Latest Cisco 300-420 Exam questions and answers
RealVCE 300-420 Exam Practice Test Questions (Updated 348 Questions)
NEW QUESTION # 60
Which two border nodes are available in the Cisco SD-Access architecture? (Choose two.)
- A. anywhere border
- B. internal border
- C. extended border
- D. intermediate border
- E. edge border
Answer: A,B
Explanation:
There are 3 types of border nodes in SD-Access:
External. Default exit from fabric with no specific routes injection
Internal. Gateway only for a set of networks, such as shared services prefixes Anywhere. Combination of external and internal functionality
NEW QUESTION # 61 
Refer to the exhibit A customer wants to adopt a dynamic site-to-site VPN solution to secure communication for VoIP, video, and FTP traffic between the remote branches and the headquarters. The customer also wants the branches to communicate directly, thereby reducing traffic at the headquarters location. The solution must consider that the branch routers are limited in available memory. Which VPN solution meets these requirements?
- A. DMVPN Phase 1 Hub and Spoke design
- B. DMVPN Phase 2 Hub and Spoke design
- C. DMVPN Phase 3 Hub and Spoke design
- D. DMVPN Phase 3 Hierarchical design
Answer: C
NEW QUESTION # 62
Which OSPF area prevent LSA type 4, LSA type 5? (Choose two)
- A. Totally Not-So-Stubby Area
- B. Not-So-Stubby Area
- C. Stub Area
- D. Totally Stubby Area
Answer: C,D
Explanation:
Stub No Type 5 AS-external LSA allowed, accepts only 1,2,3 but no 4 totaly stubby No Type 3, 4 or 5 LSAs allowed except the default summary route NSS, accepts only 1,2 and route 0.0.0.0 NSSA No Type 5 AS-external LSAs allowed, but ABR converts type 7 to type 5. It accepts type 3 and 4 totaly NSSA No Type 3, 4 or 5 LSAs except the default summary route, but ABR converts type 7 to type 5.
NEW QUESTION # 63
Which two best practices must be followed when designing an out-of-band management network? (Choose two.)
- A. Ensure network isolation
- B. Enforce access control
- C. Facilitate network integration
- D. Ensure that the management network is a backup to the data network
- E. Back up data using the management network
Answer: A,B
Explanation:
Explanation
https://www.cisco.com/c/en/us/td/docs/solutions/Enterprise/Security/SAFE_RG/SAFE_rg/chap9.html
NEW QUESTION # 64
Refer to the exhibit. An engineer is designing a routing solution for a customer. The design must ensure that a failure of network 10.1.0.0/24, 10.1.2.0/24, 10.2.1.0/24, or 10.2.3.0/24 does not impact the core. It also requires fast convergence time during any link failover in the core or access networks.
Which solution must the engineer select?
- A. Enable summarization on routers A and C.
- B. Add aggregation layer between core and access networks.
- C. Enable graceful restart on routers A and C.
- D. Enable FRR for the connected networks of routers A and C.
Answer: D
NEW QUESTION # 65
An architect must create a QoS solution for a customer to ensure that a 40 Mbps Internet connection is shared between four subnets based on these requirements:
* Each subnet must receive no less than 10 Mbps of download bandwidth during peak traffic times.
* A subnet can use up to 40 Mbps during nonpeak traffic times if the other subnets are idle.
* Download traffic must never experience a delay.
Which solution must the architect choose?
- A. bandwidth percentage and policing
- B. bandwidth percentage and rate-limiting
- C. shaping and policing
- D. rate-limiting and shaping
Answer: A
Explanation:
"Download traffic must never experience a delay."
This means we shouldn't be using Shaping at any point (since that puts packets into a buffer and sends them out later on when congestion has been reduced) Also: "Rate-limiting" is a bigger term and under it we have 2 things: "Policing" and "Shaping"
NEW QUESTION # 66
Refer to the exhibit.
Refer to the exhibit. An engineer is designing a BGP solution for a client that peers with ISP1 for full Internet connectivity and with ISP2 for direct exchange of routes for several third parties. Which action, when implemented on the edge routers, enables the client network to reach the Internet through ISP1?
- A. Advertise a default route for downstream routers within the client network.
- B. Apply route filtering such that the client advertises only routes originated from its own AS.
- C. Apply the AS-path prepend feature for ISP2.
- D. Run an eBGP session within different VRFs for each ISP.
Answer: A
NEW QUESTION # 67
Drag and drop the characteristics from the left onto the Yang model they describe on the right.
Select and Place:
Answer:
Explanation:
NEW QUESTION # 68
An engineer must peer with an ISP for internet connectivity using BGP, initially, the engineer wants to receive only specific prefixes from the ISP and a default route. However, the solution must provide the flexibility to add prefixes in the future at short notice. The ISP has a two-week change process in place. Which route filtering solution must the engineer employ?
- A. Request only the required prefixes and default route be advertised from the ISO with whitelisted networks
- B. Request a full internet routing table and a default route from the ISP and configure inbound route filtering with a prefix list that permits the default route and required prefixes
- C. Request a limited internet routing table and a default route from the ISP and configure the BGP max-limit to 1 with an access list that permits only the specific internet prefixes and blocked networks
- D. Configure outbound route filtering on the enterprise and ISP so that the enterprise tell the ISP which prefixes are required
Answer: B
Explanation:
Any change on the prefix list, engineer only need to update the prefix list and restart the BGP peer to the ISP. soft-reconfiguration inbound could be used to reduce down time of reset BGP peer, but it require lots of memory and in this case, connection to ISP and tons of route learnt will not be appropriated.
NEW QUESTION # 69
A company uses cloud-based applications for voice and video calls, file sharing, content sharing, and messaging. During business hours, these applications randomly become slow and unresponsive. However, other applications work smoothly with the current applied QoS polices.
Which solution must the company choose to resolve the issue?
- A. Identify the port used by each application and apply a minimum bandwidth guarantee.
- B. Identify the applications and reserve the required bandwidth on the perimeter routers.
- C. Identify the applications with NBAR2 and allocate the required bandwidth accordingly.
- D. Identify the application ports, create groupings, and rate-limit the required bandwidth.
Answer: C
Explanation:
https://www.cisco.com/c/en/us/products/ios-nx-os-software/network-based-application- recognition-nbar/index.html
NEW QUESTION # 70
Which three options focus of the current digital business era? (Choose three.)
- A. connectivity
- B. centralized enterprise and web applications
- C. automation
- D. IoT scale
- E. Human scale
- F. virtualized services
Answer: C,D,F
NEW QUESTION # 71
Which Cisco product supports SD-Access and specifically built to address new challenges faced by enterprises?
- A. ISR 4221
- B. Catalyst 6807-XL w/ Sup6T and C6800 10G line cards
- C. Catalyst 9500
- D. ASR 1000-HX
- E. CSRv virtual router
- F. Nexus 7700 w/ Sup2E and M3 line cards
Answer: C
NEW QUESTION # 72
An engineer must design an addressing plan for a small business using a single /24 network. Each department must have its own subnet. Drag and drop the subnets from the left onto the departments requirements that they fulfill on the right. Not all options are used.
Answer:
Explanation:
NEW QUESTION # 73
A global organization with several branches hired a network architect to design an overlay VPN solution. The branches communicate with each other frequently. The customer expects to add more branches in the future. To meet the customer's security requirements, the architect plans to provide traffic protection using dynamic IPsec tunnels. Which solution should the architect choose?
- A. L2TP
- B. EasyVPN
- C. GETVPN
- D. DMVPN
Answer: D
NEW QUESTION # 74
How does a model-driven telemetry dial-out approach function?
- A. The collector Initiates a session to the device and gets the data of a previously defined subscription.
- B. The device initiates a session to the collector based on the subscription.
- C. The collector initiates a session to the device and subscribes to data to be streamed.
- D. The device initiates a session to the collector and negotiates a subscription.
Answer: D
NEW QUESTION # 75
Which feature is required for graceful restart to recover from a processor failure?
- A. Virtual Switch System
- B. Stateful Switchover
- C. Bidirectional Forwarding Detection
- D. Cisco Express Forwarding
Answer: B
Explanation:
https://archive.nanog.org/meetings/nanog42/presentations/Weissner_SSO.pdf The Stateful Switchover (SSO) feature works with Nonstop Forwarding (NSF) in Cisco software to minimize the amount of time a network is unavailable to its users following a switchover. The primary objective of SSO is to improve the availability of networks constructed with Cisco routers.
NEW QUESTION # 76
Which two routing protocols allow for unequal cost load balancing? (Choose two.)
- A. IS-IS
- B. RIPng
- C. OSPF
- D. EIGRP
- E. BGP
Answer: D,E
Explanation:
Section: Advanced Addressing and Routing Solutions
NEW QUESTION # 77
Refer to the exhibit.
A customer is running HSRP on the core routers. Over time the company has grown and requires more network capacity. In the current environment, some of the downstream interfaces are almost fully utilized, but others are not. Which solution improves the situation?
- A. Add more interfaces to R1 and R2.
- B. Enable RSTP on the downstream switches.
- C. Configure port channel toward downstream switches.
- D. Make router R2 active for half of the VLANs.
Answer: D
NEW QUESTION # 78
Refer to the exhibit. An architect is designing a BGP solution to connect a remote branch to a service provider. There are several prefixes within the branch that the company does not want to be advertised to the internet. Which solution should the architect use to accomplish this?
- A. Attach the No-Export community with the prefixes to exclude
- B. Use the BGP No-Advertise community for the prefixes to exclude.
- C. Set the BGP Internet community for all prefixes.
- D. Implement the NOPEER community.
Answer: A
Explanation:
When a No-Advertise community is attached to a route, the BGP speaker won't advertise the route to any internal or external BGP peers.
When a No-Export community is attached to a route, the router won't advertise the route to external peers--only to internal peers.
https://www.catchpoint.com/network-admin-guide/bgp-communities
NEW QUESTION # 79
Drag and drop the characteristics from the left onto the correct telemetry mode on the right.
Answer:
Explanation:
Reference:
https://www.cisco.com/c/en/us/td/docs/iosxr/asr9000/telemetry/b-telemetry-cg-asr9000-61x/b-telemetry-cgasr9000-
61x_chapter_010.html#id_36445
NEW QUESTION # 80
Which feature is required for graceful restart to recover from a processor failure?
- A. Cisco Express Forwarding
- B. Virtual Switch System
- C. Stateful Switchover
- D. Bidirectional Forwarding Detection
Answer: A
Explanation:
Section: Advanced Enterprise Campus Networks
NEW QUESTION # 81
Drag and drop the descriptions from the left onto the corresponding VPN types on the rights.
Answer:
Explanation:
NEW QUESTION # 82
How is redundancy achieved among Cisco vBond Orchestrators in a Cisco SD-WAN deployment?
- A. Cisco WAN Edge routers are configured with all Orchestrators using their IP addresses and priority.
- B. A single Cisco Orchestrator is deployed in each network.
- C. The closest Orchestrator to each Cisco WAN Edge router is selected.
- D. The IP addresses of all Orchestrators are mapped to a single DNS name.
Answer: D
Explanation:
https://www.cisco.com/c/dam/en/us/solutions/collateral/enterprise-networks/sd-wan/nb-06-cisco- sd-wan-ebook-cte-en.pdf page 25
NEW QUESTION # 83
An engineer is designing a PIM Anycast RP solution between two data centers. The design must ensure that RP1 in DC1 and RP2 in DC2 inform each other about specific sources that have joined locally. Which solution must the engineer choose?
- A. Enable MSDP between RPs using separate unique loopback interfaces
- B. No action is required because PIM registers from the source will, by default, reach each RP
- C. Enable MSDP between RPs using the configured Anycast RP address
- D. Provision the RPs on the same IP subnet and extend the subnet at Layer 2 between data centers
Answer: A
NEW QUESTION # 84 
Refer to the exhibit. A customer experienced an unexpected network outage when the link between R1 and R2 went down. An architect must design a solution to ensure network continuity in the event the link fails again.
Which solution should the design include?
- A. Make R3 an L1L2 router
- B. Make R31 an L1 router.
- C. Make R11 an L2 router.
- D. Make Area 0 L2-only
Answer: A
NEW QUESTION # 85
......
Cisco 300-420 (Designing Cisco Enterprise Networks) certification exam is a highly sought-after certification program that is designed to test the knowledge and skills of networking professionals in designing and implementing enterprise networks. Designing Cisco Enterprise Networks certification program is aimed at network architects, network engineers, and other IT professionals who are responsible for designing and implementing enterprise networks.
Pass Your Cisco Exam with 300-420 Exam Dumps: https://www.realvce.com/300-420_free-dumps.html
Pass 300-420 Exam Info and Free Practice Test: https://drive.google.com/open?id=10FhZYLPeyP3GAKUibAydDrtSWwr8T_-A