Get Latest [Dec-2023] Conduct effective penetration tests using TestInsides 300-420
Penetration testers simulate 300-420 exam PDF
Cisco 300-420 exam covers a wide range of topics, including advanced addressing and routing solutions, network security, virtualization, automation, and network architecture. Candidates are required to demonstrate their understanding of the latest industry trends and best practices in designing enterprise networks. 300-420 exam consists of multiple-choice questions, and candidates have 90 minutes to complete it. Passing the Cisco 300-420 exam requires a score of at least 750 out of 1000.
NEW QUESTION # 51
An engineer must design an in-band management solution for a customer with branch sites. The solution must allow remote management of the branch sites using management protocols over an MPLS WAN. Queueing is implemented at the remote sites using these classes:
How must the solution prioritize the management traffic over the WAN?
- A. Mark the traffic with DSCP EF and map into Class1 with a minimum bandwidth assigned by reducing the bandwidth available to Class2.
- B. Mark the traffic with DSCP CS2 and map into Class2 with a minimum bandwidth assigned by reducing the bandwidth available to Class3
- C. Mark the traffic with DSCP CS1 and map into Class2 with a minimum bandwidth assigned by reducing the bandwidth available to CIass3.
- D. Mark the traffic with DSCP CS6 and map into Class1 with a minimum bandwidth assigned by reducing the bandwidth available to Class2
Answer: B
NEW QUESTION # 52
Refer to the exhibit. An architect must design a solution to connect the network behind R3 with the EIGRP network. Which mechanism should be included to avoid routing loops?
- A. summarization
- B. down bit
- C. split-horizon
- D. route tags
Answer: D
NEW QUESTION # 53
Which consideration must be made when designing a Cisco SD-Access fabric underlay?
- A. The default MTU should be increased.
- B. Up to six control planes are supported.
- C. Subnets must be reduced to decrease latency.
- D. A unified policy must be used.
Answer: A
Explanation:
Explanation
Look under "Underlay Network Design". Its the second bullet point.
https://www.cisco.com/c/en/us/td/docs/solutions/CVD/Campus/cisco-sda-design-guide.html#Underlay_Network
NEW QUESTION # 54
Which nonproprietary mechanism can be used to automate rendezvous point distribution in a large PIM domain?
- A. BSR
- B. Static RP
- C. Auto-RP
- D. Embedded RP
Answer: A
NEW QUESTION # 55
Exhibit:
Refer to the exhibit. An engineer is designing a Layer 2 campus network. The design must support fast convergence and leverage as much bandwidth as possible between layers. Distribution switches do support VSS; unfortunately, not all routing protocols are available for use due to license limitations. Which solution must the engineer choose?
- A. EtherChannel
- B. ECMP
- C. RSTP
- D. MEC
Answer: D
NEW QUESTION # 56 
Refer to the exhibit. Customers report low video quality and delays when having point-to-point telepresence video calls between the two locations. An architect must optimize a design so that traffic follows the same path for egress and ingress traffic flows. Which technique optimizes the design?
- A. Configure route leaking on the router in area 2.
- B. Configure route leaking on the router in area 1.
- C. Configure the high metric on the router in area 4.
- D. Configure route filter on the router in area 4.
Answer: C
NEW QUESTION # 57
An architect is designing a network that will utilize the spanning tree protocol to ensure a loop-free topology.
The network will support an engineering environment where it is necessary for end users to connect their own network switches for testing purposes. Which feature should the architect include in the design to ensure the spanning tree topology is not affected by these rogue switches?
- A. BPDU Skew Detection
- B. root guard
- C. BPDU guard
- D. loop guard
Answer: B
Explanation:
Section: Advanced Enterprise Campus Networks
NEW QUESTION # 58
Refer to the exhibit.
A network engineer must improve the current IS-IS environment. The Catalyst switch is equipped with dual supervisors. Each time a stateful switchover occurs, the network experiences unnecessary route recomputation. Which solution addresses this issue if the upstream router does not understand graceful restart messaging?
- A. Enable NSR on the switch.
- B. Enable NSF on the switch.
- C. Configure ISIS aggressive timers on both devices.
- D. Enable IS-IS remote LFA FRR on both devices.
Answer: B
NEW QUESTION # 59
Which two steps can be taken to improve convergence in an OSPF network? (Choose two.)
- A. Use Bidirectional Forwarding Detection
- B. Tune OSPF parameters
- C. Make all non-backbone areas stub areas
- D. Merge all the areas into one backbone area
- E. Span the same IP network across multiple areas.
Answer: B,C
NEW QUESTION # 60
Refer to the exhibit.
Refer to the exhibit. AS65533 and AS65530 are announcing a partial Internet routing table as well as their IP subnets. An architect must create a design that ensures AS64512 become a transit AS. Which filtering solution must the architect choose?
- A. No-advertise
- B. No Export
- C. Next-hop
- D. Maximum-prefix
Answer: B
NEW QUESTION # 61
Which QoS feature responds to network congestion by dropping lower priority packets?
- A. strict priority
- B. CBWFQ
- C. WRED
- D. tail drop
Answer: C
NEW QUESTION # 62
How is end-to-end microsegmentation enforced in a Cisco SD-Access architecture?
- A. VLANs are used to segment traffic at Layer 2.
- B. SGTs and SGTACLs are used to control access to various resources.
- C. VRFs are used to segment traffic at Layer 3.
- D. 5-tuples and ACLs are used to permit or deny traffic.
Answer: B
NEW QUESTION # 63
A large chain of stores currently uses MPLS-based T1 lines to connect their stores to their data center. An architect must design a new solution to improve availability and reduce costs while keeping these considerations in mind:
» The company uses multicast to deliver training to the stores.
» The company uses dynamic routing protocols and has implemented QoS.
» To simplify deployments, tunnels should be created dynamically on the hub when additional stores open.
Which solution should be included in this design?
- A. DMVPN
- B. VPLS
- C. GET VPN
- D. IPsec
Answer: A
NEW QUESTION # 64
What is the role of a control-plane node in a Cisco SD-Access architecture?
- A. fabric device that connects APs and wireless endpoints to the SD-Access fabric
- B. map system that manages endpoint to device relationships
- C. fabric device that connects wired endpoints to the SD-Access fabric
- D. map system that manages External Layer 3 networks
Answer: B
NEW QUESTION # 65
Refer to the exhibit.
An architect is designing a network for a customer supporting a Wake-on-LAN application. Which solution must the architect choose?
- A. IP directed-broadcasts on R2
- B. IP directed-broadcasts on R1
- C. spanning-tree uplinkfast on SW2
- D. spanning-tree uplinkfast on SW1
Answer: A
Explanation:
"IP directed broadcast" must be supported on the last router to the destination subnet. Since the sleeping PC's dont have IP adresses, the machines must be calles awake by broadcast that behaves like an unicast untill they reach the destination network. There the directed broadcast is handled like a proper broadcast to wake all WOL machines.
https://www.cisco.com/c/en/us/support/docs/switches/catalyst-3750-series-switches/91672-catl3-wol-vlans.html
NEW QUESTION # 66
Refer to the exhibit.
EIGRP has been configured on all links. The spoke nodes have been configured as EIGRP stubs, and the WAN links to R3 have higher bandwidth and lower delay than the links to R4. When a link failure occurs at the R1-R2 link, what happens to traffic on R1 that is destined for a subnet attached to R2?
- A. R1 forwards the traffic to R3 in order to reach R2
- B. R1 load-balances across the paths through R3 and R4 to reach R2
- C. R1 forwards the traffic to R3, but R3 drops the traffic
- D. R1 has no route to R2 and drops the traffic
Answer: D
NEW QUESTION # 67
Refer to the exhibit.
An engineer is designing a BGP solution for a client that peers with ISP1 for full Internet connectivity and with ISP2 for direct exchange of routes for several third parties. Which action, when implemented on the edge routers, enables the client network to reach the Internet through ISP1?
- A. Apply route filtering such that the client advertises only routes originated from its own AS.
- B. Advertise a default route for downstream routers within the client network.
- C. Run an eBGP session within different VRFs for each ISP.
- D. Apply the AS-path prepend feature for ISP2.
Answer: B
NEW QUESTION # 68
......
Tested Material Used To 300-420 Test Engine: https://prepaway.testinsides.top/300-420-dumps-review.html