Cisco 300-320 Online Practice Questions and Exam Preparation

Cisco 300-320 Online Questions & Answers

• Question 561:

  Which Cisco NAC Appliance design is the most scalable in large Layer 2-to-distribution implementation?

  A. Layer 2 out-of-band
  B. Layer 2 in-band
  C. Layer 3 out-of-band
  D. Layer 3 in-band
  B. Layer 2 in-band

  ---

  https://www.safaribooksonline.com/library/view/foundation-learning-guide/9780132652933/ch08.html "Layer 2 In-Band Designs The Layer 2 in-band topology is the most common deployment option.

  [...]

  This is the most scalable design in large L2-to-distribution environments, because this design can be transparently implemented in the existing network supporting multiple access layer switches. It supports all network infrastructure

  equipment. The Cisco NAS supports per- user ACLs."

• Question 562:

  What 2 statements are correct when it comes to PIM-BIDIR.

  A. Used in many-to-many multicast implementations
  B. The IP-address from any interface in a router can be used as RP-address
  C. The RP address dont have to be an IP in the router
  D. Explicit join-messages are used to signal grp membership in PIM-BIDIR
  A. Used in many-to-many multicast implementations
  B. The IP-address from any interface in a router can be used as RP-address

• Question 563:

  What are two methods of ensuring that the multicast RPF check passes without changing the unicast routing table? (Choose two.)

  A. disabling the interface of the router back to the multicast source
  B. disabling BGP routing protocol
  C. implementing MBGP
  D. implementing OSPF routing protocol
  E. implementing static mroutes
  A. disabling the interface of the router back to the multicast source
  E. implementing static mroutes

• Question 564:

  Which option is a recommended firewall topology?

  A. using two firewalls with stateful failover switched mode
  B. using one firewall with NAT enabled in transparent mode
  C. using two firewalls in active/active mode
  D. using one firewall with stateful failover enabled in routed mode
  C. using two firewalls in active/active mode

• Question 565:

  The network engineering team for a large university must increase the security within the core of the network by ensuring that IP traffic only originates from a network segment that is assigned to that interface in the routing table. Which technology must be chosen to accomplish this requirement?

  A. VLAN access control lists
  B. Unicast Reverse Path Forwarding
  C. Intrusion prevention system
  D. ARP inspection
  B. Unicast Reverse Path Forwarding

• Question 566:

  An engineer is implementing VXLAN to extend layer 2 traffic at three geographically diverse data centers. Which feature is required at each data center to extend traffic?

  A. VTEP
  B. VRRP
  C. VLSM
  D. VPLS
  E. VRF
  D. VPLS

• Question 567:

  What data center network layer provides service module integration, Layer 2 domain definitions, and default gateway redundancy?

  A. core
  B. aggregation
  C. access
  D. edge
  B. aggregation

• Question 568:

  When a site has Internet connectivity with two different ISP's, which two strategies are recommended to avoid becoming a BGP transit site? (Choose two)

  A. Use a single service provider
  B. Filter routes outbound to the ISPs
  C. Accept all inbound routes from the ISPs
  D. Filter routes inbound from the ISPs
  E. Advertise all routes to both ISPs
  B. Filter routes outbound to the ISPs
  C. Accept all inbound routes from the ISPs

  ---

  When connecting to multiple exit points from your AS and peering with multiple ISPs, there is a danger that by misconfiguration, you advertise routes that are received from one ISP to the other ISP. Your AS can become a transit area for Internet traffic of other networks, which can cost you money and resources. You can easily avoid this situation by advertising only your assigned address space to all adjacent ISPs (also, you can advertise only your local AS and filter out the other ASs using BGP AS-path filter).

  From a design point of view, this model (Multi-homing with Two ISPs) requires careful design consideration. For example, to avoid making the enterprise network as a transit AS/path for the two external ISPs (for example, ISP1 and ISP2), it is recommended that you always announce only your PI address space to the ISPs you are directly connected to. If, by mistake, you advertise routes that are received from ISP1 to ISP2, and ISP2's policy is not restrictive enough, your AS will start to participate in the Internet traffic exchange (become a transit AS).

  In addition, if AS X, as shown in Figure 5-23, decided that the path to ISP1 from AS X is shorter through your network (via ISP2), it will start sending traffic that is destined for ISP1 to your router. Your router will happily route the traffic to ISP1, but the problem is that this extra traffic might leave your users with no bandwidth for themselves and, as a result, it will impact the overall user experience. Also, this situation raises a high security concern, because external traffic from an unknown network, traffic that could be malicious, will be using your corporate network as a transit path. Therefore, you, as the network designer, need to ensure that only the enterprise-owned PI address range is announced, combined with AS PATH filtering to permit only routes originating from the enterprise local AS to be advertised.

  To prevent your network from becoming a transit AS, make sure that you advertise only your own PI address space to both ISPs by using outbound route filtering, BGP AS-PATH filtering, or a combination of both.

• Question 569:

  Which two options describe how Taboo contracts differ from regular contracts in Cisco ACI? (Choose two) (E)

  A. Taboo contract entries are looked up with higher priority than entries in regular contracts
  B. Taboo contract entries are looked up with lower priority than entries in regular contracts.
  C. They are not associated with one EPG
  D. They are not associated with EPGs
  E. Taboo contract entries are looked up based on administrator configured priority
  F. They are associated with pair of EPGs
  A. Taboo contract entries are looked up with higher priority than entries in regular contracts
  F. They are associated with pair of EPGs

  ---

  There may be times when the ACI administrator might need to deny traffic that is allowed by another contract. Taboos are a special type of contract that an ACI administrator can use to deny specific traffic that would otherwise be allowed by another contract. Taboos can be used to drop traffic matching a pattern (any EPG, a specific EPG, matching a filter, and so forth). Taboo rules are applied in the hardware before the rules of regular contracts are applied. Taboo contracts are not recommended as part of the ACI best practices but they can be used to transition from traditional networking to ACI. To imitate the traditional networking concepts, an "allow-all-traffic" contract can be applied, with taboo contracts configured to restrict certain types of traffic."

• Question 570:

  What feature is a benefit of using Cisco UCS blade servers for data center virtualization?

  A. guest VM high availability
  B. converged LAN and SAN infrastructure
  C. host based etherchannel
  D. built-in hypervisor
  B. converged LAN and SAN infrastructure