Full 300-420 Practice Test and 348 unique questions with explanations waiting just for you!
CCNP Enterprise Dumps 300-420 Exam for Full Questions - Exam Study Guide
Cisco 300-420 exam covers a wide range of topics, including advanced routing protocols, network security, virtualization, automation, and network design principles. Candidates will be required to demonstrate their understanding of these topics by answering a variety of multiple-choice questions and scenario-based questions. 300-420 exam is designed to test candidates' knowledge and skills related to designing enterprise-level networks that meet the business requirements of organizations. Candidates who pass the exam will earn the Cisco Certified Design Professional (CCDP) certification, which is highly valued in the IT industry and recognized globally.
NEW QUESTION # 117
Refer to the exhibit. Which action would make the router the active VRRP router?
- A. Change the interface tracking priority to 100.
- B. Recover interface Serial 1/0.
- C. Increase priority in the configuration to 100.
- D. Recover interface Serial 1/1.
Answer: B
Explanation:
As VRRP Group 30 is configured with preemption all that is required is that the VRRP Priority be higher than that of the current active VRRP router and the current master router priority is 50.
NEW QUESTION # 118
Which two statements about VRRP object tracking are true? (Choose two)
- A. A VRRP group can track only one object at a time
- B. VRRP can track the status of interfaces and routes
- C. VRRP supports only interface tracking
- D. The priority of a VRRP device can change in accordance with the up or down status of a VRRP object
- E. The VRRP interface priority must be manually configured by the administrator
Answer: B,D
Explanation:
Explanation
https://www.ciscolive.com/c/dam/r/ciscolive/emea/docs/2019/pdf/BRKCRS-2821.pdf
NEW QUESTION # 119
A customer plans to adopt distributed QoS in their enterprise WAN. The policy must allow for individual packet marking according to the type of treatment required and for forwarding based on hop-by-hop treatment locally defined on each device. Which technology must the customer select?
- A. LLQ
- B. Diffserv
- C. IntServ
- D. CBWFQ
Answer: B
NEW QUESTION # 120
When IPsec VPNs are designed, what is a unique requirement if support for IP Multicast is required?
- A. additional bandwidth for headend
- B. encapsulation of traffic with GRE or VTI
- C. IPsec forwarding using tunnel mode
- D. IPsec forwarding using transport mode
Answer: B
Explanation:
Section: WAN for Enterprise Networks
Explanation/Reference:
NEW QUESTION # 121
How many host addresses are available with a Class B network with the default mask?
- A. 65,536
- B. 64,QQQ
- C. 65,534
- D. 63,998
Answer: C
NEW QUESTION # 122
Refer to the exhibit.
Refer to the exhibit. An architect must design a solution to connect the network behind R3 with the EIGRP network. Which mechanism should be included to avoid routing loops?
- A. down bit
- B. summarization
- C. route tags
- D. split-horizon
Answer: C
NEW QUESTION # 123 
Refer to the exhibit. All routers currently reside in OSPF area 0. The network manager recently used R1 and R2 as aggregation routers for remote branch locations and R3 and R4 for aggregation routers for remote office locations. The network has since been suffering from outages, which are causing frequent SPF runs. To enhance stability and introduce areas to the OSPF network with the minimal number of ABRs possible, which two solutions should the network manager recommend? (Choose two.)
- A. a new OSPF area for R1 and R2 connections, with R5 and R6 as ABRs
- B. a new OSPF area for R3 and R4 connections,with R3 and R4as ABRs
- C. a new OSPF area for R1, R2, R3, and R4 connections, with R1, R2, R3, and R4 as ABRs
- D. a new OSPF area for R1 and R2 connections,with R1 and R2as ABRs
- E. a new OSPF area for R3 and R4 connections,with R5 and R6as ABRs
Answer: A,E
NEW QUESTION # 124
An organization is designing a detailed QoS plan that limits bandwidth to specific rates. Which two parameters are supported be the traffic policing feature? (Choose two.)
- A. conforming
- B. marking
- C. shaping
- D. bursting
- E. violating
Answer: A,E
Explanation:
Explanation
https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/qos_plcshp/configuration/xe-3s/qos-plcshp-xe-3s-book/qos-p
NEW QUESTION # 125
What are three ways in which Cisco ISE learns information about devices? (Choose three.)
- A. RADIUS attributes
- B. traffic generated by the device
- C. network servers the device has accessed
- D. user authentication to the ISE
- E. SMTP agents
- F. RPC mechanism via HTTPS
Answer: A,B,D
NEW QUESTION # 126
How do endpoints inside an SD-Access network reach resources outside the fabric?
- A. A fabric edge is used to de-encapsulate VXLAN traffic to normal IP traffic then transported over the outside network
- B. Fabric borders use VRFs to map VNs to VRFs
- C. SD-Access transit links are used to transport encapsulated traffic from one fabric to another
- D. a VRF fusion router is used to map resources in one VN to another VN
Answer: D
NEW QUESTION # 127
Since installing a cisco TelePresence system, the company is experiencing other application having response issues when the system in use. As a result, the company asked an architect to recommend a QoS solution. The customer is currently using a CBWFQ policy to manage traffic on an internet connection with a speed of 100 Mbps. Which link-capacity limit must the architect choose for strict-priority for the real-time traffic?
- A. 50 Mbps
- B. 25 Mbps
- C. 75 Mbps
- D. 33 Mbps
Answer: D
Explanation:
Explanation
https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/qos_conmgt/configuration/xe-3s/qos-conmgt-xe-3s-book/qos The sum of all bandwidth allocation on an interface cannot exceed 75 percent of the total available interface bandwidth. The remaining 25 percent is used for other overhead, including Layer 2 overhead, routing traffic, and best-effort traffic. Bandwidth for the CBWFQ class-default class, for instance, is taken from the remaining
25 percent.
NEW QUESTION # 128
Which two steps can be taken to improve convergence in an OSPF network? (Choose two.)
- A. Tune OSPF parameters
- B. Use Bidirectional Forwarding Detection
- C. Merge all the areas into one backbone area
- D. Span the same IP network across multiple areas.
- E. Make all non-backbone areas stub areas
Answer: A,B
NEW QUESTION # 129
Refer to the exhibit.
Refer to the exhibit. A customer has two eBGP peerings from a single CE router toward two service providers. The customer has hired an architect to design a solution to ensure certain traffic enters the customer's network through interface gig0/0. Which solution must the architect include in the design?
- A. Break aggregated routes into longer prefixes and advertise to the preferred service provider.
- B. Prepend additional AS on the AS path toward the preferred service provider.
- C. Advertise a lower MED value toward the less preferred service provider.
- D. Set a higher local preference to the preferred service provider path.
Answer: C
NEW QUESTION # 130
Which consideration must be made when designing a Cisco SD-Access fabric underlay?
- A. A unified policy must be used.
- B. Subnets must be reduced to decrease latency.
- C. The default MTU should be increased.
- D. Up to six control planes are supported.
Answer: C
Explanation:
Look under "Underlay Network Design". Its the second bullet point. https://www.cisco.com/c/en/us/td/docs/solutions/CVD/Campus/cisco-sda-design-guide.html#Underlay_Network_Design
NEW QUESTION # 131
Which two best practices must be followed when designing an out-of-band management network? (Choose two.)
- A. Enforce access control
- B. Ensure that the management network is a backup to the data network
- C. Back up data using the management network
- D. Ensure network isolation
- E. Facilitate network integration
Answer: A,D
Explanation:
Explanation
https://www.cisco.com/c/en/us/td/docs/solutions/Enterprise/Security/SAFE_RG/SAFE_rg/chap9.html
NEW QUESTION # 132
Refer to the exhibit. A customer has two eBGP peerings from a single CE router toward two service providers. The customer has hired an architect to design a solution to ensure certain traffic enters the customer's network through interface gig0/0. Which solution must the architect include in the design?
- A. Prepend additional AS on the AS path toward the preferred service provider.
- B. Advertise a lower MED value toward the less preferred service provider.
- C. Break aggregated routes into longer prefixes and advertise to the preferred service provider.
- D. Set a higher local preference to the preferred service provider path.
Answer: C
NEW QUESTION # 133
An organization is designing a detailed QoS plan that limits bandwidth to specific rates. Which two parameters are supported be the traffic policing feature? (Choose two.)
- A. marking
- B. shaping
- C. conforming
- D. bursting
- E. violating
Answer: A,B
Explanation:
Section: Network Services
NEW QUESTION # 134
Instructions
The main screen consists of two parts; the Main scenario and the Topology tabs. The main scenario describes TSHOOT.com test bed. The Topology tabs allow you to display the appropriate and select the trouble ticket.
To complete the item, you will first need to familiarize yourself with the TSHOOT.com test bed by clicking on the master scenario first and then the topologies tabs. Once you are familiar with the test bed and the topologies, you should start evaluating the trouble ticket. You will be presented with a Trouble Ticket scenario that will describe the fault condition. You will need to determine on which device the fault condition is located, to which technology the fault condition is related, and the solution to each trouble ticket. This will be done by answering three questions.
Ticket Selection
To begin, click on the Ticket on the Topology tabs.
Please note. Some of the questions will require you to use the scroll bar to see all options.
Fault Isolation
Read the ticket scenario to understand the fault condition.
Open the appropriate topology, based upon the ticket scenario.
Open the console of the desired device by clicking on that device in the topology, based upon your troubleshooting methodology.
Use the supported show, ping and trace commands to begin your fault isolation process.
Move to other devices as need by clicking on those devices within the topology.
Fault Identification
The trouble ticket will include three questions that you will need to answer:
1. Which device contains the fault
2. Which technology the fault condition is related to
3. What is the solution to the issue
To advance to the next question within the ticket click on "Next Question".
When you click "DONE", the trouble ticket will turn RED and will no longer be accessible.
You may also use the "Previous Question" button to review questions within that specific ticket.
To complete a trouble ticket, answer all three questions and click "DONE". This will store your response to the questions. Do not click on "DONE" unless you have answered all questions within the ticket.
Item Completion
Click the NEXT button on the bottom of the screen once a ticket is RED. This action moves you to the next item.
Scenario
The company has created the test bed network shown in the layer 2 and layer 3 topology exhibits.
This network consists of four routers, two layer 3 switches and two layer 2 switches.
In the IPv4 layer 3 topology, R1, R2, R3, and R4 are running OSPF with an OSPF process number 1.
DSW1, DSW2 and R4 are running EIGRP with an AS of 10. Redistribution is enabled where necessary.
R1 is running a BGP AS with a number of 65001. This AS has an eBGP connection to AS 65002 in the ISP's network. Because the company's address space is in the private range, R1 is also providing NAT translations between the inside (10.1.0.0/16 & 10.2.0.0/16) networks and the outside (209.65.200.0/24) network.
ASW1 and ASW2 are layer 2 switches.
NTP is enabled on all devices with 209.65.200.226 serving as the master clock source.
The client workstations receive their IP address and default gateway via R4's DHCP server. The default gateway address of 10.2.1.254 is the IP address of HSRP group 10 which is running on DSW1 and DSW2.
In the IPv6 layer 3 topology R1, R2, and R3 are running OSPFv3 with an OSPF process number 6. DSW1, DSW2 and R4 are running RIPng process name RIP_ZONE. The two IPv6 routing domains, OSPF 6 and RIPng are connected via GRE tunnel running over the underlying IPv4 OSPF domain. Redistribution is enabled where necessary.
Recently the implementation group has been using the test bed to do a 'proof-of-concept' on several implementations. This involved changing the configuration on one or more of the devices. You will be presented with a series of trouble tickets related to issues introduced during these configurations.
The implementation group has been using the test bed to do a 'proof-of-concept' that requires both Client 1 and Client 2 to access the WEB Server at 209.65.200.241. After several changes to the network addressing, routing scheme, DHCP services, NTP services, and FHRP services, a trouble ticket has been opened indicating that Client 1 cannot ping the 209.65.200.241 address.
Use the supported commands to isolate the cause of this fault and answer the following questions.
What is the solution to the fault condition?
- A. In configuration mode, using the interface range port-channel 13, port-channel 23, then configure switchport trunk allowed vlan 10,200 followed by interface Fastethernet 1/0/1, then no shutdown commands.
- B. In configuration mode, using the interface range port-channel 23, port-channel 24, then configure switchport trunk allowed vlan none followed by switchport trunk allowed vlan 10,20, commands.
- C. In configuration mode, using the interface range port-channel 23, port-channel 24, then configure switchport trunk allowed vlan none followed by switchport trunk allowed vlan 10,20,200 commands.
- D. In configuration mode, using the interface range port-channel 13, port-channel 23, then configure switchport trunk allowed vlan none followed by switchport trunk allowed vlan 10,200 commands.
Answer: D
Explanation:
Solution
Steps need to follow as below:-1.When we check on client 1 & Client 2 desktop we are not receiving DHCP address from R4Ipconfig ----- Client will be getting 169.X.X.X2.On ASW1 port Fa1/0/ 1 & Fa1/0/2 access port VLAN 10 was assigned which is using IPaddress 10.2.1.0/24Sh run ------- & check for running config of int fa1/0/1 & fa1/0/2====================================================interface FastEthernet1/0/1switchport mode accessswitchport access vlan 10interface FastEthernet1/0/2switchport mode accessswitchport access vlan 10
3.We need to check on ASW 1 trunk port the trunk Po13 & Po23 were receiving VLAN 20 &200 but not VLAN
10 so that switch could not get DHCP IP address and was failing to reach IPaddress of Internet4.
Change required:
On ASW1 below change is required for switch-to-switch connectivity..int range portchannel13,portchannel23switchport trunk allowed vlan noneswitchport trunk allowed vlan 10,200
NEW QUESTION # 135
Refer to the exhibit. The full EIGRP routing table is advertised throughout the network. Currently, users experience data loss when any one link in the network fails. An architect optimizes the network to reduce the impact when a link fails.
Which solution should the architect include in the design?
- A. Run BFD on the inter links between EIGRP neighbors.
- B. Summarize the access layer networks from each access layer switch toward the aggregation layer
- C. Summarize the access layer networks from the aggregation layer toward the core layer.
- D. Reduce the default EIGRP hello interval and hold time
Answer: A
NEW QUESTION # 136
A client is moving to Model-Driven Telemetry and requires periodic updates. What must the network architect consider with this design?
- A. Periodic updates include a full copy of the data that is subscribed to.
- B. Updates that contain changes within the data are sent only when changes occur.
- C. The primary push update is sent immediately and cannot be delayed.
- D. Empty data subscriptions do not generate empty update notifications.
Answer: A
Explanation:
Section: Automation
NEW QUESTION # 137
Refer to the exhibit. A network engineer is designing an OSPF solution to connect a company's remote to a newly provisioned MPLS VPN backbone. Some of the branches have a direct dark fiber connection between each other. The engineer wants to ensure that the dark fibers are used only when the MPLS core is unavailable. Which solution must the engineer choose?
- A. Sham link
- B. NSSA
- C. Virtual link
- D. Stub area
Answer: A
Explanation:
https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/iproute_ospf/configuration/xe-16/iro-xe-16-book/iro-sham-link.html
NEW QUESTION # 138
Drag and drop the properties from the left onto the protocols they describe on the right.
Answer:
Explanation:
Reference:
https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/prog/configuration/166/b_166_programmability_cg/ b_166_programmability_cg_chapter_01011.html
https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/prog/configuration/169/b_169_programmability_cg/ configuring_yang_datamodel.html
NEW QUESTION # 139
......
Authentic Best resources for 300-420 Online Practice Exam: https://topexamcollection.pdfvce.com/Cisco/300-420-exam-pdf-dumps.html