Cisco 300-420 Online Practice Questions and Exam Preparation

Cisco 300-420 Online Questions & Answers

• Question 111:

  

  Refer to the exhibit. An architect working for a service provider with an employee ID: 4763:44:876 must design a Layer 2 VPN solution that supports:

  transparency of service provider devices

  direct communication between CE routers attached to the same VLAN

  Which solution must the design include?

  A. multiple VPWS
  B. single VPLS
  C. single VPWS
  D. multiple VPLS
  B. single VPLS

• Question 112:

  What are two valid scaling techniques when an EIGRP network is designed that consists of more than routers? (Choose two.)

  A. Use structured hierarchical topology with route summarization
  B. Used sub-second timers
  C. Use the distribute-list command to filter routes
  D. Modify delay parameters on the links
  E. Implement multiple EIGRP autonomous systems
  A. Use structured hierarchical topology with route summarization
  E. Implement multiple EIGRP autonomous systems

• Question 113:

  Which design achieves SD-WAN control plane redundancy?

  A. Configuring BFD on the WAN Edge routers
  B. Using multiple instances of vManage in clusters
  C. Deploying using a virtual platform like UCS or CSP
  D. Managing the underlay network with OMP
  D. Managing the underlay network with OMP

• Question 114:

  Which Cisco product supports SD-Access and specifically built to address new challenges faced by enterprises?

  A. CSRv virtual router
  B. ASR 1000-HX
  C. Catalyst 6807-XL w/ Sup6T and C6800 10G line cards
  D. Catalyst 9500
  E. ISR 4221
  F. Nexus 7700 w/ Sup2E and M3 line cards
  D. Catalyst 9500

• Question 115:

  Prior to establishing full-mesh iPsec tunnels in a typical Cisco SD-WAN deployment, which mechanism do WAN Edge routers use to exchange Key information for data plane encryption?

  A. They use vSmart controllers as key exchange servers.
  B. They use vManage as a key exchange server.
  C. They use IKEv2 when exchanging keys with each other.
  D. They use vBond as a key exchange server.
  A. They use vSmart controllers as key exchange servers.

• Question 116:

  What are three ways in which Cisco ISE learns information about devices? (Choose three.)

  A. network servers the device has accessed
  B. traffic generated by the device
  C. RADIUS attributes
  D. RPC mechanism via HTTPS
  E. SMTP agents
  F. user authentication to the ISE
  B. traffic generated by the device
  C. RADIUS attributes
  F. user authentication to the ISE

• Question 117:

  Which is a benefit of a cloud-based SD-WAN deployment?

  A. instant scale
  B. security never an issue
  C. might be required for compliance with industry standards
  D. controller availability never an issue
  E. agility of change dependent only on your own internal IT processes
  A. instant scale

• Question 118:

  Which node enables Cisco ISE to share contextual information on a device with Cisco Stealthwatch?

  A. Monitoring and Troubleshooting Node
  B. Inline Posture Node
  C. pXGrid Controller
  D. Policy Administration Node
  C. pXGrid Controller

• Question 119:

  Which component of the SD-Access fabric is responsible for communicating with networks that are external to the fabric?

  A. border nodes
  B. control plane nodes
  C. intermediate nodes
  D. edge nodes
  A. border nodes

• Question 120:

  DRAG DROP

  Drag and drop the descriptions from the left onto the Cisco SD-WAN component they describe on the right.

  Select and Place: