Cisco CCNP Enterprise 300-420 Free Dumps 2023

Jonnie Karnath2023-05-20T11:34:37+00:00

Cisco 300-420 free dumps from Certspots is an excellent resource for anyone who is preparing for the CCNP Enterprise certification exam. They are updated regularly to reflect the latest exam trends and requirements. This means that you can be sure that the questions you are practicing with are relevant to the exam you are preparing for. Using Certspots Cisco CCNP Enterprise 300-420 free dumps can also help you identify areas where you need to focus your study efforts. By practicing with the questions, you can gauge your understanding of the material and identify areas where you may need additional study. You can practice our 300-420 free dumps today and get one step closer to achieving your certification goals.

Page 1 of 8

1. Prior to establishing full-mesh iPsec tunnels in a typical Cisco SD-WAN deployment, which mechanism do WAN Edge routers use to exchange Key information for data plane encryption?

They use vSmart controllers as key exchange servers.

They use vManage as a key exchange server.

They use IKEv2 when exchanging keys with each other.

They use vBond as a key exchange server.

2. In a Cisco SD-Access fabric, which node facilities connectivity between the fabric and networks external to the fabric?

intermediate

edge

control plane

border

3. DRAG DROP

Drag and drop the characteristics from the left onto the configuration protocols they describe on the right.

4. An architect must address sustained congestion on the access and distribution uplink of network. QoS has already been implemented and optimized, but it is no longer effective in ensuring optimal network performance.

Which two solutions should the architect use to improver network performance? (Choose two)

Reconfigure QoS based on the IntServ model

Utilize random early detection to manage queues

Implement higher-speed uplink interfaces

Bundle additional uplinks into logical EtherChannels

Configure selective packet discard to drop noncritical network traffic.

5. A network engineer must design a multicast solution to prevent the spoofing of multicast streams and ensure efficient bandwidth utilization. The network will be merged with another multicast domain in the future, and the merge must require minimum effort.

Which two solutions meet the customer requirements? (Choose two.)

PIM-SSM

IGMPv3

IGMPv2

PIM-SM

MSDP

6. When vEdge router redundancy is designed, which FHRP is supported?

HSRP

OMP

GLBP

VRRP

7. A network engineer must segregate three interconnected campus networks using IS-IS routing. A two-layer hierarchy must be used to support large routing domains and to avoid more specific routes from each campus network being advertised to other campus network routers automatically.

Which two actions does the engineer take to accomplish this segregation? (Choose two.)

Designate two IS-IS routers as BDR routers at the edge of each campus, and configure one BDR for all Level 1 routers and one BDR for all Level 2 routers.

Designate two IS-IS routers from each campus to act as Level 1/Level 2 backbone routers at the edge of each campus network.

Assign the same IS-IS NET value for each campus, and configure internal campus routers with Level 1/ Level 2 routing.

Utilize different MTU values for each campus network segment. Level 2 backbone routers must utilize a larger MTU size of 9216.

Assign a unique IS-IS NET value for each campus, and configure internal campus routers with Level 1 routing.

8. Refer to the exhibit

An engineer working for a telecommunication company with an employee ID 4449:30 959 Is calculating STP scalability for switches to ensure that the numbers are below the maximum supported value for STP logical ports.

How many logical interfaces are active for switch A?

307

202

100

9. An engineer must design a scalable QoS architecture that allows the separation of the traffic into classes on predefined business requirements. The design must also utilize the differentiated services code points as the QoS priority descriptor value and support at least 10 levels of classification.

Which QoS technology should the engineer include in the design?

RSVP

Diffserv

Best effort

Interserv

10. Which feature provides the capability for intra-VN traffic filtering and control within the Cisco SO-Access architecture?

scalable groups

MAC ACL

prefix list

service policy

Page 2 of 8

11. How do endpoints inside an SD-Access network reach resources outside the fabric?

a VRF fusion router is used to map resources in one VN to another VN

Fabric borders use VRFs to map VNs to VRFs

SD-Access transit links are used to transport encapsulated traffic from one fabric to another

A fabric edge is used to de-encapsulate VXLAN traffic to normal IP traffic then transported over the outside network

12. What is the purpose of a control plane node in a Cisco SD-Access network fabric?

to maintain the endpoint database and mapping between endpoints and edge nodes

to detect endpoints in the fabric and inform the host tracking database of EID-to-fabric-edge node bindings

to identify and authenticate endpoints within the network fabric

to act as the network gateway between the network fabric and outside networks

13. DRAG DROP

Drag and drop the descriptions from the left onto the corresponding VPN types on the rights.

14. A network engineer must connect two sites across a public network using a secure tunneling technology that

supports multicast traffic.

Which technology must be chosen?

IPsec

GRE

PPTP

GRE over IPsec

15. Refer to the exhibit.

Which solution decreases the EIGRP convergence time?

Enable subsecond timers

Increase the hold time value

Increase the dead timer value

Enable stub routing on the spokes

16. Refer to the exhibit.

An architect reviews the low-level design of a company's enterprise network and advises optimizing the STP convergence time.

Which functionality must be to Gi1/0/1-10 to follow the architect's recommendation?

PortFast

root guard

UplinkFast

BPDU guard

17. An engineer uses Postman and YANG to configure a router with:

Which get-config replay verifies that the model set was designed correctly?

Option A

Option B

Option C

Option D

18. A customer’s environment includes hosts that support IPv6-only. Several of these hosts must communicate with a public web server that has only IPv4 domain name resolution.

Which solution should the customer use in this environment?

utilize NAT64 to translate the addresses

Implement NAT44 at the edge of the customer network

use 6to4 and a tunnel to translate the addresses

implement 6PE to resolve hostname resolution

19. Which information update is carried by OMP and enables the Cisco SD-WAN to build a secure overlay fabric on top of any public or private transport without regard for the actual link IP?

TLOC

RLOC

LISP PITR

DTLS

20. Refer to the exhibit.

An architect must design an IPv6 migration solution for an enterprise customer to support these requirements:

* Clients will transition to the new IPv6 network, which provides NAT64 and IPv6 DNS resolution services, using the same DNS name that points to the IPv4 address.

* The service provider will create a client-facing IPv6 interface with a new IPv6 virtual address that points to the same IPv4 DNS server.

* The service provider will support clients that use global IPv6 addresses and encapsulate IPv4 packets into IPv6 tunnels.

Which two migration solutions must the architect choose? (Choose two.)

Use dual-stack lite from the MPLS network to the IG

Use IPv6 tunneling from the devices to the core MPLS network.

Use dual-stack lite from the devices to the core MPLS network.

Use NAT44/64 from the MPLS network to the IG

Use NAT44/64 from the devices to the core MPLS network.

Page 3 of 8

21. DRAG DROP

Drag and drop the elements from the left onto the protocols where they are used on the right.

22. Which control plane protocol is responsible for ElD-to-RLOC mapping concerning SO-Access Architecture?

GBAC

LISP

CEF

VXLAN

23. A company is running BGP on a single router, which has two connections to the same ISP.

Which BGP feature ensures traffic is load balanced across the two links to the ISP?

Multihop

Multipath Load Sharing

Next-Hop Address Tracking

AS-Path Prepending

24. A global organization with several branches hired a network architect to design an overlay VPN solution. The branches communicate with each other frequently. The customer expects to add more branches in the future. To meet the customer's security requirements, the architect plans to provide traffic protection using dynamic IPsec tunnels.

Which solution should the architect choose?

DMVPN

EasyVPN

GETVPN

L2TP

25. Which two overlay network design considerations must be made for a Cisco SD-Access network? (Choose two.)

LAN automation for deployment

Layer 3 to the access design

Reduce subnets and simplify DHCP management

Dedicated IGP process for the fabric

Avoid overlapping IP subnets

26. What is one function of the vSmart controller in an SD-WAN deployment?

orchestrates vEdge and cEdge connectivity

responsible for the centralized control plane of the SD-WAN network

provides centralized network management and a GUI to monitor and operate the SD-WAN overlay

provides a data-plane at branch offices to pass traffic through the SD-WAN network

27. A company's security policy requires that all connections between sites be encrypted in a manner that does not require maintenance of permanent tunnels. The sites are connected through a private MPLS-based service that uses a dynamically changing key and spoke-to-spoke communication.

Which type of transport encryption must be used in this environment?

GETVPN

DMVPN

GRE VPN

standard IPsec VPN

28. An engineer is designing a network for a customer running a wireless network with a common VLAN for all APs. The customer is experiencing unicast flooding in the Layer 2 network between the aggregation and access layers. The customer wants to reduce the flooding and improve convergence time.

Which solution meets these requirements?

Migrate all APs to a common Layer 2 access layer switch and run Layer 3 from the aggregation layer to all remaining access layer switches.

Align HSRP primary and STP root bridges and reduce ARP timers to match CAM timers on the aggregation layer switches.

Migrate to a Layer 3 access campus design if the APs can run on separate VLANs.

Align HSRP primary and STP root bridges if the APs cannot run on separate VLANs.

29. A customer has several remote sites connected with their headquarters through microwave links.

An engineer must propose a backup WAN solution based on these conditions:

Which backup WAN link type the engineer recommend?

LTE

802.16 WiMAX

Laser link

802.15.1 Bluetooth

30. An engineer must design a solution to connect a customer to the Internet. The solution will include a Layer 3 circuit with a CIR of 50 Mbps from the service provider. The hand-off from the provider's switch to the customer's router is 1Gbps.

Which solution should the engineer include to prevent potential issues with choppy voice traffic?

Reduce the bandwidth of the connection to the router.

Implement hierarchical QoS with a parent policing policy.

Implement hierarchical QoS with a parent shaping policy.

Add a bandwidth statement to the router interface.

Page 4 of 8

31. Refer to the exhibit.

An engineer is designing an OSPF network for a client. Requirements dictate that the routers in Area 1 should receive all routes belonging to the network, including EIGRP, except the ones originated in the RIP domain.

Which action should the engineer take?

Make area 1 a NSS

Make area 1 a stub.

Make area 1 a standard OSPF area.

Make the area 1 routers part of area 0.

32. A customer's current Layer 2 infrastructure is running Spanning Tree 802.1d, and all configuration changes are manually implemented on each switch.

An architect must redesign the Layer 2 domain to achieve these goals:

✑ reduce the impact of topology changes

✑ reduce the time spent on network administration

✑ reduce manual configuration errors

Which two solutions should the architect include in the new design? (Choose two.)

Implement Rapid PVST+ instead of ST

Implement MST instead of ST

Use VTP to propagate VLAN information and to prune unused VLANs.

Configure broadcast and multicast storm control on all switches.

Configure dynamic trunking protocol to propagate VLAN information.

33. A network engineer must optimize a campus OSPF deployment Currently each time a type 1 or type 2 LSA is generated within an area, the OSPF process must recompute the entire SPT.

Which solution improves the recomputation process?

iSPF

BFD

SPF

PRC

34. When IPsec VPNs are designed, what is a unique requirement if support for IP Multicast is required?

encapsulation of traffic with GRE or VTI

IPsec forwarding using transport mode

additional bandwidth for headend

IPsec forwarding using tunnel mode

35. What are two valid scaling techniques when an EIGRP network is designed that consists of more than 1000 routers? (Choose two.)

Use structured hierarchical topology with route summarization

Used sub-second timers

Use the distribute-list command to filter routes

Modify delay parameters on the links

Implement multiple EIGRP autonomous systems

36. DRAG DROP

Drag and drop the properties from the left onto the protocols they describe on the right.

37. Which design consideration should be observed when EIGRP is configured on Data Center switches?

Perform manual summarization on all Layer 3 interfaces to minimize the size of the routing table.

Prevent unnecessary EIGRP neighborships from forming across switch virtual interfaces.

Lower EIGRP hello and hold timers to their minimum settings to ensure rapid route reconvergence.

Configure multiple EIGRP autonomous systems to segment Data Center services and applications.

38. Which two statements describe source trees in a multicast environment? (Choose two.)

Source trees guarantee the minimum amount of network latency for forwarding multicast traffic

Source trees create an optimal path between the source and the receivers

Source trees use a single common root placed at some chosen point in the network

Source trees can introduce latency in packet delivery

Source trees can create suboptimal paths between the source and the receivers

39. Which two options can you use to configure an EIGRP stub router? (Choose two)

summary-only

receive-only

external

summary

totally-stubby

not-so-stubby

40. Refer to the exhibit.

Which two solutions maximize the use of the links between the core and distribution layers? (Choose two.)

use multiple equal-cost links

use an IGP

use HSRP

use R-PVSTP+

use multiple unequal-cost links

Page 5 of 8

41. Which component is part of the Cisco SD-Access overlay architecture?

border node

spine node

leaf node

Cisco DNA Center

42. Refer to the exhibit.

An engineer must optimize the traffic flow of the network.

Which change provides a more efficient design between the access and the distribution layer?

Add a link between access switch A and access switch B

Reconfigure the distribution switch A to become the HSRP Active

Change the link between distribution switch A and distribution switch B to be a routed link

Create an EtherChannel link between distribution switch A and distribution switch B

43. DRAG DROP

Drag and drop the characteristics from the left onto the telemetry mode they apply to on the right.

44. An engineer is working for a large cable TV provider that requires multiple sources streaming video on different channels using multicast with no rendezvous point.

Which multicast protocol meets these requirements?

PIM-SM

PIM-SSM

any-source multicast

BIDIR-PIM

45. A branch office has a primary L3VPN MPLS connection back to the main office and an IPSEC VPN tunnel that serves as backup.

Which design ensures that data is sent over the backup connection only if the primary MPLS circuit is down?

Use EIGRP to establish a neighbor relationship with the main office via

L3VPN MPLS and the IPSEC VPN tunnel.

Use BGP with the multipath feature enabled to force traffic via the primary path when available.

Use static routes tied to an IP SLA to prefer the primary path while a floating static route points to the backup connection.

Use OSPF with a passive-interface command on the backup connection.

46. Refer to the exhibit.

A customer has two eBGP peerings from a single CE router toward two service providers. The customer has hired an architect to design a solution to ensure certain traffic enters the customer's network through interface g¡g0/0.

Which solution must the architect include in the design?

Advertise a lower MED value toward the less preferred service provider.

Prepend additional AS on the AS path toward the preferred service provider.

Break aggregated routes into longer prefixes and advertise to the preferred service provider.

Set a higher local preference to the preferred service provider path.

47. An architect must design an IPv6 migration solution for a corporation with remote offices to support:

* The customer has IPv4 peering with their service provider.

* IPv6 users need access to IPv4 and IPv6 resources.

* Existing content providers will migrate to IPv6 in the next two years.

* Users will be migrated in a phase-by-phase approach.

Which migration solution must the architect choose?

NAT46

tunneling

NAT64

dual-stack

48. Which design achieves SD-WAN control plane redundancy?

Configuring BFD on the WAN Edge routers

Using multiple instances of vManage in clusters

Deploying using a virtual platform like UCS or CSP

Managing the underlay network with OMP

49. Company A recently acquired another company. Users of the newly acquired company must be able to access a server that exists on Company A’s network, both companies use overlapping IP address ranges.

Which action conserves IP address space and provides access to the server?

Use a single IP address to create overload NAT

Use a single IP address to create a static NAT entry

Build one-to-one NAT translation for every user that needs access

Re-IP overlapping address space in the acquired company

50. Refer to the exhibit.

Customers report low video quality and delays when having point-to-point telepresence video calls between the two locations. An architect must optimize a design so that traffic follows the same path for egress and ingress traffic flows.

Which technique optimizes the design?

Configure route leaking on the router in area 2.

Configure route leaking on the router in area 1.

Configure the high metric on the router in area 4.

Configure route filter on the router in area 4.

Page 6 of 8

51. Refer to the exhibit.

An architect is designing an EIGRP solution based on these requirements:

* Traffic forwarding should use the best two paths while all links are available

* Single path failure must not impact traffic between branch and HQ

Which solution must the architect select?

Maximum-paths 2

Add-paths 2

Metric weights 010100

Variance 2

52. Refer to the exhibit. A network engineer is designing an OSPF solution to connect a company's remote to a newly provisioned MPLS VPN backbone. Some of the branches have a direct dark fiber connection between each other. The engineer wants to ensure that the dark fibers are used only when the MPLS core is unavailable.

Which solution must the engineer choose?

Stub area

Sham link

Virtual link

NSSA

53. In a cisco SD-Access brownfield deployment scenario, which configuration deployment must be taken with Cisco DNA center?

Subnet stretching

LAN automation

Automated UNDERLAY

Manual underlay

54. A customer reports that each time a networking component fails, OSPF recalculates the backup path, with causes a short outage.

Which solution must the customer implement to improve this situation?

Aggressive OSPF timers

LFA FRR

Incremental SPF

BFD

55. Refer to the exhibit.

A customer is running HSRP on the core routers. Over time the company has grown and requires more

network capacity. In the current environment, some of the downstream interfaces are almost fully utilized, but others are not.

Which solution improves the situation?

Make router R2 active for half of the VLANs.

Add more interfaces to R1 and R2.

Configure port channel toward downstream switches.

Enable RSTP on the downstream switches.

56. Which common issue causes intermittent DMVPN tunnel flaps?

a routing neighbor reachability issue

a suboptimal routing table

interface bandwidth congestion

that the GRE tunnel to hub router is not encrypted

57. Which two statements about VRRP advertisements are true? (Choose two.)

They are sent from the master router and standby routers.

They include VRRP timer information.

They are sent only from the master router.

They include priority information.

They are sent every three seconds by default.

58. What are two benefits of designing an SD-WAN network fabric with direct Internet access implemented at every site? (Choose two.)

It decreases latency to applications hosted by public cloud service provider.

It decreases latency on Internet circuits.

It increases the speed of delivery of site deployments through zero-touch provisioning.

It increases the total available bandwidth on Internet circuits.

It alleviates network traffic on MPLS circuits.

59. What is the role of a control-plane node in a Cisco SD-Access architecture?

fabric device that connects wired endpoints to the SD-Access fabric

map system that manages endpoint to device relationships

fabric device that connects APs and wireless endpoints to the SD-Access fabric

map system that manages External Layer 3 networks

60. Which two functions is the Cisco SD-Access Edge Node responsible for? (Choose two.)

Act as anycast layer 3 gateway

Advertise EID subnets

Map users to virtual network

Act as LISP proxy tunnel router

Route and transport IP traffic

Page 7 of 8

61. How is redundancy achieved among Cisco vBond Orchestrators in a Cisco SD-WAN deployment?

The IP addresses of all Orchestrators are mapped to a single DNS name.

The closest Orchestrator to each Cisco WAN Edge router is selected.

Cisco WAN Edge routers are configured with all Orchestrators using their IP addresses and priority.

A single Cisco Orchestrator is deployed in each network.

62. Refer to the exhibit.

An architect must design a solution to connect the two ASs. To optimize bandwidth, the design will implement load sharing between router R6 and router R4.

Which solution should the design include?

Use update-source to specify the Loopback interface.

Use next-hop-serf attributes only for routes that are learned from eBGP peers.

Configure the eBGP TTL to support eBGP multihop.

Use maximum-paths to install multiple paths in the routing table.

63. An engineer must design a QoS solution for a customer. The network currently supports data only, but the customer will roll out VoIP and IP video in conjunction with the new QoS solution. The engineer plans to use DiffServ.

To ensure priority for voice services, which model must the design include?

8-class model

4-class model

6-class model

12-class model

64. An engineer is designing an EIGRP network for a small branch site where there is only one Layer 3 router. The engineer wants the router to advertise the local LAN network to remote EIGRP neighbors without sending any unnecessary multicast messages on the local LAN.

Which action should the engineer take?

Use a static default route for this site instead of EIGRP

Advertise the local LAN using the network command and the passive-interface feature

Redistribute the local LAN network using the redistribute connected command

Advertise the local LAN subnet as a stub network

65. An engineer must design a solution to provide backup connectivity between two sites. The engineer plans to use an Internet connection but company policy requires the connection to be encrypted. Additionally, there are several applications that utilize multicast to deliver video streams between the sites.

Which technology should the design include?

GRE over IPsec

IPsec direct encapsulation

GETVPN

DMVPN

66. Which two border nodes are available in the Cisco SD-Access architecture? (Choose two.)

extended border

edge border

internal border

anywhere border

intermediate border

67. An engineer must propose a QoS architecture model that allows an application to inform the network of its traffic profile and to request a particular type of service to support its bandwidth and delay requirements. The application requires consistent and dedicated bandwidth end to end.

Which QoS architecture model meets these requirements?

DiffServ

LLQ

WRED

IntServ

68. An enterprise customer has these requirements:

✑ end-to-end QoS for the business-critical applications and VoIP services based on CoS marking.

✑ flexibility to offer services such as IPv6 and multicast without any reliance on the service provider.

✑ support for full-mesh connectivity at Layer 2.

Which WAN connectivity option meets these requirements?

VPWS

MPLS VPN

DMVPN

VPLS

69. Which two functions does the control plane node provide in a Cisco SD-Access architecture? (Choose two.)

LISP proxy ETR

host tracking database

policy mapping

map server

endpoint registration

70. DRAG DROP

Drag and drop the elements from the left onto the YANG models where they and used on the right.

Page 8 of 8

71. 1.An engineer is designing a campus network with Cisco Catalyst 95CO switches in the aggression layer. The design requires running nonblocking Layer 2 MEC from the aggregation layer to the access layer. The Catalyst switches are located on different campus floors for availability reasons, and each access switch veil contam a single VLAN.

Which technology must the engineer choose for the aggregation switches in the design?

VPC

VSS

StackWise Virtual

StackWise-180

72. An engineer uses Postman and YANG to configure a router with:

✑ OSPF process ID 400

✑ network 192.168.128.128/25 enabled for Area 0

Which get-config reply verifies that the model set was designed correctly?

A)