Cisco 300-320 Online Practice Questions and Exam Preparation

Cisco 300-320 Online Questions & Answers

• Question 661:

  Which encapsulation simplifies encryption management?

  A. IPsec VPN
  B. MPLS VPN
  C. Cisco Easy VPN
  D. GET VPN
  D. GET VPN

• Question 662:

  NBAR is deployed on the network as part of network optimization.

  Which technology is critical to recognize new applications on the network?

  A. PDLM
  B. ACLs
  C. code upgrade
  D. additional licenses
  A. PDLM

  ---

  https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/qos_nbar/configuration/15-mt/qos-nbar-15-mt-book/nbarapp-recog-mods.html

• Question 663:

  What is an advantage of using the vPC feature in a data center environment?

  A. supports FHRP
  B. The two switches form a single control plane
  C. All available uplink bandwidth is utilized
  D. A single IP is used for management of both devices
  C. All available uplink bandwidth is utilized

• Question 664:

  What is one function of key server in Cisco GETVPN deployment?

  A. sending the RSA certificate
  B. providing preshared keys
  C. maintaining security polices
  D. providing the group ID
  C. maintaining security polices

  ---

  Key server is responsible for maintaining security policies, authenticating the GMs and providing the session key for encrypting traffic. KS authenticates the individual GMs at the time of registration. Only after successful registration the GMs can participate in group SA. https://www.cisco.com/c/en/us/products/collateral/security/group-encrypted-transport- vpn/deployment_guide_c07_554713.html

• Question 665:

  An engineer must design a Cisco VSS-based configuration within a customer campus network. The two VSS switches are provisioned for the campus distribution layer... Which option is the primary reason to avoid plugging both VSL links into the supervisor ports?

  A. The implementation creates a loop
  B. The design lacks optimal hardware diversity
  C. Limited bandwidth is available for VSS convergence
  D. QoS is required on the VSL links
  B. The design lacks optimal hardware diversity

  ---

  The best-practice recommendation for VSL link resiliency is to bundle two 10-Gbps ports from different sources. Doing this might require having one port from the supervisor and other from a Cisco 6708 line card.

  When configuring the VSL, note the following guidelines and restrictions:

  For line redundancy, we recommend configuring at least two ports per switch for the VSL. For module redundancy, the two ports can be on different switching modules in each chassis.

• Question 666:

  Which two hashing distribution algorithms are available for an engineer when work with multichasis etherchannel? Choose two

  A. src-dst-mac
  B. src-dst-ip
  C. round-robin
  D. fixed
  E. adaptive
  D. fixed
  E. adaptive

• Question 667:

  About BGP advertising route with using community, advertise to internet but not advertise to inside network

  A. no-advertise
  B. no-export
  C. local-as
  D. internet
  B. no-export

• Question 668:

  In which NAS operating mode are ACL filtering and bandwidth throttling only provided during posture assessment?

  A. Layer 2
  B. Layer 3
  C. in-band
  D. out-of-band
  E. edge
  F. central
  D. out-of-band

  ---

  https://www.safaribooksonline.com/library/view/foundation-learning-guide/9780132652933/ch06.html "In out-of-band traffic flow, the Cisco NAS is in the traffic path only during the posture assessment. Out-of-band mode provides VLAN port-based and role-based access control. ACL filtering and bandwidth throttling are provided only during posture assessment."

• Question 669:

  Which two elements comprise the backbone area while designing a new network utilizing IS-IS as the interior gateway protocol (choose two)

  A. contiguous chain of Level 2 capable routers
  B. contiguous chain of Level1/Level 2 capable routers
  C. set of Level 2 configured interfaces
  D. contiguous Level 1 capable routers
  E. set of Level 1 configured interfaces
  A. contiguous chain of Level 2 capable routers
  B. contiguous chain of Level1/Level 2 capable routers

  ---

  https://www.cisco.com/en/US/products/ps6599/products_white_paper09186a00800a3e6f.s html "Backbone IS-IS does not have a backbone area like the OSPF area 0. The IS-IS backbone is a contiguous collection of Level 2-capable routers,

  each of which can be in a different area"

  http://www.ciscopress.com/articles/article.asp?p=26850andseqNum=3

  "In most designs with routing hierarchy, the Level 2 routers are also Level 1 routers by virtue of their identification with a certain area. Therefore, in IS-IS, a router can function as Level 1-only or Level 2-only and possibly as both Level 1 and

  Level 2 (Level 1-2). Level 1-2 routers act as border routers to their respective areas, providing connectivity to other areas. The Level 2 backbone is essentially a virtual IS-IS area consisting of routers engaged in Level 2 routing"

• Question 670:

  Which feature regarding a FlexLink design is true?

  A. It optimizes the access switch density
  B. It permits VLANs to extend across access switches that connect to a common aggregation module
  C. All of the uplinks are in active state
  D. The aggregation layer is aware of FlexLinks
  B. It permits VLANs to extend across access switches that connect to a common aggregation module