Cisco 300-320 Online Practice Questions and Exam Preparation

Cisco 300-320 Online Questions & Answers

• Question 401:

  Which virtualization technology uses Layer 3 BFD to detect network failure between Network devices?

  A. Cisco Fabric path
  B. VXLAN
  C. VSAN
  D. VLAN
  A. Cisco Fabric path

• Question 402:

  Out of band management. What is the best practice Cisco design?

  A. Data traffic should never pass or enter the management network
  B. In-band management as backup
  C. Enforce QoS
  D. Enable dynamic routing
  A. Data traffic should never pass or enter the management network

  ---

  https://www.cisco.com/c/en/us/td/docs/solutions/Enterprise/Security/SAFE_RG/SAFE_rg/chap9.html#wp1054521 An OOB management network should be deployed using the following best practices: Provide network isolation Enforce access control Prevent data traffic from transiting the management network

• Question 403:

  When an enterprise network is designed, which protocol provides redundancy for edge devices in the event of a first-hop failure?

  A. ICMP
  B. HSRP
  C. STP
  D. HTTP
  B. HSRP

• Question 404:

  When a Cisco ASA adaptive security appliance is configured for active/standby failover, which MAC address is used for the active unit?

  A. the MAC address of the primary unit
  B. the MAC address of the secondary unit
  C. the virtual MAC address
  D. the standby MAC address
  A. the MAC address of the primary unit

• Question 405:

  Which authentication framework is used in wireless networks and point-to-point connections?

  A. EAP
  B. L2TP
  C. TKIP
  D. PPP
  A. EAP

• Question 406:

  DRAG DROP

  Drag the characteristic on the left to the corresponding RP model on the right.

  Select and Place:

  

  

• Question 407:

  Which two types of authentication mechanisms can be used by VRRP for security? (Choose two.)

  A. SHA-1
  B. MD5
  C. SHA-256
  D. plaintext authentication
  E. PEAP
  B. MD5
  D. plaintext authentication

• Question 408:

  Source traffic is sent to a VIP on an SLB device, which in turn is routed to the destination server. Return traffic is policy-based routed back to the SLB. Which SLB design has been implemented?

  A. router mode
  B. inline bridge mode
  C. one-armed mode
  D. two-armed mode
  D. two-armed mode

• Question 409:

  Which three authentication services are supported by Cisco NAC Appliance? (Choose three.)

  A. RADIUS
  B. LDAP
  C. Kerberos
  D. TACACS+
  E. local
  F. SNMP
  A. RADIUS
  B. LDAP
  C. Kerberos

  ---

  Working with Existing Backend Authentication Servers When working with existing backend authentication servers, Cisco supports the following authentication protocol types:

  Kerberos

  RADIUS (Remote Authentication Dial-In User Service)

  Windows NT (NTLM Auth Server)

  LDAP (Lightweight Directory Access Protocol)

  https://www.cisco.com/c/en/us/td/docs/security/nac/appliance/configuration_guide/47/cam/ 47cam-book/m_auth.html

• Question 410:

  Refer to the exhibit. Which two features can enable high availability for first-hop Layer 3 redundancy? (Choose two.)

  

  A. VPC
  B. IGMP V2
  C. VRRP
  D. PIM
  E. HSRP
  C. VRRP
  E. HSRP