, and control-plane reachability constraints.
- Test the full supported transit profile rather than relying on basic IP ping success.
- Intercampus traffic follows authorized shortest feasible paths rather than unwanted data-center detours.
- Plan ECMP based on actual per-flow hashing and application sensitivity rather than guaranteed per-packet load balance.
Explanation
Correct Answers
A:Validate hash entropy and elephant-flow effects before sizing links. This applies directly to the reported network-design requirement.
B:Representative flows distribute across eligible next hops while a single ordered flow remains stable. This is the observable acceptance check for the change.
F:Plan ECMP based on actual per-flow hashing and application sensitivity rather than guaranteed per-packet load balance. This is the corrective design for the stated topology.
Incorrect Answers
C:This offered choice, “Evaluate supported multisite design with MTU, latency, encapsulation, and control-plane reachability constraints”, addresses a separate concern. This statement relates to a different requirement: A design extends SDA fabric across buildings on a WAN with 1500-byte MTU and assumes local campus performance will continue unchanged. It does not address the condition described here.
D:This offered choice, “Test the full supported transit profile rather than relying on basic IP ping success”, addresses a separate concern. This statement relates to a different requirement: A design extends SDA fabric across buildings on a WAN with 1500-byte MTU and assumes local campus performance will continue unchanged. It does not address the condition described here.
E:This statement relates to a different requirement: A branch aggregation point has both IS-IS and OSPF neighbors with multiple equal-cost exits; traffic unexpectedly hairpins through a data center. It does not address the condition described here.
Question 971
During a branch expansion, the address plan fills every usable subnet identifier and leaves no room for point-to-point links or future aggregation. Select TWO statements that together define the best corrective design and its acceptance evidence. (Choose TWO.)
- Filter or scope external default advertisements to the authorized EIGRP distribution boundaries.
- Evaluate a suitable NAT64/DNS64 or application-proxy boundary with supported protocol assumptions.
- The IPv6 client resolves and accesses the approved IPv4 service without adopting IPv4 on the client.
- New links and sites receive nonoverlapping prefixes without renumbering established regional summaries.
- Reserve infrastructure and growth ranges separately within a hierarchical IPv4 and IPv6 allocation plan.
Explanation
Correct Answers
D:New links and sites receive nonoverlapping prefixes without renumbering established regional summaries. This is the observable acceptance check for the change.
E:Reserve infrastructure and growth ranges separately within a hierarchical IPv4 and IPv6 allocation plan. This applies directly to the reported network-design requirement.
Incorrect Answers
A:That answer belongs to this other scenario: A branch engineer redistributes a static default route into EIGRP and advertises it to every site, overriding the intended hub defaults. It does not establish the necessary change in this case.
B:This offered choice, “Evaluate a suitable NAT64/DNS64 or application-proxy boundary with supported protocol assumptions”, addresses a separate concern. That answer belongs to this other scenario: A new IPv6-only client subnet must access a legacy IPv4-only web endpoint through an enterprise gateway. It does not establish the necessary change in this case.
C:This offered choice, “The IPv6 client resolves and accesses the approved IPv4 service without adopting IPv4 on the client”, addresses a separate concern. That answer belongs to this other scenario: A new IPv6-only client subnet must access a legacy IPv4-only web endpoint through an enterprise gateway. It does not establish the necessary change in this case.
Question 972
A hospital uses one leased WAN circuit for critical access, but its architecture report calls the site highly available because it has two LAN switches. Choose THREE statements that form the design action, direct verification, and deployment safeguard. (Choose THREE.)
- Inspect provider conduit, POP and edge-router fate sharing before crediting path diversity.
- The branch switches to the secondary circuit within the required service recovery interval.
- The branch reaches core services after failure of the original carrier handoff.
- Use supported failure detection/track or BFD mechanisms with explicit failover policy and reasonable timers.
- Verify per-VPN OMP routes, firewall rules and destination reachability during staging.
- Add genuinely diverse WAN transport and edge device options consistent with the recovery requirement.
Explanation
Correct Answers
A:Inspect provider conduit, POP and edge-router fate sharing before crediting path diversity. This applies directly to the reported network-design requirement.
C:The branch reaches core services after failure of the original carrier handoff. This is the observable acceptance check for the change.
F:Add genuinely diverse WAN transport and edge device options consistent with the recovery requirement. This is the corrective design for the stated topology.
Incorrect Answers
B:This offered choice, “The branch switches to the secondary circuit within the required service recovery interval”, addresses a separate concern. This statement relates to a different requirement: An enterprise's primary WAN circuit fails but BGP route withdrawal is delayed while the underlay interface remains up. It does not address the condition described here.
D:This offered choice, “Use supported failure detection/track or BFD mechanisms with explicit failover policy and reasonable timers”, addresses a separate concern. This statement relates to a different requirement: An enterprise's primary WAN circuit fails but BGP route withdrawal is delayed while the underlay interface remains up. It does not address the condition described here.
E:This offered choice, “Verify per-VPN OMP routes, firewall rules and destination reachability during staging”, addresses a separate concern. This statement relates to a different requirement: An SD-WAN fabric routes guest traffic into the production VPN because a new edge reused the corporate service VPN identifier. It does not address the condition described here.
Question 973
A fleet telemetry design streams all available operational leaves every second over a constrained management link. Select TWO statements that together define the best corrective design and its acceptance evidence. (Choose TWO.)
- The collector receives actionable measurements without saturating management transport or device CPU.
- Use appropriately sampled or on-change model-driven telemetry for the monitored signals, with a scalable receiver architecture.
- Select subscription modes according to the actual leaf and device support, using periodic for counters when necessary.
- Subscribe only to required model paths with appropriate update mode and cadence.
- The receiver obtains the expected measurement updates for every required signal.
Explanation
Correct Answers
A:The collector receives actionable measurements without saturating management transport or device CPU. This is the observable acceptance check for the change.
D:Subscribe only to required model paths with appropriate update mode and cadence. This applies directly to the reported network-design requirement.
Incorrect Answers
B:That answer belongs to this other scenario: An NOC polls every router with SNMP once every ten minutes and misses 30-second interface utilization spikes. It does not establish the necessary change in this case.
C:This offered choice, “Select subscription modes according to the actual leaf and device support, using periodic for counters when necessary”, addresses a separate concern. That answer belongs to this other scenario: A routing telemetry client assumes every operational counter supports on-change updates and receives no updates on one platform. It does not establish the necessary change in this case.
E:This offered choice, “The receiver obtains the expected measurement updates for every required signal”, addresses a separate concern. That answer belongs to this other scenario: A routing telemetry client assumes every operational counter supports on-change updates and receives no updates on one platform. It does not establish the necessary change in this case.
Question 974
A core router's production data plane fails, leaving SSH reachable only through the same failed core path. Choose THREE statements that form the design action, direct verification, and deployment safeguard. (Choose THREE.)
- Operators can reach device management after production routing is intentionally removed.
- Authorized emergency operators can administer devices when primary campus routing and AAA are down.
- Design OOB authentication and recovery with an approved bounded fallback independent of production paths.
- Test break-glass use and preserve security event audit after connectivity returns.
- Provide an independently reachable out-of-band management network and approved emergency access process.
- Secure the OOB path and verify its separate power and access transport.
Explanation
Correct Answers
A:Operators can reach device management after production routing is intentionally removed. This is the observable acceptance check for the change.
E:Provide an independently reachable out-of-band management network and approved emergency access process. This is the corrective design for the stated topology.
F:Secure the OOB path and verify its separate power and access transport. This applies directly to the reported network-design requirement.
Incorrect Answers
B:This offered choice, “Authorized emergency operators can administer devices when primary campus routing and AAA are down”, addresses a separate concern. This statement relates to a different requirement: A campus has out-of-band console servers but all consoles depend on the production AAA server reachable only over the failed production network. It does not address the condition described here.
C:This offered choice, “Design OOB authentication and recovery with an approved bounded fallback independent of production paths”, addresses a separate concern. This statement relates to a different requirement: A campus has out-of-band console servers but all consoles depend on the production AAA server reachable only over the failed production network. It does not address the condition described here.
D:This offered choice, “Test break-glass use and preserve security event audit after connectivity returns”, addresses a separate concern. This statement relates to a different requirement: A campus has out-of-band console servers but all consoles depend on the production AAA server reachable only over the failed production network. It does not address the condition described here.
Question 975
A campus border is configured with two equal-cost external BGP paths but only one is installed for traffic forwarding. Select TWO statements that together define the best corrective design and its acceptance evidence. (Choose TWO.)
- Apply a scoped outbound prefix filter that blocks private/internal routes from the external BGP adjacency.
- Both eligible next hops appear in the forwarding table and share representative flows.
- Traffic shares only across qualified routes and failed successors do not create a loop.
- Select feasible successors that meet EIGRP feasibility requirements and use variance only on eligible paths.
- Enable and validate supported BGP multipath features subject to equal-path eligibility requirements.
Explanation
Correct Answers
B:Both eligible next hops appear in the forwarding table and share representative flows. This is the observable acceptance check for the change.
E:Enable and validate supported BGP multipath features subject to equal-path eligibility requirements. This applies directly to the reported network-design requirement.
Incorrect Answers
A:That answer belongs to this other scenario: A partner BGP session accidentally advertises a sensitive 10.0.0.0/8 internal route to an external ASN. It does not establish the necessary change in this case.
C:This offered choice, “Traffic shares only across qualified routes and failed successors do not create a loop”, addresses a separate concern. That answer belongs to this other scenario: A designer proposes unequal-cost EIGRP load sharing for two paths whose topology prevents one path from meeting the feasibility condition. It does not establish the necessary change in this case.
D:This offered choice, “Select feasible successors that meet EIGRP feasibility requirements and use variance only on eligible paths”, addresses a separate concern. That answer belongs to this other scenario: A designer proposes unequal-cost EIGRP load sharing for two paths whose topology prevents one path from meeting the feasibility condition. It does not establish the necessary change in this case.
Question 976
A new MST campus region accidentally has a different VLAN-to-instance mapping on one distribution switch. Choose THREE statements that form the design action, direct verification, and deployment safeguard. (Choose THREE.)
- Design an appropriate first-hop redundancy protocol with a shared virtual gateway and verified uplink tracking.
- Switches participate in the expected common region and root placement is consistent per instance.
- Confirm multicast, wireless, and mobility requirements before retiring stretched VLANs.
- Clients retain gateway reachability after either distribution switch fails.
- Document the region digest and validate VLAN ownership on every participating device.
- Align MST region name, revision, and VLAN-to-instance mapping on intended peers.
Explanation
Correct Answers
B:Switches participate in the expected common region and root placement is consistent per instance. This is the observable acceptance check for the change.
E:Document the region digest and validate VLAN ownership on every participating device. This applies directly to the reported network-design requirement.
F:Align MST region name, revision, and VLAN-to-instance mapping on intended peers. This is the corrective design for the stated topology.
Incorrect Answers
A:This offered choice, “Design an appropriate first-hop redundancy protocol with a shared virtual gateway and verified uplink tracking”, addresses a separate concern. This statement relates to a different requirement: A building has two independent distribution switches but hosts use the physical IP of one switch as their default gateway. It does not address the condition described here.
C:This statement relates to a different requirement: A routed-access campus needs equal-cost forwarding to two distribution routers while keeping each VLAN local to one wiring closet. It does not address the condition described here.
D:This offered choice, “Clients retain gateway reachability after either distribution switch fails”, addresses a separate concern. This statement relates to a different requirement: A building has two independent distribution switches but hosts use the physical IP of one switch as their default gateway. It does not address the condition described here.
Question 977
A small branch must use both Internet and private MPLS, and engineers assume the two underlays cannot coexist on one SD-WAN edge. Select TWO statements that together define the best corrective design and its acceptance evidence. (Choose TWO.)
- Require physical route and carrier diversity, including demarcation and access-path audits.
- Evaluate an appropriately isolated L2VPN or pseudowire with defined loop, bandwidth and MTU constraints.
- The edge establishes intended tunnels over both transports and applications use their approved paths.
- Design distinct supported transport interfaces and TLOC colors with centralized path policy.
- A controlled failure of either carrier access route leaves required service operational on the independent path.
Explanation
Correct Answers
C:The edge establishes intended tunnels over both transports and applications use their approved paths. This is the observable acceptance check for the change.
D:Design distinct supported transport interfaces and TLOC colors with centralized path policy. This applies directly to the reported network-design requirement.
Incorrect Answers
A:This offered choice, “Require physical route and carrier diversity, including demarcation and access-path audits”, addresses a separate concern. That answer belongs to this other scenario: A bank contracts two MPLS providers but both fiber tails enter the building through the same conduit. It does not establish the necessary change in this case.
B:That answer belongs to this other scenario: Two industrial sites require transparent delivery of a small set of Ethernet services and reject routing between their private LANs. It does not establish the necessary change in this case.
E:This offered choice, “A controlled failure of either carrier access route leaves required service operational on the independent path”, addresses a separate concern. That answer belongs to this other scenario: A bank contracts two MPLS providers but both fiber tails enter the building through the same conduit. It does not establish the necessary change in this case.
Question 978
A multicast network has active PIM neighbors but one edge switch suppresses IGMP reports after an access-layer topology change. Choose THREE statements that form the design action, direct verification, and deployment safeguard. (Choose THREE.)
- Correct receiver membership handling and ensure snooping querier or routing interface behavior is consistent.
- Confirm IGMP snooping querier placement and membership timeouts before changing PIM topology.
- Receiver ports are present in membership tables and only eligible ports receive the stream.
- Map every potential bottleneck and avoid unnecessary policy complexity on uncongested links.
- Extend consistent class scheduling to each actual bottleneck along the end-to-end path.
- Delay-sensitive traffic receives scheduled treatment at both campus and WAN congestion points.
Explanation
Correct Answers
A:Correct receiver membership handling and ensure snooping querier or routing interface behavior is consistent. This is the corrective design for the stated topology.
B:Confirm IGMP snooping querier placement and membership timeouts before changing PIM topology. This applies directly to the reported network-design requirement.
C:Receiver ports are present in membership tables and only eligible ports receive the stream. This is the observable acceptance check for the change.
Incorrect Answers
D:This offered choice, “Map every potential bottleneck and avoid unnecessary policy complexity on uncongested links”, addresses a separate concern. This statement relates to a different requirement: A campus designs priority queues only on the access switch but ignores a congested upstream WAN edge. It does not address the condition described here.
E:This offered choice, “Extend consistent class scheduling to each actual bottleneck along the end-to-end path”, addresses a separate concern. This statement relates to a different requirement: A campus designs priority queues only on the access switch but ignores a congested upstream WAN edge. It does not address the condition described here.
F:This offered choice, “Delay-sensitive traffic receives scheduled treatment at both campus and WAN congestion points”, addresses a separate concern. This statement relates to a different requirement: A campus designs priority queues only on the access switch but ignores a congested upstream WAN edge. It does not address the condition described here.
Question 979
A designer proposes unequal-cost EIGRP load sharing for two paths whose topology prevents one path from meeting the feasibility condition. Select TWO statements that together define the best corrective design and its acceptance evidence. (Choose TWO.)
- Traffic shares only across qualified routes and failed successors do not create a loop.
- Enable and validate supported BGP multipath features subject to equal-path eligibility requirements.
- Configure an appropriate EIGRP stub design on the branch while allowing its locally connected routes to reach the hubs.
- Select feasible successors that meet EIGRP feasibility requirements and use variance only on eligible paths.
- Both eligible next hops appear in the forwarding table and share representative flows.
Explanation
Correct Answers
A:Traffic shares only across qualified routes and failed successors do not create a loop. This is the observable acceptance check for the change.
D:Select feasible successors that meet EIGRP feasibility requirements and use variance only on eligible paths. This applies directly to the reported network-design requirement.
Incorrect Answers
B:This offered choice, “Enable and validate supported BGP multipath features subject to equal-path eligibility requirements”, addresses a separate concern. That answer belongs to this other scenario: A campus border is configured with two equal-cost external BGP paths but only one is installed for traffic forwarding. It does not establish the necessary change in this case.
C:That answer belongs to this other scenario: A branch EIGRP router advertises remote routes back into its hub and occasionally becomes a transit path between hubs. It does not establish the necessary change in this case.
E:This offered choice, “Both eligible next hops appear in the forwarding table and share representative flows”, addresses a separate concern. That answer belongs to this other scenario: A campus border is configured with two equal-cost external BGP paths but only one is installed for traffic forwarding. It does not establish the necessary change in this case.
Question 980
A wireless access-point refresh increases PoE needs above the available 802.3at class on older switches. Choose THREE statements that form the design action, direct verification, and deployment safeguard. (Choose THREE.)
- Compare model-specific power requirements with cable loss and redundant supply capacity.
- Validate WLC and AP fabric roles against platform support and target mobility scope.
- Design supported fabric wireless segmentation with dedicated VNs/SGTs and appropriate wireless control integration.
- Each AP enables its intended radio features at full load without power denial or downshift.
- Specify access switch PoE capabilities and power budget that support the APs' required negotiated power levels.
- Guest clients roam as designed and cannot access restricted enterprise segments.
Explanation
Correct Answers
A:Compare model-specific power requirements with cable loss and redundant supply capacity. This applies directly to the reported network-design requirement.
D:Each AP enables its intended radio features at full load without power denial or downshift. This is the observable acceptance check for the change.
E:Specify access switch PoE capabilities and power budget that support the APs' required negotiated power levels. This is the corrective design for the stated topology.
Incorrect Answers
B:This offered choice, “Validate WLC and AP fabric roles against platform support and target mobility scope”, addresses a separate concern. This statement relates to a different requirement: A fabric site needs a guest wireless SSID without extending the guest Layer 2 domain across the whole enterprise. It does not address the condition described here.
C:This offered choice, “Design supported fabric wireless segmentation with dedicated VNs/SGTs and appropriate wireless control integration”, addresses a separate concern. This statement relates to a different requirement: A fabric site needs a guest wireless SSID without extending the guest Layer 2 domain across the whole enterprise. It does not address the condition described here.
F:This offered choice, “Guest clients roam as designed and cannot access restricted enterprise segments”, addresses a separate concern. This statement relates to a different requirement: A fabric site needs a guest wireless SSID without extending the guest Layer 2 domain across the whole enterprise. It does not address the condition described here.
Designing Cisco Enterprise Networks (ENSLD) (300-420) Practice Tests
