100% Latest & Updated Cisco 300-420 Practice Test Questions, Exam Dumps & Verified Answers!
30 Days Free Updates, Instant Download!
Question 980
A wireless access-point refresh increases PoE needs above the available 802.3at class on older switches. Choose THREE statements that form the design action, direct verification, and deployment safeguard. (Choose THREE.)
- Compare model-specific power requirements with cable loss and redundant supply capacity.
- Validate WLC and AP fabric roles against platform support and target mobility scope.
- Design supported fabric wireless segmentation with dedicated VNs/SGTs and appropriate wireless control integration.
- Each AP enables its intended radio features at full load without power denial or downshift.
- Specify access switch PoE capabilities and power budget that support the APs' required negotiated power levels.
- Guest clients roam as designed and cannot access restricted enterprise segments.
Explanation
Correct Answers
A:Compare model-specific power requirements with cable loss and redundant supply capacity. This applies directly to the reported network-design requirement.
D:Each AP enables its intended radio features at full load without power denial or downshift. This is the observable acceptance check for the change.
E:Specify access switch PoE capabilities and power budget that support the APs' required negotiated power levels. This is the corrective design for the stated topology.
Incorrect Answers
B:This offered choice, “Validate WLC and AP fabric roles against platform support and target mobility scope”, addresses a separate concern. This statement relates to a different requirement: A fabric site needs a guest wireless SSID without extending the guest Layer 2 domain across the whole enterprise. It does not address the condition described here.
C:This offered choice, “Design supported fabric wireless segmentation with dedicated VNs/SGTs and appropriate wireless control integration”, addresses a separate concern. This statement relates to a different requirement: A fabric site needs a guest wireless SSID without extending the guest Layer 2 domain across the whole enterprise. It does not address the condition described here.
F:This offered choice, “Guest clients roam as designed and cannot access restricted enterprise segments”, addresses a separate concern. This statement relates to a different requirement: A fabric site needs a guest wireless SSID without extending the guest Layer 2 domain across the whole enterprise. It does not address the condition described here.
Question 981
A partner BGP session accidentally advertises a sensitive 10.0.0.0/8 internal route to an external ASN. Select TWO statements that together define the best corrective design and its acceptance evidence. (Choose TWO.)
- Remove or constrain the summary when it attracts traffic to networks not reachable through the campus boundary.
- Peer-received advertisements exclude the protected prefix while approved public routes remain.
- Apply a scoped outbound prefix filter that blocks private/internal routes from the external BGP adjacency.
- Branch routers no longer send packets for the retired /24 into a blackhole created by the former summary.
- Enable and validate supported BGP multipath features subject to equal-path eligibility requirements.
Explanation
Correct Answers
B:Peer-received advertisements exclude the protected prefix while approved public routes remain. This is the observable acceptance check for the change.
C:Apply a scoped outbound prefix filter that blocks private/internal routes from the external BGP adjacency. This applies directly to the reported network-design requirement.
Incorrect Answers
A:This offered choice, “Remove or constrain the summary when it attracts traffic to networks not reachable through the campus boundary”, addresses a separate concern. That answer belongs to this other scenario: A campus advertises a /18 summary into the WAN but has no route for one constituent /24 after a building is decommissioned. It does not establish the necessary change in this case.
D:This offered choice, “Branch routers no longer send packets for the retired /24 into a blackhole created by the former summary”, addresses a separate concern. That answer belongs to this other scenario: A campus advertises a /18 summary into the WAN but has no route for one constituent /24 after a building is decommissioned. It does not establish the necessary change in this case.
E:This offered choice, “Enable and validate supported BGP multipath features subject to equal-path eligibility requirements”, addresses a separate concern. That answer belongs to this other scenario: A campus border is configured with two equal-cost external BGP paths but only one is installed for traffic forwarding. It does not establish the necessary change in this case.
Question 982
A routing telemetry client assumes every operational counter supports on-change updates and receives no updates on one platform. Choose THREE statements that form the design action, direct verification, and deployment safeguard. (Choose THREE.)
- Subscribe only to required model paths with appropriate update mode and cadence.
- Baseline byte rates, memory and packet loss before enabling subscriptions on all devices.
- The receiver obtains the expected measurement updates for every required signal.
- Select subscription modes according to the actual leaf and device support, using periodic for counters when necessary.
- The collector receives actionable measurements without saturating management transport or device CPU.
- Query capability/model support and document fallback sampling per platform.
Explanation
Correct Answers
C:The receiver obtains the expected measurement updates for every required signal. This is the observable acceptance check for the change.
D:Select subscription modes according to the actual leaf and device support, using periodic for counters when necessary. This is the corrective design for the stated topology.
F:Query capability/model support and document fallback sampling per platform. This applies directly to the reported network-design requirement.
Incorrect Answers
A:This offered choice, “Subscribe only to required model paths with appropriate update mode and cadence”, addresses a separate concern. This statement relates to a different requirement: A fleet telemetry design streams all available operational leaves every second over a constrained management link. It does not address the condition described here.
B:This offered choice, “Baseline byte rates, memory and packet loss before enabling subscriptions on all devices”, addresses a separate concern. This statement relates to a different requirement: A fleet telemetry design streams all available operational leaves every second over a constrained management link. It does not address the condition described here.
E:This offered choice, “The collector receives actionable measurements without saturating management transport or device CPU”, addresses a separate concern. This statement relates to a different requirement: A fleet telemetry design streams all available operational leaves every second over a constrained management link. It does not address the condition described here.
Question 983
A WAN team assumes DWDM wavelength multiplexing itself supplies packet-level route isolation between tenants. Select TWO statements that together define the best corrective design and its acceptance evidence. (Choose TWO.)
- Separate optical multiplexing requirements from routing or Ethernet tenant segmentation carried over the wavelengths.
- Services over the optical circuit remain isolated by the appropriate higher-layer controls.
- Existing permitted edge-to-edge tunnels continue carrying traffic across a management-plane interruption where supported.
- Select an appropriate private APN, outbound-initiated overlay, or routable-address service depending on carrier capabilities.
- Design control/management resilience separately from WAN edge data-plane forwarding.
Explanation
Correct Answers
A:Separate optical multiplexing requirements from routing or Ethernet tenant segmentation carried over the wavelengths. This applies directly to the reported network-design requirement.
B:Services over the optical circuit remain isolated by the appropriate higher-layer controls. This is the observable acceptance check for the change.
Incorrect Answers
C:This offered choice, “Existing permitted edge-to-edge tunnels continue carrying traffic across a management-plane interruption where supported”, addresses a separate concern. That answer belongs to this other scenario: A multisite SD-WAN deployment uses one manager for configuration and assumes manager reachability is necessary for every packet of user data. It does not establish the necessary change in this case.
D:This offered choice, “Select an appropriate private APN, outbound-initiated overlay, or routable-address service depending on carrier capabilities”, addresses a separate concern. That answer belongs to this other scenario: An industrial site uses 4G LTE as primary WAN, and its routing team assumes public inbound addresses remain reachable through carrier-grade NAT. It does not establish the necessary change in this case.
E:This offered choice, “Design control/management resilience separately from WAN edge data-plane forwarding”, addresses a separate concern. That answer belongs to this other scenario: A multisite SD-WAN deployment uses one manager for configuration and assumes manager reachability is necessary for every packet of user data. It does not establish the necessary change in this case.
Question 984
A campus uses DSCP EF for voice signaling, voice media, and backup traffic, causing priority queue overload. Choose THREE statements that form the design action, direct verification, and deployment safeguard. (Choose THREE.)
- Separate delay-critical voice priority from video classes with appropriate bounded queuing and bandwidth guarantees.
- Audit markings at endpoint, access and WAN boundaries before rewriting application policies.
- Size the priority class and verify congestion behavior with realistic mixes.
- Combine trusted traffic classification and marking with a suitable egress priority queue and bandwidth admission design.
- Classify traffic by actual application need and reserve EF treatment for suitable expedited traffic.
- Priority queuing protects genuine voice media while backup traffic no longer occupies the strict-priority class.
Explanation
Correct Answers
B:Audit markings at endpoint, access and WAN boundaries before rewriting application policies. This applies directly to the reported network-design requirement.
E:Classify traffic by actual application need and reserve EF treatment for suitable expedited traffic. This is the corrective design for the stated topology.
F:Priority queuing protects genuine voice media while backup traffic no longer occupies the strict-priority class. This is the observable acceptance check for the change.
Incorrect Answers
A:This offered choice, “Separate delay-critical voice priority from video classes with appropriate bounded queuing and bandwidth guarantees”, addresses a separate concern. This statement relates to a different requirement: Video and voice both use one strict-priority queue, causing voice jitter when video surges. It does not address the condition described here.
C:This offered choice, “Size the priority class and verify congestion behavior with realistic mixes”, addresses a separate concern. This statement relates to a different requirement: Video and voice both use one strict-priority queue, causing voice jitter when video surges. It does not address the condition described here.
D:This offered choice, “Combine trusted traffic classification and marking with a suitable egress priority queue and bandwidth admission design”, addresses a separate concern. That option relates to this separate design case: A regional WAN prioritizes voice using a DiffServ marking but provides no scheduler preference on its congested egress link. It does not answer the current requirement.
Question 985
Two campus VRRP gateways both claim master after their shared advertisement path is partitioned, and clients receive inconsistent ARP responses. Select TWO statements that together define the best corrective design and its acceptance evidence. (Choose TWO.)
- Correct VRRP group identity, priorities, advertisement reachability, and L2 path consistency.
- Exactly one intended master serves the virtual gateway in stable conditions and transitions during failure.
- Add supported object or route tracking so upstream reachability can influence HSRP active gateway selection.
- Probes to live destinations follow correct routes while the decommissioned /24 is no longer misdirected.
- Select supported redundancy mechanisms that separately address link failure and control-plane maintenance transitions.
Explanation
Correct Answers
A:Correct VRRP group identity, priorities, advertisement reachability, and L2 path consistency. This applies directly to the reported network-design requirement.
B:Exactly one intended master serves the virtual gateway in stable conditions and transitions during failure. This is the observable acceptance check for the change.
Incorrect Answers
C:That answer belongs to this other scenario: HSRP gateways remain reachable locally after their active router loses the only routed upstream uplink. It does not establish the necessary change in this case.
D:That answer belongs to this other scenario: A site cutover retains a withdrawn /24 under an unchanged /20 campus summary and traffic follows an obsolete transit path. It does not establish the necessary change in this case.
E:That answer belongs to this other scenario: A new campus design requires maintaining service during both one uplink failure and one planned software upgrade. It does not establish the necessary change in this case.
Question 986
An EIGRP core has routes stuck active after one WAN path fails and queries spread into many remote sites. Choose THREE statements that form the design action, direct verification, and deployment safeguard. (Choose THREE.)
- Failed-route convergence completes without broad stuck-in-active propagation.
- Apply EIGRP summarization, stub boundaries, and reliable connectivity to limit query scope.
- Review route reachability and summary boundaries before introducing stub behavior.
- Hubs avoid querying through the branch as a transit path and branch-local prefixes remain visible.
- Configure an appropriate EIGRP stub design on the branch while allowing its locally connected routes to reach the hubs.
- Validate advertised stub route classes and redundancy if the branch has multiple uplinks.
Explanation
Correct Answers
A:Failed-route convergence completes without broad stuck-in-active propagation. This is the observable acceptance check for the change.
B:Apply EIGRP summarization, stub boundaries, and reliable connectivity to limit query scope. This is the corrective design for the stated topology.
C:Review route reachability and summary boundaries before introducing stub behavior. This applies directly to the reported network-design requirement.
Incorrect Answers
D:This offered choice, “Hubs avoid querying through the branch as a transit path and branch-local prefixes remain visible”, addresses a separate concern. This statement relates to a different requirement: A branch EIGRP router advertises remote routes back into its hub and occasionally becomes a transit path between hubs. It does not address the condition described here.
E:This offered choice, “Configure an appropriate EIGRP stub design on the branch while allowing its locally connected routes to reach the hubs”, addresses a separate concern. This statement relates to a different requirement: A branch EIGRP router advertises remote routes back into its hub and occasionally becomes a transit path between hubs. It does not address the condition described here.
F:This offered choice, “Validate advertised stub route classes and redundancy if the branch has multiple uplinks”, addresses a separate concern. This statement relates to a different requirement: A branch EIGRP router advertises remote routes back into its hub and occasionally becomes a transit path between hubs. It does not address the condition described here.
Question 987
An NSF-capable router pair loses a control-plane process briefly and the design assumes all neighboring routers will preserve forwarding. Select TWO statements that together define the best corrective design and its acceptance evidence. (Choose TWO.)
- Neighbor relationships recover while supported forwarding state remains stable during the tested restart.
- Plan NSF graceful-restart interoperability with compatible neighbors and realistic convergence timeouts.
- Evaluate physical fault domains and provide independent power, links, and control-plane recovery within the chosen abstraction.
- Distinguish endpoint mapping/control distribution from VXLAN-encapsulated user-data forwarding.
- Control-plane endpoint mappings resolve and separate packet captures show VXLAN data forwarding between fabric edges.
Explanation
Correct Answers
A:Neighbor relationships recover while supported forwarding state remains stable during the tested restart. This is the observable acceptance check for the change.
B:Plan NSF graceful-restart interoperability with compatible neighbors and realistic convergence timeouts. This applies directly to the reported network-design requirement.
Incorrect Answers
C:This offered choice, “Evaluate physical fault domains and provide independent power, links, and control-plane recovery within the chosen abstraction”, addresses a separate concern. That answer belongs to this other scenario: A virtualized distribution pair uses one logical control plane and engineers assume it offers separate failure domains like two chassis in different buildings. It does not establish the necessary change in this case.
D:This offered choice, “Distinguish endpoint mapping/control distribution from VXLAN-encapsulated user-data forwarding”, addresses a separate concern. That answer belongs to this other scenario: An SD-Access architect assumes the fabric's LISP control plane transports all user packets like a data-plane tunnel. It does not establish the necessary change in this case.
E:This offered choice, “Control-plane endpoint mappings resolve and separate packet captures show VXLAN data forwarding between fabric edges”, addresses a separate concern. That answer belongs to this other scenario: An SD-Access architect assumes the fabric's LISP control plane transports all user packets like a data-plane tunnel. It does not establish the necessary change in this case.
Question 988
A PIM-SM domain has active receivers but no working rendezvous-point reachability for new source registration. Choose THREE statements that form the design action, direct verification, and deployment safeguard. (Choose THREE.)
- Verify correct Reverse Path Forwarding behavior and IGP unicast route alignment for multicast sources.
- New sources register and receiver joins build the intended multicast distribution tree.
- Packets arriving on incorrect RPF interfaces are rejected and legitimate receiver traffic passes.
- Design reliable RP placement or supported RP redundancy with consistent mapping.
- Test RP reachability, register and join behavior under single-node failure.
- Assess RP and MSDP scaling and supported migration alternatives before deployment.
Explanation
Correct Answers
B:New sources register and receiver joins build the intended multicast distribution tree. This is the observable acceptance check for the change.
D:Design reliable RP placement or supported RP redundancy with consistent mapping. This is the corrective design for the stated topology.
E:Test RP reachability, register and join behavior under single-node failure. This applies directly to the reported network-design requirement.
Incorrect Answers
A:This offered choice, “Verify correct Reverse Path Forwarding behavior and IGP unicast route alignment for multicast sources”, addresses a separate concern. This statement relates to a different requirement: A multicast source is reachable through an interface other than the one receiving the packet, but the router still forwards it to all receivers. It does not address the condition described here.
C:This offered choice, “Packets arriving on incorrect RPF interfaces are rejected and legitimate receiver traffic passes”, addresses a separate concern. This statement relates to a different requirement: A multicast source is reachable through an interface other than the one receiving the packet, but the router still forwards it to all receivers. It does not address the condition described here.
F:This statement relates to a different requirement: Two independent PIM-SM domains each use local rendezvous points but remote sources must be discovered across the domains. It does not address the condition described here.
Question 989
A new SD-WAN site has a single edge appliance and single underlay yet is approved as redundant because controllers run in different data centers. Select TWO statements that together define the best corrective design and its acceptance evidence. (Choose TWO.)
- Evaluate DWDM wavelength services with optics, reach, dispersion and protection appropriate to the fiber plant.
- Provide independent edge and transport paths when required; treat controller redundancy as a separate failure domain.
- Guest prefixes and traffic stay isolated from production routes and data tunnels.
- The site retains approved application reachability after losing one WAN edge or carrier path.
- Separate service VPNs/segments and apply centralized policy matching approved guest and corporate destinations.
Explanation
Correct Answers
B:Provide independent edge and transport paths when required; treat controller redundancy as a separate failure domain. This applies directly to the reported network-design requirement.
D:The site retains approved application reachability after losing one WAN edge or carrier path. This is the observable acceptance check for the change.
Incorrect Answers
A:That answer belongs to this other scenario: Several data centers need high-capacity optical transport over metropolitan dark fiber without converting each tenant VLAN to an IP tunnel. It does not establish the necessary change in this case.
C:This offered choice, “Guest prefixes and traffic stay isolated from production routes and data tunnels”, addresses a separate concern. That answer belongs to this other scenario: An SD-WAN fabric routes guest traffic into the production VPN because a new edge reused the corporate service VPN identifier. It does not establish the necessary change in this case.
E:This offered choice, “Separate service VPNs/segments and apply centralized policy matching approved guest and corporate destinations”, addresses a separate concern. That answer belongs to this other scenario: An SD-WAN fabric routes guest traffic into the production VPN because a new edge reused the corporate service VPN identifier. It does not establish the necessary change in this case.
Question 990
A campus design requires both distribution uplinks active but the chosen topology uses classic STP on all Layer 2 connections. Choose THREE statements that form the design action, direct verification, and deployment safeguard. (Choose THREE.)
- Review platform compatibility and perform a maintenance-window failover test before promising hitless service.
- Use a supported multi-chassis EtherChannel or routed-access design to make redundancy active without a spanning-tree loop.
- Validate LACP partner system IDs and split-brain protection for the chosen solution.
- Both paths carry approved traffic and a member failure has no broad STP reconvergence.
- Changes to one tenant's routes do not leak or alter the other's forwarding state.
- Design separate VRFs and policy boundaries aligned to each tenant's compliance constraints.
Explanation
Correct Answers
B:Use a supported multi-chassis EtherChannel or routed-access design to make redundancy active without a spanning-tree loop. This is the corrective design for the stated topology.
C:Validate LACP partner system IDs and split-brain protection for the chosen solution. This applies directly to the reported network-design requirement.
D:Both paths carry approved traffic and a member failure has no broad STP reconvergence. This is the observable acceptance check for the change.
Incorrect Answers
A:This offered choice, “Review platform compatibility and perform a maintenance-window failover test before promising hitless service”, addresses a separate concern. This statement relates to a different requirement: A remote campus uses two distribution switches and requires nonstop gateway access during a planned supervisor replacement. It does not address the condition described here.
E:This offered choice, “Changes to one tenant's routes do not leak or alter the other's forwarding state”, addresses a separate concern. This statement relates to a different requirement: A public safety campus requires independent operations from a corporate tenant even when both use the same distribution hardware. It does not address the condition described here.
F:This offered choice, “Design separate VRFs and policy boundaries aligned to each tenant's compliance constraints”, addresses a separate concern. This statement relates to a different requirement: A public safety campus requires independent operations from a corporate tenant even when both use the same distribution hardware. It does not address the condition described here.
Designing Cisco Enterprise Networks (ENSLD) (300-420) Practice Tests
