Free 300-420 Exam Dumps Preview

A company's security policy requires that all connections between sites be encrypted in a manner that does not require maintenance of permanent tunnels. The sites are connected through a private MPLS-based service that uses a dynamically changing key and spoke-to-spoke communication.

Which type of transport encryption must be used in this environment?

Refer to the exhibit.

Due to budget constraints, a customer decided to purchase WAN routers with one LAN and one WAN interface per device. There is a requirement to connect the three sites to ensure high availability without
buying additional WAN links.

Which design deployment must the customer choose?

When a first hop redundancy solution is designed, which protocol ensures that load balancing occurs over multiple routers using a single virtual IP address and multiple virtual MAC addresses?

Which two statements are true regarding Cisco ISE? (Choose two.)

An engineer is designing a PIM Anycast RP solution between two data centers. The design must ensure that RP1 in DC1 and RP2 in DC2 inform each other about specific sources that have joined locally.

Which solution must the engineer choose?

A company's branch location uses redundant routers and links for connectivity to the headquarters. Also, to use the entire available bandwidth, the branch uses a dynamic routing protocol. An architect must design a multicast streaming solution to avoid RPF check failures because of the current network design.

Which deployment model must the architect choose?

Which option will help build your customers platform during the discovery phase?

Refer to the exhibit. The distribution switches serve as the layer 3 boundary. HSRP preemption is enabled.
When the primary switch comes back after a failure, traffic is initially dropped.

Which solution must be implemented to improve the design?

Which is a benefit of a cloud-based SD-WAN deployment?

Refer to the exhibit.

An engineer is designing an OSPF solution with these requirements:

1. NMS server will manage R5 and R6.
2. Upon failure of R1, all NMS traffic should be routed through R4.
3. Upon failure of the link between R5 and R6, all traffic destined for 10.6.6.6 should be routed through R4.

Which solution must the engineer choose?

Refer to the exhibit.

A network engineer is designing an OSPF solution to connect a company's remote to a newly provisioned MPLS VPN backbone. Some of the branches have a direct dark fiber connection between each other. The engineer wants to ensure that the dark fibers are used only when the MPLS core is unavailable.

Which solution must the engineer choose?

A global organization with several branches hired a network architect to design an overlay VPN solution.
The branches communicate with each other frequently. The customer expects to add more branches in the future. To meet the customer's security requirements, the architect plans to provide traffic protection using dynamic IPsec tunnels.

Which solution should the architect choose?

Which routes does the overlay management protocol advertise in an SD-WAN overlay?

Refer to the exhibit.

A customer is planning to onboard three new VPN partner connections in the data center. The new subnets must not overlap with the existing data center network, and the subnet size must not be bigger than necessary. The customer dedicated 10.1.8.0/21 for this design.

How must the subnets be divided to meet these requirements?

In a Cisco SD-Access fabric, which node facilities connectivity between the fabric and networks external to the fabric?

How would Cisco ISE handle authentication for your printer that does not have a supplicant?

A company requested that an architect propose a new IPv4 and IPv6 deployment strategy. The company wants a solution that is straightforward, with no information hiding or forwarding overhead.

Which solution meets these requirements?

Which feature is supported on the Cisco vEdge platform?

Refer to the exhibit.

An architect is designing a routing solution for a company. The new design will add a circuit routers C and D to protect against loss of connectivity to 10.0.4.0/24 during a link failure between routers B and D.

Which solution must the architect choose?

A customer has several remote sites connected with their headquarters through microwave links. An engineer must propose a backup WAN solution based on these conditions:

1. A physical WAN solution is not available for most of the sites.
2. The customer has a limited budget and a short time frame for implementation.
3. The backup link will have low bandwidth requirements.
4. Users will tolerate a WAN outage of up to 2 hours.

Which backup WAN link type should the engineer recommend?

Refer to the exhibit.

Currently the network uses a single-homed solution for connecting to the internet. An engineer must design a more resilient WAN using the internet circuits at each site. The design must provide failover connectivity, support load-sharing of traffic, and QoS.

Which solution must the engineer choose?

DRAG DROP

Drag and drop the characteristics from the left onto the telemetry mode they apply to on the right.

How does a model-driven telemetry dial-out approach function?

A customer requests a VPN solution to connect multiple sites with the company headquarters. All the sites use the same IP subnet. The engineer plans to use VPLS.

Which solutions must the engineer include in the design?

Which function do reverse path forwarding mechanisms perform in a multicast deployment?

Which function are fabric intermediate nodes responsible for in an SD-Access Architecture?

Which security functionality does gRPC provide?

Refer to the exhibit.

An engineer must ensure that the QoS design guarantees bandwidth for the applications, and an application can request a particular type of service to support its delay requirements.

Which solution must the engineer select?

Refer to the exhibit.

A customer is planning to deploy a new branch in New York. The new office will not exceed 1024 users.

Which subnet must be used to provide maximum number of host addresses while not providing more than necessary?

In the SD-WAN underlay network, which WAN Edge VPN ID is defined as the transport VPN and is used to carry control traffic?

Refer to the exhibit. An architect working for a service provider with an employee ID: 4763:44:876 must design a Layer 2 VPN solution that supports:

transparency of service provider devices

direct communication between CE routers attached to the same VLAN

Which solution must the design include?

DRAG DROP

Drag and drop the descriptions from the left onto the Cisco SD-WAN component they describe on the right.

Refer to the exhibit.

A network engineer must improve the current IS-IS environment. The Catalyst switch is equipped with dual supervisors. Each time a stateful switchover occurs, the network experiences unnecessary route recomputation.

Which solution addresses this issue if the upstream router does not understand graceful restart messaging?

A customer is discussing QoS requirements with a network consultant. The customer has specified that endto-end path verification is a requirement.

Which QoS solution meets this requirement?

A network engineer must connect two sites across a public network using a secure tunneling technology that supports multicast traffic.

Which technology must be chosen?

Refer to the exhibit.

A network engineer with an employee ID: 4384:99:754 must design a BGP solution based on these conditions:

1. Traffic sessions occur between the branches and the data center.
2. Branch B has limited resources to process routing updates.
3. HQ must filter out all prefixes from branch A to R4.

Which outbound route filtering (ORF) solution must the engineer choose?

When differentiating between IETF, OpenConfig, and Cisco native YANG models, how does the use of containers differ?

Refer to the exhibit. An architect must ensure a convergence time of 200 ms or less during a link failure within area 0. In addition, the solution must not impact the overall performance of the network.

Which solution must the architect select?

An architect must design a QoS model for a business-critical application that is delay-sensitive and requires high bandwidth. The company's head office hosts the application, and DMVPN tunnels protected with IPsec provide connectivity between the head office and branches.

Which solution must the architect choose?

Which feature is used to optimize WAN bandwidth of IGMP network traffic among WAN Edge routers in the same VPN?

An architect must create a QoS solution for a customer to ensure that a 40 Mbps Internet connection is shared between four subnets based on these requirements:

1. Each subnet must receive no less than 10 Mbps of download bandwidth during peak traffic times.
2. A subnet can use up to 40 Mbps during nonpeak traffic times if the other subnets are idle.
3. Download traffic must never experience a delay.

Which solution must the architect choose?

An engineer needs a standards-driven YANG model to manage a multivendor network environment.

Which model should the engineer choose?

A network engineer is redesigning a company's QoS solution. The company is currently using IP Precedence, but the engineer plans to move to DiffServ. It is important that the new solution provide backward compatibility with the current solution.

Which technology should the design include?

A company is running BGP on a single router, which has two connections to the same ISP.

Which BGP feature ensures traffic is load balanced across the two links to the ISP?

DRAG DROP

Drag and drop the descriptions from the left onto the corresponding VPN types on the right.

A company wants to deploy IPv6 within its existing network infrastructure. All current infrastructure equipment supports IPv6, and the company wants a migration strategy that must not require purchasing additional equipment. The plan must keep operational management costs low, support IPv6 multicast, and allow applications to migrate using DNS.

Which strategy must the company choose?

Refer to the exhibit.

An architect is developing a solution to consolidate networks while retaining device redundancy. The routing protocol for the WAN routers must be open standard, ensure high availability, and provide the fastest convergence time.

Which solution must the design include?

An existing network solution is using BFD in echo mode. Several of the network devices are experiencing high CPU utilization which an engineer has determined is related to the BFD feature.

Which solution should the engineer leverage to reduce the CPU load?

A network solution is being designed for a company that connects to multiple Internet service providers.

Which Cisco proprietary BGP path attribute will influence outbound traffic flow?

Which three options focus of the current digital business era? (Choose three.)

What is the purpose of the fabric management plane in a Cisco SD-Access architecture?

An engineer is designing a networking solution to allow two hosts to communicate--one host located within the company A network and the other within the company B network. The two companies have no other plans for future additional connections. Both companies want to use a single secure and encrypted internet connection, and the configuration must be as simple as possible.

Which network solution must the engineer choose?

A large chain of stores currently uses MPLS-based T1 lines to connect their stores to their data center. An architect must design a new solution to improve availability and reduce costs while keeping these considerations in mind:

1. The company uses multicast to deliver training to the stores.
2. The company uses dynamic routing protocols and has implemented QoS.
3. To simplify deployments, tunnels should be created dynamically on the hub when additional stores open.

Which solution should be included in this design?

Which feature must be incorporated into the campus LAN design to enable Wake on LAN?

Which component is part of the Cisco SD-Access overlay architecture?

Refer to the exhibit. An engineer must design an automatic failover solution. The solution should allow HSRP to detect a WAN 1 failure and initiate an automatic failover, making router R2 the active HSRP router.

Which two solutions should the engineer choose? (Choose two.)

DRAG DROP

Drag and drop the steps WAN Edge performs when on-boarded into the Cisco SD-WAN overlay from the left into the order they are completed on the right.

DRAG DROP

Drag and drop the description from the left onto the corresponding WAN connectivity types and categories on the right.

Refer to the exhibit.

An engineer is designing a Layer 2 campus network. The design must support fast convergence and
leverage as much bandwidth as possible between layers. Distribution switches do support VSS;
unfortunately, not all routing protocols are available for use due to license limitations.

Which solution must the engineer choose?

When IPsec VPNs are designed, what is a unique requirement if support for IP Multicast is required?